Edit tour

Windows Analysis Report
http://rfpteams.ksplastlc.net

Overview

General Information

Sample URL:	http://rfpteams.ksplastlc.net
Analysis ID:	1431470
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3608 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5548 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 --field-trial-handle=2320,i,4385918423642847474,6130721960010660509,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 728 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://rfpteams.ksplastlc.net" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /report/v4?s=HEN9Y79khAIwy4HBJlBPP00HMpjBF5CjNwstnEwnxUtbNlNa1MJdUyluGpg8j%2F%2F2gfobGo9OiJid86NWxCH%2B1LhVHviTSdcA3dtwu0PtuOTf%2FXl2Z%2Fpll2930%2F1iBOQYDjVz6dm3RQY7 HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 435Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 25 Apr 2024 06:39:50 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: MISSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HEN9Y79khAIwy4HBJlBPP00HMpjBF5CjNwstnEwnxUtbNlNa1MJdUyluGpg8j%2F%2F2gfobGo9OiJid86NWxCH%2B1LhVHviTSdcA3dtwu0PtuOTf%2FXl2Z%2Fpll2930%2F1iBOQYDjVz6dm3RQY7"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 879c56923c2853cc-ATLalt-svc: h3=":443"; ma=86400

Source: chromecache_109.2.dr, chromecache_153.2.dr, chromecache_112.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_109.2.dr, chromecache_153.2.dr, chromecache_112.2.dr	String found in binary or memory: http://getbootstrap.com/customize/?id=92d2ac1b31978642b6b6)
Source: chromecache_132.2.dr, chromecache_115.2.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_109.2.dr, chromecache_153.2.dr, chromecache_112.2.dr	String found in binary or memory: https://gist.github.com/92d2ac1b31978642b6b6
Source: chromecache_120.2.dr	String found in binary or memory: https://github.com/mapbox/mapbox-gl-js/issues/8771
Source: chromecache_109.2.dr, chromecache_153.2.dr, chromecache_112.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_108.2.dr, chromecache_107.2.dr, chromecache_160.2.dr	String found in binary or memory: https://osx.telegram.org/updates/site/artboard.png)
Source: chromecache_108.2.dr, chromecache_107.2.dr, chromecache_160.2.dr	String found in binary or memory: https://osx.telegram.org/updates/site/artboard_2x.png);
Source: chromecache_161.2.dr, chromecache_116.2.dr	String found in binary or memory: https://telegram.org/
Source: chromecache_161.2.dr, chromecache_116.2.dr	String found in binary or memory: https://twitter.com/intent/tweet?text=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.5:49717 version: TLS 1.2

Source: classification engine

Classification label: mal56.win@22/146@24/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 --field-trial-handle=2320,i,4385918423642847474,6130721960010660509,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://rfpteams.ksplastlc.net"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 --field-trial-handle=2320,i,4385918423642847474,6130721960010660509,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://rfpteams.ksplastlc.net	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label	Link
fp2e7a.wpc.phicdn.net	0%	Virustotal		Browse
cdn4.cdn-telegram.org	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label
http://getbootstrap.com)	0%	Avira URL Cloud	safe
https://cdn4.cdn-telegram.org/file/L5wseH0PdrmEcU_jcZbpJjndKo6Z1capwPo5WAUBVcgd-WR5c60_Dl8kG6CeE-nqmHg-sErC5p_7YIHRvBtFZQBY59b0cAw5lYjvfNc7405i05qLLGYi_pPsL_kwiNd4bkExysZtGz5orIeM4msdrDDjLNKlumINIDSLKbOUMnL3qgDAO8MPT2n1Ao7MkWQguZTV_jKo_PTm8bHryHKVZcdfMrILhFiU-7v0BvyISHzadm14bI1trWzevQUGsW97AEKmYI3qRcOIlgq-NBvXkJmKhaG2rQR2uf-IUVbeN0qHN0ZYGJkfVFbKerbyiptnaAqppqeVKl_9-3l0jE56BA.jpg	0%	Avira URL Cloud	safe
https://rfpteams.ksplastlc.net/favicon.ico	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
desktop.telegram.org	149.154.167.99	true	false		high
a.nel.cloudflare.com	35.190.80.1	true	false		high
telegram.org	149.154.167.99	true	false		high
t.me	149.154.167.99	true	false		high
www.google.com	108.177.122.147	true	false		high
rfpteams.ksplastlc.net	104.21.39.27	true	false		unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	0%, Virustotal, Browse	unknown
cdn4.cdn-telegram.org	34.111.35.152	true	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://telegram.org/file/464001484/1/bzi7gr7XRGU.10147/815df2ef527132dd23	false		high
https://telegram.org/img/favicon.ico	false		high
https://telegram.org/css/bootstrap.min.css?3	false		high
https://telegram.org/img/twitter.png	false		high
https://telegram.org/css/font-roboto.css?1	false		high
https://telegram.org/file/464001453/3/mNzXWC3RX0c.15740.png/9ce5fa5f3fb74460b4	false		high
https://telegram.org/file/464001418/1/fabnJFzygPY.17422/bc9dec9fd8bd26e00e	false		high
https://telegram.org/file/464001812/2/kLAK2TPyvUU.12545/f68c1caf735a2ea3db	false		high
https://telegram.org/file/464001166/2/FzTl8_M5mQA.19325.png/b6c5dbc0e4f6553805	false		high
https://telegram.org/img/t_main_Android_demo.mp4	false		high
https://telegram.org/js/main.js?47	false		high
https://desktop.telegram.org/img/td_laptop.png	false		high
https://telegram.org/js/rlottie-wasm.wasm	false		high
https://telegram.org/file/464001132/3/-1qvqKPZsQQ.17975.png/7d57d7159cf4fbe9b2	false		high
https://telegram.org/img/tgme/pattern.svg?1	false		high
https://telegram.org/file/464001897/3/f0Go0rLpEwk.11343.png/dd4eeb46cc5efc0688	false		high
https://a.nel.cloudflare.com/report/v4?s=HEN9Y79khAIwy4HBJlBPP00HMpjBF5CjNwstnEwnxUtbNlNa1MJdUyluGpg8j%2F%2F2gfobGo9OiJid86NWxCH%2B1LhVHviTSdcA3dtwu0PtuOTf%2FXl2Z%2Fpll2930%2F1iBOQYDjVz6dm3RQY7	false		high
https://telegram.org/file/464001402/5/eOMSj3GzJXo.13579.png/f3cec6c451d023c109	false		high
https://telegram.org/file/464001166/1/01aTJ2ISKeU.21801/24028c7b6d07639794	false		high
https://telegram.org/file/464001737/4/Fn57W9l3xI0.15286.png/d4b936ecc2c939f4fa	false		high
https://telegram.org/	false		high
https://telegram.org/img/t_logo_sprite.svg	false		high
https://telegram.org/dl?tme=9558c080f4fa392dd7_16243779966484154159	false		high
https://telegram.org/js/rlottie-wasm.js	false		high
https://telegram.org/js/tgwallpaper.min.js?3	false		high
https://telegram.org/img/SiteIconAndroid.svg	false		high
https://cdn4.cdn-telegram.org/file/L5wseH0PdrmEcU_jcZbpJjndKo6Z1capwPo5WAUBVcgd-WR5c60_Dl8kG6CeE-nqmHg-sErC5p_7YIHRvBtFZQBY59b0cAw5lYjvfNc7405i05qLLGYi_pPsL_kwiNd4bkExysZtGz5orIeM4msdrDDjLNKlumINIDSLKbOUMnL3qgDAO8MPT2n1Ao7MkWQguZTV_jKo_PTm8bHryHKVZcdfMrILhFiU-7v0BvyISHzadm14bI1trWzevQUGsW97AEKmYI3qRcOIlgq-NBvXkJmKhaG2rQR2uf-IUVbeN0qHN0ZYGJkfVFbKerbyiptnaAqppqeVKl_9-3l0jE56BA.jpg	false	Avira URL Cloud: safe	unknown
https://desktop.telegram.org/js/main.js?47	false		high
https://telegram.org/file/464001560/2/n7EACfx4FPY.16465.png/7318c11715aa2ec45b	false		high
https://rfpteams.ksplastlc.net/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://telegram.org/js/tgsticker.js?31	false		high
https://telegram.org/file/464001828/11e99/2FUYW30UXAI.12708/7604effa1e02ddf7f9	false		high
https://desktop.telegram.org/css/bootstrap.min.css?3	false		high
https://telegram.org/file/464001453/2/eW_MzRhUGoM.10926/fe1f3bc3dd08367c0a	false		high
https://telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2	false		high
https://desktop.telegram.org/	false		high
https://desktop.telegram.org/css/telegram.css?237	false		high
https://telegram.org/img/SiteDesktop.jpg?2	false		high
https://telegram.org/img/t_main_iOS_demo.mp4	false		high
https://telegram.org/file/464001880/3/xOpm7ohoHQ0.12690.png/feb1e161b1d3608613	false		high
https://telegram.org/js/pako-inflate.min.js	false		high
https://telegram.org/img/SiteiOS.jpg?2	false		high
https://telegram.org/file/400780400906/1/nG_ME-jFfII.256820/2569601ad1ecf4c3c2	false		high
https://telegram.org/img/SiteIconApple.svg	false		high
https://telegram.org/file/464001493/2/hV6uPcaHk_E.17388/dcccb066a7b4fe44ee	false		high
https://telegram.org/js/tgsticker-worker.js?14	false		high
https://rfpteams.ksplastlc.net/	false		unknown
https://telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2	false		high
https://telegram.org/file/400780400268/1/6Avx2xeE-E8.239216/5a7f21012854ea61ce	false		high
https://telegram.org/file/464001560/1/zLlKYgeDLoA.14496/62085b07461f2d87e4	false		high
https://desktop.telegram.org/img/favicon.ico	false		high
https://t.me/ONNXIT	false		high
https://telegram.org/img/SiteAndroid.jpg?2	false		high
https://desktop.telegram.org/img/twitter.png	false		high
https://telegram.org/file/464001880/2/VGTLBN3QuYM.10959/8940838e7dddc787d8	false		high
https://telegram.org/css/telegram.css?237	false		high
https://telegram.org/file/464001828/11e9a/1yY7a721t4o.30567.png/e113973dae2bee508b	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://osx.telegram.org/updates/site/artboard_2x.png);	chromecache_108.2.dr, chromecache_107.2.dr, chromecache_160.2.dr	false		high
https://github.com/mapbox/mapbox-gl-js/issues/8771	chromecache_120.2.dr	false		high
https://osx.telegram.org/updates/site/artboard.png)	chromecache_108.2.dr, chromecache_107.2.dr, chromecache_160.2.dr	false		high
https://twitter.com/intent/tweet?text=	chromecache_161.2.dr, chromecache_116.2.dr	false		high
https://gist.github.com/92d2ac1b31978642b6b6	chromecache_109.2.dr, chromecache_153.2.dr, chromecache_112.2.dr	false		high
http://www.videolan.org/x264.html	chromecache_132.2.dr, chromecache_115.2.dr	false		high
http://getbootstrap.com)	chromecache_109.2.dr, chromecache_153.2.dr, chromecache_112.2.dr	false	Avira URL Cloud: safe	low
http://getbootstrap.com/customize/?id=92d2ac1b31978642b6b6)	chromecache_109.2.dr, chromecache_153.2.dr, chromecache_112.2.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_109.2.dr, chromecache_153.2.dr, chromecache_112.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.111.35.152	cdn4.cdn-telegram.org	United States	15169	GOOGLEUS	false
149.154.167.99	desktop.telegram.org	United Kingdom	62041	TELEGRAMRU	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
108.177.122.147	www.google.com	United States	15169	GOOGLEUS	false
172.67.142.208	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431470
Start date and time:	2024-04-25 08:38:56 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://rfpteams.ksplastlc.net
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@22/146@24/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://t.me/ONNXIT Browse: https://telegram.org/ Browse: https://telegram.org/dl?tme=9558c080f4fa392dd7_16243779966484154159 Browse: tg://resolve?domain=ONNXIT

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.15.94, 173.194.219.113, 173.194.219.101, 173.194.219.100, 173.194.219.139, 173.194.219.102, 173.194.219.138, 172.253.124.84, 34.104.35.123, 52.165.165.26, 72.21.81.240, 192.229.211.108, 20.166.126.56, 13.95.31.18, 64.233.177.94, 142.250.9.100, 142.250.9.139, 142.250.9.102, 142.250.9.138, 142.250.9.101, 142.250.9.113
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 05:39:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9858103048245597
Encrypted:	false
SSDEEP:	48:89dXWT3yApWHn0idAKZdA19ehwiZUklqehekJy+3:8HWzJpGS/Yy
MD5:	6BD23F5FE6197BE949299EABAE132932
SHA1:	62D3B85F28D75BEEFF84543090946EE31BC30738
SHA-256:	7DA5ADFBC6F426F7C14DF130035E8CDC1203999C35428D7FC91B2DDD0806EC71
SHA-512:	BD99B8A54224EA254758DB28EB64B043E1DADF946714911628F23F4425636A5072E5F9DD7F37D5549D246E88C070762FF3D20C004A55FC8BC2246C32B2927CE9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......]...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.4....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.4....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.4....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.4..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.4...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............>......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 05:39:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.000783895771966
Encrypted:	false
SSDEEP:	48:8X0dXWT3yApWHn0idAKZdA1weh/iZUkAQkqehvkJy+2:8MWzJpGI9Q0Yy
MD5:	C80B992009169995368D3CDBDED04C07
SHA1:	C0881CE0A8054D33AC577624E8C6DDE70352AAAB
SHA-256:	DC1E51AF0C1E27A5D3AA2AD64CE801CA15F74F688A9E1A0C54E490BD4378E76D
SHA-512:	8927160078CE777971641A3D65AAEBD01447F3F067D6C416E50708AE3916DE23BFAD8EFAF27505FA07A3AF010EDE37BB62697AB3B5DCF2D5F1C391EE400A1499
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....S.]...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.4....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.4....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.4....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.4..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.4...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............>......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.00801780143521
Encrypted:	false
SSDEEP:	48:8xndXWT3yApsHn0idAKZdA14tseh7sFiZUkmgqeh7s9kJy+BX:8xBWzJpkgnjYy
MD5:	1DE44F4D19B8F461B718ECA37F5C3D61
SHA1:	1B9AE9F92772E69EA82F6DB6D6AFB97EE0C80B61
SHA-256:	9E240455871890CB56B1DF0C038163C4CE978AF7D5EE1FE5D2F30699EB8B72A0
SHA-512:	7D93EE654F2BF49449CA2BCA2A3E3C929F5588B4AE424749B6A2EB3D6D79D47ADD4BD955FF77704E238DC875C07A28E705EC9C9EB8ED2AD2DA0515A7C1367034
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.4....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.4....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.4....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.4..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............>......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 05:39:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.000997331321366
Encrypted:	false
SSDEEP:	48:8adXWT3yApWHn0idAKZdA1vehDiZUkwqehLkJy+R:8qWzJpGTlYy
MD5:	8275A5E33D3C5131C5E0165C617C0CC6
SHA1:	BFF3D63BBC8E3EF4D6C65FA3982F52678DE77F44
SHA-256:	CD49CA9723B78CC75F839DF90C60C5228C28B0B564F929A7C10847219A285218
SHA-512:	18F728423DDC2A4534223CB6F6AE643F3858EBAEC861D89B656E414EC3157912AEE4ADEF6C1A484D5FC3B1940C544FE53F488D37B98CA5A4FF8837A885CFA5D9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....&..]...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.4....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.4....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.4....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.4..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.4...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............>......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 05:39:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.991059228586396
Encrypted:	false
SSDEEP:	48:8bdXWT3yApWHn0idAKZdA1hehBiZUk1W1qehRkJy+C:89WzJpGD9xYy
MD5:	F398000F1EDC4A5819D10D8AECE5121D
SHA1:	E2E9F7A85F445CB384113994F53CFFBDC434FCC5
SHA-256:	621F44B957CFC5EACDBC9806D2366D0125F4EB85451C7C0D42876B53E1F06314
SHA-512:	4D47EB398CB1B15599E12937BC65C7A8AFEF46F32B3553299458AA92F0B30BFF87A22AA62D3277ED26AA1CFC2E9F04FC0DBC676B0A89DDEAEBCE68432364B934
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......]...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.4....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.4....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.4....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.4..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.4...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............>......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 05:39:47 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.0004239061714655
Encrypted:	false
SSDEEP:	48:87dXWT3yApWHn0idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbjkJy+yT+:8dWzJpGzT/TbxWOvTbjYy7T
MD5:	A393F8A258431F55EDE9AFE7322829B2
SHA1:	3FE75795857AFB3B73EDF806AEF32BDF61587819
SHA-256:	DF563E6B45FC810BB3B3EB89172C32A29E7712C2B821B2366F7770F5D9BB183E
SHA-512:	C355942A9B4EDDFEBC2591CB7B9738BD5D43A8A9E55B927F1EF8E567B2AB3736C8A919238EABF357C09CBF061384106371AD7530941A21096A572300D2FFAB2C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......]...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.4....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.4....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.4....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.4..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.4...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............>......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 442x270, components 3
Category:	dropped
Size (bytes):	31305
Entropy (8bit):	7.8603716620080535
Encrypted:	false
SSDEEP:	768:3OqzWWjlwuxS+TRqYXz7xlPcuYq8KkTwWq7Pku4kz2R:3nr5zdPn8QSkz2R
MD5:	89486A05599A1CFD549F8FB2D70E7D73
SHA1:	24867697525DF19B88E79D75FF32384EBA57B321
SHA-256:	5A2C666B6E4F30FF921353CD9A3ECCC09B9314C5C5AB11E1A3928936E497B2DC
SHA-512:	BF59EA2F4CDC21464BCE9ABA5401C5DF0522769F998B432DBC79E7863737B87521E0FAA7501DBCE72115B256A181B6DA2C4F2FDBCDFF3E1ABBD4F73AC3177714
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....@Exif..MM........i...............................................8Photoshop 3.0.8BIM........8BIM.%..................B~..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C...................................................................................?.....(...(...(...(.........I'..._......._.....9.-.Isv....m.7Www. ..@.(=...3.+.......\|3..<c..../...M.E.a..........t-;....T.[..\.......3..........X;.J..3.....3..j1>g_....).F..x.[6R...N..~.Cs....a..d......_......G...q.........\|S...;X..V..b;..

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 140502
Category:	dropped
Size (bytes):	12708
Entropy (8bit):	7.97880443442531
Encrypted:	false
SSDEEP:	192:5enfPdeBlrt5LecDLT68iTVs8XoTq8lUcnhJCSTyFWBvFvIzp8TgR3y1wHYG:4Xkzrt5LeCLSVtz8xC9FWxc8TiZHd
MD5:	22FC89B07D3463221776FE84924F0093
SHA1:	EC315241AF796928056AA2408759A5DD502A47ED
SHA-256:	E3327B49B4ABB4C0919AC93668E7AD15BBC6FBD3741FADB82A7DCB6D70175F15
SHA-512:	F612E6621D5B5FC2EBCE8E50A5C62050501D95444A3A70ABFAFB9C73FC5643B36124CD79A0041B54102FF2F1BD5556E62201230E9E0AE1368BA7C8D487F67C7A
Malicious:	false
Reputation:	low
Preview:	...........}[..G.._......{..`w..1.......y..kG..I.....}..".d.M6.-vw..l...........?>.}C........h..p..Ow.$;..............Hn..........k........w.......~._............'w......,....oo?i..._~.I\|........o~}..[..D...O..?.......o....\L.........(.....z.K.5`1..K{.#.f..vf..&<.l....G.M...0._.\|z...8...R6%.+...3...r..O../.H..,....wc....~.{.]...!W.k...U..O.j.....N....2.S{....NW..6..:.jn....?.k.9t...yX._.(....Y.m.>b......_..?.}.dR....".x8.pSm.o....5.TS).E.#V....C.E.L.ow.\|........?....+b@...............'.O7.......f....Fw...T............. ...T.}.yg.....k.w.b....?.^..f.L./.......?}...u{..>}........Bc........J.^p6......e.Q...(./.C..J..eit.\......,1U.1....J.c........UlH..>.k..{X.t.j .)d...C.T...vZ."..w..........?S...O....y`...b...`~9r.K%........./1....Y.6....Z...+.M..5......S.d.Y.l0.B..rhc..!QJ.x.s.1..0.......XL.Y\(U^..d.k...F".{.N..o..Y....nf..1e......~....g....b}uL.L.Q(0..\|.vZ.w.l..VIp..bD..D.8..r....pY.d.yW.I1.Crr....D>.16OW...C.L.F.%....(Q.......-o.:.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15286
Entropy (8bit):	7.969171293122125
Encrypted:	false
SSDEEP:	384:LhEEnY6rtlrWDBX5s7eLvvRjx7HFYSTKavK4Pjwglq:NEEXrtlrWDHs7eLRt7Ha4vq
MD5:	5F245AC9016657DFAFCBDBF61B61E514
SHA1:	4033C942A333F667EF26C5D45ED5E233BD83B8B9
SHA-256:	006D88E7389F56F925CDAC325A2D6FC7956BBDCC30E46214BDD97B43274BD78E
SHA-512:	0BE5306B2867B719A1B6736784AB063A6186D7187BB5378FA225E4F6EEE5DB31E18A56FBF05F2874F02E52C028E74BFF6C3AB6854F9CDD821C80D7F8BC4BAA3F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............g-....bKGD............;kIDATx..w.]wu'.]...7..w.r........<.%a.!C....H.2.x..6.a&.T ..f.6....c[.%....9g....{.v..+....9{......w..[.X.eZ.eZ.eZ.eZ.eZ.eZ.eZ.eZ..@......nF.;5.[.f+......b8R..4.T...G...;..2...xZ.s..lCF?......,.U...jD..B.J.J2..Q..fB.....~.}.G.c.?...l>.Wo^... ....-N..k_.2..1.t.,...e@?I.......T.PrJE..O.....).h/8....}......S..5.\.i.^E..@...k....L..%(.>.......<...2..2]{.n.....u...\q.GA@.E$. ....D.Q...N...P.K..T....Q.}.......J:@.... Rb%...I@.v.S....-O..`"R....{..?.\|...3..]{.M........-#..t.....l..:G$..A. ...!..G....!.?....!B.G.F...a.!...2n..)A...D. c...c....... ..U.....G....x....w.'..oD.I...[........:.EQ...$..`&.a..z.HD. ....\|_...T(...!.0D.$....q-.n...s.RU%.M.1.CcC...,...,....".#.A. ..a.K.gV.o<..3.X.....]...&...e....6aEg.......A.....,.:.g..P=/@..X*.X. ...en.!.".. ..Q..2..e.c....m..q.:6.)....)/........hE..]...1...=8z.......>........;z`.ce.k.../.......c.....6fA._T..<...&.....V..r.I..N..rm.c.8d$..b.##c(...6.s

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 140502
Category:	downloaded
Size (bytes):	12708
Entropy (8bit):	7.97880443442531
Encrypted:	false
SSDEEP:	192:5enfPdeBlrt5LecDLT68iTVs8XoTq8lUcnhJCSTyFWBvFvIzp8TgR3y1wHYG:4Xkzrt5LeCLSVtz8xC9FWxc8TiZHd
MD5:	22FC89B07D3463221776FE84924F0093
SHA1:	EC315241AF796928056AA2408759A5DD502A47ED
SHA-256:	E3327B49B4ABB4C0919AC93668E7AD15BBC6FBD3741FADB82A7DCB6D70175F15
SHA-512:	F612E6621D5B5FC2EBCE8E50A5C62050501D95444A3A70ABFAFB9C73FC5643B36124CD79A0041B54102FF2F1BD5556E62201230E9E0AE1368BA7C8D487F67C7A
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001828/11e99/2FUYW30UXAI.12708/7604effa1e02ddf7f9
Preview:	...........}[..G.._......{..`w..1.......y..kG..I.....}..".d.M6.-vw..l...........?>.}C........h..p..Ow.$;..............Hn..........k........w.......~._............'w......,....oo?i..._~.I\|........o~}..[..D...O..?.......o....\L.........(.....z.K.5`1..K{.#.f..vf..&<.l....G.M...0._.\|z...8...R6%.+...3...r..O../.H..,....wc....~.{.]...!W.k...U..O.j.....N....2.S{....NW..6..:.jn....?.k.9t...yX._.(....Y.m.>b......_..?.}.dR....".x8.pSm.o....5.TS).E.#V....C.E.L.ow.\|........?....+b@...............'.O7.......f....Fw...T............. ...T.}.yg.....k.w.b....?.^..f.L./.......?}...u{..>}........Bc........J.^p6......e.Q...(./.C..J..eit.\......,1U.1....J.c........UlH..>.k..{X.t.j .)d...C.T...vZ."..w..........?S...O....y`...b...`~9r.K%........./1....Y.6....Z...+.M..5......S.d.Y.l0.B..rhc..!QJ.x.s.1..0.......XL.Y\(U^..d.k...F".{.N..o..Y....nf..1e......~....g....b}uL.L.Q(0..\|.vZ.w.l..VIp..bD..D.8..r....pY.d.yW.I1.Crr....D>.16OW...C.L.F.%....(Q.......-o.:.

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 200401
Category:	dropped
Size (bytes):	17388
Entropy (8bit):	7.987580630113294
Encrypted:	false
SSDEEP:	384:2crXYDzpzm5z0t0TJpNuYLv8V7xAA13zWHzj:2CUzpNS9pLvgAA13sH
MD5:	88C7CE379C5D6A55E0133A0B85FEAB54
SHA1:	AF1723D1CBFC88AC39B878645E82B1675D760F05
SHA-256:	38A05617438DED40DB7FAE3F70EFE9CD3ADFD0A14C0EC4AF08F1D73019A10663
SHA-512:	3877047FE6EA70C3371F55A922C85449B6CC958CF2D341E4058B4ECEC3A53BA2F65776EE44B4C36A4F8CD7029F3670D282B99C803A0625B8C158C36BDFA64220
Malicious:	false
Reputation:	low
Preview:	...........}Y..G.._..9..}..E.....=.v?.. ..eZ..K......9....A..z).I2..'.............<\|.`[.......r.y....W..G.G.z...T../...>...a.......7...[..?..z.../..w.~...<...Oo.}...?...>...o?. ..........z./..~..w..?..~..?o......u../...O..#...-...........z..6...4..G..._.~..o.........d.....\|k.od../.......Z......OvR.&..<5L.<..l>zee.#...../<...~..i0..x...h....w...8\|........xb....\.L.m.65..%)l..qPR..2.Rt...J.V.ZC<...m.l.....~t...N.Akn._.:..t>.B..t'C..R.1F:e..G........w..\|\.smu+.l..g.w......K..br....f..[.......o..Mf..i.#....6>;.M]...\.h.#..MqB...,.;.f......c...H.....<t.. .s..}...1%6 m~.........w..4.m\|.X.;<.........Ov..}..._}.....9.sg..h.tv..:v#.7.r.0=.f..I...xv...c~...a.t.?.4K.d+.\|2....{.9.h.<..._^I:n.........x.8.?.....9:..N)'.q.6...N>=K...W..~}..@g_..>..>...ex.#..j..].....}...G<.o.....>........\|...O.....\|..f..:T..4r....T...R/....J...JA...AeY..........~Wf.3.VW.......J.....`>....w.J.i....N.0.p,n.IG$..I;..3L..s....`R....0iw.&..4kJe.L._....v...[@.P.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	231706
Entropy (8bit):	4.593328315871064
Encrypted:	false
SSDEEP:	1536:XVU9J794HJ4E7mwNUiRPt5jmU7LxmMS2S1J7g8tEqcqMWKB5v:Xew7ePc
MD5:	D0C22C6A97023D85BA6E644A41C44A5D
SHA1:	4284EFB616C182DA4450C123174CE0E81A322845
SHA-256:	118ADD53487C02AAF5B5AB9F69380FA06717DEB10492E14AAA487E3C62806AD4
SHA-512:	DA96462F4F999BB65509D32E4D5D2E1FD74555CE78D43E5F80FC350155BCE59250337CD1796B17D2132F39429B5E3FD95D05101EE9F9B29BCE2BB7B44B6E4EB8
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/tgme/pattern.svg?1
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1440 2960" style="enable-background:new 0 0 1440 2960;" xml:space="preserve">.<style type="text/css">...st0{fill:none;stroke:#000000;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}...st1{fill:none;stroke:#000000;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10.0001;}...st2{fill:none;stroke:#000000;stroke-width:2.9998;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:9.9995;}...st3{stroke:#000000;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}...st4{fill:none;stroke:#000000;stroke-width:2.9999;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:9.9998;}...st5{fill:none;stroke:#000000;stroke-width:3.0001

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15286
Entropy (8bit):	7.969171293122125
Encrypted:	false
SSDEEP:	384:LhEEnY6rtlrWDBX5s7eLvvRjx7HFYSTKavK4Pjwglq:NEEXrtlrWDHs7eLRt7Ha4vq
MD5:	5F245AC9016657DFAFCBDBF61B61E514
SHA1:	4033C942A333F667EF26C5D45ED5E233BD83B8B9
SHA-256:	006D88E7389F56F925CDAC325A2D6FC7956BBDCC30E46214BDD97B43274BD78E
SHA-512:	0BE5306B2867B719A1B6736784AB063A6186D7187BB5378FA225E4F6EEE5DB31E18A56FBF05F2874F02E52C028E74BFF6C3AB6854F9CDD821C80D7F8BC4BAA3F
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001737/4/Fn57W9l3xI0.15286.png/d4b936ecc2c939f4fa
Preview:	.PNG........IHDR...............g-....bKGD............;kIDATx..w.]wu'.]...7..w.r........<.%a.!C....H.2.x..6.a&.T ..f.6....c[.%....9g....{.v..+....9{......w..[.X.eZ.eZ.eZ.eZ.eZ.eZ.eZ.eZ..@......nF.;5.[.f+......b8R..4.T...G...;..2...xZ.s..lCF?......,.U...jD..B.J.J2..Q..fB.....~.}.G.c.?...l>.Wo^... ....-N..k_.2..1.t.,...e@?I.......T.PrJE..O.....).h/8....}......S..5.\.i.^E..@...k....L..%(.>.......<...2..2]{.n.....u...\q.GA@.E$. ....D.Q...N...P.K..T....Q.}.......J:@.... Rb%...I@.v.S....-O..`"R....{..?.\|...3..]{.M........-#..t.....l..:G$..A. ...!..G....!.?....!B.G.F...a.!...2n..)A...D. c...c....... ..U.....G....x....w.'..oD.I...[........:.EQ...$..`&.a..z.HD. ....\|_...T(...!.0D.$....q-.n...s.RU%.M.1.CcC...,...,....".#.A. ..a.K.gV.o<..3.X.....]...&...e....6aEg.......A.....,.:.g..P=/@..X*.X. ...en.!.".. ..Q..2..e.c....m..q.:6.)....)/........hE..]...1...=8z.......>........;z`.ce.k.../.......c.....6fA._T..<...&.....V..r.I..N..rm.c.8d$..b.##c(...6.s

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1267)
Category:	downloaded
Size (bytes):	114933
Entropy (8bit):	5.153460703895826
Encrypted:	false
SSDEEP:	1536:xylcfDxYzbJ3iw93BC2cXdm791WoDYz5hw4uJuhwNpfewltog69FjxWDpfxV685u:xylc7xYzwwyVXkC0Yz6vL5u
MD5:	8507165C54755807224A197057729D87
SHA1:	ACE8A26F8402BAEE786617E4820A0860822921F2
SHA-256:	2DF92C7108CF6788CE6FFE7D3170480C6B6CA0367AE57911849B3760F3753994
SHA-512:	4C198202400D755D7B9E32B92E267AB7D3C07D0B90ED351B796CFD791E74F014F59604C52B00CE4F54525B1DB9D7EF27412CA483E1517B2C4E289F207A3BE3BF
Malicious:	false
Reputation:	low
URL:	https://telegram.org/css/telegram.css?237
Preview:	body {. font: 12px/18px "Lucida Grande", "Lucida Sans Unicode", Arial, Helvetica, Verdana, sans-serif;. /-webkit-font-smoothing: antialiased;/.}.html.native_fonts body {. font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";.}.html.lang_rtl {. direction: rtl;.}..body,.html.theme_dark body.bg_light {. --text-color: #000;. --second-text-color: #7d7f81;. --accent-btn-color: #2481cc;. --accent-color-hover: #1a8ad5;. --body-bg: #fff;. --box-bg: #fff;. --box-bg-blured: rgba(255, 255, 255, .84);. --tme-logo-color: #363b40;. --accent-link-color: #2481cc;.. --icon-verified: url('data:image/svg+xml,%3Csvg%20fill%3D%22none%22%20height%3D%2226%22%20viewBox%3D%220%200%2026%2026%22%20width%3D%2226%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cpath%20d%3D%22m6%206h12v12h-12z%22%20fill%3D%22%23fff%22%2F%3E%3Cpath%20clip-rule%3D%22evenodd%22%20d%3D%22m14.38%201.51%201.82%

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1267)
Category:	downloaded
Size (bytes):	114933
Entropy (8bit):	5.153460703895826
Encrypted:	false
SSDEEP:	1536:xylcfDxYzbJ3iw93BC2cXdm791WoDYz5hw4uJuhwNpfewltog69FjxWDpfxV685u:xylc7xYzwwyVXkC0Yz6vL5u
MD5:	8507165C54755807224A197057729D87
SHA1:	ACE8A26F8402BAEE786617E4820A0860822921F2
SHA-256:	2DF92C7108CF6788CE6FFE7D3170480C6B6CA0367AE57911849B3760F3753994
SHA-512:	4C198202400D755D7B9E32B92E267AB7D3C07D0B90ED351B796CFD791E74F014F59604C52B00CE4F54525B1DB9D7EF27412CA483E1517B2C4E289F207A3BE3BF
Malicious:	false
Reputation:	low
URL:	https://desktop.telegram.org/css/telegram.css?237
Preview:	body {. font: 12px/18px "Lucida Grande", "Lucida Sans Unicode", Arial, Helvetica, Verdana, sans-serif;. /-webkit-font-smoothing: antialiased;/.}.html.native_fonts body {. font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";.}.html.lang_rtl {. direction: rtl;.}..body,.html.theme_dark body.bg_light {. --text-color: #000;. --second-text-color: #7d7f81;. --accent-btn-color: #2481cc;. --accent-color-hover: #1a8ad5;. --body-bg: #fff;. --box-bg: #fff;. --box-bg-blured: rgba(255, 255, 255, .84);. --tme-logo-color: #363b40;. --accent-link-color: #2481cc;.. --icon-verified: url('data:image/svg+xml,%3Csvg%20fill%3D%22none%22%20height%3D%2226%22%20viewBox%3D%220%200%2026%2026%22%20width%3D%2226%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cpath%20d%3D%22m6%206h12v12h-12z%22%20fill%3D%22%23fff%22%2F%3E%3Cpath%20clip-rule%3D%22evenodd%22%20d%3D%22m14.38%201.51%201.82%

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42164)
Category:	downloaded
Size (bytes):	42523
Entropy (8bit):	5.082709528800747
Encrypted:	false
SSDEEP:	384:6RvBBVkrJxvcwYBUQ7X85AUfvDUNeFUBOgBmjeYP4PSvSdlb1bGjpXJNNRyIrOM:2k0p38OBmjeYP4xb1bG/bRyIH
MD5:	C2656E265EF58A9CC9F4B70B15DA5FB9
SHA1:	85C5EBDB89D4574D72688C2650D4B84B9B09770A
SHA-256:	F1D083FFAA644C708F11DB29707AA57C19246E6D32643B03FEE3F82C17B224B3
SHA-512:	6417AADEBEEF4EE35381BFC7034148D57FD061D84DE9974D798468C6426C24A6BD1C9913CF517ACCF3E349FA06CBDD546D2883EA8391C595285FE0C6127E26E8
Malicious:	false
Reputation:	low
URL:	https://telegram.org/css/bootstrap.min.css?3
Preview:	/!. Bootstrap v3.2.0 (http://getbootstrap.com). * Copyright 2011-2014 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /../!. * Generated using the Bootstrap Customizer (http://getbootstrap.com/customize/?id=92d2ac1b31978642b6b6). * Config saved to config.json and https://gist.github.com/92d2ac1b31978642b6b6. //! normalize.css v3.0.1 \| MIT License \| git.io/normalize */html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:0.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{fo

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 84899
Category:	downloaded
Size (bytes):	10147
Entropy (8bit):	7.978558662114035
Encrypted:	false
SSDEEP:	192:lpDRXgHvBXf1MMxURXLOq7Xq3y8CVUUkeJGyCgBikBflL+ubMrThh4c:TVef15xURXyqzky8stJG8bRENhL
MD5:	4C55012442A6CC9653DCADBBB528CD22
SHA1:	AE83B62952FF7E4428C85793289D7423ECE52F05
SHA-256:	CF2D5FBEE6986544DA6202828C01898BCB8E8DEBC50611E0C7433E8066834C61
SHA-512:	99FBF683182B1BFA806374068A6BC857419BE0BFE8D582056D8F709A0FA6B0B9E5EB285661C419246C20C66B0E1A8DEB7E026B3FF5D137D0FB4DCAC608880E09
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001484/1/bzi7gr7XRGU.10147/815df2ef527132dd23
Preview:	...........]Y..G..+F?..y.~[....4.`.'C.d.mi.: i.k....."...b.]$..\30.,......q..n>....[...........47?...6.....o..[.......[.Ms....5~.L......._....?=....../^...>....#&..?7......=S.....o....z.B ........?.<..O.....}.....^..+~....\|y.?......w...'........57.W.[o..6.C....C..u.w.qQ.9.F=.o.A..U.b......8K..N...Tj8Q7/..Xwb..O...?@.... ..Go.....vuc3.+...9....%...;.....7....o..._....t......=.z.05.%.LlI?\|.:.6L.n[k.}3t.."...Z.6)]&IG...qz.Y....X..t..'.c.$_.~..o.....-..*.....w..<!.........I.U14&.6.]........7...`.>.r\|S...>....G.m...A..>....O6Z.fc".....u..o.~~..........o4.z.......?...6.........-...>..I.....?...............^.~?.\|.G..P@s.~..L.....}x..H.....o>.....OOw.K.+.X..-.{,...&k.........r..O.w=_:.>...{R..1.6..r.}y"8.Wo........v..}..Z..;...7$..#.z./J.e...........lc.ksr...0.&Zr.o..._.....Rk..;;.M...>...{.........#GW.wt=no.. G.6..l#..Z.lRX...g.}H.\..\|.W...x....o.=.......ck...\|.uk.N.m'o.../.2.3.>....9...c\I...X....,.e..U).=..A....c....0\|"....Q.... .M`.^=Z..l.3(....

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2979), with no line terminators
Category:	downloaded
Size (bytes):	2979
Entropy (8bit):	5.648534994584625
Encrypted:	false
SSDEEP:	48:UQEHvIUHtDAYabRP46xcOfRRlUOS3+/fmsghxLU7Suj5OQRSLfctS/6uMMWjfYA1:vaLJByxvS3o6U7PRPM0j
MD5:	2B89D34702716A8AD2CC3977718F53A3
SHA1:	04406EBD6A9E2CE79DBAC5E5048CFE1384E4574A
SHA-256:	2031E418EE10AF8110729B3F327B968462FC0A9D8D1DA095387BB472CCD0DEE6
SHA-512:	E6FBDA1E7D1E24C0DB5A724E4CD30C883CEB5D35DE1CC6AB8851C9B19E202024752E7E42AECC21002F9F9684EA98775F1EBE0EE8DA9BD7562DAC2FE171464242
Malicious:	false
Reputation:	low
URL:	https://telegram.org/js/tgwallpaper.min.js?3
Preview:	var TWallpaper=function(){function x(a){for(var b=[].concat(G);0<a;)b.push(b.shift()),a--;a=[];for(var c=0;c<b.length;c+=2)a.push(b[c]);return a}function B(a,b){b%=90;var c=x(a%p);if(b){var d=x(++a%p);return[{x:c[0].x+(d[0].x-c[0].x)/90b,y:c[0].y+(d[0].y-c[0].y)/90b},{x:c[1].x+(d[1].x-c[1].x)/90b,y:c[1].y+(d[1].y-c[1].y)/90b},{x:c[2].x+(d[2].x-c[2].x)/90b,y:c[2].y+(d[2].y-c[2].y)/90b},{x:c[3].x+(d[3].x-c[3].x)/90b,y:c[3].y+(d[3].y-c[3].y)/90b}]}return c}function H(a){for(l+=a;90<=l;)l-=90,g++,g>=p&&(g-=p);for(;0>l;)l+=90,g--,0>g&&(g+=p)}function I(a){C+=a.deltaY;D\|\|(requestAnimationFrame(P),D=!0)}function P(){var a=C/50;C%=50;if(a=0<a?Math.floor(a):Math.ceil(a))H(a),a=B(g,l),y(z(a));D=!1}function Q(){if(0<A.length){var a=A.shift();y(a)}else clearInterval(E)}function z(a){for(var b=f._hctx.createImageData(50,50),c=b.data,d=0,q=0;50>q;q++)for(var h=q/50-.5,F=hh,v=0;50>v;v++){var m=v/50-.5,e=.35Math.sqrt(mm+F);e=ee*6.4;var r=Math.sin(e),w=Math.cos(e);e=Math.max(0,Math.min(1,.5

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42164)
Category:	downloaded
Size (bytes):	42523
Entropy (8bit):	5.082709528800747
Encrypted:	false
SSDEEP:	384:6RvBBVkrJxvcwYBUQ7X85AUfvDUNeFUBOgBmjeYP4PSvSdlb1bGjpXJNNRyIrOM:2k0p38OBmjeYP4xb1bG/bRyIH
MD5:	C2656E265EF58A9CC9F4B70B15DA5FB9
SHA1:	85C5EBDB89D4574D72688C2650D4B84B9B09770A
SHA-256:	F1D083FFAA644C708F11DB29707AA57C19246E6D32643B03FEE3F82C17B224B3
SHA-512:	6417AADEBEEF4EE35381BFC7034148D57FD061D84DE9974D798468C6426C24A6BD1C9913CF517ACCF3E349FA06CBDD546D2883EA8391C595285FE0C6127E26E8
Malicious:	false
Reputation:	low
URL:	https://desktop.telegram.org/css/bootstrap.min.css?3
Preview:	/!. Bootstrap v3.2.0 (http://getbootstrap.com). * Copyright 2011-2014 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /../!. * Generated using the Bootstrap Customizer (http://getbootstrap.com/customize/?id=92d2ac1b31978642b6b6). * Config saved to config.json and https://gist.github.com/92d2ac1b31978642b6b6. //! normalize.css v3.0.1 \| MIT License \| git.io/normalize */html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:0.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{fo

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11028, version 1.0
Category:	downloaded
Size (bytes):	11028
Entropy (8bit):	7.982077315529319
Encrypted:	false
SSDEEP:	192:4oijUxKA0B3BxJPeLrh00JWNhi5A5HWdZ6SfroKthzwbMcYfQKvwpFVX2T+:Nx4bexHAE6STltlwbMcovaET+
MD5:	1F6D3CF6D38F25D83D95F5A800B8CAC3
SHA1:	279F300CA2CBBDF9F5036EF2F438607FBF377DAA
SHA-256:	796DE064B8D80EBA7CCACB8BA67D77FDBCDF4B385C844645D452C24537B3108F
SHA-512:	716305F4D2582683B64C61B5E2390983579EA0FB33C936DD3EA8362872176625FBCB6F5AD18D2ABF85DA82D14C33A9640DFC5749922CB2FC079DDF37864F361F
Malicious:	false
Reputation:	low
URL:	https://telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
Preview:	wOF2......+.......T(............................d..d..^.`.. ....\.r.....6.$.... ..t. ..EEF....(j....._'pr.X..C.....%I..=..#7fC....y./...z../.d\H...wN.........=.....!GF...uNG`Nd.".....~..a..`.)..R.!5jTH....i@.7TT,0iI;...kv..+.bR.%.3.....;I^..T.T.........4..tZ3.d..J.D5.w...ve...6...HI'%E..E{..G.l........]WY..M........Q.w<.....lu..A.p.v...e.NQ...'i...y...,.FK...=.r......{..].+.K...I.e...?.t...R...R...p....4T+.....!1....A.1...JE.....d./......,.......?..%.p.p..6..!..@..H........)....A3.1? .(`.....D..X.30..gl.b... v..;...u...1.9.......?@..(..@........x.g.L........g..jt..f.........x.....9vB..FM.;U.IS..wf.....O~.RP.,4.x..J./.j.......9h/.....6.....z.f..._..b..........z......r. .C.>j..@D.. :G.2.\|..z.^.[...7.....v9_=.$..G1..=c.dhz..Q,oP....*..[...f.b\.Z.aa....n.u...T..!'[..NC{.o.g.N..Y.F..a}...X..x2...q.X......P.{.n+..'G.o.b.N..6[;5..q..&.r...}k}.O.JVL).y.>..#..[.j.b.OV...[!...<.+.k.}..P..x...y...Q.....A.=.C....y.B+....2}\...f3...U.Sd?l.^7._}].G@..9R.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 442x270, components 3
Category:	downloaded
Size (bytes):	31305
Entropy (8bit):	7.8603716620080535
Encrypted:	false
SSDEEP:	768:3OqzWWjlwuxS+TRqYXz7xlPcuYq8KkTwWq7Pku4kz2R:3nr5zdPn8QSkz2R
MD5:	89486A05599A1CFD549F8FB2D70E7D73
SHA1:	24867697525DF19B88E79D75FF32384EBA57B321
SHA-256:	5A2C666B6E4F30FF921353CD9A3ECCC09B9314C5C5AB11E1A3928936E497B2DC
SHA-512:	BF59EA2F4CDC21464BCE9ABA5401C5DF0522769F998B432DBC79E7863737B87521E0FAA7501DBCE72115B256A181B6DA2C4F2FDBCDFF3E1ABBD4F73AC3177714
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/SiteiOS.jpg?2
Preview:	......JFIF.....H.H.....@Exif..MM........i...............................................8Photoshop 3.0.8BIM........8BIM.%..................B~..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C...................................................................................?.....(...(...(...(.........I'..._......._.....9.-.Isv....m.7Www. ..@.(=...3.+.......\|3..<c..../...M.E.a..........t-;....T.[..\.......3..........X;.J..3.....3..j1>g_....).F..x.[6R...N..~.Cs....a..d......_......G...q.........\|S...;X..V..b;..

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	244748
Entropy (8bit):	7.995691927196956
Encrypted:	true
SSDEEP:	6144:0j5FgtXKqm3eK60anWDVUK0u4a45U00kYUUe2F1IU77a:wyBKqSe6anW2K0Na45ULjUUeuL7G
MD5:	91DAA37E09DF8B688F7832E7D6D80AA6
SHA1:	FC59E29275E98DD5DCE1EFC9B982EC1BA5AD4276
SHA-256:	EAF99FDDDBAB6953D53DF2A7E81B5275E90E221E0A7EBD3D99F42CF4B6ABA6D2
SHA-512:	96944B45CDAECBB55CF9869004D3644DAFFC9198B9A7033F581B0C2BE769ACA586944F9BE48C68278DF9F0159EB0B248D1A4C5122283E392827FF7D8304E2378
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/t_main_iOS_demo.mp4:2f757c58528c1f:0
Preview:	... ftypmp42....isomiso2avc1mp41....free....mdat...q....m.E...H..,. .#..x264 - core 157 r2935 545de2f - H.264/MPEG-4 AVC codec - Copyleft 2003-2018 - http://www.videolan.org/x264.html - options: cabac=1 ref=1 deblock=1:-2:-2 analyse=0x3:0x113 me=hex subme=6 psy=1 psy_rd=1.00:0.00 mixed_ref=0 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=0 chroma_qp_offset=-2 threads=7 lookahead_threads=1 sliced_threads=0 nr=0 decimate=0 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=0 weightp=1 keyint=12 keyint_min=1 scenecut=40 intra_refresh=0 rc_lookahead=12 rc=crf mbtree=1 crf=20.0 qcomp=0.80 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:0.50....4.e...)..D....M.....B~.li..f.&r...N....oZZ@.]B...a..iO.d....A..._.......T...D...f..}.....p5..&.}.lI..)o..\|.."!G/....~.Q.`....)V"a..U......SK...=.Lp.d.n/l!.....&...o.....kz....#..1.p.k...A?....N.I.....^..=@..*8....?..D.....~.....3...}L.....j..yEU[l......z0.........lu.Ild....O.SF...G.B.9..S..^k...5h...3..KB.

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	21478
Entropy (8bit):	4.9401794405194135
Encrypted:	false
SSDEEP:	384:FCxaBo7s5dibe4UbBHasovLi1xPSoGBejIfD5FQhPOwIc:FCxko7UALi1xdGFTcIc
MD5:	4C9BA6B680FC51B6E5BD4217A1550C88
SHA1:	3FA0E7D643CC1E3008E0FFEBA46A1E3682E2EAF7
SHA-256:	51C4D88FD78F3B8EFB16F845E75BE7F1BB288FDF2FD39D033868A0346DB7FADB
SHA-512:	42706B3E53134B3EA0FCE3A5775D8929634EAB202856794D6E5E71FFA44B83487AA992D3D933FBE2BD5B2CF084F20206EE13BA904A713114E566DA6474A8C3D1
Malicious:	false
Reputation:	low
URL:	https://desktop.telegram.org/js/main.js?47
Preview:	var startTime = +(new Date());.function dT() {. return '[' + ((+(new Date()) - startTime)/ 1000.0) + '] ';.}..var jsonpCallbacks = [];.function twitterCustomShareInit () {. var btns = document.querySelectorAll. ? document.querySelectorAll('.tl_twitter_share_btn'). : [document.getElementById('tl_twitter_share_btn')];.. if (!btns.length) {. return;. }. var head = document.getElementsByTagName('head')[0], i, script;. for (i = 0; i < btns.length; i++) {. (function (btn) {. var status = btn.getAttribute('data-text'),. url = btn.getAttribute('data-url') \|\| location.toString() \|\| 'https://telegram.org/',. via = btn.getAttribute('data-via'),. urlEncoded = encodeURIComponent(url),. popupUrl = 'https://twitter.com/intent/tweet?text=' + encodeURIComponent(status) + '&url=' + urlEncoded + '&via=' + encodeURIComponent(via);.. btn.setAttribute('href', popupUrl);. btn.href = popupUrl;.. btn.addEventListe

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11343
Entropy (8bit):	7.967755371327097
Encrypted:	false
SSDEEP:	192:5BkxH7mNBqw0b+7h5tyiS/5Z3LeiTLgrsPGLR66oy/PtnBpLghEr/RKlfPs9yMHk:5BGKrr0bkNyiqZ3LeiTLLm66NFBZgWru
MD5:	4E06D87C860BA8E8A804350F42632217
SHA1:	31D3F89AE95D6F25660020B21E49114AAECFDD59
SHA-256:	6B081CB199E67A43DDCD7DDAC0B528C93CC72BB82641937368A41B0AECE43125
SHA-512:	C28516686E07C341DBA58B28C8185AC31FF479D7B4F8D081CB50B395C6678E353B8D0D00E3B21185DBCB6484F81A354170D403B8B6F6E7EFE8D73017D1D681ED
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............g-....bKGD............,.IDATx..w\|.....<ef.Q.Y...b....Z.f....K..f.lX..C.....n ..-,..w.)K.).B.i......E.mI...O9..cF3.Y.%[......h.).~........J(...J(...J(...J(...J(...J(.......M....y..bb........H.(...."......G>l......+`.1....D0.Q.R.K.,".....B;.7I.Y"<g...}.{[.S.`.pnc.$.NV....Q.O....Az.....vv.x..:74.Q2>..s.x.^._U.<C._).."k{_.Q......8l\..yD.b...A..A1.....(J ...B...^....y@..8...: ...x.@>..mv]....B.f...........q".G...P-...P=.~G.'......t@.>.t..<x..{.\|.&....Z..7C...8.JWA.!"2F..a....f.dN.p.1.: @.t..~..H...>.~d....e..C.gR...-0.7...Ih...k..=.....-....9..D..wmS.u_..g..z'.w[.2U.zx$..Bs..r..`L.t.[`/...... ...^..t....&}H....GhEU..z.].u..#N{...O..V..Z....3A.Mp.1..N.f.%....... ...}..{....;&\|~..E.@RF..6.^d]............\|5._...5...Y.I...%.+....?..A...0....mB.>O.-...."T..{%].....7.qN...#":..}...Z0.[S..i.........F-`4....31....'!......iz..)]....A..3...*.XW....p..{}.iBtG0....KL.J.d........a...@.. .z.5.)A.. =...~..G...].F......O._..v]...'..../Q..A....8

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	16465
Entropy (8bit):	7.966528714713492
Encrypted:	false
SSDEEP:	384:4/zugvMc/z6Gaq5iFvJBOqikYcWOFKOX7AtgqHJVw:4qW6UgvJHikXW27X7kJm
MD5:	77FFE8B3DFF795EA0734BF4B35A94357
SHA1:	2D545FFB0877993DD227D528638A336CD3B9E32C
SHA-256:	AD37907E335E7C5D2692B682401F4520753AB539FADEDF74962C6A004B3A179F
SHA-512:	FB4692716BADCB1FCE73ADDB8ECBD16C7158A8D0618B3BF3B1833661A3813D48500F8C96972C9CBC2F5EE9DBEC1CE6F0450A6445A3CA9635FE2B3ADA9A50B206
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001560/2/n7EACfx4FPY.16465.png/7318c11715aa2ec45b
Preview:	.PNG........IHDR...............g-....bKGD............@.IDATx..w.]e.?.Yk.....Lz2i.BH .D. ( M...(\.]..X....\|.._..]....i.P..d2....Z.?N.3%.L2C...<.9g....y....^.JU.R..T.U.JU.........,Z..g..p......6...c5.>....U.V..$..".#P...4/...J/.}...+Ihn.\U....J/..w.BlZ_(.....O}....,t..'H...@.o....].`..H./.}......~.ML..e..Z.R....hV.....A...8..>..c>)-.h...bDdb.p.......T.%Ou.'.'......to...G.D.h........VQ../..y..g..8.4.S..i.,&.q m!I$....OwG..~.....w-.....Dd.....Lb.!c.Wa1.......X...<".O.}..W.{<q~........]...+_P.&/.~....._...k........nR.g...`.F d....aH(d.M...".....9.r..P...$.}..`.Z.q...c..L..C...:.8...bz8..$..CB.=]......#^.F8...0Q.Jcs.455r.\|@w.%..!..k"..:..c[7..Y.=.t-)/1..(T......._U.....h.Gc_..L$......k..\..../..Hi.~U..P.\....,..#.3...UU\|.01..M..h$.h$...z.=..r_.{..}..o.]...*.[...l...=w..}U.....c.!.7.D.v...OI...}.k..........t..O..qRl...60.Q.$f.-.B..C!........Q.&...G.].I;........&...uXS..!DW.=v/.O..).5.o}.3./...~L.......e.:.5.0T....!.H....2..d..89...N..\G..^..

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 17, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1272
Entropy (8bit):	6.759893244400297
Encrypted:	false
SSDEEP:	24:ay1he91Wwjx82lY2T3ouVMgK5iyJ3V6pKzLXGLfarUZdR+p0tN:awqQNn2xCJ3xKjZD+p0z
MD5:	1ED9BF7633F4F449C8D2DF94EA0EB35F
SHA1:	2902BA9C2B127C74C2550298A0578D7D8DA941C2
SHA-256:	E7D23B06A4FFD600558E5443D1E32DAAAF13A27CF7BB8B7CC163A92B4054AAF2
SHA-512:	51DD36178DD85F062FEE20903A4F0981CA34EB24A7E7245191EF43D493CD47F756389E548A731109F1C0463BA3BD1D3D4F7C4C623639B9514EB2FB9619124F07
Malicious:	false
Reputation:	low
URL:	https://desktop.telegram.org/img/twitter.png
Preview:	.PNG........IHDR.............2......tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:BD511DF2556611E48F9585596B882309" xmpMM:DocumentID="xmp.did:BD511DF3556611E48F9585596B882309"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BD511DF0556611E48F9585596B882309" stRef:documentID="xmp.did:BD511DF1556611E48F9585596B882309"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.."...lIDATx..O(.a....19P....up...r...XI.M.."G.*)g.....f..p.h.....Rh/.. ..O=S.3..z..........5.it....L2+...i6g..

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	5937
Entropy (8bit):	4.980950854185178
Encrypted:	false
SSDEEP:	96:vYYD4PDKthWNRm/Qr7JTdAvAjDIRHO9slZe2gLaFB6ASqJlias7:vPMuhWNRmor7JT+vAjcRISSLa36ASqJ0
MD5:	A3EECFB5CD60979B65AF8EF49BB66045
SHA1:	D4C4EAAB526E88C2EB58339A28207DBA967BE384
SHA-256:	B508251F81DF8FDA1990736E14135063E5421F6C424734C90B263D8BDFC944E9
SHA-512:	993C542FD86ADAC3C737DEA3C19E2CF1A12DD128E69550E7DB8933E3062E778668988BA496BF88B29E0D3DDA303B5BB1F80ABA11D6116A77653D30183F04AE54
Malicious:	false
Reputation:	low
URL:	https://telegram.org/js/tgsticker-worker.js?14
Preview:	importScripts('rlottie-wasm.js');.importScripts('pako-inflate.min.js');..function RLottieItem(reqId, jsString, width, height, fps) {. this.stringOnWasmHeap = null;. this.handle = null;. this.frameCount = 0;.. this.reqId = reqId;. this.width = width;. this.height = height;. this.fps = Math.max(1, Math.min(60, fps \|\| 60));.. this.dead = false;.. this.init(jsString, width, height);.. reply('loaded', this.reqId, this.frameCount, this.fps);.}..RLottieItem.prototype.init = function(jsString) {. try {. this.handle = RLottieWorker.Api.init();.. this.stringOnWasmHeap = allocate(intArrayFromString(jsString), 'i8', 0);.. this.frameCount = RLottieWorker.Api.loadFromData(this.handle, this.stringOnWasmHeap);.. RLottieWorker.Api.resize(this.handle, this.width, this.height);. } catch(e) {. console.error('init RLottieItem error:', e);. }.};..RLottieItem.prototype.render = function(frameNo, clamped) {. if (this.dead) return;.. var realFrameNo = frameNo;. if (frameNo < 0) {

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	19325
Entropy (8bit):	7.97541212859293
Encrypted:	false
SSDEEP:	384:/fkqoRm5m06jc+ejLD9xyVF1gX+Bq3lCTiqvfKs90HmFOGJaIv5Se4:/cqo25lu1RBJmYtiH8OERvK
MD5:	DA1FF638A4141EED84327E20F936496F
SHA1:	91E5410531539B53C3AEFCC5774413E8A665A57A
SHA-256:	B66DE388C12D6611870503C34C5DB37FE079313C4292177435FD8DC7ED6CBE67
SHA-512:	75B6243FEB853275A9E4AA1C36591CBDC3439CD27489CD5833F8670E072ACECC59888699BEBD3FFE5F8D1851608394D3255EAAA863DB438511CB4798F99D334A
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001166/2/FzTl8_M5mQA.19325.png/b6c5dbc0e4f6553805
Preview:	.PNG........IHDR...............g-....bKGD............K2IDATx..}w\|\...3...U.."....c..0...LH.7..........$..I.P....p...{..-....w..c.-..r........ig.....0}....v.<,.;l...M..v.W2#:......,.+".C.\|..'....".......x...3.......<P.].....p.a",.....:...P&@).#.:...".........=:\|.'O.._....').?.t.@......+..Y..}/.Z...q.._#Rg..V.v...?{.WO.0#zu... x.@#..w.i3...q.....0.D4AD~.....:!.O..w.-..?..&,..8.3Z..y......O.[D..Ci._r.i..s..'`.F..........g..."3.u.[.F.Rc.Q.".....fK^.b...8..g....k.....3"r.....x.b...........`..9....]...M!\|.HU.z.....sV....w.x..y...~....3.<.....fk.......M.................V....??th(.\|..E.2.OD.$.v...r....~A.t./.J..Ep..3f.y.m........`.f..&...'_.r...."..n..Q.....Q~....D.qm.....c.......jh....M.x.\|[.......0..Y..}..C..s...}.Z. x......(.....EP...l....#..w......M.=....xw).._..6.i}p.ub...?........4........v7.}.P.?..`y....9.\p.../....3f<...u..ya=......'~.....~.kG.*....[.....w.........C_...k6..-.>]..<.\|.,.&B.=..k.@....O..@...;.y.....8..?..\|.}r..F>.........$._..%

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	16465
Entropy (8bit):	7.966528714713492
Encrypted:	false
SSDEEP:	384:4/zugvMc/z6Gaq5iFvJBOqikYcWOFKOX7AtgqHJVw:4qW6UgvJHikXW27X7kJm
MD5:	77FFE8B3DFF795EA0734BF4B35A94357
SHA1:	2D545FFB0877993DD227D528638A336CD3B9E32C
SHA-256:	AD37907E335E7C5D2692B682401F4520753AB539FADEDF74962C6A004B3A179F
SHA-512:	FB4692716BADCB1FCE73ADDB8ECBD16C7158A8D0618B3BF3B1833661A3813D48500F8C96972C9CBC2F5EE9DBEC1CE6F0450A6445A3CA9635FE2B3ADA9A50B206
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............g-....bKGD............@.IDATx..w.]e.?.Yk.....Lz2i.BH .D. ( M...(\.]..X....\|.._..]....i.P..d2....Z.?N.3%.L2C...<.9g....y....^.JU.R..T.U.JU.........,Z..g..p......6...c5.>....U.V..$..".#P...4/...J/.}...+Ihn.\U....J/..w.BlZ_(.....O}....,t..'H...@.o....].`..H./.}......~.ML..e..Z.R....hV.....A...8..>..c>)-.h...bDdb.p.......T.%Ou.'.'......to...G.D.h........VQ../..y..g..8.4.S..i.,&.q m!I$....OwG..~.....w-.....Dd.....Lb.!c.Wa1.......X...<".O.}..W.{<q~........]...+_P.&/.~....._...k........nR.g...`.F d....aH(d.M...".....9.r..P...$.}..`.Z.q...c..L..C...:.8...bz8..$..CB.=]......#^.F8...0Q.Jcs.455r.\|@w.%..!..k"..:..c[7..Y.=.t-)/1..(T......._U.....h.Gc_..L$......k..\..../..Hi.~U..P.\....,..#.3...UU\|.01..M..h$.h$...z.=..r_.{..}..o.]...*.[...l...=w..}U.....c.!.7.D.v...OI...}.k..........t..O..qRl...60.Q.$f.-.B..C!........Q.&...G.].I;........&...uXS..!DW.=v/.O..).5.o}.3./...~L.......e.:.5.0T....!.H....2..d..89...N..\G..^..

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15740
Entropy (8bit):	7.954978172464159
Encrypted:	false
SSDEEP:	384:AwIpVA9llRR/+5BrSOxNbCGcIvTeSEHIGbi24fe:8Vul+5BrPtIIvTeSEHRiV2
MD5:	4E59E61B2A0205E09DAFAD24DA174530
SHA1:	0DC2ADBA2FBE4F1CD195364EF4F1AB4DC1641993
SHA-256:	269F20EB63DB3ECE8035886EBC69112EF94339DA867D47F815237800555E508A
SHA-512:	8EE876A60C4D511BEB1229678E34D5F91C34DD8EDA4CF792DC521DB76CB8338480B3C265181B3AFB7446D3992E243D590A09494CB8E10FC4268022181BABDA28
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............g-....bKGD............=1IDATx..}w..gy..yf....^/:.n..,7..Tc0..d..P...........@0n. ....\(.Lq.......-..u....3.<.?fwg...k...\|.s...3..w..>...y.....=...`..\..t.J.....q..tL...S0^2N....z..\|L.L......Y. 4?'...N..).$bW$..<...h...k..d...I..L...)...tR.(..i..SJ.!:.<.'...0...w....!.....S.)bU.2I..................c....o....m....X......t.@u ...,..D..........=....V...l.I....y...........3.:.....=.:\|..F..h....#"(.....O@....I.{c~.~....\|..>t....x3...8...-..(.... ....`C.&A.@.....p.4&...Z.$...z?..9..x.<..\.=..#..6..... ...S."...@...F.X."........@..E>...j!...>oVN..S......+..@f...F..>..g.....9......\|&....a.+r<3,.$.....p.`.}_Q..b..;.E.VW....@ 8...s..6.\|...(.IW.Lv.....+....-H.n....<.g3..Kup.= ....G...zE...T..q...L....@ 4.<...]..A.hZ;.9....Qlo..M@(....t..z..N.G.{.......W?<...D....q=.....a.W6......T7....W......W.t...@.wU@....St.......@U..m......w.Gv...'........<.g...e=...p)..e....'.....B.;...X....o....4pD1p..l..a.s.8..@v.;........../..[.....?._...

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 246409
Category:	dropped
Size (bytes):	21801
Entropy (8bit):	7.986820094004987
Encrypted:	false
SSDEEP:	384:+cw4aeILQZCjjOsGrggZg/3nccbQ+u19W9S0rJUrqbza3KUvKiIpe16S5:+cwRpLQZC/OsZz/32+N9S2uaO3KwIpi5
MD5:	EDE943D9BF34428EF8FB13948912141D
SHA1:	F06BD9FE51BF32FBEFA0ACEFBDDAA464F6A64F13
SHA-256:	1782968F6F9EB42BC5689B3A2956CE8C45672E126427B870EB5E2FFC415CBC0D
SHA-512:	97EA17771436E6B2E0DD0F0E91165AF119CFFB1286EFD9093648F8D5B741E0FC5627A0A98F390D89737999121DB93F15613E7D67D9F88826EA462748DACDFF2E
Malicious:	false
Reputation:	low
Preview:	...........k.#.6.W..\,dF..u...............[:.....>.B.....EV.E6.L..{.U.........>..._......<\|...0.......fx.....'.c3...._.K.....??.Ko........Oo.......{y../.........~.+...........?..........o._.:.w..........~.w?...._{../?...!......N...........k..O...K....?~f.1...U<.i{.9'W1.2..u..v.%......{..et%.v..."........>\..R?.....d..C.}M.._Y~._.........@..=..2G....RF.o.......I.koc..H..Lco]I...u.....-.U.{......M~L>..3.i...C8...C....~z...@<..g......B)7~..a...;E...[3Z^..?U..[...A~......X.?3..S....n...?c.h..2.Oi...{.F ...Yr.........W....l.......b....]6..?..r..[.&......>.?.)..h....$.y..)..cJ2+~..7.4:.'x+.....2).?.........OC.nt....}.......k..vM...X.X...nM...i..[...3B-.#Y7..X3%..\|.-.eX.%!...g.~....T.z..>uc.........uq.`ad.$.S.)r\|.,L..1..^..'...6....w..h...J.#.....w.._X.o..eNz........:._.~..+.D...b.{......e... ...$p...dM.'e.g..d....&..E..}3...#5...J.+....>...W..=Z^y..{4}K....9../.8x.w.............~.S/..?...O2.:...\...*....<.M...ff..E.<.N.....G...&>yL..

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 144400
Category:	dropped
Size (bytes):	17422
Entropy (8bit):	7.9862827586756735
Encrypted:	false
SSDEEP:	384:2e0AYD0jWxy8M4gQBv+fImQpItUdkIUqi1nSs2quA2KtyfYoC/LA:R09DLhfBG7QpIemIUJ1nXznyujA
MD5:	86D83D04E8CBDCED71F34637C23C1EB6
SHA1:	2AE58F60868535644CEB753735DB7191D65A6723
SHA-256:	91286A9F171E3435452F7FC0523F2FC626A142C1EB3F29BDC38B74335E229CCE
SHA-512:	09C8395CCA30E5F3A1A3C35F63C91C57878BB70D35A00863A98DF4BBAB2BEBC3B78B4BA6E58521B4812E40770FCC4FFDCE173C2F6D95D96EE26589AFCF25CDC8
Malicious:	false
Reputation:	low
Preview:	...........}m..Gr._1...... 7X.H.d./. .k..].2$..:......{8$.<$gH.#..{D.g.........>....[......C.Co....><\|.M...o.....e........./.._..C/../....._....z....g~......_}........}x.W.....o/......?....7..(...........}.........._?=\|.x...........^..y.....d...,....N...........F.....Q./.y........W....`..?..9...+.U.(?\|...\|<.7.....>..=..s..U.\5\|...u.......K..=6eC...x!...=....T,.._.v.....1L6.S.._..f\r.@..y...Wo?..H..i...TKoK.6\|.I.L..#.&..fjK..u.l{"/..wI.x..O....g.....s9k.....1v..c.......<3>.<&..^4......C(....Ko..\|0.._..w.....>....#...Q..`p..j....<.......92...=...K2.?.x.....x...z.?...o.....^..T.,..X..1.S.....bHI...p.T...w..lB..8...Y...oK.y..:P.@a;WK}..s.T......l.)...\.....g.G..}.u%.O.$:.........uD....).v..t....3...$.Y...,./.t.....^.2.K.....1..[...m......'.ing..vN.4~..{../1a....dq..>....KO%v.g[..n.v...3....{.'(.Uz$...Y..@z....G3.YNu.c.....e....h......%B.......m..q@.<..J.Xft.s..1.P9...S...\|b.......X.t..Rc.f...J ..[W:&~9.*.&..4..;...?.D.vK6=..P.

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://rfpteams.ksplastlc.net/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x320, components 3
Category:	dropped
Size (bytes):	12164
Entropy (8bit):	7.906866548284266
Encrypted:	false
SSDEEP:	192:2TbbbbbbbsMSbbbbnuZYZaUXaGbb43HzR46i271VK08qmwcCU33N86M7IJbkHg3H:eAMcakYHGL27XlFUH3OHcx1ivEPt
MD5:	35A701DA2F909A30B46D59732C83FF93
SHA1:	B42EFD00A8D2471F8FDF5F2E17CBB3E51560705B
SHA-256:	07A07050456F0AEACA176392FFC41360567B7C60A51F4C6C3F6A82CB573FE0CE
SHA-512:	948CB660CC34B338A34EC5F29E221996E87CD627363442B72B977963DC50F15D0FD2B7A8C2890014F6EA55864BFB7563D37653E882E2DE7C867F4C9B54014831
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................@.@.."..........................................@............................!..1AQ."2aq..B..#Rr...b.$3CS..4..c.................................2........................1A..!Qq...."2a.....3B.C.............?..4D_....D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD...5....o.;...Fe....6... ...!Y}..O..3._5"..]..S.j...u5.0.F.o.#q.>j/;>.n*....2......&.]..fxB35.{wc.......t.4..V.c..3(!2P.B.a..n#......P..DR..km.m....>.....#.Z..,p5....U..c.K,.:..\Ssi..1...E,.............................................$...ed.h3.vzzW..Ev.\|T....J....J.i.J.......IN.:....-.......p.n.../.".J..^.v..... ..........hVY.H....\.-s....%....:C.j.E6...7.~...h.w..z.....}#....oV.{......Z.4q.jj.$..&..IZ.[..%k,.]"..o5.2IUAZ.g{...

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	100601
Entropy (8bit):	5.405523706724719
Encrypted:	false
SSDEEP:	1536:yWbjzXwlvEwbDey5wOl3vkiXo3pJR/wxQGlImvDshx:yW2vVbDeyCOl6J3GumvDs
MD5:	9B31C5083355B2AAAAAEC512F3A0021D
SHA1:	395C9925E89A0AE66F0E016AE664C0AABFD64865
SHA-256:	59DF8CAEC8E28F1DD238C2F59FDB02854B51DA69B0BC1A18271C502A9A166295
SHA-512:	2B1C65386A00FE87D1B74D319DBD9F421A5873E5C1B32E0FEC801A03444ACCE9C35D2F4AC3C6DEF701C885347F750408DE8E948ABC28DBE306C76C088E9694B8
Malicious:	false
Reputation:	low
URL:	https://telegram.org/js/rlottie-wasm.js
Preview:	var Module=typeof Module!=="undefined"?Module:{};var moduleOverrides={};var key;for(key in Module){if(Module.hasOwnProperty(key)){moduleOverrides[key]=Module[key]}}var arguments_=[];var thisProgram="./this.program";var quit_=function(status,toThrow){throw toThrow};var ENVIRONMENT_IS_WEB=false;var ENVIRONMENT_IS_WORKER=false;var ENVIRONMENT_IS_NODE=false;var ENVIRONMENT_HAS_NODE=false;var ENVIRONMENT_IS_SHELL=false;ENVIRONMENT_IS_WEB=typeof window==="object";ENVIRONMENT_IS_WORKER=typeof importScripts==="function";ENVIRONMENT_HAS_NODE=typeof process==="object"&&typeof process.versions==="object"&&typeof process.versions.node==="string";ENVIRONMENT_IS_NODE=ENVIRONMENT_HAS_NODE&&!ENVIRONMENT_IS_WEB&&!ENVIRONMENT_IS_WORKER;ENVIRONMENT_IS_SHELL=!ENVIRONMENT_IS_WEB&&!ENVIRONMENT_IS_NODE&&!ENVIRONMENT_IS_WORKER;var scriptDirectory="";function locateFile(path){if(Module["locateFile"]){return Module["locateFile"](path,scriptDirectory)}return scriptDirectory+path}var read_,readAsync,readBinary,se

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 840 x 487, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	189734
Entropy (8bit):	7.995418777360924
Encrypted:	true
SSDEEP:	3072:qKCCO9mMyY1K6SCUQB4AxtinSEItHFDukVnxJQTu6r6R7NApp4rFDwGIQ:nzOkMy97CRR3Ljn5n2uYgGkKQ
MD5:	40D4266E5AADC87CCEEC1AB420DC2692
SHA1:	266C56990A106B6E9EFB0F9EF2A1A752AA6FA0FC
SHA-256:	3A1D4890B3E91A01C20C65B75F1AE028E3C445CAD1FD2D249DD0868876DFE4B4
SHA-512:	7DE32DEFDD87034F29930A7A32915100C2A109A80C79EED4C0A5F3127D1101FE0BF59B41CB4C5807F6FEA29A7721EBE74C55A8A4942C4EF67EDC40B860F46277
Malicious:	false
Reputation:	low
URL:	https://desktop.telegram.org/img/td_laptop.png
Preview:	.PNG........IHDR...H..........2}.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx....%gu...p.9..{.hF......H..D2\..?0.m.`..y...6.e..}..#...X.....X...H..@.......S....V.L+.hF...R.P......$......x-M/..r.NK..ko)..(..(O...)....v......x.v.S....).H..t-M/....Q.EQ.EQ...h..M.HB.....F.S.J..L..4.H.UQ.EQ.E9.../h......M... =I...\|).I..(..(..t.i..\|.7.....Nq..T...7.EQ.EQ....hz9...v....C.]A...)...(..(...!\|......O..yb.h.....#EQ.EQ....+)_....Q.....+..+s..EQ.EQ...$....}.{wiW<~........EQ.EQ.#....h7.@:\.W.@Q.EQ.E9.y..W^y.v...C..d....'.EQ.EQ.....]...P.2.3EQ.EQ..(......5...P.EQ.EQ..V^y.'k7.@:...].(..(......I1...P.EQ.EQ.~U...j....(..(.QDY.@...(..(..(..$EQ.EQ.EQ..H..(..(..(O..v..I.D;AQ.EQ.EQ....IQ.EQ.EQ.E...(..(..(..$EQ.EQ.EQ..H..(..(..(.B.4.!.J%.[.N;BQ.EQ...e...h6.....f...i..5o.....^.q.C.G1:A.R.F.Q...(..(.R.q.....c..d...^..uX4{_....]....AP..d.,.{..vI$.(..(..,C,E.M..^..d?1....~....EQ.EQ.EQ..H..(..(..(..EQ.EQ.EQ.Es.......G..EQ.EQ..7...$EQ.EQ.EQ..H..(..(..(*..EQ.EQ.EQT )..(..

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	231706
Entropy (8bit):	4.593328315871064
Encrypted:	false
SSDEEP:	1536:XVU9J794HJ4E7mwNUiRPt5jmU7LxmMS2S1J7g8tEqcqMWKB5v:Xew7ePc
MD5:	D0C22C6A97023D85BA6E644A41C44A5D
SHA1:	4284EFB616C182DA4450C123174CE0E81A322845
SHA-256:	118ADD53487C02AAF5B5AB9F69380FA06717DEB10492E14AAA487E3C62806AD4
SHA-512:	DA96462F4F999BB65509D32E4D5D2E1FD74555CE78D43E5F80FC350155BCE59250337CD1796B17D2132F39429B5E3FD95D05101EE9F9B29BCE2BB7B44B6E4EB8
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1440 2960" style="enable-background:new 0 0 1440 2960;" xml:space="preserve">.<style type="text/css">...st0{fill:none;stroke:#000000;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}...st1{fill:none;stroke:#000000;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10.0001;}...st2{fill:none;stroke:#000000;stroke-width:2.9998;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:9.9995;}...st3{stroke:#000000;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}...st4{fill:none;stroke:#000000;stroke-width:2.9999;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:9.9998;}...st5{fill:none;stroke:#000000;stroke-width:3.0001

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11040, version 1.0
Category:	downloaded
Size (bytes):	11040
Entropy (8bit):	7.982229448383992
Encrypted:	false
SSDEEP:	192:4Q49xPa2JiaMac+2d26KTpwgLfdRVH8Hfyj+lGSdVtxejHgwPvuD14CBt/F8bxt:4QcNc+2w6eJcIoGSdVtxoHgU+1B8bxt
MD5:	5E22A46C04D947A36EA0CAD07AFCC9E1
SHA1:	6091D981C2A4EE975C7F6B56186EE698040BB804
SHA-256:	0F53E8B0A717CA4CE313EEC62B90D41DB62C2F4946259A65C93BF8E84C5B0C44
SHA-512:	3E2DCB20C7416160573EA7C7A17BF7250132C5203161B03AEAA3CF065E3CE609DA6D1B317D3739AAD7FC0C092C44CD0C4EA5657A63BFA530C66F9B0ECB9DAF15
Malicious:	false
Reputation:	low
URL:	https://telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2
Preview:	wOF2......+ ......T.............................d.....^.`.. .... .!.....6.$.... ..~. ..E...l..a.[).r1J.(.....u.7...(U.r....=....2....h.F..j..P.).0...]~."Jk5$<...L..S...9s...Qs...y...;....-...~.....RJ0.......$j......1F.H....Pb.M(....(.m ..Y.....,..e.q.H.U.iW.D6'..6L..c.).#h...I...O^.T.m%...@....L..q.5`T=.Z.....mt...i.....:..T..P...!....Nnn^.[Q.......Q..^(.....0{xe.Lw..:..s..#................@{.........==.=I...>2`L..I..7!d.:H(. r..q....3.."......fMS.4...R.~..l...h8...r.(+.....<.is.p..:..A...$,.q>~.a.]..!.L~{.W...5...u~.......P..p..'D.8..).i. 88..!..h...........`.q......in.....p&............' ....;H...........v...:.4..S.T>...3m..j.g..i..#{N.......}un_..g/....8.(]..W..4<.G._."i..x...6.5....r50..j.)...NW...v...@Z.z.bj).k.........*....o..\..a.G.e..).[..[.q^...N).6}h.>u..2..,..G.i.....h.J.m^..N..o'.+..k..g.ro......z............Y=1.M..g.F.=...<P[..U..n@A....X....b.;.FZ{..3'...@d....X...8po.M.....-Y..0.T..:.E.W.8;DI...}........^...[.[.i..+QF..o....

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	250838
Entropy (8bit):	7.993335443845641
Encrypted:	true
SSDEEP:	6144:XdGaIZbpxUi1c9H9ItxUbrHXBpmSr0t7ZsbAx4UMgHZ:QaItmh9ItGbrRASr2J5
MD5:	36BEBC24F7516D37CBFBB4EE2AEDF6F6
SHA1:	C40BB63CBE7C48F67FAF8DB89240FD60F912E1CE
SHA-256:	03B2AE439D25E00E297B01942883F4EF8A6A5C87E01DD0FAEC6F1EEF24B92816
SHA-512:	3D2864B0559642B0928F6A131B4E718D001CB6FA805FAA4BCFE275FD051AD9F34D3434433F9819D31AEC495FB8DAF42F662250B304883C4BD8EAF4EA729ABBF2
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/t_main_Android_demo.mp4:2f757c583e4ca2:0
Preview:	... ftypmp42....isomiso2avc1mp41....free...}mdat...q....m.E...H..,. .#..x264 - core 157 r2935 545de2f - H.264/MPEG-4 AVC codec - Copyleft 2003-2018 - http://www.videolan.org/x264.html - options: cabac=1 ref=1 deblock=1:-2:-2 analyse=0x3:0x113 me=hex subme=6 psy=1 psy_rd=1.00:0.00 mixed_ref=0 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=0 chroma_qp_offset=-2 threads=7 lookahead_threads=1 sliced_threads=0 nr=0 decimate=0 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=0 weightp=1 keyint=12 keyint_min=1 scenecut=40 intra_refresh=0 rc_lookahead=12 rc=crf mbtree=1 crf=20.0 qcomp=0.80 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:0.50....$>e...)..DV.O......(..e.dfA.2.g..w..A.f`......I.r.,.... .`).......}....>......K...ka.5L........sw..$._?.V...T2.....dk'..#/.U......Q.`BO..Z..KA.;._`z.PG%6..4N..g.......,......>I.d.[....e.3d-..4.E7.$C...'...`....I..\|..T..r.#M...i...S.NS.....k./af.;`.......d.\|.......3.:..^.d...]A...d}.k.l.{...~..t.........;

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 163075
Category:	downloaded
Size (bytes):	14496
Entropy (8bit):	7.979392745644631
Encrypted:	false
SSDEEP:	384:U7IOQ8j3z6r6a06gUOJd34frJzgQpsWZBJn9H6+6:gIOzGlrOr34zPpsWt9H6+6
MD5:	78D3BCD9609C319C6AB7FC403D7F0180
SHA1:	49D91136FA50933FF1B9E52E23F214E578DC93EB
SHA-256:	7987BBA1A813626330B373BA05D4644D665378BB8F6A782D2297C101AEED1161
SHA-512:	4C0B0130E2E11A603EB307827C272C50DE058430977EC7123828BEB147CFD12D56872DAA1076184906DDDAE12CAEEB5BFD21663DB057C88E749808E607A34749
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001560/1/zLlKYgeDLoA.14496/62085b07461f2d87e4
Preview:	...........}Y..F.._....}.[..g....h....A....q..$u{....=...If....,)..&.8q".....>....+.....;'..w..O...{...+.xK../..}.n.~i?.{C...J.....}...o...=...+~...........5]....w/$............b0>.q..m...//..?y...(z......}....m......Wz......K~..n...V7Zk..m..?.\|=.g..7H....\|.}.k...o..........~~O....g.[.........\|.....Mx..;.S....W.1\|U..y.....a.#p..e..".D../.k....O\|.L..9..qA.!.........H..x........07.T...oK.Sj<3e..$F..i,.....#].....b...A.~..k^....]....(4.C..q.g..Q....8z.....F...%z.FL._...X-<_.(........e..Z\..p...h.^..S...H.L\(m..q..I..\Qd.37.%4.qU..s.].....o.4.=T8-..\|1L.31A.4.q.o..?"B..h'b<w_.(<. .....>.._..[.)..-.....F%a....=.pO..n.%.P....>.H.9..YI......Th{+.....i"d...(b..W....9%..+..rPe.p..I..H....e....F.._......R...VB.(....Iu.UX..".C-...7..!.C...!.H.."0c.d....D.%....}zM&........!.0.L..B. ..........h...^.{....hH.a.0...4".*.....mh%T.e...v.m~..;Fa.@R.@..7.....H.H.......7......Q`.Ra......0..fc.!.E..:mh..=g.\.".....D,..G.-..+..NB..Z...I....).N...l

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 163075
Category:	dropped
Size (bytes):	14496
Entropy (8bit):	7.979392745644631
Encrypted:	false
SSDEEP:	384:U7IOQ8j3z6r6a06gUOJd34frJzgQpsWZBJn9H6+6:gIOzGlrOr34zPpsWt9H6+6
MD5:	78D3BCD9609C319C6AB7FC403D7F0180
SHA1:	49D91136FA50933FF1B9E52E23F214E578DC93EB
SHA-256:	7987BBA1A813626330B373BA05D4644D665378BB8F6A782D2297C101AEED1161
SHA-512:	4C0B0130E2E11A603EB307827C272C50DE058430977EC7123828BEB147CFD12D56872DAA1076184906DDDAE12CAEEB5BFD21663DB057C88E749808E607A34749
Malicious:	false
Reputation:	low
Preview:	...........}Y..F.._....}.[..g....h....A....q..$u{....=...If....,)..&.8q".....>....+.....;'..w..O...{...+.xK../..}.n.~i?.{C...J.....}...o...=...+~...........5]....w/$............b0>.q..m...//..?y...(z......}....m......Wz......K~..n...V7Zk..m..?.\|=.g..7H....\|.}.k...o..........~~O....g.[.........\|.....Mx..;.S....W.1\|U..y.....a.#p..e..".D../.k....O\|.L..9..qA.!.........H..x........07.T...oK.Sj<3e..$F..i,.....#].....b...A.~..k^....]....(4.C..q.g..Q....8z.....F...%z.FL._...X-<_.(........e..Z\..p...h.^..S...H.L\(m..q..I..\Qd.37.%4.qU..s.].....o.4.=T8-..\|1L.31A.4.q.o..?"B..h'b<w_.(<. .....>.._..[.)..-.....F%a....=.pO..n.%.P....>.H.9..YI......Th{+.....i"d...(b..W....9%..+..rPe.p..I..H....e....F.._......R...VB.(....Iu.UX..".C-...7..!.C...!.H.."0c.d....D.%....}zM&........!.0.L..B. ..........h...^.{....hH.a.0...4".*.....mh%T.e...v.m~..;Fa.@R.@..7.....H.H.......7......Q`.Ra......0..fc.!.E..:mh..=g.\.".....D,..G.-..+..NB..Z...I....).N...l

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	999
Entropy (8bit):	4.203023852517381
Encrypted:	false
SSDEEP:	24:t9X8HzSYvdzSYvileIHlx2lxHv3IMyIC7BN9CSq/8+U00hPMCrz6f4RME:fKB5BigIHT2THv3IpIA9CVnUtMQse
MD5:	4ADC034F937B41471DAAEA71E64A727D
SHA1:	6B5C52D2A35704410262B70296A14D6A4331929D
SHA-256:	3399887FAC9F9B581A8C81860C56FCA807C0ED6876307A12C54E0161AA4721DB
SHA-512:	C6E865D3F4A6E33BD3E2F6FD0D157482C0D849820886E3D7761ADD57A4DF4AB3FE8D2F51847B4808803668309BBB9D5818B68F1E847EDC1EEEB3A7641249A302
Malicious:	false
Reputation:	low
Preview:	<svg height="27" viewBox="0 0 22 27" width="22" xmlns="http://www.w3.org/2000/svg"><path d="m19.35 11c.75 0 1.35.67 1.35 1.5v6c0 .83-.6 1.5-1.35 1.5s-1.35-.67-1.35-1.5v-6c0-.83.6-1.5 1.35-1.5zm-16.7 0c.75 0 1.35.67 1.35 1.5v6c0 .83-.6 1.5-1.35 1.5s-1.35-.67-1.35-1.5v-6c0-.83.6-1.5 1.35-1.5zm13.35 0c.55 0 1 .95 1 1.5v7c0 .83-.67 1.5-1.5 1.5h-.5v3c0 .83-.67 1.5-1.5 1.5s-1.5-.67-1.5-1.5v-3h-2v3c0 .83-.67 1.5-1.5 1.5s-1.5-.67-1.5-1.5v-3h-.5c-.83 0-1.5-.67-1.5-1.5v-7c0-.55.45-1.5 1-1.5zm-.55-9.54c.28.2.37.57.2.87l-.03.06-1.2 1.68c1.56 1.02 2.58 3.2 2.58 5.05 0 .31-.31.73-1.13.72h-9.85c-.68-.24-1.02-.48-1.02-.72 0-1.84 1-4 2.54-5.02l-1.22-1.71c-.22-.3-.14-.72.16-.93.29-.19.68-.14.9.11l.04.06 1.32 1.85c.7-.26 1.46-.41 2.26-.41.78 0 1.52.14 2.2.39l1.31-1.83c.21-.3.63-.38.94-.17zm-6.9 4.54c-.46 0-.82.36-.82.8 0 .43.36.79.82.79.45 0 .81-.36.81-.79 0-.44-.36-.8-.81-.8zm4.9 0c-.45 0-.81.36-.81.8 0 .43.36.79.81.79.46 0 .82-.36.82-.79 0-.44-.36-.8-.82-.8z" fill="#1086d7" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17975
Entropy (8bit):	7.968991791805153
Encrypted:	false
SSDEEP:	384:/QJwEzZkYmHWlAk99RDXjovjCKGzsawRB8icBLu5+r0lKOqke:I1V9mIAedXUvjCKGzHwNx5Vlc
MD5:	1D581B72D19BC828654229A0773A5300
SHA1:	FF517C8BB4B37351FF3DD72F7EC66FC584E90D5C
SHA-256:	D2B3858E94ED122782DE9028F668334438649E46E5D2C6D761E3359C8E3DE200
SHA-512:	1B98B05C5F720C34D470AF9606013E8DFEF2C88225AB39DDE906E4BEC48F84851BFA9C68BD99AEBAFEFAC35C8F99861A58A40DEB5C26CB74A5A19374FE7AEDEF
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001132/3/-1qvqKPZsQQ.17975.png/7d57d7159cf4fbe9b2
Preview:	.PNG........IHDR...............g-....bKGD............E.IDATx..}w..gu.s...~....+i%.-.W...1%`....\|......2...LBOH.I>z...!`..+6.MV......e..u.t.Z.J......{w........=.Xh.m.-......B[h..F.C0u.....n.a...9.@X....@.Db.....q?.s..\................n..DT{..RU........D[ ..x.& ......F.6.\..W..E :.h_SU...&....g........^!...P..W)....!"..#..i2..1<..7....^? ..I)..."5.U....W..q..BT..%.^.......33.e`~..o ".tj3@..e..\|S....hZf.~...:8.v."!O.8V<.V..5...X<8bcpX.g_.... `...@.._.6/..8o..~/......uLuLC.Kk-kr.C5D0...R.....\|8.....u..7K.Y.....!Lvn...HpT.QU.t.R.^G.s_..y...\|.I.H..C.\.DM.._.!9.D........}9..O...l..`d........D.......L.E.UU..2...`$z.a...........,.....'...,.q"...3N.........b.M.........".-1%.S.m6%S.H.i0d\|P@D\C.........GIM...0._oR}."...k'.,...7...e~..>_N.....r.a`.aps.Q.>.0..se.g..D...Lj..D.&.=..71.j...DR.H..).q...=7..x.. ....q..".......2...F...l....@....Y.2..$.>O......<!f^. %"..dD.a~;T_...[..n......N..........J;..3..2.1A.......e.&.[.{b...'.......T7.~f^n.\|.a \.4".!.of...$......

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 17, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1272
Entropy (8bit):	6.759893244400297
Encrypted:	false
SSDEEP:	24:ay1he91Wwjx82lY2T3ouVMgK5iyJ3V6pKzLXGLfarUZdR+p0tN:awqQNn2xCJ3xKjZD+p0z
MD5:	1ED9BF7633F4F449C8D2DF94EA0EB35F
SHA1:	2902BA9C2B127C74C2550298A0578D7D8DA941C2
SHA-256:	E7D23B06A4FFD600558E5443D1E32DAAAF13A27CF7BB8B7CC163A92B4054AAF2
SHA-512:	51DD36178DD85F062FEE20903A4F0981CA34EB24A7E7245191EF43D493CD47F756389E548A731109F1C0463BA3BD1D3D4F7C4C623639B9514EB2FB9619124F07
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/twitter.png
Preview:	.PNG........IHDR.............2......tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:BD511DF2556611E48F9585596B882309" xmpMM:DocumentID="xmp.did:BD511DF3556611E48F9585596B882309"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BD511DF0556611E48F9585596B882309" stRef:documentID="xmp.did:BD511DF1556611E48F9585596B882309"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.."...lIDATx..O(.a....19P....up...r...XI.M.."G.*)g.....f..p.h.....Rh/.. ..O=S.3..z..........5.it....L2+...i6g..

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 200401
Category:	downloaded
Size (bytes):	17388
Entropy (8bit):	7.987580630113294
Encrypted:	false
SSDEEP:	384:2crXYDzpzm5z0t0TJpNuYLv8V7xAA13zWHzj:2CUzpNS9pLvgAA13sH
MD5:	88C7CE379C5D6A55E0133A0B85FEAB54
SHA1:	AF1723D1CBFC88AC39B878645E82B1675D760F05
SHA-256:	38A05617438DED40DB7FAE3F70EFE9CD3ADFD0A14C0EC4AF08F1D73019A10663
SHA-512:	3877047FE6EA70C3371F55A922C85449B6CC958CF2D341E4058B4ECEC3A53BA2F65776EE44B4C36A4F8CD7029F3670D282B99C803A0625B8C158C36BDFA64220
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001493/2/hV6uPcaHk_E.17388/dcccb066a7b4fe44ee
Preview:	...........}Y..G.._..9..}..E.....=.v?.. ..eZ..K......9....A..z).I2..'.............<\|.`[.......r.y....W..G.G.z...T../...>...a.......7...[..?..z.../..w.~...<...Oo.}...?...>...o?. ..........z./..~..w..?..~..?o......u../...O..#...-...........z..6...4..G..._.~..o.........d.....\|k.od../.......Z......OvR.&..<5L.<..l>zee.#...../<...~..i0..x...h....w...8\|........xb....\.L.m.65..%)l..qPR..2.Rt...J.V.ZC<...m.l.....~t...N.Akn._.:..t>.B..t'C..R.1F:e..G........w..\|\.smu+.l..g.w......K..br....f..[.......o..Mf..i.#....6>;.M]...\.h.#..MqB...,.;.f......c...H.....<t.. .s..}...1%6 m~.........w..4.m\|.X.;<.........Ov..}..._}.....9.sg..h.tv..:v#.7.r.0=.f..I...xv...c~...a.t.?.4K.d+.\|2....{.9.h.<..._^I:n.........x.8.?.....9:..N)'.q.6...N>=K...W..~}..@g_..>..>...ex.#..j..].....}...G<.o.....>........\|...O.....\|..f..:T..4r....T...R/....J...JA...AeY..........~Wf.3.VW.......J.....`>....w.J.i....N.0.p,n.IG$..I;..3L..s....`R....0iw.&..4kJe.L._....v...[@.P.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	4.980767694952946
Encrypted:	false
SSDEEP:	96:jJkRRRRRRRRRRRRRRRRRRRRRRRRRRRRutRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRC:jJ/1MJNF6m9XC801f6x7QJGp18G2QR
MD5:	5791D664309E275F4569D2F993C44782
SHA1:	A68F363153614A09F10AE2892C134B9C4B001D4B
SHA-256:	4FF54BC38C267DC3A8C95F6ED4590336BAAEC70433EF15D027DDCA608C391E78
SHA-512:	93502A68F14FD4F87E0AA2CAD92A5657A8587E6ACB1C108CCD8CEB5E52776E77DF867962C51E1290316BB78027DA636F38C065294871B4400FBBC4DEDF622EE1
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................................................".."6."o."..".."..".."..".."..".."..".."o."6.#......................................................................................................................#..#(."s."..".."..".."..".."..".."..".."..".."..".."..".."s.#(.#..................................................................................................#..#-.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#-.#......................................................................................#..#}.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#}.#..............................................................................#:.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	WebAssembly (wasm) binary module version 0x1 (MVP)
Category:	downloaded
Size (bytes):	390408
Entropy (8bit):	5.640205401698211
Encrypted:	false
SSDEEP:	6144:y+3z9vKn2z9vyj+9R08Wcdmwdq6O2IQMKzoWVl7cunjfHjr5sP17RhnFJ/W:yMzZdR08a6O2IQMKzoWVl7cqjfHjr5sE
MD5:	E725DC036AD50BA694C90EE1F72C4B5B
SHA1:	09F0EDED8AA4CEB9AB1B326F5265DCBE9FC0B8E8
SHA-256:	F50ED354FD14CCE39533AF5FC58C0E4387A326748114C57A2CE3C98611DA673B
SHA-512:	17D8775ABB9180793C44278C36C7F5B9CC0609AE75CE0696763B6A5DE8A81D27A656B6B3B1665DDC2C7FE9CF3816E509DEF22EF71119CE0DE6F9D404041D86C3
Malicious:	false
Reputation:	low
URL:	https://telegram.org/js/rlottie-wasm.wasm
Preview:	.asm.......Y`...`....`.\|\|.\|`.....`.....`..........`......`........`....`......`........`.......`.........`.......`....}.`....}..`....}`...~...`..\|......`..~..~`..`...........`.....\|..`......\|..`.....~..`...`.\|..`..\|..`...}`.}}}}.}`...}}.`..}..`..}.}`..}...`...}.`..}}.`.}..`..}.`..}}..`..}...`.}}..`....}}.`.....}}..`..}}}}}}.`...}}...`.}.}`..}}...`.}.....`..\|\|\|\|.`...}..`...}}..`..}}}}}..`..}}}..`..}..`.....}}}}}.`.}.~`...~..`.~~.~`..}}}}.`.}}}.}`.}}.}`..}}.}`..}}}.}`...}.}`..}}}.`.....}`..~.`.\|..\|`...\|`......~`....~.~`.~....`.~...`.....\|`.......\|`........\|`....~`.\|.}`.}...`.}..}`...~.`.............`...............`.........`..............`............`.................`..........`.\|.\|...(.env.b...env.c...env.d...env.e...env.f...env.g...env.h...env.i...env.j...env.k...env.l...env.m...asm2wasm.f64-rem...env.n...env.o...env.p...env.q...env.r...env.s...env.t...env.u...env.v...env.w...env.x...env.y...env.z...env.A...env.B...env.C...env.D...env.E...env.F...env.G...env.H...env.__table_base....

