Edit tour

Windows Analysis Report
http://www.cpcheckme.com

Overview

General Information

Sample URL:	http://www.cpcheckme.com
Analysis ID:	1445862
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Yara detected Powershell download and execute

Yara detected Generic Downloader

Allocates memory with a write watch (potentially for evading sandboxes)

Contains long sleeps (>= 3 min)

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Downloads executable code via HTTP

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Drops files with a non-matching file extension (content does not match file extension)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTML page contains hidden URLs or javascript code

HTTP GET or POST without a user agent

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains more sections than normal

PE file contains sections with non-standard names

PE file does not import any functions

PE file overlay found

Queries the volume information (name, serial number etc) of a device

Stores files to the Windows start menu directory

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 1996 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.cpcheckme.com/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3608 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1956,i,12651588172182524890,15873818534290352819,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7748 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5184 --field-trial-handle=1956,i,12651588172182524890,15873818534290352819,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

rundll32.exe (PID: 8084 cmdline: C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding MD5: EF3179D498793BF4234F708D3BE28633)

cpcheckme_yt22zMIg.exe (PID: 8176 cmdline: "C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe" MD5: 1F5E1935BC678EA70274516D5FA9C7A0)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\Downloads\Unconfirmed 6574.crdownload	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
dropped/chromecache_176	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
Process Memory Space: cpcheckme_yt22zMIg.exe PID: 8176	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security

Unpacked PEs

Source	Rule	Description	Author	Strings
15.0.cpcheckme_yt22zMIg.exe.22b8aa40000.0.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security

HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 22 May 2024 15:27:41 GMTContent-Type: application/octet-streamContent-Length: 1216832Connection: keep-aliveContent-Disposition: attachment; filename="cpcheckme_yt22zMIg.exe"Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 87 1d 78 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 5e 12 00 00 08 00 00 00 00 00 00 7a 7c 12 00 00 20 00 00 00 80 12 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 12 00 00 02 00 00 a6 93 12 00 02 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 28 7c 12 00 4f 00 00 00 00 80 12 00 f8 05 00 00 00 00 00 00 00 00 00 00 00 68 12 00 40 29 00 00 00 a0 12 00 0c 00 00 00 f0 7a 12 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 80 5c 12 00 00 20 00 00 00 5e 12 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 f8 05 00 00 00 80 12 00 00 06 00 00 00 60 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 a0 12 00 00 02 00 00 00 66 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5c 7c 12 00 00 00 00 00 48 00 00 00 02 00 05 00 2c 9a 00 00 4c 0d 01 00 01 00 00 00 04 00 00 06 78 a7 01 00 78 d3 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 30 04 00 6b 00 00 00 01 00 00 11 28 2e 00 00 06 17 17 28 1a 00 00 06 6f 2f 00 00 06 28 2e 00 00 06 17 72 01 00 00 70 28 01 00 00 2b 6f 33 00 00 06 02 28 0d 02 00 06 0a 06 2c 08 06 6f 4f 01 00 06 2c 0c 28 e1 00 00 06 6f e3 00 00 06 de 26 28 e1 00 00 06 06 6f e2 00 00 06 de 0f 0b 28 2e 00 00 06 1a 07 6f 32 00 00 06 de 00 28 2e 00 00 06 6f 31 00 00 06 2a 00 01 10 00 00 00 00 00 00 51 51 00 0f 11 00 00 01 13 30 05 00 84 00 00 00 02 00 00 11 28 2e 00 00 06 17 17 28 1a 00 00 06 6f 2f 00 00 06 28 2e 00 00 06 17 72 92 00 00 70 28 01 00 00 2b 6f 33 00 00 06 7e 1e 00 00 0a 0a 7e 1e 00 00 0a 0b 7e 1e 00 00 0a 0c 72 2f 01 00 70 0c 72 a9 01 00 70 0a 72 19 02 00 70 0b 73 bf 00 00 06 25 08 6f c6 00 00 06 06 07 6f ca 00 00 06 28 2e 00 00 06 17 72 81 02 00 70 06 07 28 1f 00 00 0a 28 01 00 00 2b 6f 33 00 00 06 28 2e 00 00 06 6f 31 00 00 06 2a 1e 02 28 20 00 00 0a 2a 1e 02 28 01 00 00 06 2a ae 7e 01 00 00 04 2d 1e 72 b7 02 00 70 d0 04 00 00 02 28 21 00 00 0a 6f 22 00 00 0a 73 23 00 00 0a 80 01 00 00 04 7

Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /checkme/rest/endpoint/start HTTP/1.1Content-Type: application/jsonHost: www.cpcheckme.comCache-Control: no-store,no-cachePragma: no-cacheContent-Length: 20Connection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.96.89
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10

Source: global traffic	HTTP traffic detected: GET /ajax/libs/bluebird/3.3.5/bluebird.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.cpcheckme.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=explicit HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.cpcheckme.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/checkpoint-theme-v2/images/parsley.png HTTP/1.1Host: www.checkpoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://www.cpcheckme.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://www.cpcheckme.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/checkpoint-theme-v2/images/parsley.png HTTP/1.1Host: www.checkpoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=FmAnyWgMhHnay6U&MD=oYOMN+rE HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb&co=aHR0cDovL3d3dy5jcGNoZWNrbWUuY29tOjgw&hl=en&type=image&v=8k85QBI-qzxmenDv318AZH30&theme=light&size=invisible&badge=bottomright&cb=11wz3iwh9xgn HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.cpcheckme.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=8k85QBI-qzxmenDv318AZH30 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb&co=aHR0cDovL3d3dy5jcGNoZWNrbWUuY29tOjgw&hl=en&type=image&v=8k85QBI-qzxmenDv318AZH30&theme=light&size=invisible&badge=bottomright&cb=11wz3iwh9xgnAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/cF9tiRHt4BzQa_gljZbyGUbjFHSRXJeGZWCTLs0pBwQ.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb&co=aHR0cDovL3d3dy5jcGNoZWNrbWUuY29tOjgw&hl=en&type=image&v=8k85QBI-qzxmenDv318AZH30&theme=light&size=invisible&badge=bottomright&cb=11wz3iwh9xgnAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=8k85QBI-qzxmenDv318AZH30&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: http://www.cpcheckme.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb&co=aHR0cDovL3d3dy5jcGNoZWNrbWUuY29tOjgw&hl=en&type=image&v=8k85QBI-qzxmenDv318AZH30&theme=light&size=invisible&badge=bottomright&cb=l5a3zuoxr6a HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: http://www.cpcheckme.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=8k85QBI-qzxmenDv318AZH30&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: http://www.cpcheckme.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AOG1W2WMBU3Lx0soNhShTRFwELDfLwcuwdnkZ9CgIoYm0zp46CK031UHe6slDJOYHtKJUib-89BCs-dJrXG-9oE
Source: global traffic	HTTP traffic detected: GET /js/bg/y5IoXjo-_eM__FZ7BqlwDG0FWQvBnHNJLFAhT4QXhzA.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=8k85QBI-qzxmenDv318AZH30&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMObAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/userverify?k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AOG1W2WMBU3Lx0soNhShTRFwELDfLwcuwdnkZ9CgIoYm0zp46CK031UHe6slDJOYHtKJUib-89BCs-dJrXG-9oE
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=FmAnyWgMhHnay6U&MD=oYOMN+rE HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checkme/ HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: AWSALB=9VZIGm90wfRnifjzbdjTPIdUF6UPW54l7ByzRbnFxTDnL98T7H9Eur6V4lniC5gF19ETotJESA6AHSfP4x4ciKKTv+20fajq6tfw9MvvZN9EQL1oXFLTVActPyOu
Source: global traffic	HTTP traffic detected: GET /checkme/assets/libs/fontawesome/css/font-awesome.min.css HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://www.cpcheckme.com/checkme/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: AWSALB=20Ns1cykc2joaI0uxHJEMYgvGGHUue2tmpaEEXhEwxhv4HNw4ZZKMPAXVTAz9RSIPkfkOMp6Jt2LO8GXwX6ZGNx80WapsoBvhtPVs185fTTCt9rjgfcmGdeqPTBh
Source: global traffic	HTTP traffic detected: GET /checkme/vendor.16be15e20a43eba17559.js HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.cpcheckme.com/checkme/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: AWSALB=20Ns1cykc2joaI0uxHJEMYgvGGHUue2tmpaEEXhEwxhv4HNw4ZZKMPAXVTAz9RSIPkfkOMp6Jt2LO8GXwX6ZGNx80WapsoBvhtPVs185fTTCt9rjgfcmGdeqPTBh
Source: global traffic	HTTP traffic detected: GET /checkme/bundle.16be15e20a43eba17559.js HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.cpcheckme.com/checkme/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: AWSALB=20Ns1cykc2joaI0uxHJEMYgvGGHUue2tmpaEEXhEwxhv4HNw4ZZKMPAXVTAz9RSIPkfkOMp6Jt2LO8GXwX6ZGNx80WapsoBvhtPVs185fTTCt9rjgfcmGdeqPTBh
Source: global traffic	HTTP traffic detected: GET /check/testsAssets/instant_checkup.js?v=0.6652561465103368 HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.cpcheckme.com/checkme/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: AWSALB=hgou4MgWyuf1NbxB58p0H24yiV8HjvF4TXMdYeCCY4/W+fPDj1b5HkRAWWgeorZvRW/BM00Apj7x+C8RBFRquQVELDEB/a/egyaCG+1E3tzH/Yfp3YLoph15T1jP
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/getScanTypesDetails?ts=1716391619425 HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.cpcheckme.com/checkme/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rNwJ/gw1aCiGSddXo8tle6DTKjzDDrGTr1FsZcdttAgmUPmQlXsIxDRdIMU85JI0wKEYqybpebD1dufFxwO59QWmgjB4zQvAXsHzCTnadZq9W152JyctXaTLr4Or
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/getAllTests?ts=1716391619429&category= HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveAccept: application/json, text/plain, /User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Referer: http://www.cpcheckme.com/checkme/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rNwJ/gw1aCiGSddXo8tle6DTKjzDDrGTr1FsZcdttAgmUPmQlXsIxDRdIMU85JI0wKEYqybpebD1dufFxwO59QWmgjB4zQvAXsHzCTnadZq9W152JyctXaTLr4Or
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/getExcludedEmails?ts=1716391619429 HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveAccept: application/json, text/plain, /User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Referer: http://www.cpcheckme.com/checkme/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rNwJ/gw1aCiGSddXo8tle6DTKjzDDrGTr1FsZcdttAgmUPmQlXsIxDRdIMU85JI0wKEYqybpebD1dufFxwO59QWmgjB4zQvAXsHzCTnadZq9W152JyctXaTLr4Or
Source: global traffic	HTTP traffic detected: GET /checkme/fonts/din.woff?v=1.0.0 HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveOrigin: http://www.cpcheckme.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.cpcheckme.com/checkme/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rNwJ/gw1aCiGSddXo8tle6DTKjzDDrGTr1FsZcdttAgmUPmQlXsIxDRdIMU85JI0wKEYqybpebD1dufFxwO59QWmgjB4zQvAXsHzCTnadZq9W152JyctXaTLr4Or
Source: global traffic	HTTP traffic detected: GET /checkme/assets/libs/fontawesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveOrigin: http://www.cpcheckme.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.cpcheckme.com/checkme/assets/libs/fontawesome/css/font-awesome.min.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rNwJ/gw1aCiGSddXo8tle6DTKjzDDrGTr1FsZcdttAgmUPmQlXsIxDRdIMU85JI0wKEYqybpebD1dufFxwO59QWmgjB4zQvAXsHzCTnadZq9W152JyctXaTLr4Or
Source: global traffic	HTTP traffic detected: GET /checkme/rest/utils/getCaptchaType HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveAccept: application/json, text/plain, /User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Referer: http://www.cpcheckme.com/checkme/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: AWSALB=fQ1vuCAQ+LX5fP9FFpX4jdqnMkhiJvjU3nvRj5GtmZ1hggHpUKlLmknHsxzKLxUo0skpUvNrqdMIjwyKtJS7T38Vlg2znlGzG4Ypo11dfhg4GJMJ1SR3ctSOwdvL
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/getAllTests?ts=1716391619429&category= HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: AWSALB=Gd1uru2VcjlY0Je0e4n8PoEib9ijlg60pKhAZhVIahgFZjZa4+48AVW7q6KoX90AeJDkkWwwBcgaoTr8RoVTKs204AJgEPQ+gL0mR1quQXA7PYaVUT1d0tixllPV
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/getScanTypesDetails?ts=1716391619425 HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: AWSALB=fQ1vuCAQ+LX5fP9FFpX4jdqnMkhiJvjU3nvRj5GtmZ1hggHpUKlLmknHsxzKLxUo0skpUvNrqdMIjwyKtJS7T38Vlg2znlGzG4Ypo11dfhg4GJMJ1SR3ctSOwdvL
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/getExcludedEmails?ts=1716391619429 HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: AWSALB=0mYBx9525ryXtIoqeRqKbJeZKPWEHu74769q2/P/0rN0jCrBXwkvsh1iHvz66BNYG2PgBlt8EEIkoOwHqxZuE1UA1bCeqI+XBChklCloRHSo5d4L1vPJDqnTmwM7
Source: global traffic	HTTP traffic detected: GET /checkme/rest/utils/getCaptchaType HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: AWSALB=O+UvY6TXnA9rmHnE72bgdMFFYpRam+J/trsVh2XJULbxW4Ij5wItM9iFOrFSWTfNnmS5qPz4cgn3K41atTYm6lzHDVpi6unFvi+2XvwUl9hPhO4/G+FkZjtvBfNS
Source: global traffic	HTTP traffic detected: GET /checkme/ HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=oZwKzeTpVngadSgeD4roJp3GVgWR3NzYjEQPnSG6Zu1xS2uZQirezWaTe/9AcIMkybv5PxLV5mic9qBNHt4TY8wyIM9Wc4WkDqhvVYs0ktGiOIUTKWAu9I9YqTxjIf-None-Match: W/"3971-1684859588000"If-Modified-Since: Tue, 23 May 2023 16:33:08 GMT
Source: global traffic	HTTP traffic detected: GET /check/testsAssets/instant_checkup.js?v=0.6537682150719368 HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.cpcheckme.com/checkme/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=OwocWPpZs5cdNA0YDmhebwepfiq1p6/4VMaaW37qnkp+q4fj95+8PSwINOLtf1mdvOf1D7REgn5mVAZr8l+unKdwXyocn3Ycu2jaq+iEhdf37h4/X5lgG5KVoodp
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/getScanTypesDetails?ts=1716391642957 HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://www.cpcheckme.com/checkme/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=OwocWPpZs5cdNA0YDmhebwepfiq1p6/4VMaaW37qnkp+q4fj95+8PSwINOLtf1mdvOf1D7REgn5mVAZr8l+unKdwXyocn3Ycu2jaq+iEhdf37h4/X5lgG5KVoodp
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/getAllTests?ts=1716391642959&category= HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveAccept: application/json, text/plain, /User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Referer: http://www.cpcheckme.com/checkme/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=OwocWPpZs5cdNA0YDmhebwepfiq1p6/4VMaaW37qnkp+q4fj95+8PSwINOLtf1mdvOf1D7REgn5mVAZr8l+unKdwXyocn3Ycu2jaq+iEhdf37h4/X5lgG5KVoodp
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/getExcludedEmails?ts=1716391642959 HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveAccept: application/json, text/plain, /User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Referer: http://www.cpcheckme.com/checkme/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=OwocWPpZs5cdNA0YDmhebwepfiq1p6/4VMaaW37qnkp+q4fj95+8PSwINOLtf1mdvOf1D7REgn5mVAZr8l+unKdwXyocn3Ycu2jaq+iEhdf37h4/X5lgG5KVoodp
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/getScanTypesDetails?ts=1716391642957 HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=cFGMXUN96TLXW7m1KAtQw1o0Wwl0SflKhVow0etQKvxcO8SPmedQnvmG0pYlGn5m7IXRRjFKDNYyMhf+fwOGNYF9NXBlLcPjP7nQ/QIglWbIdJrzhSWiiNfg6CY9
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/getExcludedEmails?ts=1716391642959 HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=cFGMXUN96TLXW7m1KAtQw1o0Wwl0SflKhVow0etQKvxcO8SPmedQnvmG0pYlGn5m7IXRRjFKDNYyMhf+fwOGNYF9NXBlLcPjP7nQ/QIglWbIdJrzhSWiiNfg6CY9
Source: global traffic	HTTP traffic detected: GET /checkme/rest/utils/getCaptchaType HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveAccept: application/json, text/plain, /User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Referer: http://www.cpcheckme.com/checkme/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=cFGMXUN96TLXW7m1KAtQw1o0Wwl0SflKhVow0etQKvxcO8SPmedQnvmG0pYlGn5m7IXRRjFKDNYyMhf+fwOGNYF9NXBlLcPjP7nQ/QIglWbIdJrzhSWiiNfg6CY9
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/getAllTests?ts=1716391642959&category= HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=rpr0HGgZy2f2qU8vDNGoQSh6GHnqTarq6xQSJE6AOHCZ09cWRqa779g0z4awQzetbO0uf1i5awVAgmHuuJ3mr/qFt3/s5fm0K/2JNco9Q8wEjLjyLNKYSXTZO+TC
Source: global traffic	HTTP traffic detected: GET /checkme/rest/utils/getCaptchaType HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=nqkbPslmcaeQsyH/RXSyBsP3XeMuXx/24eOvbCdyloxX4y39vVy5M+M4WV5Diegpp2TD86Rax9syCzIfd325AlbkkOH7t/nbwbrY7fAL0umo2f2g/sIpzgq803iS
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/startScan HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=sc8NwWVq+v4WUX8RsnnqqQjt23RnYsJWdQGvOmPVSOjA9+AMus/hV7yrMIehIaJULtIV8pppvOplgNrGLLRr2lylZJWL/W5STfBjbguv9QM7Ad0tbXdaYI21Lg7W
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/updateStatuses HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=jMrsGMf4HBXr3E8kN3u1knV6ORUbOzYHexJToT6pYanc7EwjCLlIunqEls3kew9A2JhXDg2hjSNTbamGtJqEPTE09X6hz0rmhDdHstrEOzA1ADhSzxn+cukEu0d7
Source: global traffic	HTTP traffic detected: GET /cpcheckme.exe?uid=yt22zMIg HTTP/1.1Host: cpcheckmefiles-lb-1966426125.eu-west-1.elb.amazonaws.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://www.cpcheckme.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/getScanStatus?ts=1716391665606&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2 HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveAccept: application/json, text/plain, /User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Referer: http://www.cpcheckme.com/checkme/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=i558L86v2j8D6ongz1E93KPCv88l5W+UelXAcR9Awmxn9haPtL4kuJjUF3Fg/FBPKJuGqgv2P8PZ6olc1W7shLsOwqbdLt1kSM1wGpZH7cvDodAllhAXS1XpbbIA
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/getScanStatus?ts=1716391665606&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2 HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=x3L0QCYDVkvVRNRGzz0BKBrIucCZorXH9VrET52jl7rscxdCRRTtIQ85NnLZq4kRx187ftH75xALeZe6QGiG5t8nL02KsMevp3/rItyCVg1IftkfQnGRjS5mT/i3
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/getScanStatus?ts=1716391670793&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2 HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveAccept: application/json, text/plain, /User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Referer: http://www.cpcheckme.com/checkme/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=+ESM9fTkWMrifQjs9xv+BOBt/iuLeuxrfpoWLjmjaDSaaH8mm4pCvt7kWQQwWRNseD7JSDCSggFLIBec9CyRekMU/HT+p1E6Z4D+MfAZnJUgwqi5eWfIQg/wGcY4
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/getScanStatus?ts=1716391670793&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2 HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=fS0XR/8MNPGNfiCAn31eT9IrVnRLIezYwWqrKxPzDiDg+LZ4xO3UcbHm0ihfvVzDjWUSQxTFNzH/1eV870hDvARBw3FH/+3NIHFHKy2nHiCUGA4E8z5Gba1X/uFp
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/getScanStatus?ts=1716391676043&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2 HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveAccept: application/json, text/plain, /User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Referer: http://www.cpcheckme.com/checkme/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=DrxrrxdYOi18LtQfPSo+DNSPBORE7Z70/qW66K1uH+SlmoEJwoLcrASiouRyKNERRBOSQyLwIxy3uWFuFF54uCu9Q51TqG/+gnnnuOa9wcYZmfOvHQjc2zgP6JXF
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/getScanStatus?ts=1716391676043&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2 HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=qHNXzFQPR8bUEUBeimgOzm3UX2HL/a3tLkxZjxG2G2tIzw9oQBZAtu0/QXva+/qPH9OzUbc0rQcrpbDEap0ZEKrCCDYv96kGcf0ImmPp9anA5VY+y8HdyXW+9dfZ
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/getScanStatus?ts=1716391681227&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2 HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveAccept: application/json, text/plain, /User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Referer: http://www.cpcheckme.com/checkme/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; AWSALB=wiUJTf+Zln1u9bnrCjRfGvCWkbzer2LZ/9+ZIyESVk5xNHvIgLPX1SstXDNLZp03vt0q+HsRdDV9ckccZqApd1qjH4No4QnMruPPcqGt5FAmYZFdxIGO/4Yjp7CY
Source: global traffic	HTTP traffic detected: GET /checkme/rest/test/getScanStatus?ts=1716391681227&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2 HTTP/1.1Host: www.cpcheckme.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; AWSALB=I8BfgbBPrnfAuyYj8Y2QYwDDgLbx4qdg0ehvojFdl9FxCozEKMBDB44icljiAClTZfRDxBZ6+ZVHDSlu3QnVJyYo3NnNZwNs/8EPmUNj1SasgjZ3Zb/WCF2FWtNg

Source: chromecache_155.1.dr	String found in binary or memory: L.getElementsByTagName("iframe"),oa=R.length,ka=0;ka<oa;ka++)if(!v&&c(R[ka],E.xe)){pI("https://www.youtube.com/iframe_api");v=!0;break}})}}else I(u.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,v=!1;Z.__ytl=n;Z.__ytl.D="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_155.1.dr, chromecache_190.1.dr	String found in binary or memory: Math.round(p);u["gtm.videoCurrentTime"]=Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=Db()},pd:function(){d()}}};var hc=ma(["data-gtm-yt-inspected-"]),CC=["www.youtube.com","www.youtube-nocookie.com"],DC,EC=!1; equals www.youtube.com (Youtube)
Source: chromecache_190.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=kA(a,c,e);O(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return O(122),!0;if(d&&f){for(var m=Nb(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},nA=function(){var a=[],b=function(c){return tb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_190.1.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Wg:d,Ug:e,Vg:f,Lh:g,Mh:h,xe:m,Ab:b},p=G.YT,q=function(){KC(n)};if(p)return p.ready&&p.ready(q),b;var r=G.onYouTubeIframeAPIReady;G.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(NC(w,"iframe_api")\|\|NC(w,"player_api"))return b}for(var y=H.getElementsByTagName("iframe"),x=y.length,B=0;B<x;B++)if(!EC&&LC(y[B],n.xe))return xc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_155.1.dr	String found in binary or memory: function(h){return h.form===g})};return{store:function(g,h){var m=f(g);m?m.button=h:e.push({form:g,button:h})},get:function(g){var h=f(g);return h?h.button:null}}}function d(e,f,g,h,m){var n=Iz("fsl",g?"nv.mwt":"mwt",0),p;p=g?Iz("fsl","nv.ids",[]):Iz("fsl","ids",[]);if(!p.length)return!0;var q=Nz(e,"gtm.formSubmit",p),r=e.action;r&&r.tagName&&(r=e.cloneNode(!1).action);q["gtm.elementUrl"]=r;O(121);if("https://www.facebook.com/tr/"===r)return O(122),!0;m&&(q["gtm.formSubmitElement"]=m);if(h&&n){if(!tI(q, equals www.facebook.com (Facebook)
Source: chromecache_200.1.dr	String found in binary or memory: return b}AC.K="internal.enableAutoEventOnTimer";var hc=ma(["data-gtm-yt-inspected-"]),CC=["www.youtube.com","www.youtube-nocookie.com"],DC,EC=!1; equals www.youtube.com (Youtube)
Source: chromecache_190.1.dr	String found in binary or memory: var PB=function(a,b,c,d,e){var f=Iz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Iz("fsl","nv.ids",[]):Iz("fsl","ids",[]);if(!g.length)return!0;var h=Nz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);O(121);if("https://www.facebook.com/tr/"===m)return O(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!uy(h,vy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.cpcheckme.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: sc1.checkpoint.com
Source: global traffic	DNS traffic detected: DNS query: www.checkpoint.com
Source: global traffic	DNS traffic detected: DNS query: cpcheckmefiles-lb-1966426125.eu-west-1.elb.amazonaws.com

Source: unknown

HTTP traffic detected: POST /recaptcha/api2/reload?k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 9078sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-protobufferAccept: */*Origin: https://www.google.comX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=8k85QBI-qzxmenDv318AZH30&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMObAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_194.1.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: Unconfirmed 6574.crdownload.0.dr, Google.Widevine.CDM.dll.0.dr, chromecache_176.1.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: Unconfirmed 6574.crdownload.0.dr, Google.Widevine.CDM.dll.0.dr, chromecache_176.1.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: Unconfirmed 6574.crdownload.0.dr, Google.Widevine.CDM.dll.0.dr, chromecache_176.1.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: Unconfirmed 6574.crdownload.0.dr, Google.Widevine.CDM.dll.0.dr, chromecache_176.1.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: Unconfirmed 6574.crdownload.0.dr, Google.Widevine.CDM.dll.0.dr, chromecache_176.1.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: Unconfirmed 6574.crdownload.0.dr, Google.Widevine.CDM.dll.0.dr, chromecache_176.1.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: Unconfirmed 6574.crdownload.0.dr, Google.Widevine.CDM.dll.0.dr, chromecache_176.1.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: chromecache_176.1.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: Unconfirmed 6574.crdownload.0.dr, Google.Widevine.CDM.dll.0.dr, chromecache_176.1.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD01000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCA5000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CB53000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CBB5000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD57000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD35000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CC75000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CC53000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CB93000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCEB000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCD9000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CBF6000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCCD000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCAB000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD63000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CBDD000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD23000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CC2B000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CBBB000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CB5F000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CB65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://dualstack.elb-ireland1-1194672184.eu-west-1.elb.amazonaws.com
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://files.cpcheckme.com/1.asp?FileName=a.pdf&AppID=2&MainID=9&SecID=9&MinID=2
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://files.cpcheckme.com/1.asp?src=file.jpg&fltr
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://files.cpcheckme.com/1.asp?xss=%3Cscript%3Ealert%28%221%22%29%3C%2Fscript%3E
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://files.cpcheckme.com/blockchain.txt
Source: chromecache_170.1.dr	String found in binary or memory: http://files.cpcheckme.com/check/testsAssets/post.html
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://files.cpcheckme.com/e.bz2
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://files.cpcheckme.com/e.txt
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://files.cpcheckme.com/e.zip
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://files.cpcheckme.com/exploit_page_buffer.html
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://files.cpcheckme.com/getcfg.php?SERVICES=DEVICE.LOG&x=y&AUTHORIZED_GROUP=1
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://files.cpcheckme.com/win7_64bit_big.com
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://files.cpcheckme.com/win7_64bit_big.pdf
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://files.cpcheckme.com/win7_64bit_big.zip
Source: chromecache_189.1.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_189.1.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://hot-emailer.ru/favicon.ico
Source: chromecache_194.1.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_194.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_194.1.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_177.1.dr	String found in binary or memory: http://localhost:8282/check/testsAssets/instant_checkup.js
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://login.msa.akadns6.net/favicon.ico
Source: Unconfirmed 6574.crdownload.0.dr, Google.Widevine.CDM.dll.0.dr, chromecache_176.1.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: Unconfirmed 6574.crdownload.0.dr, Google.Widevine.CDM.dll.0.dr, chromecache_176.1.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: Unconfirmed 6574.crdownload.0.dr, Google.Widevine.CDM.dll.0.dr, chromecache_176.1.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: Unconfirmed 6574.crdownload.0.dr, Google.Widevine.CDM.dll.0.dr, chromecache_176.1.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://proxy.my-addr.com/favicon.ico
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://s3-eu-west-1.amazonaws.com/cp-chk-files/win7_64bit_big_enc.zip
Source: chromecache_180.1.dr, chromecache_175.1.dr, chromecache_130.1.dr, chromecache_132.1.dr	String found in binary or memory: http://sc1.checkpoint.com/check-me/Report/SVG/Anonymizer_Usage.svg
Source: chromecache_180.1.dr, chromecache_175.1.dr, chromecache_130.1.dr, chromecache_132.1.dr	String found in binary or memory: http://sc1.checkpoint.com/check-me/Report/SVG/Data_Leakage.svg
Source: chromecache_132.1.dr	String found in binary or memory: http://sc1.checkpoint.com/check-me/Report/SVG/Malware_Infection.svg
Source: chromecache_180.1.dr, chromecache_175.1.dr, chromecache_130.1.dr, chromecache_132.1.dr	String found in binary or memory: http://sc1.checkpoint.com/check-me/Report/SVG/Persistence_Threat.svg
Source: chromecache_180.1.dr, chromecache_175.1.dr, chromecache_130.1.dr, chromecache_132.1.dr	String found in binary or memory: http://sc1.checkpoint.com/check-me/Report/SVG/Ransomware_Attack.svg
Source: chromecache_180.1.dr, chromecache_175.1.dr, chromecache_130.1.dr, chromecache_132.1.dr	String found in binary or memory: http://sc1.checkpoint.com/check-me/Report/SVG/Zero_Day.svg
Source: chromecache_132.1.dr	String found in binary or memory: http://sc1.checkpoint.com/check-me/Report/SVG/browser.svg
Source: chromecache_132.1.dr	String found in binary or memory: http://sc1.checkpoint.com/check-me/Report/SVG/command_and_control_communication_64.svg
Source: chromecache_136.1.dr, chromecache_193.1.dr, chromecache_151.1.dr, chromecache_183.1.dr	String found in binary or memory: http://sc1.checkpoint.com/check-me/SVG/Cloud_Icon.svg
Source: chromecache_136.1.dr, chromecache_193.1.dr, chromecache_151.1.dr, chromecache_183.1.dr	String found in binary or memory: http://sc1.checkpoint.com/check-me/SVG/Endpoint_Icon.svg
Source: chromecache_136.1.dr, chromecache_193.1.dr, chromecache_151.1.dr, chromecache_183.1.dr	String found in binary or memory: http://sc1.checkpoint.com/check-me/SVG/Mobile_Icon.svg
Source: chromecache_136.1.dr, chromecache_193.1.dr, chromecache_151.1.dr, chromecache_183.1.dr	String found in binary or memory: http://sc1.checkpoint.com/check-me/SVG/Network_Icon.svg
Source: cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CA23000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CAE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.datacontract.org
Source: cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CA23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.datacontract.org/2004/07/
Source: cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CA23000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CAE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.datacontract.org/2004/07/CheckMeAgent.Engine.WebApi
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CABB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://site-to-meet.com/favicon.ico
Source: cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD01000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCA5000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CB53000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CBCD000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CBB5000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD57000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD35000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CC75000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CC53000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CB93000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD47000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCEB000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CABB000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCF1000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCD9000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD13000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CC43000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CBF6000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCCD000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCAB000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.cpcheckme.com
Source: cpcheckme_yt22zMIg.exe, 0000000F.00000000.1706589859.0000022B8AA42000.00000002.00000001.01000000.00000006.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8C861000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CABB000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2361345704.0000022BA508B000.00000004.00000020.00020000.00000000.sdmp, Unconfirmed 6574.crdownload.0.dr, chromecache_176.1.dr	String found in binary or memory: http://www.cpcheckme.com/checkme/rest/endpoint/
Source: cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCA5000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CBB5000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CB93000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCEB000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCD9000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD63000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CB25000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CB43000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD1D000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CC2B000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CB5F000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CC4D000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CAE4000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CBD7000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD85000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD0D000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD73000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD51000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCFB000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CC13000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD41000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.cpcheckme.com/checkme/rest/endpoint/p
Source: cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CC81000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.cpcheckme.com/checkme/rest/endpoint/start
Source: cpcheckme_yt22zMIg.exe, 0000000F.00000002.2361345704.0000022BA506F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.cpcheckme.com/checkme/rest/endpoint/starte
Source: cpcheckme_yt22zMIg.exe, 0000000F.00000002.2361345704.0000022BA506F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.cpcheckme.com/checkme/rest/endpoint/startse
Source: Unconfirmed 6574.crdownload.0.dr, Google.Widevine.CDM.dll.0.dr, chromecache_176.1.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://www.fkiinqdfc9un.xyz/login/assets/img/fav.ico
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: http://www.jewelsyz.com/favicon.ico
Source: cpcheckme_yt22zMIg.exe, 0000000F.00000000.1706589859.0000022B8AA42000.00000002.00000001.01000000.00000006.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8C861000.00000004.00000800.00020000.00000000.sdmp, Unconfirmed 6574.crdownload.0.dr, chromecache_176.1.dr	String found in binary or memory: http://www.threat-cloud.com/config.php
Source: chromecache_176.1.dr	String found in binary or memory: http://www.threat-cloud.com/test/files/HighConfidenceBot.html
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: chromecache_200.1.dr, chromecache_155.1.dr, chromecache_190.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_200.1.dr, chromecache_155.1.dr, chromecache_190.1.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: chromecache_144.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: chromecache_200.1.dr, chromecache_155.1.dr, chromecache_190.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_177.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/bluebird/3.3.5/bluebird.min.js
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: chromecache_162.1.dr, chromecache_140.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_162.1.dr, chromecache_140.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.net
Source: sets.json.0.dr	String found in binary or memory: https://computerbild.de
Source: chromecache_155.1.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: sets.json.0.dr	String found in binary or memory: https://cookreactor.com
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/.
Source: LICENSE.txt.0.dr	String found in binary or memory: https://creativecommons.org/compatiblelicenses
Source: sets.json.0.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.0.dr	String found in binary or memory: https://desimartini.com
Source: chromecache_162.1.dr, chromecache_140.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_162.1.dr, chromecache_140.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_162.1.dr, chromecache_140.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: sets.json.0.dr	String found in binary or memory: https://dewarmsteweek.be
Source: LICENSE.txt.0.dr	String found in binary or memory: https://easylist.to/)
Source: sets.json.0.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.0.dr	String found in binary or memory: https://een.be
Source: sets.json.0.dr	String found in binary or memory: https://efront.com
Source: sets.json.0.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.0.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.0.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.0.dr	String found in binary or memory: https://ella.sv
Source: sets.json.0.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://elpais.uy
Source: sets.json.0.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.0.dr	String found in binary or memory: https://fakt.pl
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: https://files.cpcheckme.com/check/testsAssets/post.html
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: https://files.cpcheckme.com/e.zip
Source: sets.json.0.dr	String found in binary or memory: https://finn.no
Source: sets.json.0.dr	String found in binary or memory: https://firstlook.biz
Source: sets.json.0.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://gettalkdesk.com
Source: chromecache_194.1.dr	String found in binary or memory: https://github.com/ded/bowser
Source: LICENSE.txt.0.dr	String found in binary or memory: https://github.com/easylist)
Source: chromecache_194.1.dr	String found in binary or memory: https://github.com/jsstyles/css-vendor
Source: chromecache_155.1.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: sets.json.0.dr	String found in binary or memory: https://gliadomain.com
Source: chromecache_155.1.dr	String found in binary or memory: https://google.com
Source: chromecache_155.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: sets.json.0.dr	String found in binary or memory: https://grid.id
Source: sets.json.0.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.0.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.0.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.0.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://hapara.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.global
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.0.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.0.dr	String found in binary or memory: https://hearty.app
Source: sets.json.0.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.0.dr	String found in binary or memory: https://hearty.me
Source: sets.json.0.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.0.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.0.dr	String found in binary or memory: https://hj.rs
Source: sets.json.0.dr	String found in binary or memory: https://hjck.com
Source: sets.json.0.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.0.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.0.dr	String found in binary or memory: https://iolam.it
Source: sets.json.0.dr	String found in binary or memory: https://ishares.com
Source: sets.json.0.dr	String found in binary or memory: https://jagran.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.0.dr	String found in binary or memory: https://kompas.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.0.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.0.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.0.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.0.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.0.dr	String found in binary or memory: https://libero.it
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.0.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.0.dr	String found in binary or memory: https://livemint.com
Source: sets.json.0.dr	String found in binary or memory: https://max.auto
Source: sets.json.0.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.0.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.0.dr	String found in binary or memory: https://money.pl
Source: sets.json.0.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://nacion.com
Source: sets.json.0.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.co
Source: sets.json.0.dr	String found in binary or memory: https://nien.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.org
Source: sets.json.0.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.0.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.0.dr	String found in binary or memory: https://o2.pl
Source: sets.json.0.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.0.dr	String found in binary or memory: https://onet.pl
Source: sets.json.0.dr	String found in binary or memory: https://ottplay.com
Source: chromecache_190.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_200.1.dr, chromecache_155.1.dr, chromecache_190.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: sets.json.0.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.0.dr	String found in binary or memory: https://phonandroid.com
Source: chromecache_140.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: sets.json.0.dr	String found in binary or memory: https://player.pl
Source: sets.json.0.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.0.dr	String found in binary or memory: https://poalim.site
Source: sets.json.0.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.0.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.0.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.0.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.0.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://radio1.be
Source: sets.json.0.dr	String found in binary or memory: https://radio2.be
Source: sets.json.0.dr	String found in binary or memory: https://reactor.cc
Source: chromecache_140.1.dr	String found in binary or memory: https://recaptcha.net
Source: sets.json.0.dr	String found in binary or memory: https://repid.org
Source: sets.json.0.dr	String found in binary or memory: https://reshim.org
Source: sets.json.0.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws3nvtvt.com
Source: cpcheckme_yt22zMIg.exe, 0000000F.00000000.1706589859.0000022B8AA42000.00000002.00000001.01000000.00000006.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8C861000.00000004.00000800.00020000.00000000.sdmp, Unconfirmed 6574.crdownload.0.dr, chromecache_176.1.dr	String found in binary or memory: https://s3.us-east-2.amazonaws.com/cpcheckmefiles/files/Malware.enc
Source: cpcheckme_yt22zMIg.exe, 0000000F.00000000.1706589859.0000022B8AA42000.00000002.00000001.01000000.00000006.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8C861000.00000004.00000800.00020000.00000000.sdmp, Unconfirmed 6574.crdownload.0.dr, chromecache_176.1.dr	String found in binary or memory: https://s3.us-east-2.amazonaws.com/cpcheckmefiles/files/Ransom.enc
Source: cpcheckme_yt22zMIg.exe, 0000000F.00000000.1706589859.0000022B8AA42000.00000002.00000001.01000000.00000006.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8C861000.00000004.00000800.00020000.00000000.sdmp, Unconfirmed 6574.crdownload.0.dr, chromecache_176.1.dr	String found in binary or memory: https://s3.us-east-2.amazonaws.com/cpcheckmefiles/files/antex_test_x64.enc
Source: cpcheckme_yt22zMIg.exe, 0000000F.00000000.1706589859.0000022B8AA42000.00000002.00000001.01000000.00000006.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8C861000.00000004.00000800.00020000.00000000.sdmp, Unconfirmed 6574.crdownload.0.dr, chromecache_176.1.dr	String found in binary or memory: https://s3.us-east-2.amazonaws.com/cpcheckmefiles/files/antex_test_x86.enc
Source: cpcheckme_yt22zMIg.exe, 0000000F.00000000.1706589859.0000022B8AA42000.00000002.00000001.01000000.00000006.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8C861000.00000004.00000800.00020000.00000000.sdmp, Unconfirmed 6574.crdownload.0.dr, chromecache_176.1.dr	String found in binary or memory: https://s3.us-east-2.amazonaws.com/cpcheckmefiles/files/win7_64bit_big.enc
Source: sets.json.0.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.0.dr	String found in binary or memory: https://samayam.com
Source: chromecache_177.1.dr	String found in binary or memory: https://sc1.checkpoint.com/ThreatPortal/assets/images/Browser_message.png
Source: chromecache_177.1.dr	String found in binary or memory: https://sc1.checkpoint.com/uc/images/favicons/favicon.ico
Source: chromecache_155.1.dr	String found in binary or memory: https://script.crazyegg.com/pages/scripts/
Source: sets.json.0.dr	String found in binary or memory: https://shock.co
Source: sets.json.0.dr	String found in binary or memory: https://smoney.vn
Source: chromecache_155.1.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: sets.json.0.dr	String found in binary or memory: https://songshare.com
Source: sets.json.0.dr	String found in binary or memory: https://songstats.com
Source: sets.json.0.dr	String found in binary or memory: https://sporza.be
Source: sets.json.0.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: chromecache_155.1.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_200.1.dr, chromecache_190.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_144.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: sets.json.0.dr	String found in binary or memory: https://stripe.com
Source: sets.json.0.dr	String found in binary or memory: https://stripe.network
Source: sets.json.0.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.0.dr	String found in binary or memory: https://supereva.it
Source: chromecache_140.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_162.1.dr, chromecache_140.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_162.1.dr, chromecache_140.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_162.1.dr, chromecache_140.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_144.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskstgid.com
Source: chromecache_200.1.dr, chromecache_155.1.dr, chromecache_190.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: sets.json.0.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.0.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.0.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.0.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.0.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://tvid.in
Source: sets.json.0.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.0.dr	String found in binary or memory: https://unotv.com
Source: sets.json.0.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.0.dr	String found in binary or memory: https://vrt.be
Source: sets.json.0.dr	String found in binary or memory: https://vwo.com
Source: sets.json.0.dr	String found in binary or memory: https://welt.de
Source: sets.json.0.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.0.dr	String found in binary or memory: https://wildix.com
Source: sets.json.0.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.0.dr	String found in binary or memory: https://wingify.com
Source: sets.json.0.dr	String found in binary or memory: https://wordle.at
Source: sets.json.0.dr	String found in binary or memory: https://wp.pl
Source: sets.json.0.dr	String found in binary or memory: https://wpext.pl
Source: chromecache_162.1.dr, chromecache_140.1.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: sets.json.0.dr	String found in binary or memory: https://www.asadcdn.com
Source: cpcheckme_yt22zMIg.exe, 0000000F.00000000.1706589859.0000022B8AA42000.00000002.00000001.01000000.00000006.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8C861000.00000004.00000800.00020000.00000000.sdmp, Unconfirmed 6574.crdownload.0.dr, chromecache_176.1.dr	String found in binary or memory: https://www.checkpoint.com
Source: chromecache_177.1.dr, chromecache_155.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_144.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_144.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_144.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_190.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_144.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_177.1.dr	String found in binary or memory: https://www.google.com/chrome/
Source: chromecache_177.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=explicit
Source: chromecache_174.1.dr, chromecache_162.1.dr, chromecache_140.1.dr, chromecache_128.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_155.1.dr, chromecache_190.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_190.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_155.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_144.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_177.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_177.1.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-5JCRGP
Source: chromecache_162.1.dr, chromecache_140.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/8k85QBI-qzxmenDv318AZH30/recaptcha__.
Source: chromecache_174.1.dr, chromecache_163.1.dr, chromecache_128.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/8k85QBI-qzxmenDv318AZH30/recaptcha__en.js
Source: chromecache_172.1.dr, chromecache_170.1.dr	String found in binary or memory: https://www.invincibull.io/wp-content/uploads/cropped-vince-favicon-512x512-32x32.jpg
Source: chromecache_200.1.dr, chromecache_190.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_177.1.dr	String found in binary or memory: https://www.mozilla.org/en-US/firefox/
Source: chromecache_155.1.dr, chromecache_190.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: sets.json.0.dr	String found in binary or memory: https://ya.ru
Source: sets.json.0.dr	String found in binary or memory: https://zalo.me
Source: sets.json.0.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://zingmp3.vn

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 56737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56737
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49807 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1233813918	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1233813918\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1233813918\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1233813918\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1233813918\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1233813918\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1233813918\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1048212	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1048212\Google.Widevine.CDM.dll	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1048212\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1048212\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1048212\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1048212\manifest.fingerprint	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_2041672200	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_2041672200\LICENSE.txt	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_2041672200\Filtering Rules	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_2041672200\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_2041672200\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_2041672200\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_2041672200\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_1996_953561296

Jump to behavior

Source: Google.Widevine.CDM.dll.0.dr

Static PE information: Number of sections : 12 > 10

Source: c06b9dbc-dc73-4ca5-8be7-44a4c0c2d82b.tmp.0.dr

Static PE information: No import functions for PE file found

Source: c06b9dbc-dc73-4ca5-8be7-44a4c0c2d82b.tmp.0.dr

Static PE information: Data appended to the last section found

Source: Unconfirmed 6574.crdownload.0.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: chromecache_176.1.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: classification engine

Classification label: mal60.troj.evad.win@25/158@32/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Mutant created: NULL

Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

File created: c:\temp\CheckMe.log

Jump to behavior

Source: C:\Windows\System32\rundll32.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown

Process created: C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.cpcheckme.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1956,i,12651588172182524890,15873818534290352819,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5184 --field-trial-handle=1956,i,12651588172182524890,15873818534290352819,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
Source: unknown	Process created: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe "C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1956,i,12651588172182524890,15873818534290352819,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5184 --field-trial-handle=1956,i,12651588172182524890,15873818534290352819,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Section loaded: iertutil.dll	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: Google.Widevine.CDM.dll.pdb source: Google.Widevine.CDM.dll.0.dr
Source:	Binary string: D:\src\EP_CheckMe_V_GALLIUM_POST_CL_VS13\Src\CheckMeAgent\obj\Release\CheckMeAgent.pdb source: cpcheckme_yt22zMIg.exe, 0000000F.00000000.1706589859.0000022B8AB67000.00000002.00000001.01000000.00000006.sdmp, Unconfirmed 6574.crdownload.0.dr, chromecache_176.1.dr
Source:	Binary string: D:\src\EP_CheckMe_V_GALLIUM_POST_CL_VS13\Src\CheckMeAgent\obj\Release\CheckMeAgent.pdbP\| source: cpcheckme_yt22zMIg.exe, 0000000F.00000000.1706589859.0000022B8AB67000.00000002.00000001.01000000.00000006.sdmp, Unconfirmed 6574.crdownload.0.dr, chromecache_176.1.dr