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.4 (Macintosh), datetime=2024:03:27 16:16:22], progressive, precision 8, 600x350, components 3
Category:	dropped
Size (bytes):	256820
Entropy (8bit):	7.394979946893267
Encrypted:	false
SSDEEP:	3072:zNzdNziq0BK8VZYaZtzh+E9oaXRjBIPs+M3oapKQTkiX3wnO+kmK1KAnop:Rz/zqKmfZtzhJI0P4krAnOqmV4
MD5:	C4BF438F90794C480FD0FCAD5F1D8432
SHA1:	0D395450A43D6A94428A6F6C99B02F90A08FD262
SHA-256:	DB092C7E51035DE44DEE2650796BEF0601CAC17812D808020E5892657B1CB0F7
SHA-512:	3B7F079DAA882B9CFAD21CFE716D30FAEF2FC619C161782A430586DEF384F0031B0FCF0E9143EDA57C2BC4454DFE549FBCE16DBB348618E54D48A25D0297226C
Malicious:	false
Reputation:	low
Preview:	.... .Exif..MM..............................b...........j.(...........1.....!...r.2...........i....................'.......'.Adobe Photoshop 25.4 (Macintosh).2024:03:27 16:16:22...........................X...........^..............................."............(.....................2...........j.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................]...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....\|Z.\..Ur.......z...sY._]...yk..v.;}.......k.zed...g.z.]..-s.....3M[l7..w...........l...3.DJ...\|xa(.9p..........p.......w.vZ.?Xm-...E....{..

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.4 (Macintosh), datetime=2024:03:27 17:06:42], progressive, precision 8, 600x350, components 3
Category:	dropped
Size (bytes):	239216
Entropy (8bit):	7.314340666123727
Encrypted:	false
SSDEEP:	3072:iD/q0BK8VZYaZCVTUUlCdmLCAfAx5ySq/S6yA5UIeVZJCT6t5m4:iDNKmfZYHfAbhqWPTXwT85h
MD5:	552BF5DF1E3C72027BD94CCB8DA700FC
SHA1:	CB57B82232FF1271E5222C818E27DD63F9A7409D
SHA-256:	75D1E62847C8B3A5DF29A842EDBAEAA0BE92EE69915DC8413EFE789176F67BA4
SHA-512:	C5EC8FF48C711BA9270EB78A673FACB7F2402F97C695AE4AA925472439C1EF9F4E8F59B5954B5E017CBE302A0EC4E1DD3BF5B53B20107F1336C2D66CAF1638FD
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.....!...r.2...........i....................'.......'.Adobe Photoshop 25.4 (Macintosh).2024:03:27 17:06:42...........................X...........^..............................."............(.....................2...........Z.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................]...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..B@.Uw.c..w..F.6...W'.++..QY...Z..K\F...o..'..yrp2.$}f.w..}I}....ce..F;...w.X........n.=,........;....`1..p.R.s...w.X.........u].O..G&%p..N..9...z...J..

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.4 (Macintosh), datetime=2024:03:27 16:16:22], progressive, precision 8, 600x350, components 3
Category:	downloaded
Size (bytes):	256820
Entropy (8bit):	7.394979946893267
Encrypted:	false
SSDEEP:	3072:zNzdNziq0BK8VZYaZtzh+E9oaXRjBIPs+M3oapKQTkiX3wnO+kmK1KAnop:Rz/zqKmfZtzhJI0P4krAnOqmV4
MD5:	C4BF438F90794C480FD0FCAD5F1D8432
SHA1:	0D395450A43D6A94428A6F6C99B02F90A08FD262
SHA-256:	DB092C7E51035DE44DEE2650796BEF0601CAC17812D808020E5892657B1CB0F7
SHA-512:	3B7F079DAA882B9CFAD21CFE716D30FAEF2FC619C161782A430586DEF384F0031B0FCF0E9143EDA57C2BC4454DFE549FBCE16DBB348618E54D48A25D0297226C
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/400780400906/1/nG_ME-jFfII.256820/2569601ad1ecf4c3c2
Preview:	.... .Exif..MM..............................b...........j.(...........1.....!...r.2...........i....................'.......'.Adobe Photoshop 25.4 (Macintosh).2024:03:27 16:16:22...........................X...........^..............................."............(.....................2...........j.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................]...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....\|Z.\..Ur.......z...sY._]...yk..v.;}.......k.zed...g.z.]..-s.....3M[l7..w...........l...3.DJ...\|xa(.9p..........p.......w.vZ.?Xm-...E....{..

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x320, components 3
Category:	downloaded
Size (bytes):	12164
Entropy (8bit):	7.906866548284266
Encrypted:	false
SSDEEP:	192:2TbbbbbbbsMSbbbbnuZYZaUXaGbb43HzR46i271VK08qmwcCU33N86M7IJbkHg3H:eAMcakYHGL27XlFUH3OHcx1ivEPt
MD5:	35A701DA2F909A30B46D59732C83FF93
SHA1:	B42EFD00A8D2471F8FDF5F2E17CBB3E51560705B
SHA-256:	07A07050456F0AEACA176392FFC41360567B7C60A51F4C6C3F6A82CB573FE0CE
SHA-512:	948CB660CC34B338A34EC5F29E221996E87CD627363442B72B977963DC50F15D0FD2B7A8C2890014F6EA55864BFB7563D37653E882E2DE7C867F4C9B54014831
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/L5wseH0PdrmEcU_jcZbpJjndKo6Z1capwPo5WAUBVcgd-WR5c60_Dl8kG6CeE-nqmHg-sErC5p_7YIHRvBtFZQBY59b0cAw5lYjvfNc7405i05qLLGYi_pPsL_kwiNd4bkExysZtGz5orIeM4msdrDDjLNKlumINIDSLKbOUMnL3qgDAO8MPT2n1Ao7MkWQguZTV_jKo_PTm8bHryHKVZcdfMrILhFiU-7v0BvyISHzadm14bI1trWzevQUGsW97AEKmYI3qRcOIlgq-NBvXkJmKhaG2rQR2uf-IUVbeN0qHN0ZYGJkfVFbKerbyiptnaAqppqeVKl_9-3l0jE56BA.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................@.@.."..........................................@............................!..1AQ."2aq..B..#Rr...b.$3CS..4..c.................................2........................1A..!Qq...."2a.....3B.C.............?..4D_....D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD...5....o.;...Fe....6... ...!Y}..O..3._5"..]..S.j...u5.0.F.o.#q.>j/;>.n*....2......&.]..fxB35.{wc.......t.4..V.c..3(!2P.B.a..n#......P..DR..km.m....>.....#.Z..,p5....U..c.K,.:..\Ssi..1...E,.............................................$...ed.h3.vzzW..Ev.\|T....J....J.i.J.......IN.:....-.......p.n.../.".J..^.v..... ..........hVY.H....\.-s....%....:C.j.E6...7.~...h.w..z.....}#....oV.{......Z.4q.jj.$..&..IZ.[..%k,.]"..o5.2IUAZ.g{...

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12690
Entropy (8bit):	7.965297749406023
Encrypted:	false
SSDEEP:	192:qU6SieKSVdeYciqBy/VHaqqtsNEQ8bwRP46NLvDMm5GebYlttyr:qz9e7e3iq+HlHs0qaRkJAr
MD5:	9C2A194EE50807AE9342B60634BE2445
SHA1:	553DFD2BA2A5E11468A3B57ABA897995F2F4D676
SHA-256:	EC1788BCDD05595BBCD16E5C7C13BCE6481B620EBBC4200B2E6598C02C82AA78
SHA-512:	27018DB71B0A93E3E68E42E0F9DC8528F7C807571C5ED1C1330BB5FAC68A1685869BF04043167F885EA413AE6B0ED029CDEDCE64B1354C0DF367603ED0BAA67A
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001880/3/xOpm7ohoHQ0.12690.png/feb1e161b1d3608613
Preview:	.PNG........IHDR...............g-....bKGD............1GIDATx..}yxde............44I.........0:0.. :...#8.\|...-. ..(2.3...:.\|.@...f.Ng.S.]....J-.:.T.n.<O=.T......g....T.Y$.0....m..r..../X. .....T..)-.dHD.!..T..\|.....M.JR.#...h..4.V..,....AU.U...f.@.B......\.Y....p8......q...S=.Y...MJgc...7T......X..%..I..).!.:. .G..n..VT.DJKTQ...U..0..2@}.\....@.%.$..b....D...G./.f..G.....F.....`=.Q:..,..J.G.-,h.y..0. .2...$6.A"<.....}e.v....f.:.......t."....z7.U..uU..<../.. ]..{...u....5...-[.X..$8.WVy.......QhB.3!..d.. ..j.%.U..@B.Q.y..U5..o....m..$..9.........p".}GI.../S.'..~...B..E.........4)CM]...Sh....=....} .......sy>7l..h....<...tI..c-.m5.\.........!\c...P.1i.Mx,......z@...@t.......k._.......E"...:MMM...2\|.o).r..?9......i.......TbL..Q. \|... ..g.z..p..(.`d0S....XnC.E....A..Dd..a.]..\..m.....W.......yr..7..[.r......t..U...&.....9.*./{....[W...8...U...@...........+...E.......R.{...;..U.a..e.\|g..(......^.fQ.....r,.^h..MP.1.'V)$..i..L.<..D...>.......q..."

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.4 (Macintosh), datetime=2024:03:27 17:06:42], progressive, precision 8, 600x350, components 3
Category:	downloaded
Size (bytes):	239216
Entropy (8bit):	7.314340666123727
Encrypted:	false
SSDEEP:	3072:iD/q0BK8VZYaZCVTUUlCdmLCAfAx5ySq/S6yA5UIeVZJCT6t5m4:iDNKmfZYHfAbhqWPTXwT85h
MD5:	552BF5DF1E3C72027BD94CCB8DA700FC
SHA1:	CB57B82232FF1271E5222C818E27DD63F9A7409D
SHA-256:	75D1E62847C8B3A5DF29A842EDBAEAA0BE92EE69915DC8413EFE789176F67BA4
SHA-512:	C5EC8FF48C711BA9270EB78A673FACB7F2402F97C695AE4AA925472439C1EF9F4E8F59B5954B5E017CBE302A0EC4E1DD3BF5B53B20107F1336C2D66CAF1638FD
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/400780400268/1/6Avx2xeE-E8.239216/5a7f21012854ea61ce
Preview:	......Exif..MM..............................b...........j.(...........1.....!...r.2...........i....................'.......'.Adobe Photoshop 25.4 (Macintosh).2024:03:27 17:06:42...........................X...........^..............................."............(.....................2...........Z.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................]...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..B@.Uw.c..w..F.6...W'.++..QY...Z..K\F...o..'..yrp2.$}f.w..}I}....ce..F;...w.X........n.=,........;....`1..p.R.s...w.X.........u].O..G&%p..N..9...z...J..

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 17, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1272
Entropy (8bit):	6.759893244400297
Encrypted:	false
SSDEEP:	24:ay1he91Wwjx82lY2T3ouVMgK5iyJ3V6pKzLXGLfarUZdR+p0tN:awqQNn2xCJ3xKjZD+p0z
MD5:	1ED9BF7633F4F449C8D2DF94EA0EB35F
SHA1:	2902BA9C2B127C74C2550298A0578D7D8DA941C2
SHA-256:	E7D23B06A4FFD600558E5443D1E32DAAAF13A27CF7BB8B7CC163A92B4054AAF2
SHA-512:	51DD36178DD85F062FEE20903A4F0981CA34EB24A7E7245191EF43D493CD47F756389E548A731109F1C0463BA3BD1D3D4F7C4C623639B9514EB2FB9619124F07
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............2......tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:BD511DF2556611E48F9585596B882309" xmpMM:DocumentID="xmp.did:BD511DF3556611E48F9585596B882309"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BD511DF0556611E48F9585596B882309" stRef:documentID="xmp.did:BD511DF1556611E48F9585596B882309"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.."...lIDATx..O(.a....19P....up...r...XI.M.."G.*)g.....f..p.h.....Rh/.. ..O=S.3..z..........5.it....L2+...i6g..

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	30567
Entropy (8bit):	7.982782008745682
Encrypted:	false
SSDEEP:	768:pYweyGgLyxCaJ1leoVAqIuOlHPUfFbqqxViqR58IWE1:pX2eaLzOlvEAqxhR1
MD5:	0C6C45EE2597151FA5E955D11D2D38FE
SHA1:	771AA6BBE2765CD2D6F754E14D5E12FFC476E939
SHA-256:	889DDFB8550BAC935B0A02E52BEF9D0950F0734D7A70661A0930A3D8E6A2F372
SHA-512:	BB4808E6B52F06991E9FBEB6E6E0D64B0AFB4E87076A9CAD8543494605CD2D0DC2F1D0007BF8C588C5E7682A87EA63F83BCC6F9C847DD60B3E3024CB39BBBD85
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@............bKGD............w.IDATx..wXTg...P.h...%F..d...F,.F,....)3........H."...b..M.b......{. .\|..?d.........y..Y......y.s..............................................................................qjeg!.l.Jf...,..+M...F......u.o.....S"""zo$1.......YH..[Ji]ag!.mk!Yik).%.....;).......,.....[Ji...Y0..?.-.O.....+.".&...;!...m.,..T S..V.l\a..b.. .i....t......>.....YH.U...:....r....Br....\|.DDD.Jv}..v.......B...... l-.T.\|ek.0.\|.DDDo...[....d.z....^M.m_.7.`.. .......Y.;..ZH..,$J..'...p..L..!..>x"F9..C.G...Tg...z.}M.."".:...y....iv..G.......\..@6..Q.....+G..X.z.c..h...C..y.......r.B"......>...p.P.e...3\|.MGl`.#.."xZ...C..'......\|3DDD..A..?...l.P..W..$.)....>..c..`..T....,iD.%"".......v..h;.I...>.(........4#* ...C...hk..F.-""..Sy[.......:....l.).u.o._8dc\|0y.Tx..!.#.1........O...p.^.Y.@`@.5"".jI....4N.........=F...............p.x.2..$.)`.......}..'....Q..g!iog!9..?>--..LF....\|.Q.<l*.-..^....i.V.....j....F.o....J..pi.......

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	999
Entropy (8bit):	4.203023852517381
Encrypted:	false
SSDEEP:	24:t9X8HzSYvdzSYvileIHlx2lxHv3IMyIC7BN9CSq/8+U00hPMCrz6f4RME:fKB5BigIHT2THv3IpIA9CVnUtMQse
MD5:	4ADC034F937B41471DAAEA71E64A727D
SHA1:	6B5C52D2A35704410262B70296A14D6A4331929D
SHA-256:	3399887FAC9F9B581A8C81860C56FCA807C0ED6876307A12C54E0161AA4721DB
SHA-512:	C6E865D3F4A6E33BD3E2F6FD0D157482C0D849820886E3D7761ADD57A4DF4AB3FE8D2F51847B4808803668309BBB9D5818B68F1E847EDC1EEEB3A7641249A302
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/SiteIconAndroid.svg
Preview:	<svg height="27" viewBox="0 0 22 27" width="22" xmlns="http://www.w3.org/2000/svg"><path d="m19.35 11c.75 0 1.35.67 1.35 1.5v6c0 .83-.6 1.5-1.35 1.5s-1.35-.67-1.35-1.5v-6c0-.83.6-1.5 1.35-1.5zm-16.7 0c.75 0 1.35.67 1.35 1.5v6c0 .83-.6 1.5-1.35 1.5s-1.35-.67-1.35-1.5v-6c0-.83.6-1.5 1.35-1.5zm13.35 0c.55 0 1 .95 1 1.5v7c0 .83-.67 1.5-1.5 1.5h-.5v3c0 .83-.67 1.5-1.5 1.5s-1.5-.67-1.5-1.5v-3h-2v3c0 .83-.67 1.5-1.5 1.5s-1.5-.67-1.5-1.5v-3h-.5c-.83 0-1.5-.67-1.5-1.5v-7c0-.55.45-1.5 1-1.5zm-.55-9.54c.28.2.37.57.2.87l-.03.06-1.2 1.68c1.56 1.02 2.58 3.2 2.58 5.05 0 .31-.31.73-1.13.72h-9.85c-.68-.24-1.02-.48-1.02-.72 0-1.84 1-4 2.54-5.02l-1.22-1.71c-.22-.3-.14-.72.16-.93.29-.19.68-.14.9.11l.04.06 1.32 1.85c.7-.26 1.46-.41 2.26-.41.78 0 1.52.14 2.2.39l1.31-1.83c.21-.3.63-.38.94-.17zm-6.9 4.54c-.46 0-.82.36-.82.8 0 .43.36.79.82.79.45 0 .81-.36.81-.79 0-.44-.36-.8-.81-.8zm4.9 0c-.45 0-.81.36-.81.8 0 .43.36.79.81.79.46 0 .82-.36.82-.79 0-.44-.36-.8-.82-.8z" fill="#1086d7" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 131568
Category:	downloaded
Size (bytes):	12545
Entropy (8bit):	7.9793641338070485
Encrypted:	false
SSDEEP:	192:jLtIfnlwvz7lLADyZc8lcXDtUGy392BtB3u41k74kfRRoaZGGW5BO+r1RyaGBw3s:ft6nlwbDZeDtdyOZuAeRuaZGGkrJM4dy
MD5:	6FFE0373E13C95E1253EE372A3D7FEDB
SHA1:	BB6C4764E927A8ED8CBF14BABEA3E28FF1F07D4B
SHA-256:	1F0B318040B210A65B48D386D9680B29212DA0D01DEE9CC9F56D485334BDC11A
SHA-512:	0027C6A1E23A389699C385A2646ED2BFDCDEC4406CDE2C0E0155906296B44827D114B1F4B62FC08BD519B3F2973A23538C485C3ECC62675E537AE81C4E460B17
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001812/2/kLAK2TPyvUU.12545/f68c1caf735a2ea3db
Preview:	...........}]...._1.U(.w.. 8."..\..d...;.O.....l.._.V..%.4.Q.G.w>fFj...b.X."....~.......\|s.WF....7.....p...z.(....\|..t7.......^..o..../~....W.^..^~...3....n..;7?.......}....B..7....\|.[^.q.O..~...W...;...._.[...O..[....s..?^......:.J.w.......#..S...._..H.5\|..\`..d....,......'>}.w<.....t[4.+.... ..f/..Ji.=.....^..u..{.m.0.._'...PW..^...i.0V........Q!.U.W..0]'.........B...~...O.\|...?..L..._..7.. ......kR....d......<.........].....I....Y.:..b....._{.;]^.Y..A;O...g@..<.vrlO...q..3n.&.1;q...3....L..K._=v...#..3..7C.{Ku.._&.;.. ..Tw.z.^.[.[X.P..8.<.8R.yKO....i.B\|..xF.G..+..zEv..u.....w....K./k.&.}.....pl........[.'7./.b@..k0".dD.......ibDx?.w.~.^c.L.M~.Xq.@.9...4fP......\e.R.w...=....@J..u..L....G...#.y.Q....s..cS.....Y'0./......\|..S#...pF...V.3R..RH.R.......9...O......9..'M...V.....o/?..Nn..7.~d;.....(f.\...Mo....W..E...X..V.c\..6.2).LG,..J9vY%+/......m..N+...OM.}..*.XV.......'."......3..of+....)....Cy..._).5.A...l.{<.-.l.),@9.

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 84899
Category:	dropped
Size (bytes):	10147
Entropy (8bit):	7.978558662114035
Encrypted:	false
SSDEEP:	192:lpDRXgHvBXf1MMxURXLOq7Xq3y8CVUUkeJGyCgBikBflL+ubMrThh4c:TVef15xURXyqzky8stJG8bRENhL
MD5:	4C55012442A6CC9653DCADBBB528CD22
SHA1:	AE83B62952FF7E4428C85793289D7423ECE52F05
SHA-256:	CF2D5FBEE6986544DA6202828C01898BCB8E8DEBC50611E0C7433E8066834C61
SHA-512:	99FBF683182B1BFA806374068A6BC857419BE0BFE8D582056D8F709A0FA6B0B9E5EB285661C419246C20C66B0E1A8DEB7E026B3FF5D137D0FB4DCAC608880E09
Malicious:	false
Reputation:	low
Preview:	...........]Y..G..+F?..y.~[....4.`.'C.d.mi.: i.k....."...b.]$..\30.,......q..n>....[...........47?...6.....o..[.......[.Ms....5~.L......._....?=....../^...>....#&..?7......=S.....o....z.B ........?.<..O.....}.....^..+~....\|y.?......w...'........57.W.[o..6.C....C..u.w.qQ.9.F=.o.A..U.b......8K..N...Tj8Q7/..Xwb..O...?@.... ..Go.....vuc3.+...9....%...;.....7....o..._....t......=.z.05.%.LlI?\|.:.6L.n[k.}3t.."...Z.6)]&IG...qz.Y....X..t..'.c.$_.~..o.....-..*.....w..<!.........I.U14&.6.]........7...`.>.r\|S...>....G.m...A..>....O6Z.fc".....u..o.~~..........o4.z.......?...6.........-...>..I.....?...............^.~?.\|.G..P@s.~..L.....}x..H.....o>.....OOw.K.+.X..-.{,...&k.........r..O.w=_:.>...{R..1.6..r.}y"8.Wo........v..}..Z..;...7$..#.z./J.e...........lc.ksr...0.&Zr.o..._.....Rk..;;.M...>...{.........#GW.wt=no.. G.6..l#..Z.lRX...g.}H.\..\|.W...x....o.=.......ck...\|.uk.N.m'o.../.2.3.>....9...c\I...X....,.e..U).=..A....c....0\|"....Q.... .M`.^=Z..l.3(....

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	443
Entropy (8bit):	4.445437815127597
Encrypted:	false
SSDEEP:	6:twoMTqNzdI9mc4slma6UnaLUsvL9F7JLRMcBvxLU2dTkT30lI9P54AJex0JbrKDm:t9XMIX2A3vLv7JLBBJV/sPpJeWJafS/
MD5:	008103375773357B988BF6B4E7DFF3F3
SHA1:	908CA865AC3A7F6B57DC7D5DB70A429CFF959E98
SHA-256:	A5C59C1B52F5DD4D1C06A628F27079F4481D0EE7B40BCCD1CD91FF963E2D674F
SHA-512:	38838694555700DB092B3ACD3EA9DB83EDF59DF7867BC952FB29218B840629ECD7882DA1F67BBE59A61BC0635223D75F2B3C72EBC7C870EBEB1EED57F9CECC1B
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/SiteIconApple.svg
Preview:	<svg height="27" viewBox="0 0 21 27" width="21" xmlns="http://www.w3.org/2000/svg"><path d="m17.49 25.5c-1.35 1.31-2.84 1.1-4.26.49-1.51-.63-2.89-.67-4.49 0-1.98.85-3.04.6-4.23-.49-6.76-6.93-5.76-17.48 1.91-17.88 1.87.1 3.17 1.03 4.27 1.11 1.63-.33 3.19-1.28 4.93-1.16 2.1.17 3.66 1 4.71 2.48-4.31 2.58-3.29 8.24.67 9.83-.79 2.08-1.81 4.12-3.51 5.64zm-7.16-18.82c-.23-3.51 2.6-6.4 5.85-6.68.44 4.05-3.66 7.08-5.85 6.68z" fill="#1086d7"/></svg>

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42164)
Category:	downloaded
Size (bytes):	42523
Entropy (8bit):	5.082709528800747
Encrypted:	false
SSDEEP:	384:6RvBBVkrJxvcwYBUQ7X85AUfvDUNeFUBOgBmjeYP4PSvSdlb1bGjpXJNNRyIrOM:2k0p38OBmjeYP4xb1bG/bRyIH
MD5:	C2656E265EF58A9CC9F4B70B15DA5FB9
SHA1:	85C5EBDB89D4574D72688C2650D4B84B9B09770A
SHA-256:	F1D083FFAA644C708F11DB29707AA57C19246E6D32643B03FEE3F82C17B224B3
SHA-512:	6417AADEBEEF4EE35381BFC7034148D57FD061D84DE9974D798468C6426C24A6BD1C9913CF517ACCF3E349FA06CBDD546D2883EA8391C595285FE0C6127E26E8
Malicious:	false
Reputation:	low
URL:	https://telegram.org/css/bootstrap.min.css?3
Preview:	/!. Bootstrap v3.2.0 (http://getbootstrap.com). * Copyright 2011-2014 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /../!. * Generated using the Bootstrap Customizer (http://getbootstrap.com/customize/?id=92d2ac1b31978642b6b6). * Config saved to config.json and https://gist.github.com/92d2ac1b31978642b6b6. //! normalize.css v3.0.1 \| MIT License \| git.io/normalize */html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:0.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{fo

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 144400
Category:	downloaded
Size (bytes):	17422
Entropy (8bit):	7.9862827586756735
Encrypted:	false
SSDEEP:	384:2e0AYD0jWxy8M4gQBv+fImQpItUdkIUqi1nSs2quA2KtyfYoC/LA:R09DLhfBG7QpIemIUJ1nXznyujA
MD5:	86D83D04E8CBDCED71F34637C23C1EB6
SHA1:	2AE58F60868535644CEB753735DB7191D65A6723
SHA-256:	91286A9F171E3435452F7FC0523F2FC626A142C1EB3F29BDC38B74335E229CCE
SHA-512:	09C8395CCA30E5F3A1A3C35F63C91C57878BB70D35A00863A98DF4BBAB2BEBC3B78B4BA6E58521B4812E40770FCC4FFDCE173C2F6D95D96EE26589AFCF25CDC8
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001418/1/fabnJFzygPY.17422/bc9dec9fd8bd26e00e
Preview:	...........}m..Gr._1...... 7X.H.d./. .k..].2$..:......{8$.<$gH.#..{D.g.........>....[......C.Co....><\|.M...o.....e........./.._..C/../....._....z....g~......_}........}x.W.....o/......?....7..(...........}.........._?=\|.x...........^..y.....d...,....N...........F.....Q./.y........W....`..?..9...+.U.(?\|...\|<.7.....>..=..s..U.\5\|...u.......K..=6eC...x!...=....T,.._.v.....1L6.S.._..f\r.@..y...Wo?..H..i...TKoK.6\|.I.L..#.&..fjK..u.l{"/..wI.x..O....g.....s9k.....1v..c.......<3>.<&..^4......C(....Ko..\|0.._..w.....>....#...Q..`p..j....<.......92...=...K2.?.x.....x...z.?...o.....^..T.,..X..1.S.....bHI...p.T...w..lB..8...Y...oK.y..:P.@a;WK}..s.T......l.)...\.....g.G..}.u%.O.$:.........uD....).v..t....3...$.Y...,./.t.....^.2.K.....1..[...m......'.ing..vN.4~..{../1a....dq..>....KO%v.g[..n.v...3....{.'(.Uz$...Y..@z....G3.YNu.c.....e....h......%B.......m..q@.<..J.Xft.s..1.P9...S...\|b.......X.t..Rc.f...J ..[W:&~9.*.&..4..;...?.D.vK6=..P.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 290x270, components 3
Category:	downloaded
Size (bytes):	21090
Entropy (8bit):	7.878614475283644
Encrypted:	false
SSDEEP:	384:3j0OJMdamjE0cVsRQK80uxr+IsTJo7qvrgAK56GEUUW5tXnwu:34fHEGupslo7q8AK56U5tXwu
MD5:	F5EB8DCF9B18F19053034101E920574E
SHA1:	9513C6C5E39669AD27132D470008955DBAAE61F0
SHA-256:	15A94720D72ED1727FB281ED4AF914E17CD8166BB18F5A8484F32F9FAFF4F365
SHA-512:	950178CC71BD88274F49E6248A078F4F0FAA95E7188C2E69E2EDC62D874CABF5EDDA83DECE9FEE9C657B05CF52760E513F5161B34BF5FE8232923E008DCA34C3
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/SiteAndroid.jpg?2
Preview:	......JFIF.....H.H.....@Exif..MM........i..........................."...................8Photoshop 3.0.8BIM........8BIM.%..................B~........".."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C...................................................................................?.....(...(...(....O....e...[..0.x.Z..i).......rT.........N.....).\.._Q...u...K._..TnC[.(24~.#.{.Z.....?...Nl....7Z5..o..l..k=2.<.{,.Q....J..h....Z<q.[.UT.&.P0@P.0...n........D.='....k.%.G..}u.........o.[..-....7..._..x.F.e.h..7....fVQ..gl{.x

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15740
Entropy (8bit):	7.954978172464159
Encrypted:	false
SSDEEP:	384:AwIpVA9llRR/+5BrSOxNbCGcIvTeSEHIGbi24fe:8Vul+5BrPtIIvTeSEHRiV2
MD5:	4E59E61B2A0205E09DAFAD24DA174530
SHA1:	0DC2ADBA2FBE4F1CD195364EF4F1AB4DC1641993
SHA-256:	269F20EB63DB3ECE8035886EBC69112EF94339DA867D47F815237800555E508A
SHA-512:	8EE876A60C4D511BEB1229678E34D5F91C34DD8EDA4CF792DC521DB76CB8338480B3C265181B3AFB7446D3992E243D590A09494CB8E10FC4268022181BABDA28
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001453/3/mNzXWC3RX0c.15740.png/9ce5fa5f3fb74460b4
Preview:	.PNG........IHDR...............g-....bKGD............=1IDATx..}w..gy..yf....^/:.n..,7..Tc0..d..P...........@0n. ....\(.Lq.......-..u....3.<.?fwg...k...\|.s...3..w..>...y.....=...`..\..t.J.....q..tL...S0^2N....z..\|L.L......Y. 4?'...N..).$bW$..<...h...k..d...I..L...)...tR.(..i..SJ.!:.<.'...0...w....!.....S.)bU.2I..................c....o....m....X......t.@u ...,..D..........=....V...l.I....y...........3.:.....=.:\|..F..h....#"(.....O@....I.{c~.~....\|..>t....x3...8...-..(.... ....`C.&A.@.....p.4&...Z.$...z?..9..x.<..\.=..#..6..... ...S."...@...F.X."........@..E>...j!...>oVN..S......+..@f...F..>..g.....9......\|&....a.+r<3,.$.....p.`.}_Q..b..;.E.VW....@ 8...s..6.\|...(.IW.Lv.....+....-H.n....<.g3..Kup.= ....G...zE...T..q...L....@ 4.<...]..A.hZ;.9....Qlo..M@(....t..z..N.G.{.......W?<...D....q=.....a.W6......T7....W......W.t...@.wU@....St.......@U..m......w.Gv...'........<.g...e=...p)..e....'.....B.;...X....o....4pD1p..l..a.s.8..@v.;........../..[.....?._...

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	19325
Entropy (8bit):	7.97541212859293
Encrypted:	false
SSDEEP:	384:/fkqoRm5m06jc+ejLD9xyVF1gX+Bq3lCTiqvfKs90HmFOGJaIv5Se4:/cqo25lu1RBJmYtiH8OERvK
MD5:	DA1FF638A4141EED84327E20F936496F
SHA1:	91E5410531539B53C3AEFCC5774413E8A665A57A
SHA-256:	B66DE388C12D6611870503C34C5DB37FE079313C4292177435FD8DC7ED6CBE67
SHA-512:	75B6243FEB853275A9E4AA1C36591CBDC3439CD27489CD5833F8670E072ACECC59888699BEBD3FFE5F8D1851608394D3255EAAA863DB438511CB4798F99D334A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............g-....bKGD............K2IDATx..}w\|\...3...U.."....c..0...LH.7..........$..I.P....p...{..-....w..c.-..r........ig.....0}....v.<,.;l...M..v.W2#:......,.+".C.\|..'....".......x...3.......<P.].....p.a",.....:...P&@).#.:...".........=:\|.'O.._....').?.t.@......+..Y..}/.Z...q.._#Rg..V.v...?{.WO.0#zu... x.@#..w.i3...q.....0.D4AD~.....:!.O..w.-..?..&,..8.3Z..y......O.[D..Ci._r.i..s..'`.F..........g..."3.u.[.F.Rc.Q.".....fK^.b...8..g....k.....3"r.....x.b...........`..9....]...M!\|.HU.z.....sV....w.x..y...~....3.<.....fk.......M.................V....??th(.\|..E.2.OD.$.v...r....~A.t./.J..Ep..3f.y.m........`.f..&...'_.r...."..n..Q.....Q~....D.qm.....c.......jh....M.x.\|[.......0..Y..}..C..s...}.Z. x......(.....EP...l....#..w......M.=....xw).._..6.i}p.ub...?........4........v7.}.P.?..`y....9.\p.../....3f<...u..ya=......'~.....~.kG.*....[.....w.........C_...k6..-.>]..<.\|.,.&B.=..k.@....O..@...;.y.....8..?..\|.}r..F>.........$._..%

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	4.980767694952946
Encrypted:	false
SSDEEP:	96:jJkRRRRRRRRRRRRRRRRRRRRRRRRRRRRutRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRC:jJ/1MJNF6m9XC801f6x7QJGp18G2QR
MD5:	5791D664309E275F4569D2F993C44782
SHA1:	A68F363153614A09F10AE2892C134B9C4B001D4B
SHA-256:	4FF54BC38C267DC3A8C95F6ED4590336BAAEC70433EF15D027DDCA608C391E78
SHA-512:	93502A68F14FD4F87E0AA2CAD92A5657A8587E6ACB1C108CCD8CEB5E52776E77DF867962C51E1290316BB78027DA636F38C065294871B4400FBBC4DEDF622EE1
Malicious:	false
Reputation:	low
URL:	https://desktop.telegram.org/img/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................................................".."6."o."..".."..".."..".."..".."..".."o."6.#......................................................................................................................#..#(."s."..".."..".."..".."..".."..".."..".."..".."..".."s.#(.#..................................................................................................#..#-.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#-.#......................................................................................#..#}.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#}.#..............................................................................#:.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 102073
Category:	downloaded
Size (bytes):	10959
Entropy (8bit):	7.979994782862011
Encrypted:	false
SSDEEP:	192:Sq3PR72ctqmVQvWnigEmVxdobM5cFOvCZbZ9gAJxhJuKwi6Sy18YapNjagcvb1CG:Sq3PR7jtmAHB5eOvubZ9bNDgvapdBcpr
MD5:	FCF0262BEB96C58FD7AEB5C0BB8FC4AF
SHA1:	22C51ED3EB77FC79AC3FE8131F8CB08C9AFD532E
SHA-256:	E81EA8894A34C2673DC7E7AFA5055EDED2622F15DAB8F452EA79C240C6969F3F
SHA-512:	11422AFA3F696C703AD2B0CBDF00F2B5C099FB40BE43C82EE17686383AB5AD194AC6EFCDF4DBC65BCFC3B7C3E62AD6811A6834386B7D01D9E89791C051DED060
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001880/2/VGTLBN3QuYM.10959/8940838e7dddc787d8
Preview:	...........}......D..#.w..b.b.,.#p.'q6N..>'....~U..VK.3...sq.i.".E.X.....>.}k....}{.TP.......Qww?.~.-...1......`lw........Z............'}.............^uw.^.y....5....7<.?.....D.oL.^>~..G..}..^....g<....V.9........i\|....'...h...~....Ez.F.....h.V....\|,....M.T..3....4.x..X...kz....,o_.~/..6.~.@......7A.....n@..)#..Q!D.........w...>..(.n.m...+. ..,KgB"l[.a.J9......ULD.I.76...y.......x..........[...}...;...u......uV.R.o..FeM.)o..{...h...k..y....gB(.Yl.}w=.Y\|/}.....s..6...P.MCz..!.w...;.......YL.g..Y...j..K3...^..94.[..+..Y......+..W.3:..Dz`i..^K.xja.2..X.xt..Q6.w......U.>LV)R..(c..8.{z@c`.j.\ ....F.....U.!@.hH.....X..id'.h...&..}T>......./.k......{....g..\=.1$7A.......z.T.f.}OD...?.......=!.&. ...:7.0=.....Z...~}.....*...#.............[L..O-."M<M...". 8.8...onV%Y.C.n....X...a_...;g.k.Z#..B3.aw....wD..G,...#..n';...V.....?..;.......O....W~......;....O..f..^.>.2.+..<...+.}.....G.......o..\|...._.G.......S..f.J.I.+7I...Ga.-.\|...E.0.Y

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1267)
Category:	downloaded
Size (bytes):	114933
Entropy (8bit):	5.153460703895826
Encrypted:	false
SSDEEP:	1536:xylcfDxYzbJ3iw93BC2cXdm791WoDYz5hw4uJuhwNpfewltog69FjxWDpfxV685u:xylc7xYzwwyVXkC0Yz6vL5u
MD5:	8507165C54755807224A197057729D87
SHA1:	ACE8A26F8402BAEE786617E4820A0860822921F2
SHA-256:	2DF92C7108CF6788CE6FFE7D3170480C6B6CA0367AE57911849B3760F3753994
SHA-512:	4C198202400D755D7B9E32B92E267AB7D3C07D0B90ED351B796CFD791E74F014F59604C52B00CE4F54525B1DB9D7EF27412CA483E1517B2C4E289F207A3BE3BF
Malicious:	false
Reputation:	low
URL:	https://telegram.org/css/telegram.css?237
Preview:	body {. font: 12px/18px "Lucida Grande", "Lucida Sans Unicode", Arial, Helvetica, Verdana, sans-serif;. /-webkit-font-smoothing: antialiased;/.}.html.native_fonts body {. font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";.}.html.lang_rtl {. direction: rtl;.}..body,.html.theme_dark body.bg_light {. --text-color: #000;. --second-text-color: #7d7f81;. --accent-btn-color: #2481cc;. --accent-color-hover: #1a8ad5;. --body-bg: #fff;. --box-bg: #fff;. --box-bg-blured: rgba(255, 255, 255, .84);. --tme-logo-color: #363b40;. --accent-link-color: #2481cc;.. --icon-verified: url('data:image/svg+xml,%3Csvg%20fill%3D%22none%22%20height%3D%2226%22%20viewBox%3D%220%200%2026%2026%22%20width%3D%2226%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cpath%20d%3D%22m6%206h12v12h-12z%22%20fill%3D%22%23fff%22%2F%3E%3Cpath%20clip-rule%3D%22evenodd%22%20d%3D%22m14.38%201.51%201.82%

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	21478
Entropy (8bit):	4.9401794405194135
Encrypted:	false
SSDEEP:	384:FCxaBo7s5dibe4UbBHasovLi1xPSoGBejIfD5FQhPOwIc:FCxko7UALi1xdGFTcIc
MD5:	4C9BA6B680FC51B6E5BD4217A1550C88
SHA1:	3FA0E7D643CC1E3008E0FFEBA46A1E3682E2EAF7
SHA-256:	51C4D88FD78F3B8EFB16F845E75BE7F1BB288FDF2FD39D033868A0346DB7FADB
SHA-512:	42706B3E53134B3EA0FCE3A5775D8929634EAB202856794D6E5E71FFA44B83487AA992D3D933FBE2BD5B2CF084F20206EE13BA904A713114E566DA6474A8C3D1
Malicious:	false
Reputation:	low
URL:	https://telegram.org/js/main.js?47
Preview:	var startTime = +(new Date());.function dT() {. return '[' + ((+(new Date()) - startTime)/ 1000.0) + '] ';.}..var jsonpCallbacks = [];.function twitterCustomShareInit () {. var btns = document.querySelectorAll. ? document.querySelectorAll('.tl_twitter_share_btn'). : [document.getElementById('tl_twitter_share_btn')];.. if (!btns.length) {. return;. }. var head = document.getElementsByTagName('head')[0], i, script;. for (i = 0; i < btns.length; i++) {. (function (btn) {. var status = btn.getAttribute('data-text'),. url = btn.getAttribute('data-url') \|\| location.toString() \|\| 'https://telegram.org/',. via = btn.getAttribute('data-via'),. urlEncoded = encodeURIComponent(url),. popupUrl = 'https://twitter.com/intent/tweet?text=' + encodeURIComponent(status) + '&url=' + urlEncoded + '&via=' + encodeURIComponent(via);.. btn.setAttribute('href', popupUrl);. btn.href = popupUrl;.. btn.addEventListe

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	WebAssembly (wasm) binary module version 0x1 (MVP)
Category:	dropped
Size (bytes):	390408
Entropy (8bit):	5.640205401698211
Encrypted:	false
SSDEEP:	6144:y+3z9vKn2z9vyj+9R08Wcdmwdq6O2IQMKzoWVl7cunjfHjr5sP17RhnFJ/W:yMzZdR08a6O2IQMKzoWVl7cqjfHjr5sE
MD5:	E725DC036AD50BA694C90EE1F72C4B5B
SHA1:	09F0EDED8AA4CEB9AB1B326F5265DCBE9FC0B8E8
SHA-256:	F50ED354FD14CCE39533AF5FC58C0E4387A326748114C57A2CE3C98611DA673B
SHA-512:	17D8775ABB9180793C44278C36C7F5B9CC0609AE75CE0696763B6A5DE8A81D27A656B6B3B1665DDC2C7FE9CF3816E509DEF22EF71119CE0DE6F9D404041D86C3
Malicious:	false
Reputation:	low
Preview:	.asm.......Y`...`....`.\|\|.\|`.....`.....`..........`......`........`....`......`........`.......`.........`.......`....}.`....}..`....}`...~...`..\|......`..~..~`..`...........`.....\|..`......\|..`.....~..`...`.\|..`..\|..`...}`.}}}}.}`...}}.`..}..`..}.}`..}...`...}.`..}}.`.}..`..}.`..}}..`..}...`.}}..`....}}.`.....}}..`..}}}}}}.`...}}...`.}.}`..}}...`.}.....`..\|\|\|\|.`...}..`...}}..`..}}}}}..`..}}}..`..}..`.....}}}}}.`.}.~`...~..`.~~.~`..}}}}.`.}}}.}`.}}.}`..}}.}`..}}}.}`...}.}`..}}}.`.....}`..~.`.\|..\|`...\|`......~`....~.~`.~....`.~...`.....\|`.......\|`........\|`....~`.\|.}`.}...`.}..}`...~.`.............`...............`.........`..............`............`.................`..........`.\|.\|...(.env.b...env.c...env.d...env.e...env.f...env.g...env.h...env.i...env.j...env.k...env.l...env.m...asm2wasm.f64-rem...env.n...env.o...env.p...env.q...env.r...env.s...env.t...env.u...env.v...env.w...env.x...env.y...env.z...env.A...env.B...env.C...env.D...env.E...env.F...env.G...env.H...env.__table_base....

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11343
Entropy (8bit):	7.967755371327097
Encrypted:	false
SSDEEP:	192:5BkxH7mNBqw0b+7h5tyiS/5Z3LeiTLgrsPGLR66oy/PtnBpLghEr/RKlfPs9yMHk:5BGKrr0bkNyiqZ3LeiTLLm66NFBZgWru
MD5:	4E06D87C860BA8E8A804350F42632217
SHA1:	31D3F89AE95D6F25660020B21E49114AAECFDD59
SHA-256:	6B081CB199E67A43DDCD7DDAC0B528C93CC72BB82641937368A41B0AECE43125
SHA-512:	C28516686E07C341DBA58B28C8185AC31FF479D7B4F8D081CB50B395C6678E353B8D0D00E3B21185DBCB6484F81A354170D403B8B6F6E7EFE8D73017D1D681ED
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001897/3/f0Go0rLpEwk.11343.png/dd4eeb46cc5efc0688
Preview:	.PNG........IHDR...............g-....bKGD............,.IDATx..w\|.....<ef.Q.Y...b....Z.f....K..f.lX..C.....n ..-,..w.)K.).B.i......E.mI...O9..cF3.Y.%[......h.).~........J(...J(...J(...J(...J(...J(.......M....y..bb........H.(...."......G>l......+`.1....D0.Q.R.K.,".....B;.7I.Y"<g...}.{[.S.`.pnc.$.NV....Q.O....Az.....vv.x..:74.Q2>..s.x.^._U.<C._).."k{_.Q......8l\..yD.b...A..A1.....(J ...B...^....y@..8...: ...x.@>..mv]....B.f...........q".G...P-...P=.~G.'......t@.>.t..<x..{.\|.&....Z..7C...8.JWA.!"2F..a....f.dN.p.1.: @.t..~..H...>.~d....e..C.gR...-0.7...Ih...k..=.....-....9..D..wmS.u_..g..z'.w[.2U.zx$..Bs..r..`L.t.[`/...... ...^..t....&}H....GhEU..z.].u..#N{...O..V..Z....3A.Mp.1..N.f.%....... ...}..{....;&\|~..E.@RF..6.^d]............\|5._...5...Y.I...%.+....?..A...0....mB.>O.-...."T..{%].....7.qN...#":..}...Z0.[S..i.........F-`4....31....'!......iz..)]....A..3...*.XW....p..{}.iBtG0....KL.J.d........a...@.. .z.5.)A.. =...~..G...].F......O._..v]...'..../Q..A....8

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1246x260, components 3
Category:	dropped
Size (bytes):	97628
Entropy (8bit):	7.832669342660093
Encrypted:	false
SSDEEP:	1536:wWwDHWi7zklwIPwEwRtQ8sRPavxidW48fk9wQKq6eT83XpkIZetZa4wMM:/E2iXpaO8dCvYYbowQKqxQ3XpLZCZa4Q
MD5:	FA44F18971E0750249CBCF34F66AE11A
SHA1:	0B4017CAD011B2EF346094E1C37ABB912FA9B7D7
SHA-256:	9D47030D555E1765171C05B57ED755744D6051364674EFBD99A98DF9EC7FA9CD
SHA-512:	48B1E112AD8975E2BD255000675C6C73356F2A0F5241D93278A6843C6FECA92BF4038D3396132180E8F9F09BDF220BB569275B61570B1BC7BC641ED4D52B9D4E
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......d.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)" xmpMM:InstanceID="xmp.iid:41DF7D7881CA11E991809FEABB4E64F3" xmpMM:DocumentID="xmp.did:41DF7D7981CA11E991809FEABB4E64F3"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:41DF7D7681CA11E991809FEABB4E64F3" stRef:documentID="xmp.did:41DF7D7781CA11E991809FEABB4E64F3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13579
Entropy (8bit):	7.963684155389635
Encrypted:	false
SSDEEP:	384:YJIBYQNLDhKyY9tWkQqHAKSTSMk8IduPQDvrz:YJIKYlYnWk/VS5k8Su4Dv/
MD5:	EB46CED34F8CD5637A3CA911BD12F300
SHA1:	A26B44E6E634E4D670A38549033D3539A981E415
SHA-256:	DF53D5B90C9E669236F8593B7FC941A6DA753EE8EEC79A64C6955A4A67DCB45F
SHA-512:	8E015B01A7BC62637CAF4C7138D256105FC77B227E0108224917B55AE813D7B1B2381371E0EF0B76A27FA9A0D7D2B02A96B0981B7183E433D3FB07A029488C33
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............g-....bKGD............4.IDATx..]y..u...WU.=}...$.L..EB.H.DtQ.APP.....Z.$...UD...$.....j$..\."...p%...3..gz.............$...g....~.~..~..~@.JT....D%Q..4....1.{.%u.O....B.Z.J..FI).r#f............5.W...T.3.0.@G.Q........(=K.G.>.....(q.....]..M..D8.D5..h.(.. .?=.....8].`.z]..(........3.D.6l.4\6.eb...B.!...q=..>{..;J.;...z...k..+..=".....W.[W_.//.q .@ ......,u.X........P[{.D."./P....}..~....#..^..R.\|......`#6~.8k.Q\VV...b.....r.D.....^i...6oF.....w..^t..W.^...D._.d.m.A"..e.Qr..I..c.0.>..).j...@..>t.............?.^..""..@.R.....O.........<..Z...~@... .7+..dyQV=.....r.....J....j...=...J.<.m>.3p/....Y_..3g...../...".kC...$...0....G.5uT[.....p..._.s..X..}....S...S.KD..9.5r.=s.L.......'IH.I.Q.X/..=.. ...{.....UT_U..[[`.vF......x~...m,....s..)"........"9...;y..I.(..a.....qDvn..{..I....N.....}......T...1.3...\|..N..$....;o.....3g..S.<Z..UG..<..x.....i.....b.PJD..j.j......i...2!_M.=..xxH?...g.0.1.c.]c.8Io{.....I..

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1246x260, components 3
Category:	downloaded
Size (bytes):	97628
Entropy (8bit):	7.832669342660093
Encrypted:	false
SSDEEP:	1536:wWwDHWi7zklwIPwEwRtQ8sRPavxidW48fk9wQKq6eT83XpkIZetZa4wMM:/E2iXpaO8dCvYYbowQKqxQ3XpLZCZa4Q
MD5:	FA44F18971E0750249CBCF34F66AE11A
SHA1:	0B4017CAD011B2EF346094E1C37ABB912FA9B7D7
SHA-256:	9D47030D555E1765171C05B57ED755744D6051364674EFBD99A98DF9EC7FA9CD
SHA-512:	48B1E112AD8975E2BD255000675C6C73356F2A0F5241D93278A6843C6FECA92BF4038D3396132180E8F9F09BDF220BB569275B61570B1BC7BC641ED4D52B9D4E
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/SiteDesktop.jpg?2
Preview:	......Exif..II*.................Ducky.......d.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)" xmpMM:InstanceID="xmp.iid:41DF7D7881CA11E991809FEABB4E64F3" xmpMM:DocumentID="xmp.did:41DF7D7981CA11E991809FEABB4E64F3"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:41DF7D7681CA11E991809FEABB4E64F3" stRef:documentID="xmp.did:41DF7D7781CA11E991809FEABB4E64F3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22681)
Category:	downloaded
Size (bytes):	22682
Entropy (8bit):	5.562019061368948
Encrypted:	false
SSDEEP:	384:1nx7is2gm0cNqoi+Ho9Jzb1g06AcnsQGb5:ZngP09Jzq06ASsX1
MD5:	8E548B1AD991B0CD636A7E4939E3C420
SHA1:	FFACC63C9B5D77B0597F9C054CA349312626A5FE
SHA-256:	2CA27E9A8DAE569CDEAC42752ED1AED1AFEFF7F19282D3CC12C0AAA54A08BC04
SHA-512:	5EAE750BDF8C8D073A9930518D7A5406E2335946F124DA9AF0ACF1A9C35ED2171C5BF7511BDF647A7037FF3557D83EC6E2FE7DCFC9C30F18C13D34C051335158
Malicious:	false
Reputation:	low
URL:	https://telegram.org/js/pako-inflate.min.js
Preview:	!function(e){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define([],e);else{("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).pako=e()}}(function(){return function r(o,s,f){function l(t,e){if(!s[t]){if(!o[t]){var i="function"==typeof require&&require;if(!e&&i)return i(t,!0);if(d)return d(t,!0);var n=new Error("Cannot find module '"+t+"'");throw n.code="MODULE_NOT_FOUND",n}var a=s[t]={exports:{}};o[t][0].call(a.exports,function(e){return l(o[t][1][e]\|\|e)},a,a.exports,r,o,s,f)}return s[t].exports}for(var d="function"==typeof require&&require,e=0;e<f.length;e++)l(f[e]);return l}({1:[function(e,t,i){"use strict";var n="undefined"!=typeof Uint8Array&&"undefined"!=typeof Uint16Array&&"undefined"!=typeof Int32Array;i.assign=function(e){for(var t,i,n=Array.prototype.slice.call(arguments,1);n.length;){var a=n.shift();if(a){if("object"!=typeof a)throw new TypeError(a

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	4.980767694952946
Encrypted:	false
SSDEEP:	96:jJkRRRRRRRRRRRRRRRRRRRRRRRRRRRRutRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRC:jJ/1MJNF6m9XC801f6x7QJGp18G2QR
MD5:	5791D664309E275F4569D2F993C44782
SHA1:	A68F363153614A09F10AE2892C134B9C4B001D4B
SHA-256:	4FF54BC38C267DC3A8C95F6ED4590336BAAEC70433EF15D027DDCA608C391E78
SHA-512:	93502A68F14FD4F87E0AA2CAD92A5657A8587E6ACB1C108CCD8CEB5E52776E77DF867962C51E1290316BB78027DA636F38C065294871B4400FBBC4DEDF622EE1
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................................................".."6."o."..".."..".."..".."..".."..".."o."6.#......................................................................................................................#..#(."s."..".."..".."..".."..".."..".."..".."..".."..".."s.#(.#..................................................................................................#..#-.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#-.#......................................................................................#..#}.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#}.#..............................................................................#:.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 110206
Category:	downloaded
Size (bytes):	10926
Entropy (8bit):	7.978728085656948
Encrypted:	false
SSDEEP:	192:XcJNlWhhfMnbMeB0p0mehV3hNeWulfLYCC2Ock2/C89U0hTCKoNvKdkTHR:XcJNc70npzvnmWgfL22Ob2/t9U0hPesm
MD5:	BF88A2E44AE44DE60408010047AA2534
SHA1:	644FBA3DBB11BFACCA45F72D098CD16EE3679F58
SHA-256:	3B2E89FEC8654E1F8D5B45B794F310F9F287E0E9B249B0E3279016E5D5873409
SHA-512:	CE8A43E9CF244FE819E0C2969E6B008C85F990D7B5CC96918A7B04FAE59CF96072C9B12DEF3FEC6DB644556F3DE0E0855FD034B8455F90F9E52395A4824C5AB9
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001453/2/eW_MzRhUGoM.10926/fe1f3bc3dd08367c0a
Preview:	...........}Y..H.._).3I.}...f...`...O.. .T%M...BC.}.3w'..FdD.#.P.A...........o_o~....o~.....Mw.....n.}...>>.....7?[...........!..................~.......7.._.y......./..x...7_.R.....o...lr.?Q._...T..7_..e.....G_.....n.....~OO...S\|....E-...n._.V.6...%W...7.k.....w...w.\..Z.....E....U.S..!;A.......l.~...Fw..\|.~W..Tr...^.5).95.).^.!..[.e..5]/.a..!J....aS..b.....M........S..c...0q..z...Ct.S...J.4._......n.s.....U...Q..9.V....-...'~.\.=U...W.vW...y..B.4....#>...w...O..}..M....7.}....[....(...oo....w..W.4U....x...X.t.....[~._..uk..29....i-.\]............./........'I..K....._....K}....;.....\|Bc...ou...T.M....W......o_>..fO.._i{..H...F,Y.5Q..N$!_...w1..#.....=......3.........eZm...=....N../wnq....._........\|..\|..3.J~..n.I.;..J^.e.sq...S..?p"..p.~~....o<...o1T..+.i.2.:jD=.A...?X..h....)t.h..D.....B0..P)...S..e.N.He.....C..t7....0?.m.........H7..y.k.;c...x.......Ek.&.h7-.T...S.~.K$.2z.......z."<.5B..Z..T.....z..@8.J.p.yUC......y...c.L@$/3

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 131568
Category:	dropped
Size (bytes):	12545
Entropy (8bit):	7.9793641338070485
Encrypted:	false
SSDEEP:	192:jLtIfnlwvz7lLADyZc8lcXDtUGy392BtB3u41k74kfRRoaZGGW5BO+r1RyaGBw3s:ft6nlwbDZeDtdyOZuAeRuaZGGkrJM4dy
MD5:	6FFE0373E13C95E1253EE372A3D7FEDB
SHA1:	BB6C4764E927A8ED8CBF14BABEA3E28FF1F07D4B
SHA-256:	1F0B318040B210A65B48D386D9680B29212DA0D01DEE9CC9F56D485334BDC11A
SHA-512:	0027C6A1E23A389699C385A2646ED2BFDCDEC4406CDE2C0E0155906296B44827D114B1F4B62FC08BD519B3F2973A23538C485C3ECC62675E537AE81C4E460B17
Malicious:	false
Reputation:	low
Preview:	...........}]...._1.U(.w.. 8."..\..d...;.O.....l.._.V..%.4.Q.G.w>fFj...b.X."....~.......\|s.WF....7.....p...z.(....\|..t7.......^..o..../~....W.^..^~...3....n..;7?.......}....B..7....\|.[^.q.O..~...W...;...._.[...O..[....s..?^......:.J.w.......#..S...._..H.5\|..\`..d....,......'>}.w<.....t[4.+.... ..f/..Ji.=.....^..u..{.m.0.._'...PW..^...i.0V........Q!.U.W..0]'.........B...~...O.\|...?..L..._..7.. ......kR....d......<.........].....I....Y.:..b....._{.;]^.Y..A;O...g@..<.vrlO...q..3n.&.1;q...3....L..K._=v...#..3..7C.{Ku.._&.;.. ..Tw.z.^.[.[X.P..8.<.8R.yKO....i.B\|..xF.G..+..zEv..u.....w....K./k.&.}.....pl........[.'7./.b@..k0".dD.......ibDx?.w.~.^c.L.M~.Xq.@.9...4fP......\e.R.w...=....@J..u..L....G...#.y.Q....s..cS.....Y'0./......\|..S#...pF...V.3R..RH.R.......9...O......9..'M...V.....o/?..Nn..7.~d;.....(f.\...Mo....W..E...X..V.c\..6.2).LG,..J9vY%+/......m..N+...OM.}..*.XV.......'."......3..of+....)....Cy..._).5.A...l.{<.-.l.),@9.

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	23116
Entropy (8bit):	4.416888886221028
Encrypted:	false
SSDEEP:	384:wWjhl+ZZx0roaRvQgeMr2VxtaA93S/JKhV3PXASow7/XP5oP5VP5uP5sP5H6NC7E:wQhl2cfvrSxtaCDPaw756TUGLfY
MD5:	E75F7F8AC71782DDA40464528A4F619B
SHA1:	1294A00A625B50FF7C3EB3119A71D49399C9AC29
SHA-256:	832FBEFD7A4FE8F651058597D9F1910883D1CBD56D0CEB343E7D6170AEECF982
SHA-512:	AF128E227ED56355357FA0D3D46C9701E3B10F076F3515D84907ACE6BBF282177A74EF577A0AC48E4E4CC1FE0DFE3D14368F7DB08797AACC767E8841032C4E31
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/t_logo_sprite.svg
Preview:	<svg fill="none" height="144" viewBox="0 0 4464 144" width="4464" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a"><stop offset="0" stop-color="#2aabee"/><stop offset="1" stop-color="#229ed9"/></linearGradient><linearGradient id="b" gradientUnits="userSpaceOnUse" x1="1080" x2="1080" xlink:href="#a" y1="31.7861" y2="112.214"/><linearGradient id="c" gradientUnits="userSpaceOnUse" x1="1224" x2="1224" xlink:href="#a" y1="24.856" y2="119.144"/><linearGradient id="d" gradientUnits="userSpaceOnUse" x1="1368" x2="1368" xlink:href="#a" y1="19.1113" y2="124.889"/><linearGradient id="e" gradientUnits="userSpaceOnUse" x1="1512" x2="1512" xlink:href="#a" y1="14.4526" y2="129.547"/><linearGradient id="f" gradientUnits="userSpaceOnUse" x1="1656" x2="1656" xlink:href="#a" y1="10.7817" y2="133.218"/><linearGradient id="g" gradientUnits="userSpaceOnUse" x1="1800" x2="1800" xlink:href="#a" y1="8" y2="136"/><linearGradient id="h" gradientUnits="userSpace

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 110206
Category:	dropped
Size (bytes):	10926
Entropy (8bit):	7.978728085656948
Encrypted:	false
SSDEEP:	192:XcJNlWhhfMnbMeB0p0mehV3hNeWulfLYCC2Ock2/C89U0hTCKoNvKdkTHR:XcJNc70npzvnmWgfL22Ob2/t9U0hPesm
MD5:	BF88A2E44AE44DE60408010047AA2534
SHA1:	644FBA3DBB11BFACCA45F72D098CD16EE3679F58
SHA-256:	3B2E89FEC8654E1F8D5B45B794F310F9F287E0E9B249B0E3279016E5D5873409
SHA-512:	CE8A43E9CF244FE819E0C2969E6B008C85F990D7B5CC96918A7B04FAE59CF96072C9B12DEF3FEC6DB644556F3DE0E0855FD034B8455F90F9E52395A4824C5AB9
Malicious:	false
Reputation:	low
Preview:	...........}Y..H.._).3I.}...f...`...O.. .T%M...BC.}.3w'..FdD.#.P.A...........o_o~....o~.....Mw.....n.}...>>.....7?[...........!..................~.......7.._.y......./..x...7_.R.....o...lr.?Q._...T..7_..e.....G_.....n.....~OO...S\|....E-...n._.V.6...%W...7.k.....w...w.\..Z.....E....U.S..!;A.......l.~...Fw..\|.~W..Tr...^.5).95.).^.!..[.e..5]/.a..!J....aS..b.....M........S..c...0q..z...Ct.S...J.4._......n.s.....U...Q..9.V....-...'~.\.=U...W.vW...y..B.4....#>...w...O..}..M....7.}....[....(...oo....w..W.4U....x...X.t.....[~._..uk..29....i-.\]............./........'I..K....._....K}....;.....\|Bc...ou...T.M....W......o_>..fO.._i{..H...F,Y.5Q..N$!_...w1..#.....=......3.........eZm...=....N../wnq....._........\|..\|..3.J~..n.I.;..J^.e.sq...S..?p"..p.~~....o<...o1T..+.i.2.:jD=.A...?X..h....)t.h..D.....B0..P)...S..e.N.He.....C..t7....0?.m.........H7..y.k.;c...x.......Ek.&.h7-.T...S.~.K$.2z.......z."<.5B..Z..T.....z..@8.J.p.yUC......y...c.L@$/3

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 246409
Category:	downloaded
Size (bytes):	21801
Entropy (8bit):	7.986820094004987
Encrypted:	false
SSDEEP:	384:+cw4aeILQZCjjOsGrggZg/3nccbQ+u19W9S0rJUrqbza3KUvKiIpe16S5:+cwRpLQZC/OsZz/32+N9S2uaO3KwIpi5
MD5:	EDE943D9BF34428EF8FB13948912141D
SHA1:	F06BD9FE51BF32FBEFA0ACEFBDDAA464F6A64F13
SHA-256:	1782968F6F9EB42BC5689B3A2956CE8C45672E126427B870EB5E2FFC415CBC0D
SHA-512:	97EA17771436E6B2E0DD0F0E91165AF119CFFB1286EFD9093648F8D5B741E0FC5627A0A98F390D89737999121DB93F15613E7D67D9F88826EA462748DACDFF2E
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001166/1/01aTJ2ISKeU.21801/24028c7b6d07639794
Preview:	...........k.#.6.W..\,dF..u...............[:.....>.B.....EV.E6.L..{.U.........>..._......<\|...0.......fx.....'.c3...._.K.....??.Ko........Oo.......{y../.........~.+...........?..........o._.:.w..........~.w?...._{../?...!......N...........k..O...K....?~f.1...U<.i{.9'W1.2..u..v.%......{..et%.v..."........>\..R?.....d..C.}M.._Y~._.........@..=..2G....RF.o.......I.koc..H..Lco]I...u.....-.U.{......M~L>..3.i...C8...C....~z...@<..g......B)7~..a...;E...[3Z^..?U..[...A~......X.?3..S....n...?c.h..2.Oi...{.F ...Yr.........W....l.......b....]6..?..r..[.&......>.?.)..h....$.y..)..cJ2+~..7.4:.'x+.....2).?.........OC.nt....}.......k..vM...X.X...nM...i..[...3B-.#Y7..X3%..\|.-.eX.%!...g.~....T.z..>uc.........uq.`ad.$.S.)r\|.,L..1..^..'...6....w..h...J.#.....w.._X.o..eNz........:._.~..+.D...b.{......e... ...$p...dM.'e.g..d....&..E..}3...#5...J.+....>...W..=Z^y..{4}K....9../.8x.w.............~.S/..?...O2.:...\...*....<.M...ff..E.<.N.....G...&>yL..

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 290x270, components 3
Category:	dropped
Size (bytes):	21090
Entropy (8bit):	7.878614475283644
Encrypted:	false
SSDEEP:	384:3j0OJMdamjE0cVsRQK80uxr+IsTJo7qvrgAK56GEUUW5tXnwu:34fHEGupslo7q8AK56U5tXwu
MD5:	F5EB8DCF9B18F19053034101E920574E
SHA1:	9513C6C5E39669AD27132D470008955DBAAE61F0
SHA-256:	15A94720D72ED1727FB281ED4AF914E17CD8166BB18F5A8484F32F9FAFF4F365
SHA-512:	950178CC71BD88274F49E6248A078F4F0FAA95E7188C2E69E2EDC62D874CABF5EDDA83DECE9FEE9C657B05CF52760E513F5161B34BF5FE8232923E008DCA34C3
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....@Exif..MM........i..........................."...................8Photoshop 3.0.8BIM........8BIM.%..................B~........".."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C...................................................................................?.....(...(...(....O....e...[..0.x.Z..i).......rT.........N.....).\.._Q...u...K._..TnC[.(24~.#.{.Z.....?...Nl....7Z5..o..l..k=2.<.{,.Q....J..h....Z<q.[.UT.&.P0@P.0...n........D.='....k.%.G..}u.........o.[..-....7..._..x.F.e.h..7....fVQ..gl{.x

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	443
Entropy (8bit):	4.445437815127597
Encrypted:	false
SSDEEP:	6:twoMTqNzdI9mc4slma6UnaLUsvL9F7JLRMcBvxLU2dTkT30lI9P54AJex0JbrKDm:t9XMIX2A3vLv7JLBBJV/sPpJeWJafS/
MD5:	008103375773357B988BF6B4E7DFF3F3
SHA1:	908CA865AC3A7F6B57DC7D5DB70A429CFF959E98
SHA-256:	A5C59C1B52F5DD4D1C06A628F27079F4481D0EE7B40BCCD1CD91FF963E2D674F
SHA-512:	38838694555700DB092B3ACD3EA9DB83EDF59DF7867BC952FB29218B840629ECD7882DA1F67BBE59A61BC0635223D75F2B3C72EBC7C870EBEB1EED57F9CECC1B
Malicious:	false
Reputation:	low
Preview:	<svg height="27" viewBox="0 0 21 27" width="21" xmlns="http://www.w3.org/2000/svg"><path d="m17.49 25.5c-1.35 1.31-2.84 1.1-4.26.49-1.51-.63-2.89-.67-4.49 0-1.98.85-3.04.6-4.23-.49-6.76-6.93-5.76-17.48 1.91-17.88 1.87.1 3.17 1.03 4.27 1.11 1.63-.33 3.19-1.28 4.93-1.16 2.1.17 3.66 1 4.71 2.48-4.31 2.58-3.29 8.24.67 9.83-.79 2.08-1.81 4.12-3.51 5.64zm-7.16-18.82c-.23-3.51 2.6-6.4 5.85-6.68.44 4.05-3.66 7.08-5.85 6.68z" fill="#1086d7"/></svg>

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12690
Entropy (8bit):	7.965297749406023
Encrypted:	false
SSDEEP:	192:qU6SieKSVdeYciqBy/VHaqqtsNEQ8bwRP46NLvDMm5GebYlttyr:qz9e7e3iq+HlHs0qaRkJAr
MD5:	9C2A194EE50807AE9342B60634BE2445
SHA1:	553DFD2BA2A5E11468A3B57ABA897995F2F4D676
SHA-256:	EC1788BCDD05595BBCD16E5C7C13BCE6481B620EBBC4200B2E6598C02C82AA78
SHA-512:	27018DB71B0A93E3E68E42E0F9DC8528F7C807571C5ED1C1330BB5FAC68A1685869BF04043167F885EA413AE6B0ED029CDEDCE64B1354C0DF367603ED0BAA67A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............g-....bKGD............1GIDATx..}yxde............44I.........0:0.. :...#8.\|...-. ..(2.3...:.\|.@...f.Ng.S.]....J-.:.T.n.<O=.T......g....T.Y$.0....m..r..../X. .....T..)-.dHD.!..T..\|.....M.JR.#...h..4.V..,....AU.U...f.@.B......\.Y....p8......q...S=.Y...MJgc...7T......X..%..I..).!.:. .G..n..VT.DJKTQ...U..0..2@}.\....@.%.$..b....D...G./.f..G.....F.....`=.Q:..,..J.G.-,h.y..0. .2...$6.A"<.....}e.v....f.:.......t."....z7.U..uU..<../.. ]..{...u....5...-[.X..$8.WVy.......QhB.3!..d.. ..j.%.U..@B.Q.y..U5..o....m..$..9.........p".}GI.../S.'..~...B..E.........4)CM]...Sh....=....} .......sy>7l..h....<...tI..c-.m5.\.........!\c...P.1i.Mx,......z@...@t.......k._.......E"...:MMM...2\|.o).r..?9......i.......TbL..Q. \|... ..g.z..p..(.`d0S....XnC.E....A..Dd..a.]..\..m.....W.......yr..7..[.r......t..U...&.....9.*./{....[W...8...U...@...........+...E.......R.{...;..U.a..e.\|g..(......^.fQ.....r,.^h..MP.1.'V)$..i..L.<..D...>.......q..."

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6166
Entropy (8bit):	5.4227704706263475
Encrypted:	false
SSDEEP:	192:KR6tGVFJ3qFl5p3AkmztIZa+XqtRcalH9:wTY7t8t
MD5:	C706681409217A14A24C7E2DEB8CF423
SHA1:	08B443FE5BC6A223A9DE08FB56282365B1D13857
SHA-256:	84B97B3FA8847B64C6D3833561E4B3146530577171E85AD226578A087DB70974
SHA-512:	2520A5417426CEA58972529B3776713958FF259CC8467EBAFBE291BD040E27195054C4133F4A9518D78DA38DDF4F7CDAC64DA0813DA33BBE707AD13AF5BAA7C1
Malicious:	false
Reputation:	low
URL:	https://telegram.org/css/font-roboto.css?1
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url('../fonts/Roboto/KFOmCnqEu92Fr1Mu72xKKTU1Kvnz.woff2') format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url('../fonts/Roboto/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2') format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url('../fonts/Roboto/KFOmCnqEu92Fr1Mu7mxKKTU1Kvnz.woff2') format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url('../fonts/Roboto/KFOmCnqEu92Fr1Mu4WxKKTU1Kvnz.woff2') format('woff2');. un

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13579
Entropy (8bit):	7.963684155389635
Encrypted:	false
SSDEEP:	384:YJIBYQNLDhKyY9tWkQqHAKSTSMk8IduPQDvrz:YJIKYlYnWk/VS5k8Su4Dv/
MD5:	EB46CED34F8CD5637A3CA911BD12F300
SHA1:	A26B44E6E634E4D670A38549033D3539A981E415
SHA-256:	DF53D5B90C9E669236F8593B7FC941A6DA753EE8EEC79A64C6955A4A67DCB45F
SHA-512:	8E015B01A7BC62637CAF4C7138D256105FC77B227E0108224917B55AE813D7B1B2381371E0EF0B76A27FA9A0D7D2B02A96B0981B7183E433D3FB07A029488C33
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001402/5/eOMSj3GzJXo.13579.png/f3cec6c451d023c109
Preview:	.PNG........IHDR...............g-....bKGD............4.IDATx..]y..u...WU.=}...$.L..EB.H.DtQ.APP.....Z.$...UD...$.....j$..\."...p%...3..gz.............$...g....~.~..~..~@.JT....D%Q..4....1.{.%u.O....B.Z.J..FI).r#f............5.W...T.3.0.@G.Q........(=K.G.>.....(q.....]..M..D8.D5..h.(.. .?=.....8].`.z]..(........3.D.6l.4\6.eb...B.!...q=..>{..;J.;...z...k..+..=".....W.[W_.//.q .@ ......,u.X........P[{.D."./P....}..~....#..^..R.\|......`#6~.8k.Q\VV...b.....r.D.....^i...6oF.....w..^t..W.^...D._.d.m.A"..e.Qr..I..c.0.>..).j...@..>t.............?.^..""..@.R.....O.........<..Z...~@... .7+..dyQV=.....r.....J....j...=...J.<.m>.3p/....Y_..3g...../...".kC...$...0....G.5uT[.....p..._.s..X..}....S...S.KD..9.5r.=s.L.......'IH.I.Q.X/..=.. ...{.....UT_U..[[`.vF......x~...m,....s..)"........"9...;y..I.(..a.....qDvn..{..I....N.....}......T...1.3...\|..N..$....;o.....3g..S.<Z..UG..<..x.....i.....b.PJD..j.j......i...2!_M.=..xxH?...g.0.1.c.]c.8Io{.....I..

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 840 x 487, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	189734
Entropy (8bit):	7.995418777360924
Encrypted:	true
SSDEEP:	3072:qKCCO9mMyY1K6SCUQB4AxtinSEItHFDukVnxJQTu6r6R7NApp4rFDwGIQ:nzOkMy97CRR3Ljn5n2uYgGkKQ
MD5:	40D4266E5AADC87CCEEC1AB420DC2692
SHA1:	266C56990A106B6E9EFB0F9EF2A1A752AA6FA0FC
SHA-256:	3A1D4890B3E91A01C20C65B75F1AE028E3C445CAD1FD2D249DD0868876DFE4B4
SHA-512:	7DE32DEFDD87034F29930A7A32915100C2A109A80C79EED4C0A5F3127D1101FE0BF59B41CB4C5807F6FEA29A7721EBE74C55A8A4942C4EF67EDC40B860F46277
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...H..........2}.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx....%gu...p.9..{.hF......H..D2\..?0.m.`..y...6.e..}..#...X.....X...H..@.......S....V.L+.hF...R.P......$......x-M/..r.NK..ko)..(..(O...)....v......x.v.S....).H..t-M/....Q.EQ.EQ...h..M.HB.....F.S.J..L..4.H.UQ.EQ.E9.../h......M... =I...\|).I..(..(..t.i..\|.7.....Nq..T...7.EQ.EQ....hz9...v....C.]A...)...(..(...!\|......O..yb.h.....#EQ.EQ....+)_....Q.....+..+s..EQ.EQ...$....}.{wiW<~........EQ.EQ.#....h7.@:\.W.@Q.EQ.E9.y..W^y.v...C..d....'.EQ.EQ.....]...P.2.3EQ.EQ..(......5...P.EQ.EQ..V^y.'k7.@:...].(..(......I1...P.EQ.EQ.~U...j....(..(.QDY.@...(..(..(..$EQ.EQ.EQ..H..(..(..(O..v..I.D;AQ.EQ.EQ....IQ.EQ.EQ.E...(..(..(..$EQ.EQ.EQ..H..(..(..(.B.4.!.J%.[.N;BQ.EQ...e...h6.....f...i..5o.....^.q.C.G1:A.R.F.Q...(..(.R.q.....c..d...^..uX4{_....]....AP..d.,.{..vI$.(..(..,C,E.M..^..d?1....~....EQ.EQ.EQ..H..(..(..(..EQ.EQ.EQ.Es.......G..EQ.EQ..7...$EQ.EQ.EQ..H..(..(..(*..EQ.EQ.EQT )..(..

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	24604
Entropy (8bit):	4.7347320559530335
Encrypted:	false
SSDEEP:	192:HahNCO9aaOWUbiYyai2kWYipNtUxSi0EBh718jpwyYqaiEjKsnGLUtGrNixayyai:ni1ZGArKPINofFnuefd
MD5:	1400A5F5BB460526B907B489C84AC96A
SHA1:	1CDB62D2B39EFF966E96A476F72704BC86591036
SHA-256:	42D42F23D7276824168808093BE0F20E3E53673718C79349CC22DA88F58D3E23
SHA-512:	DBB06FC723613A892AC5466D4592839B93CD9504B68E7FAFA17827D46404CD7A662D5DF04FAAC08C30C3052958335458301FE9C5B26B1CADDD8DA914DB11CEC3
Malicious:	false
Reputation:	low
URL:	https://telegram.org/js/tgsticker.js?31
Preview:	var RLottie = (function () {. var rlottie = {}, apiInitStarted = false, apiInited = false, initCallbacks = [];. var deviceRatio = window.devicePixelRatio \|\| 1;.. var startTime = +(new Date());. function dT() {. return '[' + ((+(new Date()) - startTime)/ 1000.0) + '] ';. }.. rlottie.Api = {};. rlottie.players = Object.create(null);;. rlottie.WORKERS_LIMIT = 4;.. var reqId = 0;. var mainLoopAf = false;. var mainLoopTo = false;. var mainLoopInited = false;. var checkViewportDate = false;. var lastRenderDate = false;.. var userAgent = window.navigator.userAgent;. var isSafari = !!window.safari \|\|. !!(userAgent && (/\b(iPad\|iPhone\|iPod)\b/.test(userAgent) \|\| (!!userAgent.match('Safari') && !userAgent.match('Chrome'))));. var isRAF = isSafari;. rlottie.isSafari = isSafari;.. function wasmIsSupported() {. try {. if (typeof WebAssembly === 'object' &&. typeof WebAssembly.instantiate === 'function') {. const module = new WebAssembly.

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	30567
Entropy (8bit):	7.982782008745682
Encrypted:	false
SSDEEP:	768:pYweyGgLyxCaJ1leoVAqIuOlHPUfFbqqxViqR58IWE1:pX2eaLzOlvEAqxhR1
MD5:	0C6C45EE2597151FA5E955D11D2D38FE
SHA1:	771AA6BBE2765CD2D6F754E14D5E12FFC476E939
SHA-256:	889DDFB8550BAC935B0A02E52BEF9D0950F0734D7A70661A0930A3D8E6A2F372
SHA-512:	BB4808E6B52F06991E9FBEB6E6E0D64B0AFB4E87076A9CAD8543494605CD2D0DC2F1D0007BF8C588C5E7682A87EA63F83BCC6F9C847DD60B3E3024CB39BBBD85
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001828/11e9a/1yY7a721t4o.30567.png/e113973dae2bee508b
Preview:	.PNG........IHDR...@...@............bKGD............w.IDATx..wXTg...P.h...%F..d...F,.F,....)3........H."...b..M.b......{. .\|..?d.........y..Y......y.s..............................................................................qjeg!.l.Jf...,..+M...F......u.o.....S"""zo$1.......YH..[Ji]ag!.mk!Yik).%.....;).......,.....[Ji...Y0..?.-.O.....+.".&...;!...m.,..T S..V.l\a..b.. .i....t......>.....YH.U...:....r....Br....\|.DDD.Jv}..v.......B...... l-.T.\|ek.0.\|.DDDo...[....d.z....^M.m_.7.`.. .......Y.;..ZH..,$J..'...p..L..!..>x"F9..C.G...Tg...z.}M.."".:...y....iv..G.......\..@6..Q.....+G..X.z.c..h...C..y.......r.B"......>...p.P.e...3\|.MGl`.#.."xZ...C..'......\|3DDD..A..?...l.P..W..$.)....>..c..`..T....,iD.%"".......v..h;.I...>.(........4#* ...C...hk..F.-""..Sy[.......:....l.).u.o._8dc\|0y.Tx..!.#.1........O...p.^.Y.@`@.5"".jI....4N.........=F...............p.x.2..$.)`.......}..'....Q..g!iog!9..?>--..LF....\|.Q.<l*.-..^....i.V.....j....F.o....J..pi.......

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 102073
Category:	dropped
Size (bytes):	10959
Entropy (8bit):	7.979994782862011
Encrypted:	false
SSDEEP:	192:Sq3PR72ctqmVQvWnigEmVxdobM5cFOvCZbZ9gAJxhJuKwi6Sy18YapNjagcvb1CG:Sq3PR7jtmAHB5eOvubZ9bNDgvapdBcpr
MD5:	FCF0262BEB96C58FD7AEB5C0BB8FC4AF
SHA1:	22C51ED3EB77FC79AC3FE8131F8CB08C9AFD532E
SHA-256:	E81EA8894A34C2673DC7E7AFA5055EDED2622F15DAB8F452EA79C240C6969F3F
SHA-512:	11422AFA3F696C703AD2B0CBDF00F2B5C099FB40BE43C82EE17686383AB5AD194AC6EFCDF4DBC65BCFC3B7C3E62AD6811A6834386B7D01D9E89791C051DED060
Malicious:	false
Reputation:	low
Preview:	...........}......D..#.w..b.b.,.#p.'q6N..>'....~U..VK.3...sq.i.".E.X.....>.}k....}{.TP.......Qww?.~.-...1......`lw........Z............'}.............^uw.^.y....5....7<.?.....D.oL.^>~..G..}..^....g<....V.9........i\|....'...h...~....Ez.F.....h.V....\|,....M.T..3....4.x..X...kz....,o_.~/..6.~.@......7A.....n@..)#..Q!D.........w...>..(.n.m...+. ..,KgB"l[.a.J9......ULD.I.76...y.......x..........[...}...;...u......uV.R.o..FeM.)o..{...h...k..y....gB(.Yl.}w=.Y\|/}.....s..6...P.MCz..!.w...;.......YL.g..Y...j..K3...^..94.[..+..Y......+..W.3:..Dz`i..^K.xja.2..X.xt..Q6.w......U.>LV)R..(c..8.{z@c`.j.\ ....F.....U.!@.hH.....X..id'.h...&..}T>......./.k......{....g..\=.1$7A.......z.T.f.}OD...?.......=!.&. ...:7.0=.....Z...~}.....*...#.............[L..O-."M<M...". 8.8...onV%Y.C.n....X...a_...;g.k.Z#..B3.aw....wD..G,...#..n';...V.....?..;.......O....W~......;....O..f..^.>.2.+..<...+.}.....G.......o..\|...._.G.......S..f.J.I.+7I...Ga.-.\|...E.0.Y

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 17, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1272
Entropy (8bit):	6.759893244400297
Encrypted:	false
SSDEEP:	24:ay1he91Wwjx82lY2T3ouVMgK5iyJ3V6pKzLXGLfarUZdR+p0tN:awqQNn2xCJ3xKjZD+p0z
MD5:	1ED9BF7633F4F449C8D2DF94EA0EB35F
SHA1:	2902BA9C2B127C74C2550298A0578D7D8DA941C2
SHA-256:	E7D23B06A4FFD600558E5443D1E32DAAAF13A27CF7BB8B7CC163A92B4054AAF2
SHA-512:	51DD36178DD85F062FEE20903A4F0981CA34EB24A7E7245191EF43D493CD47F756389E548A731109F1C0463BA3BD1D3D4F7C4C623639B9514EB2FB9619124F07
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............2......tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:BD511DF2556611E48F9585596B882309" xmpMM:DocumentID="xmp.did:BD511DF3556611E48F9585596B882309"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BD511DF0556611E48F9585596B882309" stRef:documentID="xmp.did:BD511DF1556611E48F9585596B882309"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.."...lIDATx..O(.a....19P....up...r...XI.M.."G.*)g.....f..p.h.....Rh/.. ..O=S.3..z..........5.it....L2+...i6g..

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17975
Entropy (8bit):	7.968991791805153
Encrypted:	false
SSDEEP:	384:/QJwEzZkYmHWlAk99RDXjovjCKGzsawRB8icBLu5+r0lKOqke:I1V9mIAedXUvjCKGzHwNx5Vlc
MD5:	1D581B72D19BC828654229A0773A5300
SHA1:	FF517C8BB4B37351FF3DD72F7EC66FC584E90D5C
SHA-256:	D2B3858E94ED122782DE9028F668334438649E46E5D2C6D761E3359C8E3DE200
SHA-512:	1B98B05C5F720C34D470AF9606013E8DFEF2C88225AB39DDE906E4BEC48F84851BFA9C68BD99AEBAFEFAC35C8F99861A58A40DEB5C26CB74A5A19374FE7AEDEF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............g-....bKGD............E.IDATx..}w..gu.s...~....+i%.-.W...1%`....\|......2...LBOH.I>z...!`..+6.MV......e..u.t.Z.J......{w........=.Xh.m.-......B[h..F.C0u.....n.a...9.@X....@.Db.....q?.s..\................n..DT{..RU........D[ ..x.& ......F.6.\..W..E :.h_SU...&....g........^!...P..W)....!"..#..i2..1<..7....^? ..I)..."5.U....W..q..BT..%.^.......33.e`~..o ".tj3@..e..\|S....hZf.~...:8.v."!O.8V<.V..5...X<8bcpX.g_.... `...@.._.6/..8o..~/......uLuLC.Kk-kr.C5D0...R.....\|8.....u..7K.Y.....!Lvn...HpT.QU.t.R.^G.s_..y...\|.I.H..C.\.DM.._.!9.D........}9..O...l..`d........D.......L.E.UU..2...`$z.a...........,.....'...,.q"...3N.........b.M.........".-1%.S.m6%S.H.i0d\|P@D\C.........GIM...0._oR}."...k'.,...7...e~..>_N.....r.a`.aps.Q.>.0..se.g..D...Lj..D.&.=..71.j...DR.H..).q...=7..x.. ....q..".......2...F...l....@....Y.2..$.>O......<!f^. %"..dD.a~;T_...[..n......N..........J;..3..2.1A.......e.&.[.{b...'.......T7.~f^n.\|.a \.4".!.of...$......