Source: c06b9dbc-dc73-4ca5-8be7-44a4c0c2d82b.tmp.0.dr

Static PE information: real checksum: 0x1293a6 should be: 0x2fa7

Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .00cfg
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .gxfg
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .retplne
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: .voltbl
Source: Google.Widevine.CDM.dll.0.dr	Static PE information: section name: _RDATA

Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Code function: 15_2_00007FFEBC7F2A37 pushad ; ret	15_2_00007FFEBC7F2A43
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Code function: 15_2_00007FFEBC7F1664 push ss; iretd	15_2_00007FFEBC7F1667
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Code function: 15_2_00007FFEBC7F7782 pushad ; ret	15_2_00007FFEBC7F77AD
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Code function: 15_2_00007FFEBC7F03AD push E95E4B53h; ret	15_2_00007FFEBC7F03B9

Source: Unconfirmed 6574.crdownload.0.dr	Static PE information: section name: .text entropy: 7.745054109162031
Source: chromecache_176.1.dr	Static PE information: section name: .text entropy: 7.745054109162031

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 6574.crdownload	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe (copy)	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\c06b9dbc-dc73-4ca5-8be7-44a4c0c2d82b.tmp	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1048212\Google.Widevine.CDM.dll	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 176	Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1048212\Google.Widevine.CDM.dll

Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 176
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 176			Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_2041672200\LICENSE.txt

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Memory allocated: 22B8AE90000 memory reserve \| memory write watch			Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Memory allocated: 22BA4860000 memory reserve \| memory write watch			Jump to behavior

Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 600000	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 599888	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 599775	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 599665	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 599553	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 599426	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 599298	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 599186	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 599073	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 598963	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 598851	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 598739	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 598613	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 598486	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 598374	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 598262	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 598150	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 598040	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 597929	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 597817	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 597673	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 597561	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 597448	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 597338	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 597226	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 597116	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 597006	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 596879	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 596751	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 596639	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 596531	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 596420	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 596308	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 596196	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 596084	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 595956	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 595829	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 595701	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 595589	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 595477	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 595366	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 595255	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 595127	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 595015	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 594904	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 594792	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 594680	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 594568	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 594440	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 594328	Jump to behavior

Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Window / User API: threadDelayed 9843

Jump to behavior

Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -5534023222112862s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -600000s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -599888s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6500	Thread sleep count: 9843 > 30	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -599775s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -599665s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -599553s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -599426s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -599298s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -599186s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -599073s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -598963s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -598851s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -598739s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -598613s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -598486s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -598374s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -598262s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -598150s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -598040s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -597929s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -597817s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -597673s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -597561s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -597448s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -597338s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -597226s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -597116s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -597006s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -596879s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -596751s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -596639s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -596531s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -596420s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -596308s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -596196s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -596084s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -595956s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -595829s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -595701s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -595589s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -595477s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -595366s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -595255s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -595127s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -595015s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -594904s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -594792s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -594680s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -594568s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -594440s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe TID: 6436	Thread sleep time: -594328s >= -30000s	Jump to behavior

Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 600000	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 599888	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 599775	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 599665	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 599553	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 599426	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 599298	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 599186	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 599073	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 598963	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 598851	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 598739	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 598613	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 598486	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 598374	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 598262	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 598150	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 598040	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 597929	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 597817	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 597673	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 597561	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 597448	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 597338	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 597226	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 597116	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 597006	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 596879	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 596751	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 596639	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 596531	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 596420	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 596308	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 596196	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 596084	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 595956	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 595829	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 595701	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 595589	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 595477	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 595366	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 595255	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 595127	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 595015	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 594904	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 594792	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 594680	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 594568	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 594440	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Thread delayed: delay time: 594328	Jump to behavior

Source: cpcheckme_yt22zMIg.exe, 0000000F.00000002.2351903030.0000022B8ACD2000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: cpcheckme_yt22zMIg.exe PID: 8176, type: MEMORYSTR

Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Queries volume information: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Internals\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Internals.dll VolumeInformation	Jump to behavior

Source: C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	31 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	1 Disable or Modify Tools	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	32 Virtualization/Sandbox Evasion	Security Account Manager	32 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Process Injection	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	14 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	2 Obfuscated Files or Information	LSA Secrets	12 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Rundll32	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	2 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	1 File Deletion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://www.cpcheckme.com	0%	Avira URL Cloud	safe

Dropped Files

Source	Detection	Scanner
C:\Users\user\Downloads\Unconfirmed 6574.crdownload	3%	ReversingLabs
C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe (copy)	3%	ReversingLabs
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1048212\Google.Widevine.CDM.dll	0%	ReversingLabs
Chrome Cache Entry: 176	3%	ReversingLabs

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
http://schemas.datacontract.org	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
http://api.jqueryui.com/category/ui-core/	0%	URL Reputation	safe
https://www.apache.org/licenses/	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
https://wieistmeineip.de	0%	Avira URL Cloud	safe
http://hot-emailer.ru/favicon.ico	0%	Avira URL Cloud	safe
https://easylist.to/)	0%	Avira URL Cloud	safe
https://mercadolivre.com	0%	Avira URL Cloud	safe
https://mercadoshops.com.co	0%	Avira URL Cloud	safe
http://sc1.checkpoint.com/check-me/Report/SVG/browser.svg	0%	Avira URL Cloud	safe
http://www.jewelsyz.com/favicon.ico	0%	Avira URL Cloud	safe
https://gliadomain.com	0%	Avira URL Cloud	safe
https://poalim.xyz	0%	Avira URL Cloud	safe
http://www.cpcheckme.com/checkme/rest/test/getScanTypesDetails?ts=1716391642957	100%	Avira URL Cloud	malware
http://www.cpcheckme.com/checkme/rest/test/getScanStatus?ts=1716391676043&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2	100%	Avira URL Cloud	malware
https://unotv.com	0%	Avira URL Cloud	safe
http://www.cpcheckme.com/checkme/rest/test/getExcludedEmails?ts=1716391642959	100%	Avira URL Cloud	malware
https://reshim.org	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://nourishingpursuits.com	0%	Avira URL Cloud	safe
https://mercadoshops.com.br	0%	Avira URL Cloud	safe
https://medonet.pl	0%	Avira URL Cloud	safe
https://joyreactor.cc	0%	Avira URL Cloud	safe
http://sc1.checkpoint.com/check-me/Report/SVG/Zero_Day.svg	0%	Avira URL Cloud	safe
https://zdrowietvn.pl	0%	Avira URL Cloud	safe
https://baomoi.com	0%	Avira URL Cloud	safe
https://elfinancierocr.com	0%	Avira URL Cloud	safe
http://www.cpcheckme.com/checkme/rest/endpoint/p	100%	Avira URL Cloud	malware
https://songstats.com	0%	Avira URL Cloud	safe
https://www.google.com/chrome/	0%	Avira URL Cloud	safe
https://rws1nvtvt.com	0%	Avira URL Cloud	safe
https://supereva.it	0%	Avira URL Cloud	safe
https://bolasport.com	0%	Avira URL Cloud	safe
https://s3.us-east-2.amazonaws.com/cpcheckmefiles/files/antex_test_x86.enc	0%	Avira URL Cloud	safe
https://desimartini.com	0%	Avira URL Cloud	safe
https://hearty.app	0%	Avira URL Cloud	safe
https://hearty.gift	0%	Avira URL Cloud	safe
https://www.gstatic.c..?/recaptcha/releases/8k85QBI-qzxmenDv318AZH30/recaptcha__.	0%	Avira URL Cloud	safe
http://files.cpcheckme.com/e.zip	0%	Avira URL Cloud	safe
https://mercadoshops.com	0%	Avira URL Cloud	safe
https://finn.no	0%	Avira URL Cloud	safe
https://heartymail.com	0%	Avira URL Cloud	safe
https://radio2.be	0%	Avira URL Cloud	safe
https://kompas.tv	0%	Avira URL Cloud	safe
https://hc1.com	0%	Avira URL Cloud	safe
https://mercadopago.com.mx	0%	Avira URL Cloud	safe
https://songshare.com	0%	Avira URL Cloud	safe
https://mystudentdashboard.com	0%	Avira URL Cloud	safe
http://files.cpcheckme.com/getcfg.php?SERVICES=DEVICE.LOG&x=y&AUTHORIZED_GROUP=1	0%	Avira URL Cloud	safe
http://sc1.checkpoint.com/check-me/SVG/Endpoint_Icon.svg	0%	Avira URL Cloud	safe
https://talkdeskqaid.com	0%	Avira URL Cloud	safe
https://mercadopago.com.pe	0%	Avira URL Cloud	safe
https://cardsayings.net	0%	Avira URL Cloud	safe
http://www.cpcheckme.com/check/testsAssets/instant_checkup.js?v=0.6652561465103368	0%	Avira URL Cloud	safe
http://files.cpcheckme.com/1.asp?FileName=a.pdf&AppID=2&MainID=9&SecID=9&MinID=2	0%	Avira URL Cloud	safe
https://mightytext.net	0%	Avira URL Cloud	safe
https://pudelek.pl	0%	Avira URL Cloud	safe
http://www.cpcheckme.com/checkme/rest/endpoint/start	100%	Avira URL Cloud	malware
https://joyreactor.com	0%	Avira URL Cloud	safe
https://cookreactor.com	0%	Avira URL Cloud	safe
https://eworkbookcloud.com	0%	Avira URL Cloud	safe
http://proxy.my-addr.com/favicon.ico	0%	Avira URL Cloud	safe
https://mercadopago.cl	0%	Avira URL Cloud	safe
https://carcostadvisor.be	0%	Avira URL Cloud	safe
https://nacion.com	0%	Avira URL Cloud	safe
https://chennien.com	0%	Avira URL Cloud	safe
https://talkdeskstgid.com	0%	Avira URL Cloud	safe
https://wildixin.com	0%	Avira URL Cloud	safe
https://bonvivir.com	0%	Avira URL Cloud	safe
https://salemovetravel.com	0%	Avira URL Cloud	safe
http://www.cpcheckme.com/checkme/vendor.16be15e20a43eba17559.js	100%	Avira URL Cloud	malware
https://wpext.pl	0%	Avira URL Cloud	safe
https://files.cpcheckme.com/check/testsAssets/post.html	0%	Avira URL Cloud	safe
https://welt.de	0%	Avira URL Cloud	safe
https://poalim.site	0%	Avira URL Cloud	safe
https://cafemedia.com	0%	Avira URL Cloud	safe
https://blackrockadvisorelite.it	0%	Avira URL Cloud	safe
http://files.cpcheckme.com/blockchain.txt	0%	Avira URL Cloud	safe
https://mercadoshops.com.ar	0%	Avira URL Cloud	safe
https://elpais.uy	0%	Avira URL Cloud	safe
https://landyrev.com	0%	Avira URL Cloud	safe
https://commentcamarche.com	0%	Avira URL Cloud	safe
http://www.cpcheckme.com/checkme/assets/libs/fontawesome/fonts/fontawesome-webfont.woff2?v=4.7.0	100%	Avira URL Cloud	malware
http://sc1.checkpoint.com/check-me/Report/SVG/Persistence_Threat.svg	0%	Avira URL Cloud	safe
https://tucarro.com.ve	0%	Avira URL Cloud	safe
https://rws3nvtvt.com	0%	Avira URL Cloud	safe
https://mercadolivre.com.br	0%	Avira URL Cloud	safe
http://www.cpcheckme.com/checkme/rest/endpoint/starte	100%	Avira URL Cloud	malware
http://www.cpcheckme.com/checkme/rest/test/getAllTests?ts=1716391619429&category=	100%	Avira URL Cloud	malware
https://eleconomista.net	0%	Avira URL Cloud	safe
http://www.cpcheckme.com/checkme/rest/test/getScanStatus?ts=1716391670793&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
d4epvaz4tpdrm.cloudfront.net	18.66.147.95	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
dualstack.elb-ireland1-1194672184.eu-west-1.elb.amazonaws.com	52.49.232.14	true	false	unknown
www.google.com	172.217.18.4	true	false	unknown
cpcheckmefiles-lb-1966426125.eu-west-1.elb.amazonaws.com	52.213.222.12	true	false	unknown
sc1.checkpoint.com	unknown	unknown	false	unknown
www.cpcheckme.com	unknown	unknown	false	unknown
www.checkpoint.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://www.cpcheckme.com/checkme/rest/test/getScanTypesDetails?ts=1716391642957	false	Avira URL Cloud: malware	unknown
http://www.cpcheckme.com/checkme/rest/test/getScanStatus?ts=1716391676043&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2	false	Avira URL Cloud: malware	unknown
http://www.cpcheckme.com/checkme/rest/test/getExcludedEmails?ts=1716391642959	false	Avira URL Cloud: malware	unknown
about:blank	false	Avira URL Cloud: safe	unknown
http://www.cpcheckme.com/check/testsAssets/instant_checkup.js?v=0.6652561465103368	false	Avira URL Cloud: safe	unknown
http://www.cpcheckme.com/checkme/rest/endpoint/start	false	Avira URL Cloud: malware	unknown
http://www.cpcheckme.com/checkme/vendor.16be15e20a43eba17559.js	false	Avira URL Cloud: malware	unknown
https://www.google.com/recaptcha/api2/bframe?hl=en&v=8k85QBI-qzxmenDv318AZH30&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb	false		unknown
http://www.cpcheckme.com/checkme/assets/libs/fontawesome/fonts/fontawesome-webfont.woff2?v=4.7.0	false	Avira URL Cloud: malware	unknown
http://www.cpcheckme.com/checkme/rest/test/getAllTests?ts=1716391619429&category=	false	Avira URL Cloud: malware	unknown
http://www.cpcheckme.com/checkme/rest/test/getScanStatus?ts=1716391670793&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2	false	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_200.1.dr, chromecache_190.1.dr	false	URL Reputation: safe	unknown
http://www.jewelsyz.com/favicon.ico	chromecache_172.1.dr, chromecache_170.1.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_162.1.dr, chromecache_140.1.dr	false	URL Reputation: safe	unknown
https://wieistmeineip.de	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
http://schemas.datacontract.org	cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CA23000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CAE4000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mercadoshops.com.co	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://gliadomain.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://poalim.xyz	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadolivre.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
http://hot-emailer.ru/favicon.ico	chromecache_172.1.dr, chromecache_170.1.dr	false	Avira URL Cloud: safe	unknown
http://sc1.checkpoint.com/check-me/Report/SVG/browser.svg	chromecache_132.1.dr	false	Avira URL Cloud: safe	unknown
https://easylist.to/)	LICENSE.txt.0.dr	false	Avira URL Cloud: safe	unknown
https://reshim.org	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_144.1.dr	false	URL Reputation: safe	unknown
https://nourishingpursuits.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
http://sc1.checkpoint.com/check-me/Report/SVG/Zero_Day.svg	chromecache_180.1.dr, chromecache_175.1.dr, chromecache_130.1.dr, chromecache_132.1.dr	false	Avira URL Cloud: safe	unknown
https://medonet.pl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://unotv.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadoshops.com.br	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://joyreactor.cc	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://zdrowietvn.pl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/chrome/	chromecache_177.1.dr	false	Avira URL Cloud: safe	unknown
https://songstats.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://baomoi.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://supereva.it	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://elfinancierocr.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
http://www.cpcheckme.com/checkme/rest/endpoint/p	cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCA5000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CBB5000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CB93000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCEB000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCD9000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD63000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CB25000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CB43000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD1D000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CC2B000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CB5F000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CC4D000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CAE4000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CBD7000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD85000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD0D000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD73000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD51000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCFB000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CC13000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD41000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://bolasport.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://rws1nvtvt.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://s3.us-east-2.amazonaws.com/cpcheckmefiles/files/antex_test_x86.enc	cpcheckme_yt22zMIg.exe, 0000000F.00000000.1706589859.0000022B8AA42000.00000002.00000001.01000000.00000006.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8C861000.00000004.00000800.00020000.00000000.sdmp, Unconfirmed 6574.crdownload.0.dr, chromecache_176.1.dr	false	Avira URL Cloud: safe	unknown
http://www.cpcheckme.com	cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD01000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCA5000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CB53000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CBCD000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CBB5000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD57000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD35000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CC75000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CC53000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CB93000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD47000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCEB000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CABB000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCF1000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCD9000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD13000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CC43000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CBF6000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCCD000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CCAB000.00000004.00000800.00020000.00000000.sdmp, cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CD63000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://desimartini.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://hearty.app	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_162.1.dr, chromecache_140.1.dr	false	URL Reputation: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/8k85QBI-qzxmenDv318AZH30/recaptcha__.	chromecache_162.1.dr, chromecache_140.1.dr	false	Avira URL Cloud: safe	unknown
https://hearty.gift	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadoshops.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://heartymail.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
http://files.cpcheckme.com/e.zip	chromecache_172.1.dr, chromecache_170.1.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_144.1.dr	false	URL Reputation: safe	unknown
https://radio2.be	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://finn.no	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://hc1.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	cpcheckme_yt22zMIg.exe, 0000000F.00000002.2353061829.0000022B8CABB000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://kompas.tv	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mystudentdashboard.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://songshare.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_140.1.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.mx	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
http://files.cpcheckme.com/getcfg.php?SERVICES=DEVICE.LOG&x=y&AUTHORIZED_GROUP=1	chromecache_172.1.dr, chromecache_170.1.dr	false	Avira URL Cloud: safe	unknown
http://sc1.checkpoint.com/check-me/SVG/Endpoint_Icon.svg	chromecache_136.1.dr, chromecache_193.1.dr, chromecache_151.1.dr, chromecache_183.1.dr	false	Avira URL Cloud: safe	unknown
https://talkdeskqaid.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadopago.com.pe	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://cardsayings.net	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
http://files.cpcheckme.com/1.asp?FileName=a.pdf&AppID=2&MainID=9&SecID=9&MinID=2	chromecache_172.1.dr, chromecache_170.1.dr	false	Avira URL Cloud: safe	unknown
https://mightytext.net	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/category/ui-core/	chromecache_194.1.dr	false	URL Reputation: safe	unknown
https://pudelek.pl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://joyreactor.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://www.apache.org/licenses/	chromecache_162.1.dr, chromecache_140.1.dr	false	URL Reputation: safe	unknown
https://cookreactor.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://wildixin.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://eworkbookcloud.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://nacion.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://chennien.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
http://proxy.my-addr.com/favicon.ico	chromecache_172.1.dr, chromecache_170.1.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_162.1.dr, chromecache_140.1.dr	false	URL Reputation: safe	unknown
https://mercadopago.cl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://talkdeskstgid.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://bonvivir.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://carcostadvisor.be	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://salemovetravel.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://wpext.pl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://welt.de	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://poalim.site	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://blackrockadvisorelite.it	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://files.cpcheckme.com/check/testsAssets/post.html	chromecache_172.1.dr, chromecache_170.1.dr	false	Avira URL Cloud: safe	unknown
https://cafemedia.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
http://files.cpcheckme.com/blockchain.txt	chromecache_172.1.dr, chromecache_170.1.dr	false	Avira URL Cloud: safe	unknown
https://mercadoshops.com.ar	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://elpais.uy	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://landyrev.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
http://sc1.checkpoint.com/check-me/Report/SVG/Persistence_Threat.svg	chromecache_180.1.dr, chromecache_175.1.dr, chromecache_130.1.dr, chromecache_132.1.dr	false	Avira URL Cloud: safe	unknown
https://commentcamarche.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://tucarro.com.ve	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://rws3nvtvt.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
http://www.cpcheckme.com/checkme/rest/endpoint/starte	cpcheckme_yt22zMIg.exe, 0000000F.00000002.2361345704.0000022BA506F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://eleconomista.net	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadolivre.com.br	sets.json.0.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
216.58.212.164	unknown	United States	15169	GOOGLEUS	false
52.213.172.255	unknown	United States	16509	AMAZON-02US	false
34.251.116.243	unknown	United States	16509	AMAZON-02US	false
52.49.232.14	dualstack.elb-ireland1-1194672184.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
18.66.147.106	unknown	United States	3	MIT-GATEWAYSUS	false
18.66.147.95	d4epvaz4tpdrm.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17
192.168.2.16
192.168.2.18

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1445862
Start date and time:	2024-05-22 17:25:58 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://www.cpcheckme.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.troj.evad.win@25/158@32/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 98% Number of executed functions: 84 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.163, 142.250.185.110, 74.125.133.84, 34.104.35.123, 172.217.18.104, 142.250.185.142, 142.250.181.227, 2.16.185.199, 104.73.232.210, 95.100.56.228, 216.239.36.178, 216.239.38.178, 216.239.34.178, 216.239.32.178, 216.58.212.162, 93.184.221.240, 172.217.18.106, 142.250.184.202, 142.250.186.138, 142.250.186.170, 172.217.16.202, 142.250.186.106, 142.250.185.74, 172.217.23.106, 172.217.16.138, 142.250.185.106, 172.217.18.10, 142.250.74.202, 216.58.206.74, 142.250.185.138, 142.250.186.74, 142.250.186.42, 142.250.184.227, 142.250.184.195, 142.250.185.227, 142.250.185.99, 142.250.184.206
Excluded domains from analysis (whitelisted): clients1.google.com, e17340.f.akamaiedge.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, new-sc1.checkpoint.com.edgekey.net.edgekey.net, www-alv.google-analytics.com, ctldl.windowsupdate.com, clientservices.googleapis.com, pagead2.googlesyndication.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, www.googletagmanager.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, www.google-analytics.com
Execution Graph export aborted for target cpcheckme_yt22zMIg.exe, PID 8176 because it is empty
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
VT rate limit hit for: http://www.cpcheckme.com

Simulations

Behavior and APIs

Time	Type	Description
11:27:58	API Interceptor	18772x Sleep call for process: cpcheckme_yt22zMIg.exe modified

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 22 14:26:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.982624624916234
Encrypted:	false
SSDEEP:	48:8md5QTZ00bkHcidAKZdA1FehwiZUklqehr1ny+3:8yQ9BbbS5y
MD5:	365F4FE88A0AFC8FBA4426551DC63F1E
SHA1:	DB704F496C8723E57D402D63F0ED749AB797C6C1
SHA-256:	AF04CF078B198BC827DA831452B1BE528893AB151E146A5EC8D76C72550D4D9B
SHA-512:	326E8BFFEB9EE2D0C979515D5C31CC0F377990BD5B4642638EC17229FB876787D49D431F98606B1CDE6A02E5E09AB0AEA44C371C2DEE2BDA50B10B83AE2EA5CD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Q\.}\...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.XU{....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X\{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X\{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X\{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X`{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............]......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 22 14:26:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.001304713032205
Encrypted:	false
SSDEEP:	48:81d5QTZ00bkHcidAKZdA1seh/iZUkAQkqehC1ny+2:8hQ9BbF9Ql5y
MD5:	E16CD4307CE7388BB0B115E3D3653547
SHA1:	2CA681FA55BDB33E835931A79C4C9C0C7136E382
SHA-256:	BF6FF3C51EB26ACF8438F0F79DCC03F55F51715AF68EFF16FEB137738ABF34F1
SHA-512:	83C8DA109B4435BD3BE6A145B3419779D708C32BDB3F53F51A08DC3527A6944F1564A879CDA04CA4B74916E24C8B6C28E72378CFFE053F8CCA7D9B452033A688
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......\|\...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.XU{....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X\{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X\{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X\{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X`{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............]......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.008820907044344
Encrypted:	false
SSDEEP:	48:8md5QTZ00bAHcidAKZdA14meh7sFiZUkmgqeh7sc1ny+BX:8yQ9BbtnW5y
MD5:	BD49D74E32D0BEBE2B9CFC8FFA1E579A
SHA1:	DB1DD367D7972542473853B47D63EE394EFD7394
SHA-256:	E575EC8720F6833E4F746F66AD886AB7B6E2114F360F70EF9F2FF762DB8D5A16
SHA-512:	390D3A7889EA745E156F135562E221763F3F53B0E572FE91DFA034D6FA40E26EEF6850802675FEBF873B1C14C07A17EAAFEBF8F881E265AFCAB4CF0AD2DA6A0B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.XU{....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X\{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X\{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X\{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............]......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 22 14:26:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9979585596545646
Encrypted:	false
SSDEEP:	48:85d5QTZ00bkHcidAKZdA1TehDiZUkwqeh+1ny+R:8FQ9BbWE5y
MD5:	CADE8425A771320AB327D3E454A9F718
SHA1:	68D6D0907ACD0E527D635F45E5E0A2E14B547394
SHA-256:	CD269E2005AD52730EB98C5D93818F22D536E944FF3DB09F1EFDBC93C42AE70E
SHA-512:	4646761EADD70AA247ADBA4F8391A18BF9B81635ED61A0CAF6107832E7E484E5CC64F4C6B6E142875911D5C5BEB98B10880A56F5474C49635387DB22267C3184
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....R..\|\...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.XU{....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X\{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X\{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X\{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X`{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............]......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 22 14:26:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9855211597073423
Encrypted:	false
SSDEEP:	48:8Hvd5QTZ00bkHcidAKZdA1dehBiZUk1W1qehw1ny+C:8HTQ9BbW9Q5y
MD5:	D2705BED86C9DCD9A90C0E71F9C482F5
SHA1:	FF98B33732F1F80AA79413C0439E4E566F960A7C
SHA-256:	392DEA09C3C276D8DF9CDF372B43EA1DA0DE8F2BFB5FAFDBEAB764B44E59F34B
SHA-512:	9BB5F55DDB048D482EE77369ED1F3D0B80C0AF6ECCDDE9DCAA4D53ED3D711AE5C3A473F7C85E81305639EE46575487F24DCDAB988896060C304057EC5AC48A24
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....o..\|\...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.XU{....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X\{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X\{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X\{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X`{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............]......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 22 14:26:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.999378544192266
Encrypted:	false
SSDEEP:	48:8qd5QTZ00bkHcidAKZdA1duTeehOuTbbiZUk5OjqehOuTbW1ny+yT+:8mQ9BbsTfTbxWOvTbW5y7T
MD5:	F94A10F7B5E2BA1B4BABD1A849680B68
SHA1:	D16228E843AB29F6FBD631AE064374F1FDEEB747
SHA-256:	FA0558EF9A6D7E588493619C582F8E211033A3750151CB00D5774D811CE36CA5
SHA-512:	8C4E85FCC91D9D96673DDB487B699D369837C2D595A7E52F87172E56A1D7C7E11DD6843BDDB24215C3936CE6A082685345404B216E6CAF34B82E8C6F3594E08A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......\|\...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.XU{....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X\{....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X\{....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X\{..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X`{...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............]......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Downloads\Unconfirmed 6574.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1216832
Entropy (8bit):	7.741732892611549
Encrypted:	false
SSDEEP:	24576:sTqf9cHgsAvqgbWk7gBRv9lo71WqakVggf6ZNflJQnhGU/5Gzy9Koj6V83+5g7in:Y8c/AiQWMgBRlle9VggiZN9JQncS5Gzv
MD5:	1F5E1935BC678EA70274516D5FA9C7A0
SHA1:	11D6155F2AF9B0E1E512FBB97CE132B1D522482D
SHA-256:	6917CA89ECDFD69C9EE45E98C3F20E9C8C7C311F8479735E4BB6B44C8C6456D4
SHA-512:	7495BA6557117A5404E33B11835B271A651AD4BB490C55CC4853D9C5AD13FE496E6E1A83113331E18A6355DDDAD94FC092D6B33CF438F641496ADDB10CDF61EE
Malicious:	true
Yara Hits:	Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\Downloads\Unconfirmed 6574.crdownload, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....xe.........."...0..^..........z\|... ........@.. ....................................`.................................(\|..O....................h..@)...........z............................................... ............... ..H............text....\... ...^.................. ..`.rsrc................`..............@..@.reloc...............f..............@..B................\\|......H.......,...L...........x...x............................................0..k.......(......(....o/...(.....r...p(...+o3....(......,..oO...,.(....o.....&(.....o.......(......o2.....(....o1............QQ.......0..........(......(....o/...(.....r...p(...+o3...~.....~.....~.....r/..p.r...p.r...p.s....%.o......o....(.....r...p..(....(...+o3...(....o1.....( .....(.....~....-.r...p.....(!...o"...s#........~.....~...........j(....r...p~....o$...t....j(....r...p~....o$...t....

C:\Users\user\Downloads\c06b9dbc-dc73-4ca5-8be7-44a4c0c2d82b.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	6191
Entropy (8bit):	4.8434946344115755
Encrypted:	false
SSDEEP:	192:jiapIAZk57ROmwP8hZJ1x67oVLZ/22hKdiu:jwAZk57ROmwULJoPdiu
MD5:	DD9EA680FBC85CB17AB33453ED4413CE
SHA1:	A0EC3A43FDD052C4BC48333306DCF297034131B8
SHA-256:	A9B3C1088F827685BA0639E0D5CA831F2199A9A2FD1297BCACD9F91FF51D39D6
SHA-512:	FA23BBF3CAF64EDAD49B70B56342123B79E7811969DEF055B7C94797BF20AEBB3BB54EC6FACED327C614B706C8D5DB75D7CF784BCF9D77C0BC19778229B8D49E
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....xe.........."...0..^..........z\|... ........@.. ....................................`.................................(\|..O....................h..@)...........z............................................... ............... ..H............text....\... ...^.................. ..`.rsrc................`..............@..@.reloc...............f..............@..B................\\|......H.......,...L...........x...x............................................0..k.......(......(....o/...(.....r...p(...+o3....(......,..oO...,.(....o.....&(.....o.......(......o2.....(....o1............QQ.......0..........(......(....o/...(.....r...p(...+o3...~.....~.....~.....r/..p.r...p.r...p.s....%.o......o....(.....r...p..(....(...+o3...(....o1.....( .....(.....~....-.r...p.....(!...o"...s#........~.....~...........j(....r...p~....o$...t....j(....r...p~....o$...t....

C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	1216832
Entropy (8bit):	7.741732892611549
Encrypted:	false
SSDEEP:	24576:sTqf9cHgsAvqgbWk7gBRv9lo71WqakVggf6ZNflJQnhGU/5Gzy9Koj6V83+5g7in:Y8c/AiQWMgBRlle9VggiZN9JQncS5Gzv
MD5:	1F5E1935BC678EA70274516D5FA9C7A0
SHA1:	11D6155F2AF9B0E1E512FBB97CE132B1D522482D
SHA-256:	6917CA89ECDFD69C9EE45E98C3F20E9C8C7C311F8479735E4BB6B44C8C6456D4
SHA-512:	7495BA6557117A5404E33B11835B271A651AD4BB490C55CC4853D9C5AD13FE496E6E1A83113331E18A6355DDDAD94FC092D6B33CF438F641496ADDB10CDF61EE
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....xe.........."...0..^..........z\|... ........@.. ....................................`.................................(\|..O....................h..@)...........z............................................... ............... ..H............text....\... ...^.................. ..`.rsrc................`..............@..@.reloc...............f..............@..B................\\|......H.......,...L...........x...x............................................0..k.......(......(....o/...(.....r...p(...+o3....(......,..oO...,.(....o.....&(.....o.......(......o2.....(....o1............QQ.......0..........(......(....o/...(.....r...p(...+o3...~.....~.....~.....r/..p.r...p.r...p.s....%.o......o....(.....r...p..(....(...+o3...(....o1.....( .....(.....~....-.r...p.....(!...o"...s#........~.....~...........j(....r...p~....o$...t....j(....r...p~....o$...t....

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1048212\Google.Widevine.CDM.dll

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32+ executable (DLL) (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	2877728
Entropy (8bit):	6.868480682648069
Encrypted:	false
SSDEEP:	49152:GB6BoH5sOI2CHusbKOdskuoHHVjcY94RNETO2WYA4oPToqnQ3dK5zuqvGKGxofFo:M67hlnVjcYGRNETO2WYA4oLoqnJuZI5
MD5:	477C17B6448695110B4D227664AA3C48
SHA1:	949FF1136E0971A0176F6ADEA8ADCC0DD6030F22
SHA-256:	CB190E7D1B002A3050705580DD51EBA895A19EB09620BDD48D63085D5D88031E
SHA-512:	1E267B01A78BE40E7A02612B331B1D9291DA8E4330DEA10BF786ACBC69F25E0BAECE45FB3BAFE1F4389F420EBAA62373E4F035A45E34EADA6F72C7C61D2302ED
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Reputation:	low
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....fd.........." ......(..........A&.......................................,.......,...`A.........................................V......V......`,......`+..p....+. )...p,......D.8....................C.(.....(.8...........p\..............................text.....(.......(................. ..`.rdata..h.....(.......(.............@..@.data....l......&.................@....pdata...p...`+..r.................@..@.00cfg..(.....+......p+.............@..@.gxfg....$....+..&...r+.............@..@.retplnel.... ,.......+..................tls.........0,.......+.............@....voltbl.D....@,.......+................._RDATA.......P,.......+.............@..@.rsrc........`,.......+.............@..@.reloc.......p,.......+.............@..B........................................................................................................................................

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1048212\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1778
Entropy (8bit):	6.02086725086136
Encrypted:	false
SSDEEP:	48:p/hCdQAdJjRkakCi0LXjX9mqjW6JmfQkNWQzXXf2gTs:RtQ1aaxXrjW6JuQEWQKas
MD5:	3E839BA4DA1FFCE29A543C5756A19BDF
SHA1:	D8D84AC06C3BA27CCEF221C6F188042B741D2B91
SHA-256:	43DAA4139D3ED90F4B4635BD4D32346EB8E8528D0D5332052FCDA8F7860DB729
SHA-512:	19B085A9CFEC4D6F1B87CC6BBEEB6578F9CBA014704D05C9114CFB0A33B2E7729AC67499048CB33823C884517CBBDC24AA0748A9BB65E9C67714E6116365F1AB
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"KTPeHzS0ybFaz3_br3ASYWHjb6Ctul92067u2JMwtNYYm-4KxLiSkJZNBIzhm6hNSEW2p5kUEvHD0TjhhFGCZnWm9titj2bqJayCOAGxZb5BO74JJCRfy5Kwr1KSS4nvocsZepnHBmCiG2OV3by-Lyf1h1uU3X3bDfD92O0vJzrA8rwL2LrwIk-BolLo5nlM0I_MZwg8DhZ8SFBu9GGRVB2XrailDrv4SgupFE9gqA1HY6kjRjoyoAHbRRxZdBNNt9IKNdxNyaF9NcNRY8dAedNQ9Tw3YNp5jB7R9lcjO4knn58RdH2h_GiJ4l96StcXA4e7cqbJ77P-c

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1048212\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.974403644129192
Encrypted:	false
SSDEEP:	3:SLVV8T+WSq2ykFDJp9qBn:SLVqZS5p0B
MD5:	D30A5BBC00F7334EEDE0795D147B2E80
SHA1:	78F3A6995856854CAD0C524884F74E182F9C3C57
SHA-256:	A08C1BC41DE319392676C7389048D8B1C7424C4B74D2F6466BCF5732B8D86642
SHA-512:	DACF60E959C10A3499D55DC594454858343BF6A309F22D73BDEE86B676D8D0CED10E86AC95ECD78E745E8805237121A25830301680BD12BFC7122A82A885FF4B
Malicious:	false
Reputation:	low
Preview:	1.c900ba9a2d8318263fd43782ee6fd5fb50bad78bf0eb2c972b5922c458af45ed

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1048212\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	145
Entropy (8bit):	4.595307058143632
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFooG+HhFFKS18CWjhXLXGPQ3TRpvF/FHddTcplFHddTcVYA:F6VlM5PpKS18hRIA
MD5:	BBC03E9C7C5944E62EFC9C660B7BD2B6
SHA1:	83F161E3F49B64553709994B048D9F597CDE3DC6
SHA-256:	6CCE5AD8D496BC5179FA84AF8AFC568EEBA980D8A75058C6380B64FB42298C28
SHA-512:	FB80F091468A299B5209ACC30EDAF2001D081C22C3B30AAD422CBE6FEA7E5FE36A67A8E000D5DD03A30C60C30391C85FA31F3931E804C351AB0A71E9A978CC0F
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "windows-mf-cdm",. "version": "1.0.2738.0",. "accept_arch": [. "x64",. "x86_64",. "x86_64h". ].}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1233813918\LICENSE

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1233813918\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.99136283355077
Encrypted:	false
SSDEEP:	48:p/hUI1uLIrAdIi17akd8+vZvZAALRQkNKaLDekpvW:RnNQI+7amlBvZAKRQi3ekdW
MD5:	884209DC825F17BCF6433F2DD3C7E6FD
SHA1:	A38A1A859C781FD6F7BD52CFD62CE685CA5A910D
SHA-256:	B62C892D3B126AD917D30310BD400C333029727C88140E9C9E6420AE3E26DEED
SHA-512:	BC1F8D656C7D617D7C9C289DD6E49AC19301BE9597B89DBC41DEC6CA6CC719C6ECA7F28B3F992A6ADBF587202C3C04CE0835C5459407F888EFB1281FF77F8201
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"FyhsZV91g2fM48fWCbRoIt5Z4L9u9uKeVBrevEE_fcaxnHu2YKCITYZCsfuIiRaQ0ioSrONndIR3o_NRLn94EeCjW9mx09YGbtIDuaJKHalmPzYIKcJvpnfGWUQ4tFVwkVRvmC2Tczv3CxqyCojE9cr4qr4Oo19wV9CcABBCXyiAlY3UDUkteh0C6JBtQ9JS4V_PmMD4xZ0-W7Ly1irhspj4QWnVLZoOBO121sn4rC8vsNNLR8K2rXS

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1233813918\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.7748418475126835
Encrypted:	false
SSDEEP:	3:S8g+WBDTZy0suxRSA1er1Cl:SD0Oxm5Cl
MD5:	12E4B45B481A49CB9793C4EB9EEB686D
SHA1:	8A1C3CD932D7441ACA1FDA1B077BFFAC53067E6A
SHA-256:	0B26105D6FCD078FC074E3F43012735C3C9D62E20B3C4DB205DEA4A8841ACE18
SHA-512:	026B9E240002166064E91BA063A2867F2A76F25FD0017661F082C877FE5F6067BDDCCB59DE187BD7AC31147DA054EB63969AF63EAD01F8F4469DD9168EF85BBC
Malicious:	false
Reputation:	low
Preview:	1.a0d36633da5e9660efefde44a0762f678cb7a0e47eca24d0f3e479b6ae303673

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1233813918\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.462192586591686
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1gLIJY:F6VlM8aRWpqS1gL2Y
MD5:	96644BF9C61D98F0ABBCB29D385C4DF2
SHA1:	83F15025C8B68D609DC3653517B224C8AED08602
SHA-256:	2D6F188933F762A98D6F5796438D63D1415F3661D04522C32900984440297F80
SHA-512:	F185B72778A001005A73052AB108EFE53A0C70A4A6B274D5B0F33160998A32FFA5CFFE730005258E3398041DE28452907B38A7AE2E632C6EB095BE700337D704
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.5.14.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1233813918\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7793
Entropy (8bit):	4.61890378232256
Encrypted:	false
SSDEEP:	96:Mon4mdqX1gs1/BNKLcxbdmf5688PTGXvcxKuP+8qJq:v7qljBkIVRPTGXvcx1sq
MD5:	94679DFD3B9168DAA5214E36B8E12730
SHA1:	DE6965B81658AD978483F3A809641C66C2A92D12
SHA-256:	83D4ABA459DB56533A15A34889D633A5EB0AE6CFB90483D5BC60FC6CA72AC7D3
SHA-512:	156D83BFB12C4C3424BDF7929CC8977D8025A08301B942F5B7474D61EC7421DE0EADF6923619EED4B4EC66CC742ACF1201C3438E1947B05F14C8F172194F5D6E
Malicious:	false
Reputation:	low
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://elpais.com.uy","associatedSites":["https://clubelpais.com.uy","https://paula.com.uy","https://gallito.com.uy"],"ccTLDs":{"https://elpais.com.uy":["https://elpais.uy"]}}.{"primary":"https:/

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_2041672200\Filtering Rules

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	70106
Entropy (8bit):	5.53028222391977
Encrypted:	false
SSDEEP:	1536:5tl3vXzj/oGmZSxdCqbP5PfgJgCR4Kdst6zf2Lu4semcjS:Vvjj/VmZsdCEBwgC2ist6zf4u4TmcjS
MD5:	6274A7426421914C19502CBE0FE28CA0
SHA1:	E4D1C702CA1B5497A3ABCDD9495A5D0758F19FFC
SHA-256:	AE2FD01D2908591E0F39343A5B4A78BAA8E7D6CAC9D78BA79C502FE0A15CE3EE
SHA-512:	BF1287F502013308CDD906F6E42998C422EF1E272B348E66122DC4A4E471D01333B418F48D1BB2198C72845BDC950612597E179E612AAA1BA6CF8D48FB8F0CF5
Malicious:	false
Reputation:	low
Preview:	............0.8.@.R.-728x90...........0.8.@.R.adtdp.com^..........0.8.@.R.yomeno.xyz^..........0.8.@.R.yellowblue.io^..........0.8.@.R.ad999.biz^..........0.8.@.R._468_60...........0.8.@.R.pemsrv.com^.-...........konograma.com..0.8.@.R./adserver.."......0.8.@.R./plugins/cactus-ads/.,........0.8.@.R.mysmth.net/nForum//ADAgent_..........0.8.@.R.indoleads.com^.%......0.8.@.R.discordapp.com/banners/.E...........daum.net0.8.@.R)daumcdn.net/adfit/static/ad-native.min.js.(........0.8.@.R.looker.com/api/internal/.#........0.8.@.R.broadstreetads.com^..........0.8.@.R./banner.cgi?..........0.8.@.R./in/track?data=.!......0.8.@.R.linkbucks.com/tmpl/..........0.8.@.R.ezojs.com^..........0.8.@.R./adimage...........0.8.@.R.clicktripz.com^.%........0.8.@.R.actualreflection.com^.Q...........weatherbug.net0.8.@.R/web-ads.pulse.weatherbug.net/api/ads/targeting/..........0.8.@.R.-ad-manager/.#........0.8.@.R.searchad.naver.com^..........0.8.@.R./page-links-to/dist/new-tab.js........0.8.@.R.files.slack

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_2041672200\LICENSE.txt

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	24623
Entropy (8bit):	4.588307081140814
Encrypted:	false
SSDEEP:	384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm0:mvagXreRnTqzazWgj0v6XqD
MD5:	D33AAA5246E1CE0A94FA15BA0C407AE2
SHA1:	11D197ACB61361657D638154A9416DC3249EC9FB
SHA-256:	1D4FF95CE9C6E21FE4A4FF3B41E7A0DF88638DD449D909A7B46974D3DFAB7311
SHA-512:	98B1B12FF0991FD7A5612141F83F69B86BC5A89DD62FC472EE5971817B7BBB612A034C746C2D81AE58FDF6873129256A89AA8BB7456022246DC4515BAAE2454B
Malicious:	false
Reputation:	low
Preview:	EasyList Repository Licences.... Unless otherwise noted, the contents of the EasyList repository.. (https://github.com/easylist) is dual licensed under the GNU General.. Public License version 3 of the License, or (at your option) any later.. version, and Creative Commons Attribution-ShareAlike 3.0 Unported, or.. (at your option) any later version. You may use and/or modify the files.. as permitted by either licence; if required, "The EasyList authors.. (https://easylist.to/)" should be attributed as the source of the.. material. All relevant licence files are included in the repository..... Please be aware that files hosted externally and referenced in the.. repository, including but not limited to subscriptions other than.. EasyList, EasyPrivacy, EasyList Germany and EasyList Italy, may be.. available under other conditions; permission must be granted by the.. respective copyright holders to authorise the use of their material.......Creative Commons Attribut

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_2041672200\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1529
Entropy (8bit):	5.993464908806813
Encrypted:	false
SSDEEP:	24:pZRj/flTHY0d90kYbKfnatzjeT3V5zkaoXw4eDY1dkF0xfoXPFrsg9dPEQxMd8Lb:p/h40dgbKfatOTlBkakw4eso6fkdDPZ5
MD5:	9595F2EA36EF722F875DE37BAC248BFE
SHA1:	1F676CCD0DEE25DFF34C4820A5C5FB1474DE94F4
SHA-256:	5227D3F5D7F4F9014250D9E8FBF833E342A0ECC74C00EEBBD11A02310586FA1E
SHA-512:	E42D38184438A76B070CF333E6E2CAD2931D83462C8F43078A58CF66896D99882B26033F729994C04ABFE2BB9BE3BA412AD8D50229F6E7007F3F26962D586DEC
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"2ewGqwW0rWfqv9OeNI6k7idyUelFKWOszHK7vAWoVUSQEiO_Ww4MUkFl3VsAKsRZSS7cegWZQ3mRDXvHJ7QemZtwBI_r8fjFD61ZkMglRngSOpozNnIFZnkFkqsGKN7sbAqFUFNPpl1I7NWwPmAnqFyKkazEj4wXLaoQqhK8HM_A6Jd7i9AVWnPDVAx7YmB3Q_K7BmM2mkKx7KP6wxjtA9pS-OfliLawjnc0HzseW50Qwr6Mq

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_2041672200\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.84766837175646
Encrypted:	false
SSDEEP:	3:STcuiIqBWJzBqItVBWBTOexn:SThiIltqItVwlT
MD5:	97A21B537A496DDB93F258BE89D5157E
SHA1:	640FAB7CC72FF72C1DAE9F94D4D3B45E9D07CCE3
SHA-256:	6FA60CD5A6A1B84DFBB38135B514BB7973ED1C648D47F308848EE67590A5A44C
SHA-512:	526F5CB036A773C33A56CC417C048FB739763DE492D0AB9D2AB6ADA502B6C39C2698E07E569C64C8FBF101C2C6C5A88B70BF346DE154810A2072321D29A2B46D
Malicious:	false
Reputation:	low
Preview:	1.cd1978742a4afdbaaa15bf712d5c90bef4144caa99024df98f6a9ad58043ae85