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	23116
Entropy (8bit):	4.416888886221028
Encrypted:	false
SSDEEP:	384:wWjhl+ZZx0roaRvQgeMr2VxtaA93S/JKhV3PXASow7/XP5oP5VP5uP5sP5H6NC7E:wQhl2cfvrSxtaCDPaw756TUGLfY
MD5:	E75F7F8AC71782DDA40464528A4F619B
SHA1:	1294A00A625B50FF7C3EB3119A71D49399C9AC29
SHA-256:	832FBEFD7A4FE8F651058597D9F1910883D1CBD56D0CEB343E7D6170AEECF982
SHA-512:	AF128E227ED56355357FA0D3D46C9701E3B10F076F3515D84907ACE6BBF282177A74EF577A0AC48E4E4CC1FE0DFE3D14368F7DB08797AACC767E8841032C4E31
Malicious:	false
Reputation:	low
Preview:	<svg fill="none" height="144" viewBox="0 0 4464 144" width="4464" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a"><stop offset="0" stop-color="#2aabee"/><stop offset="1" stop-color="#229ed9"/></linearGradient><linearGradient id="b" gradientUnits="userSpaceOnUse" x1="1080" x2="1080" xlink:href="#a" y1="31.7861" y2="112.214"/><linearGradient id="c" gradientUnits="userSpaceOnUse" x1="1224" x2="1224" xlink:href="#a" y1="24.856" y2="119.144"/><linearGradient id="d" gradientUnits="userSpaceOnUse" x1="1368" x2="1368" xlink:href="#a" y1="19.1113" y2="124.889"/><linearGradient id="e" gradientUnits="userSpaceOnUse" x1="1512" x2="1512" xlink:href="#a" y1="14.4526" y2="129.547"/><linearGradient id="f" gradientUnits="userSpaceOnUse" x1="1656" x2="1656" xlink:href="#a" y1="10.7817" y2="133.218"/><linearGradient id="g" gradientUnits="userSpaceOnUse" x1="1800" x2="1800" xlink:href="#a" y1="8" y2="136"/><linearGradient id="h" gradientUnits="userSpace

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	4.980767694952946
Encrypted:	false
SSDEEP:	96:jJkRRRRRRRRRRRRRRRRRRRRRRRRRRRRutRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRC:jJ/1MJNF6m9XC801f6x7QJGp18G2QR
MD5:	5791D664309E275F4569D2F993C44782
SHA1:	A68F363153614A09F10AE2892C134B9C4B001D4B
SHA-256:	4FF54BC38C267DC3A8C95F6ED4590336BAAEC70433EF15D027DDCA608C391E78
SHA-512:	93502A68F14FD4F87E0AA2CAD92A5657A8587E6ACB1C108CCD8CEB5E52776E77DF867962C51E1290316BB78027DA636F38C065294871B4400FBBC4DEDF622EE1
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................................................".."6."o."..".."..".."..".."..".."..".."o."6.#......................................................................................................................#..#(."s."..".."..".."..".."..".."..".."..".."..".."..".."s.#(.#..................................................................................................#..#-.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#-.#......................................................................................#..#}.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#}.#..............................................................................#:.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 08:39:40.239509106 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 25, 2024 08:39:40.239511967 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 25, 2024 08:39:40.364366055 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 25, 2024 08:39:48.679524899 CEST	49709	443	192.168.2.5	172.67.142.208
Apr 25, 2024 08:39:48.679565907 CEST	443	49709	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:48.679635048 CEST	49709	443	192.168.2.5	172.67.142.208
Apr 25, 2024 08:39:48.679843903 CEST	49709	443	192.168.2.5	172.67.142.208
Apr 25, 2024 08:39:48.679857969 CEST	443	49709	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:48.921427011 CEST	443	49709	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:48.921674967 CEST	49709	443	192.168.2.5	172.67.142.208
Apr 25, 2024 08:39:48.921695948 CEST	443	49709	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:48.923192024 CEST	443	49709	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:48.923254967 CEST	49709	443	192.168.2.5	172.67.142.208
Apr 25, 2024 08:39:48.924340010 CEST	49709	443	192.168.2.5	172.67.142.208
Apr 25, 2024 08:39:48.924422979 CEST	443	49709	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:48.924504042 CEST	49709	443	192.168.2.5	172.67.142.208
Apr 25, 2024 08:39:48.924510956 CEST	443	49709	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:49.136116982 CEST	443	49709	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:49.136194944 CEST	49709	443	192.168.2.5	172.67.142.208
Apr 25, 2024 08:39:49.612113953 CEST	443	49709	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:49.612262011 CEST	443	49709	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:49.613590956 CEST	49709	443	192.168.2.5	172.67.142.208
Apr 25, 2024 08:39:49.613684893 CEST	49709	443	192.168.2.5	172.67.142.208
Apr 25, 2024 08:39:49.613703966 CEST	443	49709	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:49.619147062 CEST	49711	443	192.168.2.5	108.177.122.147
Apr 25, 2024 08:39:49.619168997 CEST	443	49711	108.177.122.147	192.168.2.5
Apr 25, 2024 08:39:49.621499062 CEST	49711	443	192.168.2.5	108.177.122.147
Apr 25, 2024 08:39:49.621993065 CEST	49711	443	192.168.2.5	108.177.122.147
Apr 25, 2024 08:39:49.622009993 CEST	443	49711	108.177.122.147	192.168.2.5
Apr 25, 2024 08:39:49.677814007 CEST	49712	443	192.168.2.5	172.67.142.208
Apr 25, 2024 08:39:49.677879095 CEST	443	49712	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:49.677984953 CEST	49712	443	192.168.2.5	172.67.142.208
Apr 25, 2024 08:39:49.678205013 CEST	49712	443	192.168.2.5	172.67.142.208
Apr 25, 2024 08:39:49.678241014 CEST	443	49712	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:49.848906040 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 25, 2024 08:39:49.854106903 CEST	443	49711	108.177.122.147	192.168.2.5
Apr 25, 2024 08:39:49.856338024 CEST	49711	443	192.168.2.5	108.177.122.147
Apr 25, 2024 08:39:49.856369019 CEST	443	49711	108.177.122.147	192.168.2.5
Apr 25, 2024 08:39:49.857886076 CEST	443	49711	108.177.122.147	192.168.2.5
Apr 25, 2024 08:39:49.857959032 CEST	49711	443	192.168.2.5	108.177.122.147
Apr 25, 2024 08:39:49.859055996 CEST	49711	443	192.168.2.5	108.177.122.147
Apr 25, 2024 08:39:49.859142065 CEST	443	49711	108.177.122.147	192.168.2.5
Apr 25, 2024 08:39:49.895216942 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 25, 2024 08:39:49.912493944 CEST	443	49712	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:49.912857056 CEST	49712	443	192.168.2.5	172.67.142.208
Apr 25, 2024 08:39:49.912906885 CEST	443	49712	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:49.914383888 CEST	443	49712	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:49.914700031 CEST	49712	443	192.168.2.5	172.67.142.208
Apr 25, 2024 08:39:49.914827108 CEST	49712	443	192.168.2.5	172.67.142.208
Apr 25, 2024 08:39:49.914839029 CEST	443	49712	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:49.914896965 CEST	443	49712	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:50.068144083 CEST	443	49711	108.177.122.147	192.168.2.5
Apr 25, 2024 08:39:50.068413973 CEST	49711	443	192.168.2.5	108.177.122.147
Apr 25, 2024 08:39:50.096792936 CEST	49712	443	192.168.2.5	172.67.142.208
Apr 25, 2024 08:39:50.096987963 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 25, 2024 08:39:50.388377905 CEST	443	49712	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:50.388664007 CEST	443	49712	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:50.388744116 CEST	49712	443	192.168.2.5	172.67.142.208
Apr 25, 2024 08:39:50.391484022 CEST	49712	443	192.168.2.5	172.67.142.208
Apr 25, 2024 08:39:50.391520977 CEST	443	49712	172.67.142.208	192.168.2.5
Apr 25, 2024 08:39:50.500792980 CEST	49714	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:50.500873089 CEST	443	49714	35.190.80.1	192.168.2.5
Apr 25, 2024 08:39:50.500966072 CEST	49714	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:50.501179934 CEST	49714	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:50.501215935 CEST	443	49714	35.190.80.1	192.168.2.5
Apr 25, 2024 08:39:50.741895914 CEST	443	49714	35.190.80.1	192.168.2.5
Apr 25, 2024 08:39:50.742314100 CEST	49714	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:50.742351055 CEST	443	49714	35.190.80.1	192.168.2.5
Apr 25, 2024 08:39:50.744030952 CEST	443	49714	35.190.80.1	192.168.2.5
Apr 25, 2024 08:39:50.744132996 CEST	49714	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:50.745157003 CEST	49714	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:50.745310068 CEST	49714	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:50.745409966 CEST	443	49714	35.190.80.1	192.168.2.5
Apr 25, 2024 08:39:50.792269945 CEST	49714	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:50.792293072 CEST	443	49714	35.190.80.1	192.168.2.5
Apr 25, 2024 08:39:50.839230061 CEST	49714	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:50.982889891 CEST	443	49714	35.190.80.1	192.168.2.5
Apr 25, 2024 08:39:50.983046055 CEST	443	49714	35.190.80.1	192.168.2.5
Apr 25, 2024 08:39:50.983129025 CEST	49714	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:50.983218908 CEST	49714	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:50.983218908 CEST	49714	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:50.983262062 CEST	443	49714	35.190.80.1	192.168.2.5
Apr 25, 2024 08:39:50.983316898 CEST	49714	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:50.983803988 CEST	49715	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:50.983839035 CEST	443	49715	35.190.80.1	192.168.2.5
Apr 25, 2024 08:39:50.983896017 CEST	49715	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:50.984169006 CEST	49715	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:50.984179020 CEST	443	49715	35.190.80.1	192.168.2.5
Apr 25, 2024 08:39:51.214181900 CEST	443	49715	35.190.80.1	192.168.2.5
Apr 25, 2024 08:39:51.214477062 CEST	49715	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:51.214503050 CEST	443	49715	35.190.80.1	192.168.2.5
Apr 25, 2024 08:39:51.215986013 CEST	443	49715	35.190.80.1	192.168.2.5
Apr 25, 2024 08:39:51.216340065 CEST	49715	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:51.216656923 CEST	49715	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:51.216656923 CEST	443	49715	35.190.80.1	192.168.2.5
Apr 25, 2024 08:39:51.260996103 CEST	49715	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:51.261014938 CEST	443	49715	35.190.80.1	192.168.2.5
Apr 25, 2024 08:39:51.336065054 CEST	49716	443	192.168.2.5	184.31.62.93
Apr 25, 2024 08:39:51.336097002 CEST	443	49716	184.31.62.93	192.168.2.5
Apr 25, 2024 08:39:51.336158991 CEST	49716	443	192.168.2.5	184.31.62.93
Apr 25, 2024 08:39:51.338423014 CEST	49716	443	192.168.2.5	184.31.62.93
Apr 25, 2024 08:39:51.338443041 CEST	443	49716	184.31.62.93	192.168.2.5
Apr 25, 2024 08:39:51.347922087 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 25, 2024 08:39:51.348007917 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 25, 2024 08:39:51.464339018 CEST	443	49715	35.190.80.1	192.168.2.5
Apr 25, 2024 08:39:51.464518070 CEST	443	49715	35.190.80.1	192.168.2.5
Apr 25, 2024 08:39:51.464581966 CEST	49715	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:51.465296030 CEST	49715	443	192.168.2.5	35.190.80.1
Apr 25, 2024 08:39:51.465313911 CEST	443	49715	35.190.80.1	192.168.2.5
Apr 25, 2024 08:39:51.568993092 CEST	443	49716	184.31.62.93	192.168.2.5
Apr 25, 2024 08:39:51.569060087 CEST	49716	443	192.168.2.5	184.31.62.93
Apr 25, 2024 08:39:51.575619936 CEST	49716	443	192.168.2.5	184.31.62.93
Apr 25, 2024 08:39:51.575628996 CEST	443	49716	184.31.62.93	192.168.2.5
Apr 25, 2024 08:39:51.576020956 CEST	443	49716	184.31.62.93	192.168.2.5
Apr 25, 2024 08:39:51.620382071 CEST	49716	443	192.168.2.5	184.31.62.93
Apr 25, 2024 08:39:51.775341034 CEST	49716	443	192.168.2.5	184.31.62.93
Apr 25, 2024 08:39:51.820130110 CEST	443	49716	184.31.62.93	192.168.2.5
Apr 25, 2024 08:39:51.885957956 CEST	443	49716	184.31.62.93	192.168.2.5
Apr 25, 2024 08:39:51.886038065 CEST	443	49716	184.31.62.93	192.168.2.5
Apr 25, 2024 08:39:51.886081934 CEST	49716	443	192.168.2.5	184.31.62.93
Apr 25, 2024 08:39:51.891865969 CEST	49716	443	192.168.2.5	184.31.62.93
Apr 25, 2024 08:39:51.891884089 CEST	443	49716	184.31.62.93	192.168.2.5
Apr 25, 2024 08:39:51.891896963 CEST	49716	443	192.168.2.5	184.31.62.93
Apr 25, 2024 08:39:51.891902924 CEST	443	49716	184.31.62.93	192.168.2.5
Apr 25, 2024 08:39:51.943315983 CEST	49717	443	192.168.2.5	184.31.62.93
Apr 25, 2024 08:39:51.943356037 CEST	443	49717	184.31.62.93	192.168.2.5
Apr 25, 2024 08:39:51.943423033 CEST	49717	443	192.168.2.5	184.31.62.93
Apr 25, 2024 08:39:51.944046021 CEST	49717	443	192.168.2.5	184.31.62.93
Apr 25, 2024 08:39:51.944061041 CEST	443	49717	184.31.62.93	192.168.2.5
Apr 25, 2024 08:39:52.174644947 CEST	443	49717	184.31.62.93	192.168.2.5
Apr 25, 2024 08:39:52.174752951 CEST	49717	443	192.168.2.5	184.31.62.93
Apr 25, 2024 08:39:52.176362038 CEST	49717	443	192.168.2.5	184.31.62.93
Apr 25, 2024 08:39:52.176382065 CEST	443	49717	184.31.62.93	192.168.2.5
Apr 25, 2024 08:39:52.176889896 CEST	443	49717	184.31.62.93	192.168.2.5
Apr 25, 2024 08:39:52.178653002 CEST	49717	443	192.168.2.5	184.31.62.93
Apr 25, 2024 08:39:52.224119902 CEST	443	49717	184.31.62.93	192.168.2.5
Apr 25, 2024 08:39:52.389995098 CEST	443	49717	184.31.62.93	192.168.2.5
Apr 25, 2024 08:39:52.390146017 CEST	443	49717	184.31.62.93	192.168.2.5
Apr 25, 2024 08:39:52.390326977 CEST	49717	443	192.168.2.5	184.31.62.93
Apr 25, 2024 08:39:52.391432047 CEST	49717	443	192.168.2.5	184.31.62.93
Apr 25, 2024 08:39:52.391482115 CEST	443	49717	184.31.62.93	192.168.2.5
Apr 25, 2024 08:39:52.391515970 CEST	49717	443	192.168.2.5	184.31.62.93
Apr 25, 2024 08:39:52.391531944 CEST	443	49717	184.31.62.93	192.168.2.5
Apr 25, 2024 08:39:59.862340927 CEST	443	49711	108.177.122.147	192.168.2.5
Apr 25, 2024 08:39:59.862418890 CEST	443	49711	108.177.122.147	192.168.2.5
Apr 25, 2024 08:39:59.862476110 CEST	49711	443	192.168.2.5	108.177.122.147
Apr 25, 2024 08:40:00.634923935 CEST	49711	443	192.168.2.5	108.177.122.147
Apr 25, 2024 08:40:00.634963036 CEST	443	49711	108.177.122.147	192.168.2.5
Apr 25, 2024 08:40:00.776633024 CEST	49719	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:00.776722908 CEST	443	49719	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:00.776884079 CEST	49719	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:00.776983976 CEST	49720	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:00.777059078 CEST	443	49720	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:00.777183056 CEST	49719	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:00.777199984 CEST	49720	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:00.777211905 CEST	443	49719	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:00.777415037 CEST	49720	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:00.777446985 CEST	443	49720	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.216679096 CEST	443	49720	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.216944933 CEST	49720	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.216994047 CEST	443	49720	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.218004942 CEST	443	49720	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.218069077 CEST	49720	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.223278046 CEST	49720	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.223346949 CEST	443	49720	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.223443985 CEST	49720	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.264141083 CEST	443	49720	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.269239902 CEST	49720	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.269258976 CEST	443	49720	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.318615913 CEST	49720	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.411694050 CEST	443	49719	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.412086010 CEST	49719	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.412151098 CEST	443	49719	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.415776968 CEST	443	49719	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.415878057 CEST	49719	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.416327000 CEST	49719	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.416410923 CEST	443	49719	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.458511114 CEST	49719	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.458533049 CEST	443	49719	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.503002882 CEST	49719	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.516565084 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 25, 2024 08:40:01.516674042 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 25, 2024 08:40:01.516985893 CEST	49725	443	192.168.2.5	23.1.237.91
Apr 25, 2024 08:40:01.517065048 CEST	443	49725	23.1.237.91	192.168.2.5
Apr 25, 2024 08:40:01.517515898 CEST	49725	443	192.168.2.5	23.1.237.91
Apr 25, 2024 08:40:01.517726898 CEST	49725	443	192.168.2.5	23.1.237.91
Apr 25, 2024 08:40:01.517760992 CEST	443	49725	23.1.237.91	192.168.2.5
Apr 25, 2024 08:40:01.663892984 CEST	443	49720	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.663930893 CEST	443	49720	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.663939953 CEST	443	49720	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.663985014 CEST	443	49720	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.663996935 CEST	443	49720	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.664014101 CEST	49720	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.664057970 CEST	443	49720	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.664086103 CEST	443	49720	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.664088964 CEST	49720	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.664141893 CEST	49720	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.674228907 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 25, 2024 08:40:01.674243927 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 25, 2024 08:40:01.679476976 CEST	49720	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.679522991 CEST	443	49720	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.801142931 CEST	49727	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.801182032 CEST	443	49727	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.801330090 CEST	49727	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.801609993 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.801667929 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.801743984 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.802016020 CEST	49729	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.802087069 CEST	443	49729	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.802474976 CEST	49729	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.804775000 CEST	49730	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.804841995 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.804925919 CEST	49730	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.805361986 CEST	49730	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.805392981 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.805902004 CEST	49729	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.805933952 CEST	443	49729	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.806509018 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.806545019 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.806737900 CEST	49727	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:01.806761980 CEST	443	49727	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:01.842381954 CEST	443	49725	23.1.237.91	192.168.2.5
Apr 25, 2024 08:40:01.842462063 CEST	49725	443	192.168.2.5	23.1.237.91
Apr 25, 2024 08:40:02.248310089 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.250602007 CEST	443	49727	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.254312992 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.254668951 CEST	443	49729	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.301335096 CEST	49730	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.301567078 CEST	49727	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.301585913 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.301589012 CEST	49729	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.308276892 CEST	49729	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.308305979 CEST	443	49729	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.308501959 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.308532000 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.308999062 CEST	49727	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.309010983 CEST	443	49727	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.309412003 CEST	49730	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.309441090 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.310101986 CEST	443	49727	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.310117006 CEST	443	49727	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.310168028 CEST	49727	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.310275078 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.310342073 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.310622931 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.310636997 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.310671091 CEST	49730	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.312295914 CEST	443	49729	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.312392950 CEST	49729	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.312644958 CEST	49727	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.312711954 CEST	443	49727	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.313750982 CEST	49730	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.313834906 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.314470053 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.314587116 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.314929962 CEST	49727	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.314938068 CEST	443	49727	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.315112114 CEST	49730	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.315141916 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.315169096 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.315186024 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.319817066 CEST	49729	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.320017099 CEST	443	49729	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.320137024 CEST	49729	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.320152998 CEST	443	49729	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.362926960 CEST	49727	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.363209009 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.363212109 CEST	49730	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.364140987 CEST	49729	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.676127911 CEST	443	49727	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.676146984 CEST	443	49727	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.676152945 CEST	443	49727	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.676213026 CEST	49727	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.676237106 CEST	443	49727	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.676249981 CEST	443	49727	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.676315069 CEST	49727	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.676671028 CEST	443	49729	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.676697969 CEST	443	49729	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.676748991 CEST	49729	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.676779032 CEST	443	49729	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.676800013 CEST	443	49729	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.676839113 CEST	49729	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.676865101 CEST	49729	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.683574915 CEST	49727	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.683598995 CEST	443	49727	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.688194036 CEST	49729	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.688224077 CEST	443	49729	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.830549002 CEST	49732	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:02.830574989 CEST	443	49732	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:02.830635071 CEST	49732	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:02.832454920 CEST	49732	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:02.832472086 CEST	443	49732	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:02.844271898 CEST	49725	443	192.168.2.5	23.1.237.91
Apr 25, 2024 08:40:02.844297886 CEST	443	49725	23.1.237.91	192.168.2.5
Apr 25, 2024 08:40:02.844747066 CEST	443	49725	23.1.237.91	192.168.2.5
Apr 25, 2024 08:40:02.844811916 CEST	49725	443	192.168.2.5	23.1.237.91
Apr 25, 2024 08:40:02.846348047 CEST	49725	443	192.168.2.5	23.1.237.91
Apr 25, 2024 08:40:02.846380949 CEST	443	49725	23.1.237.91	192.168.2.5
Apr 25, 2024 08:40:02.848050117 CEST	49725	443	192.168.2.5	23.1.237.91
Apr 25, 2024 08:40:02.848059893 CEST	443	49725	23.1.237.91	192.168.2.5
Apr 25, 2024 08:40:02.888258934 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.888278961 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.888286114 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.888312101 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.888330936 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.888343096 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.888353109 CEST	49730	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.888353109 CEST	49730	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.888369083 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.888381958 CEST	49730	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.888406992 CEST	49730	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.888907909 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.888926983 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.888959885 CEST	49730	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.888968945 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.888997078 CEST	49730	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.889012098 CEST	49730	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.898030996 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.898057938 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.898066998 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.898111105 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.898118973 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.898139954 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.898153067 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.898192883 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.898227930 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.898228884 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.898228884 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.898267984 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.898329020 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.898353100 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.898387909 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.898405075 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.898432970 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.898452044 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.928651094 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.928694010 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.928721905 CEST	49730	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.928735971 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.928751945 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:02.928771973 CEST	49730	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.928803921 CEST	49730	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.929097891 CEST	49730	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:02.929114103 CEST	443	49730	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.060579062 CEST	443	49732	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:03.060933113 CEST	49732	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:03.060981035 CEST	443	49732	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:03.061852932 CEST	443	49732	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:03.061923027 CEST	49732	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:03.112845898 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.112873077 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.112915039 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.112931013 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.112955093 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.112986088 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.113024950 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.113281012 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.113322973 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.113351107 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.113364935 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.113399982 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.113399982 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.113771915 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.113812923 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.113840103 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.113852024 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.113883972 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.114033937 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.146682978 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.146723986 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.146754026 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.146769047 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.146795988 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.146886110 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.244018078 CEST	443	49725	23.1.237.91	192.168.2.5
Apr 25, 2024 08:40:03.244090080 CEST	49725	443	192.168.2.5	23.1.237.91
Apr 25, 2024 08:40:03.244483948 CEST	443	49725	23.1.237.91	192.168.2.5
Apr 25, 2024 08:40:03.244529963 CEST	49725	443	192.168.2.5	23.1.237.91
Apr 25, 2024 08:40:03.244535923 CEST	443	49725	23.1.237.91	192.168.2.5
Apr 25, 2024 08:40:03.244580030 CEST	49725	443	192.168.2.5	23.1.237.91
Apr 25, 2024 08:40:03.305022955 CEST	49732	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:03.305133104 CEST	443	49732	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:03.305399895 CEST	49732	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:03.305439949 CEST	443	49732	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:03.327153921 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.327174902 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.327222109 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.327239037 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.327261925 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.327291965 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.327305079 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.327362061 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.327975035 CEST	49728	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.328002930 CEST	443	49728	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.360526085 CEST	49732	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:03.376909971 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.376954079 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.377018929 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.377317905 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.377332926 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.622627974 CEST	49734	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.622675896 CEST	443	49734	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.622904062 CEST	49734	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.623912096 CEST	49735	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.624003887 CEST	443	49735	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.624114990 CEST	49735	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.624685049 CEST	49734	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.624706030 CEST	443	49734	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.625384092 CEST	49735	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.625411987 CEST	443	49735	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.626754045 CEST	443	49732	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:03.626811981 CEST	443	49732	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:03.626843929 CEST	443	49732	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:03.626874924 CEST	443	49732	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:03.626904011 CEST	49732	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:03.626938105 CEST	443	49732	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:03.626966953 CEST	49732	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:03.634258032 CEST	443	49732	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:03.634421110 CEST	49732	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:03.634437084 CEST	443	49732	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:03.642055035 CEST	443	49732	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:03.642113924 CEST	49732	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:03.642127037 CEST	443	49732	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:03.649724007 CEST	443	49732	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:03.650376081 CEST	49732	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:03.650388002 CEST	443	49732	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:03.657327890 CEST	443	49732	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:03.657411098 CEST	49732	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:03.793299913 CEST	49732	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:03.793329954 CEST	443	49732	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:03.801100016 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.843427896 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.843453884 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.845407963 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.845746040 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.845889091 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.845936060 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:03.893578053 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:03.985693932 CEST	49736	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:03.985768080 CEST	443	49736	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:03.985853910 CEST	49736	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:03.986315966 CEST	49736	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:03.986346006 CEST	443	49736	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:04.048178911 CEST	443	49734	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.056428909 CEST	443	49735	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.088386059 CEST	49734	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.093036890 CEST	49735	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.093075991 CEST	443	49735	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.093147039 CEST	49734	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.093157053 CEST	443	49734	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.094216108 CEST	443	49734	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.094295025 CEST	49734	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.095364094 CEST	49734	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.095427036 CEST	443	49734	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.095823050 CEST	49734	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.095839024 CEST	443	49734	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.096736908 CEST	443	49735	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.096849918 CEST	49735	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.101651907 CEST	49735	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.101849079 CEST	49735	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.101862907 CEST	443	49735	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.102108955 CEST	443	49735	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.143579006 CEST	49735	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.143583059 CEST	49734	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.143620968 CEST	443	49735	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.190386057 CEST	49735	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.211436033 CEST	443	49736	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:04.212006092 CEST	49736	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:04.212034941 CEST	443	49736	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:04.213030100 CEST	443	49736	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:04.213102102 CEST	49736	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:04.213743925 CEST	49736	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:04.213815928 CEST	443	49736	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:04.214185953 CEST	49736	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:04.214201927 CEST	443	49736	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:04.254398108 CEST	49736	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:04.430507898 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.430584908 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.430603981 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.430623055 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.430641890 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.430676937 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.430689096 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.430695057 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.430723906 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.430728912 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.430740118 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.430772066 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.430919886 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.430958033 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.430984020 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.430996895 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.431010962 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.471643925 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.476313114 CEST	443	49735	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.476422071 CEST	443	49735	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.476442099 CEST	443	49735	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.476475954 CEST	443	49735	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.476490021 CEST	49735	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.476496935 CEST	443	49735	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.476526976 CEST	443	49735	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.476531982 CEST	49735	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.476583004 CEST	49735	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.476665020 CEST	443	49735	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.476732969 CEST	49735	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.477508068 CEST	443	49734	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.477528095 CEST	443	49734	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.477535009 CEST	443	49734	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.477572918 CEST	443	49734	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.477580070 CEST	443	49734	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.477592945 CEST	49734	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.477612972 CEST	443	49734	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.477632046 CEST	49734	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.477648020 CEST	49734	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.638787031 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.638828993 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.638869047 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.638873100 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.638887882 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.638926983 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.638936996 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.638969898 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.639308929 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.639367104 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.639393091 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.639399052 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.639430046 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.639440060 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.639712095 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.639750957 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.639770031 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.639775991 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.639807940 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.639827013 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.641236067 CEST	49734	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.641258001 CEST	443	49734	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.641710997 CEST	49735	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.641756058 CEST	443	49735	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.657938004 CEST	443	49736	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:04.657993078 CEST	443	49736	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:04.658025980 CEST	443	49736	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:04.658056021 CEST	443	49736	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:04.658071041 CEST	49736	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:04.658087015 CEST	443	49736	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:04.658103943 CEST	49736	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:04.665580988 CEST	443	49736	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:04.665638924 CEST	49736	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:04.665647984 CEST	443	49736	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:04.673240900 CEST	443	49736	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:04.673295021 CEST	49736	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:04.673314095 CEST	443	49736	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:04.681191921 CEST	443	49736	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:04.681245089 CEST	49736	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:04.681258917 CEST	443	49736	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:04.681418896 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.681442976 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.681483030 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.681493998 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.681518078 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.681535959 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.688646078 CEST	443	49736	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:04.688703060 CEST	49736	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:04.689131021 CEST	49736	443	192.168.2.5	34.111.35.152
Apr 25, 2024 08:40:04.689163923 CEST	443	49736	34.111.35.152	192.168.2.5
Apr 25, 2024 08:40:04.847275019 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.847331047 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.847358942 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.847378016 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.847410917 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.847434044 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.847893953 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.847934008 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.847963095 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.847969055 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.848006010 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.848825932 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.848870039 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.848900080 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.848907948 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.848946095 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.848964930 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.850132942 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.850172997 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.850205898 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.850212097 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.850250006 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.850277901 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.851115942 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.851155043 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.851193905 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.851200104 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.851242065 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.851264954 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.851717949 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.851758003 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.851795912 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.851802111 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.851830959 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.851865053 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.857578993 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.889739990 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.889784098 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.889818907 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.889849901 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.889867067 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.889892101 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.934601068 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.934643984 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.934699059 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.934708118 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.934756041 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.934771061 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.934778929 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.934818029 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.934824944 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.934938908 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:04.934983015 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.960123062 CEST	49733	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:04.960146904 CEST	443	49733	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:05.732769966 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:05.732832909 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:05.732908010 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:05.733393908 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:05.733409882 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:06.158615112 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:06.166004896 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:06.166032076 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:06.167464018 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:06.167525053 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:06.188203096 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:06.188287973 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:06.188596964 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:06.188612938 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:06.231301069 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:06.789433956 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:06.789452076 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:06.789464951 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:06.789484024 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:06.789522886 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:06.789530993 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:06.789556980 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:06.789570093 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:06.789599895 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:06.789999962 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:06.790025949 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:06.790055990 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:06.790065050 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:06.790076017 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:06.842083931 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:06.999669075 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:06.999682903 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:06.999716997 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:06.999746084 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:06.999754906 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:06.999774933 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:06.999799967 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:06.999825001 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.000418901 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.000441074 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.000479937 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.000487089 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.000519037 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.000538111 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.001004934 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.001027107 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.001069069 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.001075983 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.001100063 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.001118898 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.045629978 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.045653105 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.045697927 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.045710087 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.045746088 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.045762062 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.210046053 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.210069895 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.210109949 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.210120916 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.210156918 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.210730076 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.210752010 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.210798979 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.210804939 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.210829020 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.210841894 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.211389065 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.211410046 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.211452007 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.211457968 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.211483955 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.211497068 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.212090015 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.212121010 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.212143898 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.212150097 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.212182045 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.212199926 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.212752104 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.212769985 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.212821960 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.212830067 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.212933064 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.213509083 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.213534117 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.213571072 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.213577986 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.213603973 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.213618040 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.255767107 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.255788088 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.255856991 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.255866051 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.255911112 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.267501116 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.298744917 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.298768044 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.298806906 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.298816919 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.298858881 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.341011047 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.341078997 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.341093063 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.341113091 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:07.341161013 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.341388941 CEST	49737	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:07.341403961 CEST	443	49737	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:15.128971100 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:15.129046917 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:15.129209995 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:15.130151987 CEST	49740	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:15.130179882 CEST	443	49740	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:15.130348921 CEST	49740	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:15.130722046 CEST	49740	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:15.130734921 CEST	443	49740	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:15.131032944 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:15.131068945 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:15.573920965 CEST	443	49740	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:15.574774981 CEST	49740	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:15.574793100 CEST	443	49740	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:15.576422930 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:15.576658964 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:15.576688051 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:15.578075886 CEST	443	49740	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:15.578166962 CEST	49740	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:15.578324080 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:15.578386068 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:15.578990936 CEST	49740	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:15.579055071 CEST	443	49740	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:15.579866886 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:15.579962015 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:15.580296993 CEST	49740	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:15.580303907 CEST	443	49740	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:15.630171061 CEST	49740	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:15.630443096 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:15.630460978 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:15.675132990 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.225656986 CEST	443	49740	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.225680113 CEST	443	49740	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.225686073 CEST	443	49740	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.225728989 CEST	443	49740	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.225744963 CEST	49740	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.225768089 CEST	443	49740	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.225790024 CEST	443	49740	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.225816011 CEST	443	49740	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.225827932 CEST	443	49740	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.225828886 CEST	49740	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.225828886 CEST	49740	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.225828886 CEST	49740	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.225856066 CEST	49740	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.225869894 CEST	443	49740	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.225884914 CEST	49740	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.225898981 CEST	443	49740	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.225951910 CEST	49740	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.227144003 CEST	49740	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.227158070 CEST	443	49740	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.315804005 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.320513010 CEST	49741	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.320593119 CEST	443	49741	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.320672035 CEST	49741	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.321376085 CEST	49741	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.321408033 CEST	443	49741	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.322474003 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.322520971 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.322577000 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.323187113 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.323201895 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.324198008 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.324237108 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.324294090 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.324999094 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.325014114 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.326102018 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.326112032 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.326167107 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.326642036 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.326653004 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.356149912 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.746174097 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.746251106 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.746272087 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.746290922 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.746320963 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.746330976 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.746352911 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.746372938 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.746390104 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.746423006 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.746423960 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.746452093 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.746567965 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.746613026 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.746635914 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.746654034 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.746685028 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.746706009 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.751111984 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.751384974 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.751415968 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.751554012 CEST	443	49741	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.752224922 CEST	49741	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.752285004 CEST	443	49741	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.752870083 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.752942085 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.753441095 CEST	443	49741	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.753665924 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.753750086 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.755852938 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.755862951 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.756397009 CEST	49741	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.756654024 CEST	49741	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.756674051 CEST	443	49741	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.761534929 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.761794090 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.761801004 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.762864113 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.762921095 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.763498068 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.763588905 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.763936996 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.763942957 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.765889883 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.766283035 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.766298056 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.766977072 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.767508984 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.767596960 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.767729998 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.800126076 CEST	443	49741	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.801534891 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.801589012 CEST	49741	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.808140039 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.816359997 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.960293055 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.960324049 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.960364103 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.960416079 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.960475922 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.960525990 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:16.960536957 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.960581064 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.964260101 CEST	49739	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:16.964289904 CEST	443	49739	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.379229069 CEST	443	49741	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.379291058 CEST	443	49741	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.379312992 CEST	443	49741	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.379352093 CEST	443	49741	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.379398108 CEST	443	49741	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.379487991 CEST	49741	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.379487991 CEST	49741	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.379487991 CEST	49741	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.379487991 CEST	49741	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.379563093 CEST	443	49741	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.379610062 CEST	443	49741	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.379646063 CEST	49741	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.379652023 CEST	443	49741	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.379668951 CEST	49741	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.379708052 CEST	49741	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.380168915 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.380202055 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.380213022 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.380242109 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.380266905 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.380275965 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.380306005 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.380323887 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.380323887 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.380351067 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.381097078 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.381119013 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.381174088 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.381185055 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.381198883 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.381248951 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.389348030 CEST	49741	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.389380932 CEST	443	49741	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.399682045 CEST	49745	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.399709940 CEST	443	49745	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.399792910 CEST	49745	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.400446892 CEST	49745	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.400459051 CEST	443	49745	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.401261091 CEST	49746	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.401305914 CEST	443	49746	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.401408911 CEST	49746	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.401648998 CEST	49746	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.401679993 CEST	443	49746	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.402271032 CEST	49747	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.402301073 CEST	443	49747	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.402470112 CEST	49747	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.402904034 CEST	49747	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.402916908 CEST	443	49747	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.414453030 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.414511919 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.414556026 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.414582014 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.414592981 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.414611101 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.414634943 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.414803982 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.414849043 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.414870024 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.414876938 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.414906025 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.436280012 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.436299086 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.436305046 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.436336040 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.436359882 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.436364889 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.436372042 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.436377048 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.436397076 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.436405897 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.436429024 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.436863899 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.436877966 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.436929941 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.436938047 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.456696033 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.489953041 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.592169046 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.592181921 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.592209101 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.592238903 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.592267036 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.592291117 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.592308044 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.593139887 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.593161106 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.593194962 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.593214989 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.593226910 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.593260050 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.593914032 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.593934059 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.593988895 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.594008923 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.594048023 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.629645109 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.629667997 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.629709005 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.629719019 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.629761934 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.629770041 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.629806042 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.630042076 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.630085945 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.630127907 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.630135059 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.630162001 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.630175114 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.630525112 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.630573034 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.630593061 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.630599976 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.630624056 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.630641937 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.631639004 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.631661892 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.631697893 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.631731987 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.631747961 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.631803036 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.650927067 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.650938988 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.650953054 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.650980949 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.650988102 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.651015043 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.651031017 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.651055098 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.651477098 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.651499987 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.651554108 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.651571989 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.651621103 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.651911020 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.651923895 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.651967049 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.651983023 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.652029991 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.664618969 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.664664984 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.664709091 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.664716005 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.664741039 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.664753914 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.664935112 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.664948940 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.664999962 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.665024996 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.665229082 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.802124023 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.802146912 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.802180052 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.802191973 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.802223921 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.802253008 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.802258968 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.802305937 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.802767038 CEST	49743	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.802792072 CEST	443	49743	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.804929972 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.805001020 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.805080891 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.805289984 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.805322886 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.830132961 CEST	443	49745	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.830372095 CEST	49745	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.830384970 CEST	443	49745	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.831474066 CEST	443	49745	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.831778049 CEST	49745	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.831898928 CEST	49745	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.831903934 CEST	443	49745	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.831944942 CEST	443	49745	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.837106943 CEST	443	49746	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.837311029 CEST	49746	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.837347984 CEST	443	49746	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.838202000 CEST	443	49746	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.838601112 CEST	49746	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.838733912 CEST	49746	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.838746071 CEST	443	49746	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.838763952 CEST	443	49746	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.839798927 CEST	443	49747	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.839986086 CEST	49747	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.839998007 CEST	443	49747	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.841489077 CEST	443	49747	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.841547966 CEST	49747	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.841865063 CEST	49747	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.841942072 CEST	443	49747	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.841993093 CEST	49747	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.844400883 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.844456911 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.844476938 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.844490051 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.844511032 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.844532967 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.845618963 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.845664024 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.845686913 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.845694065 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.845719099 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.845731974 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.846513033 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.846559048 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.846591949 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.846597910 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.846626043 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.846633911 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.847510099 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.847558022 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.847575903 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.847584009 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.847608089 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.847625017 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.848143101 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.848206997 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.848223925 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.848288059 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.848613024 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.848661900 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.848691940 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.848697901 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.848709106 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.848822117 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.865727901 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.865750074 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.865811110 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.865835905 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.865904093 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.866725922 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.866738081 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.866789103 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.866811037 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.866861105 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.867419958 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.867433071 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.867486000 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.867510080 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.867547989 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.867914915 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.867927074 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.867971897 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.867989063 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.868010998 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.868029118 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.868761063 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.868774891 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.868840933 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.868856907 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.868897915 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.869282007 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.869294882 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.869354963 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.869369984 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.869389057 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.869493008 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.879892111 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.879946947 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.879951954 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.879976988 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.879990101 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.880033016 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.880449057 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.880503893 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.880517960 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.880528927 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.880547047 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.880562067 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.880575895 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.880749941 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.880783081 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.880796909 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.880809069 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.880812883 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.880841017 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.880867004 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.880892038 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.880896091 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.880902052 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.880939007 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.880959988 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.881042004 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.881051064 CEST	443	49742	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.881058931 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.881073952 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.881088972 CEST	49742	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.881351948 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.881357908 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.881417990 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.881433964 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.881581068 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.883723021 CEST	49749	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.883790970 CEST	443	49749	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.883858919 CEST	49749	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.884125948 CEST	49749	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.884152889 CEST	443	49749	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.885945082 CEST	49745	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.885952950 CEST	49746	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.885987997 CEST	49747	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.886003017 CEST	443	49747	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.929379940 CEST	49747	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.985245943 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.985281944 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:17.985419035 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.989767075 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:17.989782095 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.080578089 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.080595016 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.080662966 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.080693960 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.080940008 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.080970049 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.080976963 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.080991030 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.081020117 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.081020117 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.081048012 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.081073999 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.156877041 CEST	49744	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.156914949 CEST	443	49744	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.157466888 CEST	49751	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.157500982 CEST	443	49751	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.157569885 CEST	49751	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.161000013 CEST	49751	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.161021948 CEST	443	49751	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.172656059 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.172732115 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.172804117 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.173031092 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.173053980 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.230979919 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.250001907 CEST	443	49745	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.250060081 CEST	443	49745	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.250082016 CEST	443	49745	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.250101089 CEST	443	49745	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.250133038 CEST	49745	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.250139952 CEST	443	49745	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.250171900 CEST	443	49745	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.250176907 CEST	49745	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.250200987 CEST	49745	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.250308990 CEST	443	49745	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.253525972 CEST	49745	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.280848980 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.282670975 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.282695055 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.286343098 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.286418915 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.288227081 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.288409948 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.288599014 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.310112953 CEST	443	49746	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.310142040 CEST	443	49746	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.310153008 CEST	443	49746	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.310178995 CEST	443	49746	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.310218096 CEST	443	49746	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.310218096 CEST	49746	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.310267925 CEST	443	49746	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.310292959 CEST	443	49746	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.310298920 CEST	49746	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.310298920 CEST	49746	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.310339928 CEST	49746	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.310339928 CEST	49746	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.311590910 CEST	443	49747	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.311614990 CEST	443	49747	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.311628103 CEST	443	49747	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.311646938 CEST	443	49747	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.311655045 CEST	443	49747	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.311662912 CEST	443	49747	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.311683893 CEST	49747	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.311697006 CEST	443	49747	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.311728001 CEST	49747	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.311769962 CEST	49747	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.311774969 CEST	443	49747	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.311784983 CEST	443	49747	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.311847925 CEST	49747	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.314487934 CEST	443	49749	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.332148075 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.342597961 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.342617989 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.355254889 CEST	49749	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.384676933 CEST	49749	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.384701014 CEST	443	49749	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.386464119 CEST	443	49749	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.387345076 CEST	49749	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.387545109 CEST	443	49749	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.387582064 CEST	49749	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.393120050 CEST	49745	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.393143892 CEST	443	49745	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.393738985 CEST	49753	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.393774986 CEST	443	49753	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.393894911 CEST	49753	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.396712065 CEST	49753	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.396725893 CEST	443	49753	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.398461103 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.401679039 CEST	49746	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.401717901 CEST	443	49746	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.401974916 CEST	49754	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.402019978 CEST	443	49754	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.402081966 CEST	49754	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.402986050 CEST	49747	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.403001070 CEST	443	49747	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.403311014 CEST	49755	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.403325081 CEST	443	49755	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.403409958 CEST	49755	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.404122114 CEST	49754	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.404154062 CEST	443	49754	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.404736042 CEST	49755	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.404743910 CEST	443	49755	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.426307917 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.427522898 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.427540064 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.427921057 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.428340912 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.428400993 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.428477049 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.432117939 CEST	443	49749	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.441139936 CEST	49749	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.472121954 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.473566055 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.596513987 CEST	443	49751	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.598483086 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.629843950 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.629878044 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.630099058 CEST	49751	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.630121946 CEST	443	49751	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.630364895 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.630465984 CEST	443	49751	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.631006002 CEST	49751	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.631071091 CEST	443	49751	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.631432056 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.631546021 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.631632090 CEST	49751	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.631684065 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.643486023 CEST	49756	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.643516064 CEST	443	49756	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.643606901 CEST	49756	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.668126106 CEST	49756	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.668148041 CEST	443	49756	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.672125101 CEST	443	49751	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.672130108 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.674240112 CEST	49757	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.674266100 CEST	443	49757	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.674328089 CEST	49757	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.674513102 CEST	49757	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.674525976 CEST	443	49757	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.676157951 CEST	49758	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.676237106 CEST	443	49758	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.676805973 CEST	49758	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.677108049 CEST	49758	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.677144051 CEST	443	49758	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.819117069 CEST	443	49753	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.819401026 CEST	49753	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.819421053 CEST	443	49753	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.819711924 CEST	443	49753	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.820137978 CEST	49753	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.820194006 CEST	443	49753	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.820595980 CEST	49753	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.828792095 CEST	443	49754	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.829011917 CEST	49754	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.829032898 CEST	443	49754	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.829509020 CEST	443	49754	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.829834938 CEST	49754	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.829932928 CEST	443	49754	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.830033064 CEST	49754	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.831864119 CEST	443	49755	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.835061073 CEST	49755	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.835074902 CEST	443	49755	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.836564064 CEST	443	49755	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.836618900 CEST	49755	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.837074041 CEST	49755	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.837150097 CEST	443	49755	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.837327957 CEST	49755	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.837333918 CEST	443	49755	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.857423067 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.857481956 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.857501984 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.857551098 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.857551098 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.857594013 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.857613087 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.857628107 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.857635021 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.857652903 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.857660055 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.857675076 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.857688904 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.857718945 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.857878923 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.857898951 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.857954979 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.857955933 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.857966900 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.857986927 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.858009100 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.858026981 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.858052015 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.864156008 CEST	443	49753	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.872118950 CEST	443	49754	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.877697945 CEST	49755	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.912519932 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.942656040 CEST	443	49749	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.942733049 CEST	443	49749	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.942755938 CEST	443	49749	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.942775965 CEST	443	49749	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.942799091 CEST	49749	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.942815065 CEST	443	49749	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.942836046 CEST	443	49749	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.942840099 CEST	49749	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.942866087 CEST	443	49749	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.942867041 CEST	49749	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.942883015 CEST	49749	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.942919970 CEST	49749	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.942995071 CEST	443	49749	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.943054914 CEST	443	49749	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.943056107 CEST	49749	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.943078995 CEST	443	49749	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.943116903 CEST	49749	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.943140984 CEST	49749	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.943165064 CEST	443	49749	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.943403959 CEST	443	49749	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.943552971 CEST	49749	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.948416948 CEST	49749	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.948446035 CEST	443	49749	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.948983908 CEST	49759	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.949021101 CEST	443	49759	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.949093103 CEST	49759	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.950423956 CEST	49759	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.950453997 CEST	443	49759	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.954086065 CEST	49760	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.954128027 CEST	443	49760	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:18.954204082 CEST	49760	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.954401016 CEST	49760	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:18.954435110 CEST	443	49760	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.065788984 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.065820932 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.065867901 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.065886021 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.065895081 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.065929890 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.065956116 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.065983057 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.066004992 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.066035986 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.066078901 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.066102982 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.066118002 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.066143036 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.066164017 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.066572905 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.066617012 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.066647053 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.066658974 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.066689014 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.066708088 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.067018032 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.067078114 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.067109108 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.067122936 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.067152023 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.067172050 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.067214012 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.067274094 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.078162909 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.078231096 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.078253031 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.078290939 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.078310966 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.078330040 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.078342915 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.078362942 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.078397036 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.078428984 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.078476906 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.078493118 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.078501940 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.078551054 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.095845938 CEST	443	49756	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.118443966 CEST	443	49757	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.121838093 CEST	443	49758	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.123032093 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.138319016 CEST	49756	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.169565916 CEST	49757	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.169572115 CEST	49758	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.232816935 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.232877970 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.232920885 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.232971907 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.233014107 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.233041048 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.233052969 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.233064890 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.233083963 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.233113050 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.233129978 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.233192921 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.233206987 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.235074997 CEST	443	49753	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.235141039 CEST	443	49753	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.235219002 CEST	49753	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.252804041 CEST	443	49754	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.252953053 CEST	443	49755	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.253032923 CEST	443	49755	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.253077984 CEST	443	49754	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.253082037 CEST	49755	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.253120899 CEST	49754	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.258383036 CEST	443	49751	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.258405924 CEST	443	49751	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.258419991 CEST	443	49751	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.258472919 CEST	49751	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.258488894 CEST	443	49751	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.258503914 CEST	443	49751	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.258548975 CEST	49751	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.278970003 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.295331955 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.295356989 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.295403004 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.295442104 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.295464039 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.295489073 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.295511007 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.296083927 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.296145916 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.296170950 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.296183109 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.296209097 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.296238899 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.296940088 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.296987057 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.297050953 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.297058105 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.297075033 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.297108889 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.331933022 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.331978083 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.332015991 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.332026005 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.332055092 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.332070112 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.380737066 CEST	443	49759	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.388968945 CEST	443	49760	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.435205936 CEST	49759	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.435544014 CEST	49760	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.441337109 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.441401958 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.441456079 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.441502094 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.441535950 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.441555023 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.441658974 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.441699982 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.441750050 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.441761971 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.441786051 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.441808939 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.442182064 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.442230940 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.442265034 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.442276001 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.442331076 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.442331076 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.474138021 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.474180937 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.474221945 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.474235058 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.474266052 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.474287033 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.513868093 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.513916016 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.513972998 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.513993979 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.514008045 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.514034033 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.514067888 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.514110088 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.514121056 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.514139891 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.514158964 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.514194965 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.514292955 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.514331102 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.514353991 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.514360905 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.514389038 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.514403105 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.514429092 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.514487982 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.514488935 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.514512062 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.514539957 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.514550924 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.514833927 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.514877081 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.514906883 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.514914989 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.514942884 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.514954090 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.546344995 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.546387911 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.546430111 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.546437979 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.546463966 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.546480894 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.546915054 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.546957970 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.546974897 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.546983004 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.547008991 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.547024965 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.547585011 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.547627926 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.547652006 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.547658920 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.547691107 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.547704935 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.547826052 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.547882080 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.547885895 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.547905922 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.547941923 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.548032045 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.548079014 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.649760008 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.649811029 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.649898052 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.649899006 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.649961948 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.650007963 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.650396109 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.650439024 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.650480986 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.650496006 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.650523901 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.650542021 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.651089907 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.651144981 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.651180029 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.651192904 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.651217937 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.651237965 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.651529074 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.651588917 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.651597977 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.651617050 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.651648998 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.651670933 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.652057886 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.652097940 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.652128935 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.652143955 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.652203083 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.652203083 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.652592897 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.652632952 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.652669907 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.652682066 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.652705908 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.652724981 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.685755968 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.685800076 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.685858011 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.685923100 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.685980082 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.685980082 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.739124060 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.739173889 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.739221096 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.739240885 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.739272118 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.739293098 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.858716965 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.858777046 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.858823061 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.858846903 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.858874083 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.858895063 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.859321117 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.859373093 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.859402895 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.859415054 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.859440088 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:19.859559059 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:19.859627962 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.457403898 CEST	49760	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.457474947 CEST	443	49760	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.457509041 CEST	49759	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.457564116 CEST	443	49759	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.457851887 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.457976103 CEST	49758	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.458007097 CEST	443	49758	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.458075047 CEST	49757	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.458103895 CEST	443	49757	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.458197117 CEST	49756	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.458233118 CEST	443	49756	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.458246946 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.458695889 CEST	443	49760	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.458770037 CEST	49760	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.458842993 CEST	443	49756	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.458936930 CEST	443	49759	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.459309101 CEST	443	49757	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.459572077 CEST	443	49758	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.459640980 CEST	49758	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.463747978 CEST	49760	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.463840008 CEST	443	49760	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.464123011 CEST	49756	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.464221001 CEST	443	49756	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.464600086 CEST	49759	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.464679956 CEST	443	49759	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.464824915 CEST	49757	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.465020895 CEST	443	49757	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.465065002 CEST	49758	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.465163946 CEST	443	49758	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.465387106 CEST	49760	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.465405941 CEST	443	49760	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.465598106 CEST	49756	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.465637922 CEST	49759	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.465729952 CEST	49757	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.465783119 CEST	49758	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.465799093 CEST	443	49758	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.501439095 CEST	49748	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.501497984 CEST	443	49748	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.502016068 CEST	49761	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.502039909 CEST	443	49761	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.502095938 CEST	49761	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.504450083 CEST	49761	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.504478931 CEST	443	49761	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.508145094 CEST	443	49759	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.508166075 CEST	443	49757	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.510437965 CEST	49758	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.510437965 CEST	49760	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.512124062 CEST	443	49756	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.513000965 CEST	49755	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.513030052 CEST	443	49755	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.513508081 CEST	49754	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.513535023 CEST	443	49754	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.514183044 CEST	49753	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.514199018 CEST	443	49753	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.515547991 CEST	49751	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.515566111 CEST	443	49751	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.543051958 CEST	49762	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.543093920 CEST	443	49762	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.543154001 CEST	49762	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.553003073 CEST	49763	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.553023100 CEST	443	49763	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.553073883 CEST	49763	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.553576946 CEST	49764	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.553603888 CEST	443	49764	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.553649902 CEST	49764	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.554238081 CEST	49765	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.554260969 CEST	443	49765	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.554303885 CEST	49765	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.554725885 CEST	49762	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.554747105 CEST	443	49762	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.558456898 CEST	49763	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.558474064 CEST	443	49763	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.558826923 CEST	49764	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.558839083 CEST	443	49764	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.559174061 CEST	49765	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.559186935 CEST	443	49765	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.559547901 CEST	49752	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.559611082 CEST	443	49752	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.559921980 CEST	49750	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.559933901 CEST	443	49750	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.604594946 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.604680061 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.604751110 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.605056047 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.605087996 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.607019901 CEST	49767	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.607045889 CEST	443	49767	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.607098103 CEST	49767	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.607460976 CEST	49767	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.607472897 CEST	443	49767	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.689954996 CEST	443	49760	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.689977884 CEST	443	49760	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.689985991 CEST	443	49760	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.690002918 CEST	443	49760	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.690009117 CEST	443	49760	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.690047979 CEST	49760	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.690080881 CEST	443	49760	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.690103054 CEST	443	49760	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.690108061 CEST	49760	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.690145969 CEST	49760	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.700298071 CEST	49760	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.700320005 CEST	443	49760	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.700707912 CEST	49768	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.700738907 CEST	443	49768	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.700809956 CEST	49768	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.701775074 CEST	49768	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.701790094 CEST	443	49768	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.893440962 CEST	443	49759	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.893461943 CEST	443	49759	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.893470049 CEST	443	49759	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.893480062 CEST	443	49759	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.893503904 CEST	443	49759	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.893526077 CEST	49759	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.893573046 CEST	443	49759	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.893605947 CEST	49759	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.893629074 CEST	49759	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.893850088 CEST	443	49759	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.893907070 CEST	443	49759	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.893927097 CEST	49759	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.893958092 CEST	49759	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.898032904 CEST	49759	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.898060083 CEST	443	49759	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.898961067 CEST	443	49758	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.898979902 CEST	443	49758	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.898989916 CEST	443	49758	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.899015903 CEST	443	49758	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.899025917 CEST	443	49758	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.899039030 CEST	443	49758	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.899039030 CEST	49758	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.899077892 CEST	443	49758	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.899100065 CEST	443	49758	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.899116039 CEST	49758	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.899116993 CEST	49758	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.899148941 CEST	49758	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.899456978 CEST	443	49758	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.899473906 CEST	443	49758	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.899504900 CEST	49758	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.899521112 CEST	443	49758	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.899538040 CEST	49758	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.899549961 CEST	443	49758	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.899563074 CEST	49758	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.899589062 CEST	49758	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.903839111 CEST	443	49756	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.903871059 CEST	443	49756	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.903881073 CEST	443	49756	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.903898954 CEST	443	49756	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.903907061 CEST	443	49756	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.903942108 CEST	49756	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.903959990 CEST	443	49756	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.903974056 CEST	443	49756	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.903990030 CEST	49756	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.904010057 CEST	49756	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.904031992 CEST	49756	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.904365063 CEST	443	49757	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.904428005 CEST	443	49757	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.904447079 CEST	443	49757	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.904479980 CEST	49757	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.904489040 CEST	443	49757	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.904501915 CEST	49757	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.904521942 CEST	443	49757	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.904540062 CEST	49757	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.904552937 CEST	443	49757	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.904566050 CEST	49757	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.904608965 CEST	49757	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.904663086 CEST	443	49757	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.904712915 CEST	49757	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.904721975 CEST	443	49757	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.904819012 CEST	443	49757	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.904860020 CEST	49757	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.931864977 CEST	49769	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.931864977 CEST	443	49761	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.931889057 CEST	443	49769	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.931941032 CEST	49769	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.932291985 CEST	49761	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.932312965 CEST	443	49761	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.932492971 CEST	49769	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.932507992 CEST	443	49769	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.932612896 CEST	443	49761	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.932888985 CEST	49761	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.932951927 CEST	443	49761	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.932991982 CEST	49761	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.936219931 CEST	49757	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.936240911 CEST	443	49757	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.936681986 CEST	49770	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.936723948 CEST	443	49770	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.936786890 CEST	49770	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.938163996 CEST	49770	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.938193083 CEST	443	49770	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.938369989 CEST	49756	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.938391924 CEST	443	49756	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.938791990 CEST	49771	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.938843966 CEST	443	49771	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.938920021 CEST	49771	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.939960003 CEST	49771	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.939989090 CEST	443	49771	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.940329075 CEST	49758	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.940346956 CEST	443	49758	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.976161003 CEST	443	49761	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.988893032 CEST	443	49765	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.989506006 CEST	443	49764	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.990431070 CEST	49764	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.990449905 CEST	443	49764	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.990550995 CEST	49765	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.990576029 CEST	443	49765	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.991477013 CEST	443	49764	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.991533995 CEST	49764	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.991614103 CEST	443	49765	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.991657019 CEST	49765	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.992043972 CEST	49765	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.992127895 CEST	443	49765	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.992325068 CEST	49764	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.992386103 CEST	443	49764	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.992436886 CEST	49765	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.992441893 CEST	443	49765	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.992495060 CEST	49764	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:20.992501974 CEST	443	49764	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:20.999825954 CEST	443	49762	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.000067949 CEST	49762	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.000092983 CEST	443	49762	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.000613928 CEST	443	49762	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.000940084 CEST	49762	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.001043081 CEST	443	49762	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.001056910 CEST	49762	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.004960060 CEST	443	49763	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.005314112 CEST	49763	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.005337000 CEST	443	49763	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.007211924 CEST	443	49763	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.007270098 CEST	49763	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.007755995 CEST	49763	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.007834911 CEST	443	49763	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.007879972 CEST	49763	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.037341118 CEST	49764	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.037348032 CEST	49761	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.037374973 CEST	49765	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.044116974 CEST	443	49762	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.047269106 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.047589064 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.047631979 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.048001051 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.048130989 CEST	443	49763	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.048407078 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.048477888 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.048510075 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.051388025 CEST	443	49767	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.051867008 CEST	49762	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.052644968 CEST	49767	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.052656889 CEST	443	49767	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.053803921 CEST	443	49767	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.054320097 CEST	49767	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.054523945 CEST	49767	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.054723978 CEST	443	49767	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.092144966 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.102679968 CEST	49767	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.126738071 CEST	443	49768	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.154553890 CEST	49768	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.154573917 CEST	443	49768	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.155567884 CEST	49763	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.155605078 CEST	443	49763	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.155643940 CEST	443	49768	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.155734062 CEST	49768	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.155761003 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.156291962 CEST	49768	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.156353951 CEST	443	49768	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.157244921 CEST	49768	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.157254934 CEST	443	49768	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.296966076 CEST	49763	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.297033072 CEST	49768	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.357912064 CEST	443	49769	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.358320951 CEST	49769	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.358331919 CEST	443	49769	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.360831022 CEST	443	49769	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.360896111 CEST	49769	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.361479044 CEST	49769	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.361649036 CEST	443	49769	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.361800909 CEST	49769	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.361809015 CEST	443	49769	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.372256994 CEST	443	49770	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.372526884 CEST	49770	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.372575998 CEST	443	49770	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.374010086 CEST	443	49770	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.374077082 CEST	49770	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.374404907 CEST	443	49771	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.374594927 CEST	49770	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.374680042 CEST	443	49770	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.374862909 CEST	49771	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.374921083 CEST	443	49771	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.374970913 CEST	49770	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.374986887 CEST	443	49770	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.378237963 CEST	443	49771	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.378298044 CEST	49771	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.381376028 CEST	49771	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.381484985 CEST	49771	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.381532907 CEST	443	49771	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.410664082 CEST	443	49765	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.410692930 CEST	443	49765	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.410722971 CEST	443	49765	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.410737991 CEST	49765	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.410757065 CEST	443	49765	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.410789013 CEST	49765	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.410799980 CEST	443	49765	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.410835028 CEST	49765	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.414995909 CEST	49765	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.415009022 CEST	443	49765	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.415529013 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.415611982 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.415690899 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.419414997 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.419450998 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.423146009 CEST	49770	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.431521893 CEST	49773	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.431556940 CEST	443	49773	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.431629896 CEST	49773	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.431878090 CEST	49773	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.431890965 CEST	443	49773	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.438091993 CEST	443	49762	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.438179016 CEST	443	49762	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.438189983 CEST	443	49762	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.438221931 CEST	443	49762	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.438237906 CEST	49762	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.438250065 CEST	443	49762	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.438272953 CEST	49762	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.438290119 CEST	49762	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.438340902 CEST	443	49762	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.438391924 CEST	49762	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.439152002 CEST	49762	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.439165115 CEST	443	49762	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.474961042 CEST	443	49763	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.475022078 CEST	443	49763	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.475044966 CEST	443	49763	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.475070953 CEST	443	49763	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.475111008 CEST	443	49763	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.475131035 CEST	443	49763	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.475173950 CEST	49763	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.475173950 CEST	49763	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.475173950 CEST	49763	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.475174904 CEST	49763	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.475207090 CEST	443	49763	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.475255966 CEST	49763	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.475291967 CEST	443	49763	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.475339890 CEST	49763	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.478246927 CEST	49763	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.478264093 CEST	443	49763	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.480762959 CEST	443	49767	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.480889082 CEST	443	49767	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.480937958 CEST	49767	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.482151031 CEST	49774	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.482198954 CEST	443	49774	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.482254982 CEST	49774	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.482835054 CEST	49774	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.482846975 CEST	443	49774	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.483055115 CEST	49767	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.483084917 CEST	443	49767	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.529864073 CEST	49769	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.531801939 CEST	49771	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.531858921 CEST	443	49771	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.543764114 CEST	443	49768	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.543836117 CEST	443	49768	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.543886900 CEST	49768	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.565933943 CEST	443	49761	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.565953970 CEST	443	49761	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.565965891 CEST	443	49761	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.565982103 CEST	443	49761	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.565989971 CEST	443	49761	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.565996885 CEST	443	49761	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.566015005 CEST	49761	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.566050053 CEST	443	49761	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.566087008 CEST	49761	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.566097975 CEST	443	49761	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.566123009 CEST	49761	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.566129923 CEST	443	49761	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.566142082 CEST	49761	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.566171885 CEST	49761	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.638712883 CEST	443	49764	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.638772011 CEST	443	49764	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.638780117 CEST	443	49764	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.638792038 CEST	443	49764	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.638816118 CEST	443	49764	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.638832092 CEST	49764	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.638847113 CEST	443	49764	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.638868093 CEST	49764	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.638895035 CEST	49764	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.639102936 CEST	443	49764	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.639138937 CEST	443	49764	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.639163017 CEST	49764	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.639168978 CEST	443	49764	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.639197111 CEST	49764	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.639218092 CEST	49764	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.689111948 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.689191103 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.689212084 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.689245939 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.689256907 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.689275026 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.689296007 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.689302921 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.689302921 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.689326048 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.689336061 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.689336061 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.689352036 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.689373970 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.689541101 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.689593077 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.689601898 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.689620018 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.689639091 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.689656019 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.689682007 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.732976913 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.733259916 CEST	49771	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.780113935 CEST	443	49769	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.780145884 CEST	443	49769	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.780158997 CEST	443	49769	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.780180931 CEST	443	49769	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.780196905 CEST	443	49769	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.780200958 CEST	49769	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.780224085 CEST	443	49769	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.780239105 CEST	49769	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.780249119 CEST	443	49769	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.780268908 CEST	49769	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.780311108 CEST	443	49769	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.780356884 CEST	49769	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.800370932 CEST	443	49770	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.800453901 CEST	443	49770	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.800520897 CEST	49770	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.839270115 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.865840912 CEST	443	49773	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.903580904 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.903613091 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.903657913 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.903688908 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.903728008 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.903804064 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.903834105 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.903856039 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.904414892 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.904454947 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.904476881 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.904493093 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.904525995 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.904545069 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.904885054 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.904927015 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.904949903 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.904963970 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.904989958 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.905029058 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.910459042 CEST	443	49774	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.936116934 CEST	49773	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.936320066 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.946502924 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.946566105 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.946588993 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.946604967 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.946635962 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.946656942 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:21.946688890 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:21.946744919 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.009320021 CEST	443	49771	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.009383917 CEST	443	49771	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.009404898 CEST	443	49771	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.009423018 CEST	443	49771	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.009459972 CEST	49771	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.009485006 CEST	443	49771	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.009499073 CEST	49771	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.009517908 CEST	443	49771	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.009546995 CEST	443	49771	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.009552956 CEST	49771	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.009582996 CEST	443	49771	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.009618044 CEST	49771	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.009618044 CEST	49771	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.009666920 CEST	443	49771	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.009694099 CEST	443	49771	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.009731054 CEST	49771	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.009749889 CEST	443	49771	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.009773016 CEST	49771	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.009844065 CEST	443	49771	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.009897947 CEST	49771	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.116141081 CEST	443	49774	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.116209030 CEST	49774	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.164056063 CEST	49774	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.164072990 CEST	443	49774	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.164299965 CEST	49773	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.164326906 CEST	443	49773	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.164483070 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.164529085 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.164697886 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.165014982 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.165673018 CEST	443	49773	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.165698051 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.165785074 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.166032076 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.166575909 CEST	49773	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.166728973 CEST	49773	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.166734934 CEST	443	49773	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.166750908 CEST	443	49773	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.167912006 CEST	443	49774	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.167980909 CEST	49774	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.168348074 CEST	49774	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.168520927 CEST	443	49774	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.168658018 CEST	49774	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.168665886 CEST	443	49774	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.180406094 CEST	49770	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.180458069 CEST	443	49770	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.186099052 CEST	49768	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.186125994 CEST	443	49768	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.188407898 CEST	49769	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.188422918 CEST	443	49769	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.193665981 CEST	49764	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.193682909 CEST	443	49764	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.195626020 CEST	49761	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.195663929 CEST	443	49761	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.208148956 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.226166964 CEST	49773	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.226212978 CEST	49774	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.230442047 CEST	49771	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.230462074 CEST	443	49771	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.234464884 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.234522104 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.234579086 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.234942913 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.234958887 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.235368013 CEST	49766	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.235408068 CEST	443	49766	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.239181042 CEST	49776	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.239191055 CEST	443	49776	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.239240885 CEST	49776	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.239634991 CEST	49776	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.239645958 CEST	443	49776	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.257647038 CEST	49777	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.257678032 CEST	443	49777	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.257729053 CEST	49777	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.258095980 CEST	49777	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.258109093 CEST	443	49777	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.260118008 CEST	49778	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.260140896 CEST	443	49778	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.260201931 CEST	49778	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.260432959 CEST	49778	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.260446072 CEST	443	49778	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.262629986 CEST	49779	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.262674093 CEST	443	49779	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.262732029 CEST	49779	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.262975931 CEST	49779	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.263005972 CEST	443	49779	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.265055895 CEST	49780	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.265099049 CEST	443	49780	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.265162945 CEST	49780	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.265536070 CEST	49780	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.265561104 CEST	443	49780	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.267330885 CEST	49781	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.267378092 CEST	443	49781	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.267443895 CEST	49781	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.267723083 CEST	49781	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.267754078 CEST	443	49781	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.582657099 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.582679033 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.582684040 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.582751036 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.582781076 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.582799911 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.582823992 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.582832098 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.582845926 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.582859993 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.582870960 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.582878113 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.582890987 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.582902908 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.582917929 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.582917929 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.582931995 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.582936049 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.582948923 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.582971096 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.587305069 CEST	443	49774	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.587366104 CEST	443	49774	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.587384939 CEST	443	49774	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.587407112 CEST	443	49774	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.587420940 CEST	49774	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.587445974 CEST	443	49774	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.587457895 CEST	49774	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.587462902 CEST	443	49774	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.587498903 CEST	443	49774	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.587512970 CEST	49774	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.587531090 CEST	443	49774	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.587539911 CEST	49774	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.587640047 CEST	443	49774	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.587694883 CEST	49774	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.587701082 CEST	443	49774	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.587738991 CEST	49774	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.587825060 CEST	443	49774	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.587881088 CEST	49774	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.598472118 CEST	443	49773	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.598539114 CEST	443	49773	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.598558903 CEST	443	49773	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.598579884 CEST	443	49773	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.598589897 CEST	49773	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.598608017 CEST	443	49773	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.598628998 CEST	49773	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.598670959 CEST	443	49773	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.598689079 CEST	443	49773	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.598705053 CEST	443	49773	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.598716974 CEST	49773	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.598727942 CEST	443	49773	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.598740101 CEST	49773	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.598763943 CEST	49773	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.598829985 CEST	443	49773	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.598881006 CEST	49773	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.598886967 CEST	443	49773	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.598984003 CEST	443	49773	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.599025011 CEST	49773	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.631820917 CEST	49773	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.631841898 CEST	443	49773	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.633183002 CEST	49774	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.633194923 CEST	443	49774	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.654783010 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.664625883 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.664647102 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.665019035 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.666026115 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.666090012 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.667813063 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.673897982 CEST	49782	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.673938036 CEST	443	49782	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.673998117 CEST	49782	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.674213886 CEST	49782	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.674233913 CEST	443	49782	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.681396961 CEST	443	49778	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.686897993 CEST	49778	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.686908007 CEST	443	49778	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.687325954 CEST	443	49778	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.687889099 CEST	49778	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.688003063 CEST	443	49778	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.688009977 CEST	49778	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.690548897 CEST	443	49779	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.690802097 CEST	443	49781	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.691056013 CEST	49779	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.691072941 CEST	443	49779	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.692081928 CEST	49781	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.692154884 CEST	443	49781	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.693594933 CEST	443	49781	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.693666935 CEST	49781	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.693969011 CEST	49781	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.694052935 CEST	443	49781	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.694262028 CEST	49781	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.694278002 CEST	443	49781	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.694952011 CEST	443	49779	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.695024967 CEST	49779	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.696810007 CEST	49779	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.696878910 CEST	443	49779	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.697021961 CEST	49779	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.697031021 CEST	443	49779	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.699877024 CEST	443	49777	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.700052023 CEST	49777	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.700067997 CEST	443	49777	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.700711966 CEST	443	49777	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.701073885 CEST	49777	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.701160908 CEST	443	49777	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.701287031 CEST	49777	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.705666065 CEST	443	49780	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.705966949 CEST	49780	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.706027031 CEST	443	49780	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.707513094 CEST	443	49780	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.707576990 CEST	49780	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.708807945 CEST	49780	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.708898067 CEST	443	49780	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.709125996 CEST	49780	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.709145069 CEST	443	49780	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.712121964 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.732117891 CEST	443	49778	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.744151115 CEST	443	49777	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.791775942 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.791840076 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.791858912 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.791881084 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.791902065 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.791913033 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.792045116 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.792062998 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.792093039 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.792109013 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.792128086 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.792141914 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.792808056 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.792823076 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.792867899 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.792875051 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.792889118 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.792910099 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.793711901 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.793725967 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.793771029 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.793778896 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.793812037 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.793821096 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.793829918 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.793874979 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.793890953 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.793904066 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.793950081 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.794574022 CEST	49772	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.794590950 CEST	443	49772	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.826869011 CEST	49783	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.826921940 CEST	443	49783	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.826981068 CEST	49783	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.827455997 CEST	49783	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.827478886 CEST	443	49783	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.828188896 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.828229904 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.828280926 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.828627110 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.828639030 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.833712101 CEST	49778	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.833715916 CEST	49779	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.837547064 CEST	49780	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.837552071 CEST	49781	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.978790045 CEST	443	49776	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.983959913 CEST	49776	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.983983040 CEST	443	49776	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.984491110 CEST	443	49776	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.985153913 CEST	49776	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:22.985232115 CEST	443	49776	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:22.985548019 CEST	49776	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.032115936 CEST	443	49776	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.105015993 CEST	443	49778	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.105036974 CEST	443	49778	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.105045080 CEST	443	49778	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.105068922 CEST	443	49778	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.105074883 CEST	443	49778	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.105096102 CEST	443	49778	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.105123043 CEST	49778	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.105134964 CEST	443	49778	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.105145931 CEST	443	49778	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.105186939 CEST	49778	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.108179092 CEST	49778	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.108198881 CEST	443	49778	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.108727932 CEST	49785	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.108774900 CEST	443	49785	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.108829975 CEST	49785	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.109370947 CEST	49785	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.109390020 CEST	443	49785	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.113643885 CEST	443	49782	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.114691973 CEST	49782	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.114722013 CEST	443	49782	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.118387938 CEST	443	49782	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.118459940 CEST	49782	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.118860006 CEST	49782	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.118942976 CEST	443	49782	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.119169950 CEST	49782	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.119184971 CEST	443	49782	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.148773909 CEST	443	49781	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.148803949 CEST	443	49781	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.148818970 CEST	443	49781	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.148847103 CEST	443	49781	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.148857117 CEST	443	49781	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.148866892 CEST	443	49781	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.148880005 CEST	49781	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.148900032 CEST	443	49781	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.148916006 CEST	49781	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.148926020 CEST	443	49781	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.148941994 CEST	49781	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.148973942 CEST	49781	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.149331093 CEST	443	49779	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.149394035 CEST	443	49779	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.149414062 CEST	443	49779	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.149430990 CEST	443	49779	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.149440050 CEST	49779	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.149458885 CEST	443	49779	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.149477005 CEST	443	49779	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.149478912 CEST	49779	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.149478912 CEST	49779	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.149498940 CEST	443	49779	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.149527073 CEST	49779	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.149544001 CEST	49779	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.149548054 CEST	443	49779	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.149713039 CEST	443	49779	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.149770021 CEST	49779	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.209347963 CEST	49779	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.209382057 CEST	443	49779	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.210325003 CEST	49781	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.210349083 CEST	443	49781	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.228419065 CEST	49782	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.251729965 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.256362915 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.256371021 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.257509947 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.257569075 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.258156061 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.258204937 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.258483887 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.258491039 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.280221939 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.280261040 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.280298948 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.280328989 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.280349016 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.280363083 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.280389071 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.280766010 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.280788898 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.280816078 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.280822039 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.280853987 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.280865908 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.333486080 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.351306915 CEST	443	49780	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.351370096 CEST	443	49780	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.351389885 CEST	443	49780	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.351409912 CEST	443	49780	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.351449013 CEST	443	49780	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.351448059 CEST	49780	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.351468086 CEST	443	49780	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.351541996 CEST	443	49780	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.351587057 CEST	443	49780	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.351597071 CEST	49780	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.351597071 CEST	49780	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.351597071 CEST	49780	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.351597071 CEST	49780	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.351639032 CEST	49780	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.351653099 CEST	443	49780	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.351711988 CEST	443	49780	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.351834059 CEST	49780	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.357439995 CEST	443	49777	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.357500076 CEST	443	49777	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.357546091 CEST	443	49777	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.357569933 CEST	49777	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.357594967 CEST	443	49777	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.357606888 CEST	49777	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.357636929 CEST	49777	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.357844114 CEST	443	49777	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.357888937 CEST	443	49777	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.357908010 CEST	49777	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.357917070 CEST	443	49777	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.357944012 CEST	49777	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.357954979 CEST	49777	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.357959032 CEST	443	49777	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.358036041 CEST	443	49777	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.358237982 CEST	49777	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.359762907 CEST	49780	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.359791040 CEST	443	49780	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.364886045 CEST	49777	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.364901066 CEST	443	49777	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.492876053 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.492887020 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.492939949 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.492940903 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.492966890 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.493009090 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.493619919 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.493668079 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.493679047 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.493685961 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.493717909 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.493729115 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.493874073 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.493906021 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.493926048 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.493932962 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.493958950 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.493969917 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.497386932 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.497428894 CEST	443	49775	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.497476101 CEST	49775	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.502394915 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.502433062 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.502587080 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.503307104 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.503324986 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.541127920 CEST	443	49785	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.544677019 CEST	49785	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.544702053 CEST	443	49785	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.545053005 CEST	443	49785	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.545731068 CEST	49785	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.545794010 CEST	443	49785	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.545886993 CEST	49785	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.588120937 CEST	443	49785	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.650582075 CEST	443	49776	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.650620937 CEST	443	49776	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.650640965 CEST	443	49776	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.650671005 CEST	49776	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.650688887 CEST	443	49776	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.650705099 CEST	443	49776	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.650712013 CEST	49776	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.650727034 CEST	49776	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.650732994 CEST	443	49776	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.650746107 CEST	49776	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.650777102 CEST	443	49776	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.650840998 CEST	49776	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.653166056 CEST	49776	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.653179884 CEST	443	49776	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.725419998 CEST	49785	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.764143944 CEST	443	49782	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.764164925 CEST	443	49782	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.764195919 CEST	443	49782	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.764214993 CEST	443	49782	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.764229059 CEST	49782	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.764251947 CEST	443	49782	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.764269114 CEST	49782	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.764271975 CEST	443	49782	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.764291048 CEST	443	49782	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.764307976 CEST	443	49782	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.764318943 CEST	49782	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.764338970 CEST	443	49782	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.764343023 CEST	49782	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.764359951 CEST	49782	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.764481068 CEST	443	49782	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.764532089 CEST	49782	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.764539957 CEST	443	49782	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.764595032 CEST	49782	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.764620066 CEST	443	49782	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.764664888 CEST	49782	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.765356064 CEST	49782	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.765371084 CEST	443	49782	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.880168915 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.880202055 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.880209923 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.880242109 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.880259991 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.880270004 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.880270958 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.880286932 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.880300045 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.880323887 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.880323887 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.880441904 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.880456924 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.880512953 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.880512953 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.880518913 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.880573034 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.966711044 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.966963053 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.966975927 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.967447042 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.967906952 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:23.967983961 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:23.968233109 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.012116909 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.088502884 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.088531017 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.088567019 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.088581085 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.088675022 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.088682890 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.088736057 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.089184046 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.089200020 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.089368105 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.089375019 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.089442968 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.089911938 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.089929104 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.090069056 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.090073109 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.090137959 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.090514898 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.090528965 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.090591908 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.090596914 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.090646982 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.173739910 CEST	443	49785	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.173763990 CEST	443	49785	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.173770905 CEST	443	49785	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.173794985 CEST	443	49785	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.173824072 CEST	443	49785	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.173827887 CEST	49785	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.173842907 CEST	443	49785	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.173858881 CEST	443	49785	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.173871040 CEST	49785	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.173872948 CEST	443	49785	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.173888922 CEST	443	49785	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.173892021 CEST	49785	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.173899889 CEST	443	49785	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.173904896 CEST	49785	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.173929930 CEST	49785	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.173949003 CEST	49785	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.176230907 CEST	49785	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.176246881 CEST	443	49785	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.285933971 CEST	443	49783	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.286283016 CEST	49783	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.286302090 CEST	443	49783	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.287734032 CEST	443	49783	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.287792921 CEST	49783	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.288346052 CEST	49783	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.288419008 CEST	443	49783	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.288615942 CEST	49783	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.288620949 CEST	443	49783	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.298044920 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.298069000 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.298115015 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.298137903 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.298259974 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.298269987 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.298307896 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.298511982 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.298557997 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.298579931 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.298588037 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.298629045 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.298629045 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.299057961 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.299102068 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.299144983 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.299150944 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.299182892 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.299182892 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.300482035 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.300537109 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.300570011 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.300575972 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.300617933 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.300617933 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.300709963 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.300766945 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.300769091 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.300792933 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.300823927 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.300836086 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.300931931 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.300975084 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.301018953 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.301018953 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.301024914 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.301131964 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.301192999 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.301234961 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.301265955 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.301270008 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.301284075 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.301346064 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.329729080 CEST	49783	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.372502089 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.372550964 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.372576952 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.372586012 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.372617006 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.372659922 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.506447077 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.506494999 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.506514072 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.506531954 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.506581068 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.506617069 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.506944895 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.506990910 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.507019043 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.507024050 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.507064104 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.507064104 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.519061089 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.519109011 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.519129038 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.519134998 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.519207001 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.519855022 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.519900084 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.519936085 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.519941092 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.519975901 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.519975901 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.520061970 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.520119905 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.520128965 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.520142078 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.520167112 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.520225048 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.520885944 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.520931005 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.520945072 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.520956039 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.520963907 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.520987988 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.521413088 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.521454096 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.521476030 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.521481037 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.521514893 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.521533012 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.522327900 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.522370100 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.522382021 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.522396088 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.522413969 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.522449970 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.522984982 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.523025990 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.523039103 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.523046970 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.523088932 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.523088932 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.523161888 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.523227930 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.523243904 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.523276091 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.523296118 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.523343086 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.523397923 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.523788929 CEST	49784	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.523802042 CEST	443	49784	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.530859947 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.530888081 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.531069994 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.532192945 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.532206059 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.598316908 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.598376989 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.598421097 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.598449945 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.598485947 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.598515034 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.598539114 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.599550009 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.599596024 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.599626064 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.599638939 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.599668980 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.599688053 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.808351040 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.808384895 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.808433056 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.808435917 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.808480978 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.808496952 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.808528900 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.808734894 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.809041023 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.809092999 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.809124947 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.809137106 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.809168100 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.809187889 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.809514046 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.809566021 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.809586048 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.809597969 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.809627056 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.809647083 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.810038090 CEST	49790	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.810112000 CEST	443	49790	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.810183048 CEST	49790	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.812655926 CEST	49791	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.812683105 CEST	443	49791	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.812875032 CEST	49790	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.812891006 CEST	49791	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.812910080 CEST	443	49790	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.813188076 CEST	49791	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.813199043 CEST	443	49791	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.813764095 CEST	49792	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.813802958 CEST	443	49792	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.813853979 CEST	49792	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.814193010 CEST	49792	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.814212084 CEST	443	49792	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.814809084 CEST	49793	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.814893007 CEST	443	49793	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.814958096 CEST	49793	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.815129042 CEST	49793	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.815155029 CEST	443	49793	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.820137024 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.820214033 CEST	443	49788	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.820379972 CEST	49788	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.820507050 CEST	49794	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.820538044 CEST	443	49794	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.820585966 CEST	49794	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.821594000 CEST	49794	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:24.821604967 CEST	443	49794	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:24.960630894 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.026354074 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.029958010 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.029964924 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.031438112 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.032619953 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.032804966 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.033339024 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.076117992 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.222606897 CEST	443	49783	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.222680092 CEST	443	49783	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.222700119 CEST	443	49783	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.222738028 CEST	443	49783	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.222775936 CEST	443	49783	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.222791910 CEST	49783	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.222815990 CEST	443	49783	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.222846985 CEST	49783	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.222862005 CEST	49783	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.236031055 CEST	443	49783	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.236154079 CEST	49783	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.236165047 CEST	443	49783	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.236226082 CEST	443	49783	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.236330986 CEST	49783	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.241848946 CEST	443	49790	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.243110895 CEST	49790	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.243149996 CEST	443	49790	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.243649006 CEST	443	49790	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.243699074 CEST	49783	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.243716002 CEST	443	49783	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.244112968 CEST	49795	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.244141102 CEST	443	49795	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.244229078 CEST	49795	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.245222092 CEST	49790	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.245381117 CEST	443	49790	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.245738029 CEST	49795	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.245748997 CEST	443	49795	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.245850086 CEST	443	49793	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.248452902 CEST	443	49791	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.251630068 CEST	443	49792	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.253150940 CEST	443	49794	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.261118889 CEST	49793	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.261173010 CEST	443	49793	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.261259079 CEST	49791	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.261271954 CEST	443	49791	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.261512995 CEST	49794	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.261538982 CEST	443	49794	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.261743069 CEST	49792	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.261754990 CEST	443	49792	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.262058020 CEST	49790	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.262615919 CEST	443	49791	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.262864113 CEST	443	49792	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.262985945 CEST	49792	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.263020039 CEST	443	49794	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.263070107 CEST	49794	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.264941931 CEST	443	49793	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.265022039 CEST	49793	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.278784037 CEST	49791	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.278978109 CEST	443	49791	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.279742002 CEST	49792	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.279850006 CEST	443	49792	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.280405045 CEST	49794	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.280507088 CEST	443	49794	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.280764103 CEST	49793	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.280966043 CEST	443	49793	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.281358957 CEST	49791	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.281476974 CEST	49792	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.281491041 CEST	443	49792	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.281559944 CEST	49794	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.281580925 CEST	443	49794	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.281675100 CEST	49793	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.281709909 CEST	443	49793	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.304157972 CEST	443	49790	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.328114033 CEST	443	49791	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.331738949 CEST	49793	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.332278013 CEST	49792	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.332310915 CEST	49794	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.586956978 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.587004900 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.587025881 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.587044001 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.587083101 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.587100983 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.587115049 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.587141037 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.587177992 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.587201118 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.587281942 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.587325096 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.587342024 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.587348938 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.587373972 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.587389946 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.675930023 CEST	443	49791	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.675983906 CEST	443	49791	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.676026106 CEST	443	49791	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.676070929 CEST	49791	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.676078081 CEST	443	49791	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.676121950 CEST	49791	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.676151991 CEST	443	49791	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.677608013 CEST	49791	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.678852081 CEST	443	49794	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.678878069 CEST	443	49794	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.678886890 CEST	443	49794	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.678910971 CEST	443	49794	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.678921938 CEST	443	49794	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.678942919 CEST	49794	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.678963900 CEST	443	49794	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.678999901 CEST	443	49794	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.679013014 CEST	49794	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.679013968 CEST	443	49794	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.679049969 CEST	49794	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.680424929 CEST	443	49795	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.688359976 CEST	443	49792	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.688380003 CEST	443	49792	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.688388109 CEST	443	49792	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.688414097 CEST	443	49792	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.688430071 CEST	443	49792	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.688452005 CEST	443	49792	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.688484907 CEST	49792	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.688484907 CEST	49792	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.688499928 CEST	49792	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.730611086 CEST	49795	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.795213938 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.795238018 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.795281887 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.795291901 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.795331955 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.795340061 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.795669079 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.795721054 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.795737028 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.795743942 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.795775890 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.796092033 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.796161890 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.796176910 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.796235085 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.836782932 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.836831093 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.836862087 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.836869955 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.836901903 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.836913109 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.877549887 CEST	443	49790	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.877574921 CEST	443	49790	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.877597094 CEST	443	49790	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.877659082 CEST	49790	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.877701998 CEST	443	49790	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.877724886 CEST	443	49790	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.877732038 CEST	49790	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.877754927 CEST	49790	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.877774000 CEST	49790	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.877899885 CEST	443	49793	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.877926111 CEST	443	49793	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.877933025 CEST	443	49793	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.877960920 CEST	443	49793	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.877969980 CEST	443	49793	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.877979040 CEST	443	49793	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.878026009 CEST	49793	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.878026009 CEST	49793	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.878098011 CEST	443	49793	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.878155947 CEST	49793	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.878209114 CEST	443	49793	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.878257990 CEST	49793	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:25.878263950 CEST	443	49793	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:25.881575108 CEST	49793	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.003432989 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.003485918 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.003525972 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.003540039 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.003572941 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.003587961 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.004086971 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.004156113 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.004201889 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.004256964 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.004875898 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.004918098 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.004940033 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.004946947 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.004961014 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.004983902 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.006093025 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.006135941 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.006155014 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.006161928 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.006191015 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.006202936 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.006695986 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.006747961 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.006758928 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.006776094 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.006793976 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.007257938 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.007318020 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.007318020 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.007345915 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.007369995 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.007395029 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.046251059 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.046293974 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.046327114 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.046335936 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.046365976 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.046380043 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.090218067 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.090269089 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.090287924 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.090296030 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.090337038 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.211858034 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.211911917 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.211931944 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.211944103 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.211971045 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.211985111 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.212631941 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.212680101 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.212697029 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.212706089 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.212733030 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.212752104 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.213542938 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.213587046 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.213604927 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.213612080 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.213646889 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.214023113 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.214072943 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.214088917 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.214097977 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.214123011 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.214137077 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.214739084 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.214782000 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.214804888 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.214811087 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.214837074 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.214854002 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.215204954 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.215254068 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.215272903 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.215280056 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.215308905 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.215318918 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.215899944 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.215940952 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.215960979 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.215966940 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.215992928 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.216012001 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.216882944 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.216927052 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.216943026 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.216949940 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.216974020 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.216985941 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.217937946 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.217982054 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.218003035 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.218008995 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.218039989 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.218054056 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.218327999 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.218368053 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.218388081 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.218394041 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.218422890 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:26.218521118 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:26.218570948 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:28.897197008 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:28.897464037 CEST	49795	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:28.897491932 CEST	443	49795	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:28.898927927 CEST	443	49795	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:28.905042887 CEST	49795	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:28.905244112 CEST	443	49795	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:28.905447006 CEST	49795	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:28.948124886 CEST	443	49795	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:28.959513903 CEST	49793	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:28.959547043 CEST	443	49793	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:28.959933996 CEST	49796	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:28.960009098 CEST	443	49796	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:28.960082054 CEST	49796	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:28.961077929 CEST	49790	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:28.961107969 CEST	443	49790	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:28.961380005 CEST	49797	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:28.961405039 CEST	443	49797	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:28.961499929 CEST	49797	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.004070997 CEST	49792	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.004089117 CEST	443	49792	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.004482031 CEST	49798	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.004523039 CEST	443	49798	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.004585981 CEST	49798	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.004873037 CEST	49794	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.004890919 CEST	443	49794	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.005312920 CEST	49799	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.005345106 CEST	443	49799	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.005398989 CEST	49799	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.005595922 CEST	49791	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.005605936 CEST	443	49791	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.006344080 CEST	49796	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.006378889 CEST	443	49796	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.006653070 CEST	49797	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.006669044 CEST	443	49797	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.006947041 CEST	49798	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.006982088 CEST	443	49798	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.007260084 CEST	49799	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.007275105 CEST	443	49799	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.333982944 CEST	443	49795	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.334038973 CEST	443	49795	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.334060907 CEST	443	49795	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.334089994 CEST	49795	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.334100962 CEST	443	49795	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.334125042 CEST	49795	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.334131002 CEST	443	49795	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.334147930 CEST	443	49795	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.334157944 CEST	49795	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.334184885 CEST	49795	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.334209919 CEST	49795	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.334275007 CEST	443	49795	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.334321022 CEST	49795	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.334330082 CEST	443	49795	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.334419966 CEST	443	49795	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.334466934 CEST	49795	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.434556007 CEST	443	49798	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.436531067 CEST	443	49799	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.438416004 CEST	443	49796	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.441081047 CEST	443	49797	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:29.503285885 CEST	49798	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.503395081 CEST	49796	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.534498930 CEST	49799	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:29.534595966 CEST	49797	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.398031950 CEST	49797	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.398063898 CEST	443	49797	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.398164034 CEST	49796	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.398181915 CEST	443	49796	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.398287058 CEST	49799	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.398358107 CEST	443	49799	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.398390055 CEST	49798	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.398443937 CEST	443	49798	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.398582935 CEST	443	49797	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.399518013 CEST	49797	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.399615049 CEST	443	49797	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.399931908 CEST	49797	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.400415897 CEST	443	49796	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.402240038 CEST	443	49798	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.402251005 CEST	443	49799	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.402276039 CEST	443	49798	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.402285099 CEST	443	49799	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.402347088 CEST	49798	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.402384996 CEST	49799	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.440145969 CEST	443	49797	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.538170099 CEST	49796	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.538177967 CEST	49798	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.604799986 CEST	49796	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.605083942 CEST	443	49796	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.605380058 CEST	49799	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.605709076 CEST	443	49799	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.606143951 CEST	49798	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.606453896 CEST	443	49798	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.606843948 CEST	49789	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.606870890 CEST	443	49789	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.609894037 CEST	49796	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.610335112 CEST	49799	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.610377073 CEST	443	49799	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.610383034 CEST	49798	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.610419035 CEST	443	49798	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.624087095 CEST	443	49797	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.624114990 CEST	443	49797	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.624129057 CEST	443	49797	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.624140978 CEST	443	49797	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.624147892 CEST	443	49797	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.624154091 CEST	49797	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.624172926 CEST	443	49797	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.624201059 CEST	49797	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.624219894 CEST	443	49797	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.624257088 CEST	49797	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.652163982 CEST	443	49796	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.682104111 CEST	49798	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.782598972 CEST	49795	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.782635927 CEST	443	49795	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.783544064 CEST	49797	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.783560038 CEST	443	49797	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.824166059 CEST	443	49799	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.824174881 CEST	49799	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.824235916 CEST	49799	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.827420950 CEST	443	49799	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.827490091 CEST	443	49799	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.827510118 CEST	443	49799	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.827528954 CEST	443	49799	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.827548027 CEST	49799	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.827570915 CEST	443	49799	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.827599049 CEST	443	49799	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.827601910 CEST	49799	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.827652931 CEST	49799	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.827667952 CEST	443	49799	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.827716112 CEST	49799	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.827756882 CEST	443	49799	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.827821970 CEST	49799	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.835279942 CEST	49799	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.835308075 CEST	443	49799	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.841516972 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.841553926 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.841605902 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.844455004 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.844470978 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.845967054 CEST	49801	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.845994949 CEST	443	49801	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:30.846041918 CEST	49801	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.846396923 CEST	49801	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:30.846414089 CEST	443	49801	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.031557083 CEST	443	49798	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.031616926 CEST	443	49798	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.031680107 CEST	443	49798	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.031691074 CEST	49798	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.031697989 CEST	443	49798	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.031748056 CEST	443	49798	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.031778097 CEST	443	49798	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.031780005 CEST	49798	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.031780005 CEST	49798	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.031797886 CEST	443	49798	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.031816006 CEST	443	49798	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.031826973 CEST	49798	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.031852007 CEST	49798	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.031858921 CEST	443	49798	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.031883001 CEST	49798	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.032001019 CEST	443	49798	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.032058954 CEST	49798	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.039547920 CEST	443	49796	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.039601088 CEST	443	49796	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.039619923 CEST	443	49796	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.039638042 CEST	443	49796	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.039649010 CEST	49796	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.039674997 CEST	443	49796	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.039690971 CEST	443	49796	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.039695024 CEST	49796	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.039710999 CEST	443	49796	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.039736986 CEST	49796	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.039743900 CEST	443	49796	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.039762974 CEST	49796	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.039776087 CEST	49796	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.039778948 CEST	443	49796	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.039858103 CEST	443	49796	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.039901018 CEST	49796	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.273332119 CEST	443	49801	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.285304070 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.334886074 CEST	49801	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.400067091 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.440510988 CEST	49801	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.440535069 CEST	443	49801	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.440808058 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.440823078 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.441040993 CEST	443	49801	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.442224026 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.515038967 CEST	49801	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.515122890 CEST	443	49801	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.515558004 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.515994072 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.518404961 CEST	49801	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.518449068 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.544974089 CEST	49798	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.545006037 CEST	443	49798	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.546391964 CEST	49796	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.546416044 CEST	443	49796	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.560127974 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.564122915 CEST	443	49801	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.729810953 CEST	443	49801	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.729834080 CEST	443	49801	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.729841948 CEST	443	49801	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.729861021 CEST	443	49801	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.729867935 CEST	443	49801	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.729870081 CEST	443	49801	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.729895115 CEST	49801	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.729914904 CEST	443	49801	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.729948044 CEST	49801	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.729950905 CEST	443	49801	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.729978085 CEST	49801	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.730001926 CEST	49801	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.736002922 CEST	49801	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.736016035 CEST	443	49801	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.775280952 CEST	49802	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.775330067 CEST	443	49802	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.775542974 CEST	49802	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.776050091 CEST	49802	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.776067019 CEST	443	49802	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.946855068 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.946935892 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.946957111 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.946976900 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.946994066 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.947019100 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.947041988 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.947046041 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.947067022 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.947089911 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.947091103 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.947103977 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.947117090 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.947132111 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.947279930 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.947299004 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.947328091 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.947335958 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.947366953 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.947379112 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.947423935 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.947432041 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.947439909 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.947453976 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.952682972 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.952749968 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.952853918 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.953161955 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.953193903 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.962181091 CEST	49804	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.962268114 CEST	443	49804	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.962374926 CEST	49804	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.963649035 CEST	49804	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.963681936 CEST	443	49804	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.964232922 CEST	49805	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.964268923 CEST	443	49805	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.964335918 CEST	49805	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.964576960 CEST	49805	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.964595079 CEST	443	49805	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.966392994 CEST	49806	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.966429949 CEST	443	49806	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.966542959 CEST	49806	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.966860056 CEST	49806	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.966878891 CEST	443	49806	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.969171047 CEST	49807	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.969202042 CEST	443	49807	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.969317913 CEST	49807	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.969669104 CEST	49807	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.969682932 CEST	443	49807	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.984714985 CEST	49808	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.984724045 CEST	443	49808	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.984833956 CEST	49808	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.985090017 CEST	49808	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.985100031 CEST	443	49808	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.990904093 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.991167068 CEST	49809	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.991180897 CEST	443	49809	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:31.991377115 CEST	49809	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.991584063 CEST	49809	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:31.991596937 CEST	443	49809	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.160593987 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.160624981 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.160675049 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.160676956 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.160713911 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.160726070 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.160731077 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.160749912 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.160758972 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.161549091 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.161639929 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.161668062 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.161676884 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.161689043 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.161695957 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.161837101 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.162048101 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.162103891 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.162122011 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.162130117 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.162152052 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.162168980 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.202855110 CEST	443	49802	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.205763102 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.205825090 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.205854893 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.205867052 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.205908060 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.234678030 CEST	49802	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.234700918 CEST	443	49802	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.235831022 CEST	443	49802	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.245348930 CEST	49802	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.245516062 CEST	49802	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.245528936 CEST	443	49802	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.288160086 CEST	443	49802	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.300637960 CEST	49802	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.374644041 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.374703884 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.374737978 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.374756098 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.374783993 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.374799013 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.375026941 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.375068903 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.375082016 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.375097990 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.375121117 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.375134945 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.375607967 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.375649929 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.375679970 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.375688076 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.375709057 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.375740051 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.375746012 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.375876904 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.376060009 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.376224995 CEST	49800	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.376236916 CEST	443	49800	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.376724005 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.377036095 CEST	49810	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.377085924 CEST	443	49810	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.377258062 CEST	49810	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.377502918 CEST	49810	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.377536058 CEST	443	49810	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.377612114 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.377650023 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.378181934 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.380789042 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.380887032 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.381012917 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.398199081 CEST	443	49807	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.398260117 CEST	443	49805	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.398467064 CEST	49807	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.398483992 CEST	443	49807	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.398646116 CEST	49805	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.398665905 CEST	443	49805	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.399558067 CEST	443	49805	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.400051117 CEST	49805	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.400132895 CEST	443	49807	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.400191069 CEST	443	49805	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.400196075 CEST	49807	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.400278091 CEST	49805	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.400568008 CEST	49807	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.400654078 CEST	49807	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.400680065 CEST	443	49807	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.407701015 CEST	443	49806	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.407872915 CEST	49806	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.407891989 CEST	443	49806	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.407957077 CEST	443	49808	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.408467054 CEST	443	49804	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.408544064 CEST	49808	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.408551931 CEST	443	49808	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.408674955 CEST	49804	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.408727884 CEST	443	49804	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.409199953 CEST	443	49804	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.409415960 CEST	443	49808	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.409470081 CEST	49808	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.409579992 CEST	443	49806	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.409641027 CEST	49806	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.412221909 CEST	49806	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.412309885 CEST	443	49806	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.412565947 CEST	49808	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.412622929 CEST	443	49808	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.413033962 CEST	49804	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.413134098 CEST	49806	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.413145065 CEST	443	49806	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.413177013 CEST	49808	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.413183928 CEST	443	49808	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.413243055 CEST	49804	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.413278103 CEST	443	49804	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.415168047 CEST	443	49809	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.415425062 CEST	49809	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.415433884 CEST	443	49809	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.416290998 CEST	443	49809	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.416348934 CEST	49809	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.416613102 CEST	49809	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.416666031 CEST	443	49809	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.416948080 CEST	49809	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.416955948 CEST	443	49809	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.428112030 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.448134899 CEST	443	49805	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.487824917 CEST	49807	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.487849951 CEST	443	49807	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.487888098 CEST	49809	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.535418034 CEST	49806	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.537538052 CEST	49808	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.537550926 CEST	49804	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.601104021 CEST	49807	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.625674009 CEST	443	49802	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.625946045 CEST	443	49802	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.626105070 CEST	49802	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.627996922 CEST	49802	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.628014088 CEST	443	49802	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.757581949 CEST	49811	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.757683039 CEST	443	49811	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.757813931 CEST	49811	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.758017063 CEST	49811	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.758042097 CEST	443	49811	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.818469048 CEST	443	49810	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.818845987 CEST	49810	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.818867922 CEST	443	49810	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.819971085 CEST	443	49810	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.820445061 CEST	49810	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.820624113 CEST	443	49810	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.836884022 CEST	443	49806	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.836955070 CEST	443	49806	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.836977005 CEST	443	49806	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.836997986 CEST	443	49806	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.837012053 CEST	49806	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.837033033 CEST	443	49806	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.837052107 CEST	443	49806	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.837053061 CEST	49806	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.837094069 CEST	49806	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.837101936 CEST	443	49806	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.837255001 CEST	443	49806	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.837323904 CEST	49806	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.838062048 CEST	443	49808	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.838087082 CEST	443	49808	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.838095903 CEST	443	49808	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.838118076 CEST	443	49808	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.838129997 CEST	443	49808	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.838146925 CEST	49808	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.838172913 CEST	443	49808	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.838185072 CEST	443	49808	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.838193893 CEST	49808	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.838227987 CEST	49808	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.838742018 CEST	49806	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.838756084 CEST	443	49806	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.839191914 CEST	49812	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.839277029 CEST	443	49812	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.839346886 CEST	49812	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.840421915 CEST	49812	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.840481997 CEST	443	49812	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.842639923 CEST	49808	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.842653990 CEST	443	49808	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.843082905 CEST	49813	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.843116999 CEST	443	49813	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.843221903 CEST	49813	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.843903065 CEST	49813	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.843915939 CEST	443	49813	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.848483086 CEST	443	49804	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.848511934 CEST	443	49804	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.848522902 CEST	443	49804	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.848546982 CEST	443	49804	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.848557949 CEST	443	49804	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.848589897 CEST	49804	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.848598003 CEST	443	49804	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.848656893 CEST	443	49804	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.848681927 CEST	443	49804	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.848687887 CEST	49804	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.848731041 CEST	49804	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.851011992 CEST	49804	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.851037025 CEST	443	49804	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.851330042 CEST	49814	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.851371050 CEST	443	49814	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.851429939 CEST	49814	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.852485895 CEST	49814	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:32.852502108 CEST	443	49814	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:32.925513029 CEST	49810	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.006242990 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.006277084 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.006295919 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.006486893 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.006486893 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.006552935 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.006628036 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.006761074 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.006779909 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.006819010 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.006841898 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.006867886 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.008793116 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.034591913 CEST	443	49807	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.034622908 CEST	443	49807	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.034635067 CEST	443	49807	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.034656048 CEST	443	49807	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.034667015 CEST	443	49807	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.034677029 CEST	443	49807	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.034693003 CEST	49807	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.034717083 CEST	443	49807	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.034754038 CEST	49807	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.034763098 CEST	443	49807	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.034775972 CEST	49807	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.034801006 CEST	443	49807	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.034847021 CEST	49807	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.036432981 CEST	443	49805	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.036487103 CEST	443	49805	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.036526918 CEST	443	49805	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.036566973 CEST	49805	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.036637068 CEST	443	49805	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.036675930 CEST	443	49805	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.036679983 CEST	49805	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.036700964 CEST	49805	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.036715984 CEST	49805	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.036720991 CEST	443	49805	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.036870956 CEST	443	49805	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.036943913 CEST	49805	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.053771019 CEST	443	49809	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.053787947 CEST	443	49809	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.053795099 CEST	443	49809	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.053828001 CEST	443	49809	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.053850889 CEST	443	49809	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.053862095 CEST	443	49809	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.053870916 CEST	49809	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.053905964 CEST	443	49809	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.053922892 CEST	49809	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.053941965 CEST	443	49809	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.053957939 CEST	49809	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.054020882 CEST	49809	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.055393934 CEST	49805	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.055428982 CEST	443	49805	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.055988073 CEST	49815	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.056020021 CEST	443	49815	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.056072950 CEST	49815	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.057333946 CEST	49815	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.057344913 CEST	443	49815	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.058193922 CEST	49807	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.058213949 CEST	443	49807	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.061877966 CEST	49809	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.061891079 CEST	443	49809	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.184379101 CEST	443	49811	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.186568975 CEST	49811	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.186584949 CEST	443	49811	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.188007116 CEST	443	49811	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.188065052 CEST	49811	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.189589024 CEST	49811	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.189656019 CEST	443	49811	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.190099001 CEST	49811	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.190107107 CEST	443	49811	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.215346098 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.215374947 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.215419054 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.215440035 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.215508938 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.215508938 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.215538979 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.215594053 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.216310024 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.216355085 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.216386080 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.216398954 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.216428995 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.216447115 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.216804028 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.216845989 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.216871023 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.216882944 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.216909885 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.216928959 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.260660887 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.260709047 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.260771990 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.260791063 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.260853052 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.275228977 CEST	443	49813	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.275547981 CEST	49813	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.275562048 CEST	443	49813	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.276190042 CEST	443	49813	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.276616096 CEST	49813	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.276730061 CEST	443	49813	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.276838064 CEST	49813	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.281728029 CEST	443	49812	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.281969070 CEST	49812	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.281989098 CEST	443	49812	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.283093929 CEST	443	49812	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.283538103 CEST	49812	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.283658028 CEST	49812	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.283713102 CEST	443	49812	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.293072939 CEST	443	49814	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.293446064 CEST	49814	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.293478012 CEST	443	49814	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.297029972 CEST	443	49814	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.297094107 CEST	49814	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.297553062 CEST	49814	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.297631979 CEST	443	49814	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.297890902 CEST	49814	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.297899008 CEST	443	49814	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.300860882 CEST	49811	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.324110031 CEST	443	49813	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.424439907 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.424494028 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.424535990 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.424571037 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.424602985 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.424626112 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.425309896 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.425354958 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.425379038 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.425390959 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.425417900 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.425445080 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.426191092 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.426230907 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.426273108 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.426284075 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.426332951 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.426333904 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.426352024 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.426512003 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.426582098 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.432096958 CEST	49803	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.432143927 CEST	443	49803	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.433098078 CEST	49810	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.447185993 CEST	49810	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.447216034 CEST	443	49810	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.447268009 CEST	443	49810	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.447328091 CEST	49810	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.488156080 CEST	443	49812	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.488223076 CEST	49812	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.494195938 CEST	443	49815	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.494463921 CEST	49815	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.494486094 CEST	443	49815	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.495908976 CEST	443	49815	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.495973110 CEST	49815	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.496465921 CEST	49815	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.496546030 CEST	443	49815	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.496747017 CEST	49815	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.496754885 CEST	443	49815	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.504147053 CEST	443	49814	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.504203081 CEST	49814	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.626172066 CEST	443	49811	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.626230955 CEST	443	49811	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.626251936 CEST	443	49811	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.626291990 CEST	49811	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.626317978 CEST	443	49811	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.626346111 CEST	49811	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.626368046 CEST	49811	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.626398087 CEST	443	49811	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.626516104 CEST	443	49811	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.626565933 CEST	49811	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.651475906 CEST	49811	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.651475906 CEST	49811	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.651523113 CEST	443	49811	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.651570082 CEST	49811	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.667098999 CEST	49816	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.667165995 CEST	443	49816	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.667232990 CEST	49816	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.667617083 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.667654037 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.667706013 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.668227911 CEST	49818	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.668260098 CEST	443	49818	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.668308020 CEST	49818	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.668473005 CEST	49816	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.668505907 CEST	443	49816	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.668742895 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.668762922 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.668931007 CEST	49818	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.668945074 CEST	443	49818	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.704130888 CEST	443	49815	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.704190016 CEST	49815	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.713548899 CEST	443	49813	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.713606119 CEST	443	49813	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.713655949 CEST	443	49813	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.713687897 CEST	49813	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.713701963 CEST	443	49813	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.713726044 CEST	49813	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.713840008 CEST	443	49813	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.714112997 CEST	49813	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.716500044 CEST	443	49812	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.716556072 CEST	443	49812	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.716603041 CEST	443	49812	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.716623068 CEST	49812	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.716655016 CEST	443	49812	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.716681004 CEST	49812	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.716726065 CEST	443	49812	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.716787100 CEST	49812	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.732805967 CEST	49812	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.732839108 CEST	443	49812	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.733320951 CEST	49813	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.733345032 CEST	443	49813	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.767106056 CEST	443	49814	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.767158985 CEST	443	49814	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.767200947 CEST	443	49814	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.767229080 CEST	49814	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.767266035 CEST	443	49814	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.767282963 CEST	49814	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.767298937 CEST	49814	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.767303944 CEST	443	49814	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.767369986 CEST	443	49814	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.767416000 CEST	49814	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.768712044 CEST	49814	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.768722057 CEST	443	49814	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.963017941 CEST	443	49815	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.963076115 CEST	443	49815	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.963136911 CEST	49815	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.963140965 CEST	443	49815	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.963182926 CEST	443	49815	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.963203907 CEST	49815	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.963299990 CEST	443	49815	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:33.963347912 CEST	49815	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.968359947 CEST	49815	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:33.968384027 CEST	443	49815	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.107419968 CEST	443	49818	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.107841015 CEST	49818	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.107861996 CEST	443	49818	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.108032942 CEST	443	49816	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.108326912 CEST	49816	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.108361959 CEST	443	49816	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.108747959 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.108818054 CEST	443	49816	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.108969927 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.108987093 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.109365940 CEST	443	49818	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.109426975 CEST	49818	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.109462976 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.109720945 CEST	49816	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.109802008 CEST	443	49816	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.110347986 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.110419989 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.110927105 CEST	49818	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.111006975 CEST	443	49818	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.111421108 CEST	49816	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.111474991 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.111511946 CEST	49818	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.111519098 CEST	443	49818	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.152143955 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.156143904 CEST	443	49816	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.303229094 CEST	49818	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.737361908 CEST	443	49818	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.737441063 CEST	443	49818	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.737462044 CEST	443	49818	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.737502098 CEST	443	49818	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.737507105 CEST	49818	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.737523079 CEST	443	49818	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.737541914 CEST	443	49818	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.737549067 CEST	49818	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.737571955 CEST	49818	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.737572908 CEST	443	49818	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.737590075 CEST	49818	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.737617970 CEST	49818	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.737700939 CEST	443	49818	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.737720013 CEST	443	49818	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.737756968 CEST	49818	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.737829924 CEST	49818	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.737838984 CEST	443	49818	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.737879992 CEST	443	49818	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.737929106 CEST	49818	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.745223045 CEST	49818	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.745238066 CEST	443	49818	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.749129057 CEST	443	49816	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.749187946 CEST	443	49816	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.749229908 CEST	443	49816	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.749265909 CEST	49816	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.749295950 CEST	443	49816	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.749316931 CEST	49816	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.749341011 CEST	49816	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.749605894 CEST	443	49816	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.749655008 CEST	443	49816	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.749691010 CEST	49816	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.749697924 CEST	443	49816	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.749712944 CEST	49816	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.749795914 CEST	49816	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.749870062 CEST	443	49816	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.749910116 CEST	443	49816	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.749941111 CEST	49816	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.749955893 CEST	443	49816	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.750046015 CEST	49816	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.750075102 CEST	443	49816	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.750145912 CEST	49816	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.751349926 CEST	49816	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.751363039 CEST	443	49816	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.752480030 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.752547979 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.752594948 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.752624035 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.752654076 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.752679110 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.752752066 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.753041983 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.753110886 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.753139973 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.753197908 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.966788054 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.966810942 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.966849089 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.966880083 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.966897964 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.966938019 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.966958046 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.967196941 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.967236996 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.967262983 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.967273951 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.967300892 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.967335939 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.967767000 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.967808962 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.967845917 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.967856884 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:34.967886925 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:34.967958927 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:35.006724119 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:35.006769896 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:35.006814003 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:35.006834984 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:35.006855965 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:35.006891012 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:35.181482077 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:35.181526899 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:35.181581020 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:35.181596041 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:35.181628942 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:35.181649923 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:35.181705952 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:35.181857109 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:35.181962013 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:35.182579994 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:35.182579994 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:35.182614088 CEST	443	49817	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:35.182689905 CEST	49817	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:35.265355110 CEST	49819	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:35.265424967 CEST	443	49819	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:35.265638113 CEST	49819	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:35.265863895 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:35.265912056 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:35.265958071 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:35.266273975 CEST	49819	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:35.266323090 CEST	443	49819	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:35.266582966 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:35.266598940 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:35.692090988 CEST	443	49819	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:35.696013927 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:35.900156975 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:35.904119015 CEST	443	49819	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:35.904278994 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:35.904294968 CEST	49819	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.023977041 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.023994923 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.024210930 CEST	49819	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.024245977 CEST	443	49819	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.024791002 CEST	443	49819	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.025286913 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.026361942 CEST	49819	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.026454926 CEST	443	49819	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.026817083 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.026992083 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.027087927 CEST	49819	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.027174950 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.068145990 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.068171978 CEST	443	49819	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.239022017 CEST	443	49819	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.239161015 CEST	443	49819	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.239240885 CEST	49819	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.263056040 CEST	49819	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.263103962 CEST	443	49819	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.447496891 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.447556019 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.447599888 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.447639942 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.447670937 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.447686911 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.447712898 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.448446035 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.448491096 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.448518038 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.448530912 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.448543072 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.484814882 CEST	49821	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.484853029 CEST	443	49821	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.484905958 CEST	49821	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.485378027 CEST	49821	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.485394001 CEST	443	49821	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.536457062 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.656332970 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.656361103 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.656404972 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.656410933 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.656440973 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.656451941 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.656461954 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.656481981 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.656825066 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.656867981 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.656886101 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.656898022 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.656917095 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.656934977 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.657354116 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.657399893 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.657414913 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.657428980 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.657447100 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.657469034 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.657861948 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.657902002 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.657922029 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.657932043 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.657958984 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.657972097 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.865305901 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.865329027 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.865370035 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.865367889 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.865411997 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.865427017 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.865442038 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.865463972 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.865849972 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.865895033 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.865912914 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.865922928 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.865943909 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.865971088 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.866512060 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.866553068 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.866566896 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.866580009 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.866602898 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.866614103 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.867047071 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.867088079 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.867101908 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.867113113 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.867137909 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.867153883 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.867623091 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.867665052 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.867682934 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.867691994 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.867717028 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.867729902 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.867948055 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.867994070 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.868001938 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.868036985 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.868144989 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.868187904 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.877563000 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.888041973 CEST	49820	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.888053894 CEST	443	49820	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.908977985 CEST	443	49821	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.948858023 CEST	49821	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.948925018 CEST	443	49821	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.950387001 CEST	443	49821	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.950463057 CEST	49821	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.953335047 CEST	49821	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.953438044 CEST	443	49821	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.954240084 CEST	49822	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.954335928 CEST	443	49822	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.954385042 CEST	49821	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.954402924 CEST	443	49821	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:36.954421043 CEST	49822	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.954591990 CEST	49822	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:36.954631090 CEST	443	49822	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:37.003462076 CEST	49821	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:37.326085091 CEST	443	49821	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:37.326162100 CEST	443	49821	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:37.326343060 CEST	49821	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:37.386790037 CEST	443	49822	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:37.449470997 CEST	49822	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:38.397264004 CEST	49822	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:38.397358894 CEST	443	49822	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:38.398782015 CEST	443	49822	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:38.400805950 CEST	49822	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:38.400994062 CEST	49822	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:38.401011944 CEST	443	49822	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:38.431668043 CEST	49821	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:38.431725979 CEST	443	49821	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:38.441484928 CEST	49822	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:38.441503048 CEST	443	49822	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:38.612308979 CEST	443	49822	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:38.612363100 CEST	443	49822	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:38.612382889 CEST	443	49822	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:38.612402916 CEST	443	49822	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:38.612441063 CEST	443	49822	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:38.612441063 CEST	49822	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:38.612459898 CEST	443	49822	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:38.612489939 CEST	49822	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:38.612490892 CEST	49822	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:38.612529039 CEST	443	49822	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:38.612591028 CEST	49822	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:38.612591028 CEST	49822	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:38.612615108 CEST	443	49822	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:38.612679958 CEST	443	49822	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:38.612734079 CEST	49822	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:38.622150898 CEST	49822	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:38.622184038 CEST	443	49822	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:38.648097038 CEST	49823	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:38.648142099 CEST	443	49823	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:38.648226976 CEST	49823	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:38.648812056 CEST	49823	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:38.648832083 CEST	443	49823	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:38.655117035 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:38.655174017 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:38.655241966 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:38.655653954 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:38.655687094 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.082864046 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.083257914 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.083283901 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.084455013 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.085056067 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.085269928 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.085431099 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.086572886 CEST	443	49823	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.086942911 CEST	49823	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.086956024 CEST	443	49823	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.087277889 CEST	443	49823	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.087850094 CEST	49823	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.087904930 CEST	443	49823	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.087944031 CEST	49823	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.128127098 CEST	443	49823	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.128137112 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.232038021 CEST	49823	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.558777094 CEST	443	49823	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.558876038 CEST	443	49823	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.558897018 CEST	443	49823	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.558936119 CEST	443	49823	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.558954954 CEST	443	49823	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.558957100 CEST	49823	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.558971882 CEST	443	49823	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.559000015 CEST	443	49823	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.559019089 CEST	49823	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.559019089 CEST	49823	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.559055090 CEST	49823	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.559067965 CEST	443	49823	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.559184074 CEST	443	49823	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.559391975 CEST	49823	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.560646057 CEST	49823	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.560666084 CEST	443	49823	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.708664894 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.708745956 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.708805084 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.708825111 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.708878994 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.708909988 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.708909988 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.708940983 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.709069014 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.709130049 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.709142923 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.709160089 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.709188938 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.916125059 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.916636944 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.916716099 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.916726112 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.916726112 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.916765928 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.916795015 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.916955948 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.917012930 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.917026043 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.917042017 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.917066097 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.917463064 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.917525053 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.917541027 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.917555094 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.917583942 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.956046104 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.956139088 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.956173897 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.956249952 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:39.956315994 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:39.956327915 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.124409914 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.124486923 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:40.124501944 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.124552011 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.124557972 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:40.124758005 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.124778986 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.124818087 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:40.124824047 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.124851942 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:40.124875069 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:40.124880075 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.124952078 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.124973059 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.125000954 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:40.125015020 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.125022888 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:40.125051022 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.125080109 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:40.125269890 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.125293016 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.125320911 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:40.125336885 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.125346899 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:40.125397921 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.125442982 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.125456095 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:40.125468969 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.125494003 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:40.125818968 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.125873089 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:40.125874043 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.125915051 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.125945091 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:40.126276970 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.126336098 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:40.126343966 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.126374960 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.126406908 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:40.126888990 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.126940012 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.126955032 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:40.126966000 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.127137899 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:40.127188921 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:40.131261110 CEST	49824	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:40.131283045 CEST	443	49824	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:46.472656012 CEST	49719	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:40:46.472711086 CEST	443	49719	149.154.167.99	192.168.2.5
Apr 25, 2024 08:40:49.574170113 CEST	49827	443	192.168.2.5	108.177.122.147
Apr 25, 2024 08:40:49.574240923 CEST	443	49827	108.177.122.147	192.168.2.5
Apr 25, 2024 08:40:49.574302912 CEST	49827	443	192.168.2.5	108.177.122.147
Apr 25, 2024 08:40:49.575052977 CEST	49827	443	192.168.2.5	108.177.122.147
Apr 25, 2024 08:40:49.575071096 CEST	443	49827	108.177.122.147	192.168.2.5
Apr 25, 2024 08:40:49.804687023 CEST	443	49827	108.177.122.147	192.168.2.5
Apr 25, 2024 08:40:49.805284977 CEST	49827	443	192.168.2.5	108.177.122.147
Apr 25, 2024 08:40:49.805310965 CEST	443	49827	108.177.122.147	192.168.2.5
Apr 25, 2024 08:40:49.806216955 CEST	443	49827	108.177.122.147	192.168.2.5
Apr 25, 2024 08:40:49.806767941 CEST	49827	443	192.168.2.5	108.177.122.147
Apr 25, 2024 08:40:49.806850910 CEST	443	49827	108.177.122.147	192.168.2.5
Apr 25, 2024 08:40:49.850233078 CEST	49827	443	192.168.2.5	108.177.122.147
Apr 25, 2024 08:40:59.801135063 CEST	443	49827	108.177.122.147	192.168.2.5
Apr 25, 2024 08:40:59.801310062 CEST	443	49827	108.177.122.147	192.168.2.5
Apr 25, 2024 08:40:59.801378965 CEST	49827	443	192.168.2.5	108.177.122.147
Apr 25, 2024 08:41:00.630347013 CEST	49827	443	192.168.2.5	108.177.122.147
Apr 25, 2024 08:41:00.630400896 CEST	443	49827	108.177.122.147	192.168.2.5
Apr 25, 2024 08:41:01.197740078 CEST	443	49719	149.154.167.99	192.168.2.5
Apr 25, 2024 08:41:01.197921038 CEST	443	49719	149.154.167.99	192.168.2.5
Apr 25, 2024 08:41:01.198009014 CEST	49719	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:41:02.619307041 CEST	49719	443	192.168.2.5	149.154.167.99
Apr 25, 2024 08:41:02.619381905 CEST	443	49719	149.154.167.99	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 08:39:46.159503937 CEST	53	62729	1.1.1.1	192.168.2.5
Apr 25, 2024 08:39:46.504806995 CEST	53	51776	1.1.1.1	192.168.2.5
Apr 25, 2024 08:39:48.327089071 CEST	62774	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:39:48.327248096 CEST	51293	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:39:48.443610907 CEST	53	51293	1.1.1.1	192.168.2.5
Apr 25, 2024 08:39:48.446454048 CEST	53	62774	1.1.1.1	192.168.2.5
Apr 25, 2024 08:39:48.510113001 CEST	51844	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:39:48.510241032 CEST	54421	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:39:48.527853012 CEST	53	58308	1.1.1.1	192.168.2.5
Apr 25, 2024 08:39:48.678777933 CEST	53	54421	1.1.1.1	192.168.2.5
Apr 25, 2024 08:39:48.679137945 CEST	53	51844	1.1.1.1	192.168.2.5
Apr 25, 2024 08:39:49.505080938 CEST	58444	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:39:49.505218983 CEST	52876	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:39:49.614962101 CEST	53	52876	1.1.1.1	192.168.2.5
Apr 25, 2024 08:39:49.615084887 CEST	53	58444	1.1.1.1	192.168.2.5
Apr 25, 2024 08:39:50.389630079 CEST	59187	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:39:50.389775038 CEST	53566	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:39:50.499546051 CEST	53	53566	1.1.1.1	192.168.2.5
Apr 25, 2024 08:39:50.499792099 CEST	53	59187	1.1.1.1	192.168.2.5
Apr 25, 2024 08:40:00.665808916 CEST	55915	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:40:00.666116953 CEST	58091	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:40:00.775805950 CEST	53	55915	1.1.1.1	192.168.2.5
Apr 25, 2024 08:40:00.776112080 CEST	53	58091	1.1.1.1	192.168.2.5
Apr 25, 2024 08:40:01.688415051 CEST	62941	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:40:01.690140963 CEST	60839	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:40:01.798603058 CEST	53	62941	1.1.1.1	192.168.2.5
Apr 25, 2024 08:40:01.800591946 CEST	53	60839	1.1.1.1	192.168.2.5
Apr 25, 2024 08:40:02.717693090 CEST	63288	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:40:02.717891932 CEST	61048	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:40:02.828044891 CEST	53	63288	1.1.1.1	192.168.2.5
Apr 25, 2024 08:40:02.828217030 CEST	53	61048	1.1.1.1	192.168.2.5
Apr 25, 2024 08:40:03.862865925 CEST	65028	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:40:03.863518953 CEST	61290	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:40:03.974801064 CEST	53	61290	1.1.1.1	192.168.2.5
Apr 25, 2024 08:40:03.976897001 CEST	53	65028	1.1.1.1	192.168.2.5
Apr 25, 2024 08:40:05.588074923 CEST	51817	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:40:05.588690996 CEST	49868	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:40:05.689471006 CEST	53	64765	1.1.1.1	192.168.2.5
Apr 25, 2024 08:40:05.698584080 CEST	53	51817	1.1.1.1	192.168.2.5
Apr 25, 2024 08:40:05.699351072 CEST	53	49868	1.1.1.1	192.168.2.5
Apr 25, 2024 08:40:15.015376091 CEST	65395	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:40:15.016001940 CEST	61960	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:40:15.127760887 CEST	53	65395	1.1.1.1	192.168.2.5
Apr 25, 2024 08:40:15.128230095 CEST	53	61960	1.1.1.1	192.168.2.5
Apr 25, 2024 08:40:24.476799011 CEST	53	62364	1.1.1.1	192.168.2.5
Apr 25, 2024 08:40:32.628922939 CEST	54869	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:40:32.629585981 CEST	54705	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:40:32.751354933 CEST	53	54869	1.1.1.1	192.168.2.5
Apr 25, 2024 08:40:32.757025957 CEST	53	54705	1.1.1.1	192.168.2.5
Apr 25, 2024 08:40:36.339401007 CEST	51571	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:40:36.339592934 CEST	54886	53	192.168.2.5	1.1.1.1
Apr 25, 2024 08:40:36.450623035 CEST	53	51571	1.1.1.1	192.168.2.5
Apr 25, 2024 08:40:36.475234032 CEST	53	54886	1.1.1.1	192.168.2.5
Apr 25, 2024 08:40:44.898252010 CEST	53	65515	1.1.1.1	192.168.2.5
Apr 25, 2024 08:40:50.383903980 CEST	53	54173	1.1.1.1	192.168.2.5
Apr 25, 2024 08:41:12.764858007 CEST	53	62500	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 25, 2024 08:39:48.327089071 CEST	192.168.2.5	1.1.1.1	0x4c4b	Standard query (0)	rfpteams.ksplastlc.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:39:48.327248096 CEST	192.168.2.5	1.1.1.1	0x6a40	Standard query (0)	rfpteams.ksplastlc.net	65	IN (0x0001)	false
Apr 25, 2024 08:39:48.510113001 CEST	192.168.2.5	1.1.1.1	0x48ef	Standard query (0)	rfpteams.ksplastlc.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:39:48.510241032 CEST	192.168.2.5	1.1.1.1	0x631b	Standard query (0)	rfpteams.ksplastlc.net	65	IN (0x0001)	false
Apr 25, 2024 08:39:49.505080938 CEST	192.168.2.5	1.1.1.1	0x955e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:39:49.505218983 CEST	192.168.2.5	1.1.1.1	0xb195	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 08:39:50.389630079 CEST	192.168.2.5	1.1.1.1	0xbbb2	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:39:50.389775038 CEST	192.168.2.5	1.1.1.1	0x1876	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 25, 2024 08:40:00.665808916 CEST	192.168.2.5	1.1.1.1	0xa8c1	Standard query (0)	t.me	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:40:00.666116953 CEST	192.168.2.5	1.1.1.1	0x79a6	Standard query (0)	t.me	65	IN (0x0001)	false
Apr 25, 2024 08:40:01.688415051 CEST	192.168.2.5	1.1.1.1	0x26bf	Standard query (0)	telegram.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:40:01.690140963 CEST	192.168.2.5	1.1.1.1	0xe07f	Standard query (0)	telegram.org	65	IN (0x0001)	false
Apr 25, 2024 08:40:02.717693090 CEST	192.168.2.5	1.1.1.1	0x941a	Standard query (0)	cdn4.cdn-telegram.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:40:02.717891932 CEST	192.168.2.5	1.1.1.1	0xb966	Standard query (0)	cdn4.cdn-telegram.org	65	IN (0x0001)	false
Apr 25, 2024 08:40:03.862865925 CEST	192.168.2.5	1.1.1.1	0xfda3	Standard query (0)	cdn4.cdn-telegram.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:40:03.863518953 CEST	192.168.2.5	1.1.1.1	0xf6e4	Standard query (0)	cdn4.cdn-telegram.org	65	IN (0x0001)	false
Apr 25, 2024 08:40:05.588074923 CEST	192.168.2.5	1.1.1.1	0x9f1f	Standard query (0)	telegram.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:40:05.588690996 CEST	192.168.2.5	1.1.1.1	0xb1a1	Standard query (0)	telegram.org	65	IN (0x0001)	false
Apr 25, 2024 08:40:15.015376091 CEST	192.168.2.5	1.1.1.1	0xd26a	Standard query (0)	telegram.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:40:15.016001940 CEST	192.168.2.5	1.1.1.1	0x9269	Standard query (0)	telegram.org	65	IN (0x0001)	false
Apr 25, 2024 08:40:32.628922939 CEST	192.168.2.5	1.1.1.1	0x6706	Standard query (0)	desktop.telegram.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:40:32.629585981 CEST	192.168.2.5	1.1.1.1	0x627d	Standard query (0)	desktop.telegram.org	65	IN (0x0001)	false
Apr 25, 2024 08:40:36.339401007 CEST	192.168.2.5	1.1.1.1	0x73b3	Standard query (0)	desktop.telegram.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:40:36.339592934 CEST	192.168.2.5	1.1.1.1	0x638e	Standard query (0)	desktop.telegram.org	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 25, 2024 08:39:48.443610907 CEST	1.1.1.1	192.168.2.5	0x6a40	No error (0)	rfpteams.ksplastlc.net			65	IN (0x0001)	false
Apr 25, 2024 08:39:48.446454048 CEST	1.1.1.1	192.168.2.5	0x4c4b	No error (0)	rfpteams.ksplastlc.net		104.21.39.27	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:39:48.446454048 CEST	1.1.1.1	192.168.2.5	0x4c4b	No error (0)	rfpteams.ksplastlc.net		172.67.142.208	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:39:48.678777933 CEST	1.1.1.1	192.168.2.5	0x631b	No error (0)	rfpteams.ksplastlc.net			65	IN (0x0001)	false
Apr 25, 2024 08:39:48.679137945 CEST	1.1.1.1	192.168.2.5	0x48ef	No error (0)	rfpteams.ksplastlc.net		172.67.142.208	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:39:48.679137945 CEST	1.1.1.1	192.168.2.5	0x48ef	No error (0)	rfpteams.ksplastlc.net		104.21.39.27	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:39:49.614962101 CEST	1.1.1.1	192.168.2.5	0xb195	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 08:39:49.615084887 CEST	1.1.1.1	192.168.2.5	0x955e	No error (0)	www.google.com		108.177.122.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:39:49.615084887 CEST	1.1.1.1	192.168.2.5	0x955e	No error (0)	www.google.com		108.177.122.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:39:49.615084887 CEST	1.1.1.1	192.168.2.5	0x955e	No error (0)	www.google.com		108.177.122.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:39:49.615084887 CEST	1.1.1.1	192.168.2.5	0x955e	No error (0)	www.google.com		108.177.122.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:39:49.615084887 CEST	1.1.1.1	192.168.2.5	0x955e	No error (0)	www.google.com		108.177.122.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:39:49.615084887 CEST	1.1.1.1	192.168.2.5	0x955e	No error (0)	www.google.com		108.177.122.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:39:50.499792099 CEST	1.1.1.1	192.168.2.5	0xbbb2	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:40:00.775805950 CEST	1.1.1.1	192.168.2.5	0xa8c1	No error (0)	t.me		149.154.167.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:40:01.286642075 CEST	1.1.1.1	192.168.2.5	0xa708	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 08:40:01.286642075 CEST	1.1.1.1	192.168.2.5	0xa708	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:40:01.798603058 CEST	1.1.1.1	192.168.2.5	0x26bf	No error (0)	telegram.org		149.154.167.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:40:02.828044891 CEST	1.1.1.1	192.168.2.5	0x941a	No error (0)	cdn4.cdn-telegram.org		34.111.35.152	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:40:03.976897001 CEST	1.1.1.1	192.168.2.5	0xfda3	No error (0)	cdn4.cdn-telegram.org		34.111.35.152	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:40:05.698584080 CEST	1.1.1.1	192.168.2.5	0x9f1f	No error (0)	telegram.org		149.154.167.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:40:15.127760887 CEST	1.1.1.1	192.168.2.5	0xd26a	No error (0)	telegram.org		149.154.167.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:40:15.145402908 CEST	1.1.1.1	192.168.2.5	0x1f3a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 08:40:15.145402908 CEST	1.1.1.1	192.168.2.5	0x1f3a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:40:32.751354933 CEST	1.1.1.1	192.168.2.5	0x6706	No error (0)	desktop.telegram.org		149.154.167.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:40:36.450623035 CEST	1.1.1.1	192.168.2.5	0x73b3	No error (0)	desktop.telegram.org		149.154.167.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:40:43.000952005 CEST	1.1.1.1	192.168.2.5	0x1480	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 08:40:43.000952005 CEST	1.1.1.1	192.168.2.5	0x1480	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 08:40:57.658526897 CEST	1.1.1.1	192.168.2.5	0xd105	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 08:40:57.658526897 CEST	1.1.1.1	192.168.2.5	0xd105	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

rfpteams.ksplastlc.net

https:

telegram.org

www.bing.com

cdn4.cdn-telegram.org

desktop.telegram.org

a.nel.cloudflare.com

fs.microsoft.com

t.me

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	172.67.142.208	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:39:48 UTC	665	OUT	GET / HTTP/1.1 Host: rfpteams.ksplastlc.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:39:49 UTC	752	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 06:39:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=de0c064f6594ea555896e22aac17c0c4; path=/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1rz0tt5BhY6I2gw8phRu2uKFHExUsGacvc0m6JZwNQLqrjKgtfLLiT%2FnHFshQpQDJ1L2w50kMEsd1wCE6vL9JzKaFsFrVcxsTvd1bvHOo3b%2Bx1MuxPPTMGXBDKQLKy43AtyIYUTe50Qm"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879c568bf9764531-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 06:39:49 UTC	96	IN	Data Raw: 35 61 0d 0a 59 6f 75 72 20 41 50 49 20 68 61 73 20 62 65 65 6e 20 65 78 70 69 72 65 64 21 21 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 3c 61 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 74 2e 6d 65 2f 4f 4e 4e 58 49 54 27 3e 4f 4e 4e 58 20 53 55 50 50 4f 52 54 3c 2f 61 3e 2e 0d 0a Data Ascii: 5aYour API has been expired!! Please contact <a href='https://t.me/ONNXIT'>ONNX SUPPORT</a>.
2024-04-25 06:39:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49712	172.67.142.208	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:39:49 UTC	652	OUT	GET /favicon.ico HTTP/1.1 Host: rfpteams.ksplastlc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rfpteams.ksplastlc.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de0c064f6594ea555896e22aac17c0c4
2024-04-25 06:39:50 UTC	625	IN	HTTP/1.1 404 Not Found Date: Thu, 25 Apr 2024 06:39:50 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HEN9Y79khAIwy4HBJlBPP00HMpjBF5CjNwstnEwnxUtbNlNa1MJdUyluGpg8j%2F%2F2gfobGo9OiJid86NWxCH%2B1LhVHviTSdcA3dtwu0PtuOTf%2FXl2Z%2Fpll2930%2F1iBOQYDjVz6dm3RQY7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879c56923c2853cc-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 06:39:50 UTC	322	IN	Data Raw: 31 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 Data Ascii: 13b<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying t
2024-04-25 06:39:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	35.190.80.1	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:39:50 UTC	555	OUT	OPTIONS /report/v4?s=HEN9Y79khAIwy4HBJlBPP00HMpjBF5CjNwstnEwnxUtbNlNa1MJdUyluGpg8j%2F%2F2gfobGo9OiJid86NWxCH%2B1LhVHviTSdcA3dtwu0PtuOTf%2FXl2Z%2Fpll2930%2F1iBOQYDjVz6dm3RQY7 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://rfpteams.ksplastlc.net Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:39:50 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Thu, 25 Apr 2024 06:39:50 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49715	35.190.80.1	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:39:51 UTC	490	OUT	POST /report/v4?s=HEN9Y79khAIwy4HBJlBPP00HMpjBF5CjNwstnEwnxUtbNlNa1MJdUyluGpg8j%2F%2F2gfobGo9OiJid86NWxCH%2B1LhVHviTSdcA3dtwu0PtuOTf%2FXl2Z%2Fpll2930%2F1iBOQYDjVz6dm3RQY7 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 435 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:39:51 UTC	435	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 31 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 72 66 70 74 65 61 6d 73 2e 6b 73 70 6c 61 73 74 6c 63 2e 6e 65 74 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 34 32 2e 32 30 38 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 Data Ascii: [{"age":0,"body":{"elapsed_time":711,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://rfpteams.ksplastlc.net/","sampling_fraction":1.0,"server_ip":"172.67.142.208","status_code":404,"type":"http.error"},"type":"network-error"
2024-04-25 06:39:51 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 25 Apr 2024 06:39:51 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49716	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:39:51 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 06:39:51 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0790) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=174224 Date: Thu, 25 Apr 2024 06:39:51 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49717	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:39:52 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 06:39:52 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=174223 Date: Thu, 25 Apr 2024 06:39:52 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-25 06:39:52 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49720	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:01 UTC	633	OUT	GET /ONNXIT HTTP/1.1 Host: t.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:40:01 UTC	512	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 10789 Connection: close Set-Cookie: stel_ssid=9558c080f4fa392dd7_16243779966484154159; expires=Fri, 26 Apr 2024 06:40:01 GMT; path=/; samesite=None; secure; HttpOnly Pragma: no-cache Cache-control: no-store X-Frame-Options: ALLOW-FROM https://web.telegram.org Content-Security-Policy: frame-ancestors https://web.telegram.org Strict-Transport-Security: max-age=35768000
2024-04-25 06:40:01 UTC	10789	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 3a 20 43 6f 6e 74 61 63 74 20 40 4f 4e 4e 58 49 54 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 6e 75 6c 6c 26 26 77 69 6e 64 6f 77 21 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>Telegram: Contact @ONNXIT</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script>try{if(window.parent!=null&&window!=window.parent){window.parent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49727	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:02 UTC	535	OUT	GET /css/font-roboto.css?1 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://t.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:40:02 UTC	378	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:02 GMT Content-Type: text/css Content-Length: 6166 Last-Modified: Thu, 20 Oct 2022 11:05:33 GMT Connection: close ETag: "63512b7d-1816" Expires: Mon, 29 Apr 2024 06:40:02 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-04-25 06:40:02 UTC	6166	IN	Data Raw: 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 52 6f 62 6f 74 6f 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4b 54 55 31 4b 76 6e 7a 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 Data Ascii: /* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; font-display: swap; src: url('../fonts/Roboto/KFOmCnqEu92Fr1Mu72xKKTU1Kvnz.woff2') format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49730	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:02 UTC	537	OUT	GET /css/bootstrap.min.css?3 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://t.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:40:02 UTC	379	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:02 GMT Content-Type: text/css Content-Length: 42523 Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Connection: close ETag: "5a05e7c6-a61b" Expires: Mon, 29 Apr 2024 06:40:02 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-04-25 06:40:02 UTC	16005	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 32 2e 30 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 34 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 0a 2f 2a 21 0a 20 2a 20 47 65 6e 65 72 61 74 65 64 20 75 73 69 6e 67 20 74 68 65 20 42 6f 6f 74 73 74 72 61 70 20 43 75 73 74 6f 6d 69 7a 65 72 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 63 75 73 74 6f 6d 69 7a 65 2f 3f 69 Data Ascii: /! Bootstrap v3.2.0 (http://getbootstrap.com) * Copyright 2011-2014 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! * Generated using the Bootstrap Customizer (http://getbootstrap.com/customize/?i
2024-04-25 06:40:02 UTC	16384	IN	Data Raw: 6c 6f 72 3a 23 37 37 37 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 37 37 37 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 5b 72 65 61 64 6f 6e 6c 79 5d 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 6f 70 61 63 69 74 79 3a 31 7d 74 65 78 74 61 72 65 61 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 Data Ascii: lor:#777}.form-control::-webkit-input-placeholder{color:#777}.form-control[disabled],.form-control[readonly],fieldset[disabled] .form-control{cursor:not-allowed;background-color:#eee;opacity:1}textarea.form-control{height:auto}input[type="search"]{-webkit
2024-04-25 06:40:02 UTC	10134	IN	Data Raw: 74 3a 30 7d 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 72 61 64 69 6f 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 68 61 73 2d 66 65 65 64 62 61 63 6b 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 65 65 64 62 61 63 6b 7b 74 6f 70 3a 30 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 30 29 7b 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e Data Ascii: t:0}.navbar-form .radio input[type="radio"],.navbar-form .checkbox input[type="checkbox"]{position:relative;margin-left:0}.navbar-form .has-feedback .form-control-feedback{top:0}}@media (max-width:0){.navbar-form .form-group{margin-bottom:5px}}@media (min

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49728	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:02 UTC	534	OUT	GET /css/telegram.css?237 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://t.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:40:02 UTC	381	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:02 GMT Content-Type: text/css Content-Length: 114933 Last-Modified: Mon, 22 Apr 2024 10:54:25 GMT Connection: close ETag: "662641e1-1c0f5" Expires: Mon, 29 Apr 2024 06:40:02 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-04-25 06:40:02 UTC	16003	IN	Data Raw: 62 6f 64 79 20 7b 0a 20 20 66 6f 6e 74 3a 20 31 32 70 78 2f 31 38 70 78 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 22 4c 75 63 69 64 61 20 53 61 6e 73 20 55 6e 69 63 6f 64 65 22 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 2f 2a 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 2a 2f 0a 7d 0a 68 74 6d 6c 2e 6e 61 74 69 76 65 5f 66 6f 6e 74 73 20 62 6f 64 79 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 Data Ascii: body { font: 12px/18px "Lucida Grande", "Lucida Sans Unicode", Arial, Helvetica, Verdana, sans-serif; /-webkit-font-smoothing: antialiased;/}html.native_fonts body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica,
2024-04-25 06:40:02 UTC	16384	IN	Data Raw: 20 61 75 74 6f 3b 0a 7d 0a 2e 74 6c 5f 6d 61 69 6e 5f 64 6f 77 6e 6c 6f 61 64 5f 6c 69 6e 6b 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 36 32 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 34 30 70 78 20 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 61 2e 74 6c 5f 6d 61 69 6e 5f 64 6f 77 6e 6c 6f 61 64 5f 6c 69 6e 6b 3a 68 6f 76 65 72 20 7b Data Ascii: auto;}.tl_main_download_link { text-align: center; display: inline-block; height: 300px; padding-top: 262px; padding-bottom: 20px; margin: 40px 0; font-size: 15px; max-width: 100%; position: relative;}a.tl_main_download_link:hover {
2024-04-25 06:40:03 UTC	16384	IN	Data Raw: 5f 70 61 67 65 5f 74 69 74 6c 65 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b 0a 7d 0a 0a 2e 64 65 76 5f 70 61 67 65 5f 68 65 61 64 20 2e 64 65 76 5f 70 61 67 65 5f 68 65 61 64 5f 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 23 64 65 76 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 5f 77 72 61 70 20 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 37 70 78 3b 0a 7d 0a 23 64 65 76 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 5f 77 72 61 70 20 70 72 65 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 2d 78 3a 20 61 75 74 6f 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 7d 0a 0a 23 64 65 76 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 5f 77 72 61 70 20 70 72 65 3a 3a 2d 77 Data Ascii: _page_title { position: static;}.dev_page_head .dev_page_head_logo { margin-left: 0;}#dev_page_content_wrap blockquote { padding: 5px 17px;}#dev_page_content_wrap pre { overflow-x: auto; border-radius: 0;}#dev_page_content_wrap pre::-w
2024-04-25 06:40:03 UTC	16384	IN	Data Raw: 20 63 6f 6c 6f 72 3a 20 23 63 63 63 3b 0a 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 36 29 3b 0a 7d 0a 2e 74 65 78 74 66 69 65 6c 64 2d 69 74 65 6d 2d 65 72 72 6f 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 34 35 61 35 38 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 39 70 78 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 39 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 20 30 20 2d 31 39 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 37 70 78 3b 0a 20 20 76 69 73 69 62 69 Data Ascii: color: #ccc; color: rgba(0,0,0,.26);}.textfield-item-error { color: #d45a58; position: absolute; font-size: 14px; line-height: 19px; min-height: 19px; margin: 5px 0 -19px; background: #fff; width: 100%; padding-bottom: 7px; visibi
2024-04-25 06:40:03 UTC	16384	IN	Data Raw: 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 7d 0a 23 64 65 76 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 20 2e 62 6c 6f 67 5f 69 6d 61 67 65 5f 77 72 61 70 20 70 2c 0a 2e 74 6c 62 5f 70 61 67 65 5f 77 72 61 70 20 2e 74 6c 5f 63 6f 6e 74 65 73 74 5f 70 61 67 65 5f 77 72 61 70 20 23 64 65 76 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 20 2e 62 6c 6f 67 5f 69 6d 61 67 65 5f 77 72 61 70 20 70 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 38 30 38 30 38 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 30 20 30 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 30 25 3b 0a 20 20 Data Ascii: { width: 100%; max-width: auto;}#dev_page_content .blog_image_wrap p,.tlb_page_wrap .tl_contest_page_wrap #dev_page_content .blog_image_wrap p { text-align: center; color: #808080; font-size: 12px; margin: 10px 0 0; line-height: 150%;
2024-04-25 06:40:03 UTC	16384	IN	Data Raw: 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 34 62 62 63 38 37 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 61 2e 74 67 6d 65 5f 61 63 74 69 6f 6e 5f 62 75 74 74 6f 6e 5f 6e 65 77 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 61 63 63 65 6e 74 2d 62 74 6e 2d 63 6f 6c 6f 72 29 3b 0a 7d 0a 61 2e 74 67 6d 65 5f 61 63 74 69 6f 6e 5f 62 75 74 74 6f 6e 5f 6e 65 77 2e 73 68 69 6e 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 32 37 30 64 65 67 2c 20 72 67 62 61 28 31 30 30 2c 20 31 38 31 2c 20 32 33 39 2c 20 30 29 20 34 38 2e 34 34 25 2c 20 23 36 34 62 35 65 Data Ascii: { color: #FFF; background: #4bbc87; text-decoration: none;}a.tgme_action_button_new { background-color: var(--accent-btn-color);}a.tgme_action_button_new.shine { background-image: linear-gradient(270deg, rgba(100, 181, 239, 0) 48.44%, #64b5e
2024-04-25 06:40:03 UTC	16384	IN	Data Raw: 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 32 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 34 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 31 70 78 3b 0a 7d 0a 2e 74 6c 5f 63 6f 6e 74 65 6e 74 5f 74 69 74 6c 65 5f 6c 69 6e 6b 2c 0a 2e 74 6c 5f 63 6f 6e 74 65 6e 74 5f 74 69 74 6c 65 5f 6c 69 6e 6b 3a 68 6f 76 65 72 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 74 64 5f 73 63 72 65 65 6e 73 68 6f 74 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 67 2f 74 64 5f 6c 61 70 74 6f 70 2e 70 6e 67 29 20 35 30 25 20 30 20 6e 6f 2d 72 65 70 65 61 74 3b 0a Data Ascii: enter; margin-top: 32px; margin-bottom: 14px; font-weight: normal; letter-spacing: -1px;}.tl_content_title_link,.tl_content_title_link:hover { text-decoration: none;}.td_screenshot { background: url(../img/td_laptop.png) 50% 0 no-repeat;
2024-04-25 06:40:03 UTC	626	IN	Data Raw: 78 3b 0a 20 20 7d 0a 20 20 2e 74 6c 5f 6d 61 69 6e 5f 64 6f 77 6e 6c 6f 61 64 5f 69 6d 61 67 65 5f 5f 69 6f 73 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 2d 31 30 33 70 78 20 30 20 30 20 2d 31 30 31 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 33 30 30 70 78 20 31 38 33 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 30 36 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 36 35 70 78 3b 0a 20 20 7d 0a 20 20 2e 74 6c 5f 6d 61 69 6e 5f 76 69 64 65 6f 5f 70 6c 61 79 65 72 5f 5f 61 6e 64 72 6f 69 64 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 2d 31 30 39 70 78 20 30 20 30 20 2d 31 30 31 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 30 35 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 36 32 70 78 3b 0a 20 20 7d 0a 20 20 Data Ascii: x; } .tl_main_download_image__ios { margin: -103px 0 0 -101px; background-size: 300px 183px; width: 206px; height: 165px; } .tl_main_video_player__android { margin: -109px 0 0 -101px; width: 205px; height: 162px; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49729	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:02 UTC	523	OUT	GET /js/tgwallpaper.min.js?3 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://t.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:40:02 UTC	391	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:02 GMT Content-Type: application/javascript Content-Length: 2979 Last-Modified: Thu, 03 Mar 2022 19:57:25 GMT Connection: close ETag: "62211da5-ba3" Expires: Mon, 29 Apr 2024 06:40:02 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-04-25 06:40:02 UTC	2979	IN	Data Raw: 76 61 72 20 54 57 61 6c 6c 70 61 70 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 78 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2e 63 6f 6e 63 61 74 28 47 29 3b 30 3c 61 3b 29 62 2e 70 75 73 68 28 62 2e 73 68 69 66 74 28 29 29 2c 61 2d 2d 3b 61 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 3d 32 29 61 2e 70 75 73 68 28 62 5b 63 5d 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 42 28 61 2c 62 29 7b 62 25 3d 39 30 3b 76 61 72 20 63 3d 78 28 61 25 70 29 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 78 28 2b 2b 61 25 70 29 3b 72 65 74 75 72 6e 5b 7b 78 3a 63 5b 30 5d 2e 78 2b 28 64 5b 30 5d 2e 78 2d 63 5b 30 5d 2e 78 29 2f 39 30 2a 62 2c 79 3a 63 5b 30 5d 2e 79 2b 28 64 5b 30 5d 2e 79 Data Ascii: var TWallpaper=function(){function x(a){for(var b=[].concat(G);0<a;)b.push(b.shift()),a--;a=[];for(var c=0;c<b.length;c+=2)a.push(b[c]);return a}function B(a,b){b%=90;var c=x(a%p);if(b){var d=x(++a%p);return[{x:c[0].x+(d[0].x-c[0].x)/90*b,y:c[0].y+(d[0].y

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49725	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:02 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1714027169909&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-25 06:40:02 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-25 06:40:02 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-25 06:40:03 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 2AC648FEBC87453CB6C5A379833A6F97 Ref B: LAX311000108029 Ref C: 2024-04-25T06:40:03Z Date: Thu, 25 Apr 2024 06:40:03 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1714027202.90838e7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49732	34.111.35.152	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:03 UTC	920	OUT	GET /file/L5wseH0PdrmEcU_jcZbpJjndKo6Z1capwPo5WAUBVcgd-WR5c60_Dl8kG6CeE-nqmHg-sErC5p_7YIHRvBtFZQBY59b0cAw5lYjvfNc7405i05qLLGYi_pPsL_kwiNd4bkExysZtGz5orIeM4msdrDDjLNKlumINIDSLKbOUMnL3qgDAO8MPT2n1Ao7MkWQguZTV_jKo_PTm8bHryHKVZcdfMrILhFiU-7v0BvyISHzadm14bI1trWzevQUGsW97AEKmYI3qRcOIlgq-NBvXkJmKhaG2rQR2uf-IUVbeN0qHN0ZYGJkfVFbKerbyiptnaAqppqeVKl_9-3l0jE56BA.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.me/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:40:03 UTC	675	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:03 GMT Content-Type: image/jpeg Content-Length: 12164 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Cache-Control: public,max-age=7200 ETag: "a14336f5c0dc28f39ba759ae27acfb45a1a05e83" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 06:40:03 UTC	580	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 02 02 02 02 01 02 02 02 02 03 02 02 03 03 06 04 03 03 03 03 07 05 05 04 06 08 07 09 08 08 07 08 08 09 0a 0d 0b 09 0a 0c 0a 08 08 0b 0f 0b 0c 0d 0e 0e 0f 0e 09 0b 10 11 10 0e 11 0d 0e 0e 0e ff db 00 43 01 02 03 03 03 03 03 07 04 04 07 0e 09 08 09 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e ff c0 00 11 08 01 40 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 01 01 00 02 01 05 01 00 00 00 00 00 00 00 00 00 00 09 07 08 06 01 02 03 05 0a 04 ff c4 00 40 10 00 01 03 03 02 03 05 06 04 04 04 06 03 01 00 00 01 00 02 03 04 05 06 07 11 08 12 21 09 13 31 41 51 14 22 32 61 71 81 15 42 Data Ascii: JFIF``CC@@"@!1AQ"2aqB
2024-04-25 06:40:03 UTC	1255	IN	Data Raw: 4f b1 ad 33 b5 5f 35 22 cb 06 5d 99 d6 53 b6 6a 88 ea f7 75 35 1f 30 dc 46 c6 6f b1 23 71 b9 3e 6a 2f 3b 3e c6 9f 6e 2a b9 db bf 08 8e 32 94 c1 d3 ef ea 17 26 8b 5d 91 1c 66 78 42 33 35 cd 7b 77 63 83 c7 c8 ee bb 95 b2 d6 9e 0b 74 c7 34 d3 eb 85 56 0d 63 a7 c3 33 28 21 32 50 cf 42 0b 61 9d c0 6e 23 91 9e 04 1f 0d c7 50 a2 85 44 52 d1 de 6b 6d d5 6d 10 d7 d1 d4 3e 9e aa 0d fa c7 23 1c 5a e1 b7 d4 2c 70 35 1b 1a 85 13 55 bd e2 63 8c 4b 2c fd 3a fe 9f 5c 53 73 69 89 e1 31 c1 d8 89 b1 45 2c 89 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 10 9d 81 24 ed b0 df aa 0f 65 64 96 68 33 ec 76 7a 7a 57 d7 d4 45 76 a6 7c 54 b1 b7 99 f3 b8 4a d2 18 d1 e6 4a fa 69 b6 4a f9 f1 da 09 e4 85 d4 d2 Data Ascii: O3_5"]Sju50Fo#q>j/;>n*2&]fxB35{wct4Vc3(!2PBan#PDRkmm>#Z,p5UcK,:\Ssi1E,$edh3vzzWEv\|TJJiJ
2024-04-25 06:40:03 UTC	1255	IN	Data Raw: 6a d4 5c c1 c6 a2 5a 33 3d dd 94 ce 25 d1 d1 41 1f b9 04 0d 1e 40 6e 37 f5 2b 64 fb 49 b2 d1 53 9e e9 ce 0d 14 bb b6 8e 09 ae 75 2c 1e 4e 7f f0 d9 bf d8 12 aa 29 99 99 de 57 0c 44 44 6d 09 90 00 0d 00 78 01 b0 5d 51 17 c7 d1 11 10 10 80 46 c4 6e 11 3c 8a 0e 91 8e e6 56 c9 0b 9d 04 80 ee 1f 13 cb 08 fb 82 16 49 c7 35 93 57 31 09 23 38 d6 a5 64 16 c6 30 ee d8 4d 7b a5 8c 7f e2 fd c2 e2 b8 b6 2d 93 67 19 2c 76 7c 36 c1 5d 93 5c 5e ed bb ba 08 0b da df ea 77 c2 df b9 5b ff 00 a5 7d 9d f9 75 f0 52 dc f5 5e fe cc 62 de ed 9e eb 4d ad e2 4a 97 0f e5 7c 9e 0d fb 6e 83 17 e2 1c 76 f1 17 6d b9 d3 db e4 9e dd 9d cc e7 06 b2 9a 7b 71 15 12 7c bf 85 e7 f6 55 23 42 b5 33 59 75 0e da ca dd 44 d2 26 e9 f5 b9 d1 73 47 55 2d c7 79 26 3e 5b 42 47 33 47 d4 af 4b 6e c6 f8 67 Data Ascii: j\Z3=%A@n7+dISu,N)WDDmx]QFn<VI5W1#8d0M{-g,v\|6]\^w[}uR^bMJ\|nvm{q\|U#B3YuD&sGU-y&>[BG3GKng
2024-04-25 06:40:03 UTC	1255	IN	Data Raw: 95 31 4a e8 aa 44 9d f4 72 b4 ec e6 bf 9b 98 3b 7f 5d d0 55 8e 3f f4 68 c3 5b 6d d6 9b 15 2f b8 43 28 72 11 13 7c bf e9 4c 76 f4 f8 49 fa 29 92 7a 15 71 38 7a d4 0b 2f 13 7c 04 cf 64 ca 5a ca cb b4 54 8e b3 e4 34 f2 10 5d ce 1b b3 65 db e6 36 70 3e a1 47 0d 46 c0 ee da 63 ad d9 16 0b 79 8d e2 a2 d9 54 e6 d3 ca e6 90 27 80 9d e3 90 7a ee dd 95 9f d1 fc de ba c4 e3 d7 3f 15 1c 3c 3f e2 ad e9 06 0f 51 91 19 14 47 c3 5f 1f a4 ff 00 df e7 77 0a 44 45 d8 b8 d1 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 76 b9 dc ac 27 62 e3 e4 d6 8d cb 8f 90 03 cc 94 1c ab 08 c3 6f da 87 ab 56 2c 2b 19 83 bf bd 5d 2a 04 71 92 3d d8 19 f9 e5 79 f2 6b 47 5f d1 5a 7c ab 20 c0 78 29 ec f7 74 b1 31 92 49 6f a6 ee 68 a0 e9 df 5d ee 0f 1e 27 cc ee ee a4 f9 34 2e 0f Data Ascii: 1JDr;]U?h[m/C(r\|LvI)zq8z/\|dZT4]e6p>GFcyT'z?<?QG_wDEv'boV,+]*q=ykG_Z\| x)t1Ioh]'4.
2024-04-25 06:40:03 UTC	1255	IN	Data Raw: 34 d4 0f e1 ff 00 06 b8 f2 54 4c c6 c9 96 56 52 c9 b1 86 2f 16 d2 82 3c 0b ba 17 0f 4e 8a 41 5b 6d b7 0b b5 fe 8e cd 66 b7 54 dd 6e 95 0e 11 d3 50 d1 42 e9 65 90 9e 80 35 a3 aa dc 4d 12 e0 e7 5b 78 8a ca e5 cc b2 33 36 2d 8e 5c ea 9d 55 71 c8 ee f1 91 53 5a e7 9d dc e8 62 3d 4e fb f4 27 60 02 ac b8 c6 9c f0 cd c1 46 94 3e fb 5d 2d 25 be e8 62 fe 35 e6 e6 e1 3d ce bd e0 7c 31 8f 11 b9 f0 6b 40 0a ac 5a ed 1d e1 cb b3 9b 29 bc 5e 2c 99 b6 b5 57 3b 16 b6 d3 cf 1d 5d 2e 35 46 ed ea e5 73 5c 1c de fd fe 0c 1d 3a b0 75 f5 56 a2 8a 7a 29 a8 f9 28 2a 21 a8 86 13 dd 1e e6 40 f0 c2 de 9c a7 6f 02 3d 14 43 d7 7e 3e b3 cc fd d5 b8 fe 97 b2 6c 07 13 7e ec 75 7b c0 fc 46 ad be bb f5 11 03 f2 ea b3 3f 66 3c b7 9a ba 6d 5b ac ac ba d6 d6 db bd b2 9d ac 86 a2 a5 d2 30 4c Data Ascii: 4TLVR/<NA[mfTnPBe5M[x36-\UqSZb=N'`F>]-%b5=\|1k@Z)^,W;].5Fs\:uVz)(*!@o=C~>l~u{F?f<m[0L
2024-04-25 06:40:03 UTC	1255	IN	Data Raw: 0a 97 0c 1a a2 b3 34 d3 9a 49 ae 78 81 2e 96 ba d7 18 e7 9a dd b9 dc b9 83 c5 d1 fc bc 42 9b 31 c9 34 15 90 d4 d3 4f 25 2d 54 2f 12 43 3c 2f 2c 92 27 0f 07 35 c3 a8 23 d5 54 ee 18 38 cc 8a ee 28 74 df 58 ea e3 8e e0 f6 88 2d 79 0c fb 08 aa fc 84 53 ef d0 3f cb 9b c0 f9 ac 26 06 80 b4 87 34 16 9d c1 5d 55 1d e2 2b 84 d6 55 fb 76 a0 69 35 23 1b 3b c1 9e e3 61 83 e0 9c 6d b9 92 0d ba 07 79 f2 f8 1f 25 38 dc d7 c7 3c 91 4b 1b e1 9e 37 96 4b 14 8c 2d 7c 6e 1d 08 20 f5 05 7c 1d 11 11 01 11 10 16 fd f0 11 6a ef 75 0f 50 6f 8e 61 22 1a 48 69 a3 71 f2 24 97 10 b4 11 54 5e 03 6d 7e cd c3 ee 5b 7a 7b 36 f6 db e3 9a 1f ea d8 d8 02 09 db c6 95 ed b7 be d1 9c d9 cc 7f 3c 74 31 53 d1 b7 e4 59 18 dc 7e a5 6a c2 c9 ba d3 79 39 07 17 9a 97 77 e6 e6 6c f9 15 48 61 df 7f 75 Data Ascii: 4Ix.B14O%-T/C</,'5#T8(tX-yS?&4]U+Uvi5#;amy%8<K7K-\|n \|juPoa"Hiq$T^m~[z{6<t1SY~jy9wlHau
2024-04-25 06:40:03 UTC	1255	IN	Data Raw: 8b 05 ca be eb 35 5f 2d 5c 7c 92 4f 1b 83 79 1e 47 88 04 78 02 b8 ae 89 f0 87 a6 da 15 8b ff 00 98 5a ad 72 a0 be 64 d4 50 77 f5 15 b7 12 d6 db ed 7b 0e 63 c8 1d d0 91 b7 c4 7a fa 2d cf c5 f3 2b 16 57 a6 74 d9 75 a6 57 37 1d 9e 27 4b 4d 55 3c 66 26 c9 0b 77 fe 28 07 f2 10 37 07 cc 75 41 cb 14 8b ed 17 ac b4 4d ad 7a 7b 45 4e 58 6f 30 5b a7 7d 5f 2e c5 c2 37 38 72 03 f7 05 73 1c eb b4 3d f4 77 dc 86 d1 82 e0 f1 5c 05 3d 54 94 f4 17 7a da bd a1 98 34 ed de f2 0e a4 6f e0 3c d4 de cc 32 fc 8f 3d d4 8b 9e 5b 96 5c 5d 74 be 57 c9 cd 3c c7 a3 58 3c 98 c1 f9 5a 07 40 15 81 a3 69 59 56 32 63 22 f4 7b 31 11 d9 1c e7 78 57 9a d6 ad 8b 91 8d 38 f6 67 da 99 9e d9 e5 1b 4b 8d a2 22 b0 15 f0 88 88 08 88 80 88 88 08 88 80 88 88 08 88 82 84 76 7d ea 57 e0 5a d3 90 e9 a5 Data Ascii: 5_-\\|OyGxZrdPw{cz-+WtuW7'KMU<f&w(7uAMz{ENXo0[}_.78rs=w\=Tz4o<2=[\]tW<X<Z@iYV2c"{1xW8gK"v}WZ
2024-04-25 06:40:03 UTC	1255	IN	Data Raw: 51 3d 76 3d 2b 8d 34 72 1d cc 94 72 ef b0 eb e4 09 23 ee a4 12 cf 3c 33 ea 4b f4 bb 8c ac 56 f7 34 e6 2b 35 c2 5f c3 6e 83 7d 87 77 29 d9 ae 3f 47 6c 54 2e ab 8b ef 78 35 d1 1c 63 b6 3c 63 d6 37 4d 69 59 5e e9 9d 45 73 c2 7b 27 c2 7d 27 69 63 be 25 74 c2 5d 23 e3 43 32 c5 99 09 8e d1 51 50 6e 16 97 6d b0 30 4c 4b b6 1f 43 b8 58 29 59 2e d1 ed 2e 17 cd 0b c7 75 62 d5 00 96 b7 1f 9c 53 dc 1f 1b 77 2f a4 94 f4 76 fe 61 ae d8 fd d4 6d 04 11 b8 ea 0f 82 a6 57 53 74 b8 01 b3 8b a7 68 f5 a6 a5 c3 99 96 db 25 55 4e fb 78 12 03 47 ee b3 67 68 95 d7 da b8 9f c2 2c e1 fb b6 8a c4 f9 5c df 42 f9 3a 7f 60 bd 27 66 7d 9f da b8 98 d4 4b db 99 b8 a2 b0 c5 03 1f f3 7c bb 91 fa 05 c3 f8 df bb 7e 29 da 25 7e 81 ae e6 65 ba d3 4b 4e 06 fe 04 82 e2 be c7 11 a9 88 88 b3 04 44 Data Ascii: Q=v=+4rr#<3KV4+5_n}w)?GlT.x5c<c7MiY^Es{'}'ic%t]#C2QPnm0LKCX)Y..ubSw/vamWSth%UNxGgh,\B:`'f}K\|~)%~eKND
2024-04-25 06:40:03 UTC	1255	IN	Data Raw: 65 dc 50 f0 cb c3 e5 85 f8 ee 32 fa 1b 85 ce 9d 9c 8c b3 e2 f4 cd 7b b9 87 4d a4 90 7b a3 ea 49 53 f7 55 3b 40 b5 83 36 f6 9b 76 17 15 36 9d d9 5f bb 44 94 e3 be ac 73 7e 6f 3d 1a 7e 8b 1d c5 1b a1 c0 78 5b e1 73 17 17 4b b3 ad 16 9a f8 9b bf b7 5e 27 6d 45 74 a7 fd 2d 3b 9d fe 81 6a fe aa f6 93 51 43 1d 4d af 47 71 49 2b de 37 63 2f 37 91 dd c4 df 2e 66 44 3a 9f ba 94 57 5b 95 d2 ff 00 7e 96 eb 7f ba 55 df 2e 72 1d df 55 5f 50 e9 9e 4f d5 c4 ed f6 5f 8d 7c 16 27 84 ee 37 32 8d 46 d5 bb 4e 96 ea 55 a2 1a cb fd c3 bd 7d 1d fa 84 08 a3 77 28 e6 0c 7c 7e 47 6e 80 85 e1 ed 1f d7 6c f3 4f b0 6b 06 9a 62 ad 65 ae db 97 51 ca 2e 57 86 38 f7 ed 8d a7 67 43 1f a7 30 f1 77 a2 9d 7c 34 5e 05 8b b4 0b 4a 2b dc fe 46 3a f4 da 77 9f 94 80 b5 6f 7f 6a ad 9c 3f 4b f4 9f Data Ascii: eP2{M{ISU;@6v6_Ds~o=~x[sK^'mEt-;jQCMGqI+7c/7.fD:W[~U.rU_PO_\|'72FNU}w(\|~GnlOkbeQ.W8gC0w\|4^J+F:woj?K
2024-04-25 06:40:03 UTC	1255	IN	Data Raw: 7e 67 94 27 e7 10 fa bf 55 ad 3c 4d 5d f2 56 c8 f1 8e 51 93 45 61 81 ce e8 d8 1a 48 32 6d ea f3 b9 df d3 65 83 97 46 80 d6 35 ad 1b 34 0d 80 1e 4b aa bb 6d 5a a2 cd aa 6d d1 1b 44 46 d0 a3 ae dd ae f5 da ae 57 3b cd 53 bc 88 88 bd 9e 42 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 2a 0d d9 d7 35 9d 9c 48 e7 b0 d5 72 0b cc 96 48 8d 0f 31 f7 8b 04 9f c4 e5 fe ca 7c ae 4d 86 e6 19 16 01 a9 76 ac bb 14 b8 3a d9 7c b7 c9 cd 0c ad f8 5e df cd 1b c7 83 9a e1 d0 85 a1 9b 8f 39 58 95 d9 a6 76 9a a1 bf 85 91 18 b9 74 5e aa 37 8a 65 f4 c4 bf 1d c3 db 7f 04 aa fc 37 ba f6 fe ec fb 3f 7f bf 27 3f 97 36 de 4a 60 d9 fb 46 dc cc 41 8c be e9 ab e7 be b6 3d 8b e8 ab c3 60 7b b6 f1 d9 c3 70 16 bc 65 1c 6c eb b5 f7 51 6a 2f 36 7b dc 18 ad ac 8e 5a 7b 4d Data Ascii: ~g'U<M]VQEaH2meF54KmZmDFW;SB" """ """ """ """ *5HrH1\|Mv:\|^9Xvt^7e7?'?6J`FA=`{pelQj/6{Z{M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49733	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:03 UTC	610	OUT	GET /img/tgme/pattern.svg?1 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/css/telegram.css?237 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:40:04 UTC	345	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:04 GMT Content-Type: image/svg+xml Content-Length: 231706 Last-Modified: Thu, 05 Jan 2023 17:52:04 GMT Connection: close ETag: "63b70e44-3891a" Expires: Mon, 29 Apr 2024 06:40:04 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:04 UTC	16039	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 37 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 27.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-04-25 06:40:04 UTC	16384	IN	Data Raw: 34 30 2e 34 2d 32 2e 38 73 38 2e 37 2d 32 38 2e 35 2c 37 2e 33 2d 33 31 2e 31 73 2d 33 2e 31 2d 38 2e 39 2c 32 2e 34 2d 31 31 2e 39 63 35 2e 36 2d 33 2c 31 32 2c 33 2c 31 35 2e 33 2c 31 30 2e 35 0a 09 09 73 39 2e 38 2c 33 32 2e 35 2d 31 39 2e 31 2c 34 38 2e 39 63 2d 33 30 2e 32 2c 31 37 2e 31 2d 35 37 2e 33 2c 31 33 2e 36 2d 36 37 2e 36 2c 33 2e 37 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 35 32 30 2e 36 2c 32 37 34 35 2e 39 63 2d 32 2c 33 2e 38 2d 33 2e 34 2c 31 39 2e 38 2d 31 2e 36 2c 32 31 2e 32 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 35 32 37 2e 37 2c 32 37 34 36 2e 37 63 31 2e 35 2c 33 2e 38 2d 30 2e 39 2c 31 38 2e 31 2d 32 2e 35 2c 31 39 2e 38 22 2f 3e 0a 09 3c 70 61 74 Data Ascii: 40.4-2.8s8.7-28.5,7.3-31.1s-3.1-8.9,2.4-11.9c5.6-3,12,3,15.3,10.5s9.8,32.5-19.1,48.9c-30.2,17.1-57.3,13.6-67.6,3.7"/><path class="st0" d="M520.6,2745.9c-2,3.8-3.4,19.8-1.6,21.2"/><path class="st0" d="M527.7,2746.7c1.5,3.8-0.9,18.1-2.5,19.8"/><pat
2024-04-25 06:40:04 UTC	16384	IN	Data Raw: 2d 31 30 2e 38 73 36 2e 33 2c 35 2e 33 2c 36 2e 33 2c 35 2e 33 73 33 2e 36 2d 32 2e 38 2c 37 2e 31 2c 30 2e 32 73 31 2e 33 2c 37 2e 39 2c 31 2e 33 2c 37 2e 39 73 35 2e 31 2d 32 2c 36 2e 37 2c 33 2e 35 0a 09 09 63 31 2e 34 2c 35 2e 31 2d 35 2e 36 2c 39 2e 33 2d 31 30 2e 37 2c 37 2e 34 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 32 38 35 2e 34 2c 31 37 39 36 2e 39 63 32 2e 38 2c 30 2e 36 2c 34 2e 35 2c 33 2e 36 2c 34 2e 35 2c 33 2e 36 73 32 2e 37 2d 33 2e 37 2c 36 2e 39 2d 31 2e 38 73 33 2e 35 2c 37 2e 32 2c 33 2e 35 2c 37 2e 32 73 34 2e 33 2d 33 2e 34 2c 37 2e 34 2c 31 2e 35 0a 09 09 63 32 2e 33 2c 33 2e 36 2d 31 2c 38 2e 33 2d 35 2e 32 2c 39 2e 37 22 2f 3e 0a 3c 2f 67 3e 0a 3c 67 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 Data Ascii: -10.8s6.3,5.3,6.3,5.3s3.6-2.8,7.1,0.2s1.3,7.9,1.3,7.9s5.1-2,6.7,3.5c1.4,5.1-5.6,9.3-10.7,7.4"/><path class="st0" d="M285.4,1796.9c2.8,0.6,4.5,3.6,4.5,3.6s2.7-3.7,6.9-1.8s3.5,7.2,3.5,7.2s4.3-3.4,7.4,1.5c2.3,3.6-1,8.3-5.2,9.7"/></g><g><path clas
2024-04-25 06:40:04 UTC	16384	IN	Data Raw: 34 2e 32 2c 31 36 2e 36 2d 38 2e 32 2c 32 30 2e 33 2d 36 2e 39 63 34 2e 34 2c 31 2e 35 2c 31 31 2e 35 2c 31 31 2e 35 2c 31 37 2e 36 2c 32 30 2e 34 0a 09 09 73 31 31 2c 37 2e 38 2c 31 31 2e 38 2c 33 2e 37 63 30 2e 38 2d 33 2e 39 2d 36 2e 37 2d 32 30 2e 33 2d 34 2e 37 2d 32 33 2e 32 63 30 2e 35 2d 30 2e 37 2c 33 2e 31 2d 30 2e 39 2c 37 2e 37 2c 37 2e 36 73 39 2e 33 2c 31 38 2e 32 2c 31 33 2c 31 32 2e 38 63 31 2e 34 2d 32 2c 30 2e 37 2d 36 2e 33 2d 31 2e 34 2d 31 32 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 38 32 2e 39 2c 31 34 34 37 2e 38 63 2d 37 2e 37 2d 34 2e 37 2d 38 2e 32 2d 34 33 2e 37 2c 31 2e 35 2d 35 33 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 37 32 2e 31 2c 31 33 39 38 Data Ascii: 4.2,16.6-8.2,20.3-6.9c4.4,1.5,11.5,11.5,17.6,20.4s11,7.8,11.8,3.7c0.8-3.9-6.7-20.3-4.7-23.2c0.5-0.7,3.1-0.9,7.7,7.6s9.3,18.2,13,12.8c1.4-2,0.7-6.3-1.4-12"/><path class="st0" d="M82.9,1447.8c-7.7-4.7-8.2-43.7,1.5-53"/><path class="st0" d="M72.1,1398
2024-04-25 06:40:04 UTC	16384	IN	Data Raw: 2e 38 2c 32 2e 32 2d 31 30 2e 37 2c 36 2d 31 31 2e 34 2c 31 31 2e 34 63 2d 30 2e 33 2c 31 2e 39 2c 30 2e 36 2c 33 2e 38 2c 32 2e 31 2c 34 2e 38 0a 09 09 63 30 2e 36 2c 30 2e 34 2c 31 2e 33 2c 30 2e 37 2c 32 2e 31 2c 30 2e 38 63 32 2e 37 2c 30 2e 34 2c 35 2e 33 2d 31 2e 35 2c 35 2e 37 2d 34 2e 32 63 30 2e 31 2d 30 2e 35 2c 30 2e 33 2d 31 2e 39 2c 34 2e 36 2d 33 2e 33 43 35 38 38 2e 31 2c 31 35 32 39 2e 37 2c 35 39 32 2e 33 2c 31 35 32 35 2e 34 2c 35 39 33 2e 32 2c 31 35 32 30 2e 35 7a 20 4d 35 38 31 2e 36 2c 31 35 32 38 2e 37 0a 09 09 63 2d 36 2e 31 2c 32 2d 36 2e 35 2c 34 2e 37 2d 36 2e 37 2c 35 2e 37 63 2d 30 2e 32 2c 31 2e 31 2d 31 2e 32 2c 31 2e 39 2d 32 2e 33 2c 31 2e 37 63 2d 30 2e 33 2c 30 2d 30 2e 36 2d 30 2e 32 2d 30 2e 38 2d 30 2e 33 63 2d 30 2e Data Ascii: .8,2.2-10.7,6-11.4,11.4c-0.3,1.9,0.6,3.8,2.1,4.8c0.6,0.4,1.3,0.7,2.1,0.8c2.7,0.4,5.3-1.5,5.7-4.2c0.1-0.5,0.3-1.9,4.6-3.3C588.1,1529.7,592.3,1525.4,593.2,1520.5z M581.6,1528.7c-6.1,2-6.5,4.7-6.7,5.7c-0.2,1.1-1.2,1.9-2.3,1.7c-0.3,0-0.6-0.2-0.8-0.3c-0.
2024-04-25 06:40:04 UTC	16384	IN	Data Raw: 36 2e 36 2c 37 2e 37 2c 33 2e 31 2c 32 30 2e 36 2c 36 2e 31 2c 32 39 2e 37 73 31 34 2e 31 2c 34 35 2e 32 2d 31 31 2e 38 2c 34 33 2e 32 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 31 34 39 2e 31 2c 35 33 37 2e 36 63 37 2e 38 2d 30 2e 35 2c 37 2e 37 2c 31 33 2e 33 2d 31 2e 31 2c 39 2e 37 63 2d 34 2e 31 2d 31 2e 37 2d 33 2e 38 2d 39 2e 32 2c 30 2e 39 2d 39 2e 37 43 31 34 39 2c 35 33 37 2e 36 2c 31 34 39 2e 31 2c 35 33 37 2e 36 2c 31 34 39 2e 31 2c 35 33 37 2e 36 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 31 32 34 2e 36 2c 35 34 31 2e 35 63 31 30 2e 38 2c 35 2e 33 2d 31 2e 36 2c 32 31 2e 33 2d 39 2e 31 2c 31 32 2e 32 63 2d 34 2e 39 2d 35 2e 39 2c 32 2d 31 35 2e 34 2c 38 2e 38 2d 31 Data Ascii: 6.6,7.7,3.1,20.6,6.1,29.7s14.1,45.2-11.8,43.2"/><path class="st0" d="M149.1,537.6c7.8-0.5,7.7,13.3-1.1,9.7c-4.1-1.7-3.8-9.2,0.9-9.7C149,537.6,149.1,537.6,149.1,537.6z"/><path class="st0" d="M124.6,541.5c10.8,5.3-1.6,21.3-9.1,12.2c-4.9-5.9,2-15.4,8.8-1
2024-04-25 06:40:04 UTC	16384	IN	Data Raw: 38 0a 09 09 63 38 2e 34 2c 36 2e 38 2d 32 33 2e 31 2c 33 31 2e 35 2d 32 33 2e 31 2c 33 31 2e 35 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 36 32 35 2c 32 34 37 37 2e 36 63 2d 32 2e 32 2c 32 2e 36 2d 32 35 2e 36 2c 32 31 2e 34 2d 32 36 2e 38 2c 32 32 2e 36 22 2f 3e 0a 09 3c 6c 69 6e 65 20 63 6c 61 73 73 3d 22 73 74 30 22 20 78 31 3d 22 36 34 30 2e 36 22 20 79 31 3d 22 32 34 36 35 22 20 78 32 3d 22 36 33 35 2e 32 22 20 79 32 3d 22 32 34 36 39 2e 33 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 36 34 36 2e 39 2c 32 34 37 32 2e 34 63 30 2c 30 2d 33 38 2e 39 2c 32 37 2e 38 2d 34 31 2e 36 2c 33 31 2e 39 22 2f 3e 0a 3c 2f 67 3e 0a 3c 67 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 Data Ascii: 8c8.4,6.8-23.1,31.5-23.1,31.5"/><path class="st0" d="M625,2477.6c-2.2,2.6-25.6,21.4-26.8,22.6"/><line class="st0" x1="640.6" y1="2465" x2="635.2" y2="2469.3"/><path class="st0" d="M646.9,2472.4c0,0-38.9,27.8-41.6,31.9"/></g><g><path class="st
2024-04-25 06:40:04 UTC	16384	IN	Data Raw: 67 6f 6e 20 63 6c 61 73 73 3d 22 73 74 30 22 20 70 6f 69 6e 74 73 3d 22 33 39 33 2e 34 2c 34 37 30 2e 31 20 33 39 34 2e 39 2c 34 37 36 2e 37 20 33 38 30 2e 33 2c 34 37 36 2e 37 20 33 37 39 2e 38 2c 34 37 31 2e 35 20 09 22 2f 3e 0a 09 3c 70 6f 6c 79 67 6f 6e 20 63 6c 61 73 73 3d 22 73 74 30 22 20 70 6f 69 6e 74 73 3d 22 34 31 33 2e 37 2c 34 36 35 2e 32 20 34 31 36 2e 34 2c 34 37 31 2e 35 20 34 32 38 2c 34 36 31 20 34 32 34 2e 39 2c 34 35 36 2e 35 20 09 22 2f 3e 0a 3c 2f 67 3e 0a 3c 67 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 37 34 30 2e 33 2c 31 33 35 31 2e 38 63 31 31 2e 34 2d 32 32 2c 33 37 2e 33 2d 33 34 2c 34 34 2e 34 2d 33 35 2e 32 63 30 2c 30 2d 32 30 2e 39 2d 31 35 2e 37 2d 33 36 2e 33 2d 38 2e 34 63 2d 31 30 2e 39 Data Ascii: gon class="st0" points="393.4,470.1 394.9,476.7 380.3,476.7 379.8,471.5 "/><polygon class="st0" points="413.7,465.2 416.4,471.5 428,461 424.9,456.5 "/></g><g><path class="st0" d="M740.3,1351.8c11.4-22,37.3-34,44.4-35.2c0,0-20.9-15.7-36.3-8.4c-10.9
2024-04-25 06:40:04 UTC	16384	IN	Data Raw: 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 34 33 39 2e 36 2c 31 32 32 38 2e 33 63 33 2e 34 2c 32 2e 35 2c 32 2e 34 2c 31 34 2e 36 2d 31 35 2e 36 2c 36 2e 39 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 34 32 37 2e 36 2c 31 32 33 36 2e 35 63 30 2e 32 2c 33 2e 35 2d 33 2e 35 2c 38 2e 37 2d 31 30 2e 38 2c 35 2e 34 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 33 36 33 2e 32 2c 31 32 30 34 2e 35 63 2d 33 2e 39 2c 31 2e 32 2d 32 2e 37 2c 39 2e 35 2c 32 2e 34 2c 39 2e 31 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 33 36 30 2e 39 2c 31 32 33 38 2e 35 63 2d 37 2e 32 2c 30 2e 33 2d 31 37 2d 31 2e 33 2d 32 32 2e 33 2d 38 2e 36 63 33 2e 34 2c Data Ascii: ath class="st0" d="M439.6,1228.3c3.4,2.5,2.4,14.6-15.6,6.9"/><path class="st0" d="M427.6,1236.5c0.2,3.5-3.5,8.7-10.8,5.4"/><path class="st0" d="M363.2,1204.5c-3.9,1.2-2.7,9.5,2.4,9.1"/><path class="st0" d="M360.9,1238.5c-7.2,0.3-17-1.3-22.3-8.6c3.4,
2024-04-25 06:40:04 UTC	16384	IN	Data Raw: 35 2e 36 2c 39 2e 37 2d 39 2e 37 2c 31 35 2e 32 2d 35 2e 34 63 36 2e 34 2c 35 2c 35 2e 34 2c 31 38 2e 39 2d 31 35 2c 32 37 2e 39 63 2d 32 31 2e 36 2d 31 30 2e 32 2d 32 30 2e 37 2d 32 32 2e 31 2d 31 37 2e 32 2d 32 36 2e 37 0a 09 43 38 34 34 2e 37 2c 31 38 32 39 2e 32 2c 38 35 35 2e 32 2c 31 38 33 30 2e 39 2c 38 35 37 2e 33 2c 31 38 33 39 2e 31 7a 22 2f 3e 0a 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 38 31 36 2e 37 2c 32 30 34 32 2e 31 63 34 2e 38 2d 37 2e 33 2c 31 36 2e 35 2d 31 31 2c 32 33 2d 33 2e 34 63 37 2e 37 2c 38 2e 39 2c 32 2e 34 2c 32 38 2e 32 2d 32 39 2c 33 35 2e 34 63 2d 32 37 2e 37 2d 32 30 2e 35 2d 32 33 2e 33 2d 33 37 2e 31 2d 31 37 2e 31 2d 34 32 2e 35 0a 09 43 38 30 31 2e 37 2c 32 30 32 34 2e 36 2c 38 31 36 2c 32 30 Data Ascii: 5.6,9.7-9.7,15.2-5.4c6.4,5,5.4,18.9-15,27.9c-21.6-10.2-20.7-22.1-17.2-26.7C844.7,1829.2,855.2,1830.9,857.3,1839.1z"/><path class="st0" d="M816.7,2042.1c4.8-7.3,16.5-11,23-3.4c7.7,8.9,2.4,28.2-29,35.4c-27.7-20.5-23.3-37.1-17.1-42.5C801.7,2024.6,816,20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49734	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:04 UTC	595	OUT	GET /fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://t.me sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://telegram.org/css/font-roboto.css?1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:40:04 UTC	354	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:04 GMT Content-Type: application/octet-stream Content-Length: 11040 Last-Modified: Thu, 20 Oct 2022 11:05:33 GMT Connection: close ETag: "63512b7d-2b20" Expires: Mon, 29 Apr 2024 06:40:04 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:04 UTC	11040	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 2b 20 00 0e 00 00 00 00 54 b4 00 00 2a c9 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 64 1b 9a 1e 1c 85 5e 06 60 00 83 20 11 0c 0a f2 20 da 21 0b 84 0a 00 01 36 02 24 03 88 10 04 20 05 82 7e 07 20 1b b4 45 05 e3 98 03 6c 1c 00 61 f6 5b 29 8a 72 31 4a a2 28 1d 94 11 c5 ff 75 02 37 86 c8 fb 28 55 18 72 af e3 0b 0e 3d c7 a7 a8 15 c5 32 b1 08 87 10 68 a2 46 9b be 6a 05 a5 50 1e 29 18 30 d0 9b af 8b 5d 7e 10 22 4a 6b 35 24 3c 07 07 ef a9 4c 85 a3 53 87 12 1e 39 73 06 8e f3 51 73 a1 7f b6 79 1f 1b a0 3b 1a 83 c9 d0 2d a1 cd f1 7e e0 e7 d6 fb db 88 52 4a 30 88 0d b4 11 a9 11 03 24 6a 83 de 18 92 b1 8d 31 46 85 48 8e 90 2a 01 a9 50 62 a4 4d 28 ad 87 85 91 28 0a 6d 20 c6 dd 59 f7 e9 f4 9b 91 2c c3 ec ae Data Ascii: wOF2+ Td^` !6$ ~ Ela[)r1J(u7(Ur=2hFjP)0]~"Jk5$<LS9sQsy;-~RJ0$j1FHPbM((m Y,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49735	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:04 UTC	591	OUT	GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://t.me sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://telegram.org/css/font-roboto.css?1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:40:04 UTC	354	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:04 GMT Content-Type: application/octet-stream Content-Length: 11028 Last-Modified: Thu, 20 Oct 2022 11:05:33 GMT Connection: close ETag: "63512b7d-2b14" Expires: Mon, 29 Apr 2024 06:40:04 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:04 UTC	11028	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 2b 14 00 0e 00 00 00 00 54 28 00 00 2a bc 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 64 1b 99 64 1c 85 5e 06 60 00 83 20 11 0c 0a f1 5c da 72 0b 84 0a 00 01 36 02 24 03 88 10 04 20 05 82 74 07 20 1b c1 45 45 46 ee ca e0 ad f0 28 6a d6 de d4 13 fc 5f 27 70 72 fd 58 0f a2 43 b4 08 19 8d c6 25 49 14 ae 3d c8 15 23 37 66 43 f4 ea c8 c7 79 d3 2f f4 d4 d0 7a 8f 97 2f c7 64 5c 48 b9 9a d5 77 4e fa 11 92 cc 12 d4 fb c7 7f 3d 07 17 1f dc 0d 21 47 46 08 a1 f2 75 4e 47 60 4e 64 80 22 f2 cd 01 cd ed 7e c5 88 1a 61 14 a0 60 12 29 95 12 52 d2 21 35 6a 54 48 8e c1 80 91 69 40 cb a0 37 54 2a 54 2c 30 69 49 3b fd ef f7 6b 76 fe be 2b b6 62 52 a1 25 a6 33 84 0a c5 e3 c5 3b 49 5e ee 0b 54 a1 54 d0 9a 95 b1 a8 b7 Data Ascii: wOF2+T(dd^` \r6$ t EEF(j_'prXC%I=#7fCy/z/d\HwN=!GFuNG`Nd"~a`)R!5jTHi@7TT,0iI;kv+bR%3;I^TT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49736	34.111.35.152	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:04 UTC	696	OUT	GET /file/L5wseH0PdrmEcU_jcZbpJjndKo6Z1capwPo5WAUBVcgd-WR5c60_Dl8kG6CeE-nqmHg-sErC5p_7YIHRvBtFZQBY59b0cAw5lYjvfNc7405i05qLLGYi_pPsL_kwiNd4bkExysZtGz5orIeM4msdrDDjLNKlumINIDSLKbOUMnL3qgDAO8MPT2n1Ao7MkWQguZTV_jKo_PTm8bHryHKVZcdfMrILhFiU-7v0BvyISHzadm14bI1trWzevQUGsW97AEKmYI3qRcOIlgq-NBvXkJmKhaG2rQR2uf-IUVbeN0qHN0ZYGJkfVFbKerbyiptnaAqppqeVKl_9-3l0jE56BA.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:40:04 UTC	675	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:04 GMT Content-Type: image/jpeg Content-Length: 12164 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Cache-Control: public,max-age=7200 ETag: "a14336f5c0dc28f39ba759ae27acfb45a1a05e83" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 06:40:04 UTC	580	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 02 02 02 02 01 02 02 02 02 03 02 02 03 03 06 04 03 03 03 03 07 05 05 04 06 08 07 09 08 08 07 08 08 09 0a 0d 0b 09 0a 0c 0a 08 08 0b 0f 0b 0c 0d 0e 0e 0f 0e 09 0b 10 11 10 0e 11 0d 0e 0e 0e ff db 00 43 01 02 03 03 03 03 03 07 04 04 07 0e 09 08 09 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e ff c0 00 11 08 01 40 01 40 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 01 01 00 02 01 05 01 00 00 00 00 00 00 00 00 00 00 09 07 08 06 01 02 03 05 0a 04 ff c4 00 40 10 00 01 03 03 02 03 05 06 04 04 04 06 03 01 00 00 01 00 02 03 04 05 06 07 11 08 12 21 09 13 31 41 51 14 22 32 61 71 81 15 42 Data Ascii: JFIF``CC@@"@!1AQ"2aqB
2024-04-25 06:40:04 UTC	1255	IN	Data Raw: 4f b1 ad 33 b5 5f 35 22 cb 06 5d 99 d6 53 b6 6a 88 ea f7 75 35 1f 30 dc 46 c6 6f b1 23 71 b9 3e 6a 2f 3b 3e c6 9f 6e 2a b9 db bf 08 8e 32 94 c1 d3 ef ea 17 26 8b 5d 91 1c 66 78 42 33 35 cd 7b 77 63 83 c7 c8 ee bb 95 b2 d6 9e 0b 74 c7 34 d3 eb 85 56 0d 63 a7 c3 33 28 21 32 50 cf 42 0b 61 9d c0 6e 23 91 9e 04 1f 0d c7 50 a2 85 44 52 d1 de 6b 6d d5 6d 10 d7 d1 d4 3e 9e aa 0d fa c7 23 1c 5a e1 b7 d4 2c 70 35 1b 1a 85 13 55 bd e2 63 8c 4b 2c fd 3a fe 9f 5c 53 73 69 89 e1 31 c1 d8 89 b1 45 2c 89 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 10 9d 81 24 ed b0 df aa 0f 65 64 96 68 33 ec 76 7a 7a 57 d7 d4 45 76 a6 7c 54 b1 b7 99 f3 b8 4a d2 18 d1 e6 4a fa 69 b6 4a f9 f1 da 09 e4 85 d4 d2 Data Ascii: O3_5"]Sju50Fo#q>j/;>n*2&]fxB35{wct4Vc3(!2PBan#PDRkmm>#Z,p5UcK,:\Ssi1E,$edh3vzzWEv\|TJJiJ
2024-04-25 06:40:04 UTC	1255	IN	Data Raw: 6a d4 5c c1 c6 a2 5a 33 3d dd 94 ce 25 d1 d1 41 1f b9 04 0d 1e 40 6e 37 f5 2b 64 fb 49 b2 d1 53 9e e9 ce 0d 14 bb b6 8e 09 ae 75 2c 1e 4e 7f f0 d9 bf d8 12 aa 29 99 99 de 57 0c 44 44 6d 09 90 00 0d 00 78 01 b0 5d 51 17 c7 d1 11 10 10 80 46 c4 6e 11 3c 8a 0e 91 8e e6 56 c9 0b 9d 04 80 ee 1f 13 cb 08 fb 82 16 49 c7 35 93 57 31 09 23 38 d6 a5 64 16 c6 30 ee d8 4d 7b a5 8c 7f e2 fd c2 e2 b8 b6 2d 93 67 19 2c 76 7c 36 c1 5d 93 5c 5e ed bb ba 08 0b da df ea 77 c2 df b9 5b ff 00 a5 7d 9d f9 75 f0 52 dc f5 5e fe cc 62 de ed 9e eb 4d ad e2 4a 97 0f e5 7c 9e 0d fb 6e 83 17 e2 1c 76 f1 17 6d b9 d3 db e4 9e dd 9d cc e7 06 b2 9a 7b 71 15 12 7c bf 85 e7 f6 55 23 42 b5 33 59 75 0e da ca dd 44 d2 26 e9 f5 b9 d1 73 47 55 2d c7 79 26 3e 5b 42 47 33 47 d4 af 4b 6e c6 f8 67 Data Ascii: j\Z3=%A@n7+dISu,N)WDDmx]QFn<VI5W1#8d0M{-g,v\|6]\^w[}uR^bMJ\|nvm{q\|U#B3YuD&sGU-y&>[BG3GKng
2024-04-25 06:40:04 UTC	1255	IN	Data Raw: 95 31 4a e8 aa 44 9d f4 72 b4 ec e6 bf 9b 98 3b 7f 5d d0 55 8e 3f f4 68 c3 5b 6d d6 9b 15 2f b8 43 28 72 11 13 7c bf e9 4c 76 f4 f8 49 fa 29 92 7a 15 71 38 7a d4 0b 2f 13 7c 04 cf 64 ca 5a ca cb b4 54 8e b3 e4 34 f2 10 5d ce 1b b3 65 db e6 36 70 3e a1 47 0d 46 c0 ee da 63 ad d9 16 0b 79 8d e2 a2 d9 54 e6 d3 ca e6 90 27 80 9d e3 90 7a ee dd 95 9f d1 fc de ba c4 e3 d7 3f 15 1c 3c 3f e2 ad e9 06 0f 51 91 19 14 47 c3 5f 1f a4 ff 00 df e7 77 0a 44 45 d8 b8 d1 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 11 11 01 11 76 b9 dc ac 27 62 e3 e4 d6 8d cb 8f 90 03 cc 94 1c ab 08 c3 6f da 87 ab 56 2c 2b 19 83 bf bd 5d 2a 04 71 92 3d d8 19 f9 e5 79 f2 6b 47 5f d1 5a 7c ab 20 c0 78 29 ec f7 74 b1 31 92 49 6f a6 ee 68 a0 e9 df 5d ee 0f 1e 27 cc ee ee a4 f9 34 2e 0f Data Ascii: 1JDr;]U?h[m/C(r\|LvI)zq8z/\|dZT4]e6p>GFcyT'z?<?QG_wDEv'boV,+]*q=ykG_Z\| x)t1Ioh]'4.
2024-04-25 06:40:04 UTC	1255	IN	Data Raw: 34 d4 0f e1 ff 00 06 b8 f2 54 4c c6 c9 96 56 52 c9 b1 86 2f 16 d2 82 3c 0b ba 17 0f 4e 8a 41 5b 6d b7 0b b5 fe 8e cd 66 b7 54 dd 6e 95 0e 11 d3 50 d1 42 e9 65 90 9e 80 35 a3 aa dc 4d 12 e0 e7 5b 78 8a ca e5 cc b2 33 36 2d 8e 5c ea 9d 55 71 c8 ee f1 91 53 5a e7 9d dc e8 62 3d 4e fb f4 27 60 02 ac b8 c6 9c f0 cd c1 46 94 3e fb 5d 2d 25 be e8 62 fe 35 e6 e6 e1 3d ce bd e0 7c 31 8f 11 b9 f0 6b 40 0a ac 5a ed 1d e1 cb b3 9b 29 bc 5e 2c 99 b6 b5 57 3b 16 b6 d3 cf 1d 5d 2e 35 46 ed ea e5 73 5c 1c de fd fe 0c 1d 3a b0 75 f5 56 a2 8a 7a 29 a8 f9 28 2a 21 a8 86 13 dd 1e e6 40 f0 c2 de 9c a7 6f 02 3d 14 43 d7 7e 3e b3 cc fd d5 b8 fe 97 b2 6c 07 13 7e ec 75 7b c0 fc 46 ad be bb f5 11 03 f2 ea b3 3f 66 3c b7 9a ba 6d 5b ac ac ba d6 d6 db bd b2 9d ac 86 a2 a5 d2 30 4c Data Ascii: 4TLVR/<NA[mfTnPBe5M[x36-\UqSZb=N'`F>]-%b5=\|1k@Z)^,W;].5Fs\:uVz)(*!@o=C~>l~u{F?f<m[0L
2024-04-25 06:40:04 UTC	1255	IN	Data Raw: 0a 97 0c 1a a2 b3 34 d3 9a 49 ae 78 81 2e 96 ba d7 18 e7 9a dd b9 dc b9 83 c5 d1 fc bc 42 9b 31 c9 34 15 90 d4 d3 4f 25 2d 54 2f 12 43 3c 2f 2c 92 27 0f 07 35 c3 a8 23 d5 54 ee 18 38 cc 8a ee 28 74 df 58 ea e3 8e e0 f6 88 2d 79 0c fb 08 aa fc 84 53 ef d0 3f cb 9b c0 f9 ac 26 06 80 b4 87 34 16 9d c1 5d 55 1d e2 2b 84 d6 55 fb 76 a0 69 35 23 1b 3b c1 9e e3 61 83 e0 9c 6d b9 92 0d ba 07 79 f2 f8 1f 25 38 dc d7 c7 3c 91 4b 1b e1 9e 37 96 4b 14 8c 2d 7c 6e 1d 08 20 f5 05 7c 1d 11 11 01 11 10 16 fd f0 11 6a ef 75 0f 50 6f 8e 61 22 1a 48 69 a3 71 f2 24 97 10 b4 11 54 5e 03 6d 7e cd c3 ee 5b 7a 7b 36 f6 db e3 9a 1f ea d8 d8 02 09 db c6 95 ed b7 be d1 9c d9 cc 7f 3c 74 31 53 d1 b7 e4 59 18 dc 7e a5 6a c2 c9 ba d3 79 39 07 17 9a 97 77 e6 e6 6c f9 15 48 61 df 7f 75 Data Ascii: 4Ix.B14O%-T/C</,'5#T8(tX-yS?&4]U+Uvi5#;amy%8<K7K-\|n \|juPoa"Hiq$T^m~[z{6<t1SY~jy9wlHau
2024-04-25 06:40:04 UTC	1255	IN	Data Raw: 8b 05 ca be eb 35 5f 2d 5c 7c 92 4f 1b 83 79 1e 47 88 04 78 02 b8 ae 89 f0 87 a6 da 15 8b ff 00 98 5a ad 72 a0 be 64 d4 50 77 f5 15 b7 12 d6 db ed 7b 0e 63 c8 1d d0 91 b7 c4 7a fa 2d cf c5 f3 2b 16 57 a6 74 d9 75 a6 57 37 1d 9e 27 4b 4d 55 3c 66 26 c9 0b 77 fe 28 07 f2 10 37 07 cc 75 41 cb 14 8b ed 17 ac b4 4d ad 7a 7b 45 4e 58 6f 30 5b a7 7d 5f 2e c5 c2 37 38 72 03 f7 05 73 1c eb b4 3d f4 77 dc 86 d1 82 e0 f1 5c 05 3d 54 94 f4 17 7a da bd a1 98 34 ed de f2 0e a4 6f e0 3c d4 de cc 32 fc 8f 3d d4 8b 9e 5b 96 5c 5d 74 be 57 c9 cd 3c c7 a3 58 3c 98 c1 f9 5a 07 40 15 81 a3 69 59 56 32 63 22 f4 7b 31 11 d9 1c e7 78 57 9a d6 ad 8b 91 8d 38 f6 67 da 99 9e d9 e5 1b 4b 8d a2 22 b0 15 f0 88 88 08 88 80 88 88 08 88 80 88 88 08 88 82 84 76 7d ea 57 e0 5a d3 90 e9 a5 Data Ascii: 5_-\\|OyGxZrdPw{cz-+WtuW7'KMU<f&w(7uAMz{ENXo0[}_.78rs=w\=Tz4o<2=[\]tW<X<Z@iYV2c"{1xW8gK"v}WZ
2024-04-25 06:40:04 UTC	1255	IN	Data Raw: 51 3d 76 3d 2b 8d 34 72 1d cc 94 72 ef b0 eb e4 09 23 ee a4 12 cf 3c 33 ea 4b f4 bb 8c ac 56 f7 34 e6 2b 35 c2 5f c3 6e 83 7d 87 77 29 d9 ae 3f 47 6c 54 2e ab 8b ef 78 35 d1 1c 63 b6 3c 63 d6 37 4d 69 59 5e e9 9d 45 73 c2 7b 27 c2 7d 27 69 63 be 25 74 c2 5d 23 e3 43 32 c5 99 09 8e d1 51 50 6e 16 97 6d b0 30 4c 4b b6 1f 43 b8 58 29 59 2e d1 ed 2e 17 cd 0b c7 75 62 d5 00 96 b7 1f 9c 53 dc 1f 1b 77 2f a4 94 f4 76 fe 61 ae d8 fd d4 6d 04 11 b8 ea 0f 82 a6 57 53 74 b8 01 b3 8b a7 68 f5 a6 a5 c3 99 96 db 25 55 4e fb 78 12 03 47 ee b3 67 68 95 d7 da b8 9f c2 2c e1 fb b6 8a c4 f9 5c df 42 f9 3a 7f 60 bd 27 66 7d 9f da b8 98 d4 4b db 99 b8 a2 b0 c5 03 1f f3 7c bb 91 fa 05 c3 f8 df bb 7e 29 da 25 7e 81 ae e6 65 ba d3 4b 4e 06 fe 04 82 e2 be c7 11 a9 88 88 b3 04 44 Data Ascii: Q=v=+4rr#<3KV4+5_n}w)?GlT.x5c<c7MiY^Es{'}'ic%t]#C2QPnm0LKCX)Y..ubSw/vamWSth%UNxGgh,\B:`'f}K\|~)%~eKND
2024-04-25 06:40:04 UTC	1255	IN	Data Raw: 65 dc 50 f0 cb c3 e5 85 f8 ee 32 fa 1b 85 ce 9d 9c 8c b3 e2 f4 cd 7b b9 87 4d a4 90 7b a3 ea 49 53 f7 55 3b 40 b5 83 36 f6 9b 76 17 15 36 9d d9 5f bb 44 94 e3 be ac 73 7e 6f 3d 1a 7e 8b 1d c5 1b a1 c0 78 5b e1 73 17 17 4b b3 ad 16 9a f8 9b bf b7 5e 27 6d 45 74 a7 fd 2d 3b 9d fe 81 6a fe aa f6 93 51 43 1d 4d af 47 71 49 2b de 37 63 2f 37 91 dd c4 df 2e 66 44 3a 9f ba 94 57 5b 95 d2 ff 00 7e 96 eb 7f ba 55 df 2e 72 1d df 55 5f 50 e9 9e 4f d5 c4 ed f6 5f 8d 7c 16 27 84 ee 37 32 8d 46 d5 bb 4e 96 ea 55 a2 1a cb fd c3 bd 7d 1d fa 84 08 a3 77 28 e6 0c 7c 7e 47 6e 80 85 e1 ed 1f d7 6c f3 4f b0 6b 06 9a 62 ad 65 ae db 97 51 ca 2e 57 86 38 f7 ed 8d a7 67 43 1f a7 30 f1 77 a2 9d 7c 34 5e 05 8b b4 0b 4a 2b dc fe 46 3a f4 da 77 9f 94 80 b5 6f 7f 6a ad 9c 3f 4b f4 9f Data Ascii: eP2{M{ISU;@6v6_Ds~o=~x[sK^'mEt-;jQCMGqI+7c/7.fD:W[~U.rU_PO_\|'72FNU}w(\|~GnlOkbeQ.W8gC0w\|4^J+F:woj?K
2024-04-25 06:40:04 UTC	1255	IN	Data Raw: 7e 67 94 27 e7 10 fa bf 55 ad 3c 4d 5d f2 56 c8 f1 8e 51 93 45 61 81 ce e8 d8 1a 48 32 6d ea f3 b9 df d3 65 83 97 46 80 d6 35 ad 1b 34 0d 80 1e 4b aa bb 6d 5a a2 cd aa 6d d1 1b 44 46 d0 a3 ae dd ae f5 da ae 57 3b cd 53 bc 88 88 bd 9e 42 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 22 20 2a 0d d9 d7 35 9d 9c 48 e7 b0 d5 72 0b cc 96 48 8d 0f 31 f7 8b 04 9f c4 e5 fe ca 7c ae 4d 86 e6 19 16 01 a9 76 ac bb 14 b8 3a d9 7c b7 c9 cd 0c ad f8 5e df cd 1b c7 83 9a e1 d0 85 a1 9b 8f 39 58 95 d9 a6 76 9a a1 bf 85 91 18 b9 74 5e aa 37 8a 65 f4 c4 bf 1d c3 db 7f 04 aa fc 37 ba f6 fe ec fb 3f 7f bf 27 3f 97 36 de 4a 60 d9 fb 46 dc cc 41 8c be e9 ab e7 be b6 3d 8b e8 ab c3 60 7b b6 f1 d9 c3 70 16 bc 65 1c 6c eb b5 f7 51 6a 2f 36 7b dc 18 ad ac 8e 5a 7b 4d Data Ascii: ~g'U<M]VQEaH2meF54KmZmDFW;SB" """ """ """ """ *5HrH1\|Mv:\|^9Xvt^7e7?'?6J`FA=`{pelQj/6{Z{M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49737	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:06 UTC	358	OUT	GET /img/tgme/pattern.svg?1 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:40:06 UTC	345	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:06 GMT Content-Type: image/svg+xml Content-Length: 231706 Last-Modified: Thu, 05 Jan 2023 17:52:04 GMT Connection: close ETag: "63b70e44-3891a" Expires: Mon, 29 Apr 2024 06:40:06 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:06 UTC	16039	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 37 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 27.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-04-25 06:40:06 UTC	16384	IN	Data Raw: 34 30 2e 34 2d 32 2e 38 73 38 2e 37 2d 32 38 2e 35 2c 37 2e 33 2d 33 31 2e 31 73 2d 33 2e 31 2d 38 2e 39 2c 32 2e 34 2d 31 31 2e 39 63 35 2e 36 2d 33 2c 31 32 2c 33 2c 31 35 2e 33 2c 31 30 2e 35 0a 09 09 73 39 2e 38 2c 33 32 2e 35 2d 31 39 2e 31 2c 34 38 2e 39 63 2d 33 30 2e 32 2c 31 37 2e 31 2d 35 37 2e 33 2c 31 33 2e 36 2d 36 37 2e 36 2c 33 2e 37 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 35 32 30 2e 36 2c 32 37 34 35 2e 39 63 2d 32 2c 33 2e 38 2d 33 2e 34 2c 31 39 2e 38 2d 31 2e 36 2c 32 31 2e 32 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 35 32 37 2e 37 2c 32 37 34 36 2e 37 63 31 2e 35 2c 33 2e 38 2d 30 2e 39 2c 31 38 2e 31 2d 32 2e 35 2c 31 39 2e 38 22 2f 3e 0a 09 3c 70 61 74 Data Ascii: 40.4-2.8s8.7-28.5,7.3-31.1s-3.1-8.9,2.4-11.9c5.6-3,12,3,15.3,10.5s9.8,32.5-19.1,48.9c-30.2,17.1-57.3,13.6-67.6,3.7"/><path class="st0" d="M520.6,2745.9c-2,3.8-3.4,19.8-1.6,21.2"/><path class="st0" d="M527.7,2746.7c1.5,3.8-0.9,18.1-2.5,19.8"/><pat
2024-04-25 06:40:06 UTC	16384	IN	Data Raw: 2d 31 30 2e 38 73 36 2e 33 2c 35 2e 33 2c 36 2e 33 2c 35 2e 33 73 33 2e 36 2d 32 2e 38 2c 37 2e 31 2c 30 2e 32 73 31 2e 33 2c 37 2e 39 2c 31 2e 33 2c 37 2e 39 73 35 2e 31 2d 32 2c 36 2e 37 2c 33 2e 35 0a 09 09 63 31 2e 34 2c 35 2e 31 2d 35 2e 36 2c 39 2e 33 2d 31 30 2e 37 2c 37 2e 34 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 32 38 35 2e 34 2c 31 37 39 36 2e 39 63 32 2e 38 2c 30 2e 36 2c 34 2e 35 2c 33 2e 36 2c 34 2e 35 2c 33 2e 36 73 32 2e 37 2d 33 2e 37 2c 36 2e 39 2d 31 2e 38 73 33 2e 35 2c 37 2e 32 2c 33 2e 35 2c 37 2e 32 73 34 2e 33 2d 33 2e 34 2c 37 2e 34 2c 31 2e 35 0a 09 09 63 32 2e 33 2c 33 2e 36 2d 31 2c 38 2e 33 2d 35 2e 32 2c 39 2e 37 22 2f 3e 0a 3c 2f 67 3e 0a 3c 67 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 Data Ascii: -10.8s6.3,5.3,6.3,5.3s3.6-2.8,7.1,0.2s1.3,7.9,1.3,7.9s5.1-2,6.7,3.5c1.4,5.1-5.6,9.3-10.7,7.4"/><path class="st0" d="M285.4,1796.9c2.8,0.6,4.5,3.6,4.5,3.6s2.7-3.7,6.9-1.8s3.5,7.2,3.5,7.2s4.3-3.4,7.4,1.5c2.3,3.6-1,8.3-5.2,9.7"/></g><g><path clas
2024-04-25 06:40:06 UTC	16384	IN	Data Raw: 34 2e 32 2c 31 36 2e 36 2d 38 2e 32 2c 32 30 2e 33 2d 36 2e 39 63 34 2e 34 2c 31 2e 35 2c 31 31 2e 35 2c 31 31 2e 35 2c 31 37 2e 36 2c 32 30 2e 34 0a 09 09 73 31 31 2c 37 2e 38 2c 31 31 2e 38 2c 33 2e 37 63 30 2e 38 2d 33 2e 39 2d 36 2e 37 2d 32 30 2e 33 2d 34 2e 37 2d 32 33 2e 32 63 30 2e 35 2d 30 2e 37 2c 33 2e 31 2d 30 2e 39 2c 37 2e 37 2c 37 2e 36 73 39 2e 33 2c 31 38 2e 32 2c 31 33 2c 31 32 2e 38 63 31 2e 34 2d 32 2c 30 2e 37 2d 36 2e 33 2d 31 2e 34 2d 31 32 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 38 32 2e 39 2c 31 34 34 37 2e 38 63 2d 37 2e 37 2d 34 2e 37 2d 38 2e 32 2d 34 33 2e 37 2c 31 2e 35 2d 35 33 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 37 32 2e 31 2c 31 33 39 38 Data Ascii: 4.2,16.6-8.2,20.3-6.9c4.4,1.5,11.5,11.5,17.6,20.4s11,7.8,11.8,3.7c0.8-3.9-6.7-20.3-4.7-23.2c0.5-0.7,3.1-0.9,7.7,7.6s9.3,18.2,13,12.8c1.4-2,0.7-6.3-1.4-12"/><path class="st0" d="M82.9,1447.8c-7.7-4.7-8.2-43.7,1.5-53"/><path class="st0" d="M72.1,1398
2024-04-25 06:40:06 UTC	16384	IN	Data Raw: 2e 38 2c 32 2e 32 2d 31 30 2e 37 2c 36 2d 31 31 2e 34 2c 31 31 2e 34 63 2d 30 2e 33 2c 31 2e 39 2c 30 2e 36 2c 33 2e 38 2c 32 2e 31 2c 34 2e 38 0a 09 09 63 30 2e 36 2c 30 2e 34 2c 31 2e 33 2c 30 2e 37 2c 32 2e 31 2c 30 2e 38 63 32 2e 37 2c 30 2e 34 2c 35 2e 33 2d 31 2e 35 2c 35 2e 37 2d 34 2e 32 63 30 2e 31 2d 30 2e 35 2c 30 2e 33 2d 31 2e 39 2c 34 2e 36 2d 33 2e 33 43 35 38 38 2e 31 2c 31 35 32 39 2e 37 2c 35 39 32 2e 33 2c 31 35 32 35 2e 34 2c 35 39 33 2e 32 2c 31 35 32 30 2e 35 7a 20 4d 35 38 31 2e 36 2c 31 35 32 38 2e 37 0a 09 09 63 2d 36 2e 31 2c 32 2d 36 2e 35 2c 34 2e 37 2d 36 2e 37 2c 35 2e 37 63 2d 30 2e 32 2c 31 2e 31 2d 31 2e 32 2c 31 2e 39 2d 32 2e 33 2c 31 2e 37 63 2d 30 2e 33 2c 30 2d 30 2e 36 2d 30 2e 32 2d 30 2e 38 2d 30 2e 33 63 2d 30 2e Data Ascii: .8,2.2-10.7,6-11.4,11.4c-0.3,1.9,0.6,3.8,2.1,4.8c0.6,0.4,1.3,0.7,2.1,0.8c2.7,0.4,5.3-1.5,5.7-4.2c0.1-0.5,0.3-1.9,4.6-3.3C588.1,1529.7,592.3,1525.4,593.2,1520.5z M581.6,1528.7c-6.1,2-6.5,4.7-6.7,5.7c-0.2,1.1-1.2,1.9-2.3,1.7c-0.3,0-0.6-0.2-0.8-0.3c-0.
2024-04-25 06:40:07 UTC	16384	IN	Data Raw: 36 2e 36 2c 37 2e 37 2c 33 2e 31 2c 32 30 2e 36 2c 36 2e 31 2c 32 39 2e 37 73 31 34 2e 31 2c 34 35 2e 32 2d 31 31 2e 38 2c 34 33 2e 32 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 31 34 39 2e 31 2c 35 33 37 2e 36 63 37 2e 38 2d 30 2e 35 2c 37 2e 37 2c 31 33 2e 33 2d 31 2e 31 2c 39 2e 37 63 2d 34 2e 31 2d 31 2e 37 2d 33 2e 38 2d 39 2e 32 2c 30 2e 39 2d 39 2e 37 43 31 34 39 2c 35 33 37 2e 36 2c 31 34 39 2e 31 2c 35 33 37 2e 36 2c 31 34 39 2e 31 2c 35 33 37 2e 36 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 31 32 34 2e 36 2c 35 34 31 2e 35 63 31 30 2e 38 2c 35 2e 33 2d 31 2e 36 2c 32 31 2e 33 2d 39 2e 31 2c 31 32 2e 32 63 2d 34 2e 39 2d 35 2e 39 2c 32 2d 31 35 2e 34 2c 38 2e 38 2d 31 Data Ascii: 6.6,7.7,3.1,20.6,6.1,29.7s14.1,45.2-11.8,43.2"/><path class="st0" d="M149.1,537.6c7.8-0.5,7.7,13.3-1.1,9.7c-4.1-1.7-3.8-9.2,0.9-9.7C149,537.6,149.1,537.6,149.1,537.6z"/><path class="st0" d="M124.6,541.5c10.8,5.3-1.6,21.3-9.1,12.2c-4.9-5.9,2-15.4,8.8-1
2024-04-25 06:40:07 UTC	16384	IN	Data Raw: 38 0a 09 09 63 38 2e 34 2c 36 2e 38 2d 32 33 2e 31 2c 33 31 2e 35 2d 32 33 2e 31 2c 33 31 2e 35 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 36 32 35 2c 32 34 37 37 2e 36 63 2d 32 2e 32 2c 32 2e 36 2d 32 35 2e 36 2c 32 31 2e 34 2d 32 36 2e 38 2c 32 32 2e 36 22 2f 3e 0a 09 3c 6c 69 6e 65 20 63 6c 61 73 73 3d 22 73 74 30 22 20 78 31 3d 22 36 34 30 2e 36 22 20 79 31 3d 22 32 34 36 35 22 20 78 32 3d 22 36 33 35 2e 32 22 20 79 32 3d 22 32 34 36 39 2e 33 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 36 34 36 2e 39 2c 32 34 37 32 2e 34 63 30 2c 30 2d 33 38 2e 39 2c 32 37 2e 38 2d 34 31 2e 36 2c 33 31 2e 39 22 2f 3e 0a 3c 2f 67 3e 0a 3c 67 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 Data Ascii: 8c8.4,6.8-23.1,31.5-23.1,31.5"/><path class="st0" d="M625,2477.6c-2.2,2.6-25.6,21.4-26.8,22.6"/><line class="st0" x1="640.6" y1="2465" x2="635.2" y2="2469.3"/><path class="st0" d="M646.9,2472.4c0,0-38.9,27.8-41.6,31.9"/></g><g><path class="st
2024-04-25 06:40:07 UTC	16384	IN	Data Raw: 67 6f 6e 20 63 6c 61 73 73 3d 22 73 74 30 22 20 70 6f 69 6e 74 73 3d 22 33 39 33 2e 34 2c 34 37 30 2e 31 20 33 39 34 2e 39 2c 34 37 36 2e 37 20 33 38 30 2e 33 2c 34 37 36 2e 37 20 33 37 39 2e 38 2c 34 37 31 2e 35 20 09 22 2f 3e 0a 09 3c 70 6f 6c 79 67 6f 6e 20 63 6c 61 73 73 3d 22 73 74 30 22 20 70 6f 69 6e 74 73 3d 22 34 31 33 2e 37 2c 34 36 35 2e 32 20 34 31 36 2e 34 2c 34 37 31 2e 35 20 34 32 38 2c 34 36 31 20 34 32 34 2e 39 2c 34 35 36 2e 35 20 09 22 2f 3e 0a 3c 2f 67 3e 0a 3c 67 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 37 34 30 2e 33 2c 31 33 35 31 2e 38 63 31 31 2e 34 2d 32 32 2c 33 37 2e 33 2d 33 34 2c 34 34 2e 34 2d 33 35 2e 32 63 30 2c 30 2d 32 30 2e 39 2d 31 35 2e 37 2d 33 36 2e 33 2d 38 2e 34 63 2d 31 30 2e 39 Data Ascii: gon class="st0" points="393.4,470.1 394.9,476.7 380.3,476.7 379.8,471.5 "/><polygon class="st0" points="413.7,465.2 416.4,471.5 428,461 424.9,456.5 "/></g><g><path class="st0" d="M740.3,1351.8c11.4-22,37.3-34,44.4-35.2c0,0-20.9-15.7-36.3-8.4c-10.9
2024-04-25 06:40:07 UTC	16384	IN	Data Raw: 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 34 33 39 2e 36 2c 31 32 32 38 2e 33 63 33 2e 34 2c 32 2e 35 2c 32 2e 34 2c 31 34 2e 36 2d 31 35 2e 36 2c 36 2e 39 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 34 32 37 2e 36 2c 31 32 33 36 2e 35 63 30 2e 32 2c 33 2e 35 2d 33 2e 35 2c 38 2e 37 2d 31 30 2e 38 2c 35 2e 34 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 33 36 33 2e 32 2c 31 32 30 34 2e 35 63 2d 33 2e 39 2c 31 2e 32 2d 32 2e 37 2c 39 2e 35 2c 32 2e 34 2c 39 2e 31 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 33 36 30 2e 39 2c 31 32 33 38 2e 35 63 2d 37 2e 32 2c 30 2e 33 2d 31 37 2d 31 2e 33 2d 32 32 2e 33 2d 38 2e 36 63 33 2e 34 2c Data Ascii: ath class="st0" d="M439.6,1228.3c3.4,2.5,2.4,14.6-15.6,6.9"/><path class="st0" d="M427.6,1236.5c0.2,3.5-3.5,8.7-10.8,5.4"/><path class="st0" d="M363.2,1204.5c-3.9,1.2-2.7,9.5,2.4,9.1"/><path class="st0" d="M360.9,1238.5c-7.2,0.3-17-1.3-22.3-8.6c3.4,
2024-04-25 06:40:07 UTC	16384	IN	Data Raw: 35 2e 36 2c 39 2e 37 2d 39 2e 37 2c 31 35 2e 32 2d 35 2e 34 63 36 2e 34 2c 35 2c 35 2e 34 2c 31 38 2e 39 2d 31 35 2c 32 37 2e 39 63 2d 32 31 2e 36 2d 31 30 2e 32 2d 32 30 2e 37 2d 32 32 2e 31 2d 31 37 2e 32 2d 32 36 2e 37 0a 09 43 38 34 34 2e 37 2c 31 38 32 39 2e 32 2c 38 35 35 2e 32 2c 31 38 33 30 2e 39 2c 38 35 37 2e 33 2c 31 38 33 39 2e 31 7a 22 2f 3e 0a 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 38 31 36 2e 37 2c 32 30 34 32 2e 31 63 34 2e 38 2d 37 2e 33 2c 31 36 2e 35 2d 31 31 2c 32 33 2d 33 2e 34 63 37 2e 37 2c 38 2e 39 2c 32 2e 34 2c 32 38 2e 32 2d 32 39 2c 33 35 2e 34 63 2d 32 37 2e 37 2d 32 30 2e 35 2d 32 33 2e 33 2d 33 37 2e 31 2d 31 37 2e 31 2d 34 32 2e 35 0a 09 43 38 30 31 2e 37 2c 32 30 32 34 2e 36 2c 38 31 36 2c 32 30 Data Ascii: 5.6,9.7-9.7,15.2-5.4c6.4,5,5.4,18.9-15,27.9c-21.6-10.2-20.7-22.1-17.2-26.7C844.7,1829.2,855.2,1830.9,857.3,1839.1z"/><path class="st0" d="M816.7,2042.1c4.8-7.3,16.5-11,23-3.4c7.7,8.9,2.4,28.2-29,35.4c-27.7-20.5-23.3-37.1-17.1-42.5C801.7,2024.6,816,20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49740	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:15 UTC	635	OUT	GET / HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:40:16 UTC	448	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:15 GMT Content-Type: text/html; charset=utf-8 Content-Length: 19521 Connection: close Set-Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473; expires=Thu, 25 Apr 2024 17:46:55 GMT; path=/; samesite=None; secure; HttpOnly Pragma: no-cache Cache-control: no-store X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:16 UTC	15936	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 20 4d 65 73 73 65 6e 67 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 54 65 6c 65 67 72 61 6d 20 e2 80 93 20 61 20 6e 65 77 20 65 72 61 20 6f 66 20 6d 65 73 73 61 67 69 6e 67 Data Ascii: <!DOCTYPE html><html class=""> <head> <meta charset="utf-8"> <title>Telegram Messenger</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta property="og:title" content="Telegram a new era of messaging
2024-04-25 06:40:16 UTC	3585	IN	Data Raw: 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6c 5f 6d 61 69 6e 5f 63 61 72 64 5f 63 65 6c 6c 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6c 5f 6d 61 69 6e 5f 63 61 72 64 5f 77 72 61 70 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 69 63 74 75 72 65 20 63 6c 61 73 73 3d 22 64 65 76 5f 70 61 67 65 5f 74 67 73 74 69 63 6b 65 72 20 74 6c 5f 6d 61 69 6e 5f 63 61 72 64 5f 61 6e 69 6d 61 74 65 64 20 6a 73 2d 74 67 73 74 69 63 6b 65 72 5f 69 6d 61 67 65 22 3e 3c 64 69 76 3e 3c 2f 64 69 76 3e 3c 73 6f 75 72 63 65 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 74 67 73 74 69 63 6b 65 72 22 20 73 72 63 73 65 74 3d 22 2f 66 69 6c 65 2f 34 36 34 30 30 31 38 31 32 2f 32 Data Ascii: </div> </div> <div class="tl_main_card_cell"> <div class="tl_main_card_wrap"> <picture class="dev_page_tgsticker tl_main_card_animated js-tgsticker_image"><div></div><source type="application/x-tgsticker" srcset="/file/464001812/2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49739	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:16 UTC	605	OUT	GET /css/bootstrap.min.css?3 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:16 UTC	379	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:16 GMT Content-Type: text/css Content-Length: 42523 Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Connection: close ETag: "5a05e7c6-a61b" Expires: Mon, 29 Apr 2024 06:40:16 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-04-25 06:40:16 UTC	16005	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 32 2e 30 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 34 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 0a 2f 2a 21 0a 20 2a 20 47 65 6e 65 72 61 74 65 64 20 75 73 69 6e 67 20 74 68 65 20 42 6f 6f 74 73 74 72 61 70 20 43 75 73 74 6f 6d 69 7a 65 72 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 63 75 73 74 6f 6d 69 7a 65 2f 3f 69 Data Ascii: /! Bootstrap v3.2.0 (http://getbootstrap.com) * Copyright 2011-2014 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! * Generated using the Bootstrap Customizer (http://getbootstrap.com/customize/?i
2024-04-25 06:40:16 UTC	16384	IN	Data Raw: 6c 6f 72 3a 23 37 37 37 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 37 37 37 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 5b 72 65 61 64 6f 6e 6c 79 5d 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 6f 70 61 63 69 74 79 3a 31 7d 74 65 78 74 61 72 65 61 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 Data Ascii: lor:#777}.form-control::-webkit-input-placeholder{color:#777}.form-control[disabled],.form-control[readonly],fieldset[disabled] .form-control{cursor:not-allowed;background-color:#eee;opacity:1}textarea.form-control{height:auto}input[type="search"]{-webkit
2024-04-25 06:40:16 UTC	10134	IN	Data Raw: 74 3a 30 7d 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 72 61 64 69 6f 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 68 61 73 2d 66 65 65 64 62 61 63 6b 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 65 65 64 62 61 63 6b 7b 74 6f 70 3a 30 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 30 29 7b 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e Data Ascii: t:0}.navbar-form .radio input[type="radio"],.navbar-form .checkbox input[type="checkbox"]{position:relative;margin-left:0}.navbar-form .has-feedback .form-control-feedback{top:0}}@media (max-width:0){.navbar-form .form-group{margin-bottom:5px}}@media (min