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_2041672200\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	114
Entropy (8bit):	4.529806411032915
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFHXG7LGMdv5HcDKhtUJKS17eAn:F6VlMZWuMt5SKPS17tn
MD5:	4C30F6704085B87B66DCE75A22809259
SHA1:	8953EE0F49416C23CAA82CDD0ACDACC750D1D713
SHA-256:	0152E17E94788E5C3FF124F2906D1D95DC6F8B894CC27EC114B0E73BF6DA54F9
SHA-512:	51E2101BCAD1CB1820C98B93A0FB860E4C46172CA2F4E6627520EB066692B3957C0D979894E6E0190877B8AE3C97CB041782BF5D8D0BB0BF2814D8C9BB7C37F3
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "Subresource Filtering Rules",. "ruleset_format": 1,. "version": "9.49.1".}

C:\temp\CheckMe.log

Download File

Process:	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	6870
Entropy (8bit):	5.268746331045982
Encrypted:	false
SSDEEP:	192:ffbJlW5m0YbMdATiyVN1voSxL8hjcrvJBSoWux20YizNNe5EUm7BdRAhlhtsuDqA:ffhQIaI6
MD5:	A85BD0997F1545ED54718ED54BC4D10D
SHA1:	AA8EB8688D45118CDA258D1E97D6092914A13173
SHA-256:	38148781C013C9B976C29A6DA474BB887E8E7D5E4174F473242DDEC7F96CC689
SHA-512:	DE5A5EE6A6C5D88DC4836EF58E2E2C9C1506856CF6FABE92F477CDD740932C680ED0C40D88161121B260E034A4F0B8790B2DA9E2C681611A1932E6FBB290AD6B
Malicious:	false
Reputation:	low
Preview:	t[220524-112756.256]p[1ff0:1]l[Trace].########################### Started agent ###########################...t[220524-112756.320]p[1ff0:1]l[Info]Process name: cpcheckme_yt22zMIg..t[220524-112756.320]p[1ff0:1]l[Info]Token: yt22zMIg..t[220524-112756.336]p[1ff0:1]l[Info]Try to kill prev proce with name: cpcheckme..t[220524-112756.336]p[1ff0:1]l[Info]Creating test executor..t[220524-112756.400]p[1ff0:1]l[Info]Cleaning Test: CheckMeAgent.Engine.Tests.Runners.RunnerDefault..t[220524-112756.416]p[1ff0:1]l[Info]Cleaning Test: CheckMeAgent.Engine.Tests.Runners.Malware.MalwareTestRunner..t[220524-112756.416]p[1ff0:1]l[Info]Cleaning 0 CP_AM processes..t[220524-112756.432]p[1ff0:1]l[Info]Tryting to delete: c:\temp\CP\CmScriptLog.log..t[220524-112756.432]p[1ff0:1]l[Info]Cleaning Test: CheckMeAgent.Engine.Tests.Runners.ZeroDay.ZeroDayTestRunner..t[220524-112756.432]p[1ff0:1]l[Info]Cleaning 0 CP_ZD processes..t[220524-112756.432]p[1ff0:1]l[Info]Tryting to delete: c:\temp\CP\CmScriptLog.log..t[220524

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	8
Entropy (8bit):	2.25
Encrypted:	false
SSDEEP:	3:Lo:Lo
MD5:	7D62FD4AB71AAC7C09EA028963838C9D
SHA1:	6E6C46E5AC289D3BF0548C1A365943BCD61927A1
SHA-256:	7F5456A68F35ECAE4CCE7AFBEFC9D17CEBBFF5C5FFB8978498A6252BC3CFDFBD
SHA-512:	F98463A7C4C455C51242D444D4BFB0E4932D9841DB91B2F54B6DE449F7D36FA3E54A2E3E11716AF936D784A3EFF24352A213019E9C6B36FB2AF701D002FE9F52
Malicious:	false
Reputation:	low
URL:	http://www.cpcheckme.com/checkme/rest/utils/getCaptchaType
Preview:	"GOOGLE"

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	8
Entropy (8bit):	2.25
Encrypted:	false
SSDEEP:	3:Lo:Lo
MD5:	7D62FD4AB71AAC7C09EA028963838C9D
SHA1:	6E6C46E5AC289D3BF0548C1A365943BCD61927A1
SHA-256:	7F5456A68F35ECAE4CCE7AFBEFC9D17CEBBFF5C5FFB8978498A6252BC3CFDFBD
SHA-512:	F98463A7C4C455C51242D444D4BFB0E4932D9841DB91B2F54B6DE449F7D36FA3E54A2E3E11716AF936D784A3EFF24352A213019E9C6B36FB2AF701D002FE9F52
Malicious:	false
Reputation:	low
Preview:	"GOOGLE"

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17631)
Category:	downloaded
Size (bytes):	18224
Entropy (8bit):	5.644855010869986
Encrypted:	false
SSDEEP:	384:lBgSsu1QCKnnEgWmtompF3Gc/+t9keaemXgqxZNUw:nXlKnnVWy2Ft9VaeQNLUw
MD5:	E9E9D7EE7ADA5A79D306AF16CAA43F52
SHA1:	1485A8FAC351BCA5DB929BF10179B6D5765E6F08
SHA-256:	705F6D8911EDE01CD06BF8258D96F21946E31474915C97866560932ECD290704
SHA-512:	62383458437DA6DCAA15BBCBC5A5F782897F951256B8FAD6F2D539C7E8C835CA29141DBD4EC61C34421700EE217E0D71FDAFF072F45C0DD11C12CC387BFEDC7E
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/cF9tiRHt4BzQa_gljZbyGUbjFHSRXJeGZWCTLs0pBwQ.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var O=function(C,h){if(C=(h=null,H.trustedTypes),!C\|\|!C.createPolicy)return h;try{h=C.createPolicy("bg",{createHTML:k,createScript:k,createScriptURL:k})}catch(g){H.console&&H.console.error(g.message)}return h},H=this\|\|self,k=function(C){return C};(0,eval)(function(C,h){return(h=O())&&1===C.eval(h.createScript("1"))?function(g){return h.createScript(g)}:function(g){return""+g}}(H)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var x=function(h,C,H,k,E,Q){if(h.I==h)for(E=R(h,H),372==H\|\|164==H\|\|387==H?(H=function(S,g,O,n,b){if((O=((b=E.length,b)\|0)-4>>3,E.xJ)!=O){g=[0,0,(n=(O<<3)-4,Q[E.xJ=O,1]),Q[2]];try{E.tI=Cl(g,hE(n,E),hE((n\|0)+4,E))}catch(M){throw M;}}E.push(E.tI[b&7]^S)},Q=R(h,403)):H=function(S){E.push(S)},k&&H(k&255),h=0,k=C.length;h<k;h++)H(C[h])},HX=function(h,C,H,k,E){(E=(E=(C&=(H=C&3,4),U)(h),k=U(h),R(h,E)),C&&(E=gC(

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	109
Entropy (8bit):	5.3509595831633305
Encrypted:	false
SSDEEP:	3:yionv//thPlJlawvlZBxN/o2XmsYYu7Lwo8onVi3/H1p:6v/lhP70wrB12xD38w4Np
MD5:	DD29705C1877BCB40BBF8DBB66BAB584
SHA1:	077233300BE5B1E6E73CE258F02AE8A03FC4ED44
SHA-256:	8CDE03A4484A2199B4145EE9D3EA4285B5027C950157434A45CA8005733D893C
SHA-512:	8DEB6BB04DF12EECE2103AFD9E9C25393D4B77D7B7A6235C5FA3BCCEF7C4E3976384CCFDEDC26D83E56B721262002EABFFED18278E9BEB39370C935C69F19C21
Malicious:	false
Reputation:	low
URL:	https://sc1.checkpoint.com/check-me/SVG/checkbox.png
Preview:	.PNG........IHDR.............;.J...4IDAT(.c<s....2........1...=..D.......G5.f.,...DN...J...SQ.O....IEND.B`.

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	386
Entropy (8bit):	5.097464446790742
Encrypted:	false
SSDEEP:	6:tI9mc4slzcvUY7KANMJyXaJWI6AgFFiKZ637hYgAAoLERQ8UvIgJgUxKSBxPSrdx:t4Cvn2EiSVEAFiKc9yplxJg74PSgA
MD5:	FF2818A9B8880B1F87724D720764C8E6
SHA1:	EB4196387DE23AC5171A21F02BB7730884B83786
SHA-256:	FEB6EE7ED67B61028028B7C0F0C28E44A83DEE40A5A5D5047E8F212D80824F2B
SHA-512:	AA59BE8EB8188D3B48A8DB3B76EA9B708926548643750119132BE70DC98FDE8B57FDBAE98397157F4A9937610970B2647ED2C73167BD081E927102E8F2DC3F74
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16">.. <defs>.. <style>.. .cls-1 {.. fill: #666;.. fill-rule: evenodd;.. }.. </style>.. </defs>.. <path id="menu" class="cls-1" d="M1201,148.031h-11.98v-2H1201v2Zm0-4.112h-11.98V142H1201v1.92Zm-0.04-4h-11.97V138h11.97v1.92Z" transform="translate(-1187 -135.016)"/>..</svg>..

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3000 x 1461, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17687
Entropy (8bit):	7.540852193077269
Encrypted:	false
SSDEEP:	384:NH9F0nEdY1xU5uG+phIG0Hnijk7XxDUDSy9KDo20:NH9FQeYX82hB0/X6my9KDO
MD5:	CA7D6FA7A5578C3D682B1AF16BC226EC
SHA1:	10276AB86BE1BAB22ECDCB4017DDDF8E7242CED6
SHA-256:	03A104613123AE3E659DC75C171C97B609EAEC9DEB0C21AAE52CA1912C0D8656
SHA-512:	45441ADD7798EB01356B1804696E3B41901B296EF1D4B314002BF6334AFCD3E3170B079DED6A208AFE45F72092BF4A0888212C99CD3EF0570A6CAAED537B5E80
Malicious:	false
Reputation:	low
URL:	https://www.checkpoint.com/wp-content/themes/checkpoint-theme-v2/images/parsley.png
Preview:	.PNG........IHDR.............o......$PLTE.....................................'.... .IDATx...=.4.u.m..%K.....#...`9.P...A..Q..)...'k..`..2.I..f"C...r..u.O...]._{.u}...Z.A......>..t.G......?......sz..p...t.r.;.d.w:vN..=.;I....w.(.N......q'H.....$...9.?.9...w:V<..w..;.;.......N....N.p.c...<..Yz;.y...q'.%...sz..r....t.~.;.....wN..c.;...u..;!/.........;......;./.........;...u..;./.......&.;......;./.......6.;...t..pw..xI.'<..7r..........;..&...sz...qgo..u..;...t..7;.q............_o.......0.u.$..X?......\|....eo~.h%.w:vN....`.L..#..PSG.........5....@.[.}..j.).....;.tN.......w...pw....P.9.?.......PS_..#..sz..I..> .....q.F.CM...,..^..w...pw...P.9.?K.?.3..j.....Z........;...,..b\|....q......w....5....\......j.0...J.;.tN.....?..PS...."..sz....h..p....w....5.....W...;..Qz....l..p.....<'...=..5u..{...j.....w.w.;..k.;.E.w.iJ........PS.... ..).?OK.9.5t......~..q/a.p.D..).@.K.:~ .....q.@.CMSz.VH.;z.W..p.c=...^.9..6$...^.5.....Eu..{.9.

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1414), with no line terminators
Category:	downloaded
Size (bytes):	1414
Entropy (8bit):	5.787566518655896
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVC4TLv138EgFB5vtTGJrdcl/1t4glvllLt+Il1e0GnsLqo4p:VKEctKomR3evtTA2tX7wg1esLrwUnG
MD5:	024900245BBD3BB2CD090B319D14BFB3
SHA1:	77C88F25D4D6FFCF5733C0BB1C38BEEE0A38D0F9
SHA-256:	DA5D2500C897EC87981F47C882418910C35B86DAC26339280DAF59D503A0FBDC
SHA-512:	D4CD40A96670912834A19452914573FEAFEC636B9B62C00AD23147A0BEBE36C985B2D5FC6D6E8B54678DCA2C74B5D0D69729188B7F379C264C146CB26B5BB12D
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m);}});}else{d.head.pr

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	686
Entropy (8bit):	5.485690398437868
Encrypted:	false
SSDEEP:	12:TMHdwLi/nzVc/KYf3kgoKWjqHF8PW5oSEqBwTJsh3mUjm/:2dmA6LfvoKWml8PZSEqis2Ua/
MD5:	19157E6B814D4627A80A1989238E5F7E
SHA1:	C68CF881596F326698E849178E07E1703D6DE055
SHA-256:	4E79B64AF37043CEF4A87C45AF46DBCC98D004DC1E93DA3EF6DA9403E3FEC066
SHA-512:	0BF31A75E03F6F29CECDEB9D4469DD6AD74F604E190F823E603A0BB8E7104E2FF20C96F52E1295776A25C615A11A1307C3C28C1B7AE841A00A788B9DB53244CA
Malicious:	false
Reputation:	low
URL:	https://sc1.checkpoint.com/check-me/SVG/Endpoint_Icon.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="60px" height="60px" viewBox="0 0 60 60" style="enable-background:new 0 0 60 60;" xml:space="preserve">..<style type="text/css">....st0{fill:#E45785;}..</style>..<path id="endpoint_icon" class="st0" d="M49,29l0,25H11V29h6l0,0h4l0,0h18l0,0h4l0,0H49z M39,19.7c-0.2-5-4.3-8.9-9.3-8.7...c-4.7,0.1-8.6,4-8.7,8.7V26h-4v-6.5c-0.3-7.2,5.4-13.2,12.5-13.5c7.2-0.3,13.2,5.4,13.5,12.5c0,0.3,0,0.6,0,0.9V26h-4V19.7z"/>..</svg>..

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	11367
Entropy (8bit):	4.997354692786505
Encrypted:	false
SSDEEP:	192:1vuvfvpbvPj2vDvnHvHvgmv4Nv2NDvPbvPplvF3bvVWz1vSQ:V580Q
MD5:	D6546600B4B1BC189F83E03ABD9B628D
SHA1:	62A156DFB5FB8E1A7B393B91239D8D68FDD4E7E2
SHA-256:	7515AD8DD9A470E3C895BB688DBD43644F66648E1D017EAA03CCB783B22D221F
SHA-512:	001EEBE4A9BA81C8A3F15546B3ED35432AA337F5353EDFB46A96A7E0CD8A6E4AEB8030CC94BC4DDB8675FF7CD171FDBD647EF9B744A59AE40FE8207EBCDADBCE
Malicious:	false
Reputation:	low
URL:	http://www.cpcheckme.com/checkme/rest/test/getAllTests?ts=1716391619429&category=
Preview:	{"testCollection":[{"collectionType":"1","testsCollection":[{"id":2,"name":"Malware Infection","imageName":"Malware_Infection","imageURL":"http://sc1.checkpoint.com/check-me/Report/SVG/Malware_Infection.svg","sortOrder":1,"testsList":[{"progress_desc":"Downloading an infected file through HTTP.","short_desc":"Downloading of infected zipped file through HTTP.","long_desc":"This test simulates downloading of infected zip file (EICAR virus) through your network.","additionalText":"NULL","appendixText":"NULL","result":null,"id":6,"startTime":0,"endTime":0,"status":null,"sortOrder":1,"additionalResults":null,"additionalResultsRaw":null,"startTimeDate":1716391619978,"endTimeDate":1716391619978,"totalTime":0},{"progress_desc":"Downloading an infected file through HTTPS.","short_desc":"Downloading of infected file through HTTPS.","long_desc":"This test simulates downloading of infected file (EICAR virus) through your network over https.","additionalText":"NULL","appendixText":"NULL","result":

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32032)
Category:	downloaded
Size (bytes):	331039
Entropy (8bit):	5.350090508114959
Encrypted:	false
SSDEEP:	1536:xM2rLpnkKGZmj6jsha6B58gCE0UbT7GbhUNI0Q0uNy8kYkA/xfzu3:xM2rLpnkKGcha9gCE0UT7mhN0Qa
MD5:	1D70B55C12567BA1B59630E3D0EA638F
SHA1:	B7F1E911A3C0E8C87E25ED31A15902B3AEE7DB5D
SHA-256:	3409D936CE5EC37BDD18BFF5A2ACE6B5DF27CB5AEC26F198FC09AA49EEFC66A1
SHA-512:	4577496459A709D90D6000E89B0D206E39DD2E37B27A50D767EEF1A81CCA617639AF353749D01714EABFBC6D441788B75CBD6CD88B36D10DD8F5A5570EBA5E60
Malicious:	false
Reputation:	low
URL:	http://www.cpcheckme.com/checkme/bundle.16be15e20a43eba17559.js
Preview:	webpackJsonp([1],{0:function(e,t,n){"use strict";function r(e){return e&&e.__esModule?e:{"default":e}}function a(e){return void 0===O\|\|void 0===O[e]?o(e):O[e]}function o(e){switch(e){case"Top":return v["default"];case"Provider":return p.Provider;case"store":return h["default"];case"Main":return w["default"];case"Bottom":return E["default"];case"Link":return g.Link;case"render":return f.render;case"Router":return g.Router;case"browserHistory":return g.browserHistory;case"Route":return g.Route;case"App":return D;case"NotFound":return P}}function _(e,t){return O[e]=t}function i(e){delete O[e]}function s(e){function t(){n.forEach(function(e){O[e]=r[e]})}var n=(0,d["default"])(e),r={};return function(a){n.forEach(function(t){r[t]=O[t],O[t]=e[t]});var o=a();return o&&"function"==typeof o.then?o.then(t)["catch"](t):t(),o}}Object.defineProperty(t,"__esModule",{value:!0}),t.__RewireAPI__=t.__ResetDependency__=t.__set__=t.__Rewire__=t.__GetDependency__=t.__get__=void 0;var c=n(2),u=r(c),l=n(3),d

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	11367
Entropy (8bit):	4.9960914547777175
Encrypted:	false
SSDEEP:	192:1vuvfvRbvPj2vDvPHvHvgmv4Nv2NDvPbvPplvF3bvVWz1vSQ:1h88Q
MD5:	BD8238FA41D8C923506BCFC6BC3EC7FD
SHA1:	3A9E851BFC0F9D3DE1C00C4629BE2DDA29F8C5EB
SHA-256:	C12F36582EFD1066712DA817C1482C8D0199F64359D9D1B1BE22464C19F0FF78
SHA-512:	385BF094BF979F412023B1583462AD862F053CCF3E44C46212BA9CD2E72D8E395F467DDBE10CD9AA5C84EBF3D013A2693577A192A5119811EA1654BB36167D78
Malicious:	false
Reputation:	low
Preview:	{"testCollection":[{"collectionType":"1","testsCollection":[{"id":2,"name":"Malware Infection","imageName":"Malware_Infection","imageURL":"http://sc1.checkpoint.com/check-me/Report/SVG/Malware_Infection.svg","sortOrder":1,"testsList":[{"progress_desc":"Downloading an infected file through HTTP.","short_desc":"Downloading of infected zipped file through HTTP.","long_desc":"This test simulates downloading of infected zip file (EICAR virus) through your network.","additionalText":"NULL","appendixText":"NULL","result":null,"id":6,"startTime":0,"endTime":0,"status":null,"sortOrder":1,"additionalResults":null,"additionalResultsRaw":null,"startTimeDate":1716391620912,"endTimeDate":1716391620912,"totalTime":0},{"progress_desc":"Downloading an infected file through HTTPS.","short_desc":"Downloading of infected file through HTTPS.","long_desc":"This test simulates downloading of infected file (EICAR virus) through your network over https.","additionalText":"NULL","appendixText":"NULL","result":

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	87
Entropy (8bit):	3.805422746199934
Encrypted:	false
SSDEEP:	3:4wi5L3YcJ56MtJdvMJpDncjIQ+:4fL556Pxw+
MD5:	306B050AFA47E234A795D34E0A47DB05
SHA1:	967A2BD2D6A9974C9DAB0AED728239D2A5C670EB
SHA-256:	9F41267F2996F0B85A9C2D81C2F23D6D774849EB2D1F96668ABF7E0C50855479
SHA-512:	BB17CA320774F150014C4D591EA58FD7544E1A1DEB96B86628BC8AB5A68DDD2F48F656F7709BC4137EF50559C74D38D79D5091D7ECF4151697B4AD6235A114E0
Malicious:	false
Reputation:	low
Preview:	["gmail","hotmail","yahoo","mail","outlook","gmx","protonmail","aol","yandex","icloud"]

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1030 x 227, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	82202
Entropy (8bit):	7.985659950362025
Encrypted:	false
SSDEEP:	1536:F8PyC2dGQJ29Pb09elFAn9SlHe55U3KegOqRCadWywdokhfefx9pH5L:QyVGQ+IwJHeTsMTCS1wdtsLXL
MD5:	339B38E28C4E7A7B9F613A387163E3E7
SHA1:	C443CE12A005FE839E5F9B77A2118864958D5AC5
SHA-256:	9255D499780F3BC98C6440124F1C5A66F0156811897A918A782B196424A1478E
SHA-512:	1D5AA68FD5E93FF2E51C14ACDBDCD5C70BBD6BDA76321B85ACDA130F45E44C76B2534CEA15102CB132398AD9518648D6F7BCC255FDFA8A9111161900E98444A7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................pHYs................&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/" xmpMM:OriginalDocumentID="xmp.did:D141D11D0F66E4119CE1F90F03D6ED55" xmpMM:DocumentID="adobe:docid:photoshop:e31f60b9-7eab-914c-bf0f-dd071e56db70" xmpMM:InstanceID="xmp.iid:0b29c1b2-7cfe-5444-a2d0-e8cdf5d2d09c" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	109
Entropy (8bit):	5.3509595831633305
Encrypted:	false
SSDEEP:	3:yionv//thPlJlawvlZBxN/o2XmsYYu7Lwo8onVi3/H1p:6v/lhP70wrB12xD38w4Np
MD5:	DD29705C1877BCB40BBF8DBB66BAB584
SHA1:	077233300BE5B1E6E73CE258F02AE8A03FC4ED44
SHA-256:	8CDE03A4484A2199B4145EE9D3EA4285B5027C950157434A45CA8005733D893C
SHA-512:	8DEB6BB04DF12EECE2103AFD9E9C25393D4B77D7B7A6235C5FA3BCCEF7C4E3976384CCFDEDC26D83E56B721262002EABFFED18278E9BEB39370C935C69F19C21
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;.J...4IDAT(.c<s....2........1...=..D.......G5.f.,...DN...J...SQ.O....IEND.B`.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1883
Entropy (8bit):	4.944805670937768
Encrypted:	false
SSDEEP:	48:JJHG2+10YKXp0I2+1UgIBTKWz2+wKSwBdUwTW0s:nk10YKXp0K1UgIBWqtSwBx+
MD5:	13DA00B1199157304E64DF53EAE031A2
SHA1:	7D71F9D59A25EF65EF15BE57862397DCD3BAAE47
SHA-256:	3B78318EFDF2097EBBBE0F959B20353133FA744B3132C91813C7E79AD6FB177C
SHA-512:	84244E4DCEB8442B016D096B5796DEA837C33E8AED832FAF1196DDB9D54453934E33CE26A893DB0DFD419DA86E6FA228932594E2DFEA669D8EA8944416B91E7E
Malicious:	false
Reputation:	low
Preview:	[{"id":1,"name":"Network","img":"Network_Icon.svg","imgPath":"http://sc1.checkpoint.com/check-me/SVG/Network_Icon.svg","comment":"","moreInfo":"CheckMe runs a series of simulations on the network and presents your security status. Start the assessment to find your exposure to Zero Day attacks, Browser Exploit, Data Leakage and more.","title":"NETWORK DETAILS","lead_name":"CheckMe Network","testable":true},{"id":2,"name":"Endpoint","img":"Endpoint_Icon.svg","imgPath":"http://sc1.checkpoint.com/check-me/SVG/Endpoint_Icon.svg","comment":"Requires downloading & running an executable","moreInfo":"CheckMe runs a series of simulations on the Endpoint and presents your security status. Start the assessment to find your exposure to Ransomware, Zero Day attacks, Browser Exploits and more.","title":"ENDPOINT DETAILS","lead_name":"CheckMe Endpoint","testable":true},{"id":3,"name":"Cloud","img":"Cloud_Icon.svg","imgPath":"http://sc1.checkpoint.com/check-me/SVG/Cloud_Icon.svg","comment":"Requires

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 48x46, 32 bits/pixel
Category:	downloaded
Size (bytes):	9262
Entropy (8bit):	4.195977321713732
Encrypted:	false
SSDEEP:	96:TWIHvIjXnIXj4yVDQjFjgFTnhNn3LbOJl2RiGmzG23k111/:TWuIjXnjSQjFsFjhN3/OJl23ckF
MD5:	9682E4AD174AF8319F3C149002FC0BBF
SHA1:	8048EC786FF36BF7BE2E3DB02BC9E0D267BD72A2
SHA-256:	78BD48391C96C6AC257E74E109783CC2750B39EA144A849F8D830F4F8F279267
SHA-512:	28D098A2AF41A7B59BE1446A75E1E9C9A4C06A8F8B9CDEC8C8D6ACE4B4C2EC7F76E93BA55CF348455C3033651DB211A953C0B1B666375488E8728AF8C1FF9BB5
Malicious:	false
Reputation:	low
URL:	https://sc1.checkpoint.com/uc/images/favicons/favicon.ico
Preview:	......0..... ..$......(...0...\..... ......"......................................................................j.. k..`k...k...l...l...m...m...n...o...p..@........................................................................................................................................i...i..`i...i...i...i...j...i...i...h...h...h...j...n...o...p...p..0........................................................................................................................g..pg...h...i...j...i...j...i...h...f...f...c...a..._...]...a...j...p...p...p..0........................................................................................................f..0f...f...h...h...h...h...h...h...g...g...e...e...c...a..._...\...Y...V...X...h...p...p...................................................................................................e..`d...e...g...g...g...g...g...g...f...h...f...e...d...b...a..._...\...Y...V...Q...M...^...p...p...p.............................................

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3000 x 1461, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17687
Entropy (8bit):	7.540852193077269
Encrypted:	false
SSDEEP:	384:NH9F0nEdY1xU5uG+phIG0Hnijk7XxDUDSy9KDo20:NH9FQeYX82hB0/X6my9KDO
MD5:	CA7D6FA7A5578C3D682B1AF16BC226EC
SHA1:	10276AB86BE1BAB22ECDCB4017DDDF8E7242CED6
SHA-256:	03A104613123AE3E659DC75C171C97B609EAEC9DEB0C21AAE52CA1912C0D8656
SHA-512:	45441ADD7798EB01356B1804696E3B41901B296EF1D4B314002BF6334AFCD3E3170B079DED6A208AFE45F72092BF4A0888212C99CD3EF0570A6CAAED537B5E80
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............o......$PLTE.....................................'.... .IDATx...=.4.u.m..%K.....#...`9.P...A..Q..)...'k..`..2.I..f"C...r..u.O...]._{.u}...Z.A......>..t.G......?......sz..p...t.r.;.d.w:vN..=.;I....w.(.N......q'H.....$...9.?.9...w:V<..w..;.;.......N....N.p.c...<..Yz;.y...q'.%...sz..r....t.~.;.....wN..c.;...u..;!/.........;......;./.........;...u..;./.......&.;......;./.......6.;...t..pw..xI.'<..7r..........;..&...sz...qgo..u..;...t..7;.q............_o.......0.u.$..X?......\|....eo~.h%.w:vN....`.L..#..PSG.........5....@.[.}..j.).....;.tN.......w...pw....P.9.?.......PS_..#..sz..I..> .....q.F.CM...,..^..w...pw...P.9.?K.?.3..j.....Z........;...,..b\|....q......w....5....\......j.0...J.;.tN.....?..PS...."..sz....h..p....w....5.....W...;..Qz....l..p.....<'...=..5u..{...j.....w.w.;..k.;.E.w.iJ........PS.... ..).?OK.9.5t......~..q/a.p.D..).@.K.:~ .....q.@.CMSz.VH.;z.W..p.c=...^.9..6$...^.5.....Eu..{.9.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	272
Entropy (8bit):	6.873891872780542
Encrypted:	false
SSDEEP:	6:6v/lhP70wxM2xDRS8VE37AT7HPcsI5hYypNYpjAp:6v/7rMeS0KgH0/DYmyjK
MD5:	DFA47D79789F0A2728BB5F373AA906D6
SHA1:	4585027368EFAE6BFFE5622A03DE6385196ED329
SHA-256:	04312FE9F3F40B601743BE54EA758109C26DCE08A2F5AF5DB7A641E93AAD218E
SHA-512:	59ED60971E25F97E0177C627AE7B35A4D3211F1A35D262B725BB64FC0862B5022CF4FF3A0EA6D19E687FB6E0ED463B1E6F93DEA746BDF10A9EB72A7F8C7B8E65
Malicious:	false
Reputation:	low
URL:	https://sc1.checkpoint.com/check-me/SVG/checkbox_on.png
Preview:	.PNG........IHDR.............;.J....IDAT(.c<s....2........1...=..D.....t....o..S71\|\..4....fx.....+.......o..>}.......&.N..P..,.We...... \...-..k5...."5Q....5.K1.8{..m.2..YQ._7....l..@..}%...~.......A.8...X..Y...F.g...........4.00@.99...AI...$.....IEND.B`.

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (678)
Category:	downloaded
Size (bytes):	530210
Entropy (8bit):	5.701859595512278
Encrypted:	false
SSDEEP:	6144:wtuhY6tUEBBO4ljvqsGt8Wo8YmQw25s+zL+tmSmmX2t54zvnC:wtuYUv/otyq8LQu4za
MD5:	2976EE1346F476EF821A24E820DE8EFE
SHA1:	D8A3EAB47B8B5A991CFC046FBD93D293C5776884
SHA-256:	7A86A2EB9FE176A0E5F88A81F7170A8AEA01AD4AB9949E68682CCD0664C9FF2B
SHA-512:	FB7267E1C3A2E26A6AEF6CC62DC7363270665795D5C0DF162A5D8AA42BA7F68CFB8C06DA96FAD2AA5B10117784FA69B8D7AA21247B2DB2F520F4B82B046265C7
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/8k85QBI-qzxmenDv318AZH30/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 48x46, 32 bits/pixel
Category:	dropped
Size (bytes):	9262
Entropy (8bit):	4.195977321713732
Encrypted:	false
SSDEEP:	96:TWIHvIjXnIXj4yVDQjFjgFTnhNn3LbOJl2RiGmzG23k111/:TWuIjXnjSQjFsFjhN3/OJl23ckF
MD5:	9682E4AD174AF8319F3C149002FC0BBF
SHA1:	8048EC786FF36BF7BE2E3DB02BC9E0D267BD72A2
SHA-256:	78BD48391C96C6AC257E74E109783CC2750B39EA144A849F8D830F4F8F279267
SHA-512:	28D098A2AF41A7B59BE1446A75E1E9C9A4C06A8F8B9CDEC8C8D6ACE4B4C2EC7F76E93BA55CF348455C3033651DB211A953C0B1B666375488E8728AF8C1FF9BB5
Malicious:	false
Reputation:	low
Preview:	......0..... ..$......(...0...\..... ......"......................................................................j.. k..`k...k...l...l...m...m...n...o...p..@........................................................................................................................................i...i..`i...i...i...i...j...i...i...h...h...h...j...n...o...p...p..0........................................................................................................................g..pg...h...i...j...i...j...i...h...f...f...c...a..._...]...a...j...p...p...p..0........................................................................................................f..0f...f...h...h...h...h...h...h...g...g...e...e...c...a..._...\...Y...V...X...h...p...p...................................................................................................e..`d...e...g...g...g...g...g...g...f...h...f...e...d...b...a..._...\...Y...V...Q...M...^...p...p...p.............................................

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	87
Entropy (8bit):	3.805422746199934
Encrypted:	false
SSDEEP:	3:4wi5L3YcJ56MtJdvMJpDncjIQ+:4fL556Pxw+
MD5:	306B050AFA47E234A795D34E0A47DB05
SHA1:	967A2BD2D6A9974C9DAB0AED728239D2A5C670EB
SHA-256:	9F41267F2996F0B85A9C2D81C2F23D6D774849EB2D1F96668ABF7E0C50855479
SHA-512:	BB17CA320774F150014C4D591EA58FD7544E1A1DEB96B86628BC8AB5A68DDD2F48F656F7709BC4137EF50559C74D38D79D5091D7ECF4151697B4AD6235A114E0
Malicious:	false
Reputation:	low
URL:	http://www.cpcheckme.com/checkme/rest/test/getExcludedEmails?ts=1716391619429
Preview:	["gmail","hotmail","yahoo","mail","outlook","gmx","protonmail","aol","yandex","icloud"]

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	http://www.cpcheckme.com/checkme/assets/libs/fontawesome/fonts/fontawesome-webfont.woff2?v=4.7.0
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	109
Entropy (8bit):	5.3509595831633305
Encrypted:	false
SSDEEP:	3:yionv//thPlJlawvlZBxN/o2XmsYYu7Lwo8onVi3/H1p:6v/lhP70wrB12xD38w4Np
MD5:	DD29705C1877BCB40BBF8DBB66BAB584
SHA1:	077233300BE5B1E6E73CE258F02AE8A03FC4ED44
SHA-256:	8CDE03A4484A2199B4145EE9D3EA4285B5027C950157434A45CA8005733D893C
SHA-512:	8DEB6BB04DF12EECE2103AFD9E9C25393D4B77D7B7A6235C5FA3BCCEF7C4E3976384CCFDEDC26D83E56B721262002EABFFED18278E9BEB39370C935C69F19C21
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;.J...4IDAT(.c<s....2........1...=..D.......G5.f.,...DN...J...SQ.O....IEND.B`.

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1053
Entropy (8bit):	5.169708733204895
Encrypted:	false
SSDEEP:	24:2dmA6LfvoKWmlGa199NptiwDro+SJGYEGhBjOD2S7t:cmA+fvBWmlGaD9N7iwo+SJvhBKD5
MD5:	711DACF6F403CB7B13B42F0E5EB4D681
SHA1:	AC4ADA1EBFC6C94B96EA1ABBB12B1CD995E2D053
SHA-256:	15C169C8A601FC7BE5E85E3EB321758F01B305D5D83F1211F7C9AF964B74BBFE
SHA-512:	1ECDD22AFB37A5068BCCE3E5EDBC1E59B73E72E084562D6C140AF8E10C09A0B2F97F24ECE32EA79D6C2C8F9728D011C74FB65CA48E3A47656BDEAC41C27C224E
Malicious:	false
Reputation:	low
URL:	https://sc1.checkpoint.com/check-me/SVG/Cloud_Icon.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="60px" height="60px" viewBox="0 0 60 60" style="enable-background:new 0 0 60 60;" xml:space="preserve">..<style type="text/css">....st0{fill:#E45785;}..</style>..<path id="Cloud_icon" class="st0" d="M57.5,38.8c0.1,5.8-4.5,10.6-10.3,10.7c-0.1,0-0.2,0-0.3,0v0h-31v0C8,49,2,42.2,2.5,34.4...C3,27,8.9,21.2,16.2,20.9c1.4,0,2.8,0.2,4.2,0.7c1.9-6.5,7.9-11,14.7-11.1c8.7,0.1,15.6,7.3,15.5,15.9c0,0,0,0,0,0...c0,0.7-0.1,1.5-0.2,2.2C54.7,30.2,57.5,34.3,57.5,38.8z M47.3,31.4c-0.1,0-0.3,0-0.4,0v0h-0.5c0.8-1.6,1.2-3.4,1.2-5.2...C47.6,19.3,42,13.9,35.2,14C28.5,14.1,23,19.5,23,26.2c0,0.2,0,0.3,0,0.5c-1.8-1.4-4.1-2.2-6.4-2.2C10.7,24.5,6,29.3,6,35.2...c0,0,0,0,0,0c-0.1,5.7,4.2,10.4,9.9,11v0h31v0c0.1,0,0.2,0,0.4,0c4.1-0.1,7.4-3.4,7.4-7.5C54.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56401), with no line terminators
Category:	downloaded
Size (bytes):	56401
Entropy (8bit):	5.907632992668541
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBbZ54PgxRmSGdXXwW7MFWwXVuEG:4UcW6v+0Bb6hXwW49zG
MD5:	5208F5E6C617977A89CF80522B53A899
SHA1:	6869036A2ED590AAEEEEAB433BE01967549A44D0
SHA-256:	487D9C5DEF62BC08F6C5D65273F9AAECE71F070134169A6A6BC365055BE5A92D
SHA-512:	BDD95D8B4C260959C1010A724F8251B88ED62F4EB4F435BDE7F85923C67F20FE9C038257BB59A5BB6107ABDF0D053F75761211870CA537E1A28D73093F07198B
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/8k85QBI-qzxmenDv318AZH30/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	847
Entropy (8bit):	5.388558028896242
Encrypted:	false
SSDEEP:	12:TMHdwLi/nzVc/KYf3kgoKWjqHFsyWtANXzoMg3Tev4JqFgqXLoMg1+EkPXLoi6mR:2dmA6LfvoKWmlni+c/ysUUd+1UDmR
MD5:	C219375DB29151912146AE3835A67B24
SHA1:	62BEF7717B9BFF97CFBD379BE7808848F0B76449
SHA-256:	3E9502E83FBDD0A4F14C770CB77778ACB40C2151F91F5F8E8C4BB1543B96AD50
SHA-512:	D06FA3CEB44068F6DAB2F40CD51FF39FCCB77246146A091A11C1555F8074E0DDA7272AC9B6DA2E57596E0BB5A159735C05A01013B8BF1AB1F3FF02E7B4BD961C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="60px" height="60px" viewBox="0 0 60 60" style="enable-background:new 0 0 60 60;" xml:space="preserve">..<style type="text/css">....st0{fill:#E45785;}..</style>..<path id="network_icon" class="st0" d="M52,53.5H38c-1.1,0-2-0.9-2-2v-10c0-1.1,0.9-2,2-2h14c1.1,0,2,0.9,2,2v10...C54,52.6,53.1,53.5,52,53.5z M46,35.5h-3v-4H16v4h-3v-7h15v-4h3v4h12v0h3v0l0,0v3l0,0V35.5z M36,20.5H22c-1.1,0-2-0.9-2-2v-10...c0-1.1,0.9-2,2-2h14c1.1,0,2,0.9,2,2v10C38,19.6,37.1,20.5,36,20.5z M24,41.5v10c0,1.1-0.9,2-2,2H8c-1.1,0-2-0.9-2-2v-10...c0-1.1,0.9-2,2-2h14C23.1,39.5,24,40.4,24,41.5z"/>..</svg>..

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7900
Entropy (8bit):	5.3126981678057135
Encrypted:	false
SSDEEP:	192:oEQqR2Fke93mIjt6IbLKbIEC7b5fngWW0MXKS6pMSNpwjZTaaKgWzF:oOR2FkevtTbL6ILH5fgYtS6pXNpzaR4
MD5:	6386E92BB71360015223B94D884AE1BC
SHA1:	BDA5237425E525EFE2FA1EEAAEE0BDBC12355590
SHA-256:	A9D9657A813A465198381B07592C542B05F70C0343D0FA6B975A0D3B815571AE
SHA-512:	659D8489F7D3AB0B04C1712194A059E4443855C6CAD9AA7316AAA6C92F3BE6CDB42E2894096976D07D007C568FB1CE6A45705212EA67A79BA26FB89FFFD463EF
Malicious:	false
Reputation:	low
URL:	https://sc1.checkpoint.com/uc/images/banner/logo2022/check-point-logo-normal.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 26.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 470 100" style="enable-background:new 0 0 470 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#D91572;}....st1{fill:url(#SVGID_1_);}....st2{fill:#FFFFFF;}....st3{opacity:0.85;fill:url(#SVGID_00000014625581801666717630000015238804413484295579_);enable-background:new ;}....st4{fill:url(#SVGID_00000032629555305419161500000012094487928601433768_);}....st5{fill:url(#SVGID_00000088120033056938229730000007608204408608861347_);}....st6{fill:url(#SVGID_00000084494296036524268250000001227702248832007809_);}....st7{display:none;}..</style>..<g id="Layer_1_00000165228827832470421400000008335950656894351278_">...<g>....<g>.....<g>......<g>.......<g>........<path d="M108.6,67.5L108.6,67.5c0-9.7,7.3-17.6,17.

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1883
Entropy (8bit):	4.944805670937768
Encrypted:	false
SSDEEP:	48:JJHG2+10YKXp0I2+1UgIBTKWz2+wKSwBdUwTW0s:nk10YKXp0K1UgIBWqtSwBx+
MD5:	13DA00B1199157304E64DF53EAE031A2
SHA1:	7D71F9D59A25EF65EF15BE57862397DCD3BAAE47
SHA-256:	3B78318EFDF2097EBBBE0F959B20353133FA744B3132C91813C7E79AD6FB177C
SHA-512:	84244E4DCEB8442B016D096B5796DEA837C33E8AED832FAF1196DDB9D54453934E33CE26A893DB0DFD419DA86E6FA228932594E2DFEA669D8EA8944416B91E7E
Malicious:	false
Reputation:	low
URL:	http://www.cpcheckme.com/checkme/rest/test/getScanTypesDetails?ts=1716391619425
Preview:	[{"id":1,"name":"Network","img":"Network_Icon.svg","imgPath":"http://sc1.checkpoint.com/check-me/SVG/Network_Icon.svg","comment":"","moreInfo":"CheckMe runs a series of simulations on the network and presents your security status. Start the assessment to find your exposure to Zero Day attacks, Browser Exploit, Data Leakage and more.","title":"NETWORK DETAILS","lead_name":"CheckMe Network","testable":true},{"id":2,"name":"Endpoint","img":"Endpoint_Icon.svg","imgPath":"http://sc1.checkpoint.com/check-me/SVG/Endpoint_Icon.svg","comment":"Requires downloading & running an executable","moreInfo":"CheckMe runs a series of simulations on the Endpoint and presents your security status. Start the assessment to find your exposure to Ransomware, Zero Day attacks, Browser Exploits and more.","title":"ENDPOINT DETAILS","lead_name":"CheckMe Endpoint","testable":true},{"id":3,"name":"Cloud","img":"Cloud_Icon.svg","imgPath":"http://sc1.checkpoint.com/check-me/SVG/Cloud_Icon.svg","comment":"Requires

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1053
Entropy (8bit):	5.169708733204895
Encrypted:	false
SSDEEP:	24:2dmA6LfvoKWmlGa199NptiwDro+SJGYEGhBjOD2S7t:cmA+fvBWmlGaD9N7iwo+SJvhBKD5
MD5:	711DACF6F403CB7B13B42F0E5EB4D681
SHA1:	AC4ADA1EBFC6C94B96EA1ABBB12B1CD995E2D053
SHA-256:	15C169C8A601FC7BE5E85E3EB321758F01B305D5D83F1211F7C9AF964B74BBFE
SHA-512:	1ECDD22AFB37A5068BCCE3E5EDBC1E59B73E72E084562D6C140AF8E10C09A0B2F97F24ECE32EA79D6C2C8F9728D011C74FB65CA48E3A47656BDEAC41C27C224E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="60px" height="60px" viewBox="0 0 60 60" style="enable-background:new 0 0 60 60;" xml:space="preserve">..<style type="text/css">....st0{fill:#E45785;}..</style>..<path id="Cloud_icon" class="st0" d="M57.5,38.8c0.1,5.8-4.5,10.6-10.3,10.7c-0.1,0-0.2,0-0.3,0v0h-31v0C8,49,2,42.2,2.5,34.4...C3,27,8.9,21.2,16.2,20.9c1.4,0,2.8,0.2,4.2,0.7c1.9-6.5,7.9-11,14.7-11.1c8.7,0.1,15.6,7.3,15.5,15.9c0,0,0,0,0,0...c0,0.7-0.1,1.5-0.2,2.2C54.7,30.2,57.5,34.3,57.5,38.8z M47.3,31.4c-0.1,0-0.3,0-0.4,0v0h-0.5c0.8-1.6,1.2-3.4,1.2-5.2...C47.6,19.3,42,13.9,35.2,14C28.5,14.1,23,19.5,23,26.2c0,0.2,0,0.3,0,0.5c-1.8-1.4-4.1-2.2-6.4-2.2C10.7,24.5,6,29.3,6,35.2...c0,0,0,0,0,0c-0.1,5.7,4.2,10.4,9.9,11v0h31v0c0.1,0,0.2,0,0.4,0c4.1-0.1,7.4-3.4,7.4-7.5C54.