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49743	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:16 UTC	602	OUT	GET /css/telegram.css?237 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:17 UTC	381	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:17 GMT Content-Type: text/css Content-Length: 114933 Last-Modified: Mon, 22 Apr 2024 10:54:25 GMT Connection: close ETag: "662641e1-1c0f5" Expires: Mon, 29 Apr 2024 06:40:17 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-04-25 06:40:17 UTC	16003	IN	Data Raw: 62 6f 64 79 20 7b 0a 20 20 66 6f 6e 74 3a 20 31 32 70 78 2f 31 38 70 78 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 22 4c 75 63 69 64 61 20 53 61 6e 73 20 55 6e 69 63 6f 64 65 22 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 2f 2a 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 2a 2f 0a 7d 0a 68 74 6d 6c 2e 6e 61 74 69 76 65 5f 66 6f 6e 74 73 20 62 6f 64 79 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 Data Ascii: body { font: 12px/18px "Lucida Grande", "Lucida Sans Unicode", Arial, Helvetica, Verdana, sans-serif; /-webkit-font-smoothing: antialiased;/}html.native_fonts body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica,
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 20 61 75 74 6f 3b 0a 7d 0a 2e 74 6c 5f 6d 61 69 6e 5f 64 6f 77 6e 6c 6f 61 64 5f 6c 69 6e 6b 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 36 32 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 34 30 70 78 20 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 61 2e 74 6c 5f 6d 61 69 6e 5f 64 6f 77 6e 6c 6f 61 64 5f 6c 69 6e 6b 3a 68 6f 76 65 72 20 7b Data Ascii: auto;}.tl_main_download_link { text-align: center; display: inline-block; height: 300px; padding-top: 262px; padding-bottom: 20px; margin: 40px 0; font-size: 15px; max-width: 100%; position: relative;}a.tl_main_download_link:hover {
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 5f 70 61 67 65 5f 74 69 74 6c 65 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b 0a 7d 0a 0a 2e 64 65 76 5f 70 61 67 65 5f 68 65 61 64 20 2e 64 65 76 5f 70 61 67 65 5f 68 65 61 64 5f 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 23 64 65 76 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 5f 77 72 61 70 20 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 37 70 78 3b 0a 7d 0a 23 64 65 76 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 5f 77 72 61 70 20 70 72 65 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 2d 78 3a 20 61 75 74 6f 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 7d 0a 0a 23 64 65 76 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 5f 77 72 61 70 20 70 72 65 3a 3a 2d 77 Data Ascii: _page_title { position: static;}.dev_page_head .dev_page_head_logo { margin-left: 0;}#dev_page_content_wrap blockquote { padding: 5px 17px;}#dev_page_content_wrap pre { overflow-x: auto; border-radius: 0;}#dev_page_content_wrap pre::-w
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 20 63 6f 6c 6f 72 3a 20 23 63 63 63 3b 0a 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 36 29 3b 0a 7d 0a 2e 74 65 78 74 66 69 65 6c 64 2d 69 74 65 6d 2d 65 72 72 6f 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 34 35 61 35 38 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 39 70 78 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 39 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 20 30 20 2d 31 39 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 37 70 78 3b 0a 20 20 76 69 73 69 62 69 Data Ascii: color: #ccc; color: rgba(0,0,0,.26);}.textfield-item-error { color: #d45a58; position: absolute; font-size: 14px; line-height: 19px; min-height: 19px; margin: 5px 0 -19px; background: #fff; width: 100%; padding-bottom: 7px; visibi
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 7d 0a 23 64 65 76 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 20 2e 62 6c 6f 67 5f 69 6d 61 67 65 5f 77 72 61 70 20 70 2c 0a 2e 74 6c 62 5f 70 61 67 65 5f 77 72 61 70 20 2e 74 6c 5f 63 6f 6e 74 65 73 74 5f 70 61 67 65 5f 77 72 61 70 20 23 64 65 76 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 20 2e 62 6c 6f 67 5f 69 6d 61 67 65 5f 77 72 61 70 20 70 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 38 30 38 30 38 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 30 20 30 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 30 25 3b 0a 20 20 Data Ascii: { width: 100%; max-width: auto;}#dev_page_content .blog_image_wrap p,.tlb_page_wrap .tl_contest_page_wrap #dev_page_content .blog_image_wrap p { text-align: center; color: #808080; font-size: 12px; margin: 10px 0 0; line-height: 150%;
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 34 62 62 63 38 37 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 61 2e 74 67 6d 65 5f 61 63 74 69 6f 6e 5f 62 75 74 74 6f 6e 5f 6e 65 77 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 61 63 63 65 6e 74 2d 62 74 6e 2d 63 6f 6c 6f 72 29 3b 0a 7d 0a 61 2e 74 67 6d 65 5f 61 63 74 69 6f 6e 5f 62 75 74 74 6f 6e 5f 6e 65 77 2e 73 68 69 6e 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 32 37 30 64 65 67 2c 20 72 67 62 61 28 31 30 30 2c 20 31 38 31 2c 20 32 33 39 2c 20 30 29 20 34 38 2e 34 34 25 2c 20 23 36 34 62 35 65 Data Ascii: { color: #FFF; background: #4bbc87; text-decoration: none;}a.tgme_action_button_new { background-color: var(--accent-btn-color);}a.tgme_action_button_new.shine { background-image: linear-gradient(270deg, rgba(100, 181, 239, 0) 48.44%, #64b5e
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 32 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 34 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 31 70 78 3b 0a 7d 0a 2e 74 6c 5f 63 6f 6e 74 65 6e 74 5f 74 69 74 6c 65 5f 6c 69 6e 6b 2c 0a 2e 74 6c 5f 63 6f 6e 74 65 6e 74 5f 74 69 74 6c 65 5f 6c 69 6e 6b 3a 68 6f 76 65 72 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 74 64 5f 73 63 72 65 65 6e 73 68 6f 74 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 67 2f 74 64 5f 6c 61 70 74 6f 70 2e 70 6e 67 29 20 35 30 25 20 30 20 6e 6f 2d 72 65 70 65 61 74 3b 0a Data Ascii: enter; margin-top: 32px; margin-bottom: 14px; font-weight: normal; letter-spacing: -1px;}.tl_content_title_link,.tl_content_title_link:hover { text-decoration: none;}.td_screenshot { background: url(../img/td_laptop.png) 50% 0 no-repeat;
2024-04-25 06:40:17 UTC	626	IN	Data Raw: 78 3b 0a 20 20 7d 0a 20 20 2e 74 6c 5f 6d 61 69 6e 5f 64 6f 77 6e 6c 6f 61 64 5f 69 6d 61 67 65 5f 5f 69 6f 73 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 2d 31 30 33 70 78 20 30 20 30 20 2d 31 30 31 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 33 30 30 70 78 20 31 38 33 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 30 36 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 36 35 70 78 3b 0a 20 20 7d 0a 20 20 2e 74 6c 5f 6d 61 69 6e 5f 76 69 64 65 6f 5f 70 6c 61 79 65 72 5f 5f 61 6e 64 72 6f 69 64 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 2d 31 30 39 70 78 20 30 20 30 20 2d 31 30 31 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 30 35 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 36 32 70 78 3b 0a 20 20 7d 0a 20 20 Data Ascii: x; } .tl_main_download_image__ios { margin: -103px 0 0 -101px; background-size: 300px 183px; width: 206px; height: 165px; } .tl_main_video_player__android { margin: -109px 0 0 -101px; width: 205px; height: 162px; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49741	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:16 UTC	581	OUT	GET /js/main.js?47 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:17 UTC	393	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:17 GMT Content-Type: application/javascript Content-Length: 21478 Last-Modified: Sat, 10 Dec 2022 23:01:54 GMT Connection: close ETag: "63950fe2-53e6" Expires: Mon, 29 Apr 2024 06:40:17 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-04-25 06:40:17 UTC	15991	IN	Data Raw: 76 61 72 20 73 74 61 72 74 54 69 6d 65 20 3d 20 2b 28 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 64 54 28 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 27 5b 27 20 2b 20 28 28 2b 28 6e 65 77 20 44 61 74 65 28 29 29 20 2d 20 73 74 61 72 74 54 69 6d 65 29 2f 20 31 30 30 30 2e 30 29 20 2b 20 27 5d 20 27 3b 0a 7d 0a 0a 76 61 72 20 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 73 20 3d 20 5b 5d 3b 0a 66 75 6e 63 74 69 6f 6e 20 74 77 69 74 74 65 72 43 75 73 74 6f 6d 53 68 61 72 65 49 6e 69 74 20 28 29 20 7b 0a 20 20 76 61 72 20 62 74 6e 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3f 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c Data Ascii: var startTime = +(new Date());function dT() { return '[' + ((+(new Date()) - startTime)/ 1000.0) + '] ';}var jsonpCallbacks = [];function twitterCustomShareInit () { var btns = document.querySelectorAll ? document.querySelectorAll
2024-04-25 06:40:17 UTC	5487	IN	Data Raw: 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 69 65 6e 74 58 20 3d 20 65 2e 63 6c 69 65 6e 74 58 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 69 65 6e 74 59 20 3d 20 65 2e 63 6c 69 65 6e 74 59 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 69 70 70 6c 65 58 20 3d 20 28 63 6c 69 65 6e 74 58 20 2d 20 72 65 63 74 2e 6c 65 66 74 29 20 2d 20 72 69 70 70 6c 65 4d 61 73 6b 2e 6f 66 66 73 65 74 57 69 64 74 68 20 2f 20 32 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 69 70 70 6c 65 59 20 3d 20 28 63 6c 69 65 6e 74 59 20 2d 20 72 65 63 74 2e 74 6f 70 29 20 2d 20 72 69 70 70 6c 65 4d 61 73 6b 2e 6f 66 66 73 65 74 48 65 69 67 68 74 20 2f 20 32 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 69 70 70 6c 65 Data Ascii: } else { var clientX = e.clientX; var clientY = e.clientY; } var rippleX = (clientX - rect.left) - rippleMask.offsetWidth / 2; var rippleY = (clientY - rect.top) - rippleMask.offsetHeight / 2; var ripple

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49744	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:16 UTC	685	OUT	GET /file/400780400906/1/nG_ME-jFfII.256820/2569601ad1ecf4c3c2 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:17 UTC	350	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:17 GMT Content-Type: image/jpeg Content-Length: 256820 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:17 GMT ETag: "7ba40344bed02400a1b3bbcb694e50cd469f2ff7" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:17 UTC	16034	IN	Data Raw: ff d8 ff e1 20 a4 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 93 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 34 3a 30 33 3a 32 37 20 31 36 3a 31 36 3a 32 32 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 02 58 a0 03 00 04 00 00 00 01 00 00 01 5e 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1!r2i''Adobe Photoshop 25.4 (Macintosh)2024:03:27 16:16:22X^"
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 63 3f 49 fa 2d eb 2b 17 a1 fa f8 f7 5f 76 75 76 5a d6 fa 98 b8 76 8b 0b ac 21 be a7 a1 e9 87 63 d1 6f bc 59 5f f3 2a 78 f3 13 ba c6 08 fe f8 31 ff 00 9a c7 ed 40 fc f2 07 fb a6 ff 00 e7 3a 96 64 60 57 0d eb fd 75 dd 42 a6 89 38 54 b4 d2 d7 3b f7 2c f5 ae b2 fb 1b ff 00 12 ca 37 ff 00 d0 5b ed bd 96 39 ce a2 a7 d7 8f a7 a2 c7 b7 61 0d da df 63 6a 3f cd b1 9f 9a b9 9b 7a 67 d5 cc 6e 93 8f d4 71 ac 07 35 ae 61 b3 1c 06 c9 6b ce cc aa eb c4 a1 ac db e9 fb 33 31 9f 73 6c fe 8d 4f e9 17 51 8d 6f 40 be a6 59 7f d8 a9 79 d2 c6 83 5b 5d b8 1d af 77 6d ac 7b bd f5 ff 00 21 29 cf 36 42 01 ad b8 87 a6 82 63 1c 70 16 01 dc c4 d9 b2 82 ce 9e dc ac 8a ec aa 31 b2 2a 26 f3 78 1b 0b 83 4b 2a b2 bb 6c 68 fa 36 53 6d 9f 4f d5 f4 ec fd 2f a6 a8 62 f5 4c 67 54 30 9a 58 5d 88 Data Ascii: c?I-+_vuvZv!coY_x1@:d`WuB8T;,7[9acj?zgnq5ak31slOQo@Yy[]wm{!)6Bcp1&xK*lh6SmO/bLgT0X]
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 42 35 31 41 41 31 33 30 37 31 39 42 42 36 43 44 32 38 37 42 42 30 43 41 41 33 45 44 37 36 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 43 36 34 42 45 32 36 35 38 36 44 39 31 36 35 30 41 31 36 34 44 45 39 31 44 35 42 46 35 32 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 44 30 43 32 41 31 43 45 43 44 31 41 39 42 43 36 41 33 31 31 35 37 33 36 39 46 33 41 43 39 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 44 32 45 38 35 31 31 38 35 31 31 34 30 38 30 33 31 43 41 46 34 44 43 42 36 38 30 41 39 46 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 45 35 35 46 34 39 36 42 36 39 33 36 37 36 30 42 35 39 41 32 34 38 41 39 31 31 34 33 35 39 30 3c 2f 72 64 66 3a 6c Data Ascii: rdf:li> <rdf:li>5B51AA130719BB6CD287BB0CAA3ED760</rdf:li> <rdf:li>5C64BE26586D91650A164DE91D5BF523</rdf:li> <rdf:li>5D0C2A1CECD1A9BC6A31157369F3AC9F</rdf:li> <rdf:li>5D2E85118511408031CAF4DCB680A9FF</rdf:li> <rdf:li>5E55F496B6936760B59A248A91143590</rdf:l
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 61 38 64 33 38 66 62 2d 61 39 35 37 2d 31 31 65 36 2d 62 34 66 30 2d 39 31 38 31 62 65 66 31 63 39 36 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 62 30 36 36 35 31 66 2d 37 66 62 37 2d 31 31 37 63 2d 39 35 32 66 2d 39 61 65 65 33 35 34 32 30 61 36 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 62 31 66 39 62 36 30 2d 35 65 39 34 2d 31 31 37 62 2d 61 31 32 62 2d 66 61 63 34 38 36 62 37 37 62 61 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 62 33 36 33 61 61 30 2d 65 64 63 36 Data Ascii: cid:photoshop:1a8d38fb-a957-11e6-b4f0-9181bef1c966</rdf:li> <rdf:li>adobe:docid:photoshop:1b06651f-7fb7-117c-952f-9aee35420a6f</rdf:li> <rdf:li>adobe:docid:photoshop:1b1f9b60-5e94-117b-a12b-fac486b77baa</rdf:li> <rdf:li>adobe:docid:photoshop:1b363aa0-edc6
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 32 38 62 61 61 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 61 61 39 66 30 36 36 2d 65 39 37 30 2d 31 31 37 61 2d 61 39 31 61 2d 61 61 33 63 63 32 36 61 39 62 30 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 61 64 66 37 38 30 34 2d 33 35 63 66 2d 31 31 37 62 2d 38 35 61 63 2d 61 66 34 35 61 31 31 63 32 64 37 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 61 65 65 32 38 62 63 2d 34 63 62 37 2d 31 31 65 37 2d 38 61 32 63 2d 64 32 35 38 37 30 66 64 62 34 64 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f Data Ascii: 28baad</rdf:li> <rdf:li>adobe:docid:photoshop:6aa9f066-e970-117a-a91a-aa3cc26a9b0c</rdf:li> <rdf:li>adobe:docid:photoshop:6adf7804-35cf-117b-85ac-af45a11c2d7b</rdf:li> <rdf:li>adobe:docid:photoshop:6aee28bc-4cb7-11e7-8a2c-d25870fdb4d5</rdf:li> <rdf:li>ado
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 70 3a 62 39 39 62 31 37 30 31 2d 39 34 37 32 2d 31 31 65 37 2d 39 30 31 62 2d 66 35 66 65 62 63 38 63 64 65 62 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 62 61 35 65 35 32 39 37 2d 30 32 64 39 2d 31 31 37 63 2d 62 66 30 64 2d 64 64 35 30 61 66 37 35 66 62 33 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 62 61 37 31 62 32 66 61 2d 37 30 39 66 2d 31 31 37 61 2d 38 65 65 31 2d 39 31 30 63 32 66 64 31 63 66 35 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 62 61 64 34 30 30 39 33 2d 38 61 61 63 2d 31 31 37 61 2d 62 38 64 31 2d 62 Data Ascii: p:b99b1701-9472-11e7-901b-f5febc8cdebd</rdf:li> <rdf:li>adobe:docid:photoshop:ba5e5297-02d9-117c-bf0d-dd50af75fb35</rdf:li> <rdf:li>adobe:docid:photoshop:ba71b2fa-709f-117a-8ee1-910c2fd1cf56</rdf:li> <rdf:li>adobe:docid:photoshop:bad40093-8aac-117a-b8d1-b
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 39 46 43 43 35 42 42 33 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 30 34 41 34 31 34 42 34 34 37 46 38 44 46 31 31 42 42 41 34 39 45 33 33 41 42 36 32 44 32 41 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 30 35 46 38 35 41 38 38 44 32 32 34 45 37 31 31 42 38 41 45 39 34 31 35 36 34 44 43 38 45 45 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 30 36 39 30 42 32 45 36 46 39 30 45 45 37 31 31 41 32 41 38 41 35 33 43 37 43 36 39 43 30 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 30 37 33 37 36 32 44 42 42 32 43 37 45 33 31 31 39 41 44 30 46 33 34 31 38 46 45 45 35 36 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 30 38 35 Data Ascii: 9FCC5BB3F</rdf:li> <rdf:li>uuid:04A414B447F8DF11BBA49E33AB62D2AE</rdf:li> <rdf:li>uuid:05F85A88D224E711B8AE941564DC8EE1</rdf:li> <rdf:li>uuid:0690B2E6F90EE711A2A8A53C7C69C02C</rdf:li> <rdf:li>uuid:073762DBB2C7E3119AD0F3418FEE56B8</rdf:li> <rdf:li>uuid:085
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 38 41 45 32 43 45 41 33 33 32 35 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 39 64 65 64 31 31 64 2d 66 66 32 31 2d 65 34 34 62 2d 39 32 33 30 2d 33 35 39 63 64 63 63 30 31 64 38 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 41 46 43 35 34 30 33 37 45 30 36 45 32 31 31 41 46 36 46 46 44 39 30 32 34 44 34 31 33 41 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 42 32 41 31 39 37 37 41 44 32 30 36 38 31 31 39 31 30 39 41 46 30 44 46 37 44 32 30 41 37 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 43 41 38 39 39 31 36 38 39 30 42 31 31 45 32 39 44 43 44 39 35 39 44 31 39 39 39 33 34 37 44 3c 2f 72 64 66 3a 6c Data Ascii: 8AE2CEA33250</rdf:li> <rdf:li>xmp.did:59ded11d-ff21-e44b-9230-359cdcc01d87</rdf:li> <rdf:li>xmp.did:5AFC54037E06E211AF6FFD9024D413A8</rdf:li> <rdf:li>xmp.did:5B2A1977AD2068119109AF0DF7D20A73</rdf:li> <rdf:li>xmp.did:5CA89916890B11E29DCD959D1999347D</rdf:l
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 08 14 10 20 21 31 22 32 15 23 33 16 30 24 41 34 25 17 09 40 50 42 60 26 36 18 43 35 27 44 11 00 02 02 01 03 02 03 05 04 05 06 09 07 04 0c 0f 01 02 03 04 05 00 11 06 21 12 31 41 13 51 61 22 14 07 71 81 91 32 a1 b1 42 23 15 10 c1 52 62 72 33 20 d1 82 92 a2 b2 24 34 16 30 e1 c2 43 73 83 a3 53 63 b3 08 40 f0 d2 93 44 54 64 74 84 b4 25 35 26 36 66 76 50 c3 d3 17 60 f1 e2 a4 45 65 b5 12 00 01 03 02 02 06 07 05 06 04 05 02 05 04 03 00 01 00 11 02 21 03 31 12 41 51 61 71 22 04 10 81 91 a1 b1 32 13 20 c1 d1 42 52 f0 e1 62 72 23 05 30 f1 82 14 92 a2 b2 c2 33 40 53 50 d2 43 73 24 60 63 34 15 e2 83 74 ff da 00 0c 03 01 01 02 11 03 11 00 00 00 ef e0 08 04 02 01 00 80 40 79 03 08 19 00 c8 02 01 00 80 40 20 10 08 0d 1e f0 4e aa 13 42 1c 7e 74 f4 8c 49 71 4e 41 49 77 0e Data Ascii: !1"2#30$A4%@PB`&6C5'D!1AQa"q2B#Rbr3 $40CsSc@DTdt%5&6fvP`Ee!1AQaq"2 BRbr#03@SPCs$`c4t@y@ NB~tIqNAIw
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: cd 84 04 c4 12 e7 5f 19 d6 38 22 03 8c 24 48 e9 25 5b aa dd 48 cb 22 a8 05 c9 73 cc a2 89 4c 75 75 e2 8c d5 84 2d 71 35 d7 af c4 2d 1c 4b ab 73 2f 11 53 7e d0 ef 25 4e d5 a9 7c 7c 4d 4f 5b ed 50 39 2d 7d c0 37 71 b3 ec 8b 38 92 95 a1 19 9d 76 9b 5f 52 0a 4a d2 cc f1 b2 ba 9e 59 49 68 5b 14 5c 83 a4 4a 52 86 36 6e 2a 82 69 98 01 eb 20 49 84 c0 fe a5 f2 c2 11 f1 76 89 25 8a d6 e9 ae 9f 55 c6 91 00 ad 76 52 62 14 c9 ca df d6 2a b3 de c3 1c 79 d5 2b 2a 7a ac 50 7f 7d bc e4 15 3c a4 3c 1c 6c ab 34 eb bc b5 d1 2e cc ca 7d e0 a2 e9 b4 20 99 a1 29 86 46 4f 2f ca 74 16 39 75 66 11 ad 4b 9c 64 e0 08 ca 6d 27 6d 92 4a 2b 60 a9 dc 97 a9 95 f3 a7 72 33 85 14 db 38 3a 8a 2d 24 d9 b2 86 93 8d 53 05 ec 58 60 49 c5 97 3f 90 30 26 4b da 4a 74 d2 b0 97 88 e7 25 74 b3 74 fa Data Ascii: _8"$H%[H"sLuu-q5-Ks/S~%N\|\|MO[P9-}7q8v_RJYIh[\JR6ni Iv%UvRby+*zP}<<l4.} )FO/t9ufKdm'mJ+`r38:-$SX`I?0&KJt%tt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49742	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:16 UTC	685	OUT	GET /file/400780400268/1/6Avx2xeE-E8.239216/5a7f21012854ea61ce HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:17 UTC	350	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:17 GMT Content-Type: image/jpeg Content-Length: 239216 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:17 GMT ETag: "5f2b86bcead2b04cf9d6134a8688fca68f34b96a" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:17 UTC	16034	IN	Data Raw: ff d8 ff e1 1c 94 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 93 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 34 3a 30 33 3a 32 37 20 31 37 3a 30 36 3a 34 32 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 02 58 a0 03 00 04 00 00 00 01 00 00 01 5e 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1!r2i''Adobe Photoshop 25.4 (Macintosh)2024:03:27 17:06:42X^"
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 2e 1d f7 66 59 36 b9 d6 fd 9e 86 ce fb 1c 00 da c6 6d 0e db ee 77 f3 8e f6 2f 2f c6 bc 62 7d 5e cb e9 d7 03 5e 5d cd a5 a6 9b 01 6b c0 17 51 77 a9 e9 38 6f fa 35 a7 72 b1 20 4c 81 e9 e2 88 07 c8 fa 98 27 a1 af 07 d1 be a6 d2 cb fa 00 91 fe 19 fc eb f9 b5 47 ee fe 6a 36 5f 41 c9 36 fd a3 1a e1 5b e0 88 8d da 1f a4 d2 cf ce 63 94 7e a2 88 e8 44 34 87 0f 5d da f1 a6 ca b5 85 d0 90 0b 89 d6 4f 89 30 ab 65 d3 2c a4 0d 11 2d 17 c4 90 1e 26 fe 93 99 5e 4d 59 39 17 ee 6e 3b da fd ac a9 e5 c5 ad 73 5d e9 6e f5 1d 67 a7 ec f7 a0 75 9b b2 33 8e 45 58 f4 df 7e 25 be 9b cf d9 2c 0f 70 73 04 1f 57 0e c7 3a e7 7b 9d f4 36 59 f9 9e f5 dd 59 4b 5e 35 01 66 e6 74 7c 5b c8 36 56 1c 7b 3a 35 1f da 3e ff 00 f3 13 4e 6c bc 42 44 89 50 e1 f9 40 f4 ff 00 81 c0 cf 8b 28 8f 4d de Data Ascii: .fY6mw//b}^^]kQw8o5r L'Gj6_A6[c~D4]O0e,-&^MY9n;s]ngu3EX~%,psW:{6YYK^5ft\|[6V{:5>NlBDP@(M
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 46 37 31 45 39 38 33 30 45 31 34 32 46 37 35 34 44 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 44 42 31 34 35 34 30 32 41 41 38 46 42 33 30 45 30 46 38 32 33 33 35 46 38 30 46 46 39 34 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 44 44 31 37 33 46 33 37 46 45 34 39 34 42 43 43 31 39 44 36 45 46 35 31 33 43 33 41 38 39 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 32 36 36 41 39 37 31 32 46 32 43 35 43 33 31 43 44 44 30 30 37 32 45 37 32 44 38 33 38 44 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 33 30 44 30 46 31 44 44 45 41 31 36 34 41 41 38 45 43 46 37 30 31 30 35 43 39 32 38 42 31 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 34 35 37 31 42 43 34 35 38 36 41 36 37 31 42 31 33 37 Data Ascii: F71E9830E142F754DD</rdf:li> <rdf:li>7DB145402AA8FB30E0F82335F80FF944</rdf:li> <rdf:li>7DD173F37FE494BCC19D6EF513C3A890</rdf:li> <rdf:li>8266A9712F2C5C31CDD0072E72D838DF</rdf:li> <rdf:li>830D0F1DDEA164AA8ECF70105C928B1D</rdf:li> <rdf:li>84571BC4586A671B137
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 31 31 65 32 2d 39 32 64 30 2d 61 66 30 65 31 36 64 65 35 32 30 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 35 34 35 39 35 32 64 2d 39 64 36 35 2d 31 31 37 62 2d 39 38 38 38 2d 63 32 65 36 66 30 37 39 30 63 37 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 35 38 30 39 34 31 62 2d 33 32 62 38 2d 66 64 34 30 2d 39 61 33 30 2d 36 33 32 61 31 31 62 33 31 65 62 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 35 39 61 65 33 61 64 2d 65 32 66 33 2d 32 35 34 39 2d 38 36 35 30 2d 38 35 36 37 36 64 39 66 30 65 36 35 3c 2f 72 64 66 Data Ascii: 11e2-92d0-af0e16de5203</rdf:li> <rdf:li>adobe:docid:photoshop:2545952d-9d65-117b-9888-c2e6f0790c78</rdf:li> <rdf:li>adobe:docid:photoshop:2580941b-32b8-fd40-9a30-632a11b31ebc</rdf:li> <rdf:li>adobe:docid:photoshop:259ae3ad-e2f3-2549-8650-85676d9f0e65</rdf
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 34 62 65 65 66 65 62 2d 63 33 37 34 2d 32 30 34 35 2d 39 33 63 65 2d 66 32 62 32 36 31 34 63 32 63 38 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 34 63 38 33 35 63 39 2d 37 32 33 38 2d 31 31 37 62 2d 39 39 36 38 2d 61 62 65 62 61 31 63 37 63 65 31 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 34 64 62 31 37 39 30 2d 65 66 63 33 2d 31 31 37 61 2d 62 32 31 61 2d 64 30 61 33 33 31 31 35 66 37 32 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 35 38 38 31 30 34 65 2d Data Ascii: e:docid:photoshop:74beefeb-c374-2045-93ce-f2b2614c2c80</rdf:li> <rdf:li>adobe:docid:photoshop:74c835c9-7238-117b-9968-abeba1c7ce1c</rdf:li> <rdf:li>adobe:docid:photoshop:74db1790-efc3-117a-b21a-d0a33115f726</rdf:li> <rdf:li>adobe:docid:photoshop:7588104e-
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 30 63 32 66 64 31 63 66 35 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 33 30 64 35 34 30 62 2d 39 35 66 38 2d 31 31 65 35 2d 38 35 64 65 2d 61 30 33 62 30 38 35 31 31 35 63 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 33 32 33 30 38 34 66 2d 31 37 36 37 2d 31 31 64 64 2d 62 64 66 30 2d 65 37 63 64 34 33 66 32 62 65 65 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 34 38 31 65 33 39 65 2d 61 38 61 30 2d 61 65 34 61 2d 61 36 38 31 2d 66 39 62 35 30 34 63 33 39 36 30 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 Data Ascii: 0c2fd1cf56</rdf:li> <rdf:li>adobe:docid:photoshop:c30d540b-95f8-11e5-85de-a03b085115c1</rdf:li> <rdf:li>adobe:docid:photoshop:c323084f-1767-11dd-bdf0-e7cd43f2beee</rdf:li> <rdf:li>adobe:docid:photoshop:c481e39e-a8a0-ae4a-a681-f9b504c3960e</rdf:li> <rdf:li
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 37 31 31 38 30 43 32 39 33 30 30 46 35 43 39 35 43 39 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 34 34 46 37 39 46 37 39 44 41 39 41 45 33 31 31 41 32 44 31 44 31 35 33 35 45 41 39 42 34 46 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 34 37 39 41 45 43 43 35 42 33 31 33 45 37 31 31 39 43 34 32 45 34 32 45 36 42 41 34 32 31 31 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 34 44 46 41 31 45 30 39 44 34 41 36 44 46 31 31 38 44 33 42 43 37 33 31 46 35 41 45 43 32 33 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 34 46 45 44 38 32 32 38 42 31 38 44 45 33 31 31 41 36 39 36 43 35 32 33 37 30 35 37 34 35 35 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c Data Ascii: 71180C29300F5C95C96</rdf:li> <rdf:li>uuid:44F79F79DA9AE311A2D1D1535EA9B4FE</rdf:li> <rdf:li>uuid:479AECC5B313E7119C42E42E6BA42115</rdf:li> <rdf:li>uuid:4DFA1E09D4A6DF118D3BC731F5AEC23D</rdf:li> <rdf:li>uuid:4FED8228B18DE311A696C52370574553</rdf:li> <rdf:l
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 45 32 38 33 35 38 38 37 37 41 42 39 45 36 33 41 43 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 36 35 43 32 38 39 33 31 33 34 43 31 31 45 34 41 30 46 33 39 35 34 43 42 44 38 31 34 41 42 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 37 34 32 42 31 37 35 42 32 38 37 31 31 45 34 38 39 32 37 45 42 34 41 42 41 39 41 34 42 41 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 37 42 35 38 43 38 45 39 45 33 43 31 31 45 32 41 42 41 45 44 36 44 38 30 43 39 43 45 38 32 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 37 66 35 31 63 37 34 2d 30 33 37 32 2d 38 35 34 38 2d 61 30 62 63 2d 35 63 66 39 34 35 62 66 31 64 34 33 3c Data Ascii: E28358877AB9E63ACE</rdf:li> <rdf:li>xmp.did:765C2893134C11E4A0F3954CBD814ABB</rdf:li> <rdf:li>xmp.did:7742B175B28711E48927EB4ABA9A4BA1</rdf:li> <rdf:li>xmp.did:77B58C8E9E3C11E2ABAED6D80C9CE826</rdf:li> <rdf:li>xmp.did:77f51c74-0372-8548-a0bc-5cf945bf1d43<
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: 97 c1 90 13 d2 5d 19 0c bf cf 5e 27 8b 51 dd 49 ea e5 88 36 5b 12 a8 06 d2 a0 a3 cc 59 d7 19 fa 4f d1 e6 de eb 40 00 00 12 60 ce 31 9e d2 6b 8d 20 ba 54 96 f3 19 b8 d6 93 a8 6a 49 ca ab d5 66 25 55 1c fd 4c b5 ea fe 08 45 f8 7e 26 52 34 88 b1 7f 9e fb 6c 89 51 b4 64 37 1d 9b 8b 93 18 7a 3c 46 d3 70 dd 36 dd be 9a 6a 09 27 11 7f 55 fe 50 f5 25 0b 88 f7 6f ec ef 0d 41 5a 64 a6 24 6c 00 1e 73 a9 62 a2 69 cf c1 b6 56 70 0d b4 88 be 53 a9 87 3d 8d d4 c5 b7 1f 58 f2 1b 6e bb a3 de 5d 16 7c 8a 55 ba 0b b8 db 1d b0 b1 6e c3 97 2c eb 63 99 f1 68 f5 9b 17 17 ac 52 c6 a4 f4 07 11 a2 7c da 57 b4 a0 bd 59 fd 93 1f 54 3d 16 1d f3 cf 58 5d 3c 54 39 35 b5 ed e0 a2 ea 19 af 37 c5 da 1b b9 06 1c d5 68 32 6b 73 52 74 cd 81 cc 9d 06 7e e3 d8 44 fa 2f b3 ac 93 da 77 c8 b2 4b Data Ascii: ]^'QI6[YO@`1k TjIf%ULE~&R4lQd7z<Fp6j'UP%oAZd$lsbiVpS=Xn]\|Un,chR\|WYT=X]<T957h2ksRt~D/wK
2024-04-25 06:40:17 UTC	16384	IN	Data Raw: bc 0e 07 03 81 c0 e0 45 fe 11 d9 75 48 07 36 42 86 42 4a 39 3d 47 03 81 0d 1d 20 91 03 36 da 6d 8c aa 0b 2a 5e c1 61 00 f6 33 9d 9e d8 33 fc 98 a6 44 57 90 ec 1a 32 98 cb 65 d2 4c 56 dd 0d 17 04 82 e0 97 fd 13 5f 52 13 47 57 ef 64 cc c3 62 9c 78 34 13 26 09 2d 9b 46 93 23 2f b1 24 1a 23 10 65 36 c9 34 e9 38 27 f2 a2 45 c3 7e 32 ac 7d 46 d5 39 90 85 01 b4 a5 93 69 a2 90 4d 34 1b 78 d4 aa b5 72 88 d1 fc 44 a3 0f ba 16 be a2 3b 2d 48 6a 47 a2 a4 34 d2 e0 56 56 aa 63 f9 84 23 6e 56 32 83 45 7d cc ef 0b 4d 36 6e b8 86 92 84 a9 1c 17 43 1d d6 90 52 d4 66 6e 1f 24 85 19 46 8c ec 95 15 1b bc 26 8c d4 25 30 a8 ee 92 c4 88 e9 79 2b 60 d0 af 18 f1 8f 18 f1 88 75 e6 f1 a1 65 c1 3a b0 4e ac 3c ca 5f 3f 60 c8 f6 0c 83 89 14 88 94 4b 09 4f 27 b3 a4 7b 26 1c 71 e9 01 b6 Data Ascii: EuH6BBJ9=G 6m*^a33DW2eLV_RGWdbx4&-F#/$#e648'E~2}F9iM4xrD;-HjG4VVc#nV2E}M6nCRfn$F&%0y+`ue:N<_?`KO'{&q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49745	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:17 UTC	685	OUT	GET /file/464001897/3/f0Go0rLpEwk.11343.png/dd4eeb46cc5efc0688 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:18 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:18 GMT Content-Type: image/png Content-Length: 11343 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:18 GMT ETag: "183936b397813281d8de1b217deb5c565bde1c5b" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:18 UTC	11343	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 2c 04 49 44 41 54 78 da ed 9d 77 7c 9c d5 95 f7 7f e7 3c 65 66 a4 51 1f 59 ee 0d 9b 62 03 a1 9b 1a 5a c8 66 97 00 a9 ec 4b 08 ec 66 df 6c 58 08 01 43 b2 c9 92 bc 9b c0 6e 20 d9 bc 09 2d 2c 81 dd 77 b3 29 4b 0a 29 18 42 09 69 84 00 a1 f7 8e c1 45 96 6d 49 a3 ae a9 4f 39 e7 fd 63 46 33 cf a8 59 b6 25 5b 92 9f f3 f9 e8 a3 d1 68 e6 29 f7 7e 9f d3 ee b9 f7 02 a1 84 12 4a 28 a1 84 12 4a 28 a1 84 12 4a 28 a1 84 12 4a 28 a1 84 12 4a 28 a1 84 12 4a 28 a1 84 12 ca 14 08 85 4d 00 e8 f5 89 79 2e c9 62 62 aa 82 af 06 0c c3 84 af 06 48 0d 28 f9 aa 92 b4 22 d2 01 bf af 9d 2e 47 3e 6c b1 10 c0 9d 87 ec 2b 60 a7 31 Data Ascii: PNGIHDRg-bKGD,IDATxw\|<efQYbZfKflXCn -,w)K)BiEmIO9cF3Y%[h)~J(J(J(J(J(J(My.bbH(".G>l+`1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49746	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:17 UTC	685	OUT	GET /file/464001737/4/Fn57W9l3xI0.15286.png/d4b936ecc2c939f4fa HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:18 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:18 GMT Content-Type: image/png Content-Length: 15286 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:18 GMT ETag: "93939a07f86b42b04b779841ba81a1ef4ba2d929" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:18 UTC	15286	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 3b 6b 49 44 41 54 78 da ed bd 77 bc 5d 77 75 27 fa 5d eb b7 cb a9 b7 37 e9 ea aa 77 d9 72 af d8 98 19 c0 98 1a 08 a1 3c 08 25 61 02 21 43 06 cc e4 91 f2 48 1c 32 04 78 84 c4 36 e3 84 97 61 26 81 54 20 9d 84 66 c7 36 c6 06 db 10 63 5b ee 92 25 ab 97 db eb 39 67 b7 b5 de 1f 7b 9f 76 bb a4 2b e9 ea ea ae 8f f4 39 7b 9f b3 ef 2e bf df 77 af f6 5b 05 58 a6 65 5a a6 65 5a a6 65 5a a6 65 5a a6 65 5a a6 65 5a a6 65 5a a6 65 5a a6 b3 40 b4 d4 1e e8 86 1b 2e 6e 46 a8 3b 35 0c 5b 15 66 2b 19 cd 92 ea 88 10 0d b1 62 38 52 1d 0c 34 18 54 95 81 a3 47 f7 f5 1f 3b 86 c2 32 0c 96 01 78 5a b4 73 e7 ce 6c 43 46 3f 08 Data Ascii: PNGIHDRg-bKGD;kIDATxw]wu']7wr<%a!CH2x6a&T f6c[%9g{v+9{.w[XeZeZeZeZeZeZeZeZ@.nF;5[f+b8R4TG;2xZslCF?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49747	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:17 UTC	685	OUT	GET /file/464001560/2/n7EACfx4FPY.16465.png/7318c11715aa2ec45b HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:18 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:18 GMT Content-Type: image/png Content-Length: 16465 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:18 GMT ETag: "ad24af7a174e71673b28f7e827a85934048a9cd7" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:18 UTC	16036	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 40 06 49 44 41 54 78 da ed bd 77 98 5d 65 b5 3f fe 59 6b 97 d3 cf f4 99 4c 7a 32 69 04 42 48 20 04 44 9a 20 28 20 4d 01 bd a8 28 2a 5c b1 5d c4 de b8 58 2e 96 8b c8 b5 7c af bd 5f 10 7f 2a 5d 11 10 95 8e 69 b4 50 d2 eb 64 32 fd f4 b3 cb 5a bf 3f 4e 99 33 25 c9 4c 32 43 02 9c f5 3c fb 39 67 9f b3 cf bb f7 79 df cf bb fa bb 5e a0 4a 55 aa 52 95 aa 54 a5 2a 55 a9 4a 55 aa d2 ab 9e 2e fd 08 e2 ef fb 2c 5a 0e 85 67 e1 ea 70 bc b6 e8 83 d7 19 a7 36 b5 c6 b7 c5 63 35 db 3e fa d5 f0 15 55 00 56 e9 e5 24 0a 04 22 df 23 50 08 00 d8 34 2f af 02 b0 4a 2f 1b 7d f4 ab a1 2b 49 68 6e e9 5c 55 1e aa 02 b0 4a 2f 0b Data Ascii: PNGIHDRg-bKGD@IDATxw]e?YkLz2iBH D ( M(\]X.\|_]iPd2Z?N3%L2C<9gy^JURT*UJU.,Zgp6c5>UV$"#P4/J/}+Ihn\UJ/
2024-04-25 06:40:18 UTC	429	IN	Data Raw: bf 68 3d 5c 9c 03 42 2b 04 49 08 1e c0 f9 f4 e2 b8 3f e9 ad 5a 83 30 e6 40 31 17 8a 56 00 4d 20 34 11 d0 04 a0 19 85 d7 26 02 e2 23 33 ae 32 f0 3c 00 36 14 36 d1 f0 1d 8a b4 b0 65 42 1f 80 4e 00 bb 01 74 2a d0 09 45 27 18 9d 50 6c 07 b0 0e 51 ac 1f 77 77 c7 ad 6a 20 88 a5 00 4e 04 c3 82 60 2d 4c fc 15 67 8d 77 99 f7 57 13 00 07 77 60 14 01 9c 02 c2 3c 14 7c 8c 02 c6 5a b8 78 7c 68 42 eb 84 d1 b5 ca 38 1c 01 58 08 80 11 00 15 0f 94 5f 4d 78 70 40 70 00 e4 21 c5 c3 47 1e 4d c8 e3 14 e4 41 f4 f2 88 fc 7b 74 2a 7c 1c 07 2d ef 98 e9 00 78 0a 39 3c 8c 8b c9 c7 6b 80 26 3e 4c 71 9b 2e 04 63 39 80 86 e2 27 49 30 5e 82 8b f5 b8 80 b6 bd 26 7c 2f b7 aa 81 00 66 81 30 17 8c 39 d0 22 e7 15 6c 03 e1 71 9c 4b 5b 5f ab 6e 29 3a 08 83 11 42 a4 28 4a 05 53 51 b1 e3 7a 11 Data Ascii: h=\B+I?Z0@1VM 4&#32<66eBNtE'PlQwwj N`-LgwWw`<\|Zx\|hB8X_Mxp@p!GMA{t\|-x9<k&>Lq.c9'I0^&\|/f09"lqK[_n):B(JSQz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49748	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:18 UTC	669	OUT	GET /img/SiteDesktop.jpg?2 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/css/telegram.css?237 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:18 UTC	341	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:18 GMT Content-Type: image/jpeg Content-Length: 97628 Last-Modified: Tue, 11 Jun 2019 13:49:53 GMT Connection: close ETag: "5cffb181-17d5c" Expires: Mon, 29 Apr 2024 06:40:18 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:18 UTC	16043	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyd1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xm
2024-04-25 06:40:18 UTC	16384	IN	Data Raw: d9 39 25 8c aa 28 9b 10 55 48 99 53 2a b2 c3 2a 44 c7 b2 49 52 a0 c5 8a f9 3b 35 e6 db 5c 66 1e 85 61 0d 04 ca d0 4b 71 2c 92 14 83 42 d0 46 3a 5d 31 f2 95 dc 9d b9 e7 1e 7a e6 6d a9 71 77 5d d3 b6 bb 4d 27 16 f1 7d 9e 97 45 25 4c 53 39 3d 55 f3 a4 33 97 16 9b f7 6c 34 f4 e3 c0 ee f7 bd e3 ec d6 4a 54 ec ae d6 18 55 b8 ba e0 d1 3f c0 e1 47 61 8b b3 cd e0 6c dc 7b 07 2c c9 a8 0f 61 11 e3 b2 c4 fa 66 a2 47 71 a7 ed d3 64 6a 7d 36 2a b2 7a 4a bb a4 9a db 69 0a 49 12 96 7c cb 54 4d 52 ce 98 ae 5b 7a 3c 73 7d d3 b7 db ef 94 6a a7 c4 f0 8f 02 a3 8a 8f 0e 2f 16 ea e8 b6 2d 86 8f 7b 58 76 ee ad 76 59 3e f9 5c a5 be e1 ce 8e df 0c 71 9a 9b 6d 4d cb 8b 05 54 95 15 5b ab 77 16 23 b8 75 7b cf 49 80 ee 35 09 f9 24 94 c8 91 11 75 71 9e 90 96 c9 29 41 3c eb 26 85 ba 48 Data Ascii: 9%(UHS*DIR;5\faKq,BF:]1zmqw]M'}E%LS9=U3l4JTU?Gal{,afGqdj}6zJiI\|TMR[z<s}j/-{XvvY>\qmMT[w#u{I5$uq)A<&H
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: 11 a1 a4 87 b7 65 f9 b6 7a 86 94 f3 f9 9b 6e 37 63 b2 de 29 d3 72 8e 09 62 a8 fa 2b 86 ea 9c a6 5a f6 59 dc 9a ba a9 71 2a 27 bd ee 72 6e 95 aa e9 65 05 bb dd 39 65 7b 5d 5b 88 4d 7a 75 2e 48 9c 9a 6d bd 5b 12 31 87 64 ca ae 7e 6d 74 b2 6d 05 16 43 ec 30 6a 4c 86 1e 42 b4 5f 22 8b 52 22 2e dd 30 e9 bc cb 63 52 77 e1 38 ce 16 ec b8 ba cd 25 44 d6 29 d1 ee 6b ac da 65 21 dc e6 64 94 b8 a3 25 5c 5d 5e 18 55 e0 b6 f4 a5 e5 2d 0b b5 f3 ea 5e 7e b2 d2 33 91 2c 60 bc e4 59 91 5d fe b8 c3 cc ab 91 4d 2b 8a 8b 54 69 a7 03 32 f3 70 1d 46 46 fd 9c ce 52 17 f2 f2 e2 b3 35 54 fa 55 5e 24 d5 b3 a4 cd 5c 66 b8 dc c7 71 f5 72 9f a7 49 54 a2 3f 7e 0c 73 23 32 e1 c0 7b 1e 9d 04 f2 16 1b db dd 43 f3 51 c2 e6 ee 45 66 6e f4 f1 cb e7 64 e3 d5 87 e9 6a 92 f2 99 eb ae a7 ef 79 Data Ascii: ezn7c)rb+ZYq*'rne9e{][Mzu.Hm[1d~mtmC0jLB_"R".0cRw8%D)ke!d%\]^U-^~3,`Y]M+Ti2pFFR5TU^$\fqrIT?~s#2{CQEfndjy
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: f2 b2 bf 92 51 b9 7a 0b 8b ba ed 29 cd 71 28 b5 6d d1 a9 4e 8d cd 45 d1 70 c5 e3 56 91 e9 6f e2 c7 cc da d5 6e 37 5c 5b 5f bb 5b a1 8b 6d 54 3d d6 e9 7a 56 df c4 b7 c8 72 aa 2c 5e 4b ab 9d 97 ca ab ba 7b 1f 93 7b 3e ba 2d 85 85 34 7b 14 be 6d a1 66 ae 53 25 19 72 6a 64 d5 ed dc 96 46 dc 63 16 da bb 2a d3 1d d4 dd b8 bb 4e b9 08 e6 24 e4 d2 ac 16 dc 37 f5 9d ed 74 6b d1 9e dc 74 c5 bd 58 be f0 ee 27 58 7d 1f d9 54 6c fe 1b 92 e1 d8 6b 5b 69 b9 54 55 56 b9 a4 4b d5 5a 1c 8c bf 72 d7 92 e4 c9 af aa 76 b6 aa c1 d4 f8 3a e3 7d b5 bc 49 51 af 44 19 af 9b 79 7b cf f1 27 b7 a1 fa 36 1b a5 7e ca fc 68 fa 57 b4 f1 07 77 bc a7 5b 91 64 f0 ea ae 37 09 50 22 6e 3e 77 73 55 37 1c dc 9b 9a ea 27 1a 9d 9e 5f da c3 9d 45 4a cb 89 ae 80 d4 c8 13 49 69 7d af a6 1b aa ef 92 Data Ascii: Qz)q(mNEpVon7\[_[mT=zVr,^K{{>-4{mfS%rjdFc*N$7tktX'X}Tlk[iTUVKZrv:}IQDy{'6~hWw[d7P"n>wsU7'_EJIi}
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: cc 8b 3e b9 a9 63 1f 91 6f cd 5f 02 34 4c 76 2a 94 b8 b8 f5 45 4c 18 4c d6 54 d2 c7 71 c5 2c 99 61 b4 f3 38 b5 ad 66 a5 ad 4a 3c cf 50 af e2 fa fe 83 14 72 ca 38 45 e1 e4 2d 5d ce ed e4 59 0c 76 62 5e 4f b4 b4 89 1d d6 5e 62 34 a9 6d a9 86 9e 61 a9 2c 30 f2 1b 43 08 49 3a d3 33 1d 4a 55 da 49 71 45 e5 14 f8 f5 f5 7d 7f 41 5f 87 eb 20 6a 77 09 ba 97 df 7c a8 6b 6c fb f8 6f c3 36 6e 18 6e 7c 76 89 fe 5f cf 31 db 51 20 d9 98 d7 2f a0 e1 1e a9 23 3f 38 7c 72 fa be bf a0 77 0f a4 aa 71 4c 2f 33 ea 3b 39 2a 1c 2e 8a 92 b6 69 45 39 af 47 88 d3 b0 2a 20 32 47 1a 1a 54 d4 58 8d 4b 90 a7 65 3e 68 4a 19 69 0e 2d c7 16 67 c0 b5 d2 66 9f a7 e7 39 83 35 f0 d9 45 08 a8 41 ca 52 93 a4 62 b6 55 ba 74 e0 92 44 5c ee 7b 2f a4 58 ef ef f1 cb 8a 4a 2a 31 55 72 78 ba 2f 32 ae Data Ascii: >co_4LvELLTq,a8fJ<Pr8E-]Yvb^O^b4ma,0CI:3JUIqE}A_ jw\|klo6nn\|v_1Q /#?8\|rwqL/3;9.iE9G* 2GTXKe>hJi-gf95EARbUtD\{/XJ*1Urx/2
2024-04-25 06:40:19 UTC	16049	IN	Data Raw: 4a 54 a3 c0 7a 7f d5 27 f4 1f 05 b7 14 8f 4f 9b ba bd be e0 c4 fc 03 e4 fa 55 66 75 3a 7f 49 67 fd 9c ce bf e6 4b e3 93 74 fb ab 94 ff 00 f7 5d 43 ff 00 13 21 8b db 6b d5 29 99 99 60 1d 3f 9a 35 3d 3f c1 6d c5 25 19 11 6b a6 bf ae a1 f1 f9 82 34 bc 09 e5 18 ff 00 da 75 1f f4 96 7f d9 cc df fd c8 3c 72 5e f6 95 ca 9f fb ae a1 ff 00 89 93 ea ef 6d 47 52 52 d4 84 bb 82 ec 41 73 68 5a 37 8d 67 e4 7c 4f 43 32 35 6e 72 f8 24 88 cc c4 5b be 07 72 bc 2b c1 98 d4 3c f3 b3 ff 00 50 4c ca 7f cc 67 c6 cb d7 54 2e e9 7c aa 97 56 5b 3f f8 75 2d c5 c7 81 ed 70 ea 02 c8 9a 3f 82 5b 27 a7 a0 e2 79 31 dc e1 27 de b7 ca a7 12 7c fb 90 64 49 49 2b 5d 7f 14 73 d9 9f 09 79 7f 2f 5f d2 e7 b0 7f 5e df 9b fc 89 e8 3a 6f ef d9 e2 e6 79 c5 fd df cb 4e 12 8e ec be 75 3a af 79 63 a8 Data Ascii: JTz'OUfu:IgKt]C!k)`?5=?m%k4u<r^mGRRAshZ7g\|OC25nr$[r+<PLgT.\|V[?u-p?['y1'\|dII+]sy/_^:oyNu:yc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49749	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:18 UTC	665	OUT	GET /img/SiteiOS.jpg?2 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/css/telegram.css?237 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:18 UTC	340	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:18 GMT Content-Type: image/jpeg Content-Length: 31305 Last-Modified: Sat, 09 May 2020 18:58:54 GMT Connection: close ETag: "5eb6fd6e-7a49" Expires: Mon, 29 Apr 2024 06:40:18 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:18 UTC	16044	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 01 ba a0 03 00 04 00 00 00 01 00 00 01 0e 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 0e 01 ba 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*i8Photoshop 3.08BIM8BIM%B~"}!1AQa"q2#BR$3br
2024-04-25 06:40:18 UTC	15261	IN	Data Raw: 4e fb e1 71 14 d9 5c 64 aa 09 0e 3a 66 b0 fc 41 f1 97 4c b3 f0 cc da ff 00 82 34 9b ff 00 1b 5c da 4f 14 77 7a 3e 94 a2 3d 52 da 29 32 5a 49 2d 6e 3c b9 54 20 fe 12 a0 9c 8c 71 cd 7e 85 5d 1b 54 8f f7 e0 00 78 18 1f 37 e1 5f 31 7c 45 f8 3f f0 db e2 86 b6 fa 8a 5e 1d 2f c6 1a 7a af 91 ab e9 17 4b 1e a7 6b b3 ee 79 8a ac 77 20 ee b2 2e 08 e3 a5 55 1c 6c 6b a7 19 fb bd 9a d7 f0 ff 00 87 f4 3c 49 52 a7 34 e5 4d 72 fe 5f 8f f9 9f 9d 69 e2 27 f8 b3 e2 bb 3f 14 69 8b 71 1d ce bd ae c3 6d a2 9b 85 68 ae ec 2d 2d 24 5d e4 21 39 84 a4 70 cb 24 80 75 62 43 67 a5 7e 80 ea 64 7f 67 de 11 c0 30 4d ff 00 a0 1a f9 27 e1 2f c2 1f 12 f8 1f e3 36 a3 a6 78 cb 52 59 a5 f0 76 98 13 4b 10 64 2e a7 0e ae f2 16 d4 25 04 61 48 f2 8c 45 01 f9 64 dc 7a 15 cf d6 5a 83 6e d3 6f 07 fd Data Ascii: Nq\d:fAL4\Owz>=R)2ZI-n<T q~]Tx7_1\|E?^/zKkyw .Ulk<IR4Mr_i'?iqmh--$]!9p$ubCg~dg0M'/6xRYvKd.%aHEdzZno

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49750	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:18 UTC	452	OUT	GET /file/400780400268/1/6Avx2xeE-E8.239216/5a7f21012854ea61ce HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:19 UTC	350	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:18 GMT Content-Type: image/jpeg Content-Length: 239216 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:18 GMT ETag: "5f2b86bcead2b04cf9d6134a8688fca68f34b96a" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:19 UTC	16034	IN	Data Raw: ff d8 ff e1 1c 94 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 93 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 34 3a 30 33 3a 32 37 20 31 37 3a 30 36 3a 34 32 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 02 58 a0 03 00 04 00 00 00 01 00 00 01 5e 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1!r2i''Adobe Photoshop 25.4 (Macintosh)2024:03:27 17:06:42X^"
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: 2e 1d f7 66 59 36 b9 d6 fd 9e 86 ce fb 1c 00 da c6 6d 0e db ee 77 f3 8e f6 2f 2f c6 bc 62 7d 5e cb e9 d7 03 5e 5d cd a5 a6 9b 01 6b c0 17 51 77 a9 e9 38 6f fa 35 a7 72 b1 20 4c 81 e9 e2 88 07 c8 fa 98 27 a1 af 07 d1 be a6 d2 cb fa 00 91 fe 19 fc eb f9 b5 47 ee fe 6a 36 5f 41 c9 36 fd a3 1a e1 5b e0 88 8d da 1f a4 d2 cf ce 63 94 7e a2 88 e8 44 34 87 0f 5d da f1 a6 ca b5 85 d0 90 0b 89 d6 4f 89 30 ab 65 d3 2c a4 0d 11 2d 17 c4 90 1e 26 fe 93 99 5e 4d 59 39 17 ee 6e 3b da fd ac a9 e5 c5 ad 73 5d e9 6e f5 1d 67 a7 ec f7 a0 75 9b b2 33 8e 45 58 f4 df 7e 25 be 9b cf d9 2c 0f 70 73 04 1f 57 0e c7 3a e7 7b 9d f4 36 59 f9 9e f5 dd 59 4b 5e 35 01 66 e6 74 7c 5b c8 36 56 1c 7b 3a 35 1f da 3e ff 00 f3 13 4e 6c bc 42 44 89 50 e1 f9 40 f4 ff 00 81 c0 cf 8b 28 8f 4d de Data Ascii: .fY6mw//b}^^]kQw8o5r L'Gj6_A6[c~D4]O0e,-&^MY9n;s]ngu3EX~%,psW:{6YYK^5ft\|[6V{:5>NlBDP@(M
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: 46 37 31 45 39 38 33 30 45 31 34 32 46 37 35 34 44 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 44 42 31 34 35 34 30 32 41 41 38 46 42 33 30 45 30 46 38 32 33 33 35 46 38 30 46 46 39 34 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 44 44 31 37 33 46 33 37 46 45 34 39 34 42 43 43 31 39 44 36 45 46 35 31 33 43 33 41 38 39 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 32 36 36 41 39 37 31 32 46 32 43 35 43 33 31 43 44 44 30 30 37 32 45 37 32 44 38 33 38 44 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 33 30 44 30 46 31 44 44 45 41 31 36 34 41 41 38 45 43 46 37 30 31 30 35 43 39 32 38 42 31 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 38 34 35 37 31 42 43 34 35 38 36 41 36 37 31 42 31 33 37 Data Ascii: F71E9830E142F754DD</rdf:li> <rdf:li>7DB145402AA8FB30E0F82335F80FF944</rdf:li> <rdf:li>7DD173F37FE494BCC19D6EF513C3A890</rdf:li> <rdf:li>8266A9712F2C5C31CDD0072E72D838DF</rdf:li> <rdf:li>830D0F1DDEA164AA8ECF70105C928B1D</rdf:li> <rdf:li>84571BC4586A671B137
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: 31 31 65 32 2d 39 32 64 30 2d 61 66 30 65 31 36 64 65 35 32 30 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 35 34 35 39 35 32 64 2d 39 64 36 35 2d 31 31 37 62 2d 39 38 38 38 2d 63 32 65 36 66 30 37 39 30 63 37 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 35 38 30 39 34 31 62 2d 33 32 62 38 2d 66 64 34 30 2d 39 61 33 30 2d 36 33 32 61 31 31 62 33 31 65 62 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 35 39 61 65 33 61 64 2d 65 32 66 33 2d 32 35 34 39 2d 38 36 35 30 2d 38 35 36 37 36 64 39 66 30 65 36 35 3c 2f 72 64 66 Data Ascii: 11e2-92d0-af0e16de5203</rdf:li> <rdf:li>adobe:docid:photoshop:2545952d-9d65-117b-9888-c2e6f0790c78</rdf:li> <rdf:li>adobe:docid:photoshop:2580941b-32b8-fd40-9a30-632a11b31ebc</rdf:li> <rdf:li>adobe:docid:photoshop:259ae3ad-e2f3-2549-8650-85676d9f0e65</rdf
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 34 62 65 65 66 65 62 2d 63 33 37 34 2d 32 30 34 35 2d 39 33 63 65 2d 66 32 62 32 36 31 34 63 32 63 38 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 34 63 38 33 35 63 39 2d 37 32 33 38 2d 31 31 37 62 2d 39 39 36 38 2d 61 62 65 62 61 31 63 37 63 65 31 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 34 64 62 31 37 39 30 2d 65 66 63 33 2d 31 31 37 61 2d 62 32 31 61 2d 64 30 61 33 33 31 31 35 66 37 32 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 35 38 38 31 30 34 65 2d Data Ascii: e:docid:photoshop:74beefeb-c374-2045-93ce-f2b2614c2c80</rdf:li> <rdf:li>adobe:docid:photoshop:74c835c9-7238-117b-9968-abeba1c7ce1c</rdf:li> <rdf:li>adobe:docid:photoshop:74db1790-efc3-117a-b21a-d0a33115f726</rdf:li> <rdf:li>adobe:docid:photoshop:7588104e-
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: 30 63 32 66 64 31 63 66 35 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 33 30 64 35 34 30 62 2d 39 35 66 38 2d 31 31 65 35 2d 38 35 64 65 2d 61 30 33 62 30 38 35 31 31 35 63 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 33 32 33 30 38 34 66 2d 31 37 36 37 2d 31 31 64 64 2d 62 64 66 30 2d 65 37 63 64 34 33 66 32 62 65 65 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 34 38 31 65 33 39 65 2d 61 38 61 30 2d 61 65 34 61 2d 61 36 38 31 2d 66 39 62 35 30 34 63 33 39 36 30 65 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 Data Ascii: 0c2fd1cf56</rdf:li> <rdf:li>adobe:docid:photoshop:c30d540b-95f8-11e5-85de-a03b085115c1</rdf:li> <rdf:li>adobe:docid:photoshop:c323084f-1767-11dd-bdf0-e7cd43f2beee</rdf:li> <rdf:li>adobe:docid:photoshop:c481e39e-a8a0-ae4a-a681-f9b504c3960e</rdf:li> <rdf:li
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: 37 31 31 38 30 43 32 39 33 30 30 46 35 43 39 35 43 39 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 34 34 46 37 39 46 37 39 44 41 39 41 45 33 31 31 41 32 44 31 44 31 35 33 35 45 41 39 42 34 46 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 34 37 39 41 45 43 43 35 42 33 31 33 45 37 31 31 39 43 34 32 45 34 32 45 36 42 41 34 32 31 31 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 34 44 46 41 31 45 30 39 44 34 41 36 44 46 31 31 38 44 33 42 43 37 33 31 46 35 41 45 43 32 33 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 34 46 45 44 38 32 32 38 42 31 38 44 45 33 31 31 41 36 39 36 43 35 32 33 37 30 35 37 34 35 35 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c Data Ascii: 71180C29300F5C95C96</rdf:li> <rdf:li>uuid:44F79F79DA9AE311A2D1D1535EA9B4FE</rdf:li> <rdf:li>uuid:479AECC5B313E7119C42E42E6BA42115</rdf:li> <rdf:li>uuid:4DFA1E09D4A6DF118D3BC731F5AEC23D</rdf:li> <rdf:li>uuid:4FED8228B18DE311A696C52370574553</rdf:li> <rdf:l
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: 45 32 38 33 35 38 38 37 37 41 42 39 45 36 33 41 43 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 36 35 43 32 38 39 33 31 33 34 43 31 31 45 34 41 30 46 33 39 35 34 43 42 44 38 31 34 41 42 42 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 37 34 32 42 31 37 35 42 32 38 37 31 31 45 34 38 39 32 37 45 42 34 41 42 41 39 41 34 42 41 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 37 42 35 38 43 38 45 39 45 33 43 31 31 45 32 41 42 41 45 44 36 44 38 30 43 39 43 45 38 32 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 37 37 66 35 31 63 37 34 2d 30 33 37 32 2d 38 35 34 38 2d 61 30 62 63 2d 35 63 66 39 34 35 62 66 31 64 34 33 3c Data Ascii: E28358877AB9E63ACE</rdf:li> <rdf:li>xmp.did:765C2893134C11E4A0F3954CBD814ABB</rdf:li> <rdf:li>xmp.did:7742B175B28711E48927EB4ABA9A4BA1</rdf:li> <rdf:li>xmp.did:77B58C8E9E3C11E2ABAED6D80C9CE826</rdf:li> <rdf:li>xmp.did:77f51c74-0372-8548-a0bc-5cf945bf1d43<
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: 97 c1 90 13 d2 5d 19 0c bf cf 5e 27 8b 51 dd 49 ea e5 88 36 5b 12 a8 06 d2 a0 a3 cc 59 d7 19 fa 4f d1 e6 de eb 40 00 00 12 60 ce 31 9e d2 6b 8d 20 ba 54 96 f3 19 b8 d6 93 a8 6a 49 ca ab d5 66 25 55 1c fd 4c b5 ea fe 08 45 f8 7e 26 52 34 88 b1 7f 9e fb 6c 89 51 b4 64 37 1d 9b 8b 93 18 7a 3c 46 d3 70 dd 36 dd be 9a 6a 09 27 11 7f 55 fe 50 f5 25 0b 88 f7 6f ec ef 0d 41 5a 64 a6 24 6c 00 1e 73 a9 62 a2 69 cf c1 b6 56 70 0d b4 88 be 53 a9 87 3d 8d d4 c5 b7 1f 58 f2 1b 6e bb a3 de 5d 16 7c 8a 55 ba 0b b8 db 1d b0 b1 6e c3 97 2c eb 63 99 f1 68 f5 9b 17 17 ac 52 c6 a4 f4 07 11 a2 7c da 57 b4 a0 bd 59 fd 93 1f 54 3d 16 1d f3 cf 58 5d 3c 54 39 35 b5 ed e0 a2 ea 19 af 37 c5 da 1b b9 06 1c d5 68 32 6b 73 52 74 cd 81 cc 9d 06 7e e3 d8 44 fa 2f b3 ac 93 da 77 c8 b2 4b Data Ascii: ]^'QI6[YO@`1k TjIf%ULE~&R4lQd7z<Fp6j'UP%oAZd$lsbiVpS=Xn]\|Un,chR\|WYT=X]<T957h2ksRt~D/wK
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: bc 0e 07 03 81 c0 e0 45 fe 11 d9 75 48 07 36 42 86 42 4a 39 3d 47 03 81 0d 1d 20 91 03 36 da 6d 8c aa 0b 2a 5e c1 61 00 f6 33 9d 9e d8 33 fc 98 a6 44 57 90 ec 1a 32 98 cb 65 d2 4c 56 dd 0d 17 04 82 e0 97 fd 13 5f 52 13 47 57 ef 64 cc c3 62 9c 78 34 13 26 09 2d 9b 46 93 23 2f b1 24 1a 23 10 65 36 c9 34 e9 38 27 f2 a2 45 c3 7e 32 ac 7d 46 d5 39 90 85 01 b4 a5 93 69 a2 90 4d 34 1b 78 d4 aa b5 72 88 d1 fc 44 a3 0f ba 16 be a2 3b 2d 48 6a 47 a2 a4 34 d2 e0 56 56 aa 63 f9 84 23 6e 56 32 83 45 7d cc ef 0b 4d 36 6e b8 86 92 84 a9 1c 17 43 1d d6 90 52 d4 66 6e 1f 24 85 19 46 8c ec 95 15 1b bc 26 8c d4 25 30 a8 ee 92 c4 88 e9 79 2b 60 d0 af 18 f1 8f 18 f1 88 75 e6 f1 a1 65 c1 3a b0 4e ac 3c ca 5f 3f 60 c8 f6 0c 83 89 14 88 94 4b 09 4f 27 b3 a4 7b 26 1c 71 e9 01 b6 Data Ascii: EuH6BBJ9=G 6m*^a33DW2eLV_RGWdbx4&-F#/$#e648'E~2}F9iM4xrD;-HjG4VVc#nV2E}M6nCRfn$F&%0y+`ue:N<_?`KO'{&q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49751	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:18 UTC	669	OUT	GET /img/SiteAndroid.jpg?2 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/css/telegram.css?237 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:19 UTC	340	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:18 GMT Content-Type: image/jpeg Content-Length: 21090 Last-Modified: Sat, 09 May 2020 18:58:54 GMT Connection: close ETag: "5eb6fd6e-5262" Expires: Mon, 29 Apr 2024 06:40:18 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:19 UTC	16044	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 01 22 a0 03 00 04 00 00 00 01 00 00 01 0e 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 0e 01 22 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*i"8Photoshop 3.08BIM8BIM%B~""}!1AQa"q2#BR$3br
2024-04-25 06:40:19 UTC	5046	IN	Data Raw: 25 51 c0 91 02 be 38 2c 46 05 4c 70 95 2a 51 e4 9c ae ff 00 af f2 35 af c0 d9 f6 73 92 d2 8d 6a ae a6 22 94 dc 94 6a 49 eb 09 25 1b 73 7b d6 69 c5 b5 7f 3d af 73 cc 7e 0f 5d f8 96 7f d9 f3 51 83 c4 17 53 cf a3 5a f8 9e d2 db c2 eb 29 3e 5a 32 59 ea 12 ea 9f 67 1f f3 cf 33 42 66 23 8f 31 90 13 90 05 7d f7 ff 00 04 de b5 d4 af 3f 63 cf 1b c7 a5 17 13 a7 8c a7 98 88 fe f9 8a 2b 7d 39 e5 0b ea 4c 6a d8 1d eb e4 2f 16 f8 9b 5e f1 04 71 dd eb 33 ad cb 5b 5b fd 8a d2 de 08 21 b4 b3 b1 b6 63 b9 a3 b6 b5 b7 48 e1 85 0b 72 db 57 2c 70 58 9c 0a fb fb fe 09 17 c7 ec ed e2 5c ff 00 d0 e5 79 ff 00 a4 56 35 ec 65 6e 58 35 19 ee e2 d3 fb ba 1f cc 5e 38 70 66 2b 2a a3 83 cb 31 93 51 a9 56 15 64 f9 6e d4 39 9a 8a 49 e9 76 ad 76 f4 f7 9b f5 3e 2c fd b6 fe 2a e9 f6 3e 19 d5 Data Ascii: %Q8,FLpQ5sj"jI%s{i=s~]QSZ)>Z2Yg3Bf#1}?c+}9Lj/^q3[[!cHrW,pX\yV5enX5^8pf+1QVdn9Ivv>,*>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49752	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:18 UTC	452	OUT	GET /file/400780400906/1/nG_ME-jFfII.256820/2569601ad1ecf4c3c2 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:19 UTC	350	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:18 GMT Content-Type: image/jpeg Content-Length: 256820 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:18 GMT ETag: "7ba40344bed02400a1b3bbcb694e50cd469f2ff7" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:19 UTC	16034	IN	Data Raw: ff d8 ff e1 20 a4 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 93 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 34 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 34 3a 30 33 3a 32 37 20 31 36 3a 31 36 3a 32 32 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 02 58 a0 03 00 04 00 00 00 01 00 00 01 5e 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1!r2i''Adobe Photoshop 25.4 (Macintosh)2024:03:27 16:16:22X^"
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: 63 3f 49 fa 2d eb 2b 17 a1 fa f8 f7 5f 76 75 76 5a d6 fa 98 b8 76 8b 0b ac 21 be a7 a1 e9 87 63 d1 6f bc 59 5f f3 2a 78 f3 13 ba c6 08 fe f8 31 ff 00 9a c7 ed 40 fc f2 07 fb a6 ff 00 e7 3a 96 64 60 57 0d eb fd 75 dd 42 a6 89 38 54 b4 d2 d7 3b f7 2c f5 ae b2 fb 1b ff 00 12 ca 37 ff 00 d0 5b ed bd 96 39 ce a2 a7 d7 8f a7 a2 c7 b7 61 0d da df 63 6a 3f cd b1 9f 9a b9 9b 7a 67 d5 cc 6e 93 8f d4 71 ac 07 35 ae 61 b3 1c 06 c9 6b ce cc aa eb c4 a1 ac db e9 fb 33 31 9f 73 6c fe 8d 4f e9 17 51 8d 6f 40 be a6 59 7f d8 a9 79 d2 c6 83 5b 5d b8 1d af 77 6d ac 7b bd f5 ff 00 21 29 cf 36 42 01 ad b8 87 a6 82 63 1c 70 16 01 dc c4 d9 b2 82 ce 9e dc ac 8a ec aa 31 b2 2a 26 f3 78 1b 0b 83 4b 2a b2 bb 6c 68 fa 36 53 6d 9f 4f d5 f4 ec fd 2f a6 a8 62 f5 4c 67 54 30 9a 58 5d 88 Data Ascii: c?I-+_vuvZv!coY_x1@:d`WuB8T;,7[9acj?zgnq5ak31slOQo@Yy[]wm{!)6Bcp1&xK*lh6SmO/bLgT0X]
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 42 35 31 41 41 31 33 30 37 31 39 42 42 36 43 44 32 38 37 42 42 30 43 41 41 33 45 44 37 36 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 43 36 34 42 45 32 36 35 38 36 44 39 31 36 35 30 41 31 36 34 44 45 39 31 44 35 42 46 35 32 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 44 30 43 32 41 31 43 45 43 44 31 41 39 42 43 36 41 33 31 31 35 37 33 36 39 46 33 41 43 39 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 44 32 45 38 35 31 31 38 35 31 31 34 30 38 30 33 31 43 41 46 34 44 43 42 36 38 30 41 39 46 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 35 45 35 35 46 34 39 36 42 36 39 33 36 37 36 30 42 35 39 41 32 34 38 41 39 31 31 34 33 35 39 30 3c 2f 72 64 66 3a 6c Data Ascii: rdf:li> <rdf:li>5B51AA130719BB6CD287BB0CAA3ED760</rdf:li> <rdf:li>5C64BE26586D91650A164DE91D5BF523</rdf:li> <rdf:li>5D0C2A1CECD1A9BC6A31157369F3AC9F</rdf:li> <rdf:li>5D2E85118511408031CAF4DCB680A9FF</rdf:li> <rdf:li>5E55F496B6936760B59A248A91143590</rdf:l
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 61 38 64 33 38 66 62 2d 61 39 35 37 2d 31 31 65 36 2d 62 34 66 30 2d 39 31 38 31 62 65 66 31 63 39 36 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 62 30 36 36 35 31 66 2d 37 66 62 37 2d 31 31 37 63 2d 39 35 32 66 2d 39 61 65 65 33 35 34 32 30 61 36 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 62 31 66 39 62 36 30 2d 35 65 39 34 2d 31 31 37 62 2d 61 31 32 62 2d 66 61 63 34 38 36 62 37 37 62 61 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 31 62 33 36 33 61 61 30 2d 65 64 63 36 Data Ascii: cid:photoshop:1a8d38fb-a957-11e6-b4f0-9181bef1c966</rdf:li> <rdf:li>adobe:docid:photoshop:1b06651f-7fb7-117c-952f-9aee35420a6f</rdf:li> <rdf:li>adobe:docid:photoshop:1b1f9b60-5e94-117b-a12b-fac486b77baa</rdf:li> <rdf:li>adobe:docid:photoshop:1b363aa0-edc6
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: 32 38 62 61 61 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 61 61 39 66 30 36 36 2d 65 39 37 30 2d 31 31 37 61 2d 61 39 31 61 2d 61 61 33 63 63 32 36 61 39 62 30 63 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 61 64 66 37 38 30 34 2d 33 35 63 66 2d 31 31 37 62 2d 38 35 61 63 2d 61 66 34 35 61 31 31 63 32 64 37 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 36 61 65 65 32 38 62 63 2d 34 63 62 37 2d 31 31 65 37 2d 38 61 32 63 2d 64 32 35 38 37 30 66 64 62 34 64 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f Data Ascii: 28baad</rdf:li> <rdf:li>adobe:docid:photoshop:6aa9f066-e970-117a-a91a-aa3cc26a9b0c</rdf:li> <rdf:li>adobe:docid:photoshop:6adf7804-35cf-117b-85ac-af45a11c2d7b</rdf:li> <rdf:li>adobe:docid:photoshop:6aee28bc-4cb7-11e7-8a2c-d25870fdb4d5</rdf:li> <rdf:li>ado
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: 70 3a 62 39 39 62 31 37 30 31 2d 39 34 37 32 2d 31 31 65 37 2d 39 30 31 62 2d 66 35 66 65 62 63 38 63 64 65 62 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 62 61 35 65 35 32 39 37 2d 30 32 64 39 2d 31 31 37 63 2d 62 66 30 64 2d 64 64 35 30 61 66 37 35 66 62 33 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 62 61 37 31 62 32 66 61 2d 37 30 39 66 2d 31 31 37 61 2d 38 65 65 31 2d 39 31 30 63 32 66 64 31 63 66 35 36 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 62 61 64 34 30 30 39 33 2d 38 61 61 63 2d 31 31 37 61 2d 62 38 64 31 2d 62 Data Ascii: p:b99b1701-9472-11e7-901b-f5febc8cdebd</rdf:li> <rdf:li>adobe:docid:photoshop:ba5e5297-02d9-117c-bf0d-dd50af75fb35</rdf:li> <rdf:li>adobe:docid:photoshop:ba71b2fa-709f-117a-8ee1-910c2fd1cf56</rdf:li> <rdf:li>adobe:docid:photoshop:bad40093-8aac-117a-b8d1-b
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: 39 46 43 43 35 42 42 33 46 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 30 34 41 34 31 34 42 34 34 37 46 38 44 46 31 31 42 42 41 34 39 45 33 33 41 42 36 32 44 32 41 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 30 35 46 38 35 41 38 38 44 32 32 34 45 37 31 31 42 38 41 45 39 34 31 35 36 34 44 43 38 45 45 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 30 36 39 30 42 32 45 36 46 39 30 45 45 37 31 31 41 32 41 38 41 35 33 43 37 43 36 39 43 30 32 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 30 37 33 37 36 32 44 42 42 32 43 37 45 33 31 31 39 41 44 30 46 33 34 31 38 46 45 45 35 36 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 30 38 35 Data Ascii: 9FCC5BB3F</rdf:li> <rdf:li>uuid:04A414B447F8DF11BBA49E33AB62D2AE</rdf:li> <rdf:li>uuid:05F85A88D224E711B8AE941564DC8EE1</rdf:li> <rdf:li>uuid:0690B2E6F90EE711A2A8A53C7C69C02C</rdf:li> <rdf:li>uuid:073762DBB2C7E3119AD0F3418FEE56B8</rdf:li> <rdf:li>uuid:085
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: 38 41 45 32 43 45 41 33 33 32 35 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 39 64 65 64 31 31 64 2d 66 66 32 31 2d 65 34 34 62 2d 39 32 33 30 2d 33 35 39 63 64 63 63 30 31 64 38 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 41 46 43 35 34 30 33 37 45 30 36 45 32 31 31 41 46 36 46 46 44 39 30 32 34 44 34 31 33 41 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 42 32 41 31 39 37 37 41 44 32 30 36 38 31 31 39 31 30 39 41 46 30 44 46 37 44 32 30 41 37 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 35 43 41 38 39 39 31 36 38 39 30 42 31 31 45 32 39 44 43 44 39 35 39 44 31 39 39 39 33 34 37 44 3c 2f 72 64 66 3a 6c Data Ascii: 8AE2CEA33250</rdf:li> <rdf:li>xmp.did:59ded11d-ff21-e44b-9230-359cdcc01d87</rdf:li> <rdf:li>xmp.did:5AFC54037E06E211AF6FFD9024D413A8</rdf:li> <rdf:li>xmp.did:5B2A1977AD2068119109AF0DF7D20A73</rdf:li> <rdf:li>xmp.did:5CA89916890B11E29DCD959D1999347D</rdf:l
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: 08 14 10 20 21 31 22 32 15 23 33 16 30 24 41 34 25 17 09 40 50 42 60 26 36 18 43 35 27 44 11 00 02 02 01 03 02 03 05 04 05 06 09 07 04 0c 0f 01 02 03 04 05 00 11 06 21 12 31 41 13 51 61 22 14 07 71 81 91 32 a1 b1 42 23 15 10 c1 52 62 72 33 20 d1 82 92 a2 b2 24 34 16 30 e1 c2 43 73 83 a3 53 63 b3 08 40 f0 d2 93 44 54 64 74 84 b4 25 35 26 36 66 76 50 c3 d3 17 60 f1 e2 a4 45 65 b5 12 00 01 03 02 02 06 07 05 06 04 05 02 05 04 03 00 01 00 11 02 21 03 31 12 41 51 61 71 22 04 10 81 91 a1 b1 32 13 20 c1 d1 42 52 f0 e1 62 72 23 05 30 f1 82 14 92 a2 b2 c2 33 40 53 50 d2 43 73 24 60 63 34 15 e2 83 74 ff da 00 0c 03 01 01 02 11 03 11 00 00 00 ef e0 08 04 02 01 00 80 40 79 03 08 19 00 c8 02 01 00 80 40 20 10 08 0d 1e f0 4e aa 13 42 1c 7e 74 f4 8c 49 71 4e 41 49 77 0e Data Ascii: !1"2#30$A4%@PB`&6C5'D!1AQa"q2B#Rbr3 $40CsSc@DTdt%5&6fvP`Ee!1AQaq"2 BRbr#03@SPCs$`c4t@y@ NB~tIqNAIw
2024-04-25 06:40:19 UTC	16384	IN	Data Raw: cd 84 04 c4 12 e7 5f 19 d6 38 22 03 8c 24 48 e9 25 5b aa dd 48 cb 22 a8 05 c9 73 cc a2 89 4c 75 75 e2 8c d5 84 2d 71 35 d7 af c4 2d 1c 4b ab 73 2f 11 53 7e d0 ef 25 4e d5 a9 7c 7c 4d 4f 5b ed 50 39 2d 7d c0 37 71 b3 ec 8b 38 92 95 a1 19 9d 76 9b 5f 52 0a 4a d2 cc f1 b2 ba 9e 59 49 68 5b 14 5c 83 a4 4a 52 86 36 6e 2a 82 69 98 01 eb 20 49 84 c0 fe a5 f2 c2 11 f1 76 89 25 8a d6 e9 ae 9f 55 c6 91 00 ad 76 52 62 14 c9 ca df d6 2a b3 de c3 1c 79 d5 2b 2a 7a ac 50 7f 7d bc e4 15 3c a4 3c 1c 6c ab 34 eb bc b5 d1 2e cc ca 7d e0 a2 e9 b4 20 99 a1 29 86 46 4f 2f ca 74 16 39 75 66 11 ad 4b 9c 64 e0 08 ca 6d 27 6d 92 4a 2b 60 a9 dc 97 a9 95 f3 a7 72 33 85 14 db 38 3a 8a 2d 24 d9 b2 86 93 8d 53 05 ec 58 60 49 c5 97 3f 90 30 26 4b da 4a 74 d2 b0 97 88 e7 25 74 b3 74 fa Data Ascii: _8"$H%[H"sLuu-q5-Ks/S~%N\|\|MO[P9-}7q8v_RJYIh[\JR6ni Iv%UvRby+*zP}<<l4.} )FO/t9ufKdm'mJ+`r38:-$SX`I?0&KJt%tt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49753	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:18 UTC	671	OUT	GET /img/SiteIconAndroid.svg HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/css/telegram.css?237 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:19 UTC	340	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:19 GMT Content-Type: image/svg+xml Content-Length: 999 Last-Modified: Mon, 18 Apr 2022 20:19:52 GMT Connection: close ETag: "625dc7e8-3e7" Expires: Mon, 29 Apr 2024 06:40:19 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:19 UTC	999	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 32 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 32 20 32 37 22 20 77 69 64 74 68 3d 22 32 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 6d 31 39 2e 33 35 20 31 31 63 2e 37 35 20 30 20 31 2e 33 35 2e 36 37 20 31 2e 33 35 20 31 2e 35 76 36 63 30 20 2e 38 33 2d 2e 36 20 31 2e 35 2d 31 2e 33 35 20 31 2e 35 73 2d 31 2e 33 35 2d 2e 36 37 2d 31 2e 33 35 2d 31 2e 35 76 2d 36 63 30 2d 2e 38 33 2e 36 2d 31 2e 35 20 31 2e 33 35 2d 31 2e 35 7a 6d 2d 31 36 2e 37 20 30 63 2e 37 35 20 30 20 31 2e 33 35 2e 36 37 20 31 2e 33 35 20 31 2e 35 76 36 63 30 20 2e 38 33 2d 2e 36 20 31 2e 35 2d 31 2e 33 35 20 31 2e 35 73 2d 31 2e 33 35 2d 2e Data Ascii: <svg height="27" viewBox="0 0 22 27" width="22" xmlns="http://www.w3.org/2000/svg"><path d="m19.35 11c.75 0 1.35.67 1.35 1.5v6c0 .83-.6 1.5-1.35 1.5s-1.35-.67-1.35-1.5v-6c0-.83.6-1.5 1.35-1.5zm-16.7 0c.75 0 1.35.67 1.35 1.5v6c0 .83-.6 1.5-1.35 1.5s-1.35-.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49754	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:18 UTC	669	OUT	GET /img/SiteIconApple.svg HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/css/telegram.css?237 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:19 UTC	340	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:19 GMT Content-Type: image/svg+xml Content-Length: 443 Last-Modified: Mon, 18 Apr 2022 20:19:52 GMT Connection: close ETag: "625dc7e8-1bb" Expires: Mon, 29 Apr 2024 06:40:19 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:19 UTC	443	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 32 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 20 32 37 22 20 77 69 64 74 68 3d 22 32 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 6d 31 37 2e 34 39 20 32 35 2e 35 63 2d 31 2e 33 35 20 31 2e 33 31 2d 32 2e 38 34 20 31 2e 31 2d 34 2e 32 36 2e 34 39 2d 31 2e 35 31 2d 2e 36 33 2d 32 2e 38 39 2d 2e 36 37 2d 34 2e 34 39 20 30 2d 31 2e 39 38 2e 38 35 2d 33 2e 30 34 2e 36 2d 34 2e 32 33 2d 2e 34 39 2d 36 2e 37 36 2d 36 2e 39 33 2d 35 2e 37 36 2d 31 37 2e 34 38 20 31 2e 39 31 2d 31 37 2e 38 38 20 31 2e 38 37 2e 31 20 33 2e 31 37 20 31 2e 30 33 20 34 2e 32 37 20 31 2e 31 31 20 31 2e 36 33 2d 2e 33 33 20 33 2e 31 39 2d 31 Data Ascii: <svg height="27" viewBox="0 0 21 27" width="21" xmlns="http://www.w3.org/2000/svg"><path d="m17.49 25.5c-1.35 1.31-2.84 1.1-4.26.49-1.51-.63-2.89-.67-4.49 0-1.98.85-3.04.6-4.23-.49-6.76-6.93-5.76-17.48 1.91-17.88 1.87.1 3.17 1.03 4.27 1.11 1.63-.33 3.19-1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49755	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:18 UTC	663	OUT	GET /img/twitter.png HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/css/telegram.css?237 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:19 UTC	337	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:19 GMT Content-Type: image/png Content-Length: 1272 Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Connection: close ETag: "5a05e7c6-4f8" Expires: Mon, 29 Apr 2024 06:40:19 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:19 UTC	1272	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 00 11 08 06 00 00 00 32 86 e7 80 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR2tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49760	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:20 UTC	452	OUT	GET /file/464001897/3/f0Go0rLpEwk.11343.png/dd4eeb46cc5efc0688 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:20 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:20 GMT Content-Type: image/png Content-Length: 11343 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:20 GMT ETag: "183936b397813281d8de1b217deb5c565bde1c5b" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:20 UTC	11343	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 2c 04 49 44 41 54 78 da ed 9d 77 7c 9c d5 95 f7 7f e7 3c 65 66 a4 51 1f 59 ee 0d 9b 62 03 a1 9b 1a 5a c8 66 97 00 a9 ec 4b 08 ec 66 df 6c 58 08 01 43 b2 c9 92 bc 9b c0 6e 20 d9 bc 09 2d 2c 81 dd 77 b3 29 4b 0a 29 18 42 09 69 84 00 a1 f7 8e c1 45 96 6d 49 a3 ae a9 4f 39 e7 fd 63 46 33 cf a8 59 b6 25 5b 92 9f f3 f9 e8 a3 d1 68 e6 29 f7 7e 9f d3 ee b9 f7 02 a1 84 12 4a 28 a1 84 12 4a 28 a1 84 12 4a 28 a1 84 12 4a 28 a1 84 12 4a 28 a1 84 12 4a 28 a1 84 12 ca 14 08 85 4d 00 e8 f5 89 79 2e c9 62 62 aa 82 af 06 0c c3 84 af 06 48 0d 28 f9 aa 92 b4 22 d2 01 bf af 9d 2e 47 3e 6c b1 10 c0 9d 87 ec 2b 60 a7 31 Data Ascii: PNGIHDRg-bKGD,IDATxw\|<efQYbZfKflXCn -,w)K)BiEmIO9cF3Y%[h)~J(J(J(J(J(J(My.bbH(".G>l+`1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49756	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:20 UTC	452	OUT	GET /file/464001737/4/Fn57W9l3xI0.15286.png/d4b936ecc2c939f4fa HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:20 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:20 GMT Content-Type: image/png Content-Length: 15286 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:20 GMT ETag: "93939a07f86b42b04b779841ba81a1ef4ba2d929" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:20 UTC	15286	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 3b 6b 49 44 41 54 78 da ed bd 77 bc 5d 77 75 27 fa 5d eb b7 cb a9 b7 37 e9 ea aa 77 d9 72 af d8 98 19 c0 98 1a 08 a1 3c 08 25 61 02 21 43 06 cc e4 91 f2 48 1c 32 04 78 84 c4 36 e3 84 97 61 26 81 54 20 9d 84 66 c7 36 c6 06 db 10 63 5b ee 92 25 ab 97 db eb 39 67 b7 b5 de 1f 7b 9f 76 bb a4 2b e9 ea ea ae 8f f4 39 7b 9f b3 ef 2e bf df 77 af f6 5b 05 58 a6 65 5a a6 65 5a a6 65 5a a6 65 5a a6 65 5a a6 65 5a a6 65 5a a6 65 5a a6 b3 40 b4 d4 1e e8 86 1b 2e 6e 46 a8 3b 35 0c 5b 15 66 2b 19 cd 92 ea 88 10 0d b1 62 38 52 1d 0c 34 18 54 95 81 a3 47 f7 f5 1f 3b 86 c2 32 0c 96 01 78 5a b4 73 e7 ce 6c 43 46 3f 08 Data Ascii: PNGIHDRg-bKGD;kIDATxw]wu']7wr<%a!CH2x6a&T f6c[%9g{v+9{.w[XeZeZeZeZeZeZeZeZ@.nF;5[f+b8R4TG;2xZslCF?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49759	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:20 UTC	586	OUT	GET /js/tgsticker.js?31 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:20 UTC	393	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:20 GMT Content-Type: application/javascript Content-Length: 24604 Last-Modified: Wed, 29 Mar 2023 11:31:32 GMT Connection: close ETag: "64242194-601c" Expires: Mon, 29 Apr 2024 06:40:20 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-04-25 06:40:20 UTC	15991	IN	Data Raw: 76 61 72 20 52 4c 6f 74 74 69 65 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 76 61 72 20 72 6c 6f 74 74 69 65 20 3d 20 7b 7d 2c 20 61 70 69 49 6e 69 74 53 74 61 72 74 65 64 20 3d 20 66 61 6c 73 65 2c 20 61 70 69 49 6e 69 74 65 64 20 3d 20 66 61 6c 73 65 2c 20 69 6e 69 74 43 61 6c 6c 62 61 63 6b 73 20 3d 20 5b 5d 3b 0a 20 20 76 61 72 20 64 65 76 69 63 65 52 61 74 69 6f 20 3d 20 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 20 7c 7c 20 31 3b 0a 0a 20 20 76 61 72 20 73 74 61 72 74 54 69 6d 65 20 3d 20 2b 28 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 64 54 28 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 27 5b 27 20 2b 20 28 28 2b 28 6e 65 77 20 44 61 74 65 28 29 29 20 2d 20 73 74 61 72 74 54 Data Ascii: var RLottie = (function () { var rlottie = {}, apiInitStarted = false, apiInited = false, initCallbacks = []; var deviceRatio = window.devicePixelRatio \|\| 1; var startTime = +(new Date()); function dT() { return '[' + ((+(new Date()) - startT
2024-04-25 06:40:20 UTC	8613	IN	Data Raw: 65 72 2e 73 65 6e 64 51 75 65 72 79 28 27 72 65 6e 64 65 72 46 72 61 6d 65 27 2c 20 69 74 65 6d 2e 72 65 71 49 64 2c 20 72 65 61 6c 46 72 61 6d 65 4e 6f 2c 20 69 74 65 6d 2e 63 6c 61 6d 70 65 64 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 69 74 65 6d 2e 77 6f 72 6b 65 72 2e 73 65 6e 64 51 75 65 72 79 28 27 72 65 6e 64 65 72 46 72 61 6d 65 27 2c 20 69 74 65 6d 2e 72 65 71 49 64 2c 20 72 65 61 6c 46 72 61 6d 65 4e 6f 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2f 2f 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 64 54 28 29 2c 20 27 5b 27 2b 74 68 69 73 2e 70 6c 61 79 65 72 49 64 2b 27 2e 27 2b 69 74 65 6d 2e 72 65 71 49 64 2b 27 5d 27 2c 20 27 72 65 71 75 65 73 74 20 66 72 61 6d 65 23 27 2b 66 72 61 6d 65 4e 6f 2b 27 20 28 Data Ascii: er.sendQuery('renderFrame', item.reqId, realFrameNo, item.clamped); } else { item.worker.sendQuery('renderFrame', item.reqId, realFrameNo); } // console.log(dT(), '['+this.playerId+'.'+item.reqId+']', 'request frame#'+frameNo+' (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49757	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:20 UTC	452	OUT	GET /file/464001560/2/n7EACfx4FPY.16465.png/7318c11715aa2ec45b HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:20 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:20 GMT Content-Type: image/png Content-Length: 16465 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:20 GMT ETag: "ad24af7a174e71673b28f7e827a85934048a9cd7" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:20 UTC	16036	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 40 06 49 44 41 54 78 da ed bd 77 98 5d 65 b5 3f fe 59 6b 97 d3 cf f4 99 4c 7a 32 69 04 42 48 20 04 44 9a 20 28 20 4d 01 bd a8 28 2a 5c b1 5d c4 de b8 58 2e 96 8b c8 b5 7c af bd 5f 10 7f 2a 5d 11 10 95 8e 69 b4 50 d2 eb 64 32 fd f4 b3 cb 5a bf 3f 4e 99 33 25 c9 4c 32 43 02 9c f5 3c fb 39 67 9f b3 cf bb f7 79 df cf bb fa bb 5e a0 4a 55 aa 52 95 aa 54 a5 2a 55 a9 4a 55 aa d2 ab 9e 2e fd 08 e2 ef fb 2c 5a 0e 85 67 e1 ea 70 bc b6 e8 83 d7 19 a7 36 b5 c6 b7 c5 63 35 db 3e fa d5 f0 15 55 00 56 e9 e5 24 0a 04 22 df 23 50 08 00 d8 34 2f af 02 b0 4a 2f 1b 7d f4 ab a1 2b 49 68 6e e9 5c 55 1e aa 02 b0 4a 2f 0b Data Ascii: PNGIHDRg-bKGD@IDATxw]e?YkLz2iBH D ( M(\]X.\|_]iPd2Z?N3%L2C<9gy^JURT*UJU.,Zgp6c5>UV$"#P4/J/}+Ihn\UJ/
2024-04-25 06:40:20 UTC	429	IN	Data Raw: bf 68 3d 5c 9c 03 42 2b 04 49 08 1e c0 f9 f4 e2 b8 3f e9 ad 5a 83 30 e6 40 31 17 8a 56 00 4d 20 34 11 d0 04 a0 19 85 d7 26 02 e2 23 33 ae 32 f0 3c 00 36 14 36 d1 f0 1d 8a b4 b0 65 42 1f 80 4e 00 bb 01 74 2a d0 09 45 27 18 9d 50 6c 07 b0 0e 51 ac 1f 77 77 c7 ad 6a 20 88 a5 00 4e 04 c3 82 60 2d 4c fc 15 67 8d 77 99 f7 57 13 00 07 77 60 14 01 9c 02 c2 3c 14 7c 8c 02 c6 5a b8 78 7c 68 42 eb 84 d1 b5 ca 38 1c 01 58 08 80 11 00 15 0f 94 5f 4d 78 70 40 70 00 e4 21 c5 c3 47 1e 4d c8 e3 14 e4 41 f4 f2 88 fc 7b 74 2a 7c 1c 07 2d ef 98 e9 00 78 0a 39 3c 8c 8b c9 c7 6b 80 26 3e 4c 71 9b 2e 04 63 39 80 86 e2 27 49 30 5e 82 8b f5 b8 80 b6 bd 26 7c 2f b7 aa 81 00 66 81 30 17 8c 39 d0 22 e7 15 6c 03 e1 71 9c 4b 5b 5f ab 6e 29 3a 08 83 11 42 a4 28 4a 05 53 51 b1 e3 7a 11 Data Ascii: h=\B+I?Z0@1VM 4&#32<66eBNtE'PlQwwj N`-LgwWw`<\|Zx\|hB8X_Mxp@p!GMA{t\|-x9<k&>Lq.c9'I0^&\|/f09"lqK[_n):B(JSQz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49758	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:20 UTC	412	OUT	GET /img/SiteiOS.jpg?2 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:20 UTC	340	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:20 GMT Content-Type: image/jpeg Content-Length: 31305 Last-Modified: Sat, 09 May 2020 18:58:54 GMT Connection: close ETag: "5eb6fd6e-7a49" Expires: Mon, 29 Apr 2024 06:40:20 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:20 UTC	16044	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 01 ba a0 03 00 04 00 00 00 01 00 00 01 0e 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 0e 01 ba 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*i8Photoshop 3.08BIM8BIM%B~"}!1AQa"q2#BR$3br
2024-04-25 06:40:20 UTC	15261	IN	Data Raw: 4e fb e1 71 14 d9 5c 64 aa 09 0e 3a 66 b0 fc 41 f1 97 4c b3 f0 cc da ff 00 82 34 9b ff 00 1b 5c da 4f 14 77 7a 3e 94 a2 3d 52 da 29 32 5a 49 2d 6e 3c b9 54 20 fe 12 a0 9c 8c 71 cd 7e 85 5d 1b 54 8f f7 e0 00 78 18 1f 37 e1 5f 31 7c 45 f8 3f f0 db e2 86 b6 fa 8a 5e 1d 2f c6 1a 7a af 91 ab e9 17 4b 1e a7 6b b3 ee 79 8a ac 77 20 ee b2 2e 08 e3 a5 55 1c 6c 6b a7 19 fb bd 9a d7 f0 ff 00 87 f4 3c 49 52 a7 34 e5 4d 72 fe 5f 8f f9 9f 9d 69 e2 27 f8 b3 e2 bb 3f 14 69 8b 71 1d ce bd ae c3 6d a2 9b 85 68 ae ec 2d 2d 24 5d e4 21 39 84 a4 70 cb 24 80 75 62 43 67 a5 7e 80 ea 64 7f 67 de 11 c0 30 4d ff 00 a0 1a f9 27 e1 2f c2 1f 12 f8 1f e3 36 a3 a6 78 cb 52 59 a5 f0 76 98 13 4b 10 64 2e a7 0e ae f2 16 d4 25 04 61 48 f2 8c 45 01 f9 64 dc 7a 15 cf d6 5a 83 6e d3 6f 07 fd Data Ascii: Nq\d:fAL4\Owz>=R)2ZI-n<T q~]Tx7_1\|E?^/zKkyw .Ulk<IR4Mr_i'?iqmh--$]!9p$ubCg~dg0M'/6xRYvKd.%aHEdzZno

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49761	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:20 UTC	685	OUT	GET /file/464001132/3/-1qvqKPZsQQ.17975.png/7d57d7159cf4fbe9b2 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:21 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:21 GMT Content-Type: image/png Content-Length: 17975 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:21 GMT ETag: "fa9a38332023332be262ffbb44b3d98e6ed68a45" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:21 UTC	16036	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 45 ec 49 44 41 54 78 da ed 7d 77 9c 1d 67 75 f6 73 ce cc dc 7e ef f6 be aa 2b 69 25 cb b2 2d b9 57 8c 8d 8c 31 25 60 1b db b4 00 09 7c e4 0b 04 ec 00 c1 32 04 e3 d0 4c 42 4f 48 02 49 3e 7a 89 83 03 21 60 1b e3 82 2b 36 ee 4d 56 b1 b4 ea db db ed 65 e6 9c ef 8f b9 75 8b 74 b5 5a ed 4a f6 be bf df fd dd 7b 77 e7 ce cc fb be cf 9c f2 bc e7 3d 07 58 68 0b 6d a1 2d b4 85 b6 d0 16 da 42 5b 68 af b4 46 0b 43 30 75 db 04 b4 08 d0 6e 02 61 07 88 80 39 cc 40 58 80 10 00 1b 40 8c 44 62 04 c4 08 88 e5 80 71 3f d0 73 13 90 5c 18 bd 05 00 1e 0e d0 9a 00 9c 0b e6 13 a0 da 0d a2 6e 00 dd 44 54 7b b8 e7 52 55 01 b0 Data Ascii: PNGIHDRg-bKGDEIDATx}wgus~+i%-W1%`\|2LBOHI>z!`+6MVeutZJ{w=Xhm-B[hFC0una9@X@Dbq?s\nDT{RU
2024-04-25 06:40:21 UTC	1939	IN	Data Raw: 9b fa 6e 83 ec 8c 9a 55 67 c8 9a 12 74 49 1b 34 6e 03 51 1b 34 21 57 b3 41 22 9b 4e 4f e0 86 33 92 f0 18 53 03 41 15 c2 8d d7 01 8d 1f 9e 3d a0 24 1e 12 d9 ff 97 20 8d 1e b3 99 ba 9c ad 19 d1 1e a7 10 f5 dc eb 91 c1 2e fa e8 dc d4 90 9b f5 04 95 37 dd 96 8c 7f fa 75 c1 38 40 97 01 80 46 45 a9 c6 50 0a 1e 3c f3 7c 56 a1 77 ed 71 63 82 28 29 84 a4 2d 30 48 61 90 62 62 41 41 55 41 56 14 09 5b 69 2c a7 34 94 51 1a c8 80 c7 6c a6 8c 10 95 3d 58 0c 91 f7 9c 90 d2 5b de 30 86 37 af c8 b1 c1 d3 3f 74 44 20 a4 1e 21 cd bc 24 14 bc 40 c1 47 14 53 26 18 f9 7f 2a bd 7f 0d 42 fa 98 05 9f 26 44 9c 67 73 28 8e 99 ea 5f 9b 1f 4d fe f1 b8 95 80 79 49 42 d9 af 37 3d 42 44 67 00 80 32 c4 58 ef 01 37 4d 9f 65 c0 76 54 2e ff 4d 2d 6e eb 99 2c f9 dc 6d 95 f9 0a 06 5a 00 cb c1 Data Ascii: nUgtI4nQ4!WA"NO3SA=$ .7u8@FEP<\|Vwqc()-0HabbAAUAV[i,4Ql=X[07?tD !$@GS&*B&Dgs(_MyIB7=BDg2X7MevT.M-n,mZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49765	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:20 UTC	597	OUT	GET /js/tgsticker-worker.js?14 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:21 UTC	392	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:21 GMT Content-Type: application/javascript Content-Length: 5937 Last-Modified: Wed, 29 Jun 2022 21:52:44 GMT Connection: close ETag: "62bcc9ac-1731" Expires: Mon, 29 Apr 2024 06:40:21 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-04-25 06:40:21 UTC	5937	IN	Data Raw: 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 72 6c 6f 74 74 69 65 2d 77 61 73 6d 2e 6a 73 27 29 3b 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 70 61 6b 6f 2d 69 6e 66 6c 61 74 65 2e 6d 69 6e 2e 6a 73 27 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 52 4c 6f 74 74 69 65 49 74 65 6d 28 72 65 71 49 64 2c 20 6a 73 53 74 72 69 6e 67 2c 20 77 69 64 74 68 2c 20 68 65 69 67 68 74 2c 20 66 70 73 29 20 7b 0a 20 20 74 68 69 73 2e 73 74 72 69 6e 67 4f 6e 57 61 73 6d 48 65 61 70 20 3d 20 6e 75 6c 6c 3b 0a 20 20 74 68 69 73 2e 68 61 6e 64 6c 65 20 3d 20 6e 75 6c 6c 3b 0a 20 20 74 68 69 73 2e 66 72 61 6d 65 43 6f 75 6e 74 20 3d 20 30 3b 0a 0a 20 20 74 68 69 73 2e 72 65 71 49 64 20 3d 20 72 65 71 49 64 3b 0a 20 20 74 68 69 73 2e 77 69 64 74 68 20 3d 20 77 69 64 74 68 3b 0a Data Ascii: importScripts('rlottie-wasm.js');importScripts('pako-inflate.min.js');function RLottieItem(reqId, jsString, width, height, fps) { this.stringOnWasmHeap = null; this.handle = null; this.frameCount = 0; this.reqId = reqId; this.width = width;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49764	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:20 UTC	689	OUT	GET /file/464001828/11e9a/1yY7a721t4o.30567.png/e113973dae2bee508b HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:21 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:21 GMT Content-Type: image/png Content-Length: 30567 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:21 GMT ETag: "a30234722b2883f211eb0bad5c73c2ef2fe73a53" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:21 UTC	16036	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 01 40 08 06 00 00 00 cd 90 a5 aa 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 77 1c 49 44 41 54 78 da ed 9d 77 58 54 67 f6 c7 07 50 93 68 12 a3 82 25 46 d3 8c d9 64 f3 db ec 46 2c 8c 46 2c a0 cc 1d 14 29 33 14 15 1b 16 ec 08 0c 88 48 94 22 8a c0 d0 bb 62 c5 2e 4d b1 62 8b bd 80 8a 9a 18 7b ef bd 20 cc 7c b9 bf 3f 64 c6 81 b9 f7 ce 1d 9a a8 ef f7 79 ce b3 bb 59 18 ee cc dc fb c9 79 df 73 de ef 11 08 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 ea a1 06 f4 71 6a 65 67 21 a5 6c fb 4a 66 da f5 95 2c b4 eb 2b 4d b4 Data Ascii: PNGIHDR@@bKGDwIDATxwXTgPh%FdF,F,)3H"b.Mb{ \|?dyYysqjeg!lJf,+M
2024-04-25 06:40:21 UTC	14531	IN	Data Raw: af 2f 90 69 da 18 29 3f 19 31 5e 43 f8 2f 4d 60 6e c5 be f4 ed 27 95 62 56 6c ac ba d5 25 be 26 ce f2 d6 40 24 65 65 55 c8 fe 42 92 92 68 eb d7 a0 d2 7a 0f 7d ec ec 5e 9f 50 79 0d 37 44 2e 5b 86 c4 cc 4c a4 6d d8 80 b4 8d 1b 69 55 a4 6e d8 80 c4 cc 4c 44 ad 5c 89 79 0b 17 56 80 a5 7f 54 14 46 7a 79 f1 2a 4c f4 77 74 44 6d 5b 71 f5 73 74 d4 79 1d dd 28 6a 2c 21 c1 87 ba 04 8e 34 91 b1 cd 03 a1 8f 75 a8 71 08 5e 74 ff 0c 4c 56 56 8f 07 99 e0 b9 63 5b ec ef f5 05 d2 7e 6e 50 25 10 d6 66 d8 f5 ee 0a ae 2a a7 2c 2c 4c fd 30 d7 c5 e9 0e 5e 4b df 9c 1c 46 5b 2c b6 fd 3f db 91 23 11 92 9c 4c 87 a6 a6 22 61 dd ba 0a d0 63 8b d4 0d 1b 10 b1 74 69 05 08 aa c2 6b ee 5c d8 8e 1c c9 fa b9 d9 bb b9 d5 fa 69 92 59 b1 b1 3a cf 16 0b 29 4a 29 14 89 ec 09 0d 3e 40 29 22 4d Data Ascii: /i)?1^C/M`n'bVl%&@$eeUBhz}^Py7D.[LmiUnLD\yVTFzyLwtDm[qsty(j,!4uq^tLVVc[~nP%f,,L0^KF[,?#L"actik\iY:)J)>@)"M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49762	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:20 UTC	685	OUT	GET /file/464001880/3/xOpm7ohoHQ0.12690.png/feb1e161b1d3608613 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:21 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:21 GMT Content-Type: image/png Content-Length: 12690 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:21 GMT ETag: "9b666309f437dfb32688ee016a9904703de41927" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:21 UTC	12690	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 31 47 49 44 41 54 78 da ed 7d 79 78 64 65 95 f7 ef 9c bb d4 92 a4 b2 a7 93 de d2 fb 06 34 34 49 b3 b4 03 8c 8a b8 a0 a0 e8 30 3a 30 8e cb 20 3a a2 ac a2 23 38 c8 7c fa b9 01 2d 82 20 cc a8 c3 28 32 ea a0 33 9f 82 82 3a 82 7c 80 40 9a e6 eb 86 66 e9 bd 9b 4e 67 df 53 cb 5d ce f9 fe a8 4a 2d d9 3a e9 54 96 6e ea 3c 4f 3d a9 54 dd ba f7 bd ef fb bb 67 7f cf 01 0a 54 a0 59 24 a3 30 05 05 9a 0c 6d dc b8 b1 72 fe fc f9 b7 2f 58 b0 20 d4 dc dc fc d2 54 cf c7 85 29 2d d0 64 48 44 2e 21 a2 cb 54 f5 ee 7c 9c af 00 c0 02 4d 96 4a 52 7f 23 05 00 16 68 c6 89 88 34 f5 56 0b 00 2c d0 8c 93 aa fe 41 55 07 55 f5 ff Data Ascii: PNGIHDRg-bKGD1GIDATx}yxde44I0:0 :#8\|- (23:\|@fNgS]J-:Tn<O=TgTY$0mr/X T)-dHD.!T\|MJR#h4V,AUU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49763	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:21 UTC	685	OUT	GET /file/464001453/3/mNzXWC3RX0c.15740.png/9ce5fa5f3fb74460b4 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:21 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:21 GMT Content-Type: image/png Content-Length: 15740 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:21 GMT ETag: "9663b372030cf4b80b2b7ab98f8e689847388957" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:21 UTC	15740	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 3d 31 49 44 41 54 78 da ed 7d 77 9c 1c 67 79 ff f7 79 66 b6 dd ee de 5e 2f 3a f5 6e c9 b2 b1 2c 37 c0 c6 54 63 30 01 13 64 1b 9b 50 c2 07 1c 08 e0 1a 02 84 e0 98 84 40 30 6e 10 20 0e e4 87 09 01 5c 28 06 4c 71 c0 80 83 8d 1b 2e b2 2d c9 92 d5 75 d2 9d ae 97 ed 33 f3 3c bf 3f 66 77 67 f6 9a ee a4 6b e2 ee f9 7c ee 73 bb b3 bb 33 ef bc ef 77 9e f6 3e 05 98 a7 79 9a a7 13 85 f8 3d 00 dd 01 60 c9 fc 5c cc d3 74 d3 4a 80 1d 90 a1 80 71 cf fc 74 4c 0e 99 f3 53 30 5e 32 4e 03 81 dd d7 7a fa fc 7c 4c 92 4c 99 9f 82 f1 92 ae f6 bd 59 0a 20 34 3f 27 f3 00 9c 4e 00 ae 29 bd 24 62 57 24 cf d3 3c 00 a7 8d 68 f5 Data Ascii: PNGIHDRg-bKGD=1IDATx}wgyyf^/:n,7Tc0dP@0n \(Lq.-u3<?fwgk\|s3w>y=`\tJqtLS0^2Nz\|LLY 4?'N)$bW$<h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49766	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:21 UTC	416	OUT	GET /img/SiteDesktop.jpg?2 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:21 UTC	341	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:21 GMT Content-Type: image/jpeg Content-Length: 97628 Last-Modified: Tue, 11 Jun 2019 13:49:53 GMT Connection: close ETag: "5cffb181-17d5c" Expires: Mon, 29 Apr 2024 06:40:21 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:21 UTC	16043	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyd1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xm
2024-04-25 06:40:21 UTC	16384	IN	Data Raw: d9 39 25 8c aa 28 9b 10 55 48 99 53 2a b2 c3 2a 44 c7 b2 49 52 a0 c5 8a f9 3b 35 e6 db 5c 66 1e 85 61 0d 04 ca d0 4b 71 2c 92 14 83 42 d0 46 3a 5d 31 f2 95 dc 9d b9 e7 1e 7a e6 6d a9 71 77 5d d3 b6 bb 4d 27 16 f1 7d 9e 97 45 25 4c 53 39 3d 55 f3 a4 33 97 16 9b f7 6c 34 f4 e3 c0 ee f7 bd e3 ec d6 4a 54 ec ae d6 18 55 b8 ba e0 d1 3f c0 e1 47 61 8b b3 cd e0 6c dc 7b 07 2c c9 a8 0f 61 11 e3 b2 c4 fa 66 a2 47 71 a7 ed d3 64 6a 7d 36 2a b2 7a 4a bb a4 9a db 69 0a 49 12 96 7c cb 54 4d 52 ce 98 ae 5b 7a 3c 73 7d d3 b7 db ef 94 6a a7 c4 f0 8f 02 a3 8a 8f 0e 2f 16 ea e8 b6 2d 86 8f 7b 58 76 ee ad 76 59 3e f9 5c a5 be e1 ce 8e df 0c 71 9a 9b 6d 4d cb 8b 05 54 95 15 5b ab 77 16 23 b8 75 7b cf 49 80 ee 35 09 f9 24 94 c8 91 11 75 71 9e 90 96 c9 29 41 3c eb 26 85 ba 48 Data Ascii: 9%(UHS*DIR;5\faKq,BF:]1zmqw]M'}E%LS9=U3l4JTU?Gal{,afGqdj}6zJiI\|TMR[z<s}j/-{XvvY>\qmMT[w#u{I5$uq)A<&H
2024-04-25 06:40:21 UTC	16384	IN	Data Raw: 11 a1 a4 87 b7 65 f9 b6 7a 86 94 f3 f9 9b 6e 37 63 b2 de 29 d3 72 8e 09 62 a8 fa 2b 86 ea 9c a6 5a f6 59 dc 9a ba a9 71 2a 27 bd ee 72 6e 95 aa e9 65 05 bb dd 39 65 7b 5d 5b 88 4d 7a 75 2e 48 9c 9a 6d bd 5b 12 31 87 64 ca ae 7e 6d 74 b2 6d 05 16 43 ec 30 6a 4c 86 1e 42 b4 5f 22 8b 52 22 2e dd 30 e9 bc cb 63 52 77 e1 38 ce 16 ec b8 ba cd 25 44 d6 29 d1 ee 6b ac da 65 21 dc e6 64 94 b8 a3 25 5c 5d 5e 18 55 e0 b6 f4 a5 e5 2d 0b b5 f3 ea 5e 7e b2 d2 33 91 2c 60 bc e4 59 91 5d fe b8 c3 cc ab 91 4d 2b 8a 8b 54 69 a7 03 32 f3 70 1d 46 46 fd 9c ce 52 17 f2 f2 e2 b3 35 54 fa 55 5e 24 d5 b3 a4 cd 5c 66 b8 dc c7 71 f5 72 9f a7 49 54 a2 3f 7e 0c 73 23 32 e1 c0 7b 1e 9d 04 f2 16 1b db dd 43 f3 51 c2 e6 ee 45 66 6e f4 f1 cb e7 64 e3 d5 87 e9 6a 92 f2 99 eb ae a7 ef 79 Data Ascii: ezn7c)rb+ZYq*'rne9e{][Mzu.Hm[1d~mtmC0jLB_"R".0cRw8%D)ke!d%\]^U-^~3,`Y]M+Ti2pFFR5TU^$\fqrIT?~s#2{CQEfndjy
2024-04-25 06:40:21 UTC	16384	IN	Data Raw: f2 b2 bf 92 51 b9 7a 0b 8b ba ed 29 cd 71 28 b5 6d d1 a9 4e 8d cd 45 d1 70 c5 e3 56 91 e9 6f e2 c7 cc da d5 6e 37 5c 5b 5f bb 5b a1 8b 6d 54 3d d6 e9 7a 56 df c4 b7 c8 72 aa 2c 5e 4b ab 9d 97 ca ab ba 7b 1f 93 7b 3e ba 2d 85 85 34 7b 14 be 6d a1 66 ae 53 25 19 72 6a 64 d5 ed dc 96 46 dc 63 16 da bb 2a d3 1d d4 dd b8 bb 4e b9 08 e6 24 e4 d2 ac 16 dc 37 f5 9d ed 74 6b d1 9e dc 74 c5 bd 58 be f0 ee 27 58 7d 1f d9 54 6c fe 1b 92 e1 d8 6b 5b 69 b9 54 55 56 b9 a4 4b d5 5a 1c 8c bf 72 d7 92 e4 c9 af aa 76 b6 aa c1 d4 f8 3a e3 7d b5 bc 49 51 af 44 19 af 9b 79 7b cf f1 27 b7 a1 fa 36 1b a5 7e ca fc 68 fa 57 b4 f1 07 77 bc a7 5b 91 64 f0 ea ae 37 09 50 22 6e 3e 77 73 55 37 1c dc 9b 9a ea 27 1a 9d 9e 5f da c3 9d 45 4a cb 89 ae 80 d4 c8 13 49 69 7d af a6 1b aa ef 92 Data Ascii: Qz)q(mNEpVon7\[_[mT=zVr,^K{{>-4{mfS%rjdFc*N$7tktX'X}Tlk[iTUVKZrv:}IQDy{'6~hWw[d7P"n>wsU7'_EJIi}
2024-04-25 06:40:21 UTC	16384	IN	Data Raw: cc 8b 3e b9 a9 63 1f 91 6f cd 5f 02 34 4c 76 2a 94 b8 b8 f5 45 4c 18 4c d6 54 d2 c7 71 c5 2c 99 61 b4 f3 38 b5 ad 66 a5 ad 4a 3c cf 50 af e2 fa fe 83 14 72 ca 38 45 e1 e4 2d 5d ce ed e4 59 0c 76 62 5e 4f b4 b4 89 1d d6 5e 62 34 a9 6d a9 86 9e 61 a9 2c 30 f2 1b 43 08 49 3a d3 33 1d 4a 55 da 49 71 45 e5 14 f8 f5 f5 7d 7f 41 5f 87 eb 20 6a 77 09 ba 97 df 7c a8 6b 6c fb f8 6f c3 36 6e 18 6e 7c 76 89 fe 5f cf 31 db 51 20 d9 98 d7 2f a0 e1 1e a9 23 3f 38 7c 72 fa be bf a0 77 0f a4 aa 71 4c 2f 33 ea 3b 39 2a 1c 2e 8a 92 b6 69 45 39 af 47 88 d3 b0 2a 20 32 47 1a 1a 54 d4 58 8d 4b 90 a7 65 3e 68 4a 19 69 0e 2d c7 16 67 c0 b5 d2 66 9f a7 e7 39 83 35 f0 d9 45 08 a8 41 ca 52 93 a4 62 b6 55 ba 74 e0 92 44 5c ee 7b 2f a4 58 ef ef f1 cb 8a 4a 2a 31 55 72 78 ba 2f 32 ae Data Ascii: >co_4LvELLTq,a8fJ<Pr8E-]Yvb^O^b4ma,0CI:3JUIqE}A_ jw\|klo6nn\|v_1Q /#?8\|rwqL/3;9.iE9G* 2GTXKe>hJi-gf95EARbUtD\{/XJ*1Urx/2
2024-04-25 06:40:21 UTC	16049	IN	Data Raw: 4a 54 a3 c0 7a 7f d5 27 f4 1f 05 b7 14 8f 4f 9b ba bd be e0 c4 fc 03 e4 fa 55 66 75 3a 7f 49 67 fd 9c ce bf e6 4b e3 93 74 fb ab 94 ff 00 f7 5d 43 ff 00 13 21 8b db 6b d5 29 99 99 60 1d 3f 9a 35 3d 3f c1 6d c5 25 19 11 6b a6 bf ae a1 f1 f9 82 34 bc 09 e5 18 ff 00 da 75 1f f4 96 7f d9 cc df fd c8 3c 72 5e f6 95 ca 9f fb ae a1 ff 00 89 93 ea ef 6d 47 52 52 d4 84 bb 82 ec 41 73 68 5a 37 8d 67 e4 7c 4f 43 32 35 6e 72 f8 24 88 cc c4 5b be 07 72 bc 2b c1 98 d4 3c f3 b3 ff 00 50 4c ca 7f cc 67 c6 cb d7 54 2e e9 7c aa 97 56 5b 3f f8 75 2d c5 c7 81 ed 70 ea 02 c8 9a 3f 82 5b 27 a7 a0 e2 79 31 dc e1 27 de b7 ca a7 12 7c fb 90 64 49 49 2b 5d 7f 14 73 d9 9f 09 79 7f 2f 5f d2 e7 b0 7f 5e df 9b fc 89 e8 3a 6f ef d9 e2 e6 79 c5 fd df cb 4e 12 8e ec be 75 3a af 79 63 a8 Data Ascii: JTz'OUfu:IgKt]C!k)`?5=?m%k4u<r^mGRRAshZ7g\|OC25nr$[r+<PLgT.\|V[?u-p?['y1'\|dII+]sy/_^:oyNu:yc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49767	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:21 UTC	410	OUT	GET /img/twitter.png HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:21 UTC	337	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:21 GMT Content-Type: image/png Content-Length: 1272 Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Connection: close ETag: "5a05e7c6-4f8" Expires: Mon, 29 Apr 2024 06:40:21 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:21 UTC	1272	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 00 11 08 06 00 00 00 32 86 e7 80 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR2tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49768	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:21 UTC	416	OUT	GET /img/SiteIconApple.svg HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:21 UTC	340	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:21 GMT Content-Type: image/svg+xml Content-Length: 443 Last-Modified: Mon, 18 Apr 2022 20:19:52 GMT Connection: close ETag: "625dc7e8-1bb" Expires: Mon, 29 Apr 2024 06:40:21 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:21 UTC	443	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 32 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 20 32 37 22 20 77 69 64 74 68 3d 22 32 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 6d 31 37 2e 34 39 20 32 35 2e 35 63 2d 31 2e 33 35 20 31 2e 33 31 2d 32 2e 38 34 20 31 2e 31 2d 34 2e 32 36 2e 34 39 2d 31 2e 35 31 2d 2e 36 33 2d 32 2e 38 39 2d 2e 36 37 2d 34 2e 34 39 20 30 2d 31 2e 39 38 2e 38 35 2d 33 2e 30 34 2e 36 2d 34 2e 32 33 2d 2e 34 39 2d 36 2e 37 36 2d 36 2e 39 33 2d 35 2e 37 36 2d 31 37 2e 34 38 20 31 2e 39 31 2d 31 37 2e 38 38 20 31 2e 38 37 2e 31 20 33 2e 31 37 20 31 2e 30 33 20 34 2e 32 37 20 31 2e 31 31 20 31 2e 36 33 2d 2e 33 33 20 33 2e 31 39 2d 31 Data Ascii: <svg height="27" viewBox="0 0 21 27" width="21" xmlns="http://www.w3.org/2000/svg"><path d="m17.49 25.5c-1.35 1.31-2.84 1.1-4.26.49-1.51-.63-2.89-.67-4.49 0-1.98.85-3.04.6-4.23-.49-6.76-6.93-5.76-17.48 1.91-17.88 1.87.1 3.17 1.03 4.27 1.11 1.63-.33 3.19-1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49769	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:21 UTC	685	OUT	GET /file/464001402/5/eOMSj3GzJXo.13579.png/f3cec6c451d023c109 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:21 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:21 GMT Content-Type: image/png Content-Length: 13579 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:21 GMT ETag: "67176c69aa11e9f08d30f489308dc74d85e92ef0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:21 UTC	13579	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 34 c0 49 44 41 54 78 da ed 5d 79 9c 1c 75 95 ff be 57 55 dd 3d 7d cc d9 93 99 24 93 4c ae c9 45 42 0e 48 08 44 74 51 01 41 50 50 c4 03 0f dc f5 5a ae 24 a0 10 dd 55 44 8e 04 85 24 88 ac 0b cb ae ba 2a 6a 24 9c ba 5c 02 22 b7 06 84 70 25 90 93 1c 33 93 b9 67 7a fa aa aa f7 f6 8f be 93 10 13 98 99 f4 24 fd f2 c9 67 ba aa ab ab 7e f5 7e df df bb 7e ef f7 7e 40 89 4a 54 a2 12 95 a8 44 25 2a 51 89 8e 34 a2 12 0b fe 31 dd 7b ed 25 75 00 4f 12 a2 0a 80 42 ca 5a ae 4a 1e 90 46 49 29 02 72 23 2a 66 bb cb e6 9b e7 2e bd be a7 c4 b1 12 00 df 35 e9 95 57 f2 bd be c8 fb 54 dd 33 84 30 9f 40 47 11 51 f8 80 7f af Data Ascii: PNGIHDRg-bKGD4IDATx]yuWU=}$LEBHDtQAPPZ$UD$j$\"p%3gz$g~~~~@JTD%Q41{%uOBZJFI)r#*f.5WT30@GQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49770	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:21 UTC	418	OUT	GET /img/SiteIconAndroid.svg HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:21 UTC	340	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:21 GMT Content-Type: image/svg+xml Content-Length: 999 Last-Modified: Mon, 18 Apr 2022 20:19:52 GMT Connection: close ETag: "625dc7e8-3e7" Expires: Mon, 29 Apr 2024 06:40:21 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:21 UTC	999	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 32 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 32 20 32 37 22 20 77 69 64 74 68 3d 22 32 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 6d 31 39 2e 33 35 20 31 31 63 2e 37 35 20 30 20 31 2e 33 35 2e 36 37 20 31 2e 33 35 20 31 2e 35 76 36 63 30 20 2e 38 33 2d 2e 36 20 31 2e 35 2d 31 2e 33 35 20 31 2e 35 73 2d 31 2e 33 35 2d 2e 36 37 2d 31 2e 33 35 2d 31 2e 35 76 2d 36 63 30 2d 2e 38 33 2e 36 2d 31 2e 35 20 31 2e 33 35 2d 31 2e 35 7a 6d 2d 31 36 2e 37 20 30 63 2e 37 35 20 30 20 31 2e 33 35 2e 36 37 20 31 2e 33 35 20 31 2e 35 76 36 63 30 20 2e 38 33 2d 2e 36 20 31 2e 35 2d 31 2e 33 35 20 31 2e 35 73 2d 31 2e 33 35 2d 2e Data Ascii: <svg height="27" viewBox="0 0 22 27" width="22" xmlns="http://www.w3.org/2000/svg"><path d="m19.35 11c.75 0 1.35.67 1.35 1.5v6c0 .83-.6 1.5-1.35 1.5s-1.35-.67-1.35-1.5v-6c0-.83.6-1.5 1.35-1.5zm-16.7 0c.75 0 1.35.67 1.35 1.5v6c0 .83-.6 1.5-1.35 1.5s-1.35-.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49771	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:21 UTC	416	OUT	GET /img/SiteAndroid.jpg?2 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:22 UTC	340	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:21 GMT Content-Type: image/jpeg Content-Length: 21090 Last-Modified: Sat, 09 May 2020 18:58:54 GMT Connection: close ETag: "5eb6fd6e-5262" Expires: Mon, 29 Apr 2024 06:40:21 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:22 UTC	16044	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 01 22 a0 03 00 04 00 00 00 01 00 00 01 0e 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 0e 01 22 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*i"8Photoshop 3.08BIM8BIM%B~""}!1AQa"q2#BR$3br
2024-04-25 06:40:22 UTC	5046	IN	Data Raw: 25 51 c0 91 02 be 38 2c 46 05 4c 70 95 2a 51 e4 9c ae ff 00 af f2 35 af c0 d9 f6 73 92 d2 8d 6a ae a6 22 94 dc 94 6a 49 eb 09 25 1b 73 7b d6 69 c5 b5 7f 3d af 73 cc 7e 0f 5d f8 96 7f d9 f3 51 83 c4 17 53 cf a3 5a f8 9e d2 db c2 eb 29 3e 5a 32 59 ea 12 ea 9f 67 1f f3 cf 33 42 66 23 8f 31 90 13 90 05 7d f7 ff 00 04 de b5 d4 af 3f 63 cf 1b c7 a5 17 13 a7 8c a7 98 88 fe f9 8a 2b 7d 39 e5 0b ea 4c 6a d8 1d eb e4 2f 16 f8 9b 5e f1 04 71 dd eb 33 ad cb 5b 5b fd 8a d2 de 08 21 b4 b3 b1 b6 63 b9 a3 b6 b5 b7 48 e1 85 0b 72 db 57 2c 70 58 9c 0a fb fb fe 09 17 c7 ec ed e2 5c ff 00 d0 e5 79 ff 00 a4 56 35 ec 65 6e 58 35 19 ee e2 d3 fb ba 1f cc 5e 38 70 66 2b 2a a3 83 cb 31 93 51 a9 56 15 64 f9 6e d4 39 9a 8a 49 e9 76 ad 76 f4 f7 9b f5 3e 2c fd b6 fe 2a e9 f6 3e 19 d5 Data Ascii: %Q8,FLpQ5sj"jI%s{i=s~]QSZ)>Z2Yg3Bf#1}?c+}9Lj/^q3[[!cHrW,pX\yV5enX5^8pf+1QVdn9Ivv>,*>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49772	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:22 UTC	481	OUT	GET /js/rlottie-wasm.js HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:22 UTC	395	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:22 GMT Content-Type: application/javascript Content-Length: 100601 Last-Modified: Tue, 14 Jul 2020 22:03:36 GMT Connection: close ETag: "5f0e2bb8-188f9" Expires: Mon, 29 Apr 2024 06:40:22 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-04-25 06:40:22 UTC	15989	IN	Data Raw: 76 61 72 20 4d 6f 64 75 6c 65 3d 74 79 70 65 6f 66 20 4d 6f 64 75 6c 65 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 4d 6f 64 75 6c 65 3a 7b 7d 3b 76 61 72 20 6d 6f 64 75 6c 65 4f 76 65 72 72 69 64 65 73 3d 7b 7d 3b 76 61 72 20 6b 65 79 3b 66 6f 72 28 6b 65 79 20 69 6e 20 4d 6f 64 75 6c 65 29 7b 69 66 28 4d 6f 64 75 6c 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6b 65 79 29 29 7b 6d 6f 64 75 6c 65 4f 76 65 72 72 69 64 65 73 5b 6b 65 79 5d 3d 4d 6f 64 75 6c 65 5b 6b 65 79 5d 7d 7d 76 61 72 20 61 72 67 75 6d 65 6e 74 73 5f 3d 5b 5d 3b 76 61 72 20 74 68 69 73 50 72 6f 67 72 61 6d 3d 22 2e 2f 74 68 69 73 2e 70 72 6f 67 72 61 6d 22 3b 76 61 72 20 71 75 69 74 5f 3d 66 75 6e 63 74 69 6f 6e 28 73 74 61 74 75 73 2c 74 6f 54 68 72 6f 77 29 7b 74 68 72 6f 77 Data Ascii: var Module=typeof Module!=="undefined"?Module:{};var moduleOverrides={};var key;for(key in Module){if(Module.hasOwnProperty(key)){moduleOverrides[key]=Module[key]}}var arguments_=[];var thisProgram="./this.program";var quit_=function(status,toThrow){throw
2024-04-25 06:40:22 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 64 65 6d 61 6e 67 6c 65 41 6c 6c 28 74 65 78 74 29 7b 76 61 72 20 72 65 67 65 78 3d 2f 5c 62 5f 5f 5a 5b 5c 77 5c 64 5f 5d 2b 2f 67 3b 72 65 74 75 72 6e 20 74 65 78 74 2e 72 65 70 6c 61 63 65 28 72 65 67 65 78 2c 66 75 6e 63 74 69 6f 6e 28 78 29 7b 76 61 72 20 79 3d 64 65 6d 61 6e 67 6c 65 28 78 29 3b 72 65 74 75 72 6e 20 78 3d 3d 3d 79 3f 78 3a 79 2b 22 20 5b 22 2b 78 2b 22 5d 22 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 73 53 74 61 63 6b 54 72 61 63 65 28 29 7b 76 61 72 20 65 72 72 3d 6e 65 77 20 45 72 72 6f 72 3b 69 66 28 21 65 72 72 2e 73 74 61 63 6b 29 7b 74 72 79 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 30 29 7d 63 61 74 63 68 28 65 29 7b 65 72 72 3d 65 7d 69 66 28 21 65 72 72 2e 73 74 61 63 6b 29 7b 72 65 74 75 72 6e 22 Data Ascii: nction demangleAll(text){var regex=/\b__Z[\w\d_]+/g;return text.replace(regex,function(x){var y=demangle(x);return x===y?x:y+" ["+x+"]"})}function jsStackTrace(){var err=new Error;if(!err.stack){try{throw new Error(0)}catch(e){err=e}if(!err.stack){return"
2024-04-25 06:40:22 UTC	16384	IN	Data Raw: 61 6c 6c 62 61 63 6b 28 6e 75 6c 6c 2c 7b 74 69 6d 65 73 74 61 6d 70 3a 73 74 61 74 2e 6d 74 69 6d 65 2c 6d 6f 64 65 3a 73 74 61 74 2e 6d 6f 64 65 7d 29 7d 65 6c 73 65 20 69 66 28 46 53 2e 69 73 46 69 6c 65 28 73 74 61 74 2e 6d 6f 64 65 29 29 7b 6e 6f 64 65 2e 63 6f 6e 74 65 6e 74 73 3d 4d 45 4d 46 53 2e 67 65 74 46 69 6c 65 44 61 74 61 41 73 54 79 70 65 64 41 72 72 61 79 28 6e 6f 64 65 29 3b 72 65 74 75 72 6e 20 63 61 6c 6c 62 61 63 6b 28 6e 75 6c 6c 2c 7b 74 69 6d 65 73 74 61 6d 70 3a 73 74 61 74 2e 6d 74 69 6d 65 2c 6d 6f 64 65 3a 73 74 61 74 2e 6d 6f 64 65 2c 63 6f 6e 74 65 6e 74 73 3a 6e 6f 64 65 2e 63 6f 6e 74 65 6e 74 73 7d 29 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 63 61 6c 6c 62 61 63 6b 28 6e 65 77 20 45 72 72 6f 72 28 22 6e 6f 64 65 20 74 79 70 Data Ascii: allback(null,{timestamp:stat.mtime,mode:stat.mode})}else if(FS.isFile(stat.mode)){node.contents=MEMFS.getFileDataAsTypedArray(node);return callback(null,{timestamp:stat.mtime,mode:stat.mode,contents:node.contents})}else{return callback(new Error("node typ
2024-04-25 06:40:22 UTC	16384	IN	Data Raw: 64 29 7b 66 64 5f 73 74 61 72 74 3d 66 64 5f 73 74 61 72 74 7c 7c 30 3b 66 64 5f 65 6e 64 3d 66 64 5f 65 6e 64 7c 7c 46 53 2e 4d 41 58 5f 4f 50 45 4e 5f 46 44 53 3b 66 6f 72 28 76 61 72 20 66 64 3d 66 64 5f 73 74 61 72 74 3b 66 64 3c 3d 66 64 5f 65 6e 64 3b 66 64 2b 2b 29 7b 69 66 28 21 46 53 2e 73 74 72 65 61 6d 73 5b 66 64 5d 29 7b 72 65 74 75 72 6e 20 66 64 7d 7d 74 68 72 6f 77 20 6e 65 77 20 46 53 2e 45 72 72 6e 6f 45 72 72 6f 72 28 32 34 29 7d 2c 67 65 74 53 74 72 65 61 6d 3a 66 75 6e 63 74 69 6f 6e 28 66 64 29 7b 72 65 74 75 72 6e 20 46 53 2e 73 74 72 65 61 6d 73 5b 66 64 5d 7d 2c 63 72 65 61 74 65 53 74 72 65 61 6d 3a 66 75 6e 63 74 69 6f 6e 28 73 74 72 65 61 6d 2c 66 64 5f 73 74 61 72 74 2c 66 64 5f 65 6e 64 29 7b 69 66 28 21 46 53 2e 46 53 53 74 Data Ascii: d){fd_start=fd_start\|\|0;fd_end=fd_end\|\|FS.MAX_OPEN_FDS;for(var fd=fd_start;fd<=fd_end;fd++){if(!FS.streams[fd]){return fd}}throw new FS.ErrnoError(24)},getStream:function(fd){return FS.streams[fd]},createStream:function(stream,fd_start,fd_end){if(!FS.FSSt
2024-04-25 06:40:22 UTC	16384	IN	Data Raw: 6f 6c 6c 6f 77 3a 74 72 75 65 7d 29 3b 69 66 28 6c 6f 6f 6b 75 70 2e 6e 6f 64 65 3d 3d 3d 6e 75 6c 6c 29 7b 74 68 72 6f 77 20 6e 65 77 20 46 53 2e 45 72 72 6e 6f 45 72 72 6f 72 28 32 29 7d 69 66 28 21 46 53 2e 69 73 44 69 72 28 6c 6f 6f 6b 75 70 2e 6e 6f 64 65 2e 6d 6f 64 65 29 29 7b 74 68 72 6f 77 20 6e 65 77 20 46 53 2e 45 72 72 6e 6f 45 72 72 6f 72 28 32 30 29 7d 76 61 72 20 65 72 72 3d 46 53 2e 6e 6f 64 65 50 65 72 6d 69 73 73 69 6f 6e 73 28 6c 6f 6f 6b 75 70 2e 6e 6f 64 65 2c 22 78 22 29 3b 69 66 28 65 72 72 29 7b 74 68 72 6f 77 20 6e 65 77 20 46 53 2e 45 72 72 6e 6f 45 72 72 6f 72 28 65 72 72 29 7d 46 53 2e 63 75 72 72 65 6e 74 50 61 74 68 3d 6c 6f 6f 6b 75 70 2e 70 61 74 68 7d 2c 63 72 65 61 74 65 44 65 66 61 75 6c 74 44 69 72 65 63 74 6f 72 69 65 Data Ascii: ollow:true});if(lookup.node===null){throw new FS.ErrnoError(2)}if(!FS.isDir(lookup.node.mode)){throw new FS.ErrnoError(20)}var err=FS.nodePermissions(lookup.node,"x");if(err){throw new FS.ErrnoError(err)}FS.currentPath=lookup.path},createDefaultDirectorie
2024-04-25 06:40:22 UTC	16384	IN	Data Raw: 73 65 20 34 39 31 35 32 3a 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 2d 32 32 7d 46 53 2e 6d 6b 6e 6f 64 28 70 61 74 68 2c 6d 6f 64 65 2c 64 65 76 29 3b 72 65 74 75 72 6e 20 30 7d 2c 64 6f 52 65 61 64 6c 69 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 70 61 74 68 2c 62 75 66 2c 62 75 66 73 69 7a 65 29 7b 69 66 28 62 75 66 73 69 7a 65 3c 3d 30 29 72 65 74 75 72 6e 2d 32 32 3b 76 61 72 20 72 65 74 3d 46 53 2e 72 65 61 64 6c 69 6e 6b 28 70 61 74 68 29 3b 76 61 72 20 6c 65 6e 3d 4d 61 74 68 2e 6d 69 6e 28 62 75 66 73 69 7a 65 2c 6c 65 6e 67 74 68 42 79 74 65 73 55 54 46 38 28 72 65 74 29 29 3b 76 61 72 20 65 6e 64 43 68 61 72 3d 48 45 41 50 38 5b 62 75 66 2b 6c 65 6e 5d 3b 73 74 72 69 6e 67 54 6f 55 54 46 38 28 72 65 74 2c 62 75 66 2c 62 75 66 73 69 Data Ascii: se 49152:break;default:return-22}FS.mknod(path,mode,dev);return 0},doReadlink:function(path,buf,bufsize){if(bufsize<=0)return-22;var ret=FS.readlink(path);var len=Math.min(bufsize,lengthBytesUTF8(ret));var endChar=HEAP8[buf+len];stringToUTF8(ret,buf,bufsi
2024-04-25 06:40:22 UTC	2692	IN	Data Raw: 3d 4d 6f 64 75 6c 65 5b 22 5f 5f 5f 65 72 72 6e 6f 5f 6c 6f 63 61 74 69 6f 6e 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 6f 64 75 6c 65 5b 22 61 73 6d 22 5d 5b 22 4a 22 5d 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 76 61 72 20 5f 66 72 65 65 3d 4d 6f 64 75 6c 65 5b 22 5f 66 72 65 65 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 6f 64 75 6c 65 5b 22 61 73 6d 22 5d 5b 22 4b 22 5d 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 76 61 72 20 5f 6c 6f 74 74 69 65 5f 62 75 66 66 65 72 3d 4d 6f 64 75 6c 65 5b 22 5f 6c 6f 74 74 69 65 5f 62 75 66 66 65 72 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 6f 64 75 6c 65 5b 22 61 73 6d 22 5d 5b 22 4c 22 5d Data Ascii: =Module["___errno_location"]=function(){return Module["asm"]["J"].apply(null,arguments)};var _free=Module["_free"]=function(){return Module["asm"]["K"].apply(null,arguments)};var _lottie_buffer=Module["_lottie_buffer"]=function(){return Module["asm"]["L"]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49773	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:22 UTC	685	OUT	GET /file/464001166/2/FzTl8_M5mQA.19325.png/b6c5dbc0e4f6553805 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:22 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:22 GMT Content-Type: image/png Content-Length: 19325 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:22 GMT ETag: "2690d1e344526d5a2fb08060299f2697537643ae" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:22 UTC	16036	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 4b 32 49 44 41 54 78 da ed 7d 77 7c 5c d5 d1 f6 33 e7 de ed ab 55 ef 92 e5 22 b9 f7 02 18 63 9b 16 30 a1 17 d3 4c 48 f2 91 90 37 94 10 12 de 90 ce 9b 84 90 90 84 84 24 90 02 49 80 50 13 08 bd 13 70 a5 b9 80 7b 97 bb 2d c9 b2 fa f6 bd 77 e6 fb 63 a5 2d d2 ae b4 72 c7 f6 f0 e3 e7 d5 ad e7 9e f3 9c 69 67 ce 0c e1 04 1d 30 7d f0 c1 07 8e 76 a0 3c 2c a2 3b 6c b6 ba cf 4d 9e dc 76 a2 57 32 23 3a d1 05 fd a7 d7 17 2c 18 2b 22 17 43 e1 7c 11 0c 27 a2 ec c4 f3 22 e2 03 b0 0d 84 b7 c0 78 e9 fc 19 33 16 11 11 9f e8 b9 13 00 3c 50 e0 5d c1 90 9f 11 d1 70 11 61 22 2c 11 91 a5 00 ea 84 b4 3a 12 09 13 50 26 40 29 Data Ascii: PNGIHDRg-bKGDK2IDATx}w\|\3U"c0LH7$IPp{-wc-rig0}v<,;lMvW2#:,+"C\|'"x3<P]pa",:P&@)
2024-04-25 06:40:22 UTC	3289	IN	Data Raw: 95 cf 1d 68 e7 b3 ab ec 3c 28 c1 1d 91 8a 1a 03 ac 1e 5b d5 91 d1 e7 e5 bb 2c aa 26 3f 2e c1 56 35 f8 b1 d7 db ff 78 b0 50 c4 34 32 b9 6e 59 7d 08 bb d2 24 b5 ac ce b5 20 bb 33 f5 07 11 94 f1 fe 63 9d fd 9b ad d4 94 cb f1 c2 26 1f ea 7c ac da c2 8c 9b 26 78 50 93 9b 5c 78 91 88 66 c1 8a 43 e2 9e 39 72 21 f9 84 26 11 0c b2 12 68 7b 4b 80 76 b4 92 f2 86 84 13 43 9e c8 95 e0 d1 0f 68 bc 64 a1 e2 3d de f8 0e ff c9 e5 6e 38 d2 e8 7e 9b 9b 23 fc ee f6 40 ca 9d 64 1e 2b f1 17 46 bb 31 a9 a4 a7 85 bb a7 c3 e0 37 6b fd 58 b8 3b 75 e8 ff 92 fa b0 fa 78 77 90 4f 2e ef db 28 98 54 ee c2 8e b6 10 47 fd 78 a4 e6 6d 69 e3 f3 87 e5 b2 cb d6 77 66 fc 66 5f 84 17 6e ef 40 53 c0 d4 87 15 d8 78 5a 95 27 ed 3d 11 43 f8 f9 0d be b4 cf 3a 67 50 f2 e6 2e fe e0 09 60 d6 1d 0c 8b Data Ascii: h<([,&?.V5xP42nY}$ 3c&\|&xP\xfC9r!&h{KvChd=n8~#@d+F17kX;uxwO.(TGxmiwff_n@SxZ'=C:gP.`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49774	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:22 UTC	649	OUT	GET /img/t_logo_sprite.svg HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:22 UTC	343	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:22 GMT Content-Type: image/svg+xml Content-Length: 23116 Last-Modified: Tue, 19 Apr 2022 11:15:29 GMT Connection: close ETag: "625e99d1-5a4c" Expires: Mon, 29 Apr 2024 06:40:22 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:22 UTC	16041	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 68 65 69 67 68 74 3d 22 31 34 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 34 36 34 20 31 34 34 22 20 77 69 64 74 68 3d 22 34 34 36 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 61 22 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 32 61 61 62 65 65 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 32 32 39 65 64 39 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 Data Ascii: <svg fill="none" height="144" viewBox="0 0 4464 144" width="4464" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a"><stop offset="0" stop-color="#2aabee"/><stop offset="1" stop-color="#229ed9"/></linearGr
2024-04-25 06:40:22 UTC	7075	IN	Data Raw: 33 38 2d 31 38 2e 37 39 38 73 31 38 2e 38 2d 32 38 2e 33 36 38 31 20 31 38 2e 38 2d 34 35 2e 33 38 33 31 2d 36 2e 37 37 2d 33 33 2e 33 35 31 31 2d 31 38 2e 38 2d 34 35 2e 33 38 33 63 2d 31 32 2e 30 33 2d 31 32 2e 30 33 32 2d 32 38 2e 33 37 2d 31 38 2e 37 39 38 30 35 2d 34 35 2e 33 38 2d 31 38 2e 37 39 38 30 35 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 72 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 33 33 34 38 2e 37 34 20 37 31 2e 34 35 36 34 63 31 38 2e 37 31 2d 38 2e 31 35 31 20 33 31 2e 31 38 2d 31 33 2e 35 32 35 31 20 33 37 2e 34 33 2d 31 36 2e 31 32 31 35 20 31 37 2e 38 32 2d 37 2e 34 31 33 39 20 32 31 2e 35 32 2d 38 2e 37 30 31 35 20 32 33 2e 39 34 2d 38 2e 37 34 34 36 2e 35 33 2d 2e 30 30 39 31 20 31 2e 37 31 2e 31 32 32 33 20 32 2e 34 38 2e 37 34 37 Data Ascii: 38-18.798s18.8-28.3681 18.8-45.3831-6.77-33.3511-18.8-45.383c-12.03-12.032-28.37-18.79805-45.38-18.79805z" fill="url(#r)"/><path d="m3348.74 71.4564c18.71-8.151 31.18-13.5251 37.43-16.1215 17.82-7.4139 21.52-8.7015 23.94-8.7446.53-.0091 1.71.1223 2.48.747

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49775	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:22 UTC	613	OUT	GET /img/t_main_Android_demo.mp4 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://telegram.org/ Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473 Range: bytes=0-
2024-04-25 06:40:23 UTC	370	IN	HTTP/1.1 206 Partial Content Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:22 GMT Content-Type: video/mp4 Content-Length: 250838 Last-Modified: Sat, 09 May 2020 18:58:54 GMT Connection: close ETag: "5eb6fd6e-3d3d6" Expires: Mon, 29 Apr 2024 06:40:22 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Content-Range: bytes 0-250837/250838
2024-04-25 06:40:23 UTC	16014	IN	Data Raw: 00 00 00 20 66 74 79 70 6d 70 34 32 00 00 02 00 69 73 6f 6d 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 00 03 cd 7d 6d 64 61 74 00 00 02 71 06 05 ff ff 6d dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 35 37 20 72 32 39 33 35 20 35 34 35 64 65 32 66 20 2d 20 48 2e 32 36 34 2f 4d 50 45 47 2d 34 20 41 56 43 20 63 6f 64 65 63 20 2d 20 43 6f 70 79 6c 65 66 74 20 32 30 30 33 2d 32 30 31 38 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 76 69 64 65 6f 6c 61 6e 2e 6f 72 67 2f 78 32 36 34 2e 68 74 6d 6c 20 2d 20 6f 70 74 69 6f 6e 73 3a 20 63 61 62 61 63 3d 31 20 72 65 66 3d 31 20 64 65 62 6c 6f 63 6b 3d 31 3a 2d 32 3a 2d 32 20 61 6e 61 6c 79 73 65 3d 30 78 33 3a 30 78 31 31 33 20 6d 65 3d 68 65 78 20 73 75 62 6d Data Ascii: ftypmp42isomiso2avc1mp41free}mdatqmEH, #x264 - core 157 r2935 545de2f - H.264/MPEG-4 AVC codec - Copyleft 2003-2018 - http://www.videolan.org/x264.html - options: cabac=1 ref=1 deblock=1:-2:-2 analyse=0x3:0x113 me=hex subm
2024-04-25 06:40:23 UTC	16384	IN	Data Raw: 39 25 0c 3c c4 ac 51 38 a5 10 bc 48 22 72 28 1e 7d 3c f1 07 5a 28 5b b2 47 e7 65 9b 8e dc 64 d2 58 d3 72 f2 31 9f 99 82 5d 14 22 ff 20 e8 f4 5e ab fd 6c 77 30 4b 66 99 62 c0 37 38 81 16 63 69 40 2c 81 51 53 51 c6 a8 f5 85 2b 04 b1 18 f1 a0 ea d1 08 cb ff 13 64 f7 48 3c d6 12 53 0b ac 62 06 fc 7f d0 2b 1c 87 0c 58 e8 c2 1c d0 7c 3c 99 53 f4 8c 7d 1a fb a3 20 f4 62 97 42 96 d1 c3 7c 60 1b d2 0d 33 c1 b6 6f f3 3a c6 91 12 b9 33 3b 23 0a 38 95 a9 09 d4 af 0e fd e7 ef a5 0f 5a da 86 d1 f2 85 5b 2d e1 b1 66 54 42 3f 87 2e 77 39 c0 f5 08 27 61 c3 34 3e 68 b2 ed 31 37 8c 26 6e 1a 9b 52 e9 35 e4 85 9a 4c f1 a6 0f d5 7a 26 6e d5 1a 34 8d ce 04 ce 56 32 cd 45 92 74 3d e4 7c 8f 4f fa 75 fc da 29 20 3c 60 06 df 47 52 dc 10 63 99 50 01 a8 d2 55 94 f9 5c b9 3e 52 e8 2c Data Ascii: 9%<Q8H"r(}<Z([GedXr1]" ^lw0Kfb78ci@,QSQ+dH<Sb+X\|<S} bB\|`3o:3;#8Z[-fTB?.w9'a4>h17&nR5Lz&n4V2Et=\|Ou) <`GRcPU\>R,
2024-04-25 06:40:23 UTC	16384	IN	Data Raw: b4 ea 2d 01 72 1e 82 84 b0 22 52 ee a3 a8 b6 32 4a 70 00 02 49 aa db 14 c7 e5 ab 03 aa d4 ba 30 a3 a4 8e 1a 92 af 9a 45 de fd 54 a5 4c 53 18 a5 9f d9 2f b3 da c2 6b 8c 8d ea d8 5f ab 4a 14 54 b0 42 4c a3 29 2a e9 1f 2a cf 66 d1 4d 3e 40 13 72 a3 4b 04 9a db e1 78 c6 ec 7e c5 69 b1 62 ab 58 bd 1f ac 33 e9 f6 45 4f 28 75 c8 f4 eb 60 69 d5 ea b8 62 ef 01 8b bb 99 4e 55 98 38 40 4b 02 d6 7d ad 94 8f fa 91 67 9b ef 99 cd c6 ed 00 5f 38 b8 0c af ed 00 6d 30 b4 ae b1 53 ea ca f8 f1 72 39 ae b1 c2 ea 86 4e 0d 4d 05 f1 a7 e7 da c7 15 d4 2c f1 e8 6b 86 12 7d 63 b1 12 73 3d 33 af d6 d0 89 c6 4b d7 c3 3a 19 a7 5e 20 55 50 e7 8f c5 37 da 08 5e 68 cf e6 9d 21 e7 7b d7 01 ed d4 bb a5 b6 fd b4 f4 84 aa 29 1c 20 0c 98 e0 9a 07 f8 ba 63 06 ab 3f 25 3f 58 91 6c 6d 05 57 d2 Data Ascii: -r"R2JpI0ETLS/k_JTBL)**fM>@rKx~ibX3EO(u`ibNU8@K}g_8m0Sr9NM,k}cs=3K:^ UP7^h!{) c?%?XlmW
2024-04-25 06:40:23 UTC	16384	IN	Data Raw: c4 3f 7f c5 be 13 d7 45 2b 66 60 88 ba 1a fd e4 5f ff e0 9d 0a a3 83 de ae f3 5d 07 ed 38 09 9a 9d 22 4b 34 ba 5c 45 bd 36 b3 8b ee 14 89 25 3c 12 e1 02 14 86 f9 2e c0 9c b4 43 51 67 a3 99 90 10 58 b2 84 ae 96 79 7d 23 50 a7 0c 54 2e 4b 5c b3 ad d7 8b dd 09 78 3a cd 7f c7 81 b8 a9 9a 32 d8 2b 8e bd d2 fa 55 31 4b b9 60 d8 99 64 41 b9 bc 3f 26 de d2 c4 8a 09 89 21 c4 24 ef 85 85 0a ef 45 4c 4b 06 b8 3d 80 01 41 7d 05 3e 40 0a c5 f3 a2 36 5f b8 dd b9 e8 d8 ee 1c 67 67 18 5c 17 04 cb 38 f4 70 11 ba 38 11 f9 50 09 3a f1 d6 53 f9 0e d8 af cc 77 b2 2a 26 ed d5 b0 2c 92 0a ba b9 de 1f 21 61 b2 12 23 b6 44 1b 68 47 c5 e8 a0 f5 f3 6d 09 46 20 c9 1d b7 4d fd fb b0 e4 3a b1 be b2 20 05 bb c2 4e 93 86 73 ab a2 62 a0 3d 8c fd c4 25 de 46 2d ce 23 d2 d2 c7 ac 34 78 4f Data Ascii: ?E+f`_]8"K4\E6%<.CQgXy}#PT.K\x:2+U1K`dA?&!$ELK=A}>@6_gg\8p8P:Sw*&,!a#DhGmF M: Nsb=%F-#4xO
2024-04-25 06:40:23 UTC	16384	IN	Data Raw: 4e e3 5f 01 a6 ce 42 55 21 80 b9 1f 1b 5a 80 c4 14 27 4b 99 09 35 9c 4a a4 67 49 09 88 42 84 20 b7 70 00 4b c7 01 cb 6e 9e 29 9e b4 50 db fc 96 fa 67 81 13 c0 78 7d 66 5d c3 c6 18 0c 63 74 87 8e 0c ed c1 cc 53 73 aa b9 33 43 c9 4f 72 18 86 24 d9 fc f9 d9 ed 15 74 16 68 1d be c8 17 da 8f cd 05 96 f7 f6 40 2e fa 20 53 ac be 4a ec 98 0c 26 20 5a a6 cc 7e 91 46 c2 8c f4 55 66 a7 6c fe 29 99 c5 a8 76 c0 36 0e dd 1c 84 c6 be 43 f9 da 29 b6 81 fb fd f0 5c 94 1f 29 22 1e c4 d5 be 30 6b be fc b6 ea 2f 15 77 38 d0 f1 b2 27 40 bb c6 d9 65 ec fb 8f 7e 1b d8 fb 0e e1 33 d5 f3 98 74 03 d3 d6 24 42 d1 97 56 94 cf 73 22 bb fc 09 67 cd af c7 d6 98 2d 10 d0 09 4d f7 01 ab 78 55 d1 e4 30 7d 66 33 f4 5c 09 bb 3c 11 bb 16 33 d8 3b 92 f6 04 80 6b 75 25 7a 22 a4 98 2a 57 0e 85 Data Ascii: N_BU!Z'K5JgIB pKn)Pgx}f]ctSs3COr$th@. SJ& Z~FUfl)v6C)\)"0k/w8'@e~3t$BVs"g-MxU0}f3\<3;ku%z"*W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49778	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:22 UTC	452	OUT	GET /file/464001880/3/xOpm7ohoHQ0.12690.png/feb1e161b1d3608613 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:23 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:22 GMT Content-Type: image/png Content-Length: 12690 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:22 GMT ETag: "9b666309f437dfb32688ee016a9904703de41927" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:23 UTC	12690	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 31 47 49 44 41 54 78 da ed 7d 79 78 64 65 95 f7 ef 9c bb d4 92 a4 b2 a7 93 de d2 fb 06 34 34 49 b3 b4 03 8c 8a b8 a0 a0 e8 30 3a 30 8e cb 20 3a a2 ac a2 23 38 c8 7c fa b9 01 2d 82 20 cc a8 c3 28 32 ea a0 33 9f 82 82 3a 82 7c 80 40 9a e6 eb 86 66 e9 bd 9b 4e 67 df 53 cb 5d ce f9 fe a8 4a 2d d9 3a e9 54 96 6e ea 3c 4f 3d a9 54 dd ba f7 bd ef fb bb 67 7f cf 01 0a 54 a0 59 24 a3 30 05 05 9a 0c 6d dc b8 b1 72 fe fc f9 b7 2f 58 b0 20 d4 dc dc fc d2 54 cf c7 85 29 2d d0 64 48 44 2e 21 a2 cb 54 f5 ee 7c 9c af 00 c0 02 4d 96 4a 52 7f 23 05 00 16 68 c6 89 88 34 f5 56 0b 00 2c d0 8c 93 aa fe 41 55 07 55 f5 ff Data Ascii: PNGIHDRg-bKGD1GIDATx}yxde44I0:0 :#8\|- (23:\|@fNgS]J-:Tn<O=TgTY$0mr/X T)-dHD.!T\|MJR#h4V,AUU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49781	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:22 UTC	452	OUT	GET /file/464001453/3/mNzXWC3RX0c.15740.png/9ce5fa5f3fb74460b4 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:23 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:23 GMT Content-Type: image/png Content-Length: 15740 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:23 GMT ETag: "9663b372030cf4b80b2b7ab98f8e689847388957" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:23 UTC	15740	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 3d 31 49 44 41 54 78 da ed 7d 77 9c 1c 67 79 ff f7 79 66 b6 dd ee de 5e 2f 3a f5 6e c9 b2 b1 2c 37 c0 c6 54 63 30 01 13 64 1b 9b 50 c2 07 1c 08 e0 1a 02 84 e0 98 84 40 30 6e 10 20 0e e4 87 09 01 5c 28 06 4c 71 c0 80 83 8d 1b 2e b2 2d c9 92 d5 75 d2 9d ae 97 ed 33 f3 3c bf 3f 66 77 67 f6 9a ee a4 6b e2 ee f9 7c ee 73 bb b3 bb 33 ef bc ef 77 9e f6 3e 05 98 a7 79 9a a7 13 85 f8 3d 00 dd 01 60 c9 fc 5c cc d3 74 d3 4a 80 1d 90 a1 80 71 cf fc 74 4c 0e 99 f3 53 30 5e 32 4e 03 81 dd d7 7a fa fc 7c 4c 92 4c 99 9f 82 f1 92 ae f6 bd 59 0a 20 34 3f 27 f3 00 9c 4e 00 ae 29 bd 24 62 57 24 cf d3 3c 00 a7 8d 68 f5 Data Ascii: PNGIHDRg-bKGD=1IDATx}wgyyf^/:n,7Tc0dP@0n \(Lq.-u3<?fwgk\|s3w>y=`\tJqtLS0^2Nz\|LLY 4?'N)$bW$<h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49779	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:22 UTC	452	OUT	GET /file/464001402/5/eOMSj3GzJXo.13579.png/f3cec6c451d023c109 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:23 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:23 GMT Content-Type: image/png Content-Length: 13579 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:22 GMT ETag: "67176c69aa11e9f08d30f489308dc74d85e92ef0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:23 UTC	13579	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 34 c0 49 44 41 54 78 da ed 5d 79 9c 1c 75 95 ff be 57 55 dd 3d 7d cc d9 93 99 24 93 4c ae c9 45 42 0e 48 08 44 74 51 01 41 50 50 c4 03 0f dc f5 5a ae 24 a0 10 dd 55 44 8e 04 85 24 88 ac 0b cb ae ba 2a 6a 24 9c ba 5c 02 22 b7 06 84 70 25 90 93 1c 33 93 b9 67 7a fa aa aa f7 f6 8f be 93 10 13 98 99 f4 24 fd f2 c9 67 ba aa ab ab 7e f5 7e df df bb 7e ef f7 7e 40 89 4a 54 a2 12 95 a8 44 25 2a 51 89 8e 34 a2 12 0b fe 31 dd 7b ed 25 75 00 4f 12 a2 0a 80 42 ca 5a ae 4a 1e 90 46 49 29 02 72 23 2a 66 bb cb e6 9b e7 2e bd be a7 c4 b1 12 00 df 35 e9 95 57 f2 bd be c8 fb 54 dd 33 84 30 9f 40 47 11 51 f8 80 7f af Data Ascii: PNGIHDRg-bKGD4IDATx]yuWU=}$LEBHDtQAPPZ$UD$j$\"p%3gz$g~~~~@JTD%Q41{%uOBZJFI)r#*f.5WT30@GQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49777	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:22 UTC	456	OUT	GET /file/464001828/11e9a/1yY7a721t4o.30567.png/e113973dae2bee508b HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:23 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:23 GMT Content-Type: image/png Content-Length: 30567 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:23 GMT ETag: "a30234722b2883f211eb0bad5c73c2ef2fe73a53" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:23 UTC	16036	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 01 40 08 06 00 00 00 cd 90 a5 aa 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 77 1c 49 44 41 54 78 da ed 9d 77 58 54 67 f6 c7 07 50 93 68 12 a3 82 25 46 d3 8c d9 64 f3 db ec 46 2c 8c 46 2c a0 cc 1d 14 29 33 14 15 1b 16 ec 08 0c 88 48 94 22 8a c0 d0 bb 62 c5 2e 4d b1 62 8b bd 80 8a 9a 18 7b ef bd 20 cc 7c b9 bf 3f 64 c6 81 b9 f7 ce 1d 9a a8 ef f7 79 ce b3 bb 59 18 ee cc dc fb c9 79 df 73 de ef 11 08 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 ea a1 06 f4 71 6a 65 67 21 a5 6c fb 4a 66 da f5 95 2c b4 eb 2b 4d b4 Data Ascii: PNGIHDR@@bKGDwIDATxwXTgPh%FdF,F,)3H"b.Mb{ \|?dyYysqjeg!lJf,+M
2024-04-25 06:40:23 UTC	14531	IN	Data Raw: af 2f 90 69 da 18 29 3f 19 31 5e 43 f8 2f 4d 60 6e c5 be f4 ed 27 95 62 56 6c ac ba d5 25 be 26 ce f2 d6 40 24 65 65 55 c8 fe 42 92 92 68 eb d7 a0 d2 7a 0f 7d ec ec 5e 9f 50 79 0d 37 44 2e 5b 86 c4 cc 4c a4 6d d8 80 b4 8d 1b 69 55 a4 6e d8 80 c4 cc 4c 44 ad 5c 89 79 0b 17 56 80 a5 7f 54 14 46 7a 79 f1 2a 4c f4 77 74 44 6d 5b 71 f5 73 74 d4 79 1d dd 28 6a 2c 21 c1 87 ba 04 8e 34 91 b1 cd 03 a1 8f 75 a8 71 08 5e 74 ff 0c 4c 56 56 8f 07 99 e0 b9 63 5b ec ef f5 05 d2 7e 6e 50 25 10 d6 66 d8 f5 ee 0a ae 2a a7 2c 2c 4c fd 30 d7 c5 e9 0e 5e 4b df 9c 1c 46 5b 2c b6 fd 3f db 91 23 11 92 9c 4c 87 a6 a6 22 61 dd ba 0a d0 63 8b d4 0d 1b 10 b1 74 69 05 08 aa c2 6b ee 5c d8 8e 1c c9 fa b9 d9 bb b9 d5 fa 69 92 59 b1 b1 3a cf 16 0b 29 4a 29 14 89 ec 09 0d 3e 40 29 22 4d Data Ascii: /i)?1^C/M`n'bVl%&@$eeUBhz}^Py7D.[LmiUnLD\yVTFzyLwtDm[qsty(j,!4uq^tLVVc[~nP%f,,L0^KF[,?#L"actik\iY:)J)>@)"M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49780	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:22 UTC	452	OUT	GET /file/464001132/3/-1qvqKPZsQQ.17975.png/7d57d7159cf4fbe9b2 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:23 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:23 GMT Content-Type: image/png Content-Length: 17975 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:23 GMT ETag: "fa9a38332023332be262ffbb44b3d98e6ed68a45" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:23 UTC	16036	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 45 ec 49 44 41 54 78 da ed 7d 77 9c 1d 67 75 f6 73 ce cc dc 7e ef f6 be aa 2b 69 25 cb b2 2d b9 57 8c 8d 8c 31 25 60 1b db b4 00 09 7c e4 0b 04 ec 00 c1 32 04 e3 d0 4c 42 4f 48 02 49 3e 7a 89 83 03 21 60 1b e3 82 2b 36 ee 4d 56 b1 b4 ea db db ed 65 e6 9c ef 8f b9 75 8b 74 b5 5a ed 4a f6 be bf df fd dd 7b 77 e7 ce cc fb be cf 9c f2 bc e7 3d 07 58 68 0b 6d a1 2d b4 85 b6 d0 16 da 42 5b 68 af b4 46 0b 43 30 75 db 04 b4 08 d0 6e 02 61 07 88 80 39 cc 40 58 80 10 00 1b 40 8c 44 62 04 c4 08 88 e5 80 71 3f d0 73 13 90 5c 18 bd 05 00 1e 0e d0 9a 00 9c 0b e6 13 a0 da 0d a2 6e 00 dd 44 54 7b b8 e7 52 55 01 b0 Data Ascii: PNGIHDRg-bKGDEIDATx}wgus~+i%-W1%`\|2LBOHI>z!`+6MVeutZJ{w=Xhm-B[hFC0una9@X@Dbq?s\nDT{RU
2024-04-25 06:40:23 UTC	1939	IN	Data Raw: 9b fa 6e 83 ec 8c 9a 55 67 c8 9a 12 74 49 1b 34 6e 03 51 1b 34 21 57 b3 41 22 9b 4e 4f e0 86 33 92 f0 18 53 03 41 15 c2 8d d7 01 8d 1f 9e 3d a0 24 1e 12 d9 ff 97 20 8d 1e b3 99 ba 9c ad 19 d1 1e a7 10 f5 dc eb 91 c1 2e fa e8 dc d4 90 9b f5 04 95 37 dd 96 8c 7f fa 75 c1 38 40 97 01 80 46 45 a9 c6 50 0a 1e 3c f3 7c 56 a1 77 ed 71 63 82 28 29 84 a4 2d 30 48 61 90 62 62 41 41 55 41 56 14 09 5b 69 2c a7 34 94 51 1a c8 80 c7 6c a6 8c 10 95 3d 58 0c 91 f7 9c 90 d2 5b de 30 86 37 af c8 b1 c1 d3 3f 74 44 20 a4 1e 21 cd bc 24 14 bc 40 c1 47 14 53 26 18 f9 7f 2a bd 7f 0d 42 fa 98 05 9f 26 44 9c 67 73 28 8e 99 ea 5f 9b 1f 4d fe f1 b8 95 80 79 49 42 d9 af 37 3d 42 44 67 00 80 32 c4 58 ef 01 37 4d 9f 65 c0 76 54 2e ff 4d 2d 6e eb 99 2c f9 dc 6d 95 f9 0a 06 5a 00 cb c1 Data Ascii: nUgtI4nQ4!WA"NO3SA=$ .7u8@FEP<\|Vwqc()-0HabbAAUAV[i,4Ql=X[07?tD !$@GS&*B&Dgs(_MyIB7=BDg2X7MevT.M-n,mZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49776	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:22 UTC	485	OUT	GET /js/pako-inflate.min.js HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:23 UTC	393	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:23 GMT Content-Type: application/javascript Content-Length: 22682 Last-Modified: Fri, 04 Oct 2019 11:37:17 GMT Connection: close ETag: "5d972eed-589a" Expires: Mon, 29 Apr 2024 06:40:23 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-04-25 06:40:23 UTC	15991	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3b 65 6c 73 65 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 Data Ascii: !function(e){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define([],e);else{("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this
2024-04-25 06:40:23 UTC	6691	IN	Data Raw: 67 74 68 26 26 28 69 2e 6d 6f 64 65 3d 32 31 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 36 3a 69 66 28 30 3d 3d 3d 66 29 62 72 65 61 6b 20 65 3b 61 5b 6f 2b 2b 5d 3d 69 2e 6c 65 6e 67 74 68 2c 66 2d 2d 2c 69 2e 6d 6f 64 65 3d 32 31 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 37 3a 69 66 28 69 2e 77 72 61 70 29 7b 66 6f 72 28 3b 64 3c 33 32 3b 29 7b 69 66 28 30 3d 3d 3d 73 29 62 72 65 61 6b 20 65 3b 73 2d 2d 2c 6c 7c 3d 6e 5b 72 2b 2b 5d 3c 3c 64 2c 64 2b 3d 38 7d 69 66 28 75 2d 3d 66 2c 65 2e 74 6f 74 61 6c 5f 6f 75 74 2b 3d 75 2c 69 2e 74 6f 74 61 6c 2b 3d 75 2c 75 26 26 28 65 2e 61 64 6c 65 72 3d 69 2e 63 68 65 63 6b 3d 69 2e 66 6c 61 67 73 3f 4e 28 69 2e 63 68 65 63 6b 2c 61 2c 75 2c 6f 2d 75 29 3a 52 28 69 2e 63 68 65 63 6b 2c 61 2c 75 2c 6f 2d 75 29 29 2c Data Ascii: gth&&(i.mode=21);break;case 26:if(0===f)break e;a[o++]=i.length,f--,i.mode=21;break;case 27:if(i.wrap){for(;d<32;){if(0===s)break e;s--,l\|=n[r++]<<d,d+=8}if(u-=f,e.total_out+=u,i.total+=u,u&&(e.adler=i.check=i.flags?N(i.check,a,u,o-u):R(i.check,a,u,o-u)),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49782	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:23 UTC	452	OUT	GET /file/464001166/2/FzTl8_M5mQA.19325.png/b6c5dbc0e4f6553805 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:23 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:23 GMT Content-Type: image/png Content-Length: 19325 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:23 GMT ETag: "2690d1e344526d5a2fb08060299f2697537643ae" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:23 UTC	16036	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 4b 32 49 44 41 54 78 da ed 7d 77 7c 5c d5 d1 f6 33 e7 de ed ab 55 ef 92 e5 22 b9 f7 02 18 63 9b 16 30 a1 17 d3 4c 48 f2 91 90 37 94 10 12 de 90 ce 9b 84 90 90 84 84 24 90 02 49 80 50 13 08 bd 13 70 a5 b9 80 7b 97 bb 2d c9 b2 fa f6 bd 77 e6 fb 63 a5 2d d2 ae b4 72 c7 f6 f0 e3 e7 d5 ad e7 9e f3 9c 69 67 ce 0c e1 04 1d 30 7d f0 c1 07 8e 76 a0 3c 2c a2 3b 6c b6 ba cf 4d 9e dc 76 a2 57 32 23 3a d1 05 fd a7 d7 17 2c 18 2b 22 17 43 e1 7c 11 0c 27 a2 ec c4 f3 22 e2 03 b0 0d 84 b7 c0 78 e9 fc 19 33 16 11 11 9f e8 b9 13 00 3c 50 e0 5d c1 90 9f 11 d1 70 11 61 22 2c 11 91 a5 00 ea 84 b4 3a 12 09 13 50 26 40 29 Data Ascii: PNGIHDRg-bKGDK2IDATx}w\|\3U"c0LH7$IPp{-wc-rig0}v<,;lMvW2#:,+"C\|'"x3<P]pa",:P&@)
2024-04-25 06:40:23 UTC	3289	IN	Data Raw: 95 cf 1d 68 e7 b3 ab ec 3c 28 c1 1d 91 8a 1a 03 ac 1e 5b d5 91 d1 e7 e5 bb 2c aa 26 3f 2e c1 56 35 f8 b1 d7 db ff 78 b0 50 c4 34 32 b9 6e 59 7d 08 bb d2 24 b5 ac ce b5 20 bb 33 f5 07 11 94 f1 fe 63 9d fd 9b ad d4 94 cb f1 c2 26 1f ea 7c ac da c2 8c 9b 26 78 50 93 9b 5c 78 91 88 66 c1 8a 43 e2 9e 39 72 21 f9 84 26 11 0c b2 12 68 7b 4b 80 76 b4 92 f2 86 84 13 43 9e c8 95 e0 d1 0f 68 bc 64 a1 e2 3d de f8 0e ff c9 e5 6e 38 d2 e8 7e 9b 9b 23 fc ee f6 40 ca 9d 64 1e 2b f1 17 46 bb 31 a9 a4 a7 85 bb a7 c3 e0 37 6b fd 58 b8 3b 75 e8 ff 92 fa b0 fa 78 77 90 4f 2e ef db 28 98 54 ee c2 8e b6 10 47 fd 78 a4 e6 6d 69 e3 f3 87 e5 b2 cb d6 77 66 fc 66 5f 84 17 6e ef 40 53 c0 d4 87 15 d8 78 5a 95 27 ed 3d 11 43 f8 f9 0d be b4 cf 3a 67 50 f2 e6 2e fe e0 09 60 d6 1d 0c 8b Data Ascii: h<([,&?.V5xP42nY}$ 3c&\|&xP\xfC9r!&h{KvChd=n8~#@d+F17kX;uxwO.(TGxmiwff_n@SxZ'=C:gP.`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49784	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:23 UTC	479	OUT	GET /js/rlottie-wasm.wasm HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:23 UTC	389	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:23 GMT Content-Type: application/wasm Content-Length: 390408 Last-Modified: Tue, 14 Jul 2020 22:03:36 GMT Connection: close ETag: "5f0e2bb8-5f508" Expires: Mon, 29 Apr 2024 06:40:23 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-04-25 06:40:23 UTC	15995	IN	Data Raw: 00 61 73 6d 01 00 00 00 01 a9 05 59 60 01 7f 00 60 01 7f 01 7f 60 02 7c 7c 01 7c 60 03 7f 7f 7f 00 60 02 7f 7f 01 7f 60 07 7f 7f 7f 7f 7f 7f 7f 01 7f 60 04 7f 7f 7f 7f 00 60 06 7f 7f 7f 7f 7f 7f 00 60 02 7f 7f 00 60 03 7f 7f 7f 01 7f 60 05 7f 7f 7f 7f 7f 01 7f 60 05 7f 7f 7f 7f 7f 00 60 06 7f 7f 7f 7f 7f 7f 01 7f 60 04 7f 7f 7f 7f 01 7f 60 04 7f 7f 7f 7d 00 60 05 7f 7f 7f 7d 7f 00 60 02 7f 7f 01 7d 60 05 7f 7f 7e 7f 7f 00 60 06 7f 7c 7f 7f 7f 7f 01 7f 60 03 7f 7e 7f 01 7e 60 00 00 60 08 7f 7f 7f 7f 7f 7f 7f 7f 01 7f 60 05 7f 7f 7f 7f 7c 01 7f 60 06 7f 7f 7f 7f 7f 7c 01 7f 60 05 7f 7f 7f 7f 7e 01 7f 60 00 01 7f 60 01 7c 01 7f 60 02 7f 7c 01 7f 60 01 7f 01 7d 60 04 7d 7d 7d 7d 01 7d 60 04 7f 7f 7d 7d 00 60 03 7f 7d 7f 00 60 02 7f 7d 01 7d 60 04 7f 7d 7f 7f Data Ascii: asmY```\|\|\|````````````}`}`}`~`\|`~~```\|`\|`~``\|`\|`}`}}}}}`}}`}`}}`}
2024-04-25 06:40:23 UTC	16384	IN	Data Raw: 00 0c 01 0b 0b 0b 03 40 20 00 20 04 48 04 40 20 00 20 03 3a 00 00 20 00 41 01 6a 21 00 0c 01 0b 0b 20 04 20 02 6b 0b 87 01 01 02 7f 20 00 20 00 28 02 04 41 01 6a 36 02 04 41 bc ab 04 28 02 00 41 b8 ab 04 28 02 00 22 02 6b 41 02 75 20 01 4d 04 7f 20 01 41 01 6a 10 d3 0a 41 b8 ab 04 28 02 00 05 20 02 0b 20 01 41 02 74 6a 28 02 00 22 02 04 40 20 02 20 02 28 02 04 22 03 41 7f 6a 36 02 04 20 03 45 04 40 20 02 20 02 28 02 00 28 02 08 41 ff 01 71 41 96 02 6a 11 00 00 0b 0b 41 b8 ab 04 28 02 00 20 01 41 02 74 6a 20 00 36 02 00 0b 03 00 01 0b 16 00 20 00 41 00 36 02 00 20 00 20 00 28 02 00 41 01 72 36 02 00 0b 0d 00 20 00 2c 00 00 41 00 47 41 01 73 0b 09 00 20 00 10 48 10 fd 02 0b 2c 00 20 00 28 02 18 41 09 46 04 40 20 00 10 9d 01 1a 05 20 00 41 01 36 02 18 41 c4 Data Ascii: @ H@ : Aj! k (Aj6A(A("kAu M AjA( Atj("@ ("Aj6 E@ ((AqAjA( Atj 6 A6 (Ar6 ,AGAs H, (AF@ A6A
2024-04-25 06:40:24 UTC	16384	IN	Data Raw: 10 40 22 01 41 ff 01 71 41 ff 01 46 0d 00 20 01 0b 05 41 7f 0b 05 20 02 41 7f 3a 00 00 20 01 0b 0b 52 00 20 00 20 01 2a 02 00 38 02 00 20 00 20 01 2a 02 04 38 02 04 20 00 20 02 2a 02 00 38 02 08 20 00 20 02 2a 02 04 38 02 0c 20 00 20 03 2a 02 00 38 02 10 20 00 20 03 2a 02 04 38 02 14 20 00 20 04 2a 02 00 38 02 18 20 00 20 04 2a 02 04 38 02 1c 0b 1e 00 20 00 28 02 00 20 00 28 02 08 48 04 7f 20 00 28 02 04 20 00 28 02 0c 4e 05 41 01 0b 0b 20 01 01 7f 20 00 41 80 10 6a 21 01 03 40 20 00 10 f6 03 20 00 41 08 6a 22 00 20 01 47 0d 00 0b 0b 26 00 20 00 28 02 04 20 02 20 00 41 1c 6a 22 00 28 02 04 6a 10 ea 09 20 01 41 02 74 6a 20 00 28 02 00 41 02 74 6a 0b 50 01 03 7f 23 07 21 03 23 07 41 20 6a 24 07 20 03 21 02 20 00 28 02 08 20 00 28 02 00 22 04 6b 41 03 75 20 Data Ascii: @"AqAF A A: R 8 8 8 8 8 8 8 8 ( (H ( (NA Aj!@ Aj" G& ( Aj"(j Atj (AtjP#!#A j$ ! ( ("kAu
2024-04-25 06:40:24 UTC	16384	IN	Data Raw: 01 05 20 03 20 04 41 10 6a 22 01 10 2c 22 02 20 01 49 04 7f 41 01 21 02 20 03 21 00 20 01 05 20 03 20 01 20 02 6c 46 04 7f 41 09 21 02 20 01 05 20 03 20 04 41 12 6a 22 01 10 2c 22 02 20 01 49 04 7f 41 01 21 02 20 03 21 00 20 01 05 20 03 20 01 20 02 6c 46 04 7f 41 09 21 02 20 01 05 20 03 20 04 41 16 6a 22 01 10 2c 22 02 20 01 49 04 7f 41 01 21 02 20 03 21 00 20 01 05 20 03 20 01 20 02 6c 46 04 7f 41 09 21 02 20 01 05 20 03 20 04 41 1c 6a 22 01 10 2c 22 02 20 01 49 04 7f 41 01 21 02 20 03 21 00 20 01 05 20 03 20 01 20 02 6c 46 04 7f 41 09 21 02 20 01 05 02 7f 20 03 20 04 41 1e 6a 22 01 10 2c 22 02 20 01 49 04 40 41 01 21 02 20 03 21 00 20 01 0c 01 0b 20 03 20 01 20 02 6c 46 04 40 41 09 21 02 20 01 0c 01 0b 20 03 20 04 41 24 6a 22 01 10 2c 22 02 20 01 49 04 Data Ascii: Aj"," IA! ! lFA! Aj"," IA! ! lFA! Aj"," IA! ! lFA! Aj"," IA! ! lFA! Aj"," I@A! ! lF@A! A$j"," I
2024-04-25 06:40:24 UTC	16384	IN	Data Raw: 01 28 02 00 1a 0b 0b 20 03 24 07 20 00 0b 8c 07 02 05 7f 12 7d 23 07 21 05 23 07 41 30 6a 24 07 20 05 41 28 6a 21 06 20 05 22 03 41 29 6a 22 07 20 02 10 a3 01 22 04 3a 00 00 20 04 41 ff 01 71 04 40 20 06 20 01 10 a3 01 22 04 3a 00 00 20 04 41 ff 01 71 04 40 20 03 10 6d 02 40 02 40 02 40 02 40 02 40 20 06 20 07 10 f3 05 2c 00 00 22 04 41 01 6b 0e 10 01 02 04 03 04 04 04 03 04 04 04 04 04 04 04 00 04 0b 20 02 2a 02 04 21 12 20 02 2a 02 10 21 13 20 02 2a 02 1c 21 14 20 02 2a 02 08 21 15 20 02 2a 02 14 21 16 20 02 2a 02 20 21 17 20 01 2a 02 0c 21 18 20 01 2a 02 10 21 19 20 01 2a 02 14 21 0a 20 01 2a 02 18 21 0b 20 01 2a 02 1c 21 0c 20 01 2a 02 20 21 0d 20 03 20 01 2a 02 00 22 10 20 02 2a 02 00 22 11 94 20 01 2a 02 04 22 0e 20 02 2a 02 0c 22 0f 94 92 20 01 2a Data Ascii: ( $ }#!#A0j$ A(j! "A)j" ": Aq@ ": Aq@ m@@@@@ ,"Ak ! ! ! ! ! ! ! ! ! ! ! ! " " " " *
2024-04-25 06:40:24 UTC	16384	IN	Data Raw: 02 08 46 04 40 20 02 20 04 10 b9 03 20 02 28 02 00 21 00 05 20 01 20 04 28 02 00 36 02 00 20 02 20 03 41 04 6a 36 02 04 0b 20 05 41 7f 6a 41 02 74 20 00 6a 20 05 41 7e 6a 41 02 74 20 00 6a 28 02 00 36 02 00 0b 0b 20 07 24 07 0b 81 04 02 0d 7f 01 7d 23 07 21 04 23 07 41 e0 00 6a 24 07 20 04 41 18 6a 21 05 20 00 10 6d 20 04 41 08 6a 22 07 10 52 02 40 02 40 20 01 28 02 34 22 06 45 0d 00 20 06 2c 00 28 45 0d 00 20 07 20 06 41 18 6a 20 02 10 4d 10 bd 03 20 07 20 01 28 02 34 41 20 6a 20 02 10 4d 10 bc 03 0c 01 0b 20 05 20 01 41 14 6a 20 02 10 6b 20 07 20 05 29 03 00 37 03 00 0b 20 03 04 7d 20 02 21 03 20 01 41 14 6a 22 06 10 76 04 7d 43 00 00 00 00 05 20 06 28 02 00 20 03 10 d4 08 0b 05 43 00 00 00 00 0b 21 11 20 04 41 d0 00 6a 21 08 20 04 41 30 6a 21 06 20 04 Data Ascii: F@ (! (6 Aj6 AjAt j A~jAt j(6 $}#!#Aj$ Aj! m Aj"R@@ (4"E ,(E Aj M (4A j M Aj k )7 } ! Aj"v}C ( C! Aj! A0j!
2024-04-25 06:40:24 UTC	16384	IN	Data Raw: 40 02 40 02 40 02 40 20 01 20 08 10 e7 09 0e 02 00 01 02 0b 20 06 20 01 20 08 29 03 00 20 02 10 dc 03 20 06 28 02 00 21 01 20 06 28 02 04 21 02 20 06 41 00 36 02 00 20 06 41 00 36 02 04 20 05 41 00 36 02 00 20 00 20 01 36 02 00 20 05 41 00 36 02 04 20 00 20 02 36 02 04 20 05 10 29 20 06 10 29 0c 02 0b 20 01 20 08 10 db 03 22 09 28 02 10 22 03 41 88 20 6a 28 02 00 21 0a 20 03 41 84 20 6a 28 02 00 22 07 21 04 20 0a 20 07 6b 20 02 28 02 10 20 02 28 02 0c 22 07 6b 46 04 40 02 40 20 04 20 0a 47 04 40 20 04 21 03 20 07 21 04 03 40 20 03 2a 02 00 20 04 2a 02 00 5c 0d 02 20 03 41 04 6a 20 04 41 04 6a 10 c8 05 45 0d 02 20 04 41 08 6a 21 04 20 03 41 08 6a 22 03 20 0a 47 0d 00 0b 20 09 28 02 10 21 03 0b 20 05 20 03 36 02 00 20 05 20 09 28 02 14 22 01 36 02 04 20 01 Data Ascii: @@@@ ) (! (! A6 A6 A6 6 A6 6 ) ) "("A j(! A j("! k ( ("kF@@ G@ ! !@ * *\ Aj AjE Aj! Aj" G (! 6 ("6
2024-04-25 06:40:24 UTC	16384	IN	Data Raw: 05 01 00 03 02 04 06 0b 20 14 41 03 47 04 40 20 00 28 02 00 22 03 28 02 0c 22 04 20 03 28 02 10 46 04 7f 20 03 20 03 28 02 00 28 02 24 41 3f 71 41 02 6a 11 01 00 05 20 04 2c 00 00 10 26 0b 22 03 41 ff 01 71 41 18 74 41 18 75 41 7f 4c 0d 07 20 07 28 02 08 20 03 41 18 74 41 18 75 41 01 74 6a 2e 01 00 41 80 c0 00 71 45 0d 07 20 12 20 00 28 02 00 22 03 28 02 0c 22 04 20 03 28 02 10 46 04 7f 20 03 20 03 28 02 00 28 02 28 41 3f 71 41 02 6a 11 01 00 05 20 03 20 04 41 01 6a 36 02 0c 20 04 2c 00 00 10 26 0b 41 ff 01 71 10 cd 01 0c 05 0b 0c 05 0b 20 14 41 03 47 0d 03 0c 04 0b 20 0e 28 02 04 20 0e 2c 00 0b 22 03 41 ff 01 71 20 03 41 00 48 1b 22 0c 41 00 20 0f 28 02 04 20 0f 2c 00 0b 22 03 41 ff 01 71 20 03 41 00 48 1b 22 0b 6b 47 04 40 20 00 28 02 00 22 03 28 02 0c Data Ascii: AG@ ("(" (F (($A?qAj ,&"AqAtAuAL ( AtAuAtj.AqE ("(" (F (((A?qAj Aj6 ,&Aq AG ( ,"Aq AH"A ( ,"Aq AH"kG@ ("(
2024-04-25 06:40:24 UTC	16384	IN	Data Raw: 40 20 00 28 02 00 22 02 2c 00 00 20 01 41 0a 6c 41 50 6a 6a 21 01 20 00 20 02 41 01 6a 36 02 00 20 02 2c 00 01 10 a6 01 0d 00 0b 0b 20 01 0b 7b 01 02 7f 23 07 21 04 23 07 41 10 6a 24 07 20 04 21 03 02 40 02 40 20 01 2c 00 22 45 0d 00 20 01 2c 00 23 45 0d 00 20 00 20 02 10 7d 0c 01 0b 20 02 10 8b 02 45 04 40 20 01 2c 00 22 45 04 40 20 01 2c 00 23 04 40 20 00 20 02 10 7d 05 20 03 10 64 20 01 20 02 20 03 10 f3 06 20 00 20 03 10 99 01 20 03 10 4b 0b 0c 02 0b 0b 20 00 41 00 36 02 00 20 00 10 64 0b 20 04 24 07 0b 0b 00 20 00 20 01 20 02 10 e5 0c 0b 16 00 20 00 20 01 20 02 42 80 80 80 80 80 80 80 80 80 7f 10 8b 04 0b 8f 01 01 02 7f 20 00 20 00 2c 00 4a 22 01 20 01 41 ff 01 6a 72 3a 00 4a 20 00 28 02 14 20 00 28 02 1c 4b 04 40 20 00 28 02 24 21 01 20 00 41 00 41 Data Ascii: @ (", AlAPjj! Aj6 , {#!#Aj$ !@@ ,"E ,#E } E@ ,"E@ ,#@ } d K A6 d $ B ,J" Ajr:J ( (K@ ($! AA
2024-04-25 06:40:24 UTC	16384	IN	Data Raw: 3f 0b 20 00 10 2b 0d 06 20 00 20 01 20 02 10 e7 01 20 00 10 2b 45 0d 01 0c 06 0b 0b 0c 01 0b 41 af f2 03 41 f4 f1 03 41 c8 06 41 8f f5 03 10 00 0b 20 02 10 9a 03 45 04 40 20 00 10 2b 04 40 41 af f2 03 41 f4 f1 03 41 c4 06 41 8f f5 03 10 00 05 20 00 41 10 20 01 10 4c 10 3f 20 00 10 2b 1a 0b 0b 0b 0b 0b 0b ed 03 01 02 7f 20 01 10 66 41 ff 01 71 41 fb 00 47 04 40 41 9a f5 03 41 f4 f1 03 41 e3 05 41 ab f5 03 10 00 0b 20 01 10 4a 1a 02 40 02 40 02 40 20 02 10 b1 04 0d 00 20 00 10 2b 04 40 41 af f2 03 41 f4 f1 03 41 e7 05 41 ab f5 03 10 00 05 20 00 41 10 20 01 10 4c 10 3f 20 00 10 2b 45 0d 01 0b 0c 01 0b 20 01 10 a9 01 20 00 10 2b 45 04 40 20 01 41 fd 00 10 73 04 40 20 02 10 9b 03 0d 02 20 00 10 2b 45 0d 03 41 af f2 03 41 f4 f1 03 41 ee 05 41 ab f5 03 10 00 0b Data Ascii: ? + +EAAAA E@ +@AAAA A L? + fAqAG@AAAA J@@@ +@AAAA A L? +E +E@ As@ +EAAAA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49785	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:23 UTC	416	OUT	GET /img/t_logo_sprite.svg HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:24 UTC	343	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:23 GMT Content-Type: image/svg+xml Content-Length: 23116 Last-Modified: Tue, 19 Apr 2022 11:15:29 GMT Connection: close ETag: "625e99d1-5a4c" Expires: Mon, 29 Apr 2024 06:40:23 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:24 UTC	16041	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 68 65 69 67 68 74 3d 22 31 34 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 34 36 34 20 31 34 34 22 20 77 69 64 74 68 3d 22 34 34 36 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 61 22 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 32 61 61 62 65 65 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 32 32 39 65 64 39 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 Data Ascii: <svg fill="none" height="144" viewBox="0 0 4464 144" width="4464" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a"><stop offset="0" stop-color="#2aabee"/><stop offset="1" stop-color="#229ed9"/></linearGr
2024-04-25 06:40:24 UTC	7075	IN	Data Raw: 33 38 2d 31 38 2e 37 39 38 73 31 38 2e 38 2d 32 38 2e 33 36 38 31 20 31 38 2e 38 2d 34 35 2e 33 38 33 31 2d 36 2e 37 37 2d 33 33 2e 33 35 31 31 2d 31 38 2e 38 2d 34 35 2e 33 38 33 63 2d 31 32 2e 30 33 2d 31 32 2e 30 33 32 2d 32 38 2e 33 37 2d 31 38 2e 37 39 38 30 35 2d 34 35 2e 33 38 2d 31 38 2e 37 39 38 30 35 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 72 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 33 33 34 38 2e 37 34 20 37 31 2e 34 35 36 34 63 31 38 2e 37 31 2d 38 2e 31 35 31 20 33 31 2e 31 38 2d 31 33 2e 35 32 35 31 20 33 37 2e 34 33 2d 31 36 2e 31 32 31 35 20 31 37 2e 38 32 2d 37 2e 34 31 33 39 20 32 31 2e 35 32 2d 38 2e 37 30 31 35 20 32 33 2e 39 34 2d 38 2e 37 34 34 36 2e 35 33 2d 2e 30 30 39 31 20 31 2e 37 31 2e 31 32 32 33 20 32 2e 34 38 2e 37 34 37 Data Ascii: 38-18.798s18.8-28.3681 18.8-45.3831-6.77-33.3511-18.8-45.383c-12.03-12.032-28.37-18.79805-45.38-18.79805z" fill="url(#r)"/><path d="m3348.74 71.4564c18.71-8.151 31.18-13.5251 37.43-16.1215 17.82-7.4139 21.52-8.7015 23.94-8.7446.53-.0091 1.71.1223 2.48.747