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/audio_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	87
Entropy (8bit):	3.805422746199934
Encrypted:	false
SSDEEP:	3:4wi5L3YcJ56MtJdvMJpDncjIQ+:4fL556Pxw+
MD5:	306B050AFA47E234A795D34E0A47DB05
SHA1:	967A2BD2D6A9974C9DAB0AED728239D2A5C670EB
SHA-256:	9F41267F2996F0B85A9C2D81C2F23D6D774849EB2D1F96668ABF7E0C50855479
SHA-512:	BB17CA320774F150014C4D591EA58FD7544E1A1DEB96B86628BC8AB5A68DDD2F48F656F7709BC4137EF50559C74D38D79D5091D7ECF4151697B4AD6235A114E0
Malicious:	false
Reputation:	low
Preview:	["gmail","hotmail","yahoo","mail","outlook","gmx","protonmail","aol","yandex","icloud"]

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38441)
Category:	downloaded
Size (bytes):	496187
Entropy (8bit):	5.574073210685694
Encrypted:	false
SSDEEP:	6144:eDRmsWddhGnXgzIuwhJ8QjGV1j/dXQNkKRiLvXaR/T:eDvswyIu6JshLvXaR
MD5:	B5DE5E12565109B0BF8E1857EFC9E52E
SHA1:	811A92CFF0A76ACC4F80E33590DC6D10CD4BB5D3
SHA-256:	834F17658FAD4122EE1032A2EACEC7C0E6B5E6685518D1230060E5BDF1B586DA
SHA-512:	66ED3DBB270C97C1040F2132599C7FEE53B1FBA343B73501A39191BBE21D79AAA77E8D378A3213375EB25EAD3938F29F148D3B26895D987B16E1A31AA5CBF84C
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-5JCRGP
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"646",. . "macros":[{"function":"__aev","vtp_stripWww":false,"vtp_setDefaultValue":false,"vtp_component":"HOST","vtp_varType":"URL"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"OnetrustActiveGroups"},{"function":"__e"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__jsm","vtp_javascript":["template","(function(){return function(f){var g=[{name:\"EMAIL\",regex:\/[^\\\/]{6}@(?!domain\\.com)[^\\\/]{6}\/gi,group:\"\"},{name:\"SELF-EMAIL\",regex:\/[^\\\/]{4}@(?=domain\\.com)[^\\\/]{4}\/gi,group:\"\"},{name:\"TEL\",regex:\/((tel=)\|(telephone=)\|(pho

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:XW0:G0
MD5:	CC7819055CDE3194BB3B136BAD5CF58D
SHA1:	47C1F11ED4D1AAD1A1B674BDA71A89D4FF562D55
SHA-256:	610C35CE19AB75F358432D6EE59584307AE486C4040D336D1D80C5CE7016E2AF
SHA-512:	5FEB527408BA9775CF6389DA056DDCC7C9F3932ED924F20FF9D38EA5D799A05E733C437863719901CD2199CA9B22A018FD28536196FC230540859C1D83840103
Malicious:	false
Reputation:	low
Preview:

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.184482755717443
Encrypted:	false
SSDEEP:	6:otqWtxbQLZVVi7GeqlAGmwbQLZVZYZ7qT:o7xbK95eqKVaKiM
MD5:	B54D0452E2FDB8C0D91C455D1C5495F9
SHA1:	DDD85730B9CB4CB9905B1D7E7643F595D2F33CB8
SHA-256:	F4138D99EC6E17514BB87CEEAD1C1D2A204219C970864FC85BFF00949EE18082
SHA-512:	6883DE3ABB2A7B71CBDE6EDA0854D5B9EC696A0656735843BBB6329007D758B502D2557CB36D5A1CEFC7B4D0AB5DCBC227C88DE9163662741C60F9D561F5A367
Malicious:	false
Reputation:	low
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">. GSE Default Error -->.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	391
Entropy (8bit):	5.131473385406929
Encrypted:	false
SSDEEP:	6:tI9mc4slz35ndcQQFr/IbJCJWIAvNliKZ6bJKAAwRWIz/fpkHScdsq3gkOsMurd+:t4fmZ/I1NnlIKsJKAzQYkygsqiu4yK
MD5:	19AAA5DA56FFE44A5FE5B8362EFA8CBE
SHA1:	EC8D0522B5E9124FE515A6A8D27DF9856319FD5E
SHA-256:	5E98114E161A04831765FBC092BF4D1963C1FE4346AD8119C261AE1F7C00B29C
SHA-512:	CC3E6B05DB044EF7737ED21BA9F8BA44445ECF54CA68C29107D79697A7042EB02AE4A395E499B9BAC8F2DAF38A093260627FC470BF7F9BA5D100818C7B514BE3
Malicious:	false
Reputation:	low
URL:	https://sc1.checkpoint.com/check-me/SVG/i_icon.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="55" height="55" viewBox="0 0 55 55">. <defs>. <style>. .cls-1 {. fill: #e45785;. fill-rule: evenodd;. }. </style>. </defs>. <path id="_" data-name="!" class="cls-1" d="M997.5,440A27.5,27.5,0,1,1,970,467.5,27.5,27.5,0,0,1,997.5,440ZM996,458h4v26h-4V458Zm0-8h4v4h-4v-4Z" transform="translate(-970 -440)"/>.</svg>.

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	386
Entropy (8bit):	5.097464446790742
Encrypted:	false
SSDEEP:	6:tI9mc4slzcvUY7KANMJyXaJWI6AgFFiKZ637hYgAAoLERQ8UvIgJgUxKSBxPSrdx:t4Cvn2EiSVEAFiKc9yplxJg74PSgA
MD5:	FF2818A9B8880B1F87724D720764C8E6
SHA1:	EB4196387DE23AC5171A21F02BB7730884B83786
SHA-256:	FEB6EE7ED67B61028028B7C0F0C28E44A83DEE40A5A5D5047E8F212D80824F2B
SHA-512:	AA59BE8EB8188D3B48A8DB3B76EA9B708926548643750119132BE70DC98FDE8B57FDBAE98397157F4A9937610970B2647ED2C73167BD081E927102E8F2DC3F74
Malicious:	false
Reputation:	low
URL:	https://sc1.checkpoint.com/ThreatPortal/assets/icons/menu.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16">.. <defs>.. <style>.. .cls-1 {.. fill: #666;.. fill-rule: evenodd;.. }.. </style>.. </defs>.. <path id="menu" class="cls-1" d="M1201,148.031h-11.98v-2H1201v2Zm0-4.112h-11.98V142H1201v1.92Zm-0.04-4h-11.97V138h11.97v1.92Z" transform="translate(-1187 -135.016)"/>..</svg>..

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (678)
Category:	downloaded
Size (bytes):	530210
Entropy (8bit):	5.701859595512278
Encrypted:	false
SSDEEP:	6144:wtuhY6tUEBBO4ljvqsGt8Wo8YmQw25s+zL+tmSmmX2t54zvnC:wtuYUv/otyq8LQu4za
MD5:	2976EE1346F476EF821A24E820DE8EFE
SHA1:	D8A3EAB47B8B5A991CFC046FBD93D293C5776884
SHA-256:	7A86A2EB9FE176A0E5F88A81F7170A8AEA01AD4AB9949E68682CCD0664C9FF2B
SHA-512:	FB7267E1C3A2E26A6AEF6CC62DC7363270665795D5C0DF162A5D8AA42BA7F68CFB8C06DA96FAD2AA5B10117784FA69B8D7AA21247B2DB2F520F4B82B046265C7
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/8k85QBI-qzxmenDv318AZH30/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.990259656837755
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKGOSzIKInf5XAGjWaee:PLKdXNQKGOMIKIfOeL
MD5:	B68491F0AF12652D4BF70548EB3CAB91
SHA1:	A7103556529249A3820E61AD204CBCDBB24C46D0
SHA-256:	D89AFD88C75D56B0D38DB378BAA170B9A7D9286FFDD45171D56DD6973ED4219B
SHA-512:	77A717D3AD4CFAD054C07E78973266AA1606B2B19A7A1FF588E575925ECA096D2961911112C90496DD7F50AC73ECC60739DF6A7CABA4EB30D6EA70962C7B9185
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=8k85QBI-qzxmenDv318AZH30
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/8k85QBI-qzxmenDv318AZH30/recaptcha__en.js');

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/refresh_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7900
Entropy (8bit):	5.3126981678057135
Encrypted:	false
SSDEEP:	192:oEQqR2Fke93mIjt6IbLKbIEC7b5fngWW0MXKS6pMSNpwjZTaaKgWzF:oOR2FkevtTbL6ILH5fgYtS6pXNpzaR4
MD5:	6386E92BB71360015223B94D884AE1BC
SHA1:	BDA5237425E525EFE2FA1EEAAEE0BDBC12355590
SHA-256:	A9D9657A813A465198381B07592C542B05F70C0343D0FA6B975A0D3B815571AE
SHA-512:	659D8489F7D3AB0B04C1712194A059E4443855C6CAD9AA7316AAA6C92F3BE6CDB42E2894096976D07D007C568FB1CE6A45705212EA67A79BA26FB89FFFD463EF
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 26.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 470 100" style="enable-background:new 0 0 470 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#D91572;}....st1{fill:url(#SVGID_1_);}....st2{fill:#FFFFFF;}....st3{opacity:0.85;fill:url(#SVGID_00000014625581801666717630000015238804413484295579_);enable-background:new ;}....st4{fill:url(#SVGID_00000032629555305419161500000012094487928601433768_);}....st5{fill:url(#SVGID_00000088120033056938229730000007608204408608861347_);}....st6{fill:url(#SVGID_00000084494296036524268250000001227702248832007809_);}....st7{display:none;}..</style>..<g id="Layer_1_00000165228827832470421400000008335950656894351278_">...<g>....<g>.....<g>......<g>.......<g>........<path d="M108.6,67.5L108.6,67.5c0-9.7,7.3-17.6,17.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	272
Entropy (8bit):	6.873891872780542
Encrypted:	false
SSDEEP:	6:6v/lhP70wxM2xDRS8VE37AT7HPcsI5hYypNYpjAp:6v/7rMeS0KgH0/DYmyjK
MD5:	DFA47D79789F0A2728BB5F373AA906D6
SHA1:	4585027368EFAE6BFFE5622A03DE6385196ED329
SHA-256:	04312FE9F3F40B601743BE54EA758109C26DCE08A2F5AF5DB7A641E93AAD218E
SHA-512:	59ED60971E25F97E0177C627AE7B35A4D3211F1A35D262B725BB64FC0862B5022CF4FF3A0EA6D19E687FB6E0ED463B1E6F93DEA746BDF10A9EB72A7F8C7B8E65
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;.J....IDAT(.c<s....2........1...=..D.....t....o..S71\|\..4....fx.....+.......o..>}.......&.N..P..,.We...... \...-..k5...."5Q....5.K1.8{..m.2..YQ._7....l..@..}%...~.......A.8...X..Y...F.g...........4.00@.99...AI...$.....IEND.B`.

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 750 x 300, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	85041
Entropy (8bit):	7.9865021480366165
Encrypted:	false
SSDEEP:	1536:vASxgd79HXwfQN8V1YqkrPsN5QF8yIL60OFcQqcxppGExXOah3cIPhIr:vfidIV1ajsQFx0OmQqOjjxews86r
MD5:	80E02824D81329FEAC7011D5C1C550FE
SHA1:	05A99AC39861085271187F95EF64E2ED76610466
SHA-256:	ED59843AE18E16AB5A2EF2CA8095FAD23ABBADC5717A3D43CBFEA024882FC480
SHA-512:	6E439B69FA46B9C9F3B239661101EAA24D35AC5EAAEC30067A67D4C81EF5B42274C1584406A2DDD89231357153F8B9A550E0FBCBFC79AE82FD7854C227E0BFFB
Malicious:	false
Reputation:	low
URL:	https://sc1.checkpoint.com/check-me/banners/rebrandingBanners/Mobile_Banner_750x300.png
Preview:	.PNG........IHDR.......,.............pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/" xmpMM:OriginalDocumentID="xmp.did:EBD9C7450A206811822ABB58BDE15284" xmpMM:DocumentID="adobe:docid:photoshop:f6f3b53b-bc67-2e48-b354-38bf483cbd7f" xmpMM:InstanceID="xmp.iid:a2bacadc-ec0c-9f44-9f5a-7395d85bc5e0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 750 x 300, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	85041
Entropy (8bit):	7.9865021480366165
Encrypted:	false
SSDEEP:	1536:vASxgd79HXwfQN8V1YqkrPsN5QF8yIL60OFcQqcxppGExXOah3cIPhIr:vfidIV1ajsQFx0OmQqOjjxews86r
MD5:	80E02824D81329FEAC7011D5C1C550FE
SHA1:	05A99AC39861085271187F95EF64E2ED76610466
SHA-256:	ED59843AE18E16AB5A2EF2CA8095FAD23ABBADC5717A3D43CBFEA024882FC480
SHA-512:	6E439B69FA46B9C9F3B239661101EAA24D35AC5EAAEC30067A67D4C81EF5B42274C1584406A2DDD89231357153F8B9A550E0FBCBFC79AE82FD7854C227E0BFFB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,.............pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/" xmpMM:OriginalDocumentID="xmp.did:EBD9C7450A206811822ABB58BDE15284" xmpMM:DocumentID="adobe:docid:photoshop:f6f3b53b-bc67-2e48-b354-38bf483cbd7f" xmpMM:InstanceID="xmp.iid:a2bacadc-ec0c-9f44-9f5a-7395d85bc5e0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (595)
Category:	downloaded
Size (bytes):	11494
Entropy (8bit):	5.675271003517841
Encrypted:	false
SSDEEP:	192:7Ty7hmwUHYZS/gAbi65iMrmrAO3Gt0EDmRCJX:PG+xu6Gkagl
MD5:	69D9C94A41EB557B2AC98A9D6C4C7C9A
SHA1:	0044F245B7EA092D2B1D8BEE581662D17387AB8A
SHA-256:	FB4BCA5908196B54CF61083E4431DB0E27AC3D8D5641EB9AE39DD53F81CA9E78
SHA-512:	78E22232E2C68A3C8FB3C1FFEC0222D960D0163D05F676B46574367F9D8FFC296BB3C055C523F97154EA8154968E5C914406F6043ECE32CC1F68548538E07FAA
Malicious:	false
Reputation:	low
URL:	http://www.cpcheckme.com/check/testsAssets/instant_checkup.js?v=0.6652561465103368
Preview:	var default_timeout = 10000;..function get_test_res(url, test_result) {..if (test_result)...console.log("Passed: " + url);..else...console.warn("Failed: " + url);..return { 'test_result': test_result };.}..function xhr_test(json, cb) {..try {...var url = json["url"];...url += (url.indexOf('?') > 0) ? "&" : "?";...url += 'static=CPCheckMe&rand=' + new Date().getTime();...var xhr = new XMLHttpRequest();...xhr.onload = function() {....var success = (xhr.status != 404) && (xhr.status != 200);....if ((xhr.status == 200) && (json["expected_size"] > 0) && (xhr.response.byteLength != json["expected_size"])).....success = true;....cb(get_test_res(url, success));...}...xhr.onerror = function() {....cb(get_test_res(url, true));...}...xhr.ontimeout = function() {....cb(get_test_res(url, true));...}...xhr.open(json["post_data"] ? "POST" : "GET", url, true);...for (var i in json["headers"])....xhr.setRequestHeader(json["headers"][i]["name"], json["headers"][i]["value"]);...xhr.responseType = "arrayb

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/info_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (595)
Category:	downloaded
Size (bytes):	11494
Entropy (8bit):	5.675271003517841
Encrypted:	false
SSDEEP:	192:7Ty7hmwUHYZS/gAbi65iMrmrAO3Gt0EDmRCJX:PG+xu6Gkagl
MD5:	69D9C94A41EB557B2AC98A9D6C4C7C9A
SHA1:	0044F245B7EA092D2B1D8BEE581662D17387AB8A
SHA-256:	FB4BCA5908196B54CF61083E4431DB0E27AC3D8D5641EB9AE39DD53F81CA9E78
SHA-512:	78E22232E2C68A3C8FB3C1FFEC0222D960D0163D05F676B46574367F9D8FFC296BB3C055C523F97154EA8154968E5C914406F6043ECE32CC1F68548538E07FAA
Malicious:	false
Reputation:	low
URL:	http://www.cpcheckme.com/check/testsAssets/instant_checkup.js?v=0.6537682150719368
Preview:	var default_timeout = 10000;..function get_test_res(url, test_result) {..if (test_result)...console.log("Passed: " + url);..else...console.warn("Failed: " + url);..return { 'test_result': test_result };.}..function xhr_test(json, cb) {..try {...var url = json["url"];...url += (url.indexOf('?') > 0) ? "&" : "?";...url += 'static=CPCheckMe&rand=' + new Date().getTime();...var xhr = new XMLHttpRequest();...xhr.onload = function() {....var success = (xhr.status != 404) && (xhr.status != 200);....if ((xhr.status == 200) && (json["expected_size"] > 0) && (xhr.response.byteLength != json["expected_size"])).....success = true;....cb(get_test_res(url, success));...}...xhr.onerror = function() {....cb(get_test_res(url, true));...}...xhr.ontimeout = function() {....cb(get_test_res(url, true));...}...xhr.open(json["post_data"] ? "POST" : "GET", url, true);...for (var i in json["headers"])....xhr.setRequestHeader(json["headers"][i]["name"], json["headers"][i]["value"]);...xhr.responseType = "arrayb

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:XW0:G0
MD5:	CC7819055CDE3194BB3B136BAD5CF58D
SHA1:	47C1F11ED4D1AAD1A1B674BDA71A89D4FF562D55
SHA-256:	610C35CE19AB75F358432D6EE59584307AE486C4040D336D1D80C5CE7016E2AF
SHA-512:	5FEB527408BA9775CF6389DA056DDCC7C9F3932ED924F20FF9D38EA5D799A05E733C437863719901CD2199CA9B22A018FD28536196FC230540859C1D83840103
Malicious:	false
Reputation:	low
Preview:

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1416), with no line terminators
Category:	downloaded
Size (bytes):	1416
Entropy (8bit):	5.788087235036781
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZy+KVC4TLv138EgFB5vtTGJrdcl/1t4glvllLt+Il1e0GnsLqJ:VKEcixKomR3evtTA2tX7wg1esLrwUnG
MD5:	9FF5277AB63DF118ECE76E7C672328D0
SHA1:	5408944B407B1B3F54D6F73C84C7276B0958CE6D
SHA-256:	C19F442B5181514B2B025D32E9C8A41C54121D4F6F5C79E3A0F01E9317300490
SHA-512:	C63F44EDEA4E0E817A8C5CDD8B7F253334D0EA87F318F4677FF352923AEB8DAFE4968DA60448FBAC06D4785D09C6AD2FB5D69FC940693930EDF15F2184BB6F14
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m);}});}else{d.head.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	11367
Entropy (8bit):	5.006863494965055
Encrypted:	false
SSDEEP:	192:1vuv/vxbvPj2vjvvHvHvgmv4NvWNDvPbvPplvl3bvVWz1vSQ:1R8cQ
MD5:	8C872142ECB44089C74A82CA34602AEB
SHA1:	B133C52BAFDF4114EDC56D56E7F3D4E73235FB76
SHA-256:	75EDFB2E1AA0C0BD917B911921C2EDBAC84B0607DF2ABA487159EDA7FECA2C10
SHA-512:	FECEB0B79C12599C5A062E63AC0A7BCD1B0AE8BF64F61B79DD44260769C91ACED5A3FD097C984AAA76440DBB51B42D0F5E5B7B56B5D6E1037B4E102A1FF8F4B2
Malicious:	false
Reputation:	low
URL:	http://www.cpcheckme.com/checkme/rest/test/getAllTests?ts=1716391642959&category=
Preview:	{"testCollection":[{"collectionType":"1","testsCollection":[{"id":2,"name":"Malware Infection","imageName":"Malware_Infection","imageURL":"http://sc1.checkpoint.com/check-me/Report/SVG/Malware_Infection.svg","sortOrder":1,"testsList":[{"progress_desc":"Downloading an infected file through HTTP.","short_desc":"Downloading of infected zipped file through HTTP.","long_desc":"This test simulates downloading of infected zip file (EICAR virus) through your network.","additionalText":"NULL","appendixText":"NULL","result":null,"id":6,"startTime":0,"endTime":0,"status":null,"sortOrder":1,"additionalResults":null,"additionalResultsRaw":null,"startTimeDate":1716391643502,"endTimeDate":1716391643502,"totalTime":0},{"progress_desc":"Downloading an infected file through HTTPS.","short_desc":"Downloading of infected file through HTTPS.","long_desc":"This test simulates downloading of infected file (EICAR virus) through your network over https.","additionalText":"NULL","appendixText":"NULL","result":

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	downloaded
Size (bytes):	1216832
Entropy (8bit):	7.741732892611549
Encrypted:	false
SSDEEP:	24576:sTqf9cHgsAvqgbWk7gBRv9lo71WqakVggf6ZNflJQnhGU/5Gzy9Koj6V83+5g7in:Y8c/AiQWMgBRlle9VggiZN9JQncS5Gzv
MD5:	1F5E1935BC678EA70274516D5FA9C7A0
SHA1:	11D6155F2AF9B0E1E512FBB97CE132B1D522482D
SHA-256:	6917CA89ECDFD69C9EE45E98C3F20E9C8C7C311F8479735E4BB6B44C8C6456D4
SHA-512:	7495BA6557117A5404E33B11835B271A651AD4BB490C55CC4853D9C5AD13FE496E6E1A83113331E18A6355DDDAD94FC092D6B33CF438F641496ADDB10CDF61EE
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Reputation:	low
URL:	http://cpcheckmefiles-lb-1966426125.eu-west-1.elb.amazonaws.com/cpcheckme.exe?uid=yt22zMIg
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....xe.........."...0..^..........z\|... ........@.. ....................................`.................................(\|..O....................h..@)...........z............................................... ............... ..H............text....\... ...^.................. ..`.rsrc................`..............@..@.reloc...............f..............@..B................\\|......H.......,...L...........x...x............................................0..k.......(......(....o/...(.....r...p(...+o3....(......,..oO...,.(....o.....&(.....o.......(......o2.....(....o1............QQ.......0..........(......(....o/...(.....r...p(...+o3...~.....~.....~.....r/..p.r...p.r...p.s....%.o......o....(.....r...p..(....(...+o3...(....o1.....( .....(.....~....-.r...p.....(!...o"...s#........~.....~...........j(....r...p~....o$...t....j(....r...p~....o$...t....

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3971
Entropy (8bit):	5.312415047023173
Encrypted:	false
SSDEEP:	96:KVMwAKCX3DLLUrLhUh5wUvkgSaVddxLU0u:KVMwru3X8o5wUvkgBdde0u
MD5:	6427AC014E2CEFE3F62DCD725AF2B56C
SHA1:	EAC611A641B068DB8A90743ABF5C1A908E89DE78
SHA-256:	AFF6F11F4A2311E198C96429EC4FA86A43C8AA93A91D7133FF8528791DCCC0C5
SHA-512:	302E64158FD82998B27220D5759DFACC77A12E06B18DFFC6AD88096557A6643E5A56939D88293E936519C89B78A791A4440D6E353D4F1DF7E7F081319520A294
Malicious:	false
Reputation:	low
URL:	http://www.cpcheckme.com/checkme/
Preview:	<!DOCTYPE html>..<html>..<head lang="en">. <script type="text/javascript">. var cacheBust = ['/check/testsAssets/instant_checkup.js'];. // var cacheBust = ['http://localhost:8282/check/testsAssets/instant_checkup.js'];//for live server with tomcat. for (i=0; i < cacheBust.length; i++){. var el = document.createElement('script');. el.src = cacheBust[i]+"?v=" + Math.random();. document.getElementsByTagName('head')[0].appendChild(el);. }. </script>.. Google Tag Manager -->. <script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':. new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],. j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=. 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);. })(window,document,'script','dataLayer','GTM-5JCRGP');</script>. End Google Tag Manager -->.... <meta charset="UT

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkn4x_MamlDyRIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 23790, version 0.0
Category:	downloaded
Size (bytes):	23790
Entropy (8bit):	7.979866083508763
Encrypted:	false
SSDEEP:	384:IvMg5c0ECVUm8aAWUO2yyc1j2yRSEyhoZ3niOJnem60tpS44sMt7rLtLs3Ug2zkl:Iv1cwtoWUOkc1jHV53zJr6iQ4IlrxY93
MD5:	7F2D8EDC948D4D63EF7EC492F4F94649
SHA1:	7976D1459ACF651B019220DA470457B6CF64F569
SHA-256:	0DBE8985AFA96651D09789D79F6C4F67FF6CFD4F894656E77074F16D78500ED4
SHA-512:	EA49EB2C73682A4EC4D4BC03C1DBF655EA8E566599459B63AEB2E2A29B44A8350332E4CF992C0A1C8003452F4B7AFB41CB1852C66EDAE3E56606C06A70FE6FC6
Malicious:	false
Reputation:	low
URL:	http://www.cpcheckme.com/checkme/fonts/din.woff?v=1.0.0
Preview:	wOFF......\...............[\|...r............GPOS..U........R>c2.GSUB..Z.............LTSH..Tx.......Oj.<8OS/2.......Z...`..X.cmap...4...Q.......8cvt ..R.............fpgm..S........s.w.5gasp..R..........\|..glyf...t..DX....u. .head.......6...6...hhea.......!...$....hmtx...........,..X.loca............D'm.maxp....... ... .c.7name...........!g.J.post...8.........R.9prep..T....s......h^.....K.e...]...............s............. .._.<...........c.....oW.....[..............x.c`aRd......t.)... 4.,.1#/...............A.......-.S..(..?.."..,.L..@. 9.7L'.......B..r..x...M+.Q...s.....1M..[fC.YQ.)v&..QF....e.f$.YyM..v.2iR.f..4%.=^.>..s=3I...r...~u.....p..\...e.<..P.]...l....[bI...<....k..i#..X.....%....q..1.)<..."...i..;b_r...Iz._v.1..Qy.....Q..X/.b.,.h.v.y.L.r47.........\).B..)...F....4V.....[zM/...q=`7.u.5e.ZAKX~....-.)GY..S:.UJR.&)...zVgjC..jW>.QnU.jL.\|1...{...y..._....t._.0.....x.c`d``.._...e....g.D3.E...7........x.u._H.a...\|.CCC...9.6...4..X.\Dic*A....X...AB..ET7A..P

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	11367
Entropy (8bit):	4.995699620575458
Encrypted:	false
SSDEEP:	192:1vqvjv9bvjj2v/vLHvDv0mvENvKNDvbbvjplvR3bvhWz1vWQ:1R8wQ
MD5:	E0153FC7DDF337C307D053091BAB9487
SHA1:	0F8930000CA3A310E8554E02B0160E6076FB9049
SHA-256:	203BADB20D9302A8709ADCA048857877193CEEF10FE4C5B37B8DC642A968460B
SHA-512:	1322F2331A32F409FD7B5D10B1F387C5A3F40F93A58776F88956519E4453602A7B0DFA44A644015102ACE15DAD9EB46CDD24F96A261A3514F09A2B4666277EDC
Malicious:	false
Reputation:	low
Preview:	{"testCollection":[{"collectionType":"1","testsCollection":[{"id":2,"name":"Malware Infection","imageName":"Malware_Infection","imageURL":"http://sc1.checkpoint.com/check-me/Report/SVG/Malware_Infection.svg","sortOrder":1,"testsList":[{"progress_desc":"Downloading an infected file through HTTP.","short_desc":"Downloading of infected zipped file through HTTP.","long_desc":"This test simulates downloading of infected zip file (EICAR virus) through your network.","additionalText":"NULL","appendixText":"NULL","result":null,"id":6,"startTime":0,"endTime":0,"status":null,"sortOrder":1,"additionalResults":null,"additionalResultsRaw":null,"startTimeDate":1716391643691,"endTimeDate":1716391643691,"totalTime":0},{"progress_desc":"Downloading an infected file through HTTPS.","short_desc":"Downloading of infected file through HTTPS.","long_desc":"This test simulates downloading of infected file (EICAR virus) through your network over https.","additionalText":"NULL","appendixText":"NULL","result":

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	7
Entropy (8bit):	2.5216406363433186
Encrypted:	false
SSDEEP:	3:cq2:4
MD5:	1869D56535E8B1449A6DA54FF5E11F50
SHA1:	C271B656DEDB85A67DB52B58A06C052FE2EE23CC
SHA-256:	77AAF105C28C4C82EA7B2E0627B92FDFF753C249771E7D2AB4A6F7EC6A5F400F
SHA-512:	7FD1ED54B51472E256D131A671FA8AF24218B37506A5411FC641DFEC5635C9B8F64500816629521689B2ABE1B4A28F43282550D44ED5728C0E9FBE4020BB69E1
Malicious:	false
Reputation:	low
URL:	http://www.cpcheckme.com/checkme/rest/test/getScanStatus?ts=1716391681227&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2
Preview:	WAITING

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1030 x 227, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	82202
Entropy (8bit):	7.985659950362025
Encrypted:	false
SSDEEP:	1536:F8PyC2dGQJ29Pb09elFAn9SlHe55U3KegOqRCadWywdokhfefx9pH5L:QyVGQ+IwJHeTsMTCS1wdtsLXL
MD5:	339B38E28C4E7A7B9F613A387163E3E7
SHA1:	C443CE12A005FE839E5F9B77A2118864958D5AC5
SHA-256:	9255D499780F3BC98C6440124F1C5A66F0156811897A918A782B196424A1478E
SHA-512:	1D5AA68FD5E93FF2E51C14ACDBDCD5C70BBD6BDA76321B85ACDA130F45E44C76B2534CEA15102CB132398AD9518648D6F7BCC255FDFA8A9111161900E98444A7
Malicious:	false
Reputation:	low
URL:	https://sc1.checkpoint.com/check-me/banners/rebrandingBanners/main_banner.png
Preview:	.PNG........IHDR.....................pHYs................&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/" xmpMM:OriginalDocumentID="xmp.did:D141D11D0F66E4119CE1F90F03D6ED55" xmpMM:DocumentID="adobe:docid:photoshop:e31f60b9-7eab-914c-bf0f-dd071e56db70" xmpMM:InstanceID="xmp.iid:0b29c1b2-7cfe-5444-a2d0-e8cdf5d2d09c" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1883
Entropy (8bit):	4.944805670937768
Encrypted:	false
SSDEEP:	48:JJHG2+10YKXp0I2+1UgIBTKWz2+wKSwBdUwTW0s:nk10YKXp0K1UgIBWqtSwBx+
MD5:	13DA00B1199157304E64DF53EAE031A2
SHA1:	7D71F9D59A25EF65EF15BE57862397DCD3BAAE47
SHA-256:	3B78318EFDF2097EBBBE0F959B20353133FA744B3132C91813C7E79AD6FB177C
SHA-512:	84244E4DCEB8442B016D096B5796DEA837C33E8AED832FAF1196DDB9D54453934E33CE26A893DB0DFD419DA86E6FA228932594E2DFEA669D8EA8944416B91E7E
Malicious:	false
Reputation:	low
URL:	http://www.cpcheckme.com/checkme/rest/test/getScanTypesDetails?ts=1716391642957
Preview:	[{"id":1,"name":"Network","img":"Network_Icon.svg","imgPath":"http://sc1.checkpoint.com/check-me/SVG/Network_Icon.svg","comment":"","moreInfo":"CheckMe runs a series of simulations on the network and presents your security status. Start the assessment to find your exposure to Zero Day attacks, Browser Exploit, Data Leakage and more.","title":"NETWORK DETAILS","lead_name":"CheckMe Network","testable":true},{"id":2,"name":"Endpoint","img":"Endpoint_Icon.svg","imgPath":"http://sc1.checkpoint.com/check-me/SVG/Endpoint_Icon.svg","comment":"Requires downloading & running an executable","moreInfo":"CheckMe runs a series of simulations on the Endpoint and presents your security status. Start the assessment to find your exposure to Ransomware, Zero Day attacks, Browser Exploits and more.","title":"ENDPOINT DETAILS","lead_name":"CheckMe Endpoint","testable":true},{"id":3,"name":"Cloud","img":"Cloud_Icon.svg","imgPath":"http://sc1.checkpoint.com/check-me/SVG/Cloud_Icon.svg","comment":"Requires

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	7
Entropy (8bit):	2.5216406363433186
Encrypted:	false
SSDEEP:	3:cq2:4
MD5:	1869D56535E8B1449A6DA54FF5E11F50
SHA1:	C271B656DEDB85A67DB52B58A06C052FE2EE23CC
SHA-256:	77AAF105C28C4C82EA7B2E0627B92FDFF753C249771E7D2AB4A6F7EC6A5F400F
SHA-512:	7FD1ED54B51472E256D131A671FA8AF24218B37506A5411FC641DFEC5635C9B8F64500816629521689B2ABE1B4A28F43282550D44ED5728C0E9FBE4020BB69E1
Malicious:	false
Reputation:	low
Preview:	WAITING

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	686
Entropy (8bit):	5.485690398437868
Encrypted:	false
SSDEEP:	12:TMHdwLi/nzVc/KYf3kgoKWjqHF8PW5oSEqBwTJsh3mUjm/:2dmA6LfvoKWml8PZSEqis2Ua/
MD5:	19157E6B814D4627A80A1989238E5F7E
SHA1:	C68CF881596F326698E849178E07E1703D6DE055
SHA-256:	4E79B64AF37043CEF4A87C45AF46DBCC98D004DC1E93DA3EF6DA9403E3FEC066
SHA-512:	0BF31A75E03F6F29CECDEB9D4469DD6AD74F604E190F823E603A0BB8E7104E2FF20C96F52E1295776A25C615A11A1307C3C28C1B7AE841A00A788B9DB53244CA
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="60px" height="60px" viewBox="0 0 60 60" style="enable-background:new 0 0 60 60;" xml:space="preserve">..<style type="text/css">....st0{fill:#E45785;}..</style>..<path id="endpoint_icon" class="st0" d="M49,29l0,25H11V29h6l0,0h4l0,0h18l0,0h4l0,0H49z M39,19.7c-0.2-5-4.3-8.9-9.3-8.7...c-4.7,0.1-8.6,4-8.7,8.7V26h-4v-6.5c-0.3-7.2,5.4-13.2,12.5-13.5c7.2-0.3,13.2,5.4,13.5,12.5c0,0.3,0,0.6,0,0.9V26h-4V19.7z"/>..</svg>..

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17624)
Category:	downloaded
Size (bytes):	18217
Entropy (8bit):	5.624328515917197
Encrypted:	false
SSDEEP:	384:xdhL03o44eBBRFzviHmeT3u0QnTzSL+eaee6DfJjPdoD:dQLEi/TOLae9fJ0
MD5:	91E5187DC56211830D5D7BD63B096444
SHA1:	09ECA6E4AC580A1DF7D32072C5DD607026AF2406
SHA-256:	CB92285E3A3EFDE33FFC567B06A9700C6D05590BC19C73492C50214F84178730
SHA-512:	F1F1A6D6C5655A58EF3D88DE0EEC58924258245546EE96F43C65E63F87B836B7C3978FBBEF4C49F16373F24D7B8A1DA2F722DE55EF66756A5A6B740ABBD8DF60
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/y5IoXjo-_eM__FZ7BqlwDG0FWQvBnHNJLFAhT4QXhzA.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var m=function(v){return v},V=function(v,c){if(c=(v=null,Z.trustedTypes),!c\|\|!c.createPolicy)return v;try{v=c.createPolicy("bg",{createHTML:m,createScript:m,createScriptURL:m})}catch(k){Z.console&&Z.console.error(k.message)}return v},Z=this\|\|self;(0,eval)(function(v,c){return(c=V())&&1===v.eval(c.createScript("1"))?function(k){return c.createScript(k)}:function(k){return""+k}}(Z)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var v2=function(c,v){return[function(){return c},(v(function(m){m(c)}),function(){})]},c2=function(c,v){return v=0,function(){return v<c.length?{done:false,value:c[v++]}:{done:true}}},kV=function(c,v){function m(){this.N=this.l=this.n=0}return[(c=(m.prototype.rG=(m.prototype.hp=function(Z,l){this.N+=(this.l+=(l=Z-(this.n++,this).l,l/this.n),l*(Z-this.l))},function(){return 0===this.n?0:Math.sqrt(this.N/

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	109
Entropy (8bit):	5.3509595831633305
Encrypted:	false
SSDEEP:	3:yionv//thPlJlawvlZBxN/o2XmsYYu7Lwo8onVi3/H1p:6v/lhP70wrB12xD38w4Np
MD5:	DD29705C1877BCB40BBF8DBB66BAB584
SHA1:	077233300BE5B1E6E73CE258F02AE8A03FC4ED44
SHA-256:	8CDE03A4484A2199B4145EE9D3EA4285B5027C950157434A45CA8005733D893C
SHA-512:	8DEB6BB04DF12EECE2103AFD9E9C25393D4B77D7B7A6235C5FA3BCCEF7C4E3976384CCFDEDC26D83E56B721262002EABFFED18278E9BEB39370C935C69F19C21
Malicious:	false
Reputation:	low
URL:	http://sc1.checkpoint.com/check-me/SVG/checkbox.png
Preview:	.PNG........IHDR.............;.J...4IDAT(.c<s....2........1...=..D.......G5.f.,...DN...J...SQ.O....IEND.B`.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
Reputation:	low
URL:	http://www.cpcheckme.com/checkme/assets/libs/fontawesome/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7711)
Category:	downloaded
Size (bytes):	324596
Entropy (8bit):	5.56548545511639
Encrypted:	false
SSDEEP:	6144:V4/GrXgrxIuzJS8QjfHRdklNkKRt6ubdkMPv:uqIxIulS5eXPv
MD5:	67D2B04DF637C46B9D6050424F051EE7
SHA1:	285EE37965579C0E73CA0BCEE89515C840654CA6
SHA-256:	24E25FFA16C94F166AAE7F2B5290A00A2A4819B447E3675F8DD82956759968A5
SHA-512:	F819A1ABB0E77F90763ED57CCF31F8C35E89A1F9AD5FB62911B81B7EEA2E3556E5F0C70A34FF5E71D39371CA2272BF0F9977990714FBD89EC5242C39BEC50BA0
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-N60JRFQ99D&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":15,"vtp_value":true,"tag_id":14},{"function":"__ogt_1p_data_v2","priority":15,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vt

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	393
Entropy (8bit):	4.883262342225609
Encrypted:	false
SSDEEP:	12:t40n9W1NnRiKsJKAzfNMx3GV8GVvGzs5KS:t4w9ONpsJKoNGaGC
MD5:	7C7294B8BAA2AEA0D19BE208A3AC18E9
SHA1:	35E5CE95DD2A52048E924D3BCE4F95CC8281CFBC
SHA-256:	A5AA5F4941CBFCA09167990619C1A4441E2876C01A7EB07FE5E781DEDB8A7905
SHA-512:	271FF74D492E001470A3261149C7A3C93ECAA170B5E18003DD0CA09218473F9D345112A641B5ED1CED38FFF290A788235A1B8E7EAC6470027EB8CDDBBC6671C1
Malicious:	false
Reputation:	low
URL:	https://sc1.checkpoint.com/check-me/SVG/close.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="9" height="9" viewBox="0 0 9 9">. <defs>. <style>. .cls-1 {. fill: #c5c5c5;. fill-rule: evenodd;. }. </style>. </defs>. <path id="close" class="cls-1" d="M1473.71,235h1v1h1v2h-2v-1h-1v-1h-1.99v1h-1v1h-2v-2h1v-1h1v-2h-1v-1h-1v-2h2v1h1v1h1.99v-1h1v-1h2v2h-1v1h-1v2Z" transform="translate(-1467.22 -229.5)"/>.</svg>.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	393
Entropy (8bit):	4.883262342225609
Encrypted:	false
SSDEEP:	12:t40n9W1NnRiKsJKAzfNMx3GV8GVvGzs5KS:t4w9ONpsJKoNGaGC
MD5:	7C7294B8BAA2AEA0D19BE208A3AC18E9
SHA1:	35E5CE95DD2A52048E924D3BCE4F95CC8281CFBC
SHA-256:	A5AA5F4941CBFCA09167990619C1A4441E2876C01A7EB07FE5E781DEDB8A7905
SHA-512:	271FF74D492E001470A3261149C7A3C93ECAA170B5E18003DD0CA09218473F9D345112A641B5ED1CED38FFF290A788235A1B8E7EAC6470027EB8CDDBBC6671C1
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="9" height="9" viewBox="0 0 9 9">. <defs>. <style>. .cls-1 {. fill: #c5c5c5;. fill-rule: evenodd;. }. </style>. </defs>. <path id="close" class="cls-1" d="M1473.71,235h1v1h1v2h-2v-1h-1v-1h-1.99v1h-1v1h-2v-2h1v-1h1v-2h-1v-1h-1v-2h2v1h1v1h1.99v-1h1v-1h2v2h-1v1h-1v2Z" transform="translate(-1467.22 -229.5)"/>.</svg>.

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1883
Entropy (8bit):	4.944805670937768
Encrypted:	false
SSDEEP:	48:JJHG2+10YKXp0I2+1UgIBTKWz2+wKSwBdUwTW0s:nk10YKXp0K1UgIBWqtSwBx+
MD5:	13DA00B1199157304E64DF53EAE031A2
SHA1:	7D71F9D59A25EF65EF15BE57862397DCD3BAAE47
SHA-256:	3B78318EFDF2097EBBBE0F959B20353133FA744B3132C91813C7E79AD6FB177C
SHA-512:	84244E4DCEB8442B016D096B5796DEA837C33E8AED832FAF1196DDB9D54453934E33CE26A893DB0DFD419DA86E6FA228932594E2DFEA669D8EA8944416B91E7E
Malicious:	false
Reputation:	low
Preview:	[{"id":1,"name":"Network","img":"Network_Icon.svg","imgPath":"http://sc1.checkpoint.com/check-me/SVG/Network_Icon.svg","comment":"","moreInfo":"CheckMe runs a series of simulations on the network and presents your security status. Start the assessment to find your exposure to Zero Day attacks, Browser Exploit, Data Leakage and more.","title":"NETWORK DETAILS","lead_name":"CheckMe Network","testable":true},{"id":2,"name":"Endpoint","img":"Endpoint_Icon.svg","imgPath":"http://sc1.checkpoint.com/check-me/SVG/Endpoint_Icon.svg","comment":"Requires downloading & running an executable","moreInfo":"CheckMe runs a series of simulations on the Endpoint and presents your security status. Start the assessment to find your exposure to Ransomware, Zero Day attacks, Browser Exploits and more.","title":"ENDPOINT DETAILS","lead_name":"CheckMe Endpoint","testable":true},{"id":3,"name":"Cloud","img":"Cloud_Icon.svg","imgPath":"http://sc1.checkpoint.com/check-me/SVG/Cloud_Icon.svg","comment":"Requires

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32039)
Category:	downloaded
Size (bytes):	1050369
Entropy (8bit):	5.624180870305743
Encrypted:	false
SSDEEP:	6144:O+j2Jw/wTDP+EArFeP5KSvf+HuuwzaXbBFWduZomZ99dlPzM30Y4jLmKLYw5blqz:9+QYmXb/pblPIEdjnLxblqgo
MD5:	5AC48AD714CD3AD3E9C2E645B4AB763C
SHA1:	4CB37218AD55B549D6DA050C7FD336D1F9AE730B
SHA-256:	7DC42EECC32D18806DBC0C27B9BA80AE9E4161C8C1A4694E084945382E550ADF
SHA-512:	0DB9A10B4764D4C6717DB935282F0BFCCA9E6DD81BD63253FB77B8053FB2F836C9622829B4F5D6F8F3E4BE355AD0E68E919E9ED0DA52C9BF250FAE5DEBB33CB6
Malicious:	false
Reputation:	low
URL:	http://www.cpcheckme.com/checkme/vendor.16be15e20a43eba17559.js
Preview:	!function(t){function e(n){if(r[n])return r[n].exports;var o=r[n]={exports:{},id:n,loaded:!1};return t[n].call(o.exports,o,o.exports,e),o.loaded=!0,o.exports}var n=window.webpackJsonp;window.webpackJsonp=function(i,u){for(var a,s,c=0,l=[];c<i.length;c++)s=i[c],o[s]&&l.push.apply(l,o[s]),o[s]=0;for(a in u)t[a]=u[a];for(n&&n(i,u);l.length;)l.shift().call(null,e);if(u[0])return r[0]=0,e(0)};var r={},o={0:0};return e.e=function(t,n){if(0===o[t])return n.call(null,e);if(void 0!==o[t])o[t].push(n);else{o[t]=[n];var r=document.getElementsByTagName("head")[0],i=document.createElement("script");i.type="text/javascript",i.charset="utf-8",i.async=!0,i.src=e.p+""+t+".bundle.16be15e20a43eba17559.js",r.appendChild(i)}},e.m=t,e.c=r,e.p="/checkme",e(0)}([function(t,e,n){n(287),n(543),n(327),n(328),n(959),n(152),n(1015),n(4),n(1016),n(108),n(1078),n(1079),n(1080),n(1082),n(423),n(1085),n(158),n(91),n(425),n(277),n(46),n(281),n(1098),n(1124),n(201),n(1154),n(1157),t.exports=n(1162)},function(t,e,n){var

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32016), with escape sequences
Category:	downloaded
Size (bytes):	77368
Entropy (8bit):	5.228588558524994
Encrypted:	false
SSDEEP:	1536:YqYkedRtCtkO9DDPCXgNPegA5ommpR6QX:ctErDmglegA5ojRpX
MD5:	8CD0E255DBBFD2FA415ED2D0FBFD76CA
SHA1:	2FFEE49DF6F50BB9DE46E13FE2CD06D0A9E2EFC8
SHA-256:	D9B2FE47829128AD00AD322CE1773F608AD6F2F2C6C92B6508284A221056CCA0
SHA-512:	05613A71A1C0B1892E460655872AAD01A4106B421279812FF5D60F0B608A3CB1006AB583CA57850FD0E1FD5D22D46141E2D3ABF1359F3C312BED2FFAAB960F88
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/bluebird/3.3.5/bluebird.min.js
Preview:	/* @preserve. * The MIT License (MIT). * . * Copyright (c) 2013-2015 Petka Antonov. * . * Permission is hereby granted, free of charge, to any person obtaining a copy. * of this software and associated documentation files (the "Software"), to deal. * in the Software without restriction, including without limitation the rights. * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. * copies of the Software, and to permit persons to whom the Software is. * furnished to do so, subject to the following conditions:. * . * The above copyright notice and this permission notice shall be included in. * all copies or substantial portions of the Software.. * . * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE. * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER. * LIABILITY,

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	847
Entropy (8bit):	5.388558028896242
Encrypted:	false
SSDEEP:	12:TMHdwLi/nzVc/KYf3kgoKWjqHFsyWtANXzoMg3Tev4JqFgqXLoMg1+EkPXLoi6mR:2dmA6LfvoKWmlni+c/ysUUd+1UDmR
MD5:	C219375DB29151912146AE3835A67B24
SHA1:	62BEF7717B9BFF97CFBD379BE7808848F0B76449
SHA-256:	3E9502E83FBDD0A4F14C770CB77778ACB40C2151F91F5F8E8C4BB1543B96AD50
SHA-512:	D06FA3CEB44068F6DAB2F40CD51FF39FCCB77246146A091A11C1555F8074E0DDA7272AC9B6DA2E57596E0BB5A159735C05A01013B8BF1AB1F3FF02E7B4BD961C
Malicious:	false
Reputation:	low
URL:	https://sc1.checkpoint.com/check-me/SVG/Network_Icon.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="60px" height="60px" viewBox="0 0 60 60" style="enable-background:new 0 0 60 60;" xml:space="preserve">..<style type="text/css">....st0{fill:#E45785;}..</style>..<path id="network_icon" class="st0" d="M52,53.5H38c-1.1,0-2-0.9-2-2v-10c0-1.1,0.9-2,2-2h14c1.1,0,2,0.9,2,2v10...C54,52.6,53.1,53.5,52,53.5z M46,35.5h-3v-4H16v4h-3v-7h15v-4h3v4h12v0h3v0l0,0v3l0,0V35.5z M36,20.5H22c-1.1,0-2-0.9-2-2v-10...c0-1.1,0.9-2,2-2h14c1.1,0,2,0.9,2,2v10C38,19.6,37.1,20.5,36,20.5z M24,41.5v10c0,1.1-0.9,2-2,2H8c-1.1,0-2-0.9-2-2v-10...c0-1.1,0.9-2,2-2h14C23.1,39.5,24,40.4,24,41.5z"/>..</svg>..

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	812
Entropy (8bit):	5.3192125310573966
Encrypted:	false
SSDEEP:	12:TMHdwLi/nzVc/KYf3kgoKWjqHF3tDeuBJVW3yiTGFTiQ2USSKVdRJI:2dmA6LfvoKWml3leaJQy/WQ2USD3fI
MD5:	654751A7B01F0CE1CF14D64B3F112582
SHA1:	AC292263D14437F3C9946FDBD6FEC0F80848B72E
SHA-256:	6FC9039C758F455E195A8CBE31A073CEA81F888F21969574A1EFE2BBDC5E575D
SHA-512:	D6FFFAB2507C506532098C5ABF55B0893016E3BD124A6B6063AA56DDE9E6139A612DC8A7D8505E5AEF279546CF739DA5B0FDDABB1A7AC3FCD4FFBDCDEBEBDE37
Malicious:	false
Reputation:	low
URL:	https://sc1.checkpoint.com/check-me/SVG/Mobile_Icon.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="60px" height="60px" viewBox="0 0 60 60" style="enable-background:new 0 0 60 60;" xml:space="preserve">..<style type="text/css">....st0{fill:#E45785;}..</style>..<path class="st0" d="M40.4,7.5H19.7c-3.1,0-5.7,2.5-5.7,5.6v33.7c0,3.1,2.6,5.6,5.7,5.6h20.7c0,0,0,0,0,0c3.1,0,5.6-2.5,5.6-5.6...V13.1c0,0,0,0,0,0C46,10,43.5,7.5,40.4,7.5z M30,50.1c-1.1,0-2.1-0.9-2.1-2.1s0.9-2.1,2.1-2.1s2.1,0.9,2.1,2.1S31.1,50.1,30,50.1z... M43,41c0,2-1.6,3.5-3.5,3.5h0H20.6c-2,0-3.5-1.6-3.6-3.5V17c0-2,1.6-3.5,3.6-3.5l0,0h18.9c2,0,3.5,1.6,3.6,3.5V41z"/>..</svg>..

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	391
Entropy (8bit):	5.131473385406929
Encrypted:	false
SSDEEP:	6:tI9mc4slz35ndcQQFr/IbJCJWIAvNliKZ6bJKAAwRWIz/fpkHScdsq3gkOsMurd+:t4fmZ/I1NnlIKsJKAzQYkygsqiu4yK
MD5:	19AAA5DA56FFE44A5FE5B8362EFA8CBE
SHA1:	EC8D0522B5E9124FE515A6A8D27DF9856319FD5E
SHA-256:	5E98114E161A04831765FBC092BF4D1963C1FE4346AD8119C261AE1F7C00B29C
SHA-512:	CC3E6B05DB044EF7737ED21BA9F8BA44445ECF54CA68C29107D79697A7042EB02AE4A395E499B9BAC8F2DAF38A093260627FC470BF7F9BA5D100818C7B514BE3
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="55" height="55" viewBox="0 0 55 55">. <defs>. <style>. .cls-1 {. fill: #e45785;. fill-rule: evenodd;. }. </style>. </defs>. <path id="_" data-name="!" class="cls-1" d="M997.5,440A27.5,27.5,0,1,1,970,467.5,27.5,27.5,0,0,1,997.5,440ZM996,458h4v26h-4V458Zm0-8h4v4h-4v-4Z" transform="translate(-970 -440)"/>.</svg>.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4242)
Category:	downloaded
Size (bytes):	255019
Entropy (8bit):	5.566993484819907
Encrypted:	false
SSDEEP:	3072:qYicXJ6OtrXgrRaIuTWISb8HHyZM3QDWCzFaimWdXQNmtKIAbpp2BGVbQiCJO/5e:YGrXgr0IuiJp8QjZHndXQNkKRxVbdCJr
MD5:	314F3F270EBB997117C7C03CFA2054C8
SHA1:	89596C531B639BD7342E93A13A547639297C9AC1
SHA-256:	781B692A8E6B5A144CFAFBC80EC83AE3F164906EC65CE807909041602FAAA199
SHA-512:	2FF2AEAB0C5B43100D2EAF92CE311E296ADDC9768014E0BAC2EA5059DD8703BFB3A2D900AB291EB710C4D91002FAA85CCA5AF0529368138DAE0D9BE9270C4E0E
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-57B3CLTHD6&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":6,"vtp_value":true,"tag_id":16},{"function":"__ogt_referral_exclusion","priority":6,"vtp_includeConditions":["list","cpcheckme\\.com"],"tag_id":18},{"function":"__ogt_session_timeout","priority":6,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_1p_data_v2","priority":6,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELE

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	812
Entropy (8bit):	5.3192125310573966
Encrypted:	false
SSDEEP:	12:TMHdwLi/nzVc/KYf3kgoKWjqHF3tDeuBJVW3yiTGFTiQ2USSKVdRJI:2dmA6LfvoKWml3leaJQy/WQ2USD3fI
MD5:	654751A7B01F0CE1CF14D64B3F112582
SHA1:	AC292263D14437F3C9946FDBD6FEC0F80848B72E
SHA-256:	6FC9039C758F455E195A8CBE31A073CEA81F888F21969574A1EFE2BBDC5E575D
SHA-512:	D6FFFAB2507C506532098C5ABF55B0893016E3BD124A6B6063AA56DDE9E6139A612DC8A7D8505E5AEF279546CF739DA5B0FDDABB1A7AC3FCD4FFBDCDEBEBDE37
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="60px" height="60px" viewBox="0 0 60 60" style="enable-background:new 0 0 60 60;" xml:space="preserve">..<style type="text/css">....st0{fill:#E45785;}..</style>..<path class="st0" d="M40.4,7.5H19.7c-3.1,0-5.7,2.5-5.7,5.6v33.7c0,3.1,2.6,5.6,5.7,5.6h20.7c0,0,0,0,0,0c3.1,0,5.6-2.5,5.6-5.6...V13.1c0,0,0,0,0,0C46,10,43.5,7.5,40.4,7.5z M30,50.1c-1.1,0-2.1-0.9-2.1-2.1s0.9-2.1,2.1-2.1s2.1,0.9,2.1,2.1S31.1,50.1,30,50.1z... M43,41c0,2-1.6,3.5-3.5,3.5h0H20.6c-2,0-3.5-1.6-3.6-3.5V17c0-2,1.6-3.5,3.6-3.5l0,0h18.9c2,0,3.5,1.6,3.6,3.5V41z"/>..</svg>..

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	87
Entropy (8bit):	3.805422746199934
Encrypted:	false
SSDEEP:	3:4wi5L3YcJ56MtJdvMJpDncjIQ+:4fL556Pxw+
MD5:	306B050AFA47E234A795D34E0A47DB05
SHA1:	967A2BD2D6A9974C9DAB0AED728239D2A5C670EB
SHA-256:	9F41267F2996F0B85A9C2D81C2F23D6D774849EB2D1F96668ABF7E0C50855479
SHA-512:	BB17CA320774F150014C4D591EA58FD7544E1A1DEB96B86628BC8AB5A68DDD2F48F656F7709BC4137EF50559C74D38D79D5091D7ECF4151697B4AD6235A114E0
Malicious:	false
Reputation:	low
URL:	http://www.cpcheckme.com/checkme/rest/test/getExcludedEmails?ts=1716391642959
Preview:	["gmail","hotmail","yahoo","mail","outlook","gmx","protonmail","aol","yandex","icloud"]