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49788	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:23 UTC	609	OUT	GET /img/t_main_iOS_demo.mp4 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://telegram.org/ Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473 Range: bytes=0-
2024-04-25 06:40:24 UTC	370	IN	HTTP/1.1 206 Partial Content Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:24 GMT Content-Type: video/mp4 Content-Length: 244748 Last-Modified: Sat, 09 May 2020 18:58:54 GMT Connection: close ETag: "5eb6fd6e-3bc0c" Expires: Mon, 29 Apr 2024 06:40:24 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Content-Range: bytes 0-244747/244748
2024-04-25 06:40:24 UTC	16014	IN	Data Raw: 00 00 00 20 66 74 79 70 6d 70 34 32 00 00 02 00 69 73 6f 6d 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 00 03 b6 b5 6d 64 61 74 00 00 02 71 06 05 ff ff 6d dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 35 37 20 72 32 39 33 35 20 35 34 35 64 65 32 66 20 2d 20 48 2e 32 36 34 2f 4d 50 45 47 2d 34 20 41 56 43 20 63 6f 64 65 63 20 2d 20 43 6f 70 79 6c 65 66 74 20 32 30 30 33 2d 32 30 31 38 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 76 69 64 65 6f 6c 61 6e 2e 6f 72 67 2f 78 32 36 34 2e 68 74 6d 6c 20 2d 20 6f 70 74 69 6f 6e 73 3a 20 63 61 62 61 63 3d 31 20 72 65 66 3d 31 20 64 65 62 6c 6f 63 6b 3d 31 3a 2d 32 3a 2d 32 20 61 6e 61 6c 79 73 65 3d 30 78 33 3a 30 78 31 31 33 20 6d 65 3d 68 65 78 20 73 75 62 6d Data Ascii: ftypmp42isomiso2avc1mp41freemdatqmEH, #x264 - core 157 r2935 545de2f - H.264/MPEG-4 AVC codec - Copyleft 2003-2018 - http://www.videolan.org/x264.html - options: cabac=1 ref=1 deblock=1:-2:-2 analyse=0x3:0x113 me=hex subm
2024-04-25 06:40:24 UTC	16384	IN	Data Raw: 54 99 12 eb 48 8d 74 68 1f 55 2a 62 ef 3f b3 d7 6b 74 84 ab a5 aa 93 b0 d5 de 26 05 56 48 5a fb d9 2a b2 e5 4c 24 ed 71 02 c8 e4 23 e9 7e a3 1a 8b 01 d1 6d 09 c2 38 6b ec aa e5 85 e4 63 74 b8 26 ff 2f cc 2e 2b 0e ee 98 86 d7 56 60 38 9e 4b be b8 a5 df f5 d5 74 d8 a6 54 71 ea 54 43 df 0c 29 3e b0 ab 4b cc 36 d6 4b 4e e7 65 e1 2a ab 8b c7 df b8 ac ed 89 db 0e 7a 38 ac 1e 14 e4 9b f3 86 14 d6 53 96 0f 47 8b 71 76 5b 91 7d 32 09 77 7c 34 02 61 9b a2 ed 5e 23 2b 55 d1 96 f5 50 ff e4 0c c1 aa 22 f9 cb bc 0b c0 1b ed b9 43 1e b4 fb 2c 77 fd 6c ad 5d dd c9 f3 3d d5 fc d1 dd 48 29 57 47 86 76 f4 db 53 72 4a fd e0 6f ff 3b 14 66 e1 95 b3 cd 3b 75 28 7b 93 79 cd 16 fc 84 34 e4 f7 1f 5a 65 59 e5 af 4f f6 64 56 ef 53 f0 0d 63 80 f6 59 4e 4f 27 64 ee 53 79 e1 0e d6 c7 Data Ascii: THthUb?kt&VHZL$q#~m8kct&/.+V`8KtTqTC)>K6KNe*z8SGqv[}2w\|4a^#+UP"C,wl]=H)WGvSrJo;f;u({y4ZeYOdVScYNO'dSy
2024-04-25 06:40:24 UTC	16384	IN	Data Raw: b7 7e 1c 1a 98 a3 68 da 74 7c 8f 94 2e 81 27 4c 94 6a 42 19 6c 82 2f df c8 fc 1b 7e 58 be e7 af 1c d3 62 18 52 f5 1c 4b 3a a0 4b 29 b5 ec 0f a2 ed 2f 05 ca 2c dc 19 1c c5 ad bb e0 a4 4c 88 e6 2d fe 07 c6 37 be e5 05 9b cb c0 33 d2 d7 f2 59 b6 17 3d 0b f7 b8 90 c7 e7 22 78 04 ec 33 4b 6f c1 3b ed d5 cf 94 e8 27 50 b6 58 42 c8 dc fc ea e2 13 fb 21 1e a6 9a 52 48 73 eb d1 50 d7 32 1e 6d f2 b3 76 e6 e6 9d 26 27 c6 4e f0 68 71 58 bf 9e 31 ca 7d c5 fd 88 59 3e 4b 82 2a 35 a9 d4 18 f5 ad 8d c9 ce f3 f9 54 40 ed 9f 80 aa 23 8f 10 9d 59 fa 05 b7 57 66 e3 12 e1 90 2e 28 ef 03 88 e3 ed da b9 7f 19 23 50 54 f7 ba 29 24 5e ab 0b 21 b0 de 45 13 c3 cc 5d cc 95 d1 68 1e 49 76 22 1c 5c 52 99 1d bb b6 93 96 b5 74 13 e6 5c 9e 32 c7 d2 67 9d f3 d4 45 d2 9b 02 c3 09 0d e1 d6 Data Ascii: ~ht\|.'LjBl/~XbRK:K)/,L-73Y="x3Ko;'PXB!RHsP2mv&'NhqX1}Y>K*5T@#YWf.(#PT)$^!E]hIv"\Rt\2gE
2024-04-25 06:40:24 UTC	16384	IN	Data Raw: 3d a1 4c e9 23 26 29 0f cd 1f 18 98 cd c8 c7 dd 53 b8 8a a7 ba c1 11 25 33 3f 30 b6 31 bf 5c c9 c8 f9 73 c3 56 4b cf 96 d6 f7 2b 16 f2 26 e0 f2 1c 2f c4 b4 27 72 bd 31 b0 b1 5f ea b5 46 34 4b f0 cc 68 e1 d7 24 b9 66 d1 6e ff 12 17 07 32 76 1c 39 01 e4 5e 57 b1 97 40 bf d7 2c eb bd 27 2d ca 86 9f 97 cc 4b ab 97 c6 de 75 d4 7e a1 53 7d 5a 3e d4 87 ce 27 61 2c ed d9 1d 33 33 f5 01 36 5d 67 95 25 bc 8c ee 25 0f 0b c3 e1 e4 d7 a1 69 f2 e9 f1 05 d4 77 6f 7e 89 30 5f fb 28 f0 bc 90 02 72 9c cf c5 9c b3 09 6f 8f ea 32 e6 f4 1a f3 09 d3 d8 56 80 52 cc 99 6b a1 99 81 54 c5 78 eb ab 94 00 9e 0d 57 62 3b 10 ad ef 5a 8b 30 b4 6e 4b 7d f0 7c f3 87 38 70 92 be ae fc ff f7 29 60 ad 20 e7 7e 3e f6 c1 19 78 ee f1 3e fd 33 a3 7e 96 2d c2 2c 4b fe 6d 17 94 97 8c 7b 24 90 48 Data Ascii: =L#&)S%3?01\sVK+&/'r1_F4Kh$fn2v9^W@,'-Ku~S}Z>'a,336]g%%iwo~0_(ro2VRkTxWb;Z0nK}\|8p)` ~>x>3~-,Km{$H
2024-04-25 06:40:24 UTC	16384	IN	Data Raw: 14 e8 9d 59 ca 62 6d 3d 3a 1c 9b a0 bf 83 26 f7 6a 42 e4 8a c4 dc 37 55 8b 77 3c 37 10 2f 24 c9 f3 a0 22 dc 86 33 e7 1e 34 89 cb ed a8 b6 2b 7c ae 61 72 e9 91 11 63 b0 22 29 28 b7 81 58 61 aa ec 36 72 bf dd 92 f2 9a 92 6f fe d8 42 8a 78 ea 6d f3 8b 90 a4 f3 61 20 4b 7a 60 be a9 9f fd bb e1 2e 64 ec 0d da 5c 5d 80 94 82 3c 9f f4 d9 12 01 a8 39 08 8d 37 f7 6d 7e df 98 1b 03 bf 0d 5b 1c b0 ed 3f c6 ca c9 8b 8e 48 79 2b 4b 2c d0 2b 03 0f 0a d8 15 3e 40 d1 c2 64 16 bc 33 8b ea 20 bd e6 d0 6b ff cd 7f ac 50 4a 65 54 0b 97 51 ef ed 0f 4a cd 6b 18 21 49 4c 9e f5 45 ea 37 ec 02 c4 92 6c c3 60 00 6a 69 0b 64 57 23 ad 87 2c 96 27 68 68 6a f1 89 ed 7a 13 38 71 80 9b bf 86 67 f0 a5 8c da a2 37 4b 28 b4 0f 20 5c 00 d8 b5 3e 7e 63 a3 e4 50 9f 52 a2 c7 f2 cf ac 49 66 ef Data Ascii: Ybm=:&jB7Uw<7/$"34+\|arc")(Xa6roBxma Kz`.d\]<97m~[?Hy+K,+>@d3 kPJeTQJk!ILE7l`jidW#,'hhjz8qg7K( \>~cPRIf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49783	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:24 UTC	652	OUT	GET /img/t_main_Android_demo.mp4 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://telegram.org/ Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473 Range: bytes=229376-250837 If-Range: "5eb6fd6e-3d3d6"
2024-04-25 06:40:25 UTC	374	IN	HTTP/1.1 206 Partial Content Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:24 GMT Content-Type: video/mp4 Content-Length: 21462 Last-Modified: Sat, 09 May 2020 18:58:54 GMT Connection: close ETag: "5eb6fd6e-3d3d6" Expires: Mon, 29 Apr 2024 06:40:24 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Content-Range: bytes 229376-250837/250838
2024-04-25 06:40:25 UTC	16010	IN	Data Raw: 2e b3 fa 37 61 a8 17 9e 99 cb 56 3e ec 50 c8 0b 95 5a 22 06 c6 94 44 4e 59 73 40 6a d0 80 71 0a 34 76 23 37 a9 d1 1f 8b 26 bf 97 43 f6 9a 80 8e 7c d5 27 66 ed 8b 9f 02 6a b6 e3 8d 5b 64 b2 9e 8b 12 02 ef 1c a1 4d 15 d3 e0 72 30 be 0b 1b 68 f2 a5 fb 92 89 e8 7e a1 ef 89 77 b6 4f c3 03 1c 17 2a 6c 5e d0 bc e8 e8 c6 82 a5 c5 07 c2 c4 79 92 43 0b c9 de f1 cc 72 be f5 b4 ec d7 2d 3b 60 c5 02 d2 3c 40 4f 03 99 ff e0 d0 60 04 2a 1d 4e 26 6c 6c 6a 70 0b 2e 98 2e bf ee 9a eb 2d bc d1 bf 35 e0 65 d8 a5 51 31 a9 c4 24 4c 0a 4d 54 de 02 a2 c1 b5 da 8c 61 1d b7 27 45 fe 6d e7 ad d7 4a ad 30 e2 57 0b b5 51 41 70 b3 d1 03 ec a4 4a 71 84 9c 57 9e fd 4f 83 24 84 52 00 00 03 37 41 9a 86 22 25 2f 00 01 ac 65 7d 88 30 9f b5 b1 6b 19 65 ed 8a c1 da b9 4c 67 99 49 7f 66 4b 6d Data Ascii: .7aV>PZ"DNYs@jq4v#7&C\|'fj[dMr0h~wOl^yCr-;`<@O`N&lljp..-5eQ1$LMTa'EmJ0WQApJqWO$R7A"%/e}0keLgIfKm
2024-04-25 06:40:25 UTC	5452	IN	Data Raw: 90 60 b7 fd 79 c3 9f 26 fc 1e 1a 8e a9 b0 5a 01 95 d4 a9 81 a2 97 22 4b 26 08 9c 27 01 fe 01 1d c1 18 8f 1f 50 e4 c5 65 5f 27 d6 8e 1d 4c 4a 1e ff 16 33 f9 c2 a7 84 cf 12 e2 09 1f 99 d0 f8 31 c9 06 48 e8 b7 fc a4 fc 7f 34 de 44 00 03 51 0d 69 55 ce db ac 1b 23 87 b6 e6 4b b3 7f 4a 72 f0 a3 c5 7a 1e c8 91 df 3c bf 04 29 58 b8 13 3b bf 06 58 96 7c b6 9b 5c 65 6e 20 45 5a 8e 87 c2 7b a8 fa 4f 42 76 a0 89 3e 37 37 d6 94 9a 28 c9 f8 50 17 f2 9a 9f c5 a2 f1 93 20 0f 28 f5 2b 46 47 24 32 e7 4f 8a e4 94 23 8a 80 9d 22 f0 64 14 fa 8b d8 70 a3 4e 5a 35 f5 60 2a 06 0a 41 fb 58 e9 93 6d 73 34 ae f8 20 00 00 03 5b 41 9a 46 22 25 2f 00 01 ac 65 7d 88 30 9f b5 b1 39 02 20 ec e6 2b 24 74 be df 66 20 fb 50 85 0d 6a 43 f8 73 81 85 2b 81 61 a2 bb 67 bf 2f 94 fe 74 62 58 0b Data Ascii: `y&Z"K&'Pe_'LJ31H4DQiU#KJrz<)X;X\|\en EZ{OBv>77(P (+FG$2O#"dpNZ5`*AXms4 [AF"%/e}09 +$tf PjCs+ag/tbX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49789	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:25 UTC	415	OUT	GET /js/rlottie-wasm.wasm HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:25 UTC	389	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:25 GMT Content-Type: application/wasm Content-Length: 390408 Last-Modified: Tue, 14 Jul 2020 22:03:36 GMT Connection: close ETag: "5f0e2bb8-5f508" Expires: Mon, 29 Apr 2024 06:40:25 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-04-25 06:40:25 UTC	15995	IN	Data Raw: 00 61 73 6d 01 00 00 00 01 a9 05 59 60 01 7f 00 60 01 7f 01 7f 60 02 7c 7c 01 7c 60 03 7f 7f 7f 00 60 02 7f 7f 01 7f 60 07 7f 7f 7f 7f 7f 7f 7f 01 7f 60 04 7f 7f 7f 7f 00 60 06 7f 7f 7f 7f 7f 7f 00 60 02 7f 7f 00 60 03 7f 7f 7f 01 7f 60 05 7f 7f 7f 7f 7f 01 7f 60 05 7f 7f 7f 7f 7f 00 60 06 7f 7f 7f 7f 7f 7f 01 7f 60 04 7f 7f 7f 7f 01 7f 60 04 7f 7f 7f 7d 00 60 05 7f 7f 7f 7d 7f 00 60 02 7f 7f 01 7d 60 05 7f 7f 7e 7f 7f 00 60 06 7f 7c 7f 7f 7f 7f 01 7f 60 03 7f 7e 7f 01 7e 60 00 00 60 08 7f 7f 7f 7f 7f 7f 7f 7f 01 7f 60 05 7f 7f 7f 7f 7c 01 7f 60 06 7f 7f 7f 7f 7f 7c 01 7f 60 05 7f 7f 7f 7f 7e 01 7f 60 00 01 7f 60 01 7c 01 7f 60 02 7f 7c 01 7f 60 01 7f 01 7d 60 04 7d 7d 7d 7d 01 7d 60 04 7f 7f 7d 7d 00 60 03 7f 7d 7f 00 60 02 7f 7d 01 7d 60 04 7f 7d 7f 7f Data Ascii: asmY```\|\|\|````````````}`}`}`~`\|`~~```\|`\|`~``\|`\|`}`}}}}}`}}`}`}}`}
2024-04-25 06:40:25 UTC	16384	IN	Data Raw: 00 0c 01 0b 0b 0b 03 40 20 00 20 04 48 04 40 20 00 20 03 3a 00 00 20 00 41 01 6a 21 00 0c 01 0b 0b 20 04 20 02 6b 0b 87 01 01 02 7f 20 00 20 00 28 02 04 41 01 6a 36 02 04 41 bc ab 04 28 02 00 41 b8 ab 04 28 02 00 22 02 6b 41 02 75 20 01 4d 04 7f 20 01 41 01 6a 10 d3 0a 41 b8 ab 04 28 02 00 05 20 02 0b 20 01 41 02 74 6a 28 02 00 22 02 04 40 20 02 20 02 28 02 04 22 03 41 7f 6a 36 02 04 20 03 45 04 40 20 02 20 02 28 02 00 28 02 08 41 ff 01 71 41 96 02 6a 11 00 00 0b 0b 41 b8 ab 04 28 02 00 20 01 41 02 74 6a 20 00 36 02 00 0b 03 00 01 0b 16 00 20 00 41 00 36 02 00 20 00 20 00 28 02 00 41 01 72 36 02 00 0b 0d 00 20 00 2c 00 00 41 00 47 41 01 73 0b 09 00 20 00 10 48 10 fd 02 0b 2c 00 20 00 28 02 18 41 09 46 04 40 20 00 10 9d 01 1a 05 20 00 41 01 36 02 18 41 c4 Data Ascii: @ H@ : Aj! k (Aj6A(A("kAu M AjA( Atj("@ ("Aj6 E@ ((AqAjA( Atj 6 A6 (Ar6 ,AGAs H, (AF@ A6A
2024-04-25 06:40:25 UTC	16384	IN	Data Raw: 10 40 22 01 41 ff 01 71 41 ff 01 46 0d 00 20 01 0b 05 41 7f 0b 05 20 02 41 7f 3a 00 00 20 01 0b 0b 52 00 20 00 20 01 2a 02 00 38 02 00 20 00 20 01 2a 02 04 38 02 04 20 00 20 02 2a 02 00 38 02 08 20 00 20 02 2a 02 04 38 02 0c 20 00 20 03 2a 02 00 38 02 10 20 00 20 03 2a 02 04 38 02 14 20 00 20 04 2a 02 00 38 02 18 20 00 20 04 2a 02 04 38 02 1c 0b 1e 00 20 00 28 02 00 20 00 28 02 08 48 04 7f 20 00 28 02 04 20 00 28 02 0c 4e 05 41 01 0b 0b 20 01 01 7f 20 00 41 80 10 6a 21 01 03 40 20 00 10 f6 03 20 00 41 08 6a 22 00 20 01 47 0d 00 0b 0b 26 00 20 00 28 02 04 20 02 20 00 41 1c 6a 22 00 28 02 04 6a 10 ea 09 20 01 41 02 74 6a 20 00 28 02 00 41 02 74 6a 0b 50 01 03 7f 23 07 21 03 23 07 41 20 6a 24 07 20 03 21 02 20 00 28 02 08 20 00 28 02 00 22 04 6b 41 03 75 20 Data Ascii: @"AqAF A A: R 8 8 8 8 8 8 8 8 ( (H ( (NA Aj!@ Aj" G& ( Aj"(j Atj (AtjP#!#A j$ ! ( ("kAu
2024-04-25 06:40:25 UTC	16384	IN	Data Raw: 01 05 20 03 20 04 41 10 6a 22 01 10 2c 22 02 20 01 49 04 7f 41 01 21 02 20 03 21 00 20 01 05 20 03 20 01 20 02 6c 46 04 7f 41 09 21 02 20 01 05 20 03 20 04 41 12 6a 22 01 10 2c 22 02 20 01 49 04 7f 41 01 21 02 20 03 21 00 20 01 05 20 03 20 01 20 02 6c 46 04 7f 41 09 21 02 20 01 05 20 03 20 04 41 16 6a 22 01 10 2c 22 02 20 01 49 04 7f 41 01 21 02 20 03 21 00 20 01 05 20 03 20 01 20 02 6c 46 04 7f 41 09 21 02 20 01 05 20 03 20 04 41 1c 6a 22 01 10 2c 22 02 20 01 49 04 7f 41 01 21 02 20 03 21 00 20 01 05 20 03 20 01 20 02 6c 46 04 7f 41 09 21 02 20 01 05 02 7f 20 03 20 04 41 1e 6a 22 01 10 2c 22 02 20 01 49 04 40 41 01 21 02 20 03 21 00 20 01 0c 01 0b 20 03 20 01 20 02 6c 46 04 40 41 09 21 02 20 01 0c 01 0b 20 03 20 04 41 24 6a 22 01 10 2c 22 02 20 01 49 04 Data Ascii: Aj"," IA! ! lFA! Aj"," IA! ! lFA! Aj"," IA! ! lFA! Aj"," IA! ! lFA! Aj"," I@A! ! lF@A! A$j"," I
2024-04-25 06:40:25 UTC	16384	IN	Data Raw: 01 28 02 00 1a 0b 0b 20 03 24 07 20 00 0b 8c 07 02 05 7f 12 7d 23 07 21 05 23 07 41 30 6a 24 07 20 05 41 28 6a 21 06 20 05 22 03 41 29 6a 22 07 20 02 10 a3 01 22 04 3a 00 00 20 04 41 ff 01 71 04 40 20 06 20 01 10 a3 01 22 04 3a 00 00 20 04 41 ff 01 71 04 40 20 03 10 6d 02 40 02 40 02 40 02 40 02 40 20 06 20 07 10 f3 05 2c 00 00 22 04 41 01 6b 0e 10 01 02 04 03 04 04 04 03 04 04 04 04 04 04 04 00 04 0b 20 02 2a 02 04 21 12 20 02 2a 02 10 21 13 20 02 2a 02 1c 21 14 20 02 2a 02 08 21 15 20 02 2a 02 14 21 16 20 02 2a 02 20 21 17 20 01 2a 02 0c 21 18 20 01 2a 02 10 21 19 20 01 2a 02 14 21 0a 20 01 2a 02 18 21 0b 20 01 2a 02 1c 21 0c 20 01 2a 02 20 21 0d 20 03 20 01 2a 02 00 22 10 20 02 2a 02 00 22 11 94 20 01 2a 02 04 22 0e 20 02 2a 02 0c 22 0f 94 92 20 01 2a Data Ascii: ( $ }#!#A0j$ A(j! "A)j" ": Aq@ ": Aq@ m@@@@@ ,"Ak ! ! ! ! ! ! ! ! ! ! ! ! " " " " *
2024-04-25 06:40:25 UTC	16384	IN	Data Raw: 02 08 46 04 40 20 02 20 04 10 b9 03 20 02 28 02 00 21 00 05 20 01 20 04 28 02 00 36 02 00 20 02 20 03 41 04 6a 36 02 04 0b 20 05 41 7f 6a 41 02 74 20 00 6a 20 05 41 7e 6a 41 02 74 20 00 6a 28 02 00 36 02 00 0b 0b 20 07 24 07 0b 81 04 02 0d 7f 01 7d 23 07 21 04 23 07 41 e0 00 6a 24 07 20 04 41 18 6a 21 05 20 00 10 6d 20 04 41 08 6a 22 07 10 52 02 40 02 40 20 01 28 02 34 22 06 45 0d 00 20 06 2c 00 28 45 0d 00 20 07 20 06 41 18 6a 20 02 10 4d 10 bd 03 20 07 20 01 28 02 34 41 20 6a 20 02 10 4d 10 bc 03 0c 01 0b 20 05 20 01 41 14 6a 20 02 10 6b 20 07 20 05 29 03 00 37 03 00 0b 20 03 04 7d 20 02 21 03 20 01 41 14 6a 22 06 10 76 04 7d 43 00 00 00 00 05 20 06 28 02 00 20 03 10 d4 08 0b 05 43 00 00 00 00 0b 21 11 20 04 41 d0 00 6a 21 08 20 04 41 30 6a 21 06 20 04 Data Ascii: F@ (! (6 Aj6 AjAt j A~jAt j(6 $}#!#Aj$ Aj! m Aj"R@@ (4"E ,(E Aj M (4A j M Aj k )7 } ! Aj"v}C ( C! Aj! A0j!
2024-04-25 06:40:25 UTC	16384	IN	Data Raw: 40 02 40 02 40 02 40 20 01 20 08 10 e7 09 0e 02 00 01 02 0b 20 06 20 01 20 08 29 03 00 20 02 10 dc 03 20 06 28 02 00 21 01 20 06 28 02 04 21 02 20 06 41 00 36 02 00 20 06 41 00 36 02 04 20 05 41 00 36 02 00 20 00 20 01 36 02 00 20 05 41 00 36 02 04 20 00 20 02 36 02 04 20 05 10 29 20 06 10 29 0c 02 0b 20 01 20 08 10 db 03 22 09 28 02 10 22 03 41 88 20 6a 28 02 00 21 0a 20 03 41 84 20 6a 28 02 00 22 07 21 04 20 0a 20 07 6b 20 02 28 02 10 20 02 28 02 0c 22 07 6b 46 04 40 02 40 20 04 20 0a 47 04 40 20 04 21 03 20 07 21 04 03 40 20 03 2a 02 00 20 04 2a 02 00 5c 0d 02 20 03 41 04 6a 20 04 41 04 6a 10 c8 05 45 0d 02 20 04 41 08 6a 21 04 20 03 41 08 6a 22 03 20 0a 47 0d 00 0b 20 09 28 02 10 21 03 0b 20 05 20 03 36 02 00 20 05 20 09 28 02 14 22 01 36 02 04 20 01 Data Ascii: @@@@ ) (! (! A6 A6 A6 6 A6 6 ) ) "("A j(! A j("! k ( ("kF@@ G@ ! !@ * *\ Aj AjE Aj! Aj" G (! 6 ("6
2024-04-25 06:40:25 UTC	16384	IN	Data Raw: 05 01 00 03 02 04 06 0b 20 14 41 03 47 04 40 20 00 28 02 00 22 03 28 02 0c 22 04 20 03 28 02 10 46 04 7f 20 03 20 03 28 02 00 28 02 24 41 3f 71 41 02 6a 11 01 00 05 20 04 2c 00 00 10 26 0b 22 03 41 ff 01 71 41 18 74 41 18 75 41 7f 4c 0d 07 20 07 28 02 08 20 03 41 18 74 41 18 75 41 01 74 6a 2e 01 00 41 80 c0 00 71 45 0d 07 20 12 20 00 28 02 00 22 03 28 02 0c 22 04 20 03 28 02 10 46 04 7f 20 03 20 03 28 02 00 28 02 28 41 3f 71 41 02 6a 11 01 00 05 20 03 20 04 41 01 6a 36 02 0c 20 04 2c 00 00 10 26 0b 41 ff 01 71 10 cd 01 0c 05 0b 0c 05 0b 20 14 41 03 47 0d 03 0c 04 0b 20 0e 28 02 04 20 0e 2c 00 0b 22 03 41 ff 01 71 20 03 41 00 48 1b 22 0c 41 00 20 0f 28 02 04 20 0f 2c 00 0b 22 03 41 ff 01 71 20 03 41 00 48 1b 22 0b 6b 47 04 40 20 00 28 02 00 22 03 28 02 0c Data Ascii: AG@ ("(" (F (($A?qAj ,&"AqAtAuAL ( AtAuAtj.AqE ("(" (F (((A?qAj Aj6 ,&Aq AG ( ,"Aq AH"A ( ,"Aq AH"kG@ ("(
2024-04-25 06:40:26 UTC	16384	IN	Data Raw: 40 20 00 28 02 00 22 02 2c 00 00 20 01 41 0a 6c 41 50 6a 6a 21 01 20 00 20 02 41 01 6a 36 02 00 20 02 2c 00 01 10 a6 01 0d 00 0b 0b 20 01 0b 7b 01 02 7f 23 07 21 04 23 07 41 10 6a 24 07 20 04 21 03 02 40 02 40 20 01 2c 00 22 45 0d 00 20 01 2c 00 23 45 0d 00 20 00 20 02 10 7d 0c 01 0b 20 02 10 8b 02 45 04 40 20 01 2c 00 22 45 04 40 20 01 2c 00 23 04 40 20 00 20 02 10 7d 05 20 03 10 64 20 01 20 02 20 03 10 f3 06 20 00 20 03 10 99 01 20 03 10 4b 0b 0c 02 0b 0b 20 00 41 00 36 02 00 20 00 10 64 0b 20 04 24 07 0b 0b 00 20 00 20 01 20 02 10 e5 0c 0b 16 00 20 00 20 01 20 02 42 80 80 80 80 80 80 80 80 80 7f 10 8b 04 0b 8f 01 01 02 7f 20 00 20 00 2c 00 4a 22 01 20 01 41 ff 01 6a 72 3a 00 4a 20 00 28 02 14 20 00 28 02 1c 4b 04 40 20 00 28 02 24 21 01 20 00 41 00 41 Data Ascii: @ (", AlAPjj! Aj6 , {#!#Aj$ !@@ ,"E ,#E } E@ ,"E@ ,#@ } d K A6 d $ B ,J" Ajr:J ( (K@ ($! AA
2024-04-25 06:40:26 UTC	16384	IN	Data Raw: 3f 0b 20 00 10 2b 0d 06 20 00 20 01 20 02 10 e7 01 20 00 10 2b 45 0d 01 0c 06 0b 0b 0c 01 0b 41 af f2 03 41 f4 f1 03 41 c8 06 41 8f f5 03 10 00 0b 20 02 10 9a 03 45 04 40 20 00 10 2b 04 40 41 af f2 03 41 f4 f1 03 41 c4 06 41 8f f5 03 10 00 05 20 00 41 10 20 01 10 4c 10 3f 20 00 10 2b 1a 0b 0b 0b 0b 0b 0b ed 03 01 02 7f 20 01 10 66 41 ff 01 71 41 fb 00 47 04 40 41 9a f5 03 41 f4 f1 03 41 e3 05 41 ab f5 03 10 00 0b 20 01 10 4a 1a 02 40 02 40 02 40 20 02 10 b1 04 0d 00 20 00 10 2b 04 40 41 af f2 03 41 f4 f1 03 41 e7 05 41 ab f5 03 10 00 05 20 00 41 10 20 01 10 4c 10 3f 20 00 10 2b 45 0d 01 0b 0c 01 0b 20 01 10 a9 01 20 00 10 2b 45 04 40 20 01 41 fd 00 10 73 04 40 20 02 10 9b 03 0d 02 20 00 10 2b 45 0d 03 41 af f2 03 41 f4 f1 03 41 ee 05 41 ab f5 03 10 00 0b Data Ascii: ? + +EAAAA E@ +@AAAA A L? + fAqAG@AAAA J@@@ +@AAAA A L? +E +E@ As@ +EAAAA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49790	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:25 UTC	512	OUT	GET /file/464001493/2/hV6uPcaHk_E.17388/dcccb066a7b4fe44ee HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:25 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:25 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 17388 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:25 GMT ETag: "a10271ce8b0db840e55148a1a269601ebdc195ff" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:25 UTC	16021	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 59 8f 1b 47 b6 e6 5f 11 ea 39 99 88 7d f1 db 45 e3 de c1 00 82 3d e8 76 3f 19 86 20 b7 e5 65 5a b2 04 4b f7 f6 18 0d ff f7 39 df 89 c8 95 c9 e4 92 41 16 ab 2a 7a 29 91 49 32 d6 13 27 be b3 ff fb e1 cb cf 9f 1f be 92 cd c3 ff 3c 7c f5 60 5b db aa 87 e6 e1 a7 df 1f be 72 a2 79 f8 f5 d3 c3 57 f4 cf 47 fa 47 06 7a f1 af 87 af ac 54 cd c3 2f f9 df df 3e d0 8f de 08 61 de fc d7 7f fc ed db 37 df fc fd 5b fa f1 8f 3f fe c8 bf 7a fb f9 f3 bb 2f d4 f6 77 ff 7e f8 95 9e 3c fc e3 e3 87 4f 6f 04 7d e1 fd db 3f de fd 9e 3e e8 be fb eb 6f 3f f2 20 be fc f1 f0 95 c9 ed fe ed 97 b7 9f de bd 7a 8d 2f bf d2 96 7e f7 f9 77 fe ce 3f e9 a7 ff 7e f8 84 3f 6f f9 c7 ff a4 a6 94 75 0d fe 2f be ff f3 4f ea fa 23 7f f0 19 2d a0 a3 ef f7 a7 f2 f9 Data Ascii: }YG_9}E=v? eZK9A*z)I2'<\|`[ryWGGzT/>a7[?z/w~<Oo}?>o? z/~w?~?ou/O#-
2024-04-25 06:40:25 UTC	1367	IN	Data Raw: 11 dc 57 57 72 8c a6 9b 37 21 4d b7 2d 2d 3d a4 e3 ac f7 d9 d6 12 dd 70 5d 43 1b c7 c4 a1 8f be c8 a0 c0 db 0a 0d 0a 18 a2 cc 4a 49 68 85 0a 8d 0a f5 5f 67 4b c5 6a 4e 33 6a fe 88 23 fa 09 a0 6a 84 31 32 d9 29 18 a6 11 da 19 c7 65 2d 45 e3 b1 de 63 6f f4 fc 60 3e 30 fc 9e 0e 3a fb a1 1e 10 8f f8 ca f1 b8 0a 63 e4 17 37 4d f3 dd 4d 14 25 0e dc d5 b3 53 8f 0e 0f 3a 53 57 ef 70 74 30 6e 33 c3 31 d1 cf a6 38 a6 8b f1 60 ae 2b 0f 9f 45 ee 9d 12 14 8c a9 af 95 c8 6f 38 d0 6a 78 98 9e f5 75 16 f7 3e 69 16 db e8 c3 ee 50 74 dc a6 f8 61 1b f2 77 f2 93 5d 7e b4 49 3a 1a cd 0c f5 6f a7 93 03 4c ec 2b 39 f2 1b 96 1a 86 87 be 8b 11 e4 c9 ed 7f d2 2c b6 31 9e 9c 22 61 d0 27 87 73 7a d1 4d b0 7b ba eb 1f 17 9a a4 d4 08 8a 7c 32 b3 1c 1f 84 7b a5 b8 0d f5 c2 49 de 84 da Data Ascii: WWr7!M--=p]CJIh_gKjN3j#j12)e-Eco`>0:c7MM%S:SWpt0n318`+Eo8jxu>iPtaw]~I:oL+9,1"a'szM{\|2{I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49791	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:25 UTC	512	OUT	GET /file/464001812/2/kLAK2TPyvUU.12545/f68c1caf735a2ea3db HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:25 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:25 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12545 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:25 GMT ETag: "b7ec796537cf35a32fadf36637c066e16a679383" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:25 UTC	12545	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 5d 8f 1b c7 ae ed 5f 31 e6 b9 55 28 d6 77 e5 ed 20 38 e7 22 80 91 5c ec 9d fd 64 18 86 13 3b 89 4f ec d8 b0 9d 9d 1b 6c f8 bf 5f 2e 56 b5 ba 25 b5 34 9a 51 a9 47 1a 77 3e 66 46 6a a9 bb c8 62 b1 58 e4 22 f9 9f 9b cf bf 7e ba f9 86 ba 9b 7f df 7c 73 e3 95 57 46 99 9b ee e6 97 8f 37 df 04 dd dd bc f9 70 f3 0d ff 7a cf bf 28 f1 1f 7f dd 7c e3 c9 74 37 bf d5 df 7f bc e3 af bd d0 9a 5e fc f3 87 6f bf fb af a7 2f 7e f8 d7 8f fc f5 57 af 5e c9 f7 5e 7e fa f4 fa 33 df ff d9 7f 6e de f0 3b 37 3f bf 7f f7 e1 85 e6 0f bc 7d f9 f7 eb 8f e5 42 ff d9 37 7f bc 92 81 7c fe 5b 5e ca 9d 71 e3 4f ef 7f 7e f3 f2 ed 8b 57 7f fe fc 3b 7f f1 e3 eb 5f be 5b df 89 f8 8d 4f 1f e5 5b bf f3 cd fe 73 f3 01 3f 5e ca f7 7f e7 9b 1b 1f 3a e3 bd 4a d1 Data Ascii: }]_1U(w 8"\d;Ol_.V%4QGw>fFjbX"~\|sWF7pz(\|t7^o/~W^^~3n;7?}B7\|[^qO~W;_[O[s?^:J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49792	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:25 UTC	512	OUT	GET /file/464001484/1/bzi7gr7XRGU.10147/815df2ef527132dd23 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:25 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:25 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 10147 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:25 GMT ETag: "19a8c01d40babdc6b063746c48554639d0ecd1a3" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:25 UTC	10147	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 5d 59 8f 1b 47 92 fe 2b 46 3f 17 0b 79 1f 7e 5b 0c b0 8b 01 34 f6 60 8e 27 43 10 64 ab 6d 69 dd 3a 20 69 c6 6b 0c f4 df f7 fb 22 b3 8a c5 62 91 5d 24 8b ea 96 5c 33 30 d5 2c 92 99 91 91 91 91 71 c7 7f 6e 3e fe f2 e1 e6 5b dd dc fc fb e6 db 1b df fa d6 dc 34 37 3f bf bf f9 36 a8 e6 e6 d5 bb 9b 6f f1 cf 5b fc a3 13 fe f8 ed e6 5b af 4d 73 f3 b2 fe fb e6 35 7e f4 4c a9 fc ec ef 7f fe cb 5f 9f b9 0f b7 3f 3d fb fe 9f ff c0 08 2f 5e bc 90 9f 3e ff f0 e1 f6 23 26 f8 e1 3f 37 af f0 e4 e6 a7 b7 af df 3d 53 f8 c2 dd f3 df 6f df 97 0f ba ef be 7a f3 42 20 f9 f8 fb cd b7 b6 0e fe dd 3f 9f 3c f9 e6 4f df 7f f7 8f bf 7d ff 04 bf fa f0 5e be f1 2b 7e f8 9f 9b b7 7c 79 2e 3f fd 15 af 9f 9a 9b 77 f5 89 96 27 9c 93 0f fe 0f 1f b6 c1 35 37 Data Ascii: ]YG+F?y~[4`'Cdmi: ik"b]$\30,qn>[47?6o[[Ms5~L_?=/^>#&?7=SozB ?<O}^+~\|y.?w'57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49794	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:25 UTC	516	OUT	GET /file/464001828/11e99/2FUYW30UXAI.12708/7604effa1e02ddf7f9 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:25 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:25 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12708 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:25 GMT ETag: "5efa4caf73d09bf388e257a35d778134a66d2692" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:25 UTC	12708	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 5b 8f 1b 47 b2 e6 5f 11 fa b9 98 c8 c8 7b fa f5 60 77 b1 80 31 1e cc 05 e7 c1 10 0c 79 ac 19 6b 47 b2 0c 49 b3 b3 c6 c0 ff 7d e3 8b c8 22 8b 64 91 4d 36 8b 2d 76 77 ce c0 6c b1 b2 98 97 c8 88 c8 88 c8 b8 fc e7 ee cb 3f 3e df 7d 43 c3 dd ff bd fb e6 2e 9a 68 dc dd 70 f7 f7 4f 77 df 24 3b dc bd fb f5 ee 1b fe f3 91 ff 90 e3 7f fc fb ee 9b 48 6e b8 fb b9 fd fd e5 03 ff e8 07 6b fd 0f 7f fc ee bf ff f4 c3 77 7f fd 0b ff f8 a7 9f 7e 92 5f bd f9 fc f9 ed 17 ee fb fb ff dc bd e3 27 77 7f fb f8 e1 d7 1f 2c bf f0 fe cd 6f 6f 3f 69 c3 f8 ee bb 5f 7e 92 49 7c f9 ed ee 9b d0 fa fd f3 cf 6f 7e 7d fb ea 5b bc fc 2a 44 fe dd e7 4f f2 ce 3f f9 a7 ff b9 fb 15 1f 6f e4 c7 ff e4 ae 5c 4c 03 fe b3 af 7f ff 9d 87 fe 28 0d 9f d1 03 06 7a ad Data Ascii: }[G_{`w1ykGI}"dM6-vwl?>}C.hpOw$;Hnkw~_'w,oo?i_~I\|o~}[*DO?o\L(z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49793	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:25 UTC	512	OUT	GET /file/464001166/1/01aTJ2ISKeU.21801/24028c7b6d07639794 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:25 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:25 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 21801 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:25 GMT ETag: "659450b658f9d14c28dc526221f345cf9958a64f" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:25 UTC	16021	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed bd 6b 8f 23 c7 91 36 fa 57 84 fe 5c 2c 64 46 de f5 75 b1 e7 e0 00 82 bd b0 bd c0 0b 08 83 c1 c8 1a 5b 3a 9e f1 08 92 bc 3e c2 42 ff fd c4 13 91 45 56 91 45 36 d9 4c f6 b0 7b d2 8b 55 0f eb 92 15 19 99 19 f7 cb ff 3e fc fa f7 5f 1e be b6 c3 c3 ff 3c 7c fd 10 c6 30 d2 c3 f0 f0 b7 9f 1f be 8e 66 78 f8 f1 a7 87 af f9 cf 27 fe 63 33 ff e3 df 0f 5f 07 4b c3 c3 0f f5 ef 3f 3f f2 4b 6f 8d a1 b7 ff f9 7f fe eb 4f 6f ff f8 df 7f e1 97 bf ff fe 7b 79 eb dd 2f bf bc ff 95 c7 fe f6 7f 1f 7e e4 2b 0f 7f fd f4 f1 a7 b7 86 1f f8 f0 ee b7 f7 3f eb 8d e9 d9 1f ff f9 bd 00 f1 eb 6f 0f 5f bb 3a ee 77 9f be ff ed ed 87 1f ff f9 fe 17 7e e7 a7 77 3f bf ff e7 af 0f 5f 7b fe ea 2f 3f cb b3 ff e0 21 fe f7 e1 13 fe f3 4e 06 f9 07 ff f7 f7 e1 e1 e7 Data Ascii: k#6W\,dFu[:>BEVE6L{U>_<\|0fx'c3_K??KoOo{y/~+?o_:w~w?_{/?!N
2024-04-25 06:40:25 UTC	5780	IN	Data Raw: ba 59 3c 25 ba 4a a5 21 fb b1 20 24 fe 92 78 ca 3d f0 ee 27 f3 12 16 9b e0 2d 6a f9 1a 35 17 f1 da d0 c0 53 34 30 df 87 b1 78 34 18 f1 92 df 45 61 f4 21 69 37 17 c4 ea 41 6d 1a a3 cf 93 dd 9d 19 c1 26 8e de 4b ce 1d cc 4b 19 66 79 43 6e 16 d9 e6 c5 82 e5 4c cd 1e 24 5b 60 3e d2 30 3f a4 1a 4a 7a 21 8d 5e a3 e8 66 5f 84 b9 28 48 2a 42 89 53 44 1d be 68 c7 22 c1 16 fc 6e 29 0e 51 73 c5 ed 52 dd a2 a6 e6 c1 d4 24 3d da 52 e2 2f 24 58 99 34 33 0f 55 b6 0a 8a 1e b3 de 28 f3 47 b5 7e cd 7b cb 45 82 41 e0 3f c8 05 76 32 32 72 21 d8 31 5b d8 05 78 24 01 24 90 b8 b5 44 d1 6a dd 3c 48 aa 34 97 84 f5 89 25 49 f3 1c 87 8f 8f 41 e2 f6 b6 eb 43 71 6f 7d 18 5c a6 af c8 6e d1 56 73 8c f3 48 58 1e 92 85 dd 68 cf 03 f4 b0 33 69 b6 3c 11 d5 fe 53 0d 3c a4 31 15 79 c7 b8 b4 Data Ascii: Y<%J! $x='-j5S40x4Ea!i7Am&KKfyCnL$[`>0?Jz!^f_(H*BSDh"n)QsR$=R/$X43U(G~{EA?v22r!1[x$$Dj<H4%IACqo}\nVsHXh3i<S<1y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49795	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:28 UTC	512	OUT	GET /file/464001418/1/fabnJFzygPY.17422/bc9dec9fd8bd26e00e HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:29 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:29 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 17422 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:29 GMT ETag: "8c3dca30247141a56bd9786fc869d92e887e1bdd" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:29 UTC	16021	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 6d af 1b 47 72 ee 5f 31 ce e7 e1 a0 ab df db df 82 20 37 58 c0 48 82 64 93 2f 86 20 c8 6b d9 d6 5d c9 32 24 ed e6 3a 81 ff fb ad a7 aa 7b 38 24 87 3c 24 67 48 9d 23 8d 17 7b 44 0e 67 a6 bb ab ab eb fd e5 7f 1f 3e fd fc f1 e1 5b ea 1e fe fe f0 ed 43 e8 43 6f 1f ba 87 9f 3e 3c 7c 1b 4d f7 f0 e6 b7 87 6f f9 9f f7 fc 0f 65 fe f0 df 0f df 06 b2 dd c3 2f f5 df 5f df f1 43 2f 8d 09 2f ff ed df ff f4 5f ff f0 e7 7f 7a f9 af ff f9 67 7e fe c7 1f 7f 94 07 5f 7d fc f8 fa 13 bf fe fb ff 7d 78 c3 57 1e fe f2 fe dd 6f 2f 0d df f0 f6 d5 ef af 3f e8 0f ed de 37 bf fe 28 f3 f8 f4 fb c3 b7 be be fa dd fb bf 7d fa e5 1b c7 0f fc f6 ea c3 eb 5f 3f 3d 7c eb 78 d4 8f 1f e4 c6 bf f2 f3 ff fb f0 1e 7f 5e e9 05 79 1f df 84 a9 e1 e5 64 cc 0b 99 Data Ascii: }mGr_1 7XHd/ k]2$:{8$<$gH#{Dg>[CCo><\|Moe/_C//_zg~_}}xWo/?7(}_?=\|x^yd
2024-04-25 06:40:29 UTC	1401	IN	Data Raw: 57 ed be 1c 06 f9 ea dd b6 30 fc 9f 3f bc 79 f7 0d 24 d4 8f 73 a5 7e 3a 94 fa e9 02 a9 7f 43 28 30 8c f2 49 b9 2f 9e 6e 20 fc ab 79 2e f7 3e d8 66 56 89 1a c1 98 18 b4 b0 62 b8 de 6f 83 44 61 5a 83 dd 26 a9 dd 46 e4 7e e9 40 dd e7 50 60 b7 31 71 54 b8 18 36 ba dc f9 de 15 31 e7 c0 f8 e2 51 c7 d8 7b f9 4e 84 4e cb 5d 48 ac 54 2c a1 24 b0 0e 93 b3 75 81 75 0e 92 16 0d c5 6d ff 83 61 4f 7e 48 d1 27 13 57 5d e2 29 e8 12 8b 48 54 4b 08 54 76 09 79 ca 2d 21 ac fa bc c0 4c e2 12 ea 55 5a 42 bd ca 4b a8 57 65 09 f5 6a 61 2d 60 19 ce bb 0c df 5d 86 ed 2e 63 ad 3b e4 b9 66 59 2d 60 19 d1 67 19 c9 c7 2e 22 f8 b8 65 a4 4b 9f 97 98 4c 5c 46 3d 4a 8b a8 47 79 19 f5 a8 2c a2 1e 2d 2e bd cf 7d 8f 5b 04 c6 03 15 99 3b 9d b0 0c 94 e3 1e 94 c7 a4 a4 84 bb 4a ef 76 4f 7a 7f Data Ascii: W0?y$s~:C(0I/n y.>fVboDaZ&F~@P`1qT61Q{NN]HT,$uumaO~H'W])HTKTvy-!LUZBKWeja-`].c;fY-`g."eKL\F=JGy,-.}[;JvOz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49797	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:30 UTC	512	OUT	GET /file/464001880/2/VGTLBN3QuYM.10959/8940838e7dddc787d8 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:30 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:30 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 10959 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:30 GMT ETag: "5c58efa7837b68ba6221da9224af8d45435b55a1" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:30 UTC	10959	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d dd 8f dc b6 b2 e7 bf 12 cc b3 44 f0 fb 23 ef 77 f7 e5 62 f7 62 cf be 2c 02 23 70 8e 27 71 36 4e 1c d8 3e 27 1b 04 f9 df b7 7e 55 94 c4 56 4b dd 33 d3 ea 9e b1 ad 73 71 e3 69 89 22 8b 45 b2 58 df f5 d7 dd a7 9f 3e de 7d 6b ba bb 7f df 7d 7b 17 54 50 f6 ae bb fb f1 c3 dd b7 51 77 77 3f ff 7e f7 2d fd f3 9e fe 31 99 fe f8 e3 ee db 60 6c 77 f7 b6 fe fb db af f4 d1 f7 5a a7 ef ff e7 7f fd c7 ff f8 fe ff fc 27 7d fb e6 cd 1b fe e8 f5 c7 8f f7 9f a8 eb ef 5e 75 77 ef 5e ff 79 ff 01 7f ff 35 be fe f9 b7 37 3c ec a7 3f ef be f5 b5 a7 ff 44 b3 6f 4c a1 5e 3e 7e e0 b7 bf d0 47 7f dd 7d c0 7f 5e cb 03 ee e4 67 3c f8 7f f4 a7 56 d9 39 1a e0 cf f1 ef bf 09 dc e9 ad 89 69 7c 8b bf e9 ed 27 1e 1e c0 68 fa f9 17 7e f3 dc f0 c4 45 7a 86 Data Ascii: }D#wbb,#p'q6N>'~UVK3sqi"EX>}k}{TPQww?~-1`lwZ'}^uw^y57<?DoL^>~G}^g<V9i\|'h~Ez