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 22, 2024 17:26:57.717060089 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:57.717570066 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:57.733458042 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:57.733469963 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:57.733587027 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:57.733920097 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:57.733920097 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:57.746560097 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.368083000 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.374191046 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.402137995 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.552881002 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.553174973 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.553186893 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.553236961 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.555278063 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.555399895 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.577502012 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.580864906 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.581274986 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.585587025 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.589392900 CEST	49702	443	192.168.2.16	172.217.18.4
May 22, 2024 17:26:58.589442968 CEST	443	49702	172.217.18.4	192.168.2.16
May 22, 2024 17:26:58.589662075 CEST	49702	443	192.168.2.16	172.217.18.4
May 22, 2024 17:26:58.589860916 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:58.589886904 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:58.589946985 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:58.590169907 CEST	49702	443	192.168.2.16	172.217.18.4
May 22, 2024 17:26:58.590192080 CEST	443	49702	172.217.18.4	192.168.2.16
May 22, 2024 17:26:58.590264082 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.590270042 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:58.590284109 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:58.590955019 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.591078043 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.591218948 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.604764938 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.755446911 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.755465031 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.755597115 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.755686045 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.755702019 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.755716085 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.755759001 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.756329060 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.756422043 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.756840944 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.757276058 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.757344961 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.758109093 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.758403063 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.758440018 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.758459091 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.759073973 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.759133101 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.763725996 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.763884068 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.763952017 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.764137983 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.764153957 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.764209032 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.764514923 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.764530897 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.764545918 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.764570951 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.766074896 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.766092062 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.766129017 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.766422033 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.766467094 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.772120953 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.775998116 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.776067019 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.836517096 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.836771965 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.836880922 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.837045908 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.837085009 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.837085009 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.842443943 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.842619896 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.843228102 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.843242884 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.843307972 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.843307972 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.843666077 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.843835115 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.844007015 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.844347954 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.844521046 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.844590902 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.844871998 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.845063925 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.845115900 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.846029043 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.852772951 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.853039026 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.853054047 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.853104115 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.853387117 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.853403091 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.853437901 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.853802919 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.853856087 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.854330063 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.854511976 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.854526997 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.854562044 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.854954958 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.854970932 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.855000019 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.855323076 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.855380058 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.855828047 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.855993986 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.856043100 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.856123924 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.856893063 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.856908083 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.856959105 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.857480049 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.857495070 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.857530117 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.857573032 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.857619047 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.858365059 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.859688044 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.859750986 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.864475012 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.894505978 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.906618118 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.942351103 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.942369938 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.942461967 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.943154097 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.943171024 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.943214893 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.943238020 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.943398952 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.943414927 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.943435907 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.948471069 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.948522091 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.948568106 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.948581934 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.948621035 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.948685884 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.948699951 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.948735952 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.948800087 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.948815107 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.948829889 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.948846102 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.948848963 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.948860884 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.948887110 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.950607061 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.950623035 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.950659037 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.950731039 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.950773954 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.950840950 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.950855970 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.950869083 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.950882912 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.950887918 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.950921059 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.951417923 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.951432943 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.951447964 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.951462030 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.951469898 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.951499939 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.955094099 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.955111027 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.955125093 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.955140114 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.955151081 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.955176115 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.955179930 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.955620050 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.955636024 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.955665112 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.955729008 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.955765009 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.955765963 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.955779076 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.955795050 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.955809116 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.955816031 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.955842972 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.956448078 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.956464052 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.956479073 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.956513882 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.957705975 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.957722902 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.957737923 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:58.957766056 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:58.957791090 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.030699015 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.030778885 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.030843019 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.030904055 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.031095982 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.031116009 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.031131983 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.031146049 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.031187057 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.031481981 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.031634092 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.031672955 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.031995058 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.032012939 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.032027006 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.032056093 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.032538891 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.032553911 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.032567978 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.032593012 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.032620907 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.032942057 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.032958031 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.032998085 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.033437967 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.033452988 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.033467054 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.033480883 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.033494949 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.033495903 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.033510923 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.033514977 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.033557892 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.034179926 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.034404039 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.034444094 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.034446955 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.034463882 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.034478903 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.034509897 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.035257101 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.035271883 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.035285950 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.035300970 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.035304070 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.035315990 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.035331011 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.035367012 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.036509991 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.036525011 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.036539078 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.036554098 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.036569118 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.036587954 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.036612988 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.037883043 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.037938118 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.038050890 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.038176060 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.038191080 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.038218021 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.038506031 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.038522959 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.038537025 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.038580894 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.038603067 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.038779020 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.038794041 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.038834095 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.039105892 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.039122105 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.039136887 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.039151907 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.039158106 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.039166927 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.039185047 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.039761066 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.039777994 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.039803982 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.039877892 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.039922953 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.040025949 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.040041924 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.040056944 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.040076971 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.040378094 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.040394068 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.040407896 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.040416002 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.040445089 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.040704966 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.040781975 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.040796995 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.040812016 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.040817022 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.040827036 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.040853977 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.041248083 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.041265011 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.041279078 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.041291952 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.041317940 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.041574001 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.041589022 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.041601896 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.041640997 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.044301033 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.044348955 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.104266882 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.104552031 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.104574919 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.105545044 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.105627060 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.106617928 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.106688976 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.106797934 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.106807947 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.119487047 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.119537115 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.119607925 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.119756937 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.120127916 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.120142937 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.120157003 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.120182991 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.120209932 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.120529890 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.120544910 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.120558977 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.120573997 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.120588064 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.120599985 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.120621920 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.120625973 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.120640039 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.120655060 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.120675087 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.120702982 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.121326923 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.121342897 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.121396065 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.121556997 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.121572018 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.121587038 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.121608019 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.121941090 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.121957064 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.121968985 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.121984005 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.121990919 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.121998072 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.122013092 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.122018099 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.122026920 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.122050047 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.122066021 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.122685909 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.122701883 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.122714996 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.122729063 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.122742891 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.122750044 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.122757912 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.122764111 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.122807980 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.123469114 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.123483896 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.123528957 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.123688936 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.124047041 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.124062061 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.124077082 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.124093056 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.124097109 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.124108076 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.124120951 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.124121904 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.124136925 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.124155998 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.124181032 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.124975920 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.124993086 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.125008106 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.125021935 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.125036001 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.125050068 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.125057936 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.125065088 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.125080109 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.125088930 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.125094891 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.125130892 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.125900984 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.125916958 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.125930071 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.125943899 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.125946045 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.125960112 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.125974894 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.125983953 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.126019001 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.128835917 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.128885984 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.128886938 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.129017115 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.129054070 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.129153013 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.129261017 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.129275084 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.129291058 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.129420996 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.129436016 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.129451036 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.129456043 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.129466057 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.129482031 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.129486084 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.129533052 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.130007982 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.130023003 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.130037069 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.130053043 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.130065918 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.130080938 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.130111933 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.130367994 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.130383015 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.130397081 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.130410910 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.130412102 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.130434990 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.130708933 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.130724907 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.130738020 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.130752087 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.130757093 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.130774021 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.130775928 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.130788088 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.130804062 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.130810976 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.130819082 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.130832911 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.130852938 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.130878925 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.131505013 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.131520033 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.131534100 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.131550074 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.131563902 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.131571054 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.131578922 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.131606102 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.131620884 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.132039070 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.132054090 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.132069111 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.132083893 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.132096052 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.132097960 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.132117987 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.132522106 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.132536888 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.132550001 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.132565022 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.132570028 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.132580042 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.132581949 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.132594109 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.132608891 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.132617950 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.132622957 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.132637978 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.132643938 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.132652998 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.132680893 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.133214951 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.133229971 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.133244991 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.133264065 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.133289099 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.133461952 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.161592007 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.177583933 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.208873987 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.208905935 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.208955050 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.209089994 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.209206104 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.209222078 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.209237099 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.209240913 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.209252119 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.209271908 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.209501028 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.209516048 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.209531069 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.209546089 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.209559917 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.209566116 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.209573984 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.209594011 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.209625959 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.210021973 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.210036993 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.210052013 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.210058928 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.210066080 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.210083008 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.210088968 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.210098028 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.210104942 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.210112095 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.210145950 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.210597992 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.210613012 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.210625887 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.210640907 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.210647106 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.210654974 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.210669994 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.210675001 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.210684061 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.210697889 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.210706949 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.210711956 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.210726023 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.210731983 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.210747004 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.211266994 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.211282969 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.211296082 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.211311102 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.211316109 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.211338997 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.211689949 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.211704969 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.211719036 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.211738110 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.211761951 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.212091923 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.212105989 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.212120056 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.212135077 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.212150097 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.212165117 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.212168932 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.212188005 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.212208986 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.212608099 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.212622881 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.212636948 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.212651968 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.212665081 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.212677956 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.212680101 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.212693930 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.212708950 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.212717056 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.212723017 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.212738037 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.212740898 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.212780952 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.213248968 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.213264942 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.213310957 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.213373899 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.213572025 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.213587046 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.213599920 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.213607073 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.213615894 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.213629961 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.213635921 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.213644981 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.213664055 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.214016914 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.214031935 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.214046001 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.214061022 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.214062929 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.214075089 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.214086056 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.214090109 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.214112043 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.216707945 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.216723919 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.216737986 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.216758013 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.216778994 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.216790915 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.216921091 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.216936111 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.216954947 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.217070103 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.217083931 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.217099905 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.217099905 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.217133999 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.217329025 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.217344046 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.217359066 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.217372894 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.217382908 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.217387915 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.217408895 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.217679024 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.217694998 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.217715025 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.217828989 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.217844009 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.217859030 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.217864037 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.217874050 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.217888117 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.217892885 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.217902899 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.217921972 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.218425989 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.218441963 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.218456984 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.218471050 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.218475103 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.218489885 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.218502045 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.218518019 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.218532085 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.218547106 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.218554974 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.218560934 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.218575001 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.218589067 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.218604088 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.218605042 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.218617916 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.218624115 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.218632936 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.218663931 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.219232082 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.219279051 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.219290972 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.219306946 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.219321966 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.219338894 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.220205069 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.220254898 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.236233950 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.236253977 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.236324072 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.236350060 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.236397982 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.236536026 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.236541986 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.236548901 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.236561060 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.236612082 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.236732006 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.236745119 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.236792088 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.243398905 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.243491888 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.248526096 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.250086069 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.250143051 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.250782013 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.250828028 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.250876904 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.250886917 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.250900030 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.250946999 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.250957012 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.251002073 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.251039982 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.251046896 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.252037048 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.252093077 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.252103090 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.252880096 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.252949953 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.252959013 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.298578978 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.298597097 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.298644066 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.298654079 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.298736095 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.298748970 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.298805952 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.298878908 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.298891068 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.298901081 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.298912048 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.298921108 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.298922062 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.298949003 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.298983097 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.299156904 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.299168110 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.299179077 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.299189091 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.299200058 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.299226999 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.299496889 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.299508095 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.299518108 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.299529076 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.299539089 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.299549103 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.299559116 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.299570084 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.299576044 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.299580097 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.299591064 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.299621105 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.299638033 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.300039053 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.300050020 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.300087929 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.300364017 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.300376892 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.300388098 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.300398111 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.300406933 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.300424099 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.300434113 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.300437927 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.300468922 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.300683022 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.300694942 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.300726891 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.300746918 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.300790071 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.300857067 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.300868034 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.300879002 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.300903082 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.301117897 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.301127911 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.301139116 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.301148891 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.301158905 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.301168919 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.301177979 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.301182985 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.301182985 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.301188946 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.301207066 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.301229000 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.301598072 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.301609039 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.301620007 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.301630974 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.301639080 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.301640987 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.301668882 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.301692009 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.301860094 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.301871061 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.301881075 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.301907063 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.301994085 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.302005053 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.302025080 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.302087069 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.302098036 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.302108049 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.302119017 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.302124977 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.302129984 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.302139997 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.302148104 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.302150011 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.302160978 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.302187920 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.302504063 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.302515030 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.302573919 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.302618980 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.302629948 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.302654028 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.304625034 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.304636955 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.304680109 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.304778099 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.304789066 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.304799080 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.304811954 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.304841995 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.304986000 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.304997921 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.305007935 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.305017948 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.305027962 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.305043936 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.305108070 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.305314064 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.305335999 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.305349112 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.305361032 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.305366993 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.305372953 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.305388927 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.305418968 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.305583954 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.305588961 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.305602074 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.305603981 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.305613995 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.305625916 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.305636883 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.305649996 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.305659056 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.305661917 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.305675030 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.305686951 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.305691004 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.305699110 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.305707932 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.305744886 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.306075096 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.306370020 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.306382895 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.306394100 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.306405067 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.306406021 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.306416035 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.306427002 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.306430101 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.306438923 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.306451082 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.306462049 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.306464911 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.306473017 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.306490898 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.306503057 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.306514025 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.306514978 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.306514025 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.306540012 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.306561947 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.306864023 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.306878090 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.306915998 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.307389021 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.307400942 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.307440042 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.308154106 CEST	443	49702	172.217.18.4	192.168.2.16
May 22, 2024 17:26:59.308418989 CEST	49702	443	192.168.2.16	172.217.18.4
May 22, 2024 17:26:59.308434963 CEST	443	49702	172.217.18.4	192.168.2.16
May 22, 2024 17:26:59.309875965 CEST	443	49702	172.217.18.4	192.168.2.16
May 22, 2024 17:26:59.309953928 CEST	49702	443	192.168.2.16	172.217.18.4
May 22, 2024 17:26:59.310910940 CEST	49702	443	192.168.2.16	172.217.18.4
May 22, 2024 17:26:59.311048031 CEST	443	49702	172.217.18.4	192.168.2.16
May 22, 2024 17:26:59.311198950 CEST	49702	443	192.168.2.16	172.217.18.4
May 22, 2024 17:26:59.329421997 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.329718113 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.329749107 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.329842091 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.330463886 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.330538034 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.330585003 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.331181049 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.331244946 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.331254005 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.331901073 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.331913948 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.331955910 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.332495928 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.332509995 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.332596064 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.333199978 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.333235979 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.333245993 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.333878040 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.333930969 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.333937883 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.334450960 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.334501028 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.334547043 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.335283041 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.335304976 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.335400105 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.335956097 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.335969925 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.336070061 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.336087942 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.336112976 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.337430954 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.341003895 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.341046095 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.341070890 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.341084957 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.341099977 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.341120958 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.341756105 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.341805935 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.341818094 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.342602968 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.342670918 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.342679977 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.343274117 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.343307018 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.343327045 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.343333960 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.343374968 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.343384027 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.343394995 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.343441010 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.344090939 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.344718933 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.344749928 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.344768047 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.344778061 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.344873905 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.345190048 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.345786095 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.345835924 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.345844984 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.346267939 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.346314907 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.346323013 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.353902102 CEST	49702	443	192.168.2.16	172.217.18.4
May 22, 2024 17:26:59.353924036 CEST	443	49702	172.217.18.4	192.168.2.16
May 22, 2024 17:26:59.386034012 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.386686087 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.386702061 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.386725903 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.386737108 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.386758089 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.386789083 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.386976004 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.387104034 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.387115002 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.387146950 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.387407064 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.387469053 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.387470007 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.387546062 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.387588024 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.387603045 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.387614012 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.387670994 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.387744904 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.387757063 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.387767076 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.387805939 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.388516903 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.388528109 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.388576984 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.388879061 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.388902903 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.388920069 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.388983965 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.389043093 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.389048100 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.389132023 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.389143944 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.389153957 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.389163017 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.389183998 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.389308929 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.389319897 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.389328957 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.389362097 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.389445066 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.389456987 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.389473915 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.389589071 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.389599085 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.389607906 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.389617920 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.389617920 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.389627934 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.389646053 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.389666080 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.391009092 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.391021967 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.391031981 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.391067028 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.391151905 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.391164064 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.391174078 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.391180992 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.391194105 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.391273975 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.391288042 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.391328096 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.391434908 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.391447067 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.391457081 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.391469002 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.391478062 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.391494036 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.391561985 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.391649008 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.391659975 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.391669989 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.391681910 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.391690969 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.391697884 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.391733885 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.391958952 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.391971111 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.391979933 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.392026901 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.392051935 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.392087936 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.392251968 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.392262936 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.392275095 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.392286062 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.392292976 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.392297029 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.392307997 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.392313957 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.392318010 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.392328978 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.392338991 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.392343998 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.392352104 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.392362118 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.392362118 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.392371893 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.392398119 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.392424107 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.393341064 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.393352985 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.393409967 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.394927025 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.394942999 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.394953012 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.394963980 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.394973993 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.394984007 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395000935 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395000935 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.395010948 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395020962 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395030022 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395040989 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.395047903 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395057917 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395061970 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.395067930 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395077944 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395088911 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395098925 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395102024 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.395109892 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395119905 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395129919 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395132065 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.395153999 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.395158052 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395169020 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395178080 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395188093 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395195007 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.395198107 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395209074 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395220041 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395226955 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.395229101 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395240068 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395246029 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.395250082 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395261049 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395266056 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.395307064 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.395473003 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395514965 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395525932 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395560980 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395569086 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.395571947 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395584106 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395591021 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.395617962 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.395710945 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395723104 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395731926 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395747900 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395757914 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395766020 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.395768881 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395778894 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395790100 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.395790100 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.395808935 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.395828962 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.398104906 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.401592970 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.401603937 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.401607037 CEST	49702	443	192.168.2.16	172.217.18.4
May 22, 2024 17:26:59.421418905 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.421449900 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.421461105 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.421564102 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.421814919 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.421861887 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.422035933 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.422123909 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.422166109 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.422775030 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.422810078 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.422842979 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.422897100 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.422939062 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.422972918 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.422975063 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.423122883 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.423301935 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.423541069 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.423609972 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.423644066 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.423685074 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.423723936 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.423780918 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.424506903 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.424578905 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.424590111 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.424628019 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.424686909 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.424725056 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.425398111 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.425407887 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.425453901 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.425467014 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.425564051 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.425627947 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.426373005 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.426446915 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.426505089 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.426546097 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.427093029 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.427468061 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.427479982 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.427489996 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.427500010 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.427524090 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.427524090 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.427584887 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.428292036 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.428864956 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.429147005 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.432015896 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.432085991 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.432097912 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.432179928 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.432219028 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.432224035 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.432602882 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.432651997 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.432658911 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.432818890 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.432827950 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.432857037 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.432862997 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.432873964 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.433023930 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.433058023 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.433131933 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.433459044 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.433865070 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.433907986 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.433923006 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.433931112 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.433955908 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.434617043 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.434669018 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.434675932 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.434711933 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.435441971 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.435497046 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.438072920 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.438138962 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.438148975 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.438246012 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.438285112 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.438491106 CEST	49703	443	192.168.2.16	104.17.25.14
May 22, 2024 17:26:59.438508987 CEST	443	49703	104.17.25.14	192.168.2.16
May 22, 2024 17:26:59.449614048 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.451472998 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.459121943 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.476002932 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.476023912 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.476037025 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.476048946 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.476089954 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.476129055 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.476133108 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.476140976 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.476175070 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.476306915 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.476356030 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.476368904 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.476388931 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.476402998 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.476439953 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.476499081 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.476846933 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.476921082 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.476950884 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.477217913 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.477240086 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.477250099 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.477253914 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.477284908 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.477381945 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.477391958 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.477402925 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.477425098 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.477582932 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.477595091 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.477606058 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.477621078 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.477644920 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.477703094 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.477714062 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.477724075 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.477735043 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.477763891 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.477786064 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.477893114 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.477905035 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.477915049 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.477940083 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.478008032 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.478046894 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.478066921 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.478077888 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.478112936 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.479648113 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.479660988 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.479707956 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.479854107 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.479865074 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.479875088 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.479886055 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.479896069 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.479907036 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.479918957 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.479918957 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.479929924 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.479939938 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.479949951 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.479952097 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.479959965 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.479979992 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.480000019 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.480180979 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.480192900 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.480201960 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.480212927 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.480221987 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.480226040 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.480233908 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.480243921 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.480242014 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.480268002 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.480288982 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.480648994 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.480660915 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.480670929 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.480681896 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.480691910 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.480700016 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.480703115 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.480720997 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.480727911 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.480752945 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.480861902 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.480874062 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.480884075 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.480896950 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.480906963 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.480906963 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.480917931 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.480928898 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.480941057 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.480968952 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.481128931 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.481168032 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.481232882 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.481245041 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.481285095 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.483737946 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.483750105 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.483798981 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.483798027 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.483809948 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.483820915 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.483853102 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.484050989 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.484064102 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.484074116 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.484085083 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.484091043 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.484119892 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.484417915 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.484430075 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.484440088 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.484451056 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.484467983 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.484468937 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.484477997 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.484483004 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.484489918 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.484499931 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.484510899 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.484513044 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.484554052 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.484566927 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.489983082 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.489999056 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.490062952 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.490823030 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.490966082 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.490978003 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.491005898 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.491041899 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.491053104 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.491072893 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.491260052 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.491272926 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.491282940 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.491306067 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.491322041 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.491338968 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.491422892 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.491434097 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.491458893 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.491533995 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.491547108 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.491569042 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.491622925 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.491672039 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.491745949 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.491758108 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.491767883 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.491789103 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.491805077 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.491816998 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.491841078 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.491955042 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.491967916 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.491988897 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.513988018 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.513999939 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.514030933 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.514105082 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.514105082 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.514158010 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.514178991 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.514316082 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.514327049 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.514337063 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.514491081 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.514491081 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.514667988 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.514681101 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.514878035 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.514878035 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.514952898 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.515126944 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.515155077 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.515166998 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.515177011 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.515583992 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.515592098 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.515626907 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.515660048 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.515726089 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.515736103 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.515747070 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.515757084 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.515765905 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.515784025 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.515784025 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.515841007 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.515973091 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.515985966 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.516092062 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.516510010 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.516558886 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.516593933 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.516690969 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.516737938 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.516782045 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.516793013 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.516803026 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.516827106 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.516827106 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.516932964 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.516988993 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.518621922 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.518675089 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.518748999 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.518757105 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.518784046 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.518871069 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.518872023 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.518882036 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.518893003 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.518956900 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.519063950 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.519120932 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.519222975 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.519234896 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.519244909 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.519258976 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.519269943 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.519299030 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.519299030 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.519521952 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.519610882 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.519622087 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.519745111 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.519745111 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.519752026 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.519799948 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.519809961 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.519838095 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.519860029 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.519953012 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.520467997 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.520478964 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.520488977 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.520571947 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.523667097 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.523684025 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.523730993 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.523751020 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.523813009 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.523819923 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.523879051 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.523953915 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.523963928 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.523971081 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.523972988 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.524137020 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.524139881 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.524151087 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.524161100 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.524188042 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.524188042 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.531647921 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.543615103 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.568367958 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.568384886 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.568394899 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.568406105 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.568417072 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.568428040 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.568438053 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.568449020 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.568459034 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.568470955 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.568475962 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.568485022 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.568495989 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.568494081 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.568506956 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.568516970 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.568526983 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.568538904 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.568548918 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.568552971 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.568558931 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.568586111 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.569082975 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.569097996 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.569107056 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.569117069 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.569127083 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.569137096 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.569145918 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.569145918 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.569148064 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.569159031 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.569164991 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.569169044 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.569180965 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.569191933 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.569195986 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.569200993 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.569211006 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.569212914 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.569212914 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.569221973 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.569248915 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.569279909 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.570241928 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570251942 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570261002 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570271015 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570281982 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570314884 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.570334911 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.570336103 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570347071 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570358038 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570368052 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570370913 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.570378065 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570389032 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570399046 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570399046 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.570422888 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.570440054 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.570640087 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570657015 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570667028 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570677996 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570688009 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570693970 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.570698023 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570708990 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570713043 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.570719004 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570729017 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.570729017 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.570760012 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.570971012 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.571014881 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.571036100 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.571047068 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.571058035 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.571068048 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.571160078 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.571161032 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.571332932 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.571345091 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.571353912 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.571363926 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.571376085 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.571399927 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.571615934 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.571626902 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.571636915 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.571646929 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.571688890 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.575442076 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.575453997 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.575520039 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.575629950 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.576294899 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.576348066 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.576360941 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.576370955 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.576383114 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.576407909 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.576587915 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.576600075 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.576610088 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.576632023 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.576731920 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.576744080 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.576755047 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.576765060 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.576776028 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.576791048 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.576932907 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.576945066 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.576955080 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.576966047 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.576973915 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.576983929 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.576988935 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.576994896 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.577004910 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.577016115 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.577022076 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.577027082 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.577034950 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.577038050 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.577061892 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.577413082 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.577425003 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.577441931 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.577450991 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.577454090 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.577465057 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.577486038 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.577507019 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.580136061 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.580148935 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.580226898 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.584032059 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.584068060 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.584135056 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.584160089 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.584172010 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.584218025 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.584239960 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.584359884 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.584372044 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.584383011 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.584393024 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.584395885 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.584424973 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.587099075 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.587116957 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.587126970 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.587165117 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.587188959 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.588948965 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.588960886 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.589006901 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.601103067 CEST	443	49702	172.217.18.4	192.168.2.16
May 22, 2024 17:26:59.601155996 CEST	443	49702	172.217.18.4	192.168.2.16
May 22, 2024 17:26:59.601205111 CEST	49702	443	192.168.2.16	172.217.18.4
May 22, 2024 17:26:59.601221085 CEST	443	49702	172.217.18.4	192.168.2.16
May 22, 2024 17:26:59.605421066 CEST	443	49702	172.217.18.4	192.168.2.16
May 22, 2024 17:26:59.605523109 CEST	49702	443	192.168.2.16	172.217.18.4
May 22, 2024 17:26:59.605657101 CEST	49702	443	192.168.2.16	172.217.18.4
May 22, 2024 17:26:59.605671883 CEST	443	49702	172.217.18.4	192.168.2.16
May 22, 2024 17:26:59.611704111 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.612001896 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.612093925 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.612279892 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.612624884 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.612704992 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.612745047 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.612817049 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.612869978 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.612920046 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.613063097 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.613218069 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.613229990 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.613255024 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.613284111 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.613317966 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.613884926 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.613990068 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.614516973 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.614625931 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.614705086 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.614814997 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.614852905 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.614852905 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.614876986 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.615035057 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.615103006 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.615179062 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.615190029 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.615256071 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.615400076 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.615497112 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.615544081 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.615562916 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.615655899 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.616147995 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.616314888 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.616326094 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.616391897 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.616447926 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.616520882 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.616527081 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.616580963 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.616626978 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.616693974 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.616729021 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.616729021 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.616847038 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.617193937 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.617252111 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.617271900 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.617321014 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.617433071 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.617706060 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.617717981 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.617753983 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.617765903 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.617788076 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.617824078 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.617875099 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.617892027 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.618026972 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.618038893 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.618048906 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.618077040 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.618077040 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.618158102 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.618170023 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.618221045 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.618264914 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.618264914 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.618587971 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.618603945 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.618614912 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.618624926 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.618635893 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.618645906 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.618655920 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.618665934 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.618675947 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.618700027 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.618700027 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.618700027 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.618720055 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.620223045 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620234013 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620244026 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620271921 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620281935 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620291948 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620301962 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620311975 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620321989 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620332003 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620332956 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.620332956 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.620332956 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.620342970 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620352983 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620362997 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620376110 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.620376110 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.620378971 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620389938 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620394945 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.620400906 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620409966 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620420933 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620431900 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620436907 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.620440960 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620451927 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620461941 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620471001 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620472908 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.620481014 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620490074 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.620492935 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.620506048 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.620663881 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.622400999 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.622412920 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.622503996 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.623584986 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.623595953 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.623608112 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.623617887 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.623627901 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.623694897 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.623694897 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.623730898 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.623786926 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.623831987 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.623843908 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.623852968 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.623863935 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.623873949 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.623883963 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.623900890 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.623925924 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.623925924 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.623925924 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.624742985 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.624754906 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.624764919 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.624804020 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.624855042 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.629489899 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.629503012 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.629674911 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.636899948 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.636912107 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.637113094 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.637312889 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.637353897 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.637896061 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.638360977 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.638372898 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.638870955 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.640108109 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.643798113 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.644002914 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.659851074 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.659867048 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.659935951 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.659951925 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.659964085 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.659975052 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.659985065 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.660039902 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.660116911 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.660128117 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.660137892 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.660149097 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.660157919 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.660172939 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.660202980 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.660298109 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.660347939 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.660496950 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.660507917 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.660558939 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.660586119 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.660598040 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.660644054 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.660729885 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.660741091 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.660749912 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.660762072 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.660770893 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.660780907 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.660806894 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.661031008 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661060095 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661072016 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.661076069 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661097050 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661113024 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.661165953 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661200047 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.661391973 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661408901 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661422968 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661436081 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.661438942 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661456108 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661472082 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661485910 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661494017 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.661505938 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661520958 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661526918 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.661535978 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661566973 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.661570072 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661587954 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.661590099 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661606073 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661621094 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.661931038 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661950111 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661962986 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661964893 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.661978960 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.661993027 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.661994934 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.662014961 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.662040949 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.662229061 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.662247896 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.662264109 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.662271976 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.662287951 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.662301064 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.662305117 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.662323952 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.662374020 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.662622929 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.662633896 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.662642956 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.662652016 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.662662029 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.662662983 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.662671089 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.662679911 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.662688971 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.662688971 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.662698984 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.662708044 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.662717104 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.662724018 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.662725925 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.662744999 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.662770987 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.663239956 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.663250923 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.663259983 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.663265944 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.663269997 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.663280010 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.663304090 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.663325071 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.665060997 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.667246103 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.667292118 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.669171095 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.704092026 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.704314947 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.704332113 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.704343081 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.704354048 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.704364061 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.704394102 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.704488039 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.704499006 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.704514980 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.704526901 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.704538107 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.704547882 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.704559088 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.704570055 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.704605103 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.704605103 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.704605103 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.705035925 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.705046892 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.705063105 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.705074072 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.705084085 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.705095053 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.705213070 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.705224037 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.705234051 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.705244064 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.705250978 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.705250978 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.705255032 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.705266953 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.705298901 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.705298901 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.705532074 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.705543995 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.705554962 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.705565929 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.705576897 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.706511021 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.713294029 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.713306904 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.713378906 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.874514103 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.881673098 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.882162094 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.886976004 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.891832113 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.910993099 CEST	49710	443	192.168.2.16	18.66.147.95
May 22, 2024 17:26:59.911045074 CEST	443	49710	18.66.147.95	192.168.2.16
May 22, 2024 17:26:59.911130905 CEST	49710	443	192.168.2.16	18.66.147.95
May 22, 2024 17:26:59.911350012 CEST	49710	443	192.168.2.16	18.66.147.95
May 22, 2024 17:26:59.911366940 CEST	443	49710	18.66.147.95	192.168.2.16
May 22, 2024 17:26:59.919452906 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.953016996 CEST	49711	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.953239918 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.964730978 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.964745045 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.964808941 CEST	49711	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.965044022 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.965068102 CEST	49711	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.965101957 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:26:59.970328093 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:26:59.977118015 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.061681986 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.061702013 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.061788082 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.061923027 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.061937094 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.061947107 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.061990023 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.063086033 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.063105106 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.063117981 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.063163042 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.063183069 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.063508987 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.063523054 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.063577890 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.070921898 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.075829983 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.075845003 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.076848030 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.089883089 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.109935045 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.165949106 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.166623116 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.327822924 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.327999115 CEST	49719	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.328109980 CEST	49720	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.328676939 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.331928968 CEST	49721	443	192.168.2.16	172.217.18.4
May 22, 2024 17:27:00.331973076 CEST	443	49721	172.217.18.4	192.168.2.16
May 22, 2024 17:27:00.332037926 CEST	49721	443	192.168.2.16	172.217.18.4
May 22, 2024 17:27:00.332175970 CEST	49722	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.332366943 CEST	49721	443	192.168.2.16	172.217.18.4
May 22, 2024 17:27:00.332376957 CEST	443	49721	172.217.18.4	192.168.2.16
May 22, 2024 17:27:00.358083963 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.358095884 CEST	80	49719	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.358104944 CEST	80	49720	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.358164072 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.358164072 CEST	49719	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.358196974 CEST	49720	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.358407974 CEST	49720	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.358488083 CEST	49719	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.358539104 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.361581087 CEST	80	49722	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.361639977 CEST	49722	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.361793995 CEST	49722	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.371623993 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.375145912 CEST	80	49720	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.375155926 CEST	80	49719	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.381210089 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.382186890 CEST	80	49722	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.579624891 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.579804897 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.579852104 CEST	49711	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.581604004 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.581620932 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.581635952 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.581671000 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.581686974 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.581701040 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.581737041 CEST	49711	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.581737041 CEST	49711	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.581765890 CEST	49711	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.581836939 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.581852913 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.581919909 CEST	49711	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.593147993 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.593166113 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.593632936 CEST	49711	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.594830036 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.595017910 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.595035076 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.595073938 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.595439911 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.595455885 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.595469952 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.595484018 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.595509052 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.595866919 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.595881939 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.595937014 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.596211910 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.596227884 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.596265078 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.600919962 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.601017952 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.601078033 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.603528976 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.603543043 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.603605986 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.660226107 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.670841932 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.670856953 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.670871973 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.670885086 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.670903921 CEST	49711	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.670994043 CEST	49711	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.672175884 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.672200918 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.672219038 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.672233105 CEST	49711	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.672240019 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.672276974 CEST	49711	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.689176083 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.689192057 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.689208031 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.689244986 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.689632893 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.689649105 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.689662933 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.689677000 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.689687014 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.689692020 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.689718008 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.689743042 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.690671921 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.690687895 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.690726995 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.690741062 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.690757990 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.690779924 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.691562891 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.691579103 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.691646099 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.692385912 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.692400932 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.692414999 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.692429066 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.692442894 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.692442894 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.692468882 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.693205118 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.693248987 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.693252087 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.693264008 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.693278074 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.693293095 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.693314075 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.693325996 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.699050903 CEST	443	49710	18.66.147.95	192.168.2.16
May 22, 2024 17:27:00.699289083 CEST	49710	443	192.168.2.16	18.66.147.95
May 22, 2024 17:27:00.699296951 CEST	443	49710	18.66.147.95	192.168.2.16
May 22, 2024 17:27:00.700783014 CEST	443	49710	18.66.147.95	192.168.2.16
May 22, 2024 17:27:00.700853109 CEST	49710	443	192.168.2.16	18.66.147.95
May 22, 2024 17:27:00.701661110 CEST	49710	443	192.168.2.16	18.66.147.95
May 22, 2024 17:27:00.701746941 CEST	443	49710	18.66.147.95	192.168.2.16
May 22, 2024 17:27:00.701807022 CEST	49710	443	192.168.2.16	18.66.147.95
May 22, 2024 17:27:00.723087072 CEST	49711	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.742496967 CEST	443	49710	18.66.147.95	192.168.2.16
May 22, 2024 17:27:00.752605915 CEST	49710	443	192.168.2.16	18.66.147.95
May 22, 2024 17:27:00.752619982 CEST	443	49710	18.66.147.95	192.168.2.16
May 22, 2024 17:27:00.786375999 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.786395073 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.786410093 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.786446095 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.786490917 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.786477089 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.786515951 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.786531925 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.786537886 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.786572933 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.786577940 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.786590099 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.786621094 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.786837101 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.786851883 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.786865950 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.786878109 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.786884069 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.786900043 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.786906958 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.786916018 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.786940098 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.788429976 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.788445950 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.788460016 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.788474083 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.788487911 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.788491964 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.788522959 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.788536072 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.789199114 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.789215088 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.789228916 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.789242983 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.789257050 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.789268017 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.789271116 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.789285898 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.789297104 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.789300919 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.789309978 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.789340019 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.800626993 CEST	49710	443	192.168.2.16	18.66.147.95
May 22, 2024 17:27:00.994003057 CEST	80	49719	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.994019985 CEST	80	49719	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.994046926 CEST	80	49719	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.994072914 CEST	49719	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.994158983 CEST	80	49720	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.994833946 CEST	80	49720	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.994853973 CEST	80	49720	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.994888067 CEST	49720	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.994904995 CEST	80	49720	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.994941950 CEST	49720	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.995023966 CEST	80	49720	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.995044947 CEST	80	49720	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.995084047 CEST	49720	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.995229959 CEST	80	49720	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.995249987 CEST	80	49720	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.995270967 CEST	80	49720	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.995289087 CEST	49720	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:00.995452881 CEST	80	49720	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.995472908 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:00.995498896 CEST	49720	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:01.003753901 CEST	80	49720	52.49.232.14	192.168.2.16
May 22, 2024 17:27:01.009357929 CEST	80	49722	52.49.232.14	192.168.2.16
May 22, 2024 17:27:01.035446882 CEST	443	49721	172.217.18.4	192.168.2.16
May 22, 2024 17:27:01.035693884 CEST	49721	443	192.168.2.16	172.217.18.4
May 22, 2024 17:27:01.035717010 CEST	443	49721	172.217.18.4	192.168.2.16
May 22, 2024 17:27:01.036196947 CEST	443	49721	172.217.18.4	192.168.2.16
May 22, 2024 17:27:01.036539078 CEST	49721	443	192.168.2.16	172.217.18.4
May 22, 2024 17:27:01.036612988 CEST	443	49721	172.217.18.4	192.168.2.16
May 22, 2024 17:27:01.036643028 CEST	49721	443	192.168.2.16	172.217.18.4
May 22, 2024 17:27:01.040601969 CEST	49719	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:01.040601969 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:01.056612015 CEST	49722	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:01.056612015 CEST	49720	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:01.078511000 CEST	443	49721	172.217.18.4	192.168.2.16
May 22, 2024 17:27:01.088582039 CEST	49721	443	192.168.2.16	172.217.18.4
May 22, 2024 17:27:01.422750950 CEST	443	49721	172.217.18.4	192.168.2.16
May 22, 2024 17:27:01.422811985 CEST	443	49721	172.217.18.4	192.168.2.16
May 22, 2024 17:27:01.422869921 CEST	49721	443	192.168.2.16	172.217.18.4
May 22, 2024 17:27:01.422884941 CEST	443	49721	172.217.18.4	192.168.2.16
May 22, 2024 17:27:01.422996044 CEST	443	49721	172.217.18.4	192.168.2.16
May 22, 2024 17:27:01.423041105 CEST	49721	443	192.168.2.16	172.217.18.4
May 22, 2024 17:27:01.428563118 CEST	49721	443	192.168.2.16	172.217.18.4
May 22, 2024 17:27:01.428577900 CEST	443	49721	172.217.18.4	192.168.2.16
May 22, 2024 17:27:01.429352045 CEST	443	49710	18.66.147.95	192.168.2.16
May 22, 2024 17:27:01.435897112 CEST	443	49710	18.66.147.95	192.168.2.16
May 22, 2024 17:27:01.435911894 CEST	443	49710	18.66.147.95	192.168.2.16
May 22, 2024 17:27:01.435942888 CEST	443	49710	18.66.147.95	192.168.2.16
May 22, 2024 17:27:01.435959101 CEST	443	49710	18.66.147.95	192.168.2.16
May 22, 2024 17:27:01.435967922 CEST	443	49710	18.66.147.95	192.168.2.16
May 22, 2024 17:27:01.435985088 CEST	49710	443	192.168.2.16	18.66.147.95
May 22, 2024 17:27:01.435993910 CEST	443	49710	18.66.147.95	192.168.2.16
May 22, 2024 17:27:01.436022997 CEST	443	49710	18.66.147.95	192.168.2.16
May 22, 2024 17:27:01.436049938 CEST	49710	443	192.168.2.16	18.66.147.95
May 22, 2024 17:27:01.436063051 CEST	49710	443	192.168.2.16	18.66.147.95
May 22, 2024 17:27:01.436562061 CEST	443	49710	18.66.147.95	192.168.2.16
May 22, 2024 17:27:01.436616898 CEST	49710	443	192.168.2.16	18.66.147.95
May 22, 2024 17:27:01.436624050 CEST	443	49710	18.66.147.95	192.168.2.16
May 22, 2024 17:27:01.436646938 CEST	443	49710	18.66.147.95	192.168.2.16
May 22, 2024 17:27:01.436688900 CEST	49710	443	192.168.2.16	18.66.147.95
May 22, 2024 17:27:01.436790943 CEST	49710	443	192.168.2.16	18.66.147.95
May 22, 2024 17:27:01.436796904 CEST	443	49710	18.66.147.95	192.168.2.16
May 22, 2024 17:27:01.464982033 CEST	49735	443	192.168.2.16	18.66.147.106
May 22, 2024 17:27:01.465012074 CEST	443	49735	18.66.147.106	192.168.2.16
May 22, 2024 17:27:01.465087891 CEST	49735	443	192.168.2.16	18.66.147.106
May 22, 2024 17:27:01.465302944 CEST	49735	443	192.168.2.16	18.66.147.106
May 22, 2024 17:27:01.465317011 CEST	443	49735	18.66.147.106	192.168.2.16
May 22, 2024 17:27:02.214704990 CEST	443	49735	18.66.147.106	192.168.2.16
May 22, 2024 17:27:02.214962006 CEST	49735	443	192.168.2.16	18.66.147.106
May 22, 2024 17:27:02.214979887 CEST	443	49735	18.66.147.106	192.168.2.16
May 22, 2024 17:27:02.216414928 CEST	443	49735	18.66.147.106	192.168.2.16
May 22, 2024 17:27:02.216509104 CEST	49735	443	192.168.2.16	18.66.147.106
May 22, 2024 17:27:02.216778994 CEST	49735	443	192.168.2.16	18.66.147.106
May 22, 2024 17:27:02.216855049 CEST	443	49735	18.66.147.106	192.168.2.16
May 22, 2024 17:27:02.216906071 CEST	49735	443	192.168.2.16	18.66.147.106
May 22, 2024 17:27:02.233206034 CEST	49738	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:02.233232975 CEST	443	49738	216.58.212.164	192.168.2.16
May 22, 2024 17:27:02.233324051 CEST	49738	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:02.233519077 CEST	49738	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:02.233526945 CEST	443	49738	216.58.212.164	192.168.2.16
May 22, 2024 17:27:02.258492947 CEST	443	49735	18.66.147.106	192.168.2.16
May 22, 2024 17:27:02.267612934 CEST	49735	443	192.168.2.16	18.66.147.106
May 22, 2024 17:27:02.267627001 CEST	443	49735	18.66.147.106	192.168.2.16
May 22, 2024 17:27:02.314732075 CEST	49735	443	192.168.2.16	18.66.147.106
May 22, 2024 17:27:02.503016949 CEST	443	49735	18.66.147.106	192.168.2.16
May 22, 2024 17:27:02.511951923 CEST	443	49735	18.66.147.106	192.168.2.16
May 22, 2024 17:27:02.511962891 CEST	443	49735	18.66.147.106	192.168.2.16
May 22, 2024 17:27:02.511976957 CEST	443	49735	18.66.147.106	192.168.2.16
May 22, 2024 17:27:02.511991024 CEST	443	49735	18.66.147.106	192.168.2.16
May 22, 2024 17:27:02.512002945 CEST	443	49735	18.66.147.106	192.168.2.16
May 22, 2024 17:27:02.512033939 CEST	49735	443	192.168.2.16	18.66.147.106
May 22, 2024 17:27:02.512048006 CEST	443	49735	18.66.147.106	192.168.2.16
May 22, 2024 17:27:02.512068987 CEST	49735	443	192.168.2.16	18.66.147.106
May 22, 2024 17:27:02.512073994 CEST	443	49735	18.66.147.106	192.168.2.16
May 22, 2024 17:27:02.512090921 CEST	49735	443	192.168.2.16	18.66.147.106
May 22, 2024 17:27:02.515958071 CEST	443	49735	18.66.147.106	192.168.2.16
May 22, 2024 17:27:02.516022921 CEST	49735	443	192.168.2.16	18.66.147.106
May 22, 2024 17:27:02.516195059 CEST	49735	443	192.168.2.16	18.66.147.106
May 22, 2024 17:27:02.516210079 CEST	443	49735	18.66.147.106	192.168.2.16
May 22, 2024 17:27:02.891901970 CEST	443	49738	216.58.212.164	192.168.2.16
May 22, 2024 17:27:02.892194033 CEST	49738	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:02.892208099 CEST	443	49738	216.58.212.164	192.168.2.16
May 22, 2024 17:27:02.894149065 CEST	443	49738	216.58.212.164	192.168.2.16
May 22, 2024 17:27:02.894227028 CEST	49738	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:02.894545078 CEST	49738	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:02.894629955 CEST	443	49738	216.58.212.164	192.168.2.16
May 22, 2024 17:27:02.949614048 CEST	49738	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:02.949629068 CEST	443	49738	216.58.212.164	192.168.2.16
May 22, 2024 17:27:02.997579098 CEST	49738	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:03.859232903 CEST	49673	443	192.168.2.16	204.79.197.203
May 22, 2024 17:27:04.162614107 CEST	49673	443	192.168.2.16	204.79.197.203
May 22, 2024 17:27:04.777651072 CEST	49673	443	192.168.2.16	204.79.197.203
May 22, 2024 17:27:05.979710102 CEST	49673	443	192.168.2.16	204.79.197.203
May 22, 2024 17:27:06.415153980 CEST	49688	443	192.168.2.16	2.19.96.89
May 22, 2024 17:27:08.390635014 CEST	49673	443	192.168.2.16	204.79.197.203
May 22, 2024 17:27:08.812876940 CEST	49761	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:08.812927008 CEST	443	49761	52.165.165.26	192.168.2.16
May 22, 2024 17:27:08.813005924 CEST	49761	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:08.814851999 CEST	49761	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:08.814867973 CEST	443	49761	52.165.165.26	192.168.2.16
May 22, 2024 17:27:09.609045029 CEST	443	49761	52.165.165.26	192.168.2.16
May 22, 2024 17:27:09.609193087 CEST	49761	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:09.613939047 CEST	49761	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:09.613955021 CEST	443	49761	52.165.165.26	192.168.2.16
May 22, 2024 17:27:09.614200115 CEST	443	49761	52.165.165.26	192.168.2.16
May 22, 2024 17:27:09.665613890 CEST	49761	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:09.706685066 CEST	49761	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:09.754512072 CEST	443	49761	52.165.165.26	192.168.2.16
May 22, 2024 17:27:09.939456940 CEST	443	49761	52.165.165.26	192.168.2.16
May 22, 2024 17:27:09.939486027 CEST	443	49761	52.165.165.26	192.168.2.16
May 22, 2024 17:27:09.939493895 CEST	443	49761	52.165.165.26	192.168.2.16
May 22, 2024 17:27:09.939516068 CEST	443	49761	52.165.165.26	192.168.2.16
May 22, 2024 17:27:09.939523935 CEST	443	49761	52.165.165.26	192.168.2.16
May 22, 2024 17:27:09.939527035 CEST	443	49761	52.165.165.26	192.168.2.16
May 22, 2024 17:27:09.939605951 CEST	49761	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:09.939634085 CEST	443	49761	52.165.165.26	192.168.2.16
May 22, 2024 17:27:09.939651012 CEST	443	49761	52.165.165.26	192.168.2.16
May 22, 2024 17:27:09.939659119 CEST	49761	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:09.939707994 CEST	443	49761	52.165.165.26	192.168.2.16
May 22, 2024 17:27:09.939707994 CEST	49761	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:09.939757109 CEST	49761	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:09.950911045 CEST	49761	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:09.950941086 CEST	443	49761	52.165.165.26	192.168.2.16
May 22, 2024 17:27:09.950961113 CEST	49761	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:09.950968027 CEST	443	49761	52.165.165.26	192.168.2.16
May 22, 2024 17:27:10.188570023 CEST	49763	443	192.168.2.16	184.28.90.27
May 22, 2024 17:27:10.188613892 CEST	443	49763	184.28.90.27	192.168.2.16
May 22, 2024 17:27:10.188710928 CEST	49763	443	192.168.2.16	184.28.90.27
May 22, 2024 17:27:10.189989090 CEST	49763	443	192.168.2.16	184.28.90.27
May 22, 2024 17:27:10.190002918 CEST	443	49763	184.28.90.27	192.168.2.16
May 22, 2024 17:27:10.867613077 CEST	443	49763	184.28.90.27	192.168.2.16
May 22, 2024 17:27:10.867702007 CEST	49763	443	192.168.2.16	184.28.90.27
May 22, 2024 17:27:10.897891045 CEST	49763	443	192.168.2.16	184.28.90.27
May 22, 2024 17:27:10.897917986 CEST	443	49763	184.28.90.27	192.168.2.16
May 22, 2024 17:27:10.898216009 CEST	443	49763	184.28.90.27	192.168.2.16
May 22, 2024 17:27:10.950841904 CEST	49763	443	192.168.2.16	184.28.90.27
May 22, 2024 17:27:10.994273901 CEST	49763	443	192.168.2.16	184.28.90.27
May 22, 2024 17:27:11.038501978 CEST	443	49763	184.28.90.27	192.168.2.16
May 22, 2024 17:27:11.196141005 CEST	443	49763	184.28.90.27	192.168.2.16
May 22, 2024 17:27:11.196233988 CEST	443	49763	184.28.90.27	192.168.2.16
May 22, 2024 17:27:11.196290016 CEST	49763	443	192.168.2.16	184.28.90.27
May 22, 2024 17:27:11.196407080 CEST	49763	443	192.168.2.16	184.28.90.27
May 22, 2024 17:27:11.196425915 CEST	443	49763	184.28.90.27	192.168.2.16
May 22, 2024 17:27:11.196440935 CEST	49763	443	192.168.2.16	184.28.90.27
May 22, 2024 17:27:11.196448088 CEST	443	49763	184.28.90.27	192.168.2.16
May 22, 2024 17:27:11.238816023 CEST	49764	443	192.168.2.16	184.28.90.27
May 22, 2024 17:27:11.238864899 CEST	443	49764	184.28.90.27	192.168.2.16
May 22, 2024 17:27:11.238949060 CEST	49764	443	192.168.2.16	184.28.90.27
May 22, 2024 17:27:11.239356041 CEST	49764	443	192.168.2.16	184.28.90.27
May 22, 2024 17:27:11.239368916 CEST	443	49764	184.28.90.27	192.168.2.16
May 22, 2024 17:27:11.927592993 CEST	443	49764	184.28.90.27	192.168.2.16
May 22, 2024 17:27:11.927675009 CEST	49764	443	192.168.2.16	184.28.90.27
May 22, 2024 17:27:11.928920984 CEST	49764	443	192.168.2.16	184.28.90.27
May 22, 2024 17:27:11.928934097 CEST	443	49764	184.28.90.27	192.168.2.16
May 22, 2024 17:27:11.929224968 CEST	443	49764	184.28.90.27	192.168.2.16
May 22, 2024 17:27:11.930356026 CEST	49764	443	192.168.2.16	184.28.90.27
May 22, 2024 17:27:11.970542908 CEST	443	49764	184.28.90.27	192.168.2.16
May 22, 2024 17:27:12.029381990 CEST	49678	443	192.168.2.16	20.189.173.10
May 22, 2024 17:27:12.211508036 CEST	443	49764	184.28.90.27	192.168.2.16
May 22, 2024 17:27:12.211622000 CEST	443	49764	184.28.90.27	192.168.2.16
May 22, 2024 17:27:12.211813927 CEST	49764	443	192.168.2.16	184.28.90.27
May 22, 2024 17:27:12.212399960 CEST	49764	443	192.168.2.16	184.28.90.27
May 22, 2024 17:27:12.212423086 CEST	443	49764	184.28.90.27	192.168.2.16
May 22, 2024 17:27:12.212433100 CEST	49764	443	192.168.2.16	184.28.90.27
May 22, 2024 17:27:12.212440014 CEST	443	49764	184.28.90.27	192.168.2.16
May 22, 2024 17:27:12.345438957 CEST	49678	443	192.168.2.16	20.189.173.10
May 22, 2024 17:27:12.807476997 CEST	443	49738	216.58.212.164	192.168.2.16
May 22, 2024 17:27:12.807549953 CEST	443	49738	216.58.212.164	192.168.2.16
May 22, 2024 17:27:12.807615995 CEST	49738	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:12.949630976 CEST	49678	443	192.168.2.16	20.189.173.10
May 22, 2024 17:27:13.204710960 CEST	49673	443	192.168.2.16	204.79.197.203
May 22, 2024 17:27:13.771368980 CEST	49738	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:13.771398067 CEST	443	49738	216.58.212.164	192.168.2.16
May 22, 2024 17:27:14.152623892 CEST	49678	443	192.168.2.16	20.189.173.10
May 22, 2024 17:27:16.499062061 CEST	49680	80	192.168.2.16	192.229.211.108
May 22, 2024 17:27:16.562750101 CEST	49678	443	192.168.2.16	20.189.173.10
May 22, 2024 17:27:16.802898884 CEST	49680	80	192.168.2.16	192.229.211.108
May 22, 2024 17:27:17.409719944 CEST	49680	80	192.168.2.16	192.229.211.108
May 22, 2024 17:27:18.621671915 CEST	49680	80	192.168.2.16	192.229.211.108
May 22, 2024 17:27:21.031672001 CEST	49680	80	192.168.2.16	192.229.211.108
May 22, 2024 17:27:21.366638899 CEST	49678	443	192.168.2.16	20.189.173.10
May 22, 2024 17:27:22.817630053 CEST	49673	443	192.168.2.16	204.79.197.203
May 22, 2024 17:27:23.062479019 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.069250107 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.317945004 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.336296082 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.371606112 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.399588108 CEST	49711	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.400511026 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.400511026 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.419919968 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.429996014 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.430030107 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.533503056 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.533562899 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.533682108 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.533826113 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.534117937 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.534259081 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.534567118 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.534604073 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.534638882 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.534902096 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.535402060 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.535465002 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.536205053 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.536242008 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.536293030 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.580049038 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.580267906 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.580301046 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.580346107 CEST	49711	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.581098080 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.587059021 CEST	49722	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.587095976 CEST	49720	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.589261055 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.589293957 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.589335918 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.589431047 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.589574099 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.589848995 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.589880943 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.589905024 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.589914083 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.589946985 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.589982986 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.590559006 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.590634108 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.590637922 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.590904951 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.590938091 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.590949059 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.595360041 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.595738888 CEST	80	49722	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.595769882 CEST	80	49720	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.600511074 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.605369091 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.630671978 CEST	49711	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.647167921 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.773305893 CEST	80	49720	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.774127007 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.774173021 CEST	80	49722	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.775266886 CEST	80	49722	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.775278091 CEST	80	49722	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.775337934 CEST	49722	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.775396109 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.775612116 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.775654078 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.775890112 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.775901079 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.775911093 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.775921106 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.775939941 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.775964975 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.776588917 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.776611090 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.776619911 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.776690006 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.778125048 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.778182983 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.788184881 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.811022043 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:23.817425013 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:23.817447901 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:23.817589045 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:23.817765951 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:23.817784071 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:23.820617914 CEST	49720	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.821244001 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:23.988320112 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:24.043687105 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:24.496392012 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.496736050 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.496757030 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.497638941 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.497704029 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.498044968 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.498102903 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.498454094 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.498466015 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.538687944 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.810794115 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.811131001 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.811180115 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.811198950 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.812165976 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.812212944 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.812223911 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.816418886 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.816483021 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.816492081 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.821059942 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.821135998 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.821146965 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.832384109 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.832416058 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.832457066 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.832470894 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.832505941 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.907612085 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.908355951 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.908417940 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.908442020 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.934197903 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.934273005 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.934300900 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.936038971 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.936091900 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.936156034 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.936187029 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.936225891 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.937870979 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.939467907 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.939522028 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.939538956 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.942687988 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.942744017 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.942748070 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.942758083 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.942792892 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.942800999 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.944977999 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.945024967 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.945048094 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.945056915 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.945122957 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.951708078 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.953452110 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.953495026 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.953519106 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.953541040 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.953594923 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.958648920 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.971261024 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.971333027 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.971357107 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.998425961 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:24.998523951 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:24.998550892 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:25.010437012 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:25.010497093 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:25.010587931 CEST	49770	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:25.010603905 CEST	443	49770	216.58.212.164	192.168.2.16
May 22, 2024 17:27:25.843806028 CEST	49680	80	192.168.2.16	192.229.211.108
May 22, 2024 17:27:26.400285006 CEST	49777	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:26.400326967 CEST	443	49777	216.58.212.164	192.168.2.16
May 22, 2024 17:27:26.400434971 CEST	49777	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:26.400650024 CEST	49777	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:26.400669098 CEST	443	49777	216.58.212.164	192.168.2.16
May 22, 2024 17:27:26.441713095 CEST	49779	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:26.441760063 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:26.441867113 CEST	49779	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:26.442581892 CEST	49779	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:26.442614079 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.073879004 CEST	443	49777	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.074239969 CEST	49777	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.074258089 CEST	443	49777	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.075367928 CEST	443	49777	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.075689077 CEST	49777	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.075824976 CEST	49777	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.075831890 CEST	443	49777	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.075859070 CEST	443	49777	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.117033005 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.117479086 CEST	49779	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.117543936 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.117916107 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.118242979 CEST	49779	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.118315935 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.118356943 CEST	49779	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.120646954 CEST	49777	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.158500910 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.168656111 CEST	49779	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.373653889 CEST	443	49777	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.374147892 CEST	443	49777	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.374217987 CEST	49777	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.374444962 CEST	49777	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.374470949 CEST	443	49777	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.395064116 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.395134926 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.395220041 CEST	49779	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.395282984 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.395338058 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.395385027 CEST	49779	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.395401955 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.399439096 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.399511099 CEST	49779	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.399518967 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.400410891 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.400475979 CEST	49779	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.400481939 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.416029930 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.416135073 CEST	49779	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.416142941 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.422514915 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.422626019 CEST	49779	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.422631979 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.471716881 CEST	49779	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.512140989 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.512279987 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.512326956 CEST	49779	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.513089895 CEST	49779	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.513103962 CEST	443	49779	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.563958883 CEST	49783	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.564008951 CEST	443	49783	216.58.212.164	192.168.2.16
May 22, 2024 17:27:27.564105988 CEST	49783	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.564356089 CEST	49783	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:27.564373016 CEST	443	49783	216.58.212.164	192.168.2.16
May 22, 2024 17:27:28.253758907 CEST	443	49783	216.58.212.164	192.168.2.16
May 22, 2024 17:27:28.254172087 CEST	49783	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:28.254195929 CEST	443	49783	216.58.212.164	192.168.2.16
May 22, 2024 17:27:28.255353928 CEST	443	49783	216.58.212.164	192.168.2.16
May 22, 2024 17:27:28.255759001 CEST	49783	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:28.255925894 CEST	49783	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:28.255937099 CEST	443	49783	216.58.212.164	192.168.2.16
May 22, 2024 17:27:28.297637939 CEST	49783	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:28.297648907 CEST	443	49783	216.58.212.164	192.168.2.16
May 22, 2024 17:27:28.572747946 CEST	443	49783	216.58.212.164	192.168.2.16
May 22, 2024 17:27:28.573563099 CEST	443	49783	216.58.212.164	192.168.2.16
May 22, 2024 17:27:28.573651075 CEST	49783	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:28.573679924 CEST	443	49783	216.58.212.164	192.168.2.16
May 22, 2024 17:27:28.576478004 CEST	443	49783	216.58.212.164	192.168.2.16
May 22, 2024 17:27:28.576558113 CEST	49783	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:28.576566935 CEST	443	49783	216.58.212.164	192.168.2.16
May 22, 2024 17:27:28.578751087 CEST	443	49783	216.58.212.164	192.168.2.16
May 22, 2024 17:27:28.578828096 CEST	49783	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:28.578835011 CEST	443	49783	216.58.212.164	192.168.2.16
May 22, 2024 17:27:28.579139948 CEST	443	49783	216.58.212.164	192.168.2.16
May 22, 2024 17:27:28.579207897 CEST	49783	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:28.579585075 CEST	49783	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:28.579600096 CEST	443	49783	216.58.212.164	192.168.2.16
May 22, 2024 17:27:28.645654917 CEST	49784	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:28.645723104 CEST	443	49784	216.58.212.164	192.168.2.16
May 22, 2024 17:27:28.645832062 CEST	49784	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:28.646107912 CEST	49784	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:28.646141052 CEST	443	49784	216.58.212.164	192.168.2.16
May 22, 2024 17:27:29.420304060 CEST	443	49784	216.58.212.164	192.168.2.16
May 22, 2024 17:27:29.420732021 CEST	49784	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:29.420753956 CEST	443	49784	216.58.212.164	192.168.2.16
May 22, 2024 17:27:29.421042919 CEST	443	49784	216.58.212.164	192.168.2.16
May 22, 2024 17:27:29.421353102 CEST	49784	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:29.421408892 CEST	443	49784	216.58.212.164	192.168.2.16
May 22, 2024 17:27:29.421489954 CEST	49784	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:29.421533108 CEST	49784	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:29.421552896 CEST	443	49784	216.58.212.164	192.168.2.16
May 22, 2024 17:27:29.577142954 CEST	49784	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:29.577244043 CEST	443	49784	216.58.212.164	192.168.2.16
May 22, 2024 17:27:29.577322960 CEST	49784	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:29.589572906 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:29.589608908 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:29.589673996 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:29.589916945 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:29.589930058 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.302294970 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.302719116 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.302756071 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.303631067 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.303740978 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.304002047 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.304052114 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.304140091 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.304145098 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.345711946 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.613526106 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.615061045 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.615088940 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.615191936 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.615217924 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.615259886 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.620022058 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.621507883 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.621572971 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.621587038 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.626569986 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.626653910 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.626661062 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.637460947 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.637593031 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.637614012 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.640685081 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.640758991 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.640767097 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.695688963 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.708867073 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.709392071 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.709424019 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.709466934 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.709486008 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.709534883 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.710922003 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.713722944 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.713792086 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.713805914 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.717184067 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.717278957 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.717289925 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.722006083 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.722081900 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.722099066 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.726777077 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.726835966 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.726855040 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.733918905 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.733999968 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.734014034 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.745068073 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.745234013 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.745244980 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.749087095 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.749159098 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.749166012 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.752509117 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.752541065 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.752568007 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.752578020 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.752629042 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.757352114 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.762525082 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.762631893 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.762643099 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.763483047 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.763537884 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.763545036 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.763624907 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.763669968 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.763885021 CEST	49785	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:30.763887882 CEST	443	49785	216.58.212.164	192.168.2.16
May 22, 2024 17:27:30.981728077 CEST	49678	443	192.168.2.16	20.189.173.10
May 22, 2024 17:27:31.022866011 CEST	49787	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:31.022910118 CEST	443	49787	216.58.212.164	192.168.2.16
May 22, 2024 17:27:31.023025990 CEST	49787	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:31.023322105 CEST	49787	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:31.023336887 CEST	443	49787	216.58.212.164	192.168.2.16
May 22, 2024 17:27:31.996340036 CEST	443	49787	216.58.212.164	192.168.2.16
May 22, 2024 17:27:31.996711016 CEST	49787	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:31.996731997 CEST	443	49787	216.58.212.164	192.168.2.16
May 22, 2024 17:27:31.997018099 CEST	443	49787	216.58.212.164	192.168.2.16
May 22, 2024 17:27:31.997405052 CEST	49787	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:31.997459888 CEST	443	49787	216.58.212.164	192.168.2.16
May 22, 2024 17:27:31.997569084 CEST	49787	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:32.038496017 CEST	443	49787	216.58.212.164	192.168.2.16
May 22, 2024 17:27:32.296885014 CEST	443	49787	216.58.212.164	192.168.2.16
May 22, 2024 17:27:32.298585892 CEST	443	49787	216.58.212.164	192.168.2.16
May 22, 2024 17:27:32.298686981 CEST	49787	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:32.298751116 CEST	443	49787	216.58.212.164	192.168.2.16
May 22, 2024 17:27:32.303841114 CEST	443	49787	216.58.212.164	192.168.2.16
May 22, 2024 17:27:32.303953886 CEST	49787	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:32.303970098 CEST	443	49787	216.58.212.164	192.168.2.16
May 22, 2024 17:27:32.307590961 CEST	443	49787	216.58.212.164	192.168.2.16
May 22, 2024 17:27:32.307662964 CEST	49787	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:32.307674885 CEST	443	49787	216.58.212.164	192.168.2.16
May 22, 2024 17:27:32.307744026 CEST	443	49787	216.58.212.164	192.168.2.16
May 22, 2024 17:27:32.307805061 CEST	49787	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:32.307831049 CEST	443	49787	216.58.212.164	192.168.2.16
May 22, 2024 17:27:32.307857990 CEST	49787	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:32.307857990 CEST	49787	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:32.307904005 CEST	49787	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:32.338618994 CEST	49788	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:32.338655949 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:32.338762045 CEST	49788	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:32.339049101 CEST	49788	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:32.339063883 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.049740076 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.050118923 CEST	49788	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:33.050148010 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.050471067 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.050782919 CEST	49788	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:33.050843954 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.050920010 CEST	49788	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:33.051002026 CEST	49788	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:33.051029921 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.374708891 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.374758959 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.374804020 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.374865055 CEST	49788	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:33.374890089 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.374937057 CEST	49788	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:33.376305103 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.378401041 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.378489971 CEST	49788	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:33.378504992 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.382497072 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.382558107 CEST	49788	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:33.382569075 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.384182930 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.384244919 CEST	49788	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:33.384258032 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.430666924 CEST	49788	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:33.430695057 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.451883078 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.451988935 CEST	49788	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:33.452008963 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.461590052 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.461664915 CEST	49788	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:33.461675882 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.461743116 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.461786985 CEST	49788	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:33.461826086 CEST	49788	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:33.461842060 CEST	443	49788	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.473206997 CEST	49789	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:33.473234892 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.473319054 CEST	49789	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:33.473623037 CEST	49789	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:33.473632097 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:33.488842010 CEST	49790	443	192.168.2.16	142.250.186.68
May 22, 2024 17:27:33.488853931 CEST	443	49790	142.250.186.68	192.168.2.16
May 22, 2024 17:27:33.488926888 CEST	49790	443	192.168.2.16	142.250.186.68
May 22, 2024 17:27:33.489120007 CEST	49790	443	192.168.2.16	142.250.186.68
May 22, 2024 17:27:33.489125967 CEST	443	49790	142.250.186.68	192.168.2.16
May 22, 2024 17:27:34.260163069 CEST	443	49790	142.250.186.68	192.168.2.16
May 22, 2024 17:27:34.260602951 CEST	49790	443	192.168.2.16	142.250.186.68
May 22, 2024 17:27:34.260612965 CEST	443	49790	142.250.186.68	192.168.2.16
May 22, 2024 17:27:34.262056112 CEST	443	49790	142.250.186.68	192.168.2.16
May 22, 2024 17:27:34.262130976 CEST	49790	443	192.168.2.16	142.250.186.68
May 22, 2024 17:27:34.262535095 CEST	49790	443	192.168.2.16	142.250.186.68
May 22, 2024 17:27:34.262619972 CEST	443	49790	142.250.186.68	192.168.2.16
May 22, 2024 17:27:34.262721062 CEST	49790	443	192.168.2.16	142.250.186.68
May 22, 2024 17:27:34.262727022 CEST	443	49790	142.250.186.68	192.168.2.16
May 22, 2024 17:27:34.291251898 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:34.291538000 CEST	49789	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:34.291548014 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:34.292021990 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:34.292356014 CEST	49789	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:34.292413950 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:34.292474031 CEST	49789	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:34.307702065 CEST	49790	443	192.168.2.16	142.250.186.68
May 22, 2024 17:27:34.338500023 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:34.811436892 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:34.811475992 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:34.811528921 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:34.811583042 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:34.811594009 CEST	49789	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:34.811600924 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:34.811610937 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:34.811639071 CEST	49789	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:34.811639071 CEST	443	49790	142.250.186.68	192.168.2.16
May 22, 2024 17:27:34.811652899 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:34.811666012 CEST	49789	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:34.811671972 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:34.811718941 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:34.811732054 CEST	49789	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:34.811737061 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:34.811786890 CEST	49789	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:34.811938047 CEST	443	49790	142.250.186.68	192.168.2.16
May 22, 2024 17:27:34.812001944 CEST	49790	443	192.168.2.16	142.250.186.68
May 22, 2024 17:27:34.813024044 CEST	49790	443	192.168.2.16	142.250.186.68
May 22, 2024 17:27:34.813040018 CEST	443	49790	142.250.186.68	192.168.2.16
May 22, 2024 17:27:34.819492102 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:34.819571972 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:34.819629908 CEST	49789	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:34.819633961 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:34.819680929 CEST	49789	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:34.819945097 CEST	49789	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:34.819952011 CEST	443	49789	216.58.212.164	192.168.2.16
May 22, 2024 17:27:34.830754995 CEST	49791	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:34.830771923 CEST	443	49791	216.58.212.164	192.168.2.16
May 22, 2024 17:27:34.830852985 CEST	49791	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:34.831053019 CEST	49791	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:34.831059933 CEST	443	49791	216.58.212.164	192.168.2.16
May 22, 2024 17:27:35.454647064 CEST	49680	80	192.168.2.16	192.229.211.108
May 22, 2024 17:27:35.549046040 CEST	443	49791	216.58.212.164	192.168.2.16
May 22, 2024 17:27:35.549395084 CEST	49791	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:35.549407005 CEST	443	49791	216.58.212.164	192.168.2.16
May 22, 2024 17:27:35.549690008 CEST	443	49791	216.58.212.164	192.168.2.16
May 22, 2024 17:27:35.550010920 CEST	49791	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:35.550062895 CEST	443	49791	216.58.212.164	192.168.2.16
May 22, 2024 17:27:35.550152063 CEST	49791	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:35.550199986 CEST	49791	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:35.550220013 CEST	443	49791	216.58.212.164	192.168.2.16
May 22, 2024 17:27:35.780386925 CEST	443	49791	216.58.212.164	192.168.2.16
May 22, 2024 17:27:35.784974098 CEST	443	49791	216.58.212.164	192.168.2.16
May 22, 2024 17:27:35.785044909 CEST	49791	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:35.785151958 CEST	49791	443	192.168.2.16	216.58.212.164
May 22, 2024 17:27:35.785160065 CEST	443	49791	216.58.212.164	192.168.2.16
May 22, 2024 17:27:35.787187099 CEST	49792	443	192.168.2.16	142.250.186.68
May 22, 2024 17:27:35.787205935 CEST	443	49792	142.250.186.68	192.168.2.16
May 22, 2024 17:27:35.787342072 CEST	49792	443	192.168.2.16	142.250.186.68
May 22, 2024 17:27:35.787558079 CEST	49792	443	192.168.2.16	142.250.186.68
May 22, 2024 17:27:35.787575006 CEST	443	49792	142.250.186.68	192.168.2.16
May 22, 2024 17:27:35.791786909 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:35.791831017 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:35.801567078 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:27:35.803323984 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:27:35.803334951 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:27:36.128293037 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:27:36.131190062 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:36.131891012 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:36.136878967 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:36.140520096 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:27:36.311877966 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:36.316692114 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:27:36.319583893 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:36.330101013 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:36.363724947 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:36.457231998 CEST	443	49792	142.250.186.68	192.168.2.16
May 22, 2024 17:27:36.457839966 CEST	49792	443	192.168.2.16	142.250.186.68
May 22, 2024 17:27:36.457855940 CEST	443	49792	142.250.186.68	192.168.2.16
May 22, 2024 17:27:36.458148003 CEST	443	49792	142.250.186.68	192.168.2.16
May 22, 2024 17:27:36.458470106 CEST	49792	443	192.168.2.16	142.250.186.68
May 22, 2024 17:27:36.458544970 CEST	443	49792	142.250.186.68	192.168.2.16
May 22, 2024 17:27:36.458594084 CEST	49792	443	192.168.2.16	142.250.186.68
May 22, 2024 17:27:36.503386974 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:36.506494045 CEST	443	49792	142.250.186.68	192.168.2.16
May 22, 2024 17:27:36.507653952 CEST	49792	443	192.168.2.16	142.250.186.68
May 22, 2024 17:27:36.555701017 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:36.745527983 CEST	443	49792	142.250.186.68	192.168.2.16
May 22, 2024 17:27:36.745560884 CEST	443	49792	142.250.186.68	192.168.2.16
May 22, 2024 17:27:36.745646000 CEST	49792	443	192.168.2.16	142.250.186.68
May 22, 2024 17:27:36.745661974 CEST	443	49792	142.250.186.68	192.168.2.16
May 22, 2024 17:27:36.745672941 CEST	443	49792	142.250.186.68	192.168.2.16
May 22, 2024 17:27:36.745771885 CEST	49792	443	192.168.2.16	142.250.186.68
May 22, 2024 17:27:36.746243954 CEST	49792	443	192.168.2.16	142.250.186.68
May 22, 2024 17:27:36.746259928 CEST	443	49792	142.250.186.68	192.168.2.16
May 22, 2024 17:27:41.032330990 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.037556887 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.037652016 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.066435099 CEST	49805	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.068691015 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.097093105 CEST	80	49805	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.097110987 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.097328901 CEST	49805	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.685300112 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.686840057 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.686930895 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.690310955 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.693834066 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.693912029 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.693929911 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.693929911 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.694015026 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.700731993 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.705080986 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.705111027 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.705174923 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.711179972 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.711199045 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.711215019 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.711266041 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.711291075 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.715437889 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.715455055 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.715528011 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.774904013 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.775697947 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.775798082 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.777546883 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.779334068 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.779351950 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.779408932 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.781174898 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.781193018 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.781255007 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.784810066 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.784887075 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.786638021 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.786654949 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.786711931 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.790276051 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.790293932 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.790355921 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.793191910 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.793210030 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.793226004 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.793282986 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.796227932 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.796260118 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.796308041 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.799030066 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.799113989 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.800013065 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.800039053 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.800107002 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.802531004 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.803893089 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.803915024 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.803960085 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.808938980 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.808964014 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.808998108 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.859683990 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.866909981 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.867623091 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.867686033 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.869174957 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.870798111 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.870815992 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.870857954 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.873832941 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.873919010 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.875431061 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.875448942 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.875524998 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.878519058 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.878536940 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.878612995 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.881654024 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.881695986 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.881711960 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.881783962 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.884119987 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.884136915 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.884183884 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.886595011 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.886614084 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.886666059 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.889081001 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.889101028 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.889146090 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.892544985 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.892561913 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.892577887 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.892653942 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.892687082 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.894048929 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.894066095 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.894134045 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.896392107 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.896410942 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.896482944 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.898768902 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.898787975 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.898848057 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.901133060 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.901150942 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.901210070 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.903584957 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.903601885 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.903619051 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.903635979 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.903660059 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.903691053 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.956404924 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.957072973 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.957124949 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.958127975 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.959367990 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.959386110 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.959429979 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.960539103 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.960555077 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.960604906 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.962992907 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.963049889 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.964176893 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.964195013 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.964252949 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.966543913 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.966562033 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.966631889 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.969028950 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.969047070 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.969063044 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.969093084 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.970926046 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.970942974 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.971097946 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.972841024 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.972857952 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.972897053 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.974777937 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.974796057 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.974827051 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.976737976 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.976763010 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.976778984 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.976799011 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.976830959 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.978666067 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.978683949 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.978735924 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.980370045 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.980386019 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.980428934 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.982125044 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.982142925 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.982242107 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.983869076 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.983891010 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.983938932 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.985565901 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.985586882 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.985603094 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.985670090 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.987217903 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.987236977 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.987282991 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.988763094 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.988780022 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.988816977 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.990304947 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.990323067 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.990365028 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.991770983 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.991787910 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.991802931 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:41.991826057 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:41.991838932 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.059534073 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.059880972 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.060079098 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.060679913 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.061484098 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.061502934 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.061553955 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.063071966 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.063091993 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.063133955 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.064699888 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.064718962 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.064764977 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.066288948 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.066308022 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.066359043 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.067145109 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.067163944 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.067205906 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.068794966 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.068814039 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.068866014 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.070363045 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.070380926 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.070436001 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.071592093 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.071610928 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.071652889 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.072890043 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.072910070 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.072928905 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.072949886 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.072981119 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.074279070 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.074296951 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.074351072 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.075537920 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.075556040 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.075633049 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.076749086 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.076769114 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.076900959 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.078020096 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.078038931 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.078056097 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.078090906 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.079310894 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.079329014 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.079390049 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.080617905 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.080636978 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.080719948 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.081808090 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.081825972 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.081866980 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.082981110 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.082999945 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.083054066 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.084100008 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.084119081 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.084135056 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.084178925 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.084220886 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.085233927 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.086375952 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.086394072 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.086433887 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.087343931 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.087363005 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.087412119 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.088382959 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.088402033 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.088417053 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.088444948 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.088469982 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.089418888 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.089437008 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.089504004 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.139142990 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.139339924 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.139426947 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.139900923 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.140520096 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.140589952 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.141072989 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.141091108 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.141156912 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.142230988 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.142714024 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.142733097 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.142776966 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.143794060 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.143812895 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.143860102 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.144359112 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.144376993 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.144421101 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.145659924 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.145677090 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.145718098 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.146661997 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.146681070 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.146737099 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.147475004 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.147494078 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.147537947 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.148560047 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.148581028 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.148598909 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.148638964 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.148669004 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.149250031 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.149269104 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.149324894 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.150144100 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.150162935 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.150221109 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.151010990 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.151029110 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.151084900 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.151961088 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.151978016 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.151993990 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.152039051 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.152811050 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.152827978 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.152944088 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.153701067 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.153716087 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.153758049 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.154540062 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.154556990 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.154649019 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.155493975 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.155509949 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.155565977 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.156114101 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.156131029 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.156146049 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.156174898 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.156204939 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.156924963 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.156939983 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.157015085 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.157869101 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.157885075 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.158014059 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.158550978 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.158569098 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.158638954 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.159465075 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.159482002 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.159497976 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.159547091 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.160012007 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.160027981 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.160069942 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.160669088 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.160686016 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.160727978 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.161360979 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.161382914 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.161427021 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.162102938 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.162133932 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.162162066 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.162859917 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.162878990 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.162931919 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.163685083 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.163702011 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.163717985 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.163746119 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.163772106 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.164166927 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.164186001 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.164252043 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.165613890 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.165632010 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.165647030 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.165663004 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.165678978 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.165684938 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.165713072 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.167411089 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.167428017 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.167442083 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.167474031 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.167495966 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.167503119 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.167520046 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.167536020 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.167567015 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.168178082 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.168194056 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.168243885 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.168807030 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.168823957 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.168860912 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.169429064 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.169445038 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.169461012 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.169497967 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.169529915 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.170058012 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.170073986 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.170094013 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.170144081 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.170965910 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.170984030 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.171026945 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.171569109 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.171585083 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.171644926 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.172215939 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.172234058 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.172249079 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.172266960 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.172276974 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.172312021 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.172967911 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.173027039 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.173224926 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.225678921 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.263171911 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.263192892 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.263207912 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.263273001 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.263288975 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.263303995 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.263539076 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.263539076 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.264492035 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.264508963 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.264524937 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.264571905 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.267813921 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.267832041 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.267848015 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.267863035 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.267879009 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.267879009 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.267894030 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.267910957 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.267925024 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.267926931 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.267954111 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.267954111 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.267957926 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.267972946 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.268002033 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.268829107 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.268845081 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.268858910 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.268876076 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.268887043 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.268919945 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.270803928 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.270818949 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.270833969 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.270865917 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.270898104 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.270934105 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.270950079 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.270965099 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.270996094 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.271265984 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.271281958 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.271297932 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.271313906 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.271316051 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.271336079 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.271976948 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.271994114 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.272010088 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.272026062 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.272032022 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.272054911 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.273796082 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.273850918 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.274002075 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.274018049 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.274032116 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.274050951 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.274066925 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.274066925 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.274082899 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.274099112 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.274142027 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.274142981 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.274159908 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.274207115 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.276952982 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.276968956 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.276983976 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.277031898 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.277071953 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.277089119 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.277106047 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.277122021 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.277122974 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.277139902 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.277153015 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.277199030 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.277431011 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.277446985 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.277461052 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.277506113 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.278131962 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.278148890 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.278163910 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.278182030 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.278187990 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.278217077 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.279005051 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.279021025 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.279035091 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.279064894 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.279095888 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.279870033 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.280023098 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.280040026 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.280076027 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.280858994 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.280874968 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.280925035 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.284132957 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.284149885 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.284164906 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.284203053 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.284231901 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.284312963 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.284329891 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.284347057 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.284379005 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.284854889 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.284872055 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.284914970 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.285034895 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.285051107 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.285067081 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.285084009 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.285115957 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.285881996 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.285900116 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.285914898 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.285955906 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.286732912 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.286758900 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.286806107 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.287224054 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.287240028 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.287255049 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.287283897 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.287316084 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.287390947 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.288089037 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.288105965 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.288121939 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.288152933 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.288182974 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.288906097 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.289083958 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.289099932 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.289134979 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.289799929 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.289815903 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.289834023 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.289849997 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.289855957 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.289901018 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.290256977 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.290272951 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.290288925 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.290314913 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.290345907 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.291239023 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.291254997 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.291270971 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.291320086 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.315881968 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.316042900 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.316107035 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.316279888 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.316330910 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.316613913 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.316629887 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.316646099 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.316709995 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.317445993 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.317461967 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.317476988 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.317503929 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.317532063 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.318316936 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.318334103 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.318348885 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.318366051 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.318425894 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.319169044 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.319185972 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.319221973 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.319237947 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.319264889 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.319295883 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.320092916 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.320112944 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.320122004 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.320199966 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.320885897 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.320904016 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.320919037 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.320941925 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.320971012 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.321758986 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.321775913 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.321790934 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.321806908 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.321842909 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.321871042 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.322642088 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.322659016 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.322674990 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.322715998 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.323468924 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.323486090 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.323501110 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.323525906 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.323555946 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.324325085 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.324342012 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.324357033 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.324373007 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.324394941 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.324423075 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.325165987 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.325182915 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.325197935 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.325216055 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.325236082 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.325264931 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.326024055 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.326040983 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.326055050 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.326107979 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.326895952 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.326911926 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.326926947 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.326952934 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.326988935 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.327743053 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.327759981 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.327775002 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.327792883 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.327824116 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.327852964 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.328457117 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.328473091 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.328488111 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.328504086 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.328527927 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.328557968 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.329382896 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.329400063 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.329415083 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.329431057 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.329446077 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.329471111 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.329499960 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.330271959 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.330287933 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.330305099 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.330322027 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.330332041 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.330368042 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.331134081 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.331150055 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.331165075 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.331182003 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.331198931 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.331232071 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.331969976 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.331986904 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.332003117 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.332019091 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.332029104 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.332035065 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.332066059 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.332093954 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.333985090 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.334002018 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.334016085 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.334033012 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.334048986 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.334063053 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.334064960 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.334080935 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.334081888 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.334100962 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.334116936 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.334117889 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.334158897 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.334511995 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.334528923 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.334543943 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.334559917 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.334561110 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.334587097 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.335386992 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.335403919 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.335418940 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.335434914 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.335443974 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.335452080 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.335463047 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.335496902 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.336230040 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.336246014 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.336263895 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.336280107 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.336294889 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.336327076 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.337064028 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.337080002 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.337095976 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.337115049 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.337126017 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.337131023 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.337158918 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.337949991 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.337965965 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.337980986 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.337997913 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.338005066 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.338033915 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.338665962 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.338682890 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.338699102 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.338715076 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.338721037 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.338748932 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.385824919 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.826579094 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.826616049 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.826632977 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.826648951 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.826663971 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.826680899 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.826695919 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.826710939 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.826726913 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.826868057 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.826869011 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.826869011 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.827191114 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.827280045 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.827296019 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.827311993 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.827320099 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.827327013 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.827334881 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.827374935 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.827647924 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.827663898 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.827678919 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.827696085 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.827712059 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.827718973 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.827749014 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.828489065 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.828505993 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.828524113 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.828540087 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.828546047 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.828567028 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.829379082 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.829396009 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.829411983 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.829427958 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.829440117 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.829444885 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.829473019 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.829502106 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.830189943 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.830207109 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.830221891 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.830240011 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.830267906 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.830301046 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.831037998 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.831054926 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.831069946 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.831087112 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.831103086 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.831105947 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.831162930 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.831962109 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.831978083 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.831985950 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.831994057 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.832039118 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.835329056 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835345984 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835360050 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835387945 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835402012 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835405111 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.835417032 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835426092 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.835433960 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835445881 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.835450888 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835468054 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835478067 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.835484028 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835519075 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.835542917 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835558891 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835575104 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835588932 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.835591078 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835607052 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835623980 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835628033 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.835653067 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.835840940 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835859060 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835874081 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835889101 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.835890055 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835906029 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835922956 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.835958004 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.835968971 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.835987091 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.836019039 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.836035013 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.836035013 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.836050987 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.836067915 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.836083889 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.836110115 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.836903095 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.836919069 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.836962938 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.836978912 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.836996078 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.837002993 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.837033033 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.837702990 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.837721109 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.837735891 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.837752104 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.837763071 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.837790966 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.838521957 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.838537931 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.838579893 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.838990927 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.839008093 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.839025021 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.839040041 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.839050055 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.839055061 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.839068890 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.839096069 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.842219114 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.842236042 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.842252016 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.842267990 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.842282057 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.842283964 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.842299938 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.842300892 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.842319965 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.842335939 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.842340946 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.842350960 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.842366934 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.842377901 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.842381954 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.842397928 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.842397928 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.842415094 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.842422962 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.842466116 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.843278885 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.843295097 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.843310118 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.843326092 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.843367100 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.843396902 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.843569994 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.843588114 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.843602896 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.843621969 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.843636990 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.843648911 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.843652010 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.843669891 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.843702078 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.845272064 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.845288038 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.845302105 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.845316887 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.845324993 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.845346928 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.845357895 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.845367908 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.845374107 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.845391035 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.845407009 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.845411062 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.845429897 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.846098900 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.846116066 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.846131086 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.846147060 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.846160889 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.846162081 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.846178055 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.846180916 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.846199036 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.847126007 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.847141981 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.847156048 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.847171068 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.847189903 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.847229004 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.847871065 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.847886086 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.847901106 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.847914934 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.847922087 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.847933054 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.847942114 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.847954035 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.847981930 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.848834991 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.848850965 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.848865986 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.848881960 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.848890066 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.848897934 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.848911047 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.848952055 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.849816084 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.849832058 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.849847078 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.849863052 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.849878073 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.849879980 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.849895000 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.849904060 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.849945068 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.850984097 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.851001024 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.851017952 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.851033926 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.851047993 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.851051092 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.851075888 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.851758957 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.851775885 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.851790905 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.851808071 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.851810932 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.851823092 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.851824999 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.851841927 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.851871967 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.852791071 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.852807045 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.852823973 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.852840900 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.852844000 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.852857113 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.852869987 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.852897882 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.854069948 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.854085922 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.854100943 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.854120016 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.854135036 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.854135990 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.854152918 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.854159117 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.854195118 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.855308056 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.855324030 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.855340004 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.855356932 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.855369091 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.855371952 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.855396986 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.855681896 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.855698109 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.855714083 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.855725050 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.855731010 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.855747938 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.855756044 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.855765104 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.855793953 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.861982107 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.861999035 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.862015009 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.862030983 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.862035990 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.862047911 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.862055063 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.862065077 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.862081051 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.862090111 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.862099886 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.862116098 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.862129927 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.862133026 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.862149954 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.862159014 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.862195969 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.871079922 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.871097088 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.871112108 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.871128082 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.871143103 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.871160984 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.871172905 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.871176958 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.871193886 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.871210098 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.871228933 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.871229887 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.871246099 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.871254921 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.871269941 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.872149944 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.872194052 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.872209072 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.872226000 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.872234106 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.872241974 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.872251987 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.872260094 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.872283936 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.872987986 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.873004913 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.873020887 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.873037100 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.873039007 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.873054981 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.873059988 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.873105049 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.873737097 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.873753071 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.873769999 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.873786926 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.873801947 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.873819113 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.873820066 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.873847008 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.873859882 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.874660969 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.874677896 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.874694109 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.874711037 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.874728918 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.874728918 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.874773979 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.875581026 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.875598907 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.875614882 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.875633001 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.875648975 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.875655890 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.875665903 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.875682116 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.875690937 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.876568079 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.876585960 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.876600027 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.876617908 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.876635075 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.876637936 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.876651049 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.876665115 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.876684904 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.877551079 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.877568007 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.877582073 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.877597094 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.877613068 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.877619982 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.877640009 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.877660990 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.878525019 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.878542900 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.878556967 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.878571987 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.878587008 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.878597021 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.878604889 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.878653049 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.878664017 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.879497051 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.879514933 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.879530907 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.879548073 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.879564047 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.879565001 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.879580975 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.880487919 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.880505085 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.880522966 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.880537987 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.880538940 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.880554914 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.880557060 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.880570889 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.880614996 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.881452084 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.881469011 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.881484985 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.881500006 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.881505013 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.881524086 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.881531000 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.881570101 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.882414103 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.882430077 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.882443905 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.882461071 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.882477045 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.882477045 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.882503033 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.882514954 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.882556915 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.883430004 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.883446932 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.883460999 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.883476019 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.883490086 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.883491993 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.883510113 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.884380102 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.884397984 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.884413958 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.884430885 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.884433031 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.884448051 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.884453058 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.884464979 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.884502888 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.885759115 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.885776997 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.885792971 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.885808945 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.885808945 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.885824919 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.885834932 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.885843039 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.885862112 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.886344910 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.886360884 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.886377096 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.886392117 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.886394024 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.886413097 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.886413097 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.886457920 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.887448072 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.887464046 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.887479067 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.887495041 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.887506962 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.887511969 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.887526035 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.887530088 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.887577057 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.889627934 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.889781952 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.889827967 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.890194893 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.890211105 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.890254021 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.890404940 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.890420914 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.890438080 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.890453100 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.891010046 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.891027927 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.891042948 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.891057968 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.891060114 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.891076088 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.891079903 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.891093016 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.891113043 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.891957998 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.891974926 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.892005920 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.892812967 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.892829895 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.892843962 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.892858982 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.892863035 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.892879009 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.892898083 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.892903090 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.892919064 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.893769026 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.893785954 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.893801928 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.893821001 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.893843889 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.898226976 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.898303986 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.898319960 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.898334026 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.898350954 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.898360014 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.898369074 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.898375988 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.898391962 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.898410082 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.898416042 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.898426056 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.898447990 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.898670912 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.898688078 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.898703098 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.898705959 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.898720980 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.898736000 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.898736954 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.898753881 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.898770094 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.898775101 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.898811102 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.898983002 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.899000883 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.899017096 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.899034977 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.899038076 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.899050951 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.899069071 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.899076939 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.899104118 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.899308920 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.899324894 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.899341106 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.899358034 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.899368048 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.899374962 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.899390936 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.899396896 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.899424076 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.901267052 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.901283979 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.901298046 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.901314974 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.901324987 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.901329994 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.901344061 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.901346922 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.901364088 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.901388884 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.901391983 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.901417017 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.901432991 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.901437998 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.901449919 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.901465893 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.901475906 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.901484966 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.901504040 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.901504993 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.901550055 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.902101994 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.902117968 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.902133942 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.902153015 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.902158022 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.902169943 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.902184963 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.902189016 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.902213097 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.903136015 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.903152943 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.903167963 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.903186083 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.903192043 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.903202057 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.903218985 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.903220892 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.903235912 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.903253078 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.904004097 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.904021025 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.904036999 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.904048920 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.904056072 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.904068947 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.904072046 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.904089928 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.904107094 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.904114962 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.904143095 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.904937983 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.904953957 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.904968977 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.904985905 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.904997110 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.905003071 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.905019045 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.905026913 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.905061960 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.905884027 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.905900955 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.905915976 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.905934095 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.905944109 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.905968904 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.906737089 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.906754017 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.906769037 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.906793118 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.907303095 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.907320023 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.907335997 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.907347918 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.907354116 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.907371044 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.907376051 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.907387018 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.907414913 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.908188105 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.908206940 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.908221960 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.908235073 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.908238888 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.908257008 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.908258915 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.908302069 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.909185886 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.909203053 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.909219027 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.909234047 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.909240961 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.909250021 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.909270048 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.909271002 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.909307957 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.912395954 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.912411928 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.912427902 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.912444115 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.912460089 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.912468910 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.912503004 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.912519932 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.912537098 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.912552118 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.912558079 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.912568092 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.912584066 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.912589073 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.912600994 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.912623882 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.912842989 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.912858009 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.912873983 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.912879944 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.912890911 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.912905931 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.912909031 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.912940979 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.913149118 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.913165092 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.913178921 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.913194895 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.913194895 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.913209915 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.913227081 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.913228035 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.913260937 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.914091110 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.914108038 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.914123058 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.914138079 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.914149046 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.914155960 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.914179087 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.915286064 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.915302038 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.915321112 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.915334940 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.915353060 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.915502071 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.915518045 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.915532112 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.915549040 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.915558100 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.915566921 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.915589094 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.916412115 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.916429043 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.916445971 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.916459084 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.916460991 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.916476011 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.916481018 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.916493893 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.916524887 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.918770075 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.918786049 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.918801069 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.918817043 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.918819904 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.918833017 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.918848038 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.918848038 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.918864012 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.918879986 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.918881893 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.918895960 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.918903112 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.918911934 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.918927908 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.918931007 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.918965101 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.920216084 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.920232058 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.920248032 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.920265913 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.920284033 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.920289040 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.920314074 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.920469046 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.920485020 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.920500040 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.920504093 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.920516968 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.920532942 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.920536041 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.920548916 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.920569897 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.921186924 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.921202898 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.921217918 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.921235085 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.921235085 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.921251059 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.921262980 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.921267033 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.921287060 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.922126055 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.922166109 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.922179937 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.922198057 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.922200918 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.922214985 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.922218084 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.922262907 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.923100948 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.923119068 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.923135042 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.923152924 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.923157930 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.923168898 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.923187017 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.923198938 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.923230886 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.924057007 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.924072981 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.924088955 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.924107075 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.924113035 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.924123049 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.924143076 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.924998999 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.925015926 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.925030947 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.925046921 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.925048113 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.925064087 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.925071001 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.925081015 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.925102949 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.926069021 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.926084995 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.926100016 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.926115036 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.926120043 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.926136017 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.926137924 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.926183939 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.928597927 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.928613901 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.928627968 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.928644896 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.928659916 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.928668976 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.928678989 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.928688049 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.928714991 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.929966927 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.929985046 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.930000067 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.930016994 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.930035114 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.930042982 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.930061102 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.931272984 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.931289911 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:27:42.931322098 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:42.973671913 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:27:45.067186117 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:45.072375059 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:27:45.999712944 CEST	49719	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:46.009468079 CEST	80	49719	52.49.232.14	192.168.2.16
May 22, 2024 17:27:46.047131062 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:46.052311897 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:27:46.226417065 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:27:46.229779005 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:46.238537073 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:46.271698952 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:46.333041906 CEST	49807	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:46.333100080 CEST	443	49807	52.165.165.26	192.168.2.16
May 22, 2024 17:27:46.333198071 CEST	49807	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:46.333553076 CEST	49807	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:46.333570957 CEST	443	49807	52.165.165.26	192.168.2.16
May 22, 2024 17:27:46.443567991 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:46.495723009 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:47.223124027 CEST	443	49807	52.165.165.26	192.168.2.16
May 22, 2024 17:27:47.223300934 CEST	49807	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:47.225034952 CEST	49807	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:47.225047112 CEST	443	49807	52.165.165.26	192.168.2.16
May 22, 2024 17:27:47.225545883 CEST	443	49807	52.165.165.26	192.168.2.16
May 22, 2024 17:27:47.227682114 CEST	49807	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:47.274492025 CEST	443	49807	52.165.165.26	192.168.2.16
May 22, 2024 17:27:47.504494905 CEST	443	49807	52.165.165.26	192.168.2.16
May 22, 2024 17:27:47.504570007 CEST	443	49807	52.165.165.26	192.168.2.16
May 22, 2024 17:27:47.504614115 CEST	443	49807	52.165.165.26	192.168.2.16
May 22, 2024 17:27:47.504674911 CEST	49807	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:47.504703999 CEST	443	49807	52.165.165.26	192.168.2.16
May 22, 2024 17:27:47.504723072 CEST	49807	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:47.504748106 CEST	49807	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:47.515533924 CEST	443	49807	52.165.165.26	192.168.2.16
May 22, 2024 17:27:47.515599966 CEST	443	49807	52.165.165.26	192.168.2.16
May 22, 2024 17:27:47.515666008 CEST	49807	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:47.515676022 CEST	443	49807	52.165.165.26	192.168.2.16
May 22, 2024 17:27:47.515714884 CEST	49807	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:47.515723944 CEST	443	49807	52.165.165.26	192.168.2.16
May 22, 2024 17:27:47.515767097 CEST	49807	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:47.515889883 CEST	49807	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:47.515904903 CEST	443	49807	52.165.165.26	192.168.2.16
May 22, 2024 17:27:47.515919924 CEST	49807	443	192.168.2.16	52.165.165.26
May 22, 2024 17:27:47.515927076 CEST	443	49807	52.165.165.26	192.168.2.16
May 22, 2024 17:27:51.234273911 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:51.315426111 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:27:51.461894989 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:27:51.473999977 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:51.484548092 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:51.509746075 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:51.655092955 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:51.701735020 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:56.483824015 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:56.488940001 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:27:56.661128044 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:27:56.665471077 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:56.671591043 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:56.710690022 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:56.847618103 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:27:56.888237953 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:27:57.250121117 CEST	49808	80	192.168.2.16	52.213.172.255
May 22, 2024 17:27:57.255285978 CEST	80	49808	52.213.172.255	192.168.2.16
May 22, 2024 17:27:57.255439997 CEST	49808	80	192.168.2.16	52.213.172.255
May 22, 2024 17:27:57.261384964 CEST	49808	80	192.168.2.16	52.213.172.255
May 22, 2024 17:27:57.309791088 CEST	80	49808	52.213.172.255	192.168.2.16
May 22, 2024 17:27:57.309887886 CEST	49808	80	192.168.2.16	52.213.172.255
May 22, 2024 17:27:57.314892054 CEST	80	49808	52.213.172.255	192.168.2.16
May 22, 2024 17:27:57.984395027 CEST	80	49808	52.213.172.255	192.168.2.16
May 22, 2024 17:27:58.032690048 CEST	49808	80	192.168.2.16	52.213.172.255
May 22, 2024 17:27:59.057859898 CEST	49808	80	192.168.2.16	52.213.172.255
May 22, 2024 17:27:59.065908909 CEST	80	49808	52.213.172.255	192.168.2.16
May 22, 2024 17:27:59.065993071 CEST	49808	80	192.168.2.16	52.213.172.255
May 22, 2024 17:27:59.076304913 CEST	80	49808	52.213.172.255	192.168.2.16
May 22, 2024 17:27:59.414541960 CEST	80	49808	52.213.172.255	192.168.2.16
May 22, 2024 17:27:59.466762066 CEST	49808	80	192.168.2.16	52.213.172.255
May 22, 2024 17:27:59.717111111 CEST	62339	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:59.722131014 CEST	53	62339	1.1.1.1	192.168.2.16
May 22, 2024 17:27:59.722282887 CEST	62339	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:59.722282887 CEST	62339	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:59.773260117 CEST	53	62339	1.1.1.1	192.168.2.16
May 22, 2024 17:28:00.079744101 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:28:00.079900980 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:00.218667984 CEST	53	62339	1.1.1.1	192.168.2.16
May 22, 2024 17:28:00.219449043 CEST	62339	53	192.168.2.16	1.1.1.1
May 22, 2024 17:28:00.224802017 CEST	53	62339	1.1.1.1	192.168.2.16
May 22, 2024 17:28:00.225106001 CEST	62339	53	192.168.2.16	1.1.1.1
May 22, 2024 17:28:00.430730104 CEST	49808	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:00.434520006 CEST	62341	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:00.436311960 CEST	80	49808	52.213.172.255	192.168.2.16
May 22, 2024 17:28:00.436376095 CEST	49808	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:00.441324949 CEST	80	62341	52.213.172.255	192.168.2.16
May 22, 2024 17:28:00.441920042 CEST	62341	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:00.441920042 CEST	62341	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:00.483661890 CEST	80	62341	52.213.172.255	192.168.2.16
May 22, 2024 17:28:00.483830929 CEST	62341	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:00.493664026 CEST	80	62341	52.213.172.255	192.168.2.16
May 22, 2024 17:28:01.001578093 CEST	80	49719	52.49.232.14	192.168.2.16
May 22, 2024 17:28:01.001671076 CEST	49719	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:01.165374041 CEST	80	62341	52.213.172.255	192.168.2.16
May 22, 2024 17:28:01.220020056 CEST	62341	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:01.668896914 CEST	49719	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:01.668956041 CEST	49699	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:01.669121981 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:01.674384117 CEST	80	49719	52.49.232.14	192.168.2.16
May 22, 2024 17:28:01.679544926 CEST	80	49699	52.49.232.14	192.168.2.16
May 22, 2024 17:28:01.727385998 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:28:01.896898985 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:28:01.900263071 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:01.906920910 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:28:01.952677965 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:02.086146116 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:28:02.126857042 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:02.178366899 CEST	62342	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:02.221409082 CEST	80	62342	52.213.172.255	192.168.2.16
May 22, 2024 17:28:02.222364902 CEST	62342	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:02.222364902 CEST	62342	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:02.245107889 CEST	80	62342	52.213.172.255	192.168.2.16
May 22, 2024 17:28:02.245210886 CEST	62342	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:02.270816088 CEST	62343	443	192.168.2.16	216.58.212.164
May 22, 2024 17:28:02.270853996 CEST	443	62343	216.58.212.164	192.168.2.16
May 22, 2024 17:28:02.270956993 CEST	62343	443	192.168.2.16	216.58.212.164
May 22, 2024 17:28:02.271234035 CEST	62343	443	192.168.2.16	216.58.212.164
May 22, 2024 17:28:02.271245003 CEST	443	62343	216.58.212.164	192.168.2.16
May 22, 2024 17:28:02.272104979 CEST	80	62342	52.213.172.255	192.168.2.16
May 22, 2024 17:28:02.973009109 CEST	443	62343	216.58.212.164	192.168.2.16
May 22, 2024 17:28:02.973361015 CEST	62343	443	192.168.2.16	216.58.212.164
May 22, 2024 17:28:02.973396063 CEST	443	62343	216.58.212.164	192.168.2.16
May 22, 2024 17:28:02.974538088 CEST	443	62343	216.58.212.164	192.168.2.16
May 22, 2024 17:28:02.974872112 CEST	62343	443	192.168.2.16	216.58.212.164
May 22, 2024 17:28:02.975054979 CEST	443	62343	216.58.212.164	192.168.2.16
May 22, 2024 17:28:03.016711950 CEST	62343	443	192.168.2.16	216.58.212.164
May 22, 2024 17:28:03.071960926 CEST	80	62342	52.213.172.255	192.168.2.16
May 22, 2024 17:28:03.127780914 CEST	62342	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:04.089361906 CEST	62342	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:04.090359926 CEST	62344	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:04.099694014 CEST	80	62344	52.213.172.255	192.168.2.16
May 22, 2024 17:28:04.099792004 CEST	62344	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:04.099942923 CEST	62344	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:04.109492064 CEST	80	62342	52.213.172.255	192.168.2.16
May 22, 2024 17:28:04.109627008 CEST	62342	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:04.114506006 CEST	80	62344	52.213.172.255	192.168.2.16
May 22, 2024 17:28:04.114620924 CEST	62344	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:04.165889025 CEST	80	62344	52.213.172.255	192.168.2.16
May 22, 2024 17:28:04.851350069 CEST	80	62344	52.213.172.255	192.168.2.16
May 22, 2024 17:28:04.900703907 CEST	62344	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:05.862155914 CEST	62344	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:05.863202095 CEST	62345	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:05.869462013 CEST	80	62344	52.213.172.255	192.168.2.16
May 22, 2024 17:28:05.869566917 CEST	62344	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:05.915358067 CEST	80	62345	52.213.172.255	192.168.2.16
May 22, 2024 17:28:05.915477037 CEST	62345	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:05.915657043 CEST	62345	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:05.922261953 CEST	80	62345	52.213.172.255	192.168.2.16
May 22, 2024 17:28:05.922346115 CEST	62345	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:05.927469969 CEST	80	62345	52.213.172.255	192.168.2.16
May 22, 2024 17:28:06.632606983 CEST	80	62345	52.213.172.255	192.168.2.16
May 22, 2024 17:28:06.674748898 CEST	62345	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:07.651967049 CEST	62345	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:07.653273106 CEST	62346	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:07.664906979 CEST	80	62345	52.213.172.255	192.168.2.16
May 22, 2024 17:28:07.664975882 CEST	62345	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:07.669790030 CEST	80	62346	52.213.172.255	192.168.2.16
May 22, 2024 17:28:07.669868946 CEST	62346	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:07.670058966 CEST	62346	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:07.721451044 CEST	80	62346	52.213.172.255	192.168.2.16
May 22, 2024 17:28:07.721538067 CEST	62346	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:07.726463079 CEST	80	62346	52.213.172.255	192.168.2.16
May 22, 2024 17:28:08.471421003 CEST	80	62346	52.213.172.255	192.168.2.16
May 22, 2024 17:28:08.526751995 CEST	62346	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:08.542726994 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:08.590722084 CEST	49711	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:08.595582962 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:28:08.606729984 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:08.609846115 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:28:08.619498014 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:28:08.782850027 CEST	49722	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:08.782850027 CEST	49720	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:08.787906885 CEST	80	49722	52.49.232.14	192.168.2.16
May 22, 2024 17:28:08.792733908 CEST	80	49720	52.49.232.14	192.168.2.16
May 22, 2024 17:28:09.489501953 CEST	62346	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:09.490710020 CEST	62347	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:09.501492977 CEST	80	62347	52.213.172.255	192.168.2.16
May 22, 2024 17:28:09.501584053 CEST	62347	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:09.501732111 CEST	62347	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:09.507575989 CEST	80	62346	52.213.172.255	192.168.2.16
May 22, 2024 17:28:09.507637978 CEST	62346	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:09.512521982 CEST	80	62347	52.213.172.255	192.168.2.16
May 22, 2024 17:28:09.512583971 CEST	62347	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:09.569456100 CEST	80	62347	52.213.172.255	192.168.2.16
May 22, 2024 17:28:10.325406075 CEST	80	62347	52.213.172.255	192.168.2.16
May 22, 2024 17:28:10.365757942 CEST	62347	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:11.342678070 CEST	62347	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:11.344137907 CEST	62348	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:11.352468967 CEST	80	62347	52.213.172.255	192.168.2.16
May 22, 2024 17:28:11.352552891 CEST	62347	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:11.357384920 CEST	80	62348	52.213.172.255	192.168.2.16
May 22, 2024 17:28:11.357490063 CEST	62348	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:11.357671022 CEST	62348	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:11.388824940 CEST	80	62348	52.213.172.255	192.168.2.16
May 22, 2024 17:28:11.388912916 CEST	62348	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:11.407608032 CEST	80	62348	52.213.172.255	192.168.2.16
May 22, 2024 17:28:12.105803967 CEST	80	62348	52.213.172.255	192.168.2.16
May 22, 2024 17:28:12.152787924 CEST	62348	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:12.855775118 CEST	443	62343	216.58.212.164	192.168.2.16
May 22, 2024 17:28:12.855849981 CEST	443	62343	216.58.212.164	192.168.2.16
May 22, 2024 17:28:12.855915070 CEST	62343	443	192.168.2.16	216.58.212.164
May 22, 2024 17:28:13.109822989 CEST	62348	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:13.111859083 CEST	62349	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:13.146051884 CEST	80	62349	52.213.172.255	192.168.2.16
May 22, 2024 17:28:13.146069050 CEST	80	62348	52.213.172.255	192.168.2.16
May 22, 2024 17:28:13.146137953 CEST	62349	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:13.146178961 CEST	62348	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:13.146337032 CEST	62349	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:13.162993908 CEST	80	62349	52.213.172.255	192.168.2.16
May 22, 2024 17:28:13.163053036 CEST	62349	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:13.172919035 CEST	80	62349	52.213.172.255	192.168.2.16
May 22, 2024 17:28:13.777584076 CEST	62343	443	192.168.2.16	216.58.212.164
May 22, 2024 17:28:13.777621031 CEST	443	62343	216.58.212.164	192.168.2.16
May 22, 2024 17:28:13.883857012 CEST	80	62349	52.213.172.255	192.168.2.16
May 22, 2024 17:28:13.934745073 CEST	62349	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:14.894736052 CEST	62349	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:14.896034956 CEST	62351	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:14.900154114 CEST	80	62349	52.213.172.255	192.168.2.16
May 22, 2024 17:28:14.900213957 CEST	62349	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:14.905738115 CEST	80	62351	52.213.172.255	192.168.2.16
May 22, 2024 17:28:14.905817032 CEST	62351	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:14.905951977 CEST	62351	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:14.967520952 CEST	80	62351	52.213.172.255	192.168.2.16
May 22, 2024 17:28:14.967638969 CEST	62351	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:14.973202944 CEST	62127	53	192.168.2.16	1.1.1.1
May 22, 2024 17:28:14.978456974 CEST	80	62351	52.213.172.255	192.168.2.16
May 22, 2024 17:28:15.029422998 CEST	53	62127	1.1.1.1	192.168.2.16
May 22, 2024 17:28:15.029531002 CEST	62127	53	192.168.2.16	1.1.1.1
May 22, 2024 17:28:15.029741049 CEST	62127	53	192.168.2.16	1.1.1.1
May 22, 2024 17:28:15.104371071 CEST	53	62127	1.1.1.1	192.168.2.16
May 22, 2024 17:28:15.537712097 CEST	53	62127	1.1.1.1	192.168.2.16
May 22, 2024 17:28:15.538180113 CEST	62127	53	192.168.2.16	1.1.1.1
May 22, 2024 17:28:15.549474001 CEST	53	62127	1.1.1.1	192.168.2.16
May 22, 2024 17:28:15.549546957 CEST	62127	53	192.168.2.16	1.1.1.1
May 22, 2024 17:28:15.733800888 CEST	80	62351	52.213.172.255	192.168.2.16
May 22, 2024 17:28:15.785747051 CEST	62351	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:16.746795893 CEST	62351	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:16.748004913 CEST	62128	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:16.780507088 CEST	80	62128	52.213.172.255	192.168.2.16
May 22, 2024 17:28:16.780533075 CEST	80	62351	52.213.172.255	192.168.2.16
May 22, 2024 17:28:16.780683041 CEST	62351	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:16.780728102 CEST	62128	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:16.780904055 CEST	62128	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:16.815125942 CEST	80	62128	52.213.172.255	192.168.2.16
May 22, 2024 17:28:16.815197945 CEST	62128	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:16.823863029 CEST	80	62128	52.213.172.255	192.168.2.16
May 22, 2024 17:28:17.614090919 CEST	80	62128	52.213.172.255	192.168.2.16
May 22, 2024 17:28:17.668747902 CEST	62128	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:18.631742001 CEST	62128	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:18.633312941 CEST	62129	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:18.640861034 CEST	80	62129	52.213.172.255	192.168.2.16
May 22, 2024 17:28:18.640976906 CEST	62129	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:18.641236067 CEST	62129	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:18.642337084 CEST	80	62128	52.213.172.255	192.168.2.16
May 22, 2024 17:28:18.642396927 CEST	62128	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:18.648313999 CEST	80	62129	52.213.172.255	192.168.2.16
May 22, 2024 17:28:18.648397923 CEST	62129	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:18.659974098 CEST	80	62129	52.213.172.255	192.168.2.16
May 22, 2024 17:28:19.536070108 CEST	80	62129	52.213.172.255	192.168.2.16
May 22, 2024 17:28:19.585810900 CEST	62129	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:20.539643049 CEST	62129	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:20.540993929 CEST	62130	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:20.550493002 CEST	80	62130	52.213.172.255	192.168.2.16
May 22, 2024 17:28:20.550589085 CEST	62130	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:20.550736904 CEST	62130	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:20.551389933 CEST	80	62129	52.213.172.255	192.168.2.16
May 22, 2024 17:28:20.551443100 CEST	62129	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:20.561816931 CEST	80	62130	52.213.172.255	192.168.2.16
May 22, 2024 17:28:20.561939955 CEST	62130	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:20.571043015 CEST	80	62130	52.213.172.255	192.168.2.16
May 22, 2024 17:28:21.277909040 CEST	80	62130	52.213.172.255	192.168.2.16
May 22, 2024 17:28:21.330322027 CEST	62130	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:22.288719893 CEST	62130	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:22.289844036 CEST	62131	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:22.296741009 CEST	80	62131	52.213.172.255	192.168.2.16
May 22, 2024 17:28:22.296849012 CEST	62131	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:22.297020912 CEST	62131	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:22.347313881 CEST	80	62130	52.213.172.255	192.168.2.16
May 22, 2024 17:28:22.347445965 CEST	62130	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:22.352149963 CEST	80	62131	52.213.172.255	192.168.2.16
May 22, 2024 17:28:22.352221966 CEST	62131	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:22.363847971 CEST	80	62131	52.213.172.255	192.168.2.16
May 22, 2024 17:28:23.127484083 CEST	80	62131	52.213.172.255	192.168.2.16
May 22, 2024 17:28:23.177789927 CEST	62131	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:23.526340961 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:28:23.526469946 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:23.593883991 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:28:23.593986988 CEST	49711	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:23.603157997 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:28:23.606148958 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:23.767606020 CEST	80	49720	52.49.232.14	192.168.2.16
May 22, 2024 17:28:23.767719984 CEST	49720	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:23.776060104 CEST	80	49722	52.49.232.14	192.168.2.16
May 22, 2024 17:28:23.776118040 CEST	49722	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:23.784427881 CEST	49720	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:23.784461021 CEST	49722	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:23.784503937 CEST	49712	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:23.784529924 CEST	49711	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:23.784590006 CEST	49701	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:23.795015097 CEST	80	49720	52.49.232.14	192.168.2.16
May 22, 2024 17:28:23.795028925 CEST	80	49722	52.49.232.14	192.168.2.16
May 22, 2024 17:28:23.795037031 CEST	80	49712	52.49.232.14	192.168.2.16
May 22, 2024 17:28:23.795042038 CEST	80	49711	52.49.232.14	192.168.2.16
May 22, 2024 17:28:23.795053005 CEST	80	49701	52.49.232.14	192.168.2.16
May 22, 2024 17:28:24.135088921 CEST	62131	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:24.136353970 CEST	62132	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:24.144603968 CEST	80	62132	52.213.172.255	192.168.2.16
May 22, 2024 17:28:24.144625902 CEST	80	62131	52.213.172.255	192.168.2.16
May 22, 2024 17:28:24.144706964 CEST	62132	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:24.144730091 CEST	62131	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:24.144854069 CEST	62132	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:24.154555082 CEST	80	62132	52.213.172.255	192.168.2.16
May 22, 2024 17:28:24.154625893 CEST	62132	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:24.170140982 CEST	80	62132	52.213.172.255	192.168.2.16
May 22, 2024 17:28:24.861237049 CEST	80	62132	52.213.172.255	192.168.2.16
May 22, 2024 17:28:24.914782047 CEST	62132	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:25.878704071 CEST	62132	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:25.884218931 CEST	62133	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:26.007927895 CEST	80	62133	52.213.172.255	192.168.2.16
May 22, 2024 17:28:26.008074045 CEST	62133	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:26.008344889 CEST	62133	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:26.013576031 CEST	80	62132	52.213.172.255	192.168.2.16
May 22, 2024 17:28:26.013650894 CEST	62132	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:26.016330957 CEST	80	62133	52.213.172.255	192.168.2.16
May 22, 2024 17:28:26.016388893 CEST	62133	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:26.024123907 CEST	80	62133	52.213.172.255	192.168.2.16
May 22, 2024 17:28:26.111787081 CEST	49805	80	192.168.2.16	34.251.116.243
May 22, 2024 17:28:26.122992039 CEST	80	49805	34.251.116.243	192.168.2.16
May 22, 2024 17:28:26.808310032 CEST	80	62133	52.213.172.255	192.168.2.16
May 22, 2024 17:28:26.863815069 CEST	62133	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:27.825242043 CEST	62133	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:27.826446056 CEST	62135	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:27.835413933 CEST	80	62135	52.213.172.255	192.168.2.16
May 22, 2024 17:28:27.835428953 CEST	80	62133	52.213.172.255	192.168.2.16
May 22, 2024 17:28:27.835529089 CEST	62133	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:27.835551977 CEST	62135	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:27.835787058 CEST	62135	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:27.845709085 CEST	80	62135	52.213.172.255	192.168.2.16
May 22, 2024 17:28:27.845823050 CEST	62135	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:27.854871035 CEST	80	62135	52.213.172.255	192.168.2.16
May 22, 2024 17:28:27.932760954 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:28:27.943789959 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:28:28.650635958 CEST	80	62135	52.213.172.255	192.168.2.16
May 22, 2024 17:28:28.696743965 CEST	62135	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:29.658677101 CEST	62135	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:29.659924030 CEST	62136	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:29.674846888 CEST	80	62136	52.213.172.255	192.168.2.16
May 22, 2024 17:28:29.674863100 CEST	80	62135	52.213.172.255	192.168.2.16
May 22, 2024 17:28:29.674935102 CEST	62136	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:29.674966097 CEST	62135	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:29.675184011 CEST	62136	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:29.689626932 CEST	80	62136	52.213.172.255	192.168.2.16
May 22, 2024 17:28:29.689685106 CEST	62136	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:29.701447964 CEST	80	62136	52.213.172.255	192.168.2.16
May 22, 2024 17:28:30.428194046 CEST	80	62136	52.213.172.255	192.168.2.16
May 22, 2024 17:28:30.484117031 CEST	62136	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:31.444892883 CEST	62136	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:31.446057081 CEST	62137	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:31.459575891 CEST	80	62137	52.213.172.255	192.168.2.16
May 22, 2024 17:28:31.459616899 CEST	80	62136	52.213.172.255	192.168.2.16
May 22, 2024 17:28:31.459719896 CEST	62137	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:31.459760904 CEST	62136	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:31.459930897 CEST	62137	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:31.469696045 CEST	80	62137	52.213.172.255	192.168.2.16
May 22, 2024 17:28:31.469798088 CEST	62137	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:31.480465889 CEST	80	62137	52.213.172.255	192.168.2.16
May 22, 2024 17:28:32.278912067 CEST	80	62137	52.213.172.255	192.168.2.16
May 22, 2024 17:28:32.320748091 CEST	62137	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:33.297561884 CEST	62137	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:33.299046040 CEST	62138	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:33.347357035 CEST	80	62138	52.213.172.255	192.168.2.16
May 22, 2024 17:28:33.347457886 CEST	62138	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:33.347502947 CEST	80	62137	52.213.172.255	192.168.2.16
May 22, 2024 17:28:33.347716093 CEST	62137	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:33.347716093 CEST	62138	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:33.359941006 CEST	80	62138	52.213.172.255	192.168.2.16
May 22, 2024 17:28:33.360004902 CEST	62138	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:33.371591091 CEST	80	62138	52.213.172.255	192.168.2.16
May 22, 2024 17:28:34.102324009 CEST	80	62138	52.213.172.255	192.168.2.16
May 22, 2024 17:28:34.151787996 CEST	62138	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:35.121805906 CEST	62138	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:35.123447895 CEST	62139	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:35.137026072 CEST	80	62139	52.213.172.255	192.168.2.16
May 22, 2024 17:28:35.137041092 CEST	80	62138	52.213.172.255	192.168.2.16
May 22, 2024 17:28:35.137471914 CEST	62138	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:35.137471914 CEST	62139	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:35.137471914 CEST	62139	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:35.156013012 CEST	80	62139	52.213.172.255	192.168.2.16
May 22, 2024 17:28:35.156116009 CEST	62139	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:35.181720972 CEST	80	62139	52.213.172.255	192.168.2.16
May 22, 2024 17:28:35.856726885 CEST	80	62139	52.213.172.255	192.168.2.16
May 22, 2024 17:28:35.896856070 CEST	62139	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:36.875056982 CEST	62139	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:36.876081944 CEST	62140	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:36.884318113 CEST	80	62140	52.213.172.255	192.168.2.16
May 22, 2024 17:28:36.884401083 CEST	62140	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:36.884540081 CEST	62140	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:36.889321089 CEST	80	62139	52.213.172.255	192.168.2.16
May 22, 2024 17:28:36.889380932 CEST	62139	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:36.894248009 CEST	80	62140	52.213.172.255	192.168.2.16
May 22, 2024 17:28:36.894309044 CEST	62140	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:36.905175924 CEST	80	62140	52.213.172.255	192.168.2.16
May 22, 2024 17:28:37.627471924 CEST	80	62140	52.213.172.255	192.168.2.16
May 22, 2024 17:28:37.682810068 CEST	62140	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:38.647535086 CEST	62140	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:38.648946047 CEST	62141	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:38.672002077 CEST	80	62141	52.213.172.255	192.168.2.16
May 22, 2024 17:28:38.672086954 CEST	62141	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:38.672347069 CEST	62141	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:38.672858000 CEST	80	62140	52.213.172.255	192.168.2.16
May 22, 2024 17:28:38.672909021 CEST	62140	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:38.682511091 CEST	80	62141	52.213.172.255	192.168.2.16
May 22, 2024 17:28:38.682593107 CEST	62141	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:38.692249060 CEST	80	62141	52.213.172.255	192.168.2.16
May 22, 2024 17:28:39.440851927 CEST	80	62141	52.213.172.255	192.168.2.16
May 22, 2024 17:28:39.486820936 CEST	62141	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:40.446649075 CEST	62141	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:40.447972059 CEST	62142	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:40.458060026 CEST	80	62142	52.213.172.255	192.168.2.16
May 22, 2024 17:28:40.458093882 CEST	80	62141	52.213.172.255	192.168.2.16
May 22, 2024 17:28:40.458137989 CEST	62142	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:40.458165884 CEST	62141	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:40.458317041 CEST	62142	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:40.494316101 CEST	80	62142	52.213.172.255	192.168.2.16
May 22, 2024 17:28:40.494384050 CEST	62142	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:40.503365040 CEST	80	62142	52.213.172.255	192.168.2.16
May 22, 2024 17:28:41.188349009 CEST	80	62142	52.213.172.255	192.168.2.16
May 22, 2024 17:28:41.236740112 CEST	62142	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:41.635180950 CEST	80	49805	34.251.116.243	192.168.2.16
May 22, 2024 17:28:41.635329962 CEST	49805	80	192.168.2.16	34.251.116.243
May 22, 2024 17:28:41.778337002 CEST	49805	80	192.168.2.16	34.251.116.243
May 22, 2024 17:28:41.786808014 CEST	80	49805	34.251.116.243	192.168.2.16
May 22, 2024 17:28:42.101605892 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:28:42.101702929 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:28:42.194797993 CEST	62142	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:42.196060896 CEST	62143	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:42.205454111 CEST	80	62143	52.213.172.255	192.168.2.16
May 22, 2024 17:28:42.205538034 CEST	62143	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:42.205667973 CEST	62143	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:42.210164070 CEST	80	62142	52.213.172.255	192.168.2.16
May 22, 2024 17:28:42.210228920 CEST	62142	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:42.215240002 CEST	80	62143	52.213.172.255	192.168.2.16
May 22, 2024 17:28:42.215298891 CEST	62143	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:42.241183996 CEST	80	62143	52.213.172.255	192.168.2.16
May 22, 2024 17:28:43.012212038 CEST	80	62143	52.213.172.255	192.168.2.16
May 22, 2024 17:28:43.055788040 CEST	62143	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:43.776470900 CEST	49803	80	192.168.2.16	34.251.116.243
May 22, 2024 17:28:43.785432100 CEST	80	49803	34.251.116.243	192.168.2.16
May 22, 2024 17:28:44.019809961 CEST	62143	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:44.021105051 CEST	62144	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:44.048041105 CEST	80	62144	52.213.172.255	192.168.2.16
May 22, 2024 17:28:44.048172951 CEST	62144	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:44.048418045 CEST	62144	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:44.048773050 CEST	80	62143	52.213.172.255	192.168.2.16
May 22, 2024 17:28:44.048841000 CEST	62143	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:44.083808899 CEST	80	62144	52.213.172.255	192.168.2.16
May 22, 2024 17:28:44.083870888 CEST	62144	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:44.112709045 CEST	80	62144	52.213.172.255	192.168.2.16
May 22, 2024 17:28:44.454276085 CEST	56727	53	192.168.2.16	1.1.1.1
May 22, 2024 17:28:44.459225893 CEST	53	56727	1.1.1.1	192.168.2.16
May 22, 2024 17:28:44.459362984 CEST	56727	53	192.168.2.16	1.1.1.1
May 22, 2024 17:28:44.459362984 CEST	56727	53	192.168.2.16	1.1.1.1
May 22, 2024 17:28:44.472862005 CEST	53	56727	1.1.1.1	192.168.2.16
May 22, 2024 17:28:44.919859886 CEST	80	62144	52.213.172.255	192.168.2.16
May 22, 2024 17:28:44.919909954 CEST	53	56727	1.1.1.1	192.168.2.16
May 22, 2024 17:28:44.920372009 CEST	56727	53	192.168.2.16	1.1.1.1
May 22, 2024 17:28:44.939704895 CEST	53	56727	1.1.1.1	192.168.2.16
May 22, 2024 17:28:44.939798117 CEST	56727	53	192.168.2.16	1.1.1.1
May 22, 2024 17:28:44.970839024 CEST	62144	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:45.928567886 CEST	62144	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:45.929789066 CEST	56728	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:45.940844059 CEST	80	56728	52.213.172.255	192.168.2.16
May 22, 2024 17:28:45.940860987 CEST	80	62144	52.213.172.255	192.168.2.16
May 22, 2024 17:28:45.940939903 CEST	62144	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:45.940959930 CEST	56728	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:45.941119909 CEST	56728	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:45.950685978 CEST	80	56728	52.213.172.255	192.168.2.16
May 22, 2024 17:28:45.950741053 CEST	56728	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:45.967413902 CEST	80	56728	52.213.172.255	192.168.2.16
May 22, 2024 17:28:46.657752991 CEST	80	56728	52.213.172.255	192.168.2.16
May 22, 2024 17:28:46.703828096 CEST	56728	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:46.911794901 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:46.946377039 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:28:47.086817980 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:28:47.092551947 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:28:47.665884972 CEST	56728	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:47.667267084 CEST	56729	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:47.671559095 CEST	80	56728	52.213.172.255	192.168.2.16
May 22, 2024 17:28:47.672280073 CEST	56728	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:47.677556038 CEST	80	56729	52.213.172.255	192.168.2.16
May 22, 2024 17:28:47.677769899 CEST	56729	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:47.678208113 CEST	56729	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:47.701025009 CEST	80	56729	52.213.172.255	192.168.2.16
May 22, 2024 17:28:47.701184034 CEST	56729	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:47.715760946 CEST	80	56729	52.213.172.255	192.168.2.16
May 22, 2024 17:28:48.427495003 CEST	80	56729	52.213.172.255	192.168.2.16
May 22, 2024 17:28:48.476808071 CEST	56729	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:49.438836098 CEST	56729	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:49.439898014 CEST	56731	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:49.739855051 CEST	56729	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:49.926944971 CEST	80	56731	52.213.172.255	192.168.2.16
May 22, 2024 17:28:49.926969051 CEST	80	56729	52.213.172.255	192.168.2.16
May 22, 2024 17:28:49.926984072 CEST	80	56729	52.213.172.255	192.168.2.16
May 22, 2024 17:28:49.927145958 CEST	56729	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:49.927400112 CEST	56731	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:49.927400112 CEST	56731	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:49.941659927 CEST	80	56731	52.213.172.255	192.168.2.16
May 22, 2024 17:28:49.941808939 CEST	56731	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:49.995919943 CEST	80	56731	52.213.172.255	192.168.2.16
May 22, 2024 17:28:50.730993986 CEST	80	56731	52.213.172.255	192.168.2.16
May 22, 2024 17:28:50.775835991 CEST	56731	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:51.735111952 CEST	56731	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:51.738456011 CEST	56732	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:51.775537968 CEST	80	56732	52.213.172.255	192.168.2.16
May 22, 2024 17:28:51.775563002 CEST	80	56731	52.213.172.255	192.168.2.16
May 22, 2024 17:28:51.775811911 CEST	56731	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:51.775810957 CEST	56732	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:51.775933981 CEST	56732	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:51.789154053 CEST	80	56732	52.213.172.255	192.168.2.16
May 22, 2024 17:28:51.789237976 CEST	56732	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:51.799226999 CEST	80	56732	52.213.172.255	192.168.2.16
May 22, 2024 17:28:52.607275963 CEST	80	56732	52.213.172.255	192.168.2.16
May 22, 2024 17:28:52.650829077 CEST	56732	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:53.622631073 CEST	56732	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:53.623693943 CEST	56733	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:53.761178970 CEST	80	56733	52.213.172.255	192.168.2.16
May 22, 2024 17:28:53.761204004 CEST	80	56732	52.213.172.255	192.168.2.16
May 22, 2024 17:28:53.761322975 CEST	56732	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:53.761601925 CEST	56733	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:53.761601925 CEST	56733	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:53.776870966 CEST	80	56733	52.213.172.255	192.168.2.16
May 22, 2024 17:28:53.776933908 CEST	56733	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:53.785718918 CEST	80	56733	52.213.172.255	192.168.2.16
May 22, 2024 17:28:54.583724976 CEST	80	56733	52.213.172.255	192.168.2.16
May 22, 2024 17:28:54.623819113 CEST	56733	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:55.596024036 CEST	56733	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:55.597316027 CEST	56734	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:55.640809059 CEST	80	56734	52.213.172.255	192.168.2.16
May 22, 2024 17:28:55.640840054 CEST	80	56733	52.213.172.255	192.168.2.16
May 22, 2024 17:28:55.640887976 CEST	56734	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:55.640918016 CEST	56733	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:55.641093016 CEST	56734	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:55.648833990 CEST	80	56734	52.213.172.255	192.168.2.16
May 22, 2024 17:28:55.648891926 CEST	56734	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:55.658374071 CEST	80	56734	52.213.172.255	192.168.2.16
May 22, 2024 17:28:56.471631050 CEST	80	56734	52.213.172.255	192.168.2.16
May 22, 2024 17:28:56.515777111 CEST	56734	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:57.453820944 CEST	56734	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:57.466187000 CEST	80	56734	52.213.172.255	192.168.2.16
May 22, 2024 17:28:57.466276884 CEST	56734	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:57.515105963 CEST	56735	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:57.520741940 CEST	80	56735	52.213.172.255	192.168.2.16
May 22, 2024 17:28:57.520858049 CEST	56735	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:57.522291899 CEST	56735	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:57.582783937 CEST	80	56735	52.213.172.255	192.168.2.16
May 22, 2024 17:28:57.582925081 CEST	56735	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:57.598222971 CEST	80	56735	52.213.172.255	192.168.2.16
May 22, 2024 17:28:58.338095903 CEST	80	56735	52.213.172.255	192.168.2.16
May 22, 2024 17:28:58.390788078 CEST	56735	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:59.278059006 CEST	56735	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:59.279181957 CEST	56736	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:59.288038969 CEST	80	56736	52.213.172.255	192.168.2.16
May 22, 2024 17:28:59.288052082 CEST	80	56735	52.213.172.255	192.168.2.16
May 22, 2024 17:28:59.288125038 CEST	56735	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:59.288142920 CEST	56736	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:59.288283110 CEST	56736	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:59.297718048 CEST	80	56736	52.213.172.255	192.168.2.16
May 22, 2024 17:28:59.297840118 CEST	56736	80	192.168.2.16	52.213.172.255
May 22, 2024 17:28:59.302726984 CEST	80	56736	52.213.172.255	192.168.2.16
May 22, 2024 17:29:00.018434048 CEST	80	56736	52.213.172.255	192.168.2.16
May 22, 2024 17:29:00.073977947 CEST	56736	80	192.168.2.16	52.213.172.255
May 22, 2024 17:29:01.175834894 CEST	80	62341	52.213.172.255	192.168.2.16
May 22, 2024 17:29:01.175890923 CEST	62341	80	192.168.2.16	52.213.172.255
May 22, 2024 17:29:01.891375065 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:29:01.892011881 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:29:02.091260910 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:29:02.091332912 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:29:02.323559046 CEST	49718	80	192.168.2.16	52.49.232.14
May 22, 2024 17:29:02.323694944 CEST	49700	80	192.168.2.16	52.49.232.14
May 22, 2024 17:29:02.323748112 CEST	56737	443	192.168.2.16	216.58.212.164
May 22, 2024 17:29:02.323776007 CEST	443	56737	216.58.212.164	192.168.2.16
May 22, 2024 17:29:02.323895931 CEST	56737	443	192.168.2.16	216.58.212.164
May 22, 2024 17:29:02.324140072 CEST	56737	443	192.168.2.16	216.58.212.164
May 22, 2024 17:29:02.324155092 CEST	443	56737	216.58.212.164	192.168.2.16
May 22, 2024 17:29:02.328859091 CEST	80	49718	52.49.232.14	192.168.2.16
May 22, 2024 17:29:02.375418901 CEST	80	49700	52.49.232.14	192.168.2.16
May 22, 2024 17:29:02.834887981 CEST	56736	80	192.168.2.16	52.213.172.255
May 22, 2024 17:29:02.835697889 CEST	56738	80	192.168.2.16	52.213.172.255
May 22, 2024 17:29:02.853790998 CEST	80	56736	52.213.172.255	192.168.2.16
May 22, 2024 17:29:02.853841066 CEST	56736	80	192.168.2.16	52.213.172.255
May 22, 2024 17:29:02.859240055 CEST	80	56738	52.213.172.255	192.168.2.16
May 22, 2024 17:29:02.859319925 CEST	56738	80	192.168.2.16	52.213.172.255
May 22, 2024 17:29:02.859462023 CEST	56738	80	192.168.2.16	52.213.172.255
May 22, 2024 17:29:02.903428078 CEST	80	56738	52.213.172.255	192.168.2.16
May 22, 2024 17:29:02.903489113 CEST	56738	80	192.168.2.16	52.213.172.255
May 22, 2024 17:29:02.959399939 CEST	80	56738	52.213.172.255	192.168.2.16
May 22, 2024 17:29:03.042579889 CEST	443	56737	216.58.212.164	192.168.2.16
May 22, 2024 17:29:03.088783979 CEST	56737	443	192.168.2.16	216.58.212.164
May 22, 2024 17:29:03.723432064 CEST	80	56738	52.213.172.255	192.168.2.16
May 22, 2024 17:29:03.773762941 CEST	56738	80	192.168.2.16	52.213.172.255

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 22, 2024 17:26:57.566643953 CEST	53	52459	1.1.1.1	192.168.2.16
May 22, 2024 17:26:57.607436895 CEST	65068	53	192.168.2.16	1.1.1.1
May 22, 2024 17:26:57.607522964 CEST	53934	53	192.168.2.16	1.1.1.1
May 22, 2024 17:26:57.649322987 CEST	53	54575	1.1.1.1	192.168.2.16
May 22, 2024 17:26:57.714221954 CEST	53	65068	1.1.1.1	192.168.2.16
May 22, 2024 17:26:57.716526985 CEST	53	53934	1.1.1.1	192.168.2.16
May 22, 2024 17:26:58.579056978 CEST	50244	53	192.168.2.16	1.1.1.1
May 22, 2024 17:26:58.579345942 CEST	59833	53	192.168.2.16	1.1.1.1
May 22, 2024 17:26:58.579922915 CEST	65475	53	192.168.2.16	1.1.1.1
May 22, 2024 17:26:58.580101013 CEST	64973	53	192.168.2.16	1.1.1.1
May 22, 2024 17:26:58.587925911 CEST	53	65475	1.1.1.1	192.168.2.16
May 22, 2024 17:26:58.587940931 CEST	53	59833	1.1.1.1	192.168.2.16
May 22, 2024 17:26:58.588676929 CEST	53	50244	1.1.1.1	192.168.2.16
May 22, 2024 17:26:58.589442015 CEST	53	64973	1.1.1.1	192.168.2.16
May 22, 2024 17:26:58.801110983 CEST	53	65418	1.1.1.1	192.168.2.16
May 22, 2024 17:26:59.465327978 CEST	53	58888	1.1.1.1	192.168.2.16
May 22, 2024 17:26:59.465346098 CEST	53	52420	1.1.1.1	192.168.2.16
May 22, 2024 17:26:59.637094975 CEST	53	62107	1.1.1.1	192.168.2.16
May 22, 2024 17:26:59.871167898 CEST	54134	53	192.168.2.16	1.1.1.1
May 22, 2024 17:26:59.871345043 CEST	65127	53	192.168.2.16	1.1.1.1
May 22, 2024 17:26:59.881381989 CEST	56757	53	192.168.2.16	1.1.1.1
May 22, 2024 17:26:59.881653070 CEST	56795	53	192.168.2.16	1.1.1.1
May 22, 2024 17:26:59.891844034 CEST	53	56757	1.1.1.1	192.168.2.16
May 22, 2024 17:26:59.919545889 CEST	53	56795	1.1.1.1	192.168.2.16
May 22, 2024 17:27:00.068361044 CEST	60534	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:00.068361044 CEST	53380	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:00.089426041 CEST	62464	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:00.089426041 CEST	57056	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:00.262556076 CEST	53	53380	1.1.1.1	192.168.2.16
May 22, 2024 17:27:00.327280998 CEST	53	60534	1.1.1.1	192.168.2.16
May 22, 2024 17:27:00.993355036 CEST	49413	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:00.993912935 CEST	57387	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:01.022021055 CEST	60977	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:01.022094011 CEST	52187	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:01.439125061 CEST	60784	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:01.439294100 CEST	59013	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:01.458389044 CEST	53	60784	1.1.1.1	192.168.2.16
May 22, 2024 17:27:01.478260040 CEST	53	59013	1.1.1.1	192.168.2.16
May 22, 2024 17:27:02.212110043 CEST	54183	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:02.214353085 CEST	51544	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:02.227475882 CEST	53	54183	1.1.1.1	192.168.2.16
May 22, 2024 17:27:02.232338905 CEST	53	51544	1.1.1.1	192.168.2.16
May 22, 2024 17:27:15.836541891 CEST	53	59821	1.1.1.1	192.168.2.16
May 22, 2024 17:27:23.798469067 CEST	58652	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:23.800107956 CEST	58633	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:23.816194057 CEST	53	58633	1.1.1.1	192.168.2.16
May 22, 2024 17:27:23.816205978 CEST	53	58652	1.1.1.1	192.168.2.16
May 22, 2024 17:27:23.942459106 CEST	53	56188	1.1.1.1	192.168.2.16
May 22, 2024 17:27:24.835484982 CEST	53	64117	1.1.1.1	192.168.2.16
May 22, 2024 17:27:26.470422983 CEST	53	63288	1.1.1.1	192.168.2.16
May 22, 2024 17:27:27.371671915 CEST	53	56971	1.1.1.1	192.168.2.16
May 22, 2024 17:27:33.465327978 CEST	58873	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:33.465547085 CEST	58370	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:33.485589981 CEST	53	58370	1.1.1.1	192.168.2.16
May 22, 2024 17:27:33.488403082 CEST	53	58873	1.1.1.1	192.168.2.16
May 22, 2024 17:27:34.811383963 CEST	53	54094	1.1.1.1	192.168.2.16
May 22, 2024 17:27:40.840734005 CEST	51805	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:40.840972900 CEST	53547	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:40.878243923 CEST	53	51805	1.1.1.1	192.168.2.16
May 22, 2024 17:27:40.911281109 CEST	53	53547	1.1.1.1	192.168.2.16
May 22, 2024 17:27:40.931080103 CEST	63453	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:40.931536913 CEST	62615	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:40.979176044 CEST	53	62615	1.1.1.1	192.168.2.16
May 22, 2024 17:27:41.031285048 CEST	53	63453	1.1.1.1	192.168.2.16
May 22, 2024 17:27:57.213470936 CEST	55452	53	192.168.2.16	1.1.1.1
May 22, 2024 17:27:57.242538929 CEST	53	55452	1.1.1.1	192.168.2.16
May 22, 2024 17:27:57.586550951 CEST	53	50868	1.1.1.1	192.168.2.16
May 22, 2024 17:27:57.876028061 CEST	53	65129	1.1.1.1	192.168.2.16
May 22, 2024 17:27:59.715816021 CEST	53	62545	1.1.1.1	192.168.2.16
May 22, 2024 17:28:08.197740078 CEST	138	138	192.168.2.16	192.168.2.255
May 22, 2024 17:28:14.972748995 CEST	53	61010	1.1.1.1	192.168.2.16
May 22, 2024 17:28:28.473589897 CEST	53	59714	1.1.1.1	192.168.2.16
May 22, 2024 17:28:44.453732967 CEST	53	61406	1.1.1.1	192.168.2.16
May 22, 2024 17:28:57.454397917 CEST	61408	53	192.168.2.16	1.1.1.1
May 22, 2024 17:28:57.512703896 CEST	53	61408	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
May 22, 2024 17:26:59.919713020 CEST	192.168.2.16	1.1.1.1	c26c	(Port unreachable)	Destination Unreachable
May 22, 2024 17:27:01.044996023 CEST	192.168.2.16	1.1.1.1	c28c	(Port unreachable)	Destination Unreachable
May 22, 2024 17:27:23.942626953 CEST	192.168.2.16	1.1.1.1	c23a	(Port unreachable)	Destination Unreachable
May 22, 2024 17:27:40.911360979 CEST	192.168.2.16	1.1.1.1	c26c	(Port unreachable)	Destination Unreachable
May 22, 2024 17:27:57.586699963 CEST	192.168.2.16	1.1.1.1	c230	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 22, 2024 17:26:57.607436895 CEST	192.168.2.16	1.1.1.1	0xec08	Standard query (0)	www.cpcheckme.com	A (IP address)	IN (0x0001)	false
May 22, 2024 17:26:57.607522964 CEST	192.168.2.16	1.1.1.1	0xafd8	Standard query (0)	www.cpcheckme.com	65	IN (0x0001)	false
May 22, 2024 17:26:58.579056978 CEST	192.168.2.16	1.1.1.1	0xb380	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 22, 2024 17:26:58.579345942 CEST	192.168.2.16	1.1.1.1	0x6d14	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 22, 2024 17:26:58.579922915 CEST	192.168.2.16	1.1.1.1	0x551a	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
May 22, 2024 17:26:58.580101013 CEST	192.168.2.16	1.1.1.1	0x8b22	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
May 22, 2024 17:26:59.871167898 CEST	192.168.2.16	1.1.1.1	0xf1c0	Standard query (0)	sc1.checkpoint.com	A (IP address)	IN (0x0001)	false
May 22, 2024 17:26:59.871345043 CEST	192.168.2.16	1.1.1.1	0x9d84	Standard query (0)	sc1.checkpoint.com	65	IN (0x0001)	false
May 22, 2024 17:26:59.881381989 CEST	192.168.2.16	1.1.1.1	0x5a00	Standard query (0)	www.checkpoint.com	A (IP address)	IN (0x0001)	false
May 22, 2024 17:26:59.881653070 CEST	192.168.2.16	1.1.1.1	0x456d	Standard query (0)	www.checkpoint.com	65	IN (0x0001)	false
May 22, 2024 17:27:00.068361044 CEST	192.168.2.16	1.1.1.1	0xd7e9	Standard query (0)	www.cpcheckme.com	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:00.068361044 CEST	192.168.2.16	1.1.1.1	0xada6	Standard query (0)	www.cpcheckme.com	65	IN (0x0001)	false
May 22, 2024 17:27:00.089426041 CEST	192.168.2.16	1.1.1.1	0xa55e	Standard query (0)	sc1.checkpoint.com	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:00.089426041 CEST	192.168.2.16	1.1.1.1	0x9567	Standard query (0)	sc1.checkpoint.com	65	IN (0x0001)	false
May 22, 2024 17:27:00.993355036 CEST	192.168.2.16	1.1.1.1	0x259c	Standard query (0)	sc1.checkpoint.com	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:00.993912935 CEST	192.168.2.16	1.1.1.1	0xe18e	Standard query (0)	sc1.checkpoint.com	65	IN (0x0001)	false
May 22, 2024 17:27:01.022021055 CEST	192.168.2.16	1.1.1.1	0x808a	Standard query (0)	sc1.checkpoint.com	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:01.022094011 CEST	192.168.2.16	1.1.1.1	0x675e	Standard query (0)	sc1.checkpoint.com	65	IN (0x0001)	false
May 22, 2024 17:27:01.439125061 CEST	192.168.2.16	1.1.1.1	0x481b	Standard query (0)	www.checkpoint.com	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:01.439294100 CEST	192.168.2.16	1.1.1.1	0xa95d	Standard query (0)	www.checkpoint.com	65	IN (0x0001)	false
May 22, 2024 17:27:02.212110043 CEST	192.168.2.16	1.1.1.1	0x33b6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:02.214353085 CEST	192.168.2.16	1.1.1.1	0x2dc6	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 22, 2024 17:27:23.798469067 CEST	192.168.2.16	1.1.1.1	0xb8e7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:23.800107956 CEST	192.168.2.16	1.1.1.1	0xdc1b	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 22, 2024 17:27:33.465327978 CEST	192.168.2.16	1.1.1.1	0xe607	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:33.465547085 CEST	192.168.2.16	1.1.1.1	0x2217	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 22, 2024 17:27:40.840734005 CEST	192.168.2.16	1.1.1.1	0xd735	Standard query (0)	cpcheckmefiles-lb-1966426125.eu-west-1.elb.amazonaws.com	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:40.840972900 CEST	192.168.2.16	1.1.1.1	0x145c	Standard query (0)	cpcheckmefiles-lb-1966426125.eu-west-1.elb.amazonaws.com	65	IN (0x0001)	false
May 22, 2024 17:27:40.931080103 CEST	192.168.2.16	1.1.1.1	0xc1fa	Standard query (0)	cpcheckmefiles-lb-1966426125.eu-west-1.elb.amazonaws.com	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:40.931536913 CEST	192.168.2.16	1.1.1.1	0xb4ec	Standard query (0)	cpcheckmefiles-lb-1966426125.eu-west-1.elb.amazonaws.com	65	IN (0x0001)	false
May 22, 2024 17:27:57.213470936 CEST	192.168.2.16	1.1.1.1	0x3aae	Standard query (0)	www.cpcheckme.com	A (IP address)	IN (0x0001)	false
May 22, 2024 17:28:57.454397917 CEST	192.168.2.16	1.1.1.1	0x5495	Standard query (0)	www.cpcheckme.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 22, 2024 17:26:57.714221954 CEST	1.1.1.1	192.168.2.16	0xec08	No error (0)	www.cpcheckme.com	dualstack.elb-ireland1-1194672184.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 22, 2024 17:26:57.714221954 CEST	1.1.1.1	192.168.2.16	0xec08	No error (0)	dualstack.elb-ireland1-1194672184.eu-west-1.elb.amazonaws.com		52.49.232.14	A (IP address)	IN (0x0001)	false
May 22, 2024 17:26:57.714221954 CEST	1.1.1.1	192.168.2.16	0xec08	No error (0)	dualstack.elb-ireland1-1194672184.eu-west-1.elb.amazonaws.com		52.213.172.255	A (IP address)	IN (0x0001)	false
May 22, 2024 17:26:57.716526985 CEST	1.1.1.1	192.168.2.16	0xafd8	No error (0)	www.cpcheckme.com	dualstack.elb-ireland1-1194672184.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 22, 2024 17:26:58.587925911 CEST	1.1.1.1	192.168.2.16	0x551a	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
May 22, 2024 17:26:58.587925911 CEST	1.1.1.1	192.168.2.16	0x551a	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
May 22, 2024 17:26:58.587940931 CEST	1.1.1.1	192.168.2.16	0x6d14	No error (0)	www.google.com			65	IN (0x0001)	false
May 22, 2024 17:26:58.588676929 CEST	1.1.1.1	192.168.2.16	0xb380	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
May 22, 2024 17:26:58.589442015 CEST	1.1.1.1	192.168.2.16	0x8b22	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
May 22, 2024 17:26:59.882167101 CEST	1.1.1.1	192.168.2.16	0x9d84	No error (0)	sc1.checkpoint.com	new-sc1.checkpoint.com.edgekey.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 22, 2024 17:26:59.882180929 CEST	1.1.1.1	192.168.2.16	0xf1c0	No error (0)	sc1.checkpoint.com	new-sc1.checkpoint.com.edgekey.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 22, 2024 17:26:59.891844034 CEST	1.1.1.1	192.168.2.16	0x5a00	No error (0)	www.checkpoint.com	d4epvaz4tpdrm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 22, 2024 17:26:59.891844034 CEST	1.1.1.1	192.168.2.16	0x5a00	No error (0)	d4epvaz4tpdrm.cloudfront.net		18.66.147.95	A (IP address)	IN (0x0001)	false
May 22, 2024 17:26:59.891844034 CEST	1.1.1.1	192.168.2.16	0x5a00	No error (0)	d4epvaz4tpdrm.cloudfront.net		18.66.147.96	A (IP address)	IN (0x0001)	false
May 22, 2024 17:26:59.891844034 CEST	1.1.1.1	192.168.2.16	0x5a00	No error (0)	d4epvaz4tpdrm.cloudfront.net		18.66.147.63	A (IP address)	IN (0x0001)	false
May 22, 2024 17:26:59.891844034 CEST	1.1.1.1	192.168.2.16	0x5a00	No error (0)	d4epvaz4tpdrm.cloudfront.net		18.66.147.106	A (IP address)	IN (0x0001)	false
May 22, 2024 17:26:59.919545889 CEST	1.1.1.1	192.168.2.16	0x456d	No error (0)	www.checkpoint.com	d4epvaz4tpdrm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 22, 2024 17:27:00.199343920 CEST	1.1.1.1	192.168.2.16	0xa55e	No error (0)	sc1.checkpoint.com	new-sc1.checkpoint.com.edgekey.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 22, 2024 17:27:00.199357986 CEST	1.1.1.1	192.168.2.16	0x9567	No error (0)	sc1.checkpoint.com	new-sc1.checkpoint.com.edgekey.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 22, 2024 17:27:00.262556076 CEST	1.1.1.1	192.168.2.16	0xada6	No error (0)	www.cpcheckme.com	dualstack.elb-ireland1-1194672184.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 22, 2024 17:27:00.327280998 CEST	1.1.1.1	192.168.2.16	0xd7e9	No error (0)	www.cpcheckme.com	dualstack.elb-ireland1-1194672184.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 22, 2024 17:27:00.327280998 CEST	1.1.1.1	192.168.2.16	0xd7e9	No error (0)	dualstack.elb-ireland1-1194672184.eu-west-1.elb.amazonaws.com		52.49.232.14	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:00.327280998 CEST	1.1.1.1	192.168.2.16	0xd7e9	No error (0)	dualstack.elb-ireland1-1194672184.eu-west-1.elb.amazonaws.com		52.213.172.255	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:01.009318113 CEST	1.1.1.1	192.168.2.16	0x259c	No error (0)	sc1.checkpoint.com	new-sc1.checkpoint.com.edgekey.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 22, 2024 17:27:01.009337902 CEST	1.1.1.1	192.168.2.16	0xe18e	No error (0)	sc1.checkpoint.com	new-sc1.checkpoint.com.edgekey.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 22, 2024 17:27:01.034305096 CEST	1.1.1.1	192.168.2.16	0x808a	No error (0)	sc1.checkpoint.com	new-sc1.checkpoint.com.edgekey.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 22, 2024 17:27:01.044893980 CEST	1.1.1.1	192.168.2.16	0x675e	No error (0)	sc1.checkpoint.com	new-sc1.checkpoint.com.edgekey.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 22, 2024 17:27:01.458389044 CEST	1.1.1.1	192.168.2.16	0x481b	No error (0)	www.checkpoint.com	d4epvaz4tpdrm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 22, 2024 17:27:01.458389044 CEST	1.1.1.1	192.168.2.16	0x481b	No error (0)	d4epvaz4tpdrm.cloudfront.net		18.66.147.106	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:01.458389044 CEST	1.1.1.1	192.168.2.16	0x481b	No error (0)	d4epvaz4tpdrm.cloudfront.net		18.66.147.63	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:01.458389044 CEST	1.1.1.1	192.168.2.16	0x481b	No error (0)	d4epvaz4tpdrm.cloudfront.net		18.66.147.95	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:01.458389044 CEST	1.1.1.1	192.168.2.16	0x481b	No error (0)	d4epvaz4tpdrm.cloudfront.net		18.66.147.96	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:01.478260040 CEST	1.1.1.1	192.168.2.16	0xa95d	No error (0)	www.checkpoint.com	d4epvaz4tpdrm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 22, 2024 17:27:02.227475882 CEST	1.1.1.1	192.168.2.16	0x33b6	No error (0)	www.google.com		216.58.212.164	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:02.232338905 CEST	1.1.1.1	192.168.2.16	0x2dc6	No error (0)	www.google.com			65	IN (0x0001)	false
May 22, 2024 17:27:23.816194057 CEST	1.1.1.1	192.168.2.16	0xdc1b	No error (0)	www.google.com			65	IN (0x0001)	false
May 22, 2024 17:27:23.816205978 CEST	1.1.1.1	192.168.2.16	0xb8e7	No error (0)	www.google.com		216.58.212.164	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:33.485589981 CEST	1.1.1.1	192.168.2.16	0x2217	No error (0)	www.google.com			65	IN (0x0001)	false
May 22, 2024 17:27:33.488403082 CEST	1.1.1.1	192.168.2.16	0xe607	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:40.878243923 CEST	1.1.1.1	192.168.2.16	0xd735	No error (0)	cpcheckmefiles-lb-1966426125.eu-west-1.elb.amazonaws.com		52.213.222.12	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:40.878243923 CEST	1.1.1.1	192.168.2.16	0xd735	No error (0)	cpcheckmefiles-lb-1966426125.eu-west-1.elb.amazonaws.com		34.251.116.243	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:41.031285048 CEST	1.1.1.1	192.168.2.16	0xc1fa	No error (0)	cpcheckmefiles-lb-1966426125.eu-west-1.elb.amazonaws.com		34.251.116.243	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:41.031285048 CEST	1.1.1.1	192.168.2.16	0xc1fa	No error (0)	cpcheckmefiles-lb-1966426125.eu-west-1.elb.amazonaws.com		52.213.222.12	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:57.242538929 CEST	1.1.1.1	192.168.2.16	0x3aae	No error (0)	www.cpcheckme.com	dualstack.elb-ireland1-1194672184.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 22, 2024 17:27:57.242538929 CEST	1.1.1.1	192.168.2.16	0x3aae	No error (0)	dualstack.elb-ireland1-1194672184.eu-west-1.elb.amazonaws.com		52.213.172.255	A (IP address)	IN (0x0001)	false
May 22, 2024 17:27:57.242538929 CEST	1.1.1.1	192.168.2.16	0x3aae	No error (0)	dualstack.elb-ireland1-1194672184.eu-west-1.elb.amazonaws.com		52.49.232.14	A (IP address)	IN (0x0001)	false
May 22, 2024 17:28:57.512703896 CEST	1.1.1.1	192.168.2.16	0x5495	No error (0)	www.cpcheckme.com	dualstack.elb-ireland1-1194672184.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 22, 2024 17:28:57.512703896 CEST	1.1.1.1	192.168.2.16	0x5495	No error (0)	dualstack.elb-ireland1-1194672184.eu-west-1.elb.amazonaws.com		52.213.172.255	A (IP address)	IN (0x0001)	false
May 22, 2024 17:28:57.512703896 CEST	1.1.1.1	192.168.2.16	0x5495	No error (0)	dualstack.elb-ireland1-1194672184.eu-west-1.elb.amazonaws.com		52.49.232.14	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.cpcheckme.com