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49796	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:30 UTC	512	OUT	GET /file/464001560/1/zLlKYgeDLoA.14496/62085b07461f2d87e4 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:31 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:30 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 14496 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:30 GMT ETag: "bf069c5896b831434feb0a676d5c8a00925c46e2" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:31 UTC	14496	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 59 8f dc 46 b6 e6 5f 11 ea 99 19 88 7d f1 5b 8f a7 67 fa 02 82 dc 68 bb 1f 2e 0c 41 90 ad b2 ad 71 c9 12 24 75 7b 8c 86 ff fb 3d df 09 92 49 66 92 cc 85 91 a9 2c 29 da ad ca 2a 26 c9 38 71 22 e2 ec cb 7f ee 3e fe fc e1 ee 2b d5 dc fd fb ee ab 3b 27 9c d0 77 cd dd 4f ef ef be f2 b2 b9 7b fd ee ee 2b fa 78 4b 1f 2a d2 2f bf df 7d e5 94 6e ee 7e 69 3f 7f 7b 43 0f bd 90 4a be f8 f6 bf 9f 7d fd e2 d9 8b 6f fe f9 1d 3d fe ea d5 2b 7e ee e5 87 0f f7 1f e9 ed df ff e7 ee 35 5d b9 fb f1 ed 9b 77 2f 24 dd f0 f0 f2 8f fb f7 f9 8b ee de d7 bf bd 62 30 3e fe 71 f7 95 6d df fc ed 2f 2f df dd 3f 79 8a 9b 9f 28 7a ec dd cb f7 f7 bf 7d bc fb ca d0 6d f9 ee 0f ef f9 e3 57 7a d7 7f ee de e1 c7 4b 7e db af f4 6e a5 8d d0 56 37 5a 6b 11 9d Data Ascii: }YF_}[gh.Aq$u{=If,)&8q">+;'wO{+xK/}n~i?{CJ}o=+~5]w/$b0>qm//?y(z}mWzK~nV7Zk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49799	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:30 UTC	512	OUT	GET /file/464001453/2/eW_MzRhUGoM.10926/fe1f3bc3dd08367c0a HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:30 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:30 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 10926 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:30 GMT ETag: "bfd4d42dd14ef70d0233bb51ae6d69b50d877b15" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:30 UTC	10926	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 59 8f dc 48 92 e6 5f 29 e4 33 49 f8 7d d4 e3 2e 66 06 03 cc 60 16 db d3 4f 85 84 20 b5 54 25 4d e9 82 a4 ea de 42 43 ff 7d ed 33 77 27 9d 0c 46 64 44 06 23 f2 90 97 50 19 41 d2 c3 dd e9 87 b9 1d 9f 99 fd f3 e6 db 6f 5f 6f 7e 96 dd cd df 6f 7e be b1 83 1d d4 4d 77 f3 eb 97 9b 9f 9d e8 6e de 7d be f9 99 3e 3e d1 87 0c f4 e5 1f 37 3f 5b a9 ba 9b b7 f9 f3 e3 07 fa d1 0b 21 dc 8b bf fc cb ff fe eb ff fd 97 17 ff f5 d7 ff a6 9f bf 7e fd 9a 7f f7 f2 eb d7 37 df a8 f6 5f fe 79 f3 8e ee dc fc ed d3 87 cf 2f 04 15 78 ff f2 cf 37 5f d2 83 52 f6 dd c7 d7 dc 8d 6f 7f de fc 6c 72 cd 3f 51 d1 af 5f f8 f6 ef 54 fa 9f 37 5f f0 e7 65 ba 91 aa c5 8d ff 47 5f c5 10 b4 be ed 6e fe 1c bf 7f a7 7e 4f 4f a5 f3 e3 53 7c a7 a7 df a8 1e 45 2d a3 Data Ascii: }YH_)3I}.f`O T%MBC}3w'FdD#PAo_o~o~Mwn}>>7?[!~7_y/x7_Rolr?Q_T7_eG_n~OOS\|E-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49798	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:30 UTC	643	OUT	GET /img/favicon.ico HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:31 UTC	383	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:30 GMT Content-Type: image/x-icon Content-Length: 15086 Last-Modified: Thu, 21 Apr 2022 13:47:47 GMT Connection: close ETag: "62616083-3aee" Expires: Thu, 02 May 2024 06:40:30 GMT Cache-Control: max-age=604800 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-04-25 06:40:31 UTC	15086	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 da 9e 22 0d d9 9e 22 36 d9 9e 22 6f d9 9e 22 a4 d9 9e 22 cd d9 9e 22 e7 d9 9e 22 f7 d9 9e 22 fe d9 9e 22 fe d9 9e 22 f7 d9 9e 22 e7 d9 9e 22 cd d9 9e 22 a4 d9 9e 22 6f d9 9e 22 36 da 9e 23 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %6 % h6(0` $""6"o"""""""""""o"6#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49801	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:31 UTC	648	OUT	GET /img/t_main_iOS_demo.mp4 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://telegram.org/ Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473 Range: bytes=229376-244747 If-Range: "5eb6fd6e-3bc0c"
2024-04-25 06:40:31 UTC	374	IN	HTTP/1.1 206 Partial Content Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:31 GMT Content-Type: video/mp4 Content-Length: 15372 Last-Modified: Sat, 09 May 2020 18:58:54 GMT Connection: close ETag: "5eb6fd6e-3bc0c" Expires: Mon, 29 Apr 2024 06:40:31 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Content-Range: bytes 229376-244747/244748
2024-04-25 06:40:31 UTC	15372	IN	Data Raw: a5 44 d7 5c b2 d5 3f 76 36 35 89 da 64 a4 5b fa c3 b4 be c7 c4 22 dd c7 56 9c 09 f9 9b 28 fe 3b 3a 86 87 ef 13 b5 ea ca 12 89 33 00 32 6e b6 8e 14 53 9b 96 30 d1 0c 7c 3d df 6d 25 f0 2b 8f 59 4a 8e f2 23 8b 7a 60 fb 72 ca 26 ec 69 a0 24 94 f6 62 c4 50 65 e6 f4 d1 e0 f5 62 27 8a 3d 39 4e bb c6 dc 07 5f cf d0 32 ba 0a d3 2d 2b cd bf ec 69 8a 11 e3 45 05 11 65 e0 4c 48 85 99 80 90 69 ac f2 78 87 20 df 42 48 e8 4b 1b 71 4f d7 e6 85 5f 3f 71 fd 92 49 de 55 0f 16 6c d2 f4 a0 4a cb b5 b7 e9 a1 fa b5 70 d2 ed 5c 98 6d 4a ce 79 db 9e 2d a5 e7 86 54 af b7 6d 3b ff ca 24 43 67 20 65 de ca 9f d1 d7 2b ce dd c3 ee c2 bb 61 7f 31 fa 3f 2d 4f 4f d3 db b8 51 25 51 45 83 2e 18 f3 86 93 0c 03 14 03 d2 8c ed 57 f9 9a 87 d0 b3 21 6c 85 e2 8a b5 3f 26 c5 8e cc dd 52 e2 be cb Data Ascii: D\?v65d["V(;:32nS0\|=m%+YJ#z`r&i$bPeb'=9N_2-+iEeLHix BHKqO_?qIUlJp\mJy-Tm;$Cg e+a1?-OOQ%QE.W!l?&R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49800	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:31 UTC	651	OUT	GET /img/t_main_Android_demo.mp4 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://telegram.org/ Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473 Range: bytes=80896-229375 If-Range: "5eb6fd6e-3d3d6"
2024-04-25 06:40:31 UTC	374	IN	HTTP/1.1 206 Partial Content Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:31 GMT Content-Type: video/mp4 Content-Length: 148480 Last-Modified: Sat, 09 May 2020 18:58:54 GMT Connection: close ETag: "5eb6fd6e-3d3d6" Expires: Mon, 29 Apr 2024 06:40:31 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Content-Range: bytes 80896-229375/250838
2024-04-25 06:40:31 UTC	16010	IN	Data Raw: 76 31 70 25 75 2c a5 2b 3d ab 5b 57 35 b2 aa c5 9d 63 fa b2 37 40 3c be 95 52 ee e7 fb 8c e4 c2 dd dd ed 96 01 8c aa f6 3b 4d a2 49 16 84 b0 00 12 d3 f8 81 dd c4 ba 23 31 7a 76 3d b7 84 24 33 b2 47 5a 1e e7 a8 da ed c2 08 f2 af 02 03 78 37 59 a9 c8 03 aa 2d 6f 32 b7 08 26 1e 18 37 db 15 3b d3 c8 8e 8d f5 9c 59 48 c1 3d e6 e5 94 e5 88 dc 38 e3 45 a8 87 00 00 01 cd 41 9b 26 22 25 2f 00 04 a6 61 ef 12 2b 7e 2a ad 56 f3 70 32 57 87 b9 91 ed 7e 82 17 2f e6 1a 69 7e 7b 4f af 3d 5b 4f cd d7 94 ad f5 90 7f 2c 7c 8c 00 df d8 da bf 0e 43 f3 2d b0 d9 11 cf d1 84 1b e4 90 04 c1 49 04 c1 b4 9a ba a5 6e a6 a3 b6 f2 a8 db 8d 79 a4 97 60 66 bc 3b 16 d5 76 ab 0e 61 44 a6 38 9b ea 32 1c 45 93 1c 39 b8 d4 6e 1d cd ca 04 9d a2 aa 88 51 1c a4 0e 14 df a0 90 60 7d e0 17 3f 05 Data Ascii: v1p%u,+=[W5c7@<R;MI#1zv=$3GZx7Y-o2&7;YH=8EA&"%/a+~*Vp2W~/i~{O=[O,\|C-Iny`f;vaD82E9nQ`}?
2024-04-25 06:40:31 UTC	16384	IN	Data Raw: 40 a8 e5 c4 fc d3 8a 92 1c 23 d4 8f 65 c1 7e 4c 58 dd 53 a5 8c 57 5e b5 3c 8a 72 b9 fc ee 05 36 7a d9 b8 49 28 33 df ee 9b 24 00 00 01 b7 41 9a c6 22 25 2f 00 04 87 c1 21 b0 30 e2 a0 9f 67 bd 21 44 4e ee fc dd 72 df 9c 11 ae bf 3c 3b aa 2d df 06 a0 c4 e6 85 33 61 28 e3 cd 29 c9 9f 91 24 a6 13 2e 05 7f a5 3b d7 5c 6f 2f b3 a1 93 00 9d 71 1d 80 1c ff 72 a5 ae 2e b9 84 d6 65 05 ff 45 9b 4e 1e 41 03 6d d0 11 26 f6 dc 9b a9 7c 1e 42 0d 54 dc 68 4d 86 49 17 c6 5e 2d f0 46 f3 4d b9 89 4a c8 8e dc 0c a0 a9 e8 c0 f9 5a 79 08 d5 a6 a7 8f a5 25 21 e2 37 7d 19 b8 0d 45 62 50 c6 12 5d 6f 3e 35 35 99 bd 34 bc 8f 1c 5b dd 13 16 7e 8f 33 cf fc d4 0a 22 ca df aa 35 11 b5 1e 6c 88 a1 f1 9c 05 89 7d 23 99 38 2a d3 2b dd ab 7f e8 04 92 dc 29 ca 8d db a8 a5 98 8c 09 08 c3 d0 Data Ascii: @#e~LXSW^<r6zI(3$A"%/!0g!DNr<;-3a()$.;\o/qr.eENAm&\|BThMI^-FMJZy%!7}EbP]o>554[~3"5l}#8*+)
2024-04-25 06:40:32 UTC	16384	IN	Data Raw: 4e 56 80 e2 3e 90 ed 3e 93 2d e5 13 f7 9a 5f 3f 16 b3 46 3b 62 bc 0e c4 22 dd 1f 4a e9 0f 83 c8 bb 88 3d d2 de c0 a7 08 c1 5a c9 9d 77 b2 45 ed 24 b3 a8 be 14 68 d3 b2 a8 6b ea 2d 99 71 0c 82 99 8d 7b a0 86 d1 51 fc fd 80 03 54 f6 5f 97 82 1e 52 85 f8 09 e8 58 ef 49 35 ce 7f a5 9b 6b 0d d0 75 da 37 23 a7 c5 aa bc 90 0c 9e 83 1e 13 b1 99 30 2d 35 61 df 8e dc 9c 2e f1 6b 59 43 4f 2c cd ef 20 93 2f 57 59 ef b3 bc 34 4f 42 83 b4 c0 fb a5 b3 a6 6c f0 de af 21 bc 7e be c8 7e 33 2b b1 36 5e 32 fc ac 0d 10 5d 97 01 77 74 a1 a3 4b e4 bb c1 9e b3 95 ab 38 d6 eb 7b a6 fc 86 07 a9 a4 33 0c 93 c1 c0 48 5b c7 82 f3 e9 9a d6 58 8f ad b3 a9 46 c2 5d 14 47 30 7e 80 00 00 01 9f 41 9a 86 22 25 2f 00 03 2c fe 9b f5 66 42 16 0d b8 d8 f5 94 50 1f 0b 8e 19 d1 8f 1d b0 20 02 9b Data Ascii: NV>>-_?F;b"J=ZwE$hk-q{QT_RXI5ku7#0-5a.kYCO, /WY4OBl!~~3+6^2]wtK8{3H[XF]G0~A"%/,fBP
2024-04-25 06:40:32 UTC	16384	IN	Data Raw: 97 49 dc dd 82 e0 09 d6 fd 4e e0 c4 a4 0f 08 50 91 de 5f 10 76 f8 3b 0f 4a a5 61 5c f6 03 a3 7d ab d0 00 00 01 32 41 9a 66 22 25 2f 00 01 ad 72 33 af 0a 8d 47 cf 77 dc 71 2d 39 73 44 eb bb 2e 78 21 06 5e 93 ef 99 43 66 26 dd da c4 0a c4 58 a8 11 12 23 bc 95 5c e0 42 ce e5 7c 7c 13 31 74 2a d9 79 b7 b2 c4 5f 69 27 9d 01 54 e6 3a 44 76 fa d9 29 8e ae 35 12 d3 22 47 cb c0 3f a4 eb 81 e4 91 b4 c0 01 d6 77 c0 71 92 07 7a d7 5f 4c 8b 59 37 19 32 8b c1 c7 41 76 9f ee 7c 32 2d 53 96 61 8f db 84 8e e9 b6 16 c3 cb c7 ac 88 5f b9 14 1c 85 5a 39 9c e3 7f d9 e9 ad 75 af 61 64 b3 b9 00 b0 6f 75 17 55 1f 74 91 da ae 43 8e d9 69 f0 b2 52 61 66 89 17 c4 1d 70 03 01 bf 65 0a f8 b9 ae c1 1c 22 c3 00 60 9f 0d 0b 1c 5c f6 a6 50 13 b3 db e1 a5 0a 7f bc ff 1f 79 a0 71 28 4d e1 Data Ascii: INP_v;Ja\}2Af"%/r3Gwq-9sD.x!^Cf&X#\B\|\|1t*y_i'T:Dv)5"G?wqz_LY72Av\|2-Sa_Z9uadouUtCiRafpe"`\Pyq(M
2024-04-25 06:40:32 UTC	16384	IN	Data Raw: 57 64 64 ec 27 cd 35 06 63 fc df 9b 59 d4 aa a2 9f ec e2 42 fc a3 42 56 a0 05 05 cb cf 18 53 43 13 3d 66 ab 8f 15 a8 70 22 80 13 bd 41 74 4d e8 61 d0 50 96 e6 d2 97 a8 29 bc 58 62 21 52 80 00 98 5c b2 c2 21 64 1a ab 07 95 92 33 24 cf 11 01 f9 27 8a f0 4d 27 13 51 2e 32 1c 6e 37 9d 48 d3 3a 15 a9 05 a2 1d f8 84 31 79 cb b8 ad 12 65 43 5c bd de c5 ab 9e 7e 4f d9 bf f9 bb c7 93 07 fa 6d 82 b6 21 4a 20 db 21 71 98 ed 15 4d f6 e0 81 95 69 fc cd 11 6c 47 08 aa 21 fb 3d 2d 5a a8 61 a6 9d f1 4f 9f 24 c8 7c 04 b0 ea 1b c0 e5 f2 fa 38 60 98 90 64 63 48 0a 84 d6 73 81 d2 34 3d 73 80 ca ef 86 36 94 cf 57 48 76 2a 87 84 d4 55 99 bd d7 4f 16 05 8a ad 72 bc e5 6d bf b9 2d a4 f8 dd a4 ee 19 e3 f3 cf 65 f0 45 bc 34 73 ee f3 6f cf 59 fe f4 14 ab 9e 6e a5 a2 b9 1d ed d6 c8 Data Ascii: Wdd'5cYBBVSC=fp"AtMaP)Xb!R\!d3$'M'Q.2n7H:1yeC\~Om!J !qMilG!=-ZaO$\|8`dcHs4=s6WHv*UOrm-eE4soYn
2024-04-25 06:40:32 UTC	16384	IN	Data Raw: 3e 5f c4 e7 1e b5 0f 73 6d 37 fd 2b 10 47 57 95 7e f1 a4 37 64 bc 85 a2 63 fe 04 d7 f5 ed 43 46 2a a0 ab f9 31 32 da 82 4c 05 8e 02 b1 66 59 0e 73 72 ed b3 fb 05 9f c3 1e 4d 9d 20 6a 37 c5 3d ed 3b 36 70 b9 89 5e f7 4b 94 8d 80 09 27 ea 58 f5 c9 38 c2 a9 14 74 0b c0 99 62 8c 08 8e 7b 68 1a 6c 4e a5 78 85 78 96 30 37 61 60 e9 76 75 d7 84 19 51 5a 43 81 c8 c1 5a 97 63 bf c0 52 a2 05 36 5e 8e fd 4f b6 b7 b0 ea 7b 4d 0c 36 ce 86 f0 44 6e 9c 92 bc d6 08 c6 81 c6 22 94 85 e3 7c 65 e8 31 3a 5d 9e 09 d4 41 d4 33 0b 66 60 ae 6b 5f 04 99 1a f3 58 83 a6 cc 44 1f 2e cf 1c 07 16 df 00 00 02 64 41 9b 06 22 25 2f 00 06 96 83 17 69 11 5f 50 20 28 47 49 dd 05 ed 87 c8 28 25 32 cb 0f 08 4a 09 4c 5a c3 e4 19 96 90 c9 10 a4 b2 e7 1e 53 d2 12 9a c8 38 ab 24 b5 dd cb 85 87 9d Data Ascii: >_sm7+GW~7dcCF*12LfYsrM j7=;6p^K'X8tb{hlNxx07a`vuQZCZcR6^O{M6Dn"\|e1:]A3f`k_XD.dA"%/i_P (GI(%2JLZS8$
2024-04-25 06:40:32 UTC	16384	IN	Data Raw: ba fa 27 ea 67 ee 5a 20 84 98 bc f4 b2 31 cf eb dc cb 4b 11 00 56 7f d6 41 89 6d 1c 6b c4 43 21 7e ef 16 95 48 16 ad e7 8e 6c 7c 1a 0a 9d 69 ac fa 1f 8f c7 85 5c 61 1a 69 e6 d0 42 42 eb c5 5f c1 25 00 07 9e 22 cc c5 48 41 9b 3a c9 ed 30 b5 fd a9 7b f7 ad 13 f5 bd 80 28 0b 41 c2 54 ef 62 90 2a e9 d3 e1 3d 3f b5 09 8d f2 d3 03 e6 a0 b7 a3 6c bd c9 c1 eb 7a 91 da b9 73 02 28 dd 31 16 98 82 f3 3b 7a b0 ce c3 be 86 54 97 27 7d c7 cf 72 d5 a4 0c c7 85 fa 0f 07 68 60 d9 80 a5 4e 07 bf d7 7a 12 e5 f6 5e ec 85 12 f5 f5 03 ec 6c fd 32 b6 dc db 67 2a 1c 4f d8 db 4d 76 53 e6 c2 cd 07 e7 52 a0 6e 08 76 cf d2 4e 69 f4 00 80 5d a7 2f ed 28 a6 fb e7 0b 96 7b ac 1d 46 45 88 c5 bc 66 f6 9e 03 50 69 61 7d b0 58 4d 13 32 bb 7d 5f 66 7c 8e e7 28 3b fa 0a 36 e3 2a 3b 29 39 ed Data Ascii: 'gZ 1KVAmkC!~Hl\|i\aiBB_%"HA:0{(ATb=?lzs(1;zT'}rh`Nz^l2gOMvSRnvNi]/({FEfPia}XM2}_f\|(;6*;)9
2024-04-25 06:40:32 UTC	16384	IN	Data Raw: 53 17 59 64 89 f2 29 66 cc 4b 87 4b 0e e8 c1 3d 87 e7 f6 e9 c6 82 8c 19 9d c6 41 76 6c 11 b0 4f f5 15 2d f9 51 c3 bb d0 31 de c3 9c 52 67 d0 27 c7 da 95 aa 07 7d 7a b6 75 63 12 e7 45 b7 57 c1 57 cb ff 02 28 40 9b 83 44 9c f9 15 6f 67 ce 26 ea 73 31 c3 4b f7 3f 03 0e 46 2b d6 43 d9 a3 3c 9e a8 3f 54 13 c0 f1 35 03 af b6 85 a5 d0 5a d9 22 63 bb 80 e6 34 86 75 6f de ab c5 fa 43 3f f6 73 9c f6 8a a7 c3 08 d4 df c6 39 b7 20 e4 07 91 eb bd db e6 42 45 00 0a dd b7 aa 2f 9b 86 d9 9c 3f 56 6a 99 7e 3c cb 0d 1a b2 f2 75 db a9 88 ea de c0 f9 a8 87 e6 6b 7e 56 8e 51 87 45 9d ff ea 2b 7f a5 12 63 a0 1e 1f d0 9d dc 8a dd 66 5c e2 b1 50 2d be 8d a6 ac 23 18 fa 58 5f 77 38 bc 62 44 f9 f3 1c 63 12 5b e6 bd 16 4d 96 bc c4 31 db 98 ba bc 19 3f 97 ed 9f 35 06 c7 2a 71 05 69 Data Ascii: SYd)fKK=AvlO-Q1Rg'}zucEWW(@Dog&s1K?F+C<?T5Z"c4uoC?s9 BE/?Vj~<uk~VQE+cf\P-#X_w8bDc[M1?5*qi
2024-04-25 06:40:32 UTC	16384	IN	Data Raw: cb be 38 1f 8c 44 8f 19 7a a2 b5 51 e6 50 fe cf 3e 93 45 fc c4 03 bf 14 3f f2 4f c1 3d 92 c5 5d ef 83 38 87 b4 f1 23 67 7f 03 60 e1 ec 92 a5 5b 60 c6 6a 7e 28 44 fd f0 14 17 ad ea 31 c9 ce 39 2e 7a b8 1a 98 41 1c 9f 8d 54 2a 84 77 e6 50 1b c0 44 9a 4b f8 9d 0d e2 cd bb df 15 06 80 a9 85 3d 05 63 5a ef db 8a 4f af d3 cc 5b f6 4b 92 2d 94 f0 65 ce 53 a6 2d 90 8a 16 9e 27 84 c1 ff 05 a8 26 14 c7 80 6d 09 c5 a7 64 f5 ff 9b e5 13 3a f2 e0 30 d1 4a df c3 da 4f 2c 70 67 d7 ed 01 d8 12 c6 28 0e 48 37 c7 c0 d0 2d fd f0 8f ba 2b 59 e8 6c 6a cd 96 53 ea fa 23 8f 46 a2 8c ae 05 bf 76 ba f5 84 ba 1d 33 95 3b dc b5 02 57 26 06 98 ab 56 5f a7 6d b1 da fa 49 eb c8 af a7 48 7f 54 58 06 53 a5 1d 78 bf 5f fd 06 3f ef f2 14 66 90 67 32 1c 1f 40 c5 99 ef 19 e0 00 00 03 7a 41 Data Ascii: 8DzQP>E?O=]8#g`[`j~(D19.zAT*wPDK=cZO[K-eS-'&md:0JO,pg(H7-+YljS#Fv3;W&V_mIHTXSx_?fg2@zA
2024-04-25 06:40:32 UTC	1398	IN	Data Raw: 0d a6 99 c8 5a 98 65 5c c8 40 1d 2f ef 25 0b b0 78 a2 f9 de 01 d8 9c 43 51 98 86 9b b8 ee ad 2d f9 1a 7a b2 eb 7e b2 95 ab 71 1c 65 8d b7 8a 4c 96 d0 59 4d f2 4a 18 b8 11 55 0d 87 af 46 90 60 76 b5 eb 69 22 c3 03 7f ca c3 bc 67 bc 8f f3 c4 96 7b 1e e5 00 00 03 6e 41 9a 46 22 25 2f 00 01 ad 72 77 99 1f 36 23 ff f4 c3 08 b5 ab ed a9 43 6b a1 07 29 3f 4b 53 02 a1 e4 23 a6 f2 e9 88 c3 21 91 e1 9e 62 fc 82 23 c7 14 ec 1c 04 47 a6 c1 23 4c d4 dc 43 fb de 09 ee e6 a3 e6 54 02 25 c5 36 2a dc 7a 6d 92 29 ce fb ec be 38 6e aa 0a 6d 16 1c a1 4f 31 f3 58 cf 31 48 d0 b5 91 32 c2 75 c1 6c 18 7b 70 19 fb 2b 34 64 41 a0 5f 15 b2 4b e2 34 a9 b0 d0 e4 04 98 6f 11 1d cb e7 9c fd 75 2b e4 af 77 1e 6c a8 25 4d 06 3a c6 96 ec a1 23 43 29 06 13 96 0a be 1f d9 d7 30 c9 55 46 2a Data Ascii: Ze\@/%xCQ-z~qeLYMJUF`vi"g{nAF"%/rw6#Ck)?KS#!b#G#LCT%6zm)8nmO1X1H2ul{p+4dA_K4ou+wl%M:#C)0UF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49802	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:32 UTC	740	OUT	GET /dl?tme=9558c080f4fa392dd7_16243779966484154159 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:32 UTC	310	IN	HTTP/1.1 302 Found Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:32 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Pragma: no-cache Cache-control: no-store Location: //desktop.telegram.org/ Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49803	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:32 UTC	647	OUT	GET /img/t_main_iOS_demo.mp4 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://telegram.org/ Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473 Range: bytes=80896-229375 If-Range: "5eb6fd6e-3bc0c"
2024-04-25 06:40:33 UTC	374	IN	HTTP/1.1 206 Partial Content Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:32 GMT Content-Type: video/mp4 Content-Length: 148480 Last-Modified: Sat, 09 May 2020 18:58:54 GMT Connection: close ETag: "5eb6fd6e-3bc0c" Expires: Mon, 29 Apr 2024 06:40:32 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Content-Range: bytes 80896-229375/244748
2024-04-25 06:40:33 UTC	16010	IN	Data Raw: 71 32 ec fe 36 38 82 74 8b f3 9a 39 01 9a 2a 72 fb f3 4c b0 0e 53 92 11 3b 80 11 3f ed 40 67 bb c5 7f c5 49 8e eb 95 47 d1 92 40 d8 dc e4 47 42 3e 16 02 ec c0 36 1e 59 62 3d 4f 0b ce 4d a8 5b 17 3e 52 77 e4 24 95 0e fc 2e 07 91 f5 f8 75 71 ac 90 d2 fe a4 c7 68 52 2c 66 b8 2f 27 d7 c2 5e ad 0c 4e 31 3e aa 9f 5b 33 fa 8a 90 fe 85 7f b7 a9 91 09 a2 de bf c7 da 3b 6e 59 c7 d0 f6 72 09 91 b3 bc 30 83 4b 13 3a ec f8 ce 12 66 51 57 37 97 7c 35 8e ae 65 d4 4b dc a0 df 74 29 08 3c 62 cc 4e 32 ce 6b b7 8a 84 4b 6b 7e f5 0c c4 13 90 b0 f4 dd cf e5 d3 1b 5b 8c 49 0e ee 77 f4 09 ad 94 81 c9 56 fd 03 cd 36 34 9d 0e 7f 47 e5 9b d8 6f cd 5f df 95 47 37 8c 4b f0 cb f7 ee 0f d2 01 a8 dc 6b b7 77 9a c9 cf 0c 6c 03 d4 e1 13 9b 85 7c a9 a7 27 d8 c0 33 4d 5c fa a3 1c e4 1d 2b Data Ascii: q268t9*rLS;?@gIG@GB>6Yb=OM[>Rw$.uqhR,f/'^N1>[3;nYr0K:fQW7\|5eKt)<bN2kKk~[IwV64Go_G7Kkwl\|'3M\+
2024-04-25 06:40:33 UTC	16384	IN	Data Raw: a8 03 50 bd b4 50 0d 5c de 98 ea 3a 4a e0 fc cd 37 29 1f 5e bc bd 65 c6 02 b5 82 0d bd 25 cc 00 84 60 11 88 21 9f 5f 1e 92 53 b6 31 30 47 e1 d4 64 c2 9d 88 90 96 58 e8 6c 7b f6 34 9f 11 66 37 76 1c d9 70 f4 18 ab ad 82 04 9a 96 91 fe 73 3a 65 dd 07 64 4e a6 d8 d4 cd 37 de a0 dd 41 b9 fc 5d a9 aa 64 cd 9f ed d9 31 1e 4a 7c 85 f8 51 dc 03 f8 63 d4 cb 3c 0b df 9f 1c 5e 91 77 6b 30 c7 4a 89 fd 0e da fb 72 96 e8 59 45 ba 82 95 d0 bc 45 2f 63 a8 b7 a6 46 c3 02 c3 e7 89 ae 10 3e 6e 60 b7 b7 da f7 e4 bf ea 36 f6 43 77 42 14 b2 2d 34 e2 95 ff 44 88 27 4b cf ef df 3d d6 9e b8 40 fd 2c 1c b4 5a c9 a7 11 9b 26 f8 16 31 73 c6 62 07 4d 1b b2 80 01 25 1d 93 32 28 c2 2e ae ec b0 ae 41 4b b8 31 76 7b 50 5d 80 02 8b da 4a 50 b4 7d d5 c1 dd dc ea 24 95 ad a4 fc 4a 86 3a 91 Data Ascii: PP\:J7)^e%`!_S10GdXl{4f7vps:edN7A]d1J\|Qc<^wk0JrYEE/cF>n`6CwB-4D'K=@,Z&1sbM%2(.AK1v{P]JP}$J:
2024-04-25 06:40:33 UTC	16384	IN	Data Raw: 39 2e d3 8f b6 38 dd 10 c7 b8 6f e3 a8 67 dd 26 87 3e d5 b9 fa e6 f5 7d 0a 8a 6f 2e 61 8a 5b b6 c2 24 7e 41 15 b5 b8 48 a4 f8 a4 3e 90 b1 66 a0 3f 06 60 5f 12 91 1a f3 a3 ad ed 11 ca 9e af 4d c3 fc 12 a8 5a 38 5f db c6 c3 c8 9b 76 9a 94 e6 b9 8d 9e 8c 6d ba 30 5e 71 ec 7c c1 4c 5f c0 00 00 02 ef 41 9a 46 22 25 2f 00 0a 18 16 98 ee 72 10 8f 6d 7d 60 2c e5 77 ca 31 c7 82 48 d3 12 cc 1b 00 db 9e c4 79 49 77 62 a4 1f d5 fa 1d 50 33 23 7d b5 ed 91 b6 d3 b7 b8 32 a1 fb 56 b6 7b 24 d7 fa 3a 9e 32 a2 39 54 31 3d b4 22 53 66 0a 55 81 04 1f 7e 18 6e 8e 6b 8f 2a b0 b8 c5 86 b1 a3 81 67 81 2d 9d e8 aa c2 d6 8f ea db 41 99 38 c8 f7 0a cf 0f b3 d7 d6 d7 72 79 7b 6f 28 b8 77 86 01 43 a8 10 94 f6 4d 77 51 4b 00 10 22 a2 b3 bc 4e 31 5f 7e 23 92 c2 8f 11 bb 85 a5 19 9e a9 Data Ascii: 9.8og&>}o.a[$~AH>f?`_MZ8_vm0^q\|L_AF"%/rm}`,w1HyIwbP3#}2V{$:29T1="SfU~nk*g-A8ry{o(wCMwQK"N1_~#
2024-04-25 06:40:33 UTC	16384	IN	Data Raw: 18 0e f6 2b e1 41 9d ed 6c 96 b9 97 45 18 63 28 68 31 b6 2b 8b 7e 53 43 26 04 0d 81 28 b3 7a 9a eb fe 32 b3 c9 2c 49 b4 c5 77 71 69 63 f0 4a 34 e3 a7 e7 bd bd 4e 65 f9 e7 77 88 92 f1 73 f3 ce a8 9b 18 ad 7e 23 71 76 54 35 c8 ab 4e f6 15 ed fe 7a 11 82 4b 2c 56 61 2b c5 bd 18 17 bd b6 78 ca 72 7b 3f 58 3d c3 e5 c9 1c 1d bc ce ff a7 fd fe b6 de 0c 14 76 6e 05 12 4a 8c a5 e7 66 b3 b2 d4 dd 50 a3 20 16 3f 67 48 15 83 21 f1 8f c5 6b fc 5c 6d 86 60 4a 40 fc fd 91 d8 fa b2 2e f4 0f 30 9f 66 62 77 04 20 6e 73 e4 d9 46 f0 ec d6 83 5c e8 55 80 55 75 cf f2 3e 46 1e 57 8f 48 aa c5 b9 23 5a df 2c 9e c3 23 22 27 d4 93 88 7f dc 68 50 fd c0 28 6d b8 ac ce 92 1c a7 19 63 5c 4e ac 06 04 a9 ae a2 3d d8 36 74 43 fe 48 59 e5 e5 41 c3 0c 53 1f 26 ed ce b1 74 7c db 53 c6 6f fd Data Ascii: +AlEc(h1+~SC&(z2,IwqicJ4News~#qvT5NzK,Va+xr{?X=vnJfP ?gH!k\m`J@.0fbw nsF\UUu>FWH#Z,#"'hP(mc\N=6tCHYAS&t\|So
2024-04-25 06:40:33 UTC	16384	IN	Data Raw: 32 13 81 4f 4e 44 08 e1 1d db 81 26 94 b9 18 ba 45 66 9e 73 75 b7 48 ad ce e0 e1 58 3b 20 de 0f a0 13 c8 77 63 14 ec 0e fa a7 d6 08 b5 42 a8 f9 4f 51 fe 6c 35 62 51 01 16 14 f7 24 19 ea 6e e5 72 5f 9f 26 dc d8 7d e9 36 5a 4e 37 93 74 1b 2a df 18 ff 97 ce d7 75 0d 4d 11 91 d1 5c 67 6c 24 cb c9 10 2a 88 32 11 b4 5b 54 4d c2 6f 0a ed 73 38 e2 ad a7 2e 22 bd 22 c4 e4 7f 7d c4 ff 72 97 29 2f 8c 0b 68 80 c3 91 01 dd 7f 82 f8 05 fc f9 97 ff 18 0c 37 74 30 cc d9 9b 52 42 00 5d ff 36 0f fc b0 23 01 55 08 26 a6 34 b7 b4 bf b7 d6 15 23 06 c8 23 52 3c 34 f1 83 50 44 5a 30 58 a8 78 93 f6 06 bc 85 ad a6 df 2e 56 16 bc 78 5a 8d 6d 84 0c 7d 97 22 b6 6c 18 bb 4a 06 1c 55 88 2a e6 2b ab 26 0b 40 dd 1d b1 06 49 40 fd ee 71 23 f1 3a 4f cb 84 4f 29 e8 30 75 7d 3a a9 da 64 51 Data Ascii: 2OND&EfsuHX; wcBOQl5bQ$nr_&}6ZN7tuM\gl$2[TMos8.""}r)/h7t0RB]6#U&4##R<4PDZ0Xx.VxZm}"lJU*+&@I@q#:OO)0u}:dQ
2024-04-25 06:40:33 UTC	16384	IN	Data Raw: 9a 86 22 25 2f 00 0b 7c 83 6c df 3e be cf bc 72 6c 9a e4 10 28 d4 c6 47 5a c2 4b 4d 25 2a f3 ad 60 ae 09 86 8e e6 b9 03 0d 78 73 24 30 8f 19 d9 26 fc e2 89 fc 13 e4 c9 38 a5 fe b7 0b 71 de 9e 7b 20 3b 1f 25 ec f2 d4 54 4a 43 18 04 9e 80 ba aa 9f cf 66 71 46 b8 8e 29 8b 52 75 8c 2b c3 b2 a5 63 87 1a c5 39 05 4f a2 82 6f 9a 9a bf 5d d0 52 64 62 53 e0 7e c5 6c fc e6 4a e2 62 51 fa ef 8f f5 f3 c5 fe ce d7 52 ee c0 42 92 04 d3 c4 1b 24 8c be 3d 9d f6 7a 53 35 c9 58 e0 66 97 d0 78 42 05 80 97 c0 f9 9c f8 75 51 08 95 3a d2 f4 d0 41 12 b6 f3 1b 99 88 e4 e8 f1 0c 46 b8 2b 37 a6 98 4f b0 2b 4b 37 5e 96 7e e4 77 59 95 bb da 4a 24 58 e0 cd 7f 33 3b 0a 92 e6 50 78 24 1a f3 ac 2c 78 6c 7e 93 29 34 83 98 df d6 3c bb 6f 06 02 6e a1 79 3b a0 19 cd 8c 5e 88 f1 e2 26 fd 67 Data Ascii: "%/\|l>rl(GZKM%*`xs$0&8q{ ;%TJCfqF)Ru+c9Oo]RdbS~lJbQRB$=zS5XfxBuQ:AF+7O+K7^~wYJ$X3;Px$,xl~)4<ony;^&g
2024-04-25 06:40:33 UTC	16384	IN	Data Raw: 68 43 bb cc 37 96 79 a0 cb 34 52 13 e4 7f 91 73 3f 44 96 61 89 32 af 3d 2e 02 d2 f9 64 eb 9c 75 da 11 9d 0d 86 ae b5 c6 e8 50 f2 f1 56 53 c7 e5 09 99 11 4b e6 47 4e e4 87 78 b0 de b5 e4 9a ed 2c 6e 9a 9a c4 25 94 d0 05 4c f2 60 ee c4 b2 47 b9 f2 41 bb ae 0d c8 67 10 8b e1 5b f4 b5 b4 9c 85 be 45 45 65 8d 63 03 fa 18 78 50 6f b1 52 b8 83 31 2a a5 d0 d8 54 c1 9b 5b 53 53 3b 38 84 c6 87 10 25 72 98 76 a4 79 ee 5f 83 9a ad 50 3c 80 f2 3b b8 79 a9 4c e2 85 55 89 9f f8 b3 49 43 fc 8e bc 2b 34 41 41 d3 75 12 3c 49 16 ed 51 ec a0 dd f9 f5 7a 0a 77 94 dd 6c ec 03 d2 45 a1 a6 49 6a 38 d4 06 b1 25 77 57 a8 52 c2 a9 1d 78 b2 7d d7 da 26 6d f3 58 5b cb be f0 fa 9c 72 de 8c ea ca 55 da b0 d6 a2 7f 45 2d 3f e6 5a 1a cb d7 c4 97 3e 28 3e 94 e8 e4 42 75 bf 20 8d a1 8e d9 Data Ascii: hC7y4Rs?Da2=.duPVSKGNx,n%L`GAg[EEecxPoR1*T[SS;8%rvy_P<;yLUIC+4AAu<IQzwlEIj8%wWRx}&mX[rUE-?Z>(>Bu
2024-04-25 06:40:33 UTC	16384	IN	Data Raw: ec ea 64 51 1f fb 1e 7e 0d 85 bb 2a 3e 19 9c 2f a4 73 06 a2 d2 3f c0 aa 95 9e 2d 85 5b 83 5f 78 69 78 31 38 38 db d8 ed f6 80 68 3d b2 e2 df 4f d7 af 3a 4f b7 3d 09 12 9b 33 bf 63 4f 04 25 38 36 4a 99 0b 36 fd 7d 6f 1e cf cf 1f 9c ec 90 30 9c 45 0e 23 3e 68 ef a5 7f c9 bc 79 62 4b b5 a8 4b 15 20 04 53 08 4a 36 11 83 17 9e 8d 19 a9 ac e9 70 86 e1 ef b4 c9 15 fa 89 25 e0 7c e2 98 27 9c 95 1f 0f 06 77 89 eb 3e a3 8d 7d e6 a1 05 0b 31 be dc a2 ab 9d 62 31 33 fb b2 3e 02 0a 38 94 2e 38 5b 49 9a 5d 33 41 d8 f8 71 14 ba c3 15 e0 92 b2 64 d9 c9 7b 20 e1 3e 35 ee f7 06 da 0a e0 bf d3 0e 59 e2 46 68 af 4b 68 f2 44 72 d7 14 c5 fc 21 32 ed 5b b0 c3 c7 95 14 29 00 c8 7b 38 6c 9d ef 97 fc 8d bb cc 04 7c 09 49 b9 6b 57 0e 90 19 c0 5b df 1e 21 a3 d4 45 d4 36 7c 89 68 0d Data Ascii: dQ~*>/s?-[_xix188h=O:O=3cO%86J6}o0E#>hybKK SJ6p%\|'w>}1b13>8.8[I]3Aqd{ >5YFhKhDr!2[){8l\|IkW[!E6\|h
2024-04-25 06:40:33 UTC	16384	IN	Data Raw: 05 85 07 37 bb 10 47 b3 6d 35 fa 5d 25 b7 1c 98 7d 59 1a ea 4a 4f 80 2a 3f 50 df 17 35 1d a6 bb ad 7c 17 ec 85 f1 e7 9e 07 56 41 bf 28 d8 fc 07 68 25 b4 f2 5b fe fb 90 48 58 fa 83 98 2f 38 5f 22 de 11 75 94 c5 d5 de c4 7e 5c 83 0c 1b 2c a7 22 76 02 74 b3 27 35 34 4b e4 75 0a 0e a0 a2 50 82 c4 7c 24 d1 94 4e 7c af e8 08 05 d2 1e ed 31 30 7f b9 11 f9 90 df b5 53 d6 5a fd f1 a7 96 6e c3 b0 fe f0 bc 6a 22 c7 b0 1a 33 28 1c 53 8b 74 2a d3 ce 4f bb 2f 90 2b 1e dd 49 d4 e8 c6 3d bc 74 15 7d d2 bb a5 b2 77 42 3e 1b 7d 1e ff fd bf 0f 90 a4 35 5a e4 cb c7 3a 7a 29 93 c9 26 f9 74 02 33 53 39 50 cd 97 09 e6 9a 48 db dc ba 57 43 2a 8d 2b 18 ac 64 06 ce f8 7c f8 aa 9d a2 6c e7 6e b2 b6 33 87 87 c5 5b de fd c3 02 f3 7d 84 62 3c f2 5e 58 72 ee 4f c3 d3 2c 5b 7d 17 88 13 Data Ascii: 7Gm5]%}YJO?P5\|VA(h%[HX/8_"u~\,"vt'54KuP\|$N\|10SZnj"3(StO/+I=t}wB>}5Z:z)&t3S9PHWC*+d\|ln3[}b<^XrO,[}
2024-04-25 06:40:33 UTC	1398	IN	Data Raw: 49 24 7b 79 52 5a 91 c6 78 57 11 70 d5 a8 57 e8 57 c4 96 b3 68 a5 8d e8 2d 56 1c 48 5d 13 3d 47 98 6e 43 54 e5 b7 75 67 af 18 4e 18 6a 70 e7 85 6c 53 03 a6 cf ab a9 f4 e8 0a 90 87 b5 da 09 45 81 8e 9f e5 d2 d8 61 4c c5 c1 ee 6c 7b 38 f0 57 23 43 ed 69 f0 ff 50 92 e7 da 34 84 78 4c be f7 85 dd d0 2c 43 54 61 d5 d4 b3 ba d1 9c 1f 32 b0 f4 57 28 a6 2f ed 6a 3e 91 69 ab 2c a1 59 4f ca 65 f2 68 7b 7e 13 78 34 bd f8 67 cd a7 7e c9 09 56 4f c7 21 24 18 86 6b 8a d5 47 bc 38 a4 db eb 9a 54 52 f6 05 80 10 e8 70 7e 8f c3 bf f1 ea 09 3c 80 1b c6 4d 69 0a f7 20 f2 2e 86 56 f6 71 ea c6 8e e5 6f de 86 da b2 51 a1 16 7f 48 95 d9 aa 15 f9 65 4b fc 36 7e c2 38 d9 ad c1 88 8b ca 61 59 54 45 8a b1 a5 c0 3c 5b 6a 03 05 33 46 c6 30 7b b4 7d cb 78 63 a9 d1 c4 38 5a 0e b1 b2 c9 Data Ascii: I${yRZxWpWWh-VH]=GnCTugNjplSEaLl{8W#CiP4xL,CTa2W(/j>i,YOeh{~x4g~VO!$kG8TRp~<Mi .VqoQHeK6~8aYTE<[j3F0{}xc8Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49805	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:32 UTC	448	OUT	GET /file/464001166/1/01aTJ2ISKeU.21801/24028c7b6d07639794 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:33 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:32 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 21801 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:32 GMT ETag: "659450b658f9d14c28dc526221f345cf9958a64f" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:33 UTC	16021	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed bd 6b 8f 23 c7 91 36 fa 57 84 fe 5c 2c 64 46 de f5 75 b1 e7 e0 00 82 bd b0 bd c0 0b 08 83 c1 c8 1a 5b 3a 9e f1 08 92 bc 3e c2 42 ff fd c4 13 91 45 56 91 45 36 d9 4c f6 b0 7b d2 8b 55 0f eb 92 15 19 99 19 f7 cb ff 3e fc fa f7 5f 1e be b6 c3 c3 ff 3c 7c fd 10 c6 30 d2 c3 f0 f0 b7 9f 1f be 8e 66 78 f8 f1 a7 87 af f9 cf 27 fe 63 33 ff e3 df 0f 5f 07 4b c3 c3 0f f5 ef 3f 3f f2 4b 6f 8d a1 b7 ff f9 7f fe eb 4f 6f ff f8 df 7f e1 97 bf ff fe 7b 79 eb dd 2f bf bc ff 95 c7 fe f6 7f 1f 7e e4 2b 0f 7f fd f4 f1 a7 b7 86 1f f8 f0 ee b7 f7 3f eb 8d e9 d9 1f ff f9 bd 00 f1 eb 6f 0f 5f bb 3a ee 77 9f be ff ed ed 87 1f ff f9 fe 17 7e e7 a7 77 3f bf ff e7 af 0f 5f 7b fe ea 2f 3f cb b3 ff e0 21 fe f7 e1 13 fe f3 4e 06 f9 07 ff f7 f7 e1 e1 e7 Data Ascii: k#6W\,dFu[:>BEVE6L{U>_<\|0fx'c3_K??KoOo{y/~+?o_:w~w?_{/?!N
2024-04-25 06:40:33 UTC	5780	IN	Data Raw: ba 59 3c 25 ba 4a a5 21 fb b1 20 24 fe 92 78 ca 3d f0 ee 27 f3 12 16 9b e0 2d 6a f9 1a 35 17 f1 da d0 c0 53 34 30 df 87 b1 78 34 18 f1 92 df 45 61 f4 21 69 37 17 c4 ea 41 6d 1a a3 cf 93 dd 9d 19 c1 26 8e de 4b ce 1d cc 4b 19 66 79 43 6e 16 d9 e6 c5 82 e5 4c cd 1e 24 5b 60 3e d2 30 3f a4 1a 4a 7a 21 8d 5e a3 e8 66 5f 84 b9 28 48 2a 42 89 53 44 1d be 68 c7 22 c1 16 fc 6e 29 0e 51 73 c5 ed 52 dd a2 a6 e6 c1 d4 24 3d da 52 e2 2f 24 58 99 34 33 0f 55 b6 0a 8a 1e b3 de 28 f3 47 b5 7e cd 7b cb 45 82 41 e0 3f c8 05 76 32 32 72 21 d8 31 5b d8 05 78 24 01 24 90 b8 b5 44 d1 6a dd 3c 48 aa 34 97 84 f5 89 25 49 f3 1c 87 8f 8f 41 e2 f6 b6 eb 43 71 6f 7d 18 5c a6 af c8 6e d1 56 73 8c f3 48 58 1e 92 85 dd 68 cf 03 f4 b0 33 69 b6 3c 11 d5 fe 53 0d 3c a4 31 15 79 c7 b8 b4 Data Ascii: Y<%J! $x='-j5S40x4Ea!i7Am&KKfyCnL$[`>0?Jz!^f_(H*BSDh"n)QsR$=R/$X43U(G~{EA?v22r!1[x$$Dj<H4%IACqo}\nVsHXh3i<S<1y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49807	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:32 UTC	448	OUT	GET /file/464001493/2/hV6uPcaHk_E.17388/dcccb066a7b4fe44ee HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:33 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:32 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 17388 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:32 GMT ETag: "a10271ce8b0db840e55148a1a269601ebdc195ff" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:33 UTC	16021	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 59 8f 1b 47 b6 e6 5f 11 ea 39 99 88 7d f1 db 45 e3 de c1 00 82 3d e8 76 3f 19 86 20 b7 e5 65 5a b2 04 4b f7 f6 18 0d ff f7 39 df 89 c8 95 c9 e4 92 41 16 ab 2a 7a 29 91 49 32 d6 13 27 be b3 ff fb e1 cb cf 9f 1f be 92 cd c3 ff 3c 7c f5 60 5b db aa 87 e6 e1 a7 df 1f be 72 a2 79 f8 f5 d3 c3 57 f4 cf 47 fa 47 06 7a f1 af 87 af ac 54 cd c3 2f f9 df df 3e d0 8f de 08 61 de fc d7 7f fc ed db 37 df fc fd 5b fa f1 8f 3f fe c8 bf 7a fb f9 f3 bb 2f d4 f6 77 ff 7e f8 95 9e 3c fc e3 e3 87 4f 6f 04 7d e1 fd db 3f de fd 9e 3e e8 be fb eb 6f 3f f2 20 be fc f1 f0 95 c9 ed fe ed 97 b7 9f de bd 7a 8d 2f bf d2 96 7e f7 f9 77 fe ce 3f e9 a7 ff 7e f8 84 3f 6f f9 c7 ff a4 a6 94 75 0d fe 2f be ff f3 4f ea fa 23 7f f0 19 2d a0 a3 ef f7 a7 f2 f9 Data Ascii: }YG_9}E=v? eZK9A*z)I2'<\|`[ryWGGzT/>a7[?z/w~<Oo}?>o? z/~w?~?ou/O#-
2024-04-25 06:40:33 UTC	1367	IN	Data Raw: 11 dc 57 57 72 8c a6 9b 37 21 4d b7 2d 2d 3d a4 e3 ac f7 d9 d6 12 dd 70 5d 43 1b c7 c4 a1 8f be c8 a0 c0 db 0a 0d 0a 18 a2 cc 4a 49 68 85 0a 8d 0a f5 5f 67 4b c5 6a 4e 33 6a fe 88 23 fa 09 a0 6a 84 31 32 d9 29 18 a6 11 da 19 c7 65 2d 45 e3 b1 de 63 6f f4 fc 60 3e 30 fc 9e 0e 3a fb a1 1e 10 8f f8 ca f1 b8 0a 63 e4 17 37 4d f3 dd 4d 14 25 0e dc d5 b3 53 8f 0e 0f 3a 53 57 ef 70 74 30 6e 33 c3 31 d1 cf a6 38 a6 8b f1 60 ae 2b 0f 9f 45 ee 9d 12 14 8c a9 af 95 c8 6f 38 d0 6a 78 98 9e f5 75 16 f7 3e 69 16 db e8 c3 ee 50 74 dc a6 f8 61 1b f2 77 f2 93 5d 7e b4 49 3a 1a cd 0c f5 6f a7 93 03 4c ec 2b 39 f2 1b 96 1a 86 87 be 8b 11 e4 c9 ed 7f d2 2c b6 31 9e 9c 22 61 d0 27 87 73 7a d1 4d b0 7b ba eb 1f 17 9a a4 d4 08 8a 7c 32 b3 1c 1f 84 7b a5 b8 0d f5 c2 49 de 84 da Data Ascii: WWr7!M--=p]CJIh_gKjN3j#j12)e-Eco`>0:c7MM%S:SWpt0n318`+Eo8jxu>iPtaw]~I:oL+9,1"a'szM{\|2{I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49806	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:32 UTC	448	OUT	GET /file/464001484/1/bzi7gr7XRGU.10147/815df2ef527132dd23 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:32 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:32 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 10147 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:32 GMT ETag: "19a8c01d40babdc6b063746c48554639d0ecd1a3" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:32 UTC	10147	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 5d 59 8f 1b 47 92 fe 2b 46 3f 17 0b 79 1f 7e 5b 0c b0 8b 01 34 f6 60 8e 27 43 10 64 ab 6d 69 dd 3a 20 69 c6 6b 0c f4 df f7 fb 22 b3 8a c5 62 91 5d 24 8b ea 96 5c 33 30 d5 2c 92 99 91 91 91 91 71 c7 7f 6e 3e fe f2 e1 e6 5b dd dc fc fb e6 db 1b df fa d6 dc 34 37 3f bf bf f9 36 a8 e6 e6 d5 bb 9b 6f f1 cf 5b fc a3 13 fe f8 ed e6 5b af 4d 73 f3 b2 fe fb e6 35 7e f4 4c a9 fc ec ef 7f fe cb 5f 9f b9 0f b7 3f 3d fb fe 9f ff c0 08 2f 5e bc 90 9f 3e ff f0 e1 f6 23 26 f8 e1 3f 37 af f0 e4 e6 a7 b7 af df 3d 53 f8 c2 dd f3 df 6f df 97 0f ba ef be 7a f3 42 20 f9 f8 fb cd b7 b6 0e fe dd 3f 9f 3c f9 e6 4f df 7f f7 8f bf 7d ff 04 bf fa f0 5e be f1 2b 7e f8 9f 9b b7 7c 79 2e 3f fd 15 af 9f 9a 9b 77 f5 89 96 27 9c 93 0f fe 0f 1f b6 c1 35 37 Data Ascii: ]YG+F?y~[4`'Cdmi: ik"b]$\30,qn>[47?6o[[Ms5~L_?=/^>#&?7=SozB ?<O}^+~\|y.?w'57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49808	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:32 UTC	452	OUT	GET /file/464001828/11e99/2FUYW30UXAI.12708/7604effa1e02ddf7f9 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:32 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:32 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12708 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:32 GMT ETag: "5efa4caf73d09bf388e257a35d778134a66d2692" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:32 UTC	12708	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 5b 8f 1b 47 b2 e6 5f 11 fa b9 98 c8 c8 7b fa f5 60 77 b1 80 31 1e cc 05 e7 c1 10 0c 79 ac 19 6b 47 b2 0c 49 b3 b3 c6 c0 ff 7d e3 8b c8 22 8b 64 91 4d 36 8b 2d 76 77 ce c0 6c b1 b2 98 97 c8 88 c8 88 c8 b8 fc e7 ee cb 3f 3e df 7d 43 c3 dd ff bd fb e6 2e 9a 68 dc dd 70 f7 f7 4f 77 df 24 3b dc bd fb f5 ee 1b fe f3 91 ff 90 e3 7f fc fb ee 9b 48 6e b8 fb b9 fd fd e5 03 ff e8 07 6b fd 0f 7f fc ee bf ff f4 c3 77 7f fd 0b ff f8 a7 9f 7e 92 5f bd f9 fc f9 ed 17 ee fb fb ff dc bd e3 27 77 7f fb f8 e1 d7 1f 2c bf f0 fe cd 6f 6f 3f 69 c3 f8 ee bb 5f 7e 92 49 7c f9 ed ee 9b d0 fa fd f3 cf 6f 7e 7d fb ea 5b bc fc 2a 44 fe dd e7 4f f2 ce 3f f9 a7 ff b9 fb 15 1f 6f e4 c7 ff e4 ae 5c 4c 03 fe b3 af 7f ff 9d 87 fe 28 0d 9f d1 03 06 7a ad Data Ascii: }[G_{`w1ykGI}"dM6-vwl?>}C.hpOw$;Hnkw~_'w,oo?i_~I\|o~}[*DO?o\L(z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49804	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:32 UTC	448	OUT	GET /file/464001812/2/kLAK2TPyvUU.12545/f68c1caf735a2ea3db HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:32 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:32 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12545 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:32 GMT ETag: "b7ec796537cf35a32fadf36637c066e16a679383" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:32 UTC	12545	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 5d 8f 1b c7 ae ed 5f 31 e6 b9 55 28 d6 77 e5 ed 20 38 e7 22 80 91 5c ec 9d fd 64 18 86 13 3b 89 4f ec d8 b0 9d 9d 1b 6c f8 bf 5f 2e 56 b5 ba 25 b5 34 9a 51 a9 47 1a 77 3e 66 46 6a a9 bb c8 62 b1 58 e4 22 f9 9f 9b cf bf 7e ba f9 86 ba 9b 7f df 7c 73 e3 95 57 46 99 9b ee e6 97 8f 37 df 04 dd dd bc f9 70 f3 0d ff 7a cf bf 28 f1 1f 7f dd 7c e3 c9 74 37 bf d5 df 7f bc e3 af bd d0 9a 5e fc f3 87 6f bf fb af a7 2f 7e f8 d7 8f fc f5 57 af 5e c9 f7 5e 7e fa f4 fa 33 df ff d9 7f 6e de f0 3b 37 3f bf 7f f7 e1 85 e6 0f bc 7d f9 f7 eb 8f e5 42 ff d9 37 7f bc 92 81 7c fe 5b 5e ca 9d 71 e3 4f ef 7f 7e f3 f2 ed 8b 57 7f fe fc 3b 7f f1 e3 eb 5f be 5b df 89 f8 8d 4f 1f e5 5b bf f3 cd fe 73 f3 01 3f 5e ca f7 7f e7 9b 1b 1f 3a e3 bd 4a d1 Data Ascii: }]_1U(w 8"\d;Ol_.V%4QGw>fFjbX"~\|sWF7pz(\|t7^o/~W^^~3n;7?}B7\|[^qO~W;_[O[s?^:J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49809	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:32 UTC	448	OUT	GET /file/464001418/1/fabnJFzygPY.17422/bc9dec9fd8bd26e00e HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:33 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:32 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 17422 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:32 GMT ETag: "8c3dca30247141a56bd9786fc869d92e887e1bdd" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:33 UTC	16021	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 6d af 1b 47 72 ee 5f 31 ce e7 e1 a0 ab df db df 82 20 37 58 c0 48 82 64 93 2f 86 20 c8 6b d9 d6 5d c9 32 24 ed e6 3a 81 ff fb ad a7 aa 7b 38 24 87 3c 24 67 48 9d 23 8d 17 7b 44 0e 67 a6 bb ab ab eb fd e5 7f 1f 3e fd fc f1 e1 5b ea 1e fe fe f0 ed 43 e8 43 6f 1f ba 87 9f 3e 3c 7c 1b 4d f7 f0 e6 b7 87 6f f9 9f f7 fc 0f 65 fe f0 df 0f df 06 b2 dd c3 2f f5 df 5f df f1 43 2f 8d 09 2f ff ed df ff f4 5f ff f0 e7 7f 7a f9 af ff f9 67 7e fe c7 1f 7f 94 07 5f 7d fc f8 fa 13 bf fe fb ff 7d 78 c3 57 1e fe f2 fe dd 6f 2f 0d df f0 f6 d5 ef af 3f e8 0f ed de 37 bf fe 28 f3 f8 f4 fb c3 b7 be be fa dd fb bf 7d fa e5 1b c7 0f fc f6 ea c3 eb 5f 3f 3d 7c eb 78 d4 8f 1f e4 c6 bf f2 f3 ff fb f0 1e 7f 5e e9 05 79 1f df 84 a9 e1 e5 64 cc 0b 99 Data Ascii: }mGr_1 7XHd/ k]2$:{8$<$gH#{Dg>[CCo><\|Moe/_C//_zg~_}}xWo/?7(}_?=\|x^yd
2024-04-25 06:40:33 UTC	1401	IN	Data Raw: 57 ed be 1c 06 f9 ea dd b6 30 fc 9f 3f bc 79 f7 0d 24 d4 8f 73 a5 7e 3a 94 fa e9 02 a9 7f 43 28 30 8c f2 49 b9 2f 9e 6e 20 fc ab 79 2e f7 3e d8 66 56 89 1a c1 98 18 b4 b0 62 b8 de 6f 83 44 61 5a 83 dd 26 a9 dd 46 e4 7e e9 40 dd e7 50 60 b7 31 71 54 b8 18 36 ba dc f9 de 15 31 e7 c0 f8 e2 51 c7 d8 7b f9 4e 84 4e cb 5d 48 ac 54 2c a1 24 b0 0e 93 b3 75 81 75 0e 92 16 0d c5 6d ff 83 61 4f 7e 48 d1 27 13 57 5d e2 29 e8 12 8b 48 54 4b 08 54 76 09 79 ca 2d 21 ac fa bc c0 4c e2 12 ea 55 5a 42 bd ca 4b a8 57 65 09 f5 6a 61 2d 60 19 ce bb 0c df 5d 86 ed 2e 63 ad 3b e4 b9 66 59 2d 60 19 d1 67 19 c9 c7 2e 22 f8 b8 65 a4 4b 9f 97 98 4c 5c 46 3d 4a 8b a8 47 79 19 f5 a8 2c a2 1e 2d 2e bd cf 7d 8f 5b 04 c6 03 15 99 3b 9d b0 0c 94 e3 1e 94 c7 a4 a4 84 bb 4a ef 76 4f 7a 7f Data Ascii: W0?y$s~:C(0I/n y.>fVboDaZ&F~@P`1qT61Q{NN]HT,$uumaO~H'W])HTKTvy-!LUZBKWeja-`].c;fY-`g."eKL\F=JGy,-.}[;JvOz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49811	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:33 UTC	643	OUT	GET / HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 06:40:33 UTC	447	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:33 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6030 Connection: close Set-Cookie: stel_ssid=4798a1392743dd361b_17281240659406526168; expires=Thu, 25 Apr 2024 17:47:13 GMT; path=/; samesite=None; secure; HttpOnly Pragma: no-cache Cache-control: no-store X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:33 UTC	6030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 20 44 65 73 6b 74 6f 70 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 54 65 6c 65 67 72 61 6d 20 44 65 73 6b 74 6f 70 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 Data Ascii: <!DOCTYPE html><html class=""> <head> <meta charset="utf-8"> <title>Telegram Desktop</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta property="og:title" content="Telegram Desktop"> <meta property

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49813	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:33 UTC	448	OUT	GET /file/464001880/2/VGTLBN3QuYM.10959/8940838e7dddc787d8 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:33 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:33 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 10959 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:33 GMT ETag: "5c58efa7837b68ba6221da9224af8d45435b55a1" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:33 UTC	10959	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d dd 8f dc b6 b2 e7 bf 12 cc b3 44 f0 fb 23 ef 77 f7 e5 62 f7 62 cf be 2c 02 23 70 8e 27 71 36 4e 1c d8 3e 27 1b 04 f9 df b7 7e 55 94 c4 56 4b dd 33 d3 ea 9e b1 ad 73 71 e3 69 89 22 8b 45 b2 58 df f5 d7 dd a7 9f 3e de 7d 6b ba bb 7f df 7d 7b 17 54 50 f6 ae bb fb f1 c3 dd b7 51 77 77 3f ff 7e f7 2d fd f3 9e fe 31 99 fe f8 e3 ee db 60 6c 77 f7 b6 fe fb db af f4 d1 f7 5a a7 ef ff e7 7f fd c7 ff f8 fe ff fc 27 7d fb e6 cd 1b fe e8 f5 c7 8f f7 9f a8 eb ef 5e 75 77 ef 5e ff 79 ff 01 7f ff 35 be fe f9 b7 37 3c ec a7 3f ef be f5 b5 a7 ff 44 b3 6f 4c a1 5e 3e 7e e0 b7 bf d0 47 7f dd 7d c0 7f 5e cb 03 ee e4 67 3c f8 7f f4 a7 56 d9 39 1a e0 cf f1 ef bf 09 dc e9 ad 89 69 7c 8b bf e9 ed 27 1e 1e c0 68 fa f9 17 7e f3 dc f0 c4 45 7a 86 Data Ascii: }D#wbb,#p'q6N>'~UVK3sqi"EX>}k}{TPQww?~-1`lwZ'}^uw^y57<?DoL^>~G}^g<V9i\|'h~Ez

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49812	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:33 UTC	448	OUT	GET /file/464001453/2/eW_MzRhUGoM.10926/fe1f3bc3dd08367c0a HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:33 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:33 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 10926 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:33 GMT ETag: "bfd4d42dd14ef70d0233bb51ae6d69b50d877b15" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:33 UTC	10926	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 59 8f dc 48 92 e6 5f 29 e4 33 49 f8 7d d4 e3 2e 66 06 03 cc 60 16 db d3 4f 85 84 20 b5 54 25 4d e9 82 a4 ea de 42 43 ff 7d ed 33 77 27 9d 0c 46 64 44 06 23 f2 90 97 50 19 41 d2 c3 dd e9 87 b9 1d 9f 99 fd f3 e6 db 6f 5f 6f 7e 96 dd cd df 6f 7e be b1 83 1d d4 4d 77 f3 eb 97 9b 9f 9d e8 6e de 7d be f9 99 3e 3e d1 87 0c f4 e5 1f 37 3f 5b a9 ba 9b b7 f9 f3 e3 07 fa d1 0b 21 dc 8b bf fc cb ff fe eb ff fd 97 17 ff f5 d7 ff a6 9f bf 7e fd 9a 7f f7 f2 eb d7 37 df a8 f6 5f fe 79 f3 8e ee dc fc ed d3 87 cf 2f 04 15 78 ff f2 cf 37 5f d2 83 52 f6 dd c7 d7 dc 8d 6f 7f de fc 6c 72 cd 3f 51 d1 af 5f f8 f6 ef 54 fa 9f 37 5f f0 e7 65 ba 91 aa c5 8d ff 47 5f c5 10 b4 be ed 6e fe 1c bf 7f a7 7e 4f 4f a5 f3 e3 53 7c a7 a7 df a8 1e 45 2d a3 Data Ascii: }YH_)3I}.f`O T%MBC}3w'FdD#PAo_o~o~Mwn}>>7?[!~7_y/x7_Rolr?Q_T7_eG_n~OOS\|E-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49814	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:33 UTC	410	OUT	GET /img/favicon.ico HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:33 UTC	383	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:33 GMT Content-Type: image/x-icon Content-Length: 15086 Last-Modified: Thu, 21 Apr 2022 13:47:47 GMT Connection: close ETag: "62616083-3aee" Expires: Thu, 02 May 2024 06:40:33 GMT Cache-Control: max-age=604800 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-04-25 06:40:33 UTC	15086	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 da 9e 22 0d d9 9e 22 36 d9 9e 22 6f d9 9e 22 a4 d9 9e 22 cd d9 9e 22 e7 d9 9e 22 f7 d9 9e 22 fe d9 9e 22 fe d9 9e 22 f7 d9 9e 22 e7 d9 9e 22 cd d9 9e 22 a4 d9 9e 22 6f d9 9e 22 36 da 9e 23 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %6 % h6(0` $""6"o"""""""""""o"6#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49810	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:33 UTC	648	OUT	GET /img/t_main_iOS_demo.mp4 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://telegram.org/ Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473 Range: bytes=244736-244747 If-Range: "5eb6fd6e-3bc0c"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49815	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:33 UTC	448	OUT	GET /file/464001560/1/zLlKYgeDLoA.14496/62085b07461f2d87e4 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=8673a4fdb27a0ffa07_15376356309213090473
2024-04-25 06:40:33 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:33 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 14496 Connection: close Cache-Control: max-age=2592000, public Expires: Sat, 25 May 2024 06:40:33 GMT ETag: "bf069c5896b831434feb0a676d5c8a00925c46e2" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-25 06:40:33 UTC	14496	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 59 8f dc 46 b6 e6 5f 11 ea 99 19 88 7d f1 5b 8f a7 67 fa 02 82 dc 68 bb 1f 2e 0c 41 90 ad b2 ad 71 c9 12 24 75 7b 8c 86 ff fb 3d df 09 92 49 66 92 cc 85 91 a9 2c 29 da ad ca 2a 26 c9 38 71 22 e2 ec cb 7f ee 3e fe fc e1 ee 2b d5 dc fd fb ee ab 3b 27 9c d0 77 cd dd 4f ef ef be f2 b2 b9 7b fd ee ee 2b fa 78 4b 1f 2a d2 2f bf df 7d e5 94 6e ee 7e 69 3f 7f 7b 43 0f bd 90 4a be f8 f6 bf 9f 7d fd e2 d9 8b 6f fe f9 1d 3d fe ea d5 2b 7e ee e5 87 0f f7 1f e9 ed df ff e7 ee 35 5d b9 fb f1 ed 9b 77 2f 24 dd f0 f0 f2 8f fb f7 f9 8b ee de d7 bf bd 62 30 3e fe 71 f7 95 6d df fc ed 2f 2f df dd 3f 79 8a 9b 9f 28 7a ec dd cb f7 f7 bf 7d bc fb ca d0 6d f9 ee 0f ef f9 e3 57 7a d7 7f ee de e1 c7 4b 7e db af f4 6e a5 8d d0 56 37 5a 6b 11 9d Data Ascii: }YF_}[gh.Aq$u{=If,)&8q">+;'wO{+xK/}n~i?{CJ}o=+~5]w/$b0>qm//?y(z}mWzK~nV7Zk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49816	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:34 UTC	621	OUT	GET /css/bootstrap.min.css?3 HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://desktop.telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=4798a1392743dd361b_17281240659406526168
2024-04-25 06:40:34 UTC	379	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:34 GMT Content-Type: text/css Content-Length: 42523 Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Connection: close ETag: "5a05e7c6-a61b" Expires: Mon, 29 Apr 2024 06:40:34 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-04-25 06:40:34 UTC	16005	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 32 2e 30 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 34 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 0a 2f 2a 21 0a 20 2a 20 47 65 6e 65 72 61 74 65 64 20 75 73 69 6e 67 20 74 68 65 20 42 6f 6f 74 73 74 72 61 70 20 43 75 73 74 6f 6d 69 7a 65 72 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 63 75 73 74 6f 6d 69 7a 65 2f 3f 69 Data Ascii: /! Bootstrap v3.2.0 (http://getbootstrap.com) * Copyright 2011-2014 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! * Generated using the Bootstrap Customizer (http://getbootstrap.com/customize/?i
2024-04-25 06:40:34 UTC	16384	IN	Data Raw: 6c 6f 72 3a 23 37 37 37 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 37 37 37 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 5b 72 65 61 64 6f 6e 6c 79 5d 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 6f 70 61 63 69 74 79 3a 31 7d 74 65 78 74 61 72 65 61 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 Data Ascii: lor:#777}.form-control::-webkit-input-placeholder{color:#777}.form-control[disabled],.form-control[readonly],fieldset[disabled] .form-control{cursor:not-allowed;background-color:#eee;opacity:1}textarea.form-control{height:auto}input[type="search"]{-webkit
2024-04-25 06:40:34 UTC	10134	IN	Data Raw: 74 3a 30 7d 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 72 61 64 69 6f 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 68 61 73 2d 66 65 65 64 62 61 63 6b 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 65 65 64 62 61 63 6b 7b 74 6f 70 3a 30 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 30 29 7b 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e Data Ascii: t:0}.navbar-form .radio input[type="radio"],.navbar-form .checkbox input[type="checkbox"]{position:relative;margin-left:0}.navbar-form .has-feedback .form-control-feedback{top:0}}@media (max-width:0){.navbar-form .form-group{margin-bottom:5px}}@media (min

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49817	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:34 UTC	618	OUT	GET /css/telegram.css?237 HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://desktop.telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=4798a1392743dd361b_17281240659406526168
2024-04-25 06:40:34 UTC	381	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:34 GMT Content-Type: text/css Content-Length: 114933 Last-Modified: Mon, 22 Apr 2024 10:54:25 GMT Connection: close ETag: "662641e1-1c0f5" Expires: Mon, 29 Apr 2024 06:40:34 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-04-25 06:40:34 UTC	16003	IN	Data Raw: 62 6f 64 79 20 7b 0a 20 20 66 6f 6e 74 3a 20 31 32 70 78 2f 31 38 70 78 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 22 4c 75 63 69 64 61 20 53 61 6e 73 20 55 6e 69 63 6f 64 65 22 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 2f 2a 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 2a 2f 0a 7d 0a 68 74 6d 6c 2e 6e 61 74 69 76 65 5f 66 6f 6e 74 73 20 62 6f 64 79 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 Data Ascii: body { font: 12px/18px "Lucida Grande", "Lucida Sans Unicode", Arial, Helvetica, Verdana, sans-serif; /-webkit-font-smoothing: antialiased;/}html.native_fonts body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica,
2024-04-25 06:40:34 UTC	16384	IN	Data Raw: 20 61 75 74 6f 3b 0a 7d 0a 2e 74 6c 5f 6d 61 69 6e 5f 64 6f 77 6e 6c 6f 61 64 5f 6c 69 6e 6b 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 36 32 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 34 30 70 78 20 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 61 2e 74 6c 5f 6d 61 69 6e 5f 64 6f 77 6e 6c 6f 61 64 5f 6c 69 6e 6b 3a 68 6f 76 65 72 20 7b Data Ascii: auto;}.tl_main_download_link { text-align: center; display: inline-block; height: 300px; padding-top: 262px; padding-bottom: 20px; margin: 40px 0; font-size: 15px; max-width: 100%; position: relative;}a.tl_main_download_link:hover {
2024-04-25 06:40:34 UTC	16384	IN	Data Raw: 5f 70 61 67 65 5f 74 69 74 6c 65 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b 0a 7d 0a 0a 2e 64 65 76 5f 70 61 67 65 5f 68 65 61 64 20 2e 64 65 76 5f 70 61 67 65 5f 68 65 61 64 5f 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 23 64 65 76 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 5f 77 72 61 70 20 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 37 70 78 3b 0a 7d 0a 23 64 65 76 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 5f 77 72 61 70 20 70 72 65 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 2d 78 3a 20 61 75 74 6f 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 7d 0a 0a 23 64 65 76 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 5f 77 72 61 70 20 70 72 65 3a 3a 2d 77 Data Ascii: _page_title { position: static;}.dev_page_head .dev_page_head_logo { margin-left: 0;}#dev_page_content_wrap blockquote { padding: 5px 17px;}#dev_page_content_wrap pre { overflow-x: auto; border-radius: 0;}#dev_page_content_wrap pre::-w
2024-04-25 06:40:34 UTC	16384	IN	Data Raw: 20 63 6f 6c 6f 72 3a 20 23 63 63 63 3b 0a 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 36 29 3b 0a 7d 0a 2e 74 65 78 74 66 69 65 6c 64 2d 69 74 65 6d 2d 65 72 72 6f 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 34 35 61 35 38 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 39 70 78 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 39 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 20 30 20 2d 31 39 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 37 70 78 3b 0a 20 20 76 69 73 69 62 69 Data Ascii: color: #ccc; color: rgba(0,0,0,.26);}.textfield-item-error { color: #d45a58; position: absolute; font-size: 14px; line-height: 19px; min-height: 19px; margin: 5px 0 -19px; background: #fff; width: 100%; padding-bottom: 7px; visibi
2024-04-25 06:40:34 UTC	16384	IN	Data Raw: 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 7d 0a 23 64 65 76 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 20 2e 62 6c 6f 67 5f 69 6d 61 67 65 5f 77 72 61 70 20 70 2c 0a 2e 74 6c 62 5f 70 61 67 65 5f 77 72 61 70 20 2e 74 6c 5f 63 6f 6e 74 65 73 74 5f 70 61 67 65 5f 77 72 61 70 20 23 64 65 76 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 20 2e 62 6c 6f 67 5f 69 6d 61 67 65 5f 77 72 61 70 20 70 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 38 30 38 30 38 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 30 20 30 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 30 25 3b 0a 20 20 Data Ascii: { width: 100%; max-width: auto;}#dev_page_content .blog_image_wrap p,.tlb_page_wrap .tl_contest_page_wrap #dev_page_content .blog_image_wrap p { text-align: center; color: #808080; font-size: 12px; margin: 10px 0 0; line-height: 150%;
2024-04-25 06:40:35 UTC	16384	IN	Data Raw: 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 34 62 62 63 38 37 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 61 2e 74 67 6d 65 5f 61 63 74 69 6f 6e 5f 62 75 74 74 6f 6e 5f 6e 65 77 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 61 63 63 65 6e 74 2d 62 74 6e 2d 63 6f 6c 6f 72 29 3b 0a 7d 0a 61 2e 74 67 6d 65 5f 61 63 74 69 6f 6e 5f 62 75 74 74 6f 6e 5f 6e 65 77 2e 73 68 69 6e 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 32 37 30 64 65 67 2c 20 72 67 62 61 28 31 30 30 2c 20 31 38 31 2c 20 32 33 39 2c 20 30 29 20 34 38 2e 34 34 25 2c 20 23 36 34 62 35 65 Data Ascii: { color: #FFF; background: #4bbc87; text-decoration: none;}a.tgme_action_button_new { background-color: var(--accent-btn-color);}a.tgme_action_button_new.shine { background-image: linear-gradient(270deg, rgba(100, 181, 239, 0) 48.44%, #64b5e
2024-04-25 06:40:35 UTC	16384	IN	Data Raw: 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 32 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 34 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 31 70 78 3b 0a 7d 0a 2e 74 6c 5f 63 6f 6e 74 65 6e 74 5f 74 69 74 6c 65 5f 6c 69 6e 6b 2c 0a 2e 74 6c 5f 63 6f 6e 74 65 6e 74 5f 74 69 74 6c 65 5f 6c 69 6e 6b 3a 68 6f 76 65 72 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 74 64 5f 73 63 72 65 65 6e 73 68 6f 74 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 67 2f 74 64 5f 6c 61 70 74 6f 70 2e 70 6e 67 29 20 35 30 25 20 30 20 6e 6f 2d 72 65 70 65 61 74 3b 0a Data Ascii: enter; margin-top: 32px; margin-bottom: 14px; font-weight: normal; letter-spacing: -1px;}.tl_content_title_link,.tl_content_title_link:hover { text-decoration: none;}.td_screenshot { background: url(../img/td_laptop.png) 50% 0 no-repeat;
2024-04-25 06:40:35 UTC	626	IN	Data Raw: 78 3b 0a 20 20 7d 0a 20 20 2e 74 6c 5f 6d 61 69 6e 5f 64 6f 77 6e 6c 6f 61 64 5f 69 6d 61 67 65 5f 5f 69 6f 73 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 2d 31 30 33 70 78 20 30 20 30 20 2d 31 30 31 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 33 30 30 70 78 20 31 38 33 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 30 36 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 36 35 70 78 3b 0a 20 20 7d 0a 20 20 2e 74 6c 5f 6d 61 69 6e 5f 76 69 64 65 6f 5f 70 6c 61 79 65 72 5f 5f 61 6e 64 72 6f 69 64 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 2d 31 30 39 70 78 20 30 20 30 20 2d 31 30 31 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 30 35 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 36 32 70 78 3b 0a 20 20 7d 0a 20 20 Data Ascii: x; } .tl_main_download_image__ios { margin: -103px 0 0 -101px; background-size: 300px 183px; width: 206px; height: 165px; } .tl_main_video_player__android { margin: -109px 0 0 -101px; width: 205px; height: 162px; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49818	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:34 UTC	597	OUT	GET /js/main.js?47 HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://desktop.telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=4798a1392743dd361b_17281240659406526168
2024-04-25 06:40:34 UTC	393	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:34 GMT Content-Type: application/javascript Content-Length: 21478 Last-Modified: Sat, 10 Dec 2022 23:01:54 GMT Connection: close ETag: "63950fe2-53e6" Expires: Mon, 29 Apr 2024 06:40:34 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-04-25 06:40:34 UTC	15991	IN	Data Raw: 76 61 72 20 73 74 61 72 74 54 69 6d 65 20 3d 20 2b 28 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 64 54 28 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 27 5b 27 20 2b 20 28 28 2b 28 6e 65 77 20 44 61 74 65 28 29 29 20 2d 20 73 74 61 72 74 54 69 6d 65 29 2f 20 31 30 30 30 2e 30 29 20 2b 20 27 5d 20 27 3b 0a 7d 0a 0a 76 61 72 20 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 73 20 3d 20 5b 5d 3b 0a 66 75 6e 63 74 69 6f 6e 20 74 77 69 74 74 65 72 43 75 73 74 6f 6d 53 68 61 72 65 49 6e 69 74 20 28 29 20 7b 0a 20 20 76 61 72 20 62 74 6e 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3f 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c Data Ascii: var startTime = +(new Date());function dT() { return '[' + ((+(new Date()) - startTime)/ 1000.0) + '] ';}var jsonpCallbacks = [];function twitterCustomShareInit () { var btns = document.querySelectorAll ? document.querySelectorAll
2024-04-25 06:40:34 UTC	5487	IN	Data Raw: 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 69 65 6e 74 58 20 3d 20 65 2e 63 6c 69 65 6e 74 58 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 69 65 6e 74 59 20 3d 20 65 2e 63 6c 69 65 6e 74 59 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 69 70 70 6c 65 58 20 3d 20 28 63 6c 69 65 6e 74 58 20 2d 20 72 65 63 74 2e 6c 65 66 74 29 20 2d 20 72 69 70 70 6c 65 4d 61 73 6b 2e 6f 66 66 73 65 74 57 69 64 74 68 20 2f 20 32 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 69 70 70 6c 65 59 20 3d 20 28 63 6c 69 65 6e 74 59 20 2d 20 72 65 63 74 2e 74 6f 70 29 20 2d 20 72 69 70 70 6c 65 4d 61 73 6b 2e 6f 66 66 73 65 74 48 65 69 67 68 74 20 2f 20 32 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 69 70 70 6c 65 Data Ascii: } else { var clientX = e.clientX; var clientY = e.clientY; } var rippleX = (clientX - rect.left) - rippleMask.offsetWidth / 2; var rippleY = (clientY - rect.top) - rippleMask.offsetHeight / 2; var ripple

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49819	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:36 UTC	679	OUT	GET /img/twitter.png HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://desktop.telegram.org/css/telegram.css?237 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=4798a1392743dd361b_17281240659406526168
2024-04-25 06:40:36 UTC	337	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:36 GMT Content-Type: image/png Content-Length: 1272 Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Connection: close ETag: "5a05e7c6-4f8" Expires: Mon, 29 Apr 2024 06:40:36 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:36 UTC	1272	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 00 11 08 06 00 00 00 32 86 e7 80 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR2tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49820	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:36 UTC	681	OUT	GET /img/td_laptop.png HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://desktop.telegram.org/css/telegram.css?237 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=4798a1392743dd361b_17281240659406526168
2024-04-25 06:40:36 UTC	341	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:36 GMT Content-Type: image/png Content-Length: 189734 Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Connection: close ETag: "5a05e7c6-2e526" Expires: Mon, 29 Apr 2024 06:40:36 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:36 UTC	16043	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 48 00 00 01 e7 08 06 00 00 00 82 32 7d c9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 02 e4 c8 49 44 41 54 78 da ec bd 07 94 25 67 75 ef fb af 70 f2 39 9d a7 7b f2 68 46 a3 9c 03 92 10 0a 48 02 91 44 32 5c 1b 1b 3f 30 ef 82 6d e2 ba 60 cc 03 79 f9 1a 03 36 b6 65 bc 8c 7d b1 cd 23 18 1e 0b 58 80 01 03 b6 11 58 02 84 04 48 02 84 40 12 ca d2 e4 d4 f1 e4 53 f9 ed bd bf aa ee 9e 56 f7 4c 2b cc 68 46 b3 7f a3 52 9f 50 e1 ab af c2 d9 ff da e1 b3 92 24 81 f2 c4 b9 ea aa ab 16 fb 78 2d 4d 2f a3 e9 72 9a 4e 4b df f7 6b 6f 29 8a a2 28 8a a2 28 4f 00 8f a6 29 9a 1e a0 e9 76 9a fe 9b a6 ef dd 78 e3 8d 91 76 cd 53 8f a5 02 e9 29 15 48 97 d0 74 Data Ascii: PNGIHDRH2}tEXtSoftwareAdobe ImageReadyqe<IDATx%gup9{hFHD2\?0m`y6e}#XXH@SVL+hFRP$x-M/rNKko)((O)vxvS)Ht
2024-04-25 06:40:36 UTC	16384	IN	Data Raw: 6c a5 f9 de 94 a5 aa d2 2d 66 84 3f 46 a4 1d 24 e7 67 6e de a5 43 e5 16 0b 01 5c 4e 71 86 a5 4a 80 2f fc cc fc b5 16 f5 a8 cd 2f 6b ae 12 43 51 81 a4 1c f1 dc 76 f3 cd f8 b7 2f 7e 01 b5 d1 95 68 93 c1 39 38 38 20 37 2f 16 3f ec 91 b9 ec f2 cb 51 ae 96 71 f5 f3 af 16 c1 c4 9f 9b a7 43 b6 fc 48 f1 cd 8e c5 00 8b 06 fe 6e b6 8c af 78 97 5c 09 87 fb ca 57 be 22 1e 98 03 31 31 31 81 0b 2e b8 00 27 9c 70 82 78 0f d8 58 66 f1 c1 1e 05 16 32 99 f0 98 4f e6 59 60 83 9b b7 ff 8b 5f fc 42 8c 07 36 9c b9 b2 d4 1d 77 dc 81 1f ff f8 c7 22 8a b8 9d bc 0e f6 4a 5c 76 d9 65 12 ba c7 cb b3 b0 61 8f 14 7b 96 b2 1b 3d 0b bb cf 7f fe f3 f8 dc e7 3e 87 b7 bc e5 2d b8 ee ba eb 44 10 5d 75 d5 55 62 ac b3 07 88 ab f6 f1 36 59 fc f0 7e 5f 7a e9 a5 e2 5d 9a 0f 6f 8f 45 00 17 ae b8 Data Ascii: l-f?F$gnC\NqJ//kCQv/~h988 7/?QqCHnx\W"111.'pxXf2OY`_B6w"J\vea{=>-D]uUb6Y~_z]oE
2024-04-25 06:40:36 UTC	16384	IN	Data Raw: e6 07 11 2e 52 e1 90 96 06 05 3b 25 22 00 9a c1 4a d5 29 b7 05 c2 e4 22 9d af c8 11 eb d8 48 44 61 21 b4 c1 2c 24 a2 a9 23 00 c3 88 49 a6 95 6f 43 30 19 f3 b1 20 00 47 5d 4e 82 da 17 17 78 22 25 0c 42 d9 1d d4 6d 84 56 87 2c 16 13 53 9b fa d6 42 c0 ae ed 4c bd f7 49 b2 eb 59 af 25 19 27 28 f6 f9 44 2b 47 21 88 c9 a8 57 2b 73 0c 41 e8 bc 85 92 76 93 81 52 87 4a 10 05 28 31 10 60 84 53 84 b2 9b b1 62 08 45 65 8d 72 45 54 21 80 41 69 28 00 29 72 82 0d 18 f7 16 03 87 b1 6a 91 ca 48 eb 8b ac 11 b4 57 47 ab 56 47 a9 5a 06 03 27 15 41 d4 06 38 88 13 0b 60 90 9d c7 e7 11 3e 53 c5 91 11 01 9b b8 bf 61 99 e2 68 59 8e 39 a9 35 49 c1 f7 87 01 93 cd fa b2 ac 09 d8 28 80 a3 28 50 3d cc 46 24 f2 d4 56 bd 4e 4e 61 dc e6 f3 15 d1 3a ee 43 b1 36 47 6b b9 8f 6b a6 4a 0c 98 Data Ascii: .R;%"J)"HDa!,$#IoC0 G]Nx"%BmV,SBLIY%'(D+G!W+sAvRJ(1`SbEerET!Ai()rjHWGVGZ'A8`>SahY95I((P=F$VNNa:C6GkkJ
2024-04-25 06:40:36 UTC	16384	IN	Data Raw: e5 f5 a6 cf bf fd 99 6e f2 4f 1e 7d f4 d1 0f 85 48 3e f4 20 fd 8c d2 d9 73 b8 5f ab f4 2d 26 6f f2 b7 75 5c 88 97 4c ef 43 53 29 87 92 b0 6a 4d 97 d7 9f 85 b7 ed 55 36 ad 5c ea b7 76 5e 8a a2 bc 01 26 ca 4e dd 3e 52 17 ef 1b 5a c6 67 f6 ce e2 e7 37 a6 d1 2c 41 fa 7f db d5 82 4e 49 1e 7a e4 eb 1f 1e 98 c2 8b d6 37 f0 6f 27 e7 f2 92 f0 c4 71 6c 26 8f fe 96 18 3e 29 7f 6b 96 60 be 28 f7 e5 e5 5b 1b f1 a6 0b 5b f1 a8 24 1b 9b 5a a2 f8 1f df 1f c5 2f ef 6a c6 15 7d 29 e4 24 61 49 4a 80 bf 41 92 99 3f 7a 51 27 9e 9c c8 4b 12 53 c6 67 1e 9f 65 0e d8 dd 10 c5 27 6e ee 93 df e7 d0 2f c9 53 b6 e4 62 46 02 7e 7a 30 bd ff ce 71 5e 47 72 01 ac 6f 8a e2 a3 f7 4e e2 f8 5c 81 bd 28 2f 1e 68 c0 af 5d dc 8a 41 49 30 68 47 fe df 63 33 d8 26 c9 c9 84 24 36 2d b2 5f 13 b2 0d Data Ascii: nO}H> s_-&ou\LCS)jMU6\v^&N>RZg7,ANIz7o'ql&>)k`([[$Z/j})$aIJA?zQ'KSge'n/SbF~z0q^GroN\(/h]AI0hGc3&$6-_
2024-04-25 06:40:36 UTC	16384	IN	Data Raw: 93 95 64 f0 74 66 0a ad 89 06 06 fa ad 89 34 87 c5 11 29 22 22 41 f9 36 2d f1 94 fc 6d 89 e5 a6 b3 b2 af d4 06 d5 5a 32 22 10 b3 b9 65 a4 63 71 56 96 24 90 df 28 09 f5 8c 6c 8b 08 0c c9 8d c7 23 2a 8f ad 1c 71 38 27 2a 25 d7 a5 b0 c0 86 a8 cb 39 42 d4 16 79 99 e8 b7 a4 fe 8d 3d 3f 8e cd ef d5 f2 11 5e 2e 6e 47 78 3c d3 48 20 21 c9 46 63 34 c1 5e 14 37 aa 8e 4d 70 f9 60 5b 2c 33 4e 79 4a 0b e3 92 58 a6 25 b1 c8 ca 7e 29 79 7a ca f1 21 a5 38 e3 91 f1 da 22 82 13 29 7b db a6 df 68 4c c8 5b 15 e3 6d 27 b9 0f 0d d4 87 88 f2 de 9d ca 4c f0 38 d1 58 b6 c8 ed 2c 15 72 bc 0e b5 41 e3 4a e3 4b 63 d3 24 b7 45 24 8a 88 31 ad 4f 02 13 6d 72 bc 52 3c 5e 51 ef 6c 08 8e 57 22 a2 3c e6 94 17 d8 24 b7 cd 5e 2b 41 21 85 8b 28 f0 f1 75 91 d2 6d d1 76 28 c4 91 c6 80 be 27 af Data Ascii: dtf4)""A6-mZ2"ecqV$(l#q8'%9By=?^.nGx<H !Fc4^7Mp`[,3NyJX%~)yz!8"){hL[m'L8X,rAJKc$E$1OmrR<^QlW"<$^+A!(umv('
2024-04-25 06:40:36 UTC	16384	IN	Data Raw: 9d ef fd 08 83 47 8e f2 9c d1 c3 fb c7 f0 86 b6 33 f1 ea 17 5c 80 2d 67 1c 43 39 2c 61 d3 19 cb 50 9f a8 61 c3 ca b5 38 30 34 89 91 e3 87 d0 b9 a0 86 81 fe 83 e8 5a b4 19 ab d6 ad 47 b9 5c c2 54 65 0c 95 4a 0d a3 03 fd e8 cd bb 3b b7 39 62 01 cf 68 fb 75 06 c2 a5 d2 a4 66 ac 4f c2 be f9 e4 04 fe ea f6 61 2e 3e ef 2c cd 3e 65 ae 18 08 14 4b 02 8f 0e d6 f0 b6 1b 06 f1 c1 cb e7 71 ea 5d 6e b9 cd 0e 1e 19 41 54 19 6b ad 19 93 52 25 0d d3 9a 3f 8e 85 07 a0 60 23 32 81 5f 6b 82 86 94 bc e6 51 85 34 9b b6 bf 8e 34 91 97 88 01 83 6d 61 9c ae 7b 82 ae 95 71 91 20 78 3a 43 7e 4b 1d 4b 5e 02 60 92 f2 a2 0c 75 b6 0d 54 c4 cd a2 43 26 45 ce 41 01 9d 1e 26 92 1e 74 20 50 b8 ad 33 12 53 f7 8a 90 c1 8b 23 35 30 6d 66 66 38 68 86 bc 16 12 b2 a5 3a 48 8a 2c 85 81 d1 75 d2 Data Ascii: G3\-gC9,aPa804ZG\TeJ;9bhufOa.>,>eKq]nATkR%?`#2_kQ44ma{q x:C~KK^`uTC&EA&t P3S#50mff8h:H,u
2024-04-25 06:40:36 UTC	16384	IN	Data Raw: 97 32 96 60 57 54 ac 3b d4 0a a3 dc 43 7c 3e 21 1c b5 2e 51 bc 64 82 ee 5a a8 dd 89 02 0c e4 0b 50 36 5c 28 04 57 93 08 33 a0 25 68 6b 46 84 cf 35 cd bd 11 7c e3 41 1b 78 ce 72 67 04 4a bc df 30 e4 b9 62 74 e3 04 10 d2 78 24 0b e9 bb 85 5a d0 c8 b3 95 e5 37 32 89 9c 0e bd e5 e4 bf 2d 42 58 7a ff 88 66 1c cb 34 db 71 7d 33 0e 90 e2 e5 ff 48 a9 6e 2c 65 56 a1 70 63 1d be fa e6 5b 54 d6 78 e1 72 d8 51 1f f2 62 c3 86 4d f0 79 7d 70 d0 3c 47 6c 31 35 b1 9d 76 98 cc ec 81 4e 5d a2 a6 bf f6 2a fe 71 e3 4d 58 f3 eb 4a cc 7b f8 7b 94 dc 5e 8a db a7 3f 08 d1 2f 23 20 05 91 2f 17 a2 8f dc 13 0e c1 7e c0 36 bc f0 c2 0b 18 37 6e 1c 73 93 a2 4a 2f 05 33 14 88 cc 9c 39 13 9f 7e fa 29 8b 35 a2 d6 a5 fb ee bb 4f 01 75 e4 77 aa 04 9f 7b ee b9 ec 33 55 92 29 81 02 75 7d 53 Data Ascii: 2`WT;C\|>!.QdZP6\(W3%hkF5\|AxrgJ0btx$Z72-BXzf4q}3Hn,eVpc[TxrQbMy}p<Gl15vN]*qMXJ{{^?/# /~67nsJ/39~)5Ouw{3U)u}S
2024-04-25 06:40:36 UTC	16384	IN	Data Raw: db f6 88 09 ab 1f 59 3c 77 9c 75 6c e7 41 ba 99 e6 41 ba a8 5b 7c a2 c4 4b bc 90 f2 eb ca 39 58 bd 75 21 51 76 9d 40 14 25 b5 a8 28 ce cc 3a 21 b2 e4 8f 6a 3c 0e 83 53 32 df 0f e6 f1 47 90 c4 66 0a b9 ac 9a 85 38 63 93 59 e6 6c 52 d4 6e 24 88 3a 44 10 14 4e 3c 51 44 54 1c 8d a8 26 30 e2 c0 49 8f 3f 12 34 aa 6b 41 56 94 78 18 40 91 8c 18 ab 4c 0c 2e 6a c6 12 a7 85 03 89 da ae 28 53 ee b9 5b 8c 68 a0 10 57 ea 50 76 a9 69 ee 33 01 a6 66 4a 50 2c 1b 9d 1c 53 8f 24 46 83 37 49 8a a6 bb 6e 29 a1 6d 34 00 92 b9 25 4d e9 9b c8 40 4d 18 1d da e6 12 25 fa ec 03 e6 41 a2 6c 5e 5b d6 6f 80 07 76 b4 6b 9d 84 84 b4 54 38 2c 40 f1 fe 6a b4 4e 4f 42 75 4d 23 52 52 5c a8 ad f3 a1 6d 9b 0c d4 56 54 a1 ae b2 98 28 b2 6f 62 cc d4 71 a8 d8 be 04 93 5e 5b 48 14 cc 07 b0 6f d7 Data Ascii: Y<wulAA[\|K9Xu!Qv@%(:!j<S2Gf8cYlRn$:DN<QDT&0I?4kAVx@L.j(S[hWPvi3fJP,S$F7In)m4%M@M%Al^[ovkT8,@jNOBuM#RR\mVT(obq^[Ho
2024-04-25 06:40:36 UTC	16384	IN	Data Raw: ba 11 24 67 d5 1f 41 66 5a 1a 97 02 f7 b3 fb de 1f 8c 20 37 33 87 39 c6 41 b4 cb 83 a9 6d 91 5a 61 a0 c1 87 57 9e 7e 14 07 9a b3 f0 d0 dd bf 02 6b 01 94 a9 52 55 57 83 f4 cc 2c ce 3e 10 0b d8 d0 54 c7 fc 6e 37 bc 0c ac 45 d8 3b 20 de 13 a5 af 8d 0d 8d 7c 9d ac e4 54 b6 55 04 35 f5 f5 48 65 cf 42 1b 31 9c 66 79 77 3a df cc 99 6e 6a f1 21 2b 2b 9b ee 0c f8 d8 33 dd e5 76 5a 8e c7 17 e3 ea f1 10 cb d9 fb de c0 e0 fc 69 e8 e9 cd e4 21 8c 0b 0f fe 17 29 29 bd 31 3a b7 07 1b 73 07 3f 47 74 6e b7 9e 5c 89 d5 d5 65 b8 b2 cf a5 d8 57 b3 0a 5b 1b 4e a2 13 7b 8e 1d 63 ef ef ef 95 ce 42 12 03 db d1 48 0b 9e df f1 12 3b 47 79 c8 f1 e4 62 72 d7 f1 d8 5a b9 02 3e b8 71 bc f9 38 f2 93 32 11 94 6d 68 f2 d7 62 42 f1 34 e4 52 dd 40 53 ce 21 85 cd 3d bd ef 59 9c 5f 78 2e f2 Data Ascii: $gAfZ 739AmZaW~kRUW,>Tn7E; \|TU5HeB1fyw:nj!++3vZi!))1:s?Gtn\eW[N{cBH;GybrZ>q82mhbB4R@S!=Y_x.
2024-04-25 06:40:36 UTC	16384	IN	Data Raw: c8 44 21 cd b1 4d 62 3b 3f 86 3d 03 0b 49 df 2c d3 68 58 d4 83 38 0b ed e5 be c2 c2 95 31 c4 cd c5 40 10 6f 11 4b a7 53 66 7f b9 a3 46 bf e3 f8 81 93 30 88 cd 18 c4 59 13 13 51 83 15 ab 5e 26 32 d2 c3 85 6b 89 b3 f0 50 ed 0f 19 09 63 ce b3 2e 05 53 ed b9 7d 1e 71 30 88 61 39 e3 9a ac b1 31 0c 2b 1a c5 c9 10 64 a9 b6 52 5f 64 a5 be c1 24 8b e0 7d 65 a5 30 3a eb aa cc 5a 33 01 52 04 e1 83 89 9f c2 22 c2 24 1d 57 5b db ca d0 6c 90 60 b6 df de b6 a1 9c 3f b3 ad ba a3 86 cc ac 23 b2 98 d9 61 11 6e 18 d2 39 d4 1d e9 47 8e 28 03 e0 a8 cb 3a 58 0d 86 35 86 ca ba 2e 91 5a 67 ce fa eb ce 6d 58 ce b9 f4 4a a5 03 cf 3a 23 ec a8 df 92 ed 22 22 c3 80 5d c9 61 62 3b fe 86 64 17 a4 c0 27 24 49 32 e8 8b d5 d8 35 85 99 24 6b 98 3b bc 32 22 a2 0b c2 0d 2b 9d ce 63 52 8d 9b Data Ascii: D!Mb;?=I,hX81@oKSfF0YQ^&2kPc.S}q0a91+dR_d$}e0:Z3R"$W[l`?#an9G(:X5.ZgmXJ:#""]ab;d'$I25$k;2"+cR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49821	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:36 UTC	418	OUT	GET /img/twitter.png HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=4798a1392743dd361b_17281240659406526168
2024-04-25 06:40:37 UTC	337	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:37 GMT Content-Type: image/png Content-Length: 1272 Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Connection: close ETag: "5a05e7c6-4f8" Expires: Mon, 29 Apr 2024 06:40:37 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:37 UTC	1272	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 00 11 08 06 00 00 00 32 86 e7 80 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR2tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49822	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:38 UTC	659	OUT	GET /img/favicon.ico HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://desktop.telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=4798a1392743dd361b_17281240659406526168
2024-04-25 06:40:38 UTC	383	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:38 GMT Content-Type: image/x-icon Content-Length: 15086 Last-Modified: Thu, 21 Apr 2022 13:47:47 GMT Connection: close ETag: "62616083-3aee" Expires: Thu, 02 May 2024 06:40:38 GMT Cache-Control: max-age=604800 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-04-25 06:40:38 UTC	15086	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 da 9e 22 0d d9 9e 22 36 d9 9e 22 6f d9 9e 22 a4 d9 9e 22 cd d9 9e 22 e7 d9 9e 22 f7 d9 9e 22 fe d9 9e 22 fe d9 9e 22 f7 d9 9e 22 e7 d9 9e 22 cd d9 9e 22 a4 d9 9e 22 6f d9 9e 22 36 da 9e 23 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %6 % h6(0` $""6"o"""""""""""o"6#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49824	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:39 UTC	420	OUT	GET /img/td_laptop.png HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=4798a1392743dd361b_17281240659406526168
2024-04-25 06:40:39 UTC	341	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:39 GMT Content-Type: image/png Content-Length: 189734 Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Connection: close ETag: "5a05e7c6-2e526" Expires: Mon, 29 Apr 2024 06:40:39 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-04-25 06:40:39 UTC	16043	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 48 00 00 01 e7 08 06 00 00 00 82 32 7d c9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 02 e4 c8 49 44 41 54 78 da ec bd 07 94 25 67 75 ef fb af 70 f2 39 9d a7 7b f2 68 46 a3 9c 03 92 10 0a 48 02 91 44 32 5c 1b 1b 3f 30 ef 82 6d e2 ba 60 cc 03 79 f9 1a 03 36 b6 65 bc 8c 7d b1 cd 23 18 1e 0b 58 80 01 03 b6 11 58 02 84 04 48 02 84 40 12 ca d2 e4 d4 f1 e4 53 f9 ed bd bf aa ee 9e 56 f7 4c 2b cc 68 46 b3 7f a3 52 9f 50 e1 ab af c2 d9 ff da e1 b3 92 24 81 f2 c4 b9 ea aa ab 16 fb 78 2d 4d 2f a3 e9 72 9a 4e 4b df f7 6b 6f 29 8a a2 28 8a a2 28 4f 00 8f a6 29 9a 1e a0 e9 76 9a fe 9b a6 ef dd 78 e3 8d 91 76 cd 53 8f a5 02 e9 29 15 48 97 d0 74 Data Ascii: PNGIHDRH2}tEXtSoftwareAdobe ImageReadyqe<IDATx%gup9{hFHD2\?0m`y6e}#XXH@SVL+hFRP$x-M/rNKko)((O)vxvS)Ht
2024-04-25 06:40:39 UTC	16384	IN	Data Raw: 6c a5 f9 de 94 a5 aa d2 2d 66 84 3f 46 a4 1d 24 e7 67 6e de a5 43 e5 16 0b 01 5c 4e 71 86 a5 4a 80 2f fc cc fc b5 16 f5 a8 cd 2f 6b ae 12 43 51 81 a4 1c f1 dc 76 f3 cd f8 b7 2f 7e 01 b5 d1 95 68 93 c1 39 38 38 20 37 2f 16 3f ec 91 b9 ec f2 cb 51 ae 96 71 f5 f3 af 16 c1 c4 9f 9b a7 43 b6 fc 48 f1 cd 8e c5 00 8b 06 fe 6e b6 8c af 78 97 5c 09 87 fb ca 57 be 22 1e 98 03 31 31 31 81 0b 2e b8 00 27 9c 70 82 78 0f d8 58 66 f1 c1 1e 05 16 32 99 f0 98 4f e6 59 60 83 9b b7 ff 8b 5f fc 42 8c 07 36 9c b9 b2 d4 1d 77 dc 81 1f ff f8 c7 22 8a b8 9d bc 0e f6 4a 5c 76 d9 65 12 ba c7 cb b3 b0 61 8f 14 7b 96 b2 1b 3d 0b bb cf 7f fe f3 f8 dc e7 3e 87 b7 bc e5 2d b8 ee ba eb 44 10 5d 75 d5 55 62 ac b3 07 88 ab f6 f1 36 59 fc f0 7e 5f 7a e9 a5 e2 5d 9a 0f 6f 8f 45 00 17 ae b8 Data Ascii: l-f?F$gnC\NqJ//kCQv/~h988 7/?QqCHnx\W"111.'pxXf2OY`_B6w"J\vea{=>-D]uUb6Y~_z]oE
2024-04-25 06:40:39 UTC	16384	IN	Data Raw: e6 07 11 2e 52 e1 90 96 06 05 3b 25 22 00 9a c1 4a d5 29 b7 05 c2 e4 22 9d af c8 11 eb d8 48 44 61 21 b4 c1 2c 24 a2 a9 23 00 c3 88 49 a6 95 6f 43 30 19 f3 b1 20 00 47 5d 4e 82 da 17 17 78 22 25 0c 42 d9 1d d4 6d 84 56 87 2c 16 13 53 9b fa d6 42 c0 ae ed 4c bd f7 49 b2 eb 59 af 25 19 27 28 f6 f9 44 2b 47 21 88 c9 a8 57 2b 73 0c 41 e8 bc 85 92 76 93 81 52 87 4a 10 05 28 31 10 60 84 53 84 b2 9b b1 62 08 45 65 8d 72 45 54 21 80 41 69 28 00 29 72 82 0d 18 f7 16 03 87 b1 6a 91 ca 48 eb 8b ac 11 b4 57 47 ab 56 47 a9 5a 06 03 27 15 41 d4 06 38 88 13 0b 60 90 9d c7 e7 11 3e 53 c5 91 11 01 9b b8 bf 61 99 e2 68 59 8e 39 a9 35 49 c1 f7 87 01 93 cd fa b2 ac 09 d8 28 80 a3 28 50 3d cc 46 24 f2 d4 56 bd 4e 4e 61 dc e6 f3 15 d1 3a ee 43 b1 36 47 6b b9 8f 6b a6 4a 0c 98 Data Ascii: .R;%"J)"HDa!,$#IoC0 G]Nx"%BmV,SBLIY%'(D+G!W+sAvRJ(1`SbEerET!Ai()rjHWGVGZ'A8`>SahY95I((P=F$VNNa:C6GkkJ
2024-04-25 06:40:39 UTC	16384	IN	Data Raw: e5 f5 a6 cf bf fd 99 6e f2 4f 1e 7d f4 d1 0f 85 48 3e f4 20 fd 8c d2 d9 73 b8 5f ab f4 2d 26 6f f2 b7 75 5c 88 97 4c ef 43 53 29 87 92 b0 6a 4d 97 d7 9f 85 b7 ed 55 36 ad 5c ea b7 76 5e 8a a2 bc 01 26 ca 4e dd 3e 52 17 ef 1b 5a c6 67 f6 ce e2 e7 37 a6 d1 2c 41 fa 7f db d5 82 4e 49 1e 7a e4 eb 1f 1e 98 c2 8b d6 37 f0 6f 27 e7 f2 92 f0 c4 71 6c 26 8f fe 96 18 3e 29 7f 6b 96 60 be 28 f7 e5 e5 5b 1b f1 a6 0b 5b f1 a8 24 1b 9b 5a a2 f8 1f df 1f c5 2f ef 6a c6 15 7d 29 e4 24 61 49 4a 80 bf 41 92 99 3f 7a 51 27 9e 9c c8 4b 12 53 c6 67 1e 9f 65 0e d8 dd 10 c5 27 6e ee 93 df e7 d0 2f c9 53 b6 e4 62 46 02 7e 7a 30 bd ff ce 71 5e 47 72 01 ac 6f 8a e2 a3 f7 4e e2 f8 5c 81 bd 28 2f 1e 68 c0 af 5d dc 8a 41 49 30 68 47 fe df 63 33 d8 26 c9 c9 84 24 36 2d b2 5f 13 b2 0d Data Ascii: nO}H> s_-&ou\LCS)jMU6\v^&N>RZg7,ANIz7o'ql&>)k`([[$Z/j})$aIJA?zQ'KSge'n/SbF~z0q^GroN\(/h]AI0hGc3&$6-_
2024-04-25 06:40:39 UTC	16384	IN	Data Raw: 93 95 64 f0 74 66 0a ad 89 06 06 fa ad 89 34 87 c5 11 29 22 22 41 f9 36 2d f1 94 fc 6d 89 e5 a6 b3 b2 af d4 06 d5 5a 32 22 10 b3 b9 65 a4 63 71 56 96 24 90 df 28 09 f5 8c 6c 8b 08 0c c9 8d c7 23 2a 8f ad 1c 71 38 27 2a 25 d7 a5 b0 c0 86 a8 cb 39 42 d4 16 79 99 e8 b7 a4 fe 8d 3d 3f 8e cd ef d5 f2 11 5e 2e 6e 47 78 3c d3 48 20 21 c9 46 63 34 c1 5e 14 37 aa 8e 4d 70 f9 60 5b 2c 33 4e 79 4a 0b e3 92 58 a6 25 b1 c8 ca 7e 29 79 7a ca f1 21 a5 38 e3 91 f1 da 22 82 13 29 7b db a6 df 68 4c c8 5b 15 e3 6d 27 b9 0f 0d d4 87 88 f2 de 9d ca 4c f0 38 d1 58 b6 c8 ed 2c 15 72 bc 0e b5 41 e3 4a e3 4b 63 d3 24 b7 45 24 8a 88 31 ad 4f 02 13 6d 72 bc 52 3c 5e 51 ef 6c 08 8e 57 22 a2 3c e6 94 17 d8 24 b7 cd 5e 2b 41 21 85 8b 28 f0 f1 75 91 d2 6d d1 76 28 c4 91 c6 80 be 27 af Data Ascii: dtf4)""A6-mZ2"ecqV$(l#q8'%9By=?^.nGx<H !Fc4^7Mp`[,3NyJX%~)yz!8"){hL[m'L8X,rAJKc$E$1OmrR<^QlW"<$^+A!(umv('
2024-04-25 06:40:39 UTC	16384	IN	Data Raw: 9d ef fd 08 83 47 8e f2 9c d1 c3 fb c7 f0 86 b6 33 f1 ea 17 5c 80 2d 67 1c 43 39 2c 61 d3 19 cb 50 9f a8 61 c3 ca b5 38 30 34 89 91 e3 87 d0 b9 a0 86 81 fe 83 e8 5a b4 19 ab d6 ad 47 b9 5c c2 54 65 0c 95 4a 0d a3 03 fd e8 cd bb 3b b7 39 62 01 cf 68 fb 75 06 c2 a5 d2 a4 66 ac 4f c2 be f9 e4 04 fe ea f6 61 2e 3e ef 2c cd 3e 65 ae 18 08 14 4b 02 8f 0e d6 f0 b6 1b 06 f1 c1 cb e7 71 ea 5d 6e b9 cd 0e 1e 19 41 54 19 6b ad 19 93 52 25 0d d3 9a 3f 8e 85 07 a0 60 23 32 81 5f 6b 82 86 94 bc e6 51 85 34 9b b6 bf 8e 34 91 97 88 01 83 6d 61 9c ae 7b 82 ae 95 71 91 20 78 3a 43 7e 4b 1d 4b 5e 02 60 92 f2 a2 0c 75 b6 0d 54 c4 cd a2 43 26 45 ce 41 01 9d 1e 26 92 1e 74 20 50 b8 ad 33 12 53 f7 8a 90 c1 8b 23 35 30 6d 66 66 38 68 86 bc 16 12 b2 a5 3a 48 8a 2c 85 81 d1 75 d2 Data Ascii: G3\-gC9,aPa804ZG\TeJ;9bhufOa.>,>eKq]nATkR%?`#2_kQ44ma{q x:C~KK^`uTC&EA&t P3S#50mff8h:H,u
2024-04-25 06:40:40 UTC	16384	IN	Data Raw: 97 32 96 60 57 54 ac 3b d4 0a a3 dc 43 7c 3e 21 1c b5 2e 51 bc 64 82 ee 5a a8 dd 89 02 0c e4 0b 50 36 5c 28 04 57 93 08 33 a0 25 68 6b 46 84 cf 35 cd bd 11 7c e3 41 1b 78 ce 72 67 04 4a bc df 30 e4 b9 62 74 e3 04 10 d2 78 24 0b e9 bb 85 5a d0 c8 b3 95 e5 37 32 89 9c 0e bd e5 e4 bf 2d 42 58 7a ff 88 66 1c cb 34 db 71 7d 33 0e 90 e2 e5 ff 48 a9 6e 2c 65 56 a1 70 63 1d be fa e6 5b 54 d6 78 e1 72 d8 51 1f f2 62 c3 86 4d f0 79 7d 70 d0 3c 47 6c 31 35 b1 9d 76 98 cc ec 81 4e 5d a2 a6 bf f6 2a fe 71 e3 4d 58 f3 eb 4a cc 7b f8 7b 94 dc 5e 8a db a7 3f 08 d1 2f 23 20 05 91 2f 17 a2 8f dc 13 0e c1 7e c0 36 bc f0 c2 0b 18 37 6e 1c 73 93 a2 4a 2f 05 33 14 88 cc 9c 39 13 9f 7e fa 29 8b 35 a2 d6 a5 fb ee bb 4f 01 75 e4 77 aa 04 9f 7b ee b9 ec 33 55 92 29 81 02 75 7d 53 Data Ascii: 2`WT;C\|>!.QdZP6\(W3%hkF5\|AxrgJ0btx$Z72-BXzf4q}3Hn,eVpc[TxrQbMy}p<Gl15vN]*qMXJ{{^?/# /~67nsJ/39~)5Ouw{3U)u}S
2024-04-25 06:40:40 UTC	16384	IN	Data Raw: db f6 88 09 ab 1f 59 3c 77 9c 75 6c e7 41 ba 99 e6 41 ba a8 5b 7c a2 c4 4b bc 90 f2 eb ca 39 58 bd 75 21 51 76 9d 40 14 25 b5 a8 28 ce cc 3a 21 b2 e4 8f 6a 3c 0e 83 53 32 df 0f e6 f1 47 90 c4 66 0a b9 ac 9a 85 38 63 93 59 e6 6c 52 d4 6e 24 88 3a 44 10 14 4e 3c 51 44 54 1c 8d a8 26 30 e2 c0 49 8f 3f 12 34 aa 6b 41 56 94 78 18 40 91 8c 18 ab 4c 0c 2e 6a c6 12 a7 85 03 89 da ae 28 53 ee b9 5b 8c 68 a0 10 57 ea 50 76 a9 69 ee 33 01 a6 66 4a 50 2c 1b 9d 1c 53 8f 24 46 83 37 49 8a a6 bb 6e 29 a1 6d 34 00 92 b9 25 4d e9 9b c8 40 4d 18 1d da e6 12 25 fa ec 03 e6 41 a2 6c 5e 5b d6 6f 80 07 76 b4 6b 9d 84 84 b4 54 38 2c 40 f1 fe 6a b4 4e 4f 42 75 4d 23 52 52 5c a8 ad f3 a1 6d 9b 0c d4 56 54 a1 ae b2 98 28 b2 6f 62 cc d4 71 a8 d8 be 04 93 5e 5b 48 14 cc 07 b0 6f d7 Data Ascii: Y<wulAA[\|K9Xu!Qv@%(:!j<S2Gf8cYlRn$:DN<QDT&0I?4kAVx@L.j(S[hWPvi3fJP,S$F7In)m4%M@M%Al^[ovkT8,@jNOBuM#RR\mVT(obq^[Ho
2024-04-25 06:40:40 UTC	16384	IN	Data Raw: ba 11 24 67 d5 1f 41 66 5a 1a 97 02 f7 b3 fb de 1f 8c 20 37 33 87 39 c6 41 b4 cb 83 a9 6d 91 5a 61 a0 c1 87 57 9e 7e 14 07 9a b3 f0 d0 dd bf 02 6b 01 94 a9 52 55 57 83 f4 cc 2c ce 3e 10 0b d8 d0 54 c7 fc 6e 37 bc 0c ac 45 d8 3b 20 de 13 a5 af 8d 0d 8d 7c 9d ac e4 54 b6 55 04 35 f5 f5 48 65 cf 42 1b 31 9c 66 79 77 3a df cc 99 6e 6a f1 21 2b 2b 9b ee 0c f8 d8 33 dd e5 76 5a 8e c7 17 e3 ea f1 10 cb d9 fb de c0 e0 fc 69 e8 e9 cd e4 21 8c 0b 0f fe 17 29 29 bd 31 3a b7 07 1b 73 07 3f 47 74 6e b7 9e 5c 89 d5 d5 65 b8 b2 cf a5 d8 57 b3 0a 5b 1b 4e a2 13 7b 8e 1d 63 ef ef ef 95 ce 42 12 03 db d1 48 0b 9e df f1 12 3b 47 79 c8 f1 e4 62 72 d7 f1 d8 5a b9 02 3e b8 71 bc f9 38 f2 93 32 11 94 6d 68 f2 d7 62 42 f1 34 e4 52 dd 40 53 ce 21 85 cd 3d bd ef 59 9c 5f 78 2e f2 Data Ascii: $gAfZ 739AmZaW~kRUW,>Tn7E; \|TU5HeB1fyw:nj!++3vZi!))1:s?Gtn\eW[N{cBH;GybrZ>q82mhbB4R@S!=Y_x.
2024-04-25 06:40:40 UTC	16384	IN	Data Raw: c8 44 21 cd b1 4d 62 3b 3f 86 3d 03 0b 49 df 2c d3 68 58 d4 83 38 0b ed e5 be c2 c2 95 31 c4 cd c5 40 10 6f 11 4b a7 53 66 7f b9 a3 46 bf e3 f8 81 93 30 88 cd 18 c4 59 13 13 51 83 15 ab 5e 26 32 d2 c3 85 6b 89 b3 f0 50 ed 0f 19 09 63 ce b3 2e 05 53 ed b9 7d 1e 71 30 88 61 39 e3 9a ac b1 31 0c 2b 1a c5 c9 10 64 a9 b6 52 5f 64 a5 be c1 24 8b e0 7d 65 a5 30 3a eb aa cc 5a 33 01 52 04 e1 83 89 9f c2 22 c2 24 1d 57 5b db ca d0 6c 90 60 b6 df de b6 a1 9c 3f b3 ad ba a3 86 cc ac 23 b2 98 d9 61 11 6e 18 d2 39 d4 1d e9 47 8e 28 03 e0 a8 cb 3a 58 0d 86 35 86 ca ba 2e 91 5a 67 ce fa eb ce 6d 58 ce b9 f4 4a a5 03 cf 3a 23 ec a8 df 92 ed 22 22 c3 80 5d c9 61 62 3b fe 86 64 17 a4 c0 27 24 49 32 e8 8b d5 d8 35 85 99 24 6b 98 3b bc 32 22 a2 0b c2 0d 2b 9d ce 63 52 8d 9b Data Ascii: D!Mb;?=I,hX81@oKSfF0YQ^&2kPc.S}q0a91+dR_d$}e0:Z3R"$W[l`?#an9G(:X5.ZgmXJ:#""]ab;d'$I25$k;2"+cR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49823	149.154.167.99	443	5548	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 06:40:39 UTC	418	OUT	GET /img/favicon.ico HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=4798a1392743dd361b_17281240659406526168
2024-04-25 06:40:39 UTC	383	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 25 Apr 2024 06:40:39 GMT Content-Type: image/x-icon Content-Length: 15086 Last-Modified: Thu, 21 Apr 2022 13:47:47 GMT Connection: close ETag: "62616083-3aee" Expires: Thu, 02 May 2024 06:40:39 GMT Cache-Control: max-age=604800 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-04-25 06:40:39 UTC	15086	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 da 9e 22 0d d9 9e 22 36 d9 9e 22 6f d9 9e 22 a4 d9 9e 22 cd d9 9e 22 e7 d9 9e 22 f7 d9 9e 22 fe d9 9e 22 fe d9 9e 22 f7 d9 9e 22 e7 d9 9e 22 cd d9 9e 22 a4 d9 9e 22 6f d9 9e 22 36 da 9e 23 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %6 % h6(0` $""6"o"""""""""""o"6#

Target ID:	0
Start time:	08:39:40
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	08:39:43
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 --field-trial-handle=2320,i,4385918423642847474,6130721960010660509,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	08:39:46
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://rfpteams.ksplastlc.net"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: rfpteams.ksplastlc.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: t.me
Source: global traffic	DNS traffic detected: DNS query: telegram.org
Source: global traffic	DNS traffic detected: DNS query: cdn4.cdn-telegram.org
Source: global traffic	DNS traffic detected: DNS query: desktop.telegram.org

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://rfpteams.ksplastlc.net

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Windows Analysis Report
http://rfpteams.ksplastlc.net