cdnjs.cloudflare.com

www.google.com

www.checkpoint.com

cpcheckmefiles-lb-1966426125.eu-west-1.elb.amazonaws.com

slscr.update.microsoft.com

fs.microsoft.com

https:

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49700	52.49.232.14	80	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:26:57.733920097 CEST	432	OUT	GET / HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 22, 2024 17:26:58.368083000 CEST	830	IN	HTTP/1.1 302 Found Date: Wed, 22 May 2024 15:26:58 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 217 Connection: keep-alive Set-Cookie: AWSALB=9VZIGm90wfRnifjzbdjTPIdUF6UPW54l7ByzRbnFxTDnL98T7H9Eur6V4lniC5gF19ETotJESA6AHSfP4x4ciKKTv+20fajq6tfw9MvvZN9EQL1oXFLTVActPyOu; Expires=Wed, 29 May 2024 15:26:58 GMT; Path=/ Set-Cookie: AWSALBCORS=9VZIGm90wfRnifjzbdjTPIdUF6UPW54l7ByzRbnFxTDnL98T7H9Eur6V4lniC5gF19ETotJESA6AHSfP4x4ciKKTv+20fajq6tfw9MvvZN9EQL1oXFLTVActPyOu; Expires=Wed, 29 May 2024 15:26:58 GMT; Path=/; SameSite=None Server: Apache Location: http://www.cpcheckme.com/checkme/ Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 63 70 63 68 65 63 6b 6d 65 2e 63 6f 6d 2f 63 68 65 63 6b 6d 65 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="http://www.cpcheckme.com/checkme/">here</a>.</p></body></html>
May 22, 2024 17:26:58.374191046 CEST	581	OUT	GET /checkme/ HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=9VZIGm90wfRnifjzbdjTPIdUF6UPW54l7ByzRbnFxTDnL98T7H9Eur6V4lniC5gF19ETotJESA6AHSfP4x4ciKKTv+20fajq6tfw9MvvZN9EQL1oXFLTVActPyOu
May 22, 2024 17:26:58.552881002 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:26:58 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 3971 Connection: keep-alive Set-Cookie: AWSALB=20Ns1cykc2joaI0uxHJEMYgvGGHUue2tmpaEEXhEwxhv4HNw4ZZKMPAXVTAz9RSIPkfkOMp6Jt2LO8GXwX6ZGNx80WapsoBvhtPVs185fTTCt9rjgfcmGdeqPTBh; Expires=Wed, 29 May 2024 15:26:58 GMT; Path=/ Set-Cookie: AWSALBCORS=20Ns1cykc2joaI0uxHJEMYgvGGHUue2tmpaEEXhEwxhv4HNw4ZZKMPAXVTAz9RSIPkfkOMp6Jt2LO8GXwX6ZGNx80WapsoBvhtPVs185fTTCt9rjgfcmGdeqPTBh; Expires=Wed, 29 May 2024 15:26:58 GMT; Path=/; SameSite=None Server: Apache Accept-Ranges: bytes ETag: W/"3971-1684859588000" Last-Modified: Tue, 23 May 2023 16:33:08 GMT Access-Control-Allow-Origin: * Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 0a 3c 68 74 6d 6c 3e 0a 0a 3c 68 65 61 64 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 61 63 68 65 42 75 73 74 20 3d 20 5b 27 2f 63 68 65 63 6b 2f 74 65 73 74 73 41 73 73 65 74 73 2f 69 6e 73 74 61 6e 74 5f 63 68 65 63 6b 75 70 2e 6a 73 27 5d 3b 0a 20 20 20 20 20 20 20 20 2f 2f 20 76 61 72 20 63 61 63 68 65 42 75 73 74 20 3d 20 5b 27 68 74 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 3a 38 32 38 32 2f 63 68 65 63 6b 2f 74 65 73 74 73 41 73 73 65 74 73 2f 69 6e 73 74 61 6e 74 5f 63 68 65 63 6b 75 70 2e 6a 73 27 5d 3b 2f 2f 66 6f 72 20 6c 69 76 65 20 73 65 72 76 65 72 20 77 69 74 68 20 74 6f 6d 63 61 74 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 69 3d 30 3b 20 69 20 3c 20 63 61 63 68 65 42 75 73 74 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 6c 20 3d 20 64 6f 63 75 6d 65 [TRUNCATED] Data Ascii: <!DOCTYPE html><html><head lang="en"> <script type="text/javascript"> var cacheBust = ['/check/testsAssets/instant_checkup.js']; // var cacheBust = ['http://localhost:8282/check/testsAssets/instant_checkup.js'];//for live server with tomcat for (i=0; i < cacheBust.length; i++){ var el = document.createElement('script'); el.src = cacheBust[i]+"?v=" + Math.random(); document.getElementsByTagName('head')[0].appendChild(el); } </script> ... Google Tag Manager
May 22, 2024 17:26:58.553174973 CEST	1236	IN	Data Raw: 20 2d 2d 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0a 20 20 20 20 20 20 Data Ascii: --> <script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
May 22, 2024 17:26:58.553186893 CEST	1236	IN	Data Raw: 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 27 66 6f 6e 74 73 2f 64 69 6e 2d 6c 69 67 68 74 2e 77 6f 66 66 3f 76 3d 31 2e 30 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 66 6f 6e 74 Data Ascii: ('embedded-opentype'),url('fonts/din-light.woff?v=1.0.0') format('woff'),url('fonts/din-light.ttf?v=1.0.0') format('truetype');font-weight:normal;font-style:normal} </style> <link href="assets/libs/fontawesome/css/font-awesome.min.css
May 22, 2024 17:26:58.555278063 CEST	954	IN	Data Raw: 27 3e 43 68 72 6f 6d 65 3c 2f 61 3e 2e 0a 20 20 20 20 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 28 6e 6f 73 63 72 69 70 74 29 20 2d 2d 3e 0a Data Ascii: '>Chrome</a>. </p></div><![endif]-->... Google Tag Manager (noscript) --><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-5JCRGP" height="0" width="0" style="display:none;visibility:hidden"></if
May 22, 2024 17:26:58.577502012 CEST	526	OUT	GET /checkme/assets/libs/fontawesome/css/font-awesome.min.css HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.cpcheckme.com/checkme/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=20Ns1cykc2joaI0uxHJEMYgvGGHUue2tmpaEEXhEwxhv4HNw4ZZKMPAXVTAz9RSIPkfkOMp6Jt2LO8GXwX6ZGNx80WapsoBvhtPVs185fTTCt9rjgfcmGdeqPTBh
May 22, 2024 17:26:58.755446911 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:26:58 GMT Content-Type: text/css Content-Length: 31000 Connection: keep-alive Set-Cookie: AWSALB=mSYEvnxKYhWrZvZpPQ7YHPDjNSJ6aGRrfDPh2uzNCKHAUxeVQfU4vwLhUae8Uvy6Qg9+WkyD9RjMy4hOLMfWWBV15gvTgmSrwlkyP0j7FAXMbKY/TC1x1jiLd3sQ; Expires=Wed, 29 May 2024 15:26:58 GMT; Path=/ Set-Cookie: AWSALBCORS=mSYEvnxKYhWrZvZpPQ7YHPDjNSJ6aGRrfDPh2uzNCKHAUxeVQfU4vwLhUae8Uvy6Qg9+WkyD9RjMy4hOLMfWWBV15gvTgmSrwlkyP0j7FAXMbKY/TC1x1jiLd3sQ; Expires=Wed, 29 May 2024 15:26:58 GMT; Path=/; SameSite=None Server: Apache Accept-Ranges: bytes ETag: W/"31000-1684859534000" Last-Modified: Tue, 23 May 2023 16:32:14 GMT Access-Control-Allow-Origin: * Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 2e 30 27 29 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 23 69 65 66 69 78 26 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 [TRUNCATED] Data Ascii: /! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawe
May 22, 2024 17:26:58.755465031 CEST	1236	IN	Data Raw: 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 37 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e Data Ascii: some-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-mo
May 22, 2024 17:26:58.755686045 CEST	1236	IN	Data Raw: 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 Data Ascii: form:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)
May 22, 2024 17:26:58.755702019 CEST	1236	IN	Data Raw: 6e 6f 6e 65 7d 2e 66 61 2d 73 74 61 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 32 65 6d 3b 68 65 69 67 68 74 3a 32 65 6d 3b 6c 69 6e 65 2d 68 65 Data Ascii: none}.fa-stack{position:relative;display:inline-block;width:2em;height:2em;line-height:2em;vertical-align:middle}.fa-stack-1x,.fa-stack-2x{position:absolute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font
May 22, 2024 17:26:58.755716085 CEST	1236	IN	Data Raw: 2d 63 69 72 63 6c 65 2d 6f 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 62 22 7d 2e 66 61 2d 69 6e 62 6f 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 63 22 7d 2e 66 61 2d 70 6c 61 79 2d 63 69 72 63 Data Ascii: -circle-o-up:before{content:"\f01b"}.fa-inbox:before{content:"\f01c"}.fa-play-circle-o:before{content:"\f01d"}.fa-rotate-right:before,.fa-repeat:before{content:"\f01e"}.fa-refresh:before{content:"\f021"}.fa-list-alt:before{content:"\f022"}.fa-
May 22, 2024 17:26:58.756329060 CEST	1236	IN	Data Raw: 6d 61 67 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 70 69 63 74 75 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 65 22 7d 2e 66 61 2d 70 65 6e 63 69 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 30 22 Data Ascii: mage:before,.fa-picture-o:before{content:"\f03e"}.fa-pencil:before{content:"\f040"}.fa-map-marker:before{content:"\f041"}.fa-adjust:before{content:"\f042"}.fa-tint:before{content:"\f043"}.fa-edit:before,.fa-pencil-square-o:before{content:"\f04
May 22, 2024 17:26:58.756840944 CEST	1236	IN	Data Raw: 36 30 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 31 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 36 32 22 7d 2e 66 61 Data Ascii: 60"}.fa-arrow-right:before{content:"\f061"}.fa-arrow-up:before{content:"\f062"}.fa-arrow-down:before{content:"\f063"}.fa-mail-forward:before,.fa-share:before{content:"\f064"}.fa-expand:before{content:"\f065"}.fa-compress:before{content:"\f066"
May 22, 2024 17:26:58.757276058 CEST	1236	IN	Data Raw: 22 7d 2e 66 61 2d 63 61 6d 65 72 61 2d 72 65 74 72 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 33 22 7d 2e 66 61 2d 6b 65 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 34 22 7d 2e 66 61 2d 67 65 61 72 73 Data Ascii: "}.fa-camera-retro:before{content:"\f083"}.fa-key:before{content:"\f084"}.fa-gears:before,.fa-cogs:before{content:"\f085"}.fa-comments:before{content:"\f086"}.fa-thumbs-o-up:before{content:"\f087"}.fa-thumbs-o-down:before{content:"\f088"}.fa-s
May 22, 2024 17:26:59.451472998 CEST	512	OUT	GET /check/testsAssets/instant_checkup.js?v=0.6652561465103368 HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.cpcheckme.com/checkme/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=hgou4MgWyuf1NbxB58p0H24yiV8HjvF4TXMdYeCCY4/W+fPDj1b5HkRAWWgeorZvRW/BM00Apj7x+C8RBFRquQVELDEB/a/egyaCG+1E3tzH/Yfp3YLoph15T1jP
May 22, 2024 17:26:59.636899948 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:26:59 GMT Content-Type: application/javascript Content-Length: 11494 Connection: keep-alive Set-Cookie: AWSALB=rNwJ/gw1aCiGSddXo8tle6DTKjzDDrGTr1FsZcdttAgmUPmQlXsIxDRdIMU85JI0wKEYqybpebD1dufFxwO59QWmgjB4zQvAXsHzCTnadZq9W152JyctXaTLr4Or; Expires=Wed, 29 May 2024 15:26:59 GMT; Path=/ Set-Cookie: AWSALBCORS=rNwJ/gw1aCiGSddXo8tle6DTKjzDDrGTr1FsZcdttAgmUPmQlXsIxDRdIMU85JI0wKEYqybpebD1dufFxwO59QWmgjB4zQvAXsHzCTnadZq9W152JyctXaTLr4Or; Expires=Wed, 29 May 2024 15:26:59 GMT; Path=/; SameSite=None Server: Apache Accept-Ranges: bytes ETag: W/"11494-1692734355000" Last-Modified: Tue, 22 Aug 2023 19:59:15 GMT Access-Control-Allow-Origin: * Data Raw: 76 61 72 20 64 65 66 61 75 6c 74 5f 74 69 6d 65 6f 75 74 20 3d 20 31 30 30 30 30 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 5f 74 65 73 74 5f 72 65 73 28 75 72 6c 2c 20 74 65 73 74 5f 72 65 73 75 6c 74 29 20 7b 0a 09 69 66 20 28 74 65 73 74 5f 72 65 73 75 6c 74 29 0a 09 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 50 61 73 73 65 64 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 65 6c 73 65 0a 09 09 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 46 61 69 6c 65 64 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 72 65 74 75 72 6e 20 7b 20 27 74 65 73 74 5f 72 65 73 75 6c 74 27 3a 20 74 65 73 74 5f 72 65 73 75 6c 74 20 7d 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 78 68 72 5f 74 65 73 74 28 6a 73 6f 6e 2c 20 63 62 29 20 7b 0a 09 74 72 79 20 7b 0a 09 09 76 61 72 20 75 72 6c 20 3d 20 6a 73 6f 6e 5b 22 75 72 6c 22 5d 3b 0a 09 09 75 72 6c 20 2b 3d 20 28 75 72 6c 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 20 3e 20 30 29 20 3f 20 22 26 22 20 3a 20 22 3f 22 3b 0a 09 09 75 72 6c 20 2b 3d 20 27 73 74 61 74 69 63 3d 43 50 43 68 65 63 6b 4d [TRUNCATED] Data Ascii: var default_timeout = 10000;function get_test_res(url, test_result) {if (test_result)console.log("Passed: " + url);elseconsole.warn("Failed: " + url);return { 'test_result': test_result };}function xhr_test(json, cb) {try {var url = json["url"];url += (url.indexOf('?') > 0) ? "&" : "?";url += 'static=CPCheckMe&rand=' + new Date().getTime();var xhr = new XMLHttpRequest();xhr.onload = function() {var success = (xhr.status != 404) && (xhr.status != 200);if ((xhr.status == 200) && (json["expected_size"
May 22, 2024 17:26:59.882162094 CEST	537	OUT	GET /checkme/rest/test/getExcludedEmails?ts=1716391619429 HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive Accept: application/json, text/plain, / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Referer: http://www.cpcheckme.com/checkme/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rNwJ/gw1aCiGSddXo8tle6DTKjzDDrGTr1FsZcdttAgmUPmQlXsIxDRdIMU85JI0wKEYqybpebD1dufFxwO59QWmgjB4zQvAXsHzCTnadZq9W152JyctXaTLr4Or
May 22, 2024 17:27:00.109935045 CEST	751	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:00 GMT Content-Type: application/json Content-Length: 87 Connection: keep-alive Set-Cookie: AWSALB=0mYBx9525ryXtIoqeRqKbJeZKPWEHu74769q2/P/0rN0jCrBXwkvsh1iHvz66BNYG2PgBlt8EEIkoOwHqxZuE1UA1bCeqI+XBChklCloRHSo5d4L1vPJDqnTmwM7; Expires=Wed, 29 May 2024 15:27:00 GMT; Path=/ Set-Cookie: AWSALBCORS=0mYBx9525ryXtIoqeRqKbJeZKPWEHu74769q2/P/0rN0jCrBXwkvsh1iHvz66BNYG2PgBlt8EEIkoOwHqxZuE1UA1bCeqI+XBChklCloRHSo5d4L1vPJDqnTmwM7; Expires=Wed, 29 May 2024 15:27:00 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 5b 22 67 6d 61 69 6c 22 2c 22 68 6f 74 6d 61 69 6c 22 2c 22 79 61 68 6f 6f 22 2c 22 6d 61 69 6c 22 2c 22 6f 75 74 6c 6f 6f 6b 22 2c 22 67 6d 78 22 2c 22 70 72 6f 74 6f 6e 6d 61 69 6c 22 2c 22 61 6f 6c 22 2c 22 79 61 6e 64 65 78 22 2c 22 69 63 6c 6f 75 64 22 5d Data Ascii: ["gmail","hotmail","yahoo","mail","outlook","gmx","protonmail","aol","yandex","icloud"]
May 22, 2024 17:27:23.400511026 CEST	611	OUT	GET /checkme/rest/test/getExcludedEmails?ts=1716391642959 HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive Accept: application/json, text/plain, / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Referer: http://www.cpcheckme.com/checkme/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=OwocWPpZs5cdNA0YDmhebwepfiq1p6/4VMaaW37qnkp+q4fj95+8PSwINOLtf1mdvOf1D7REgn5mVAZr8l+unKdwXyocn3Ycu2jaq+iEhdf37h4/X5lgG5KVoodp
May 22, 2024 17:27:23.581098080 CEST	751	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:23 GMT Content-Type: application/json Content-Length: 87 Connection: keep-alive Set-Cookie: AWSALB=cFGMXUN96TLXW7m1KAtQw1o0Wwl0SflKhVow0etQKvxcO8SPmedQnvmG0pYlGn5m7IXRRjFKDNYyMhf+fwOGNYF9NXBlLcPjP7nQ/QIglWbIdJrzhSWiiNfg6CY9; Expires=Wed, 29 May 2024 15:27:23 GMT; Path=/ Set-Cookie: AWSALBCORS=cFGMXUN96TLXW7m1KAtQw1o0Wwl0SflKhVow0etQKvxcO8SPmedQnvmG0pYlGn5m7IXRRjFKDNYyMhf+fwOGNYF9NXBlLcPjP7nQ/QIglWbIdJrzhSWiiNfg6CY9; Expires=Wed, 29 May 2024 15:27:23 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 5b 22 67 6d 61 69 6c 22 2c 22 68 6f 74 6d 61 69 6c 22 2c 22 79 61 68 6f 6f 22 2c 22 6d 61 69 6c 22 2c 22 6f 75 74 6c 6f 6f 6b 22 2c 22 67 6d 78 22 2c 22 70 72 6f 74 6f 6e 6d 61 69 6c 22 2c 22 61 6f 6c 22 2c 22 79 61 6e 64 65 78 22 2c 22 69 63 6c 6f 75 64 22 5d Data Ascii: ["gmail","hotmail","yahoo","mail","outlook","gmx","protonmail","aol","yandex","icloud"]
May 22, 2024 17:27:23.589293957 CEST	592	OUT	GET /checkme/rest/utils/getCaptchaType HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive Accept: application/json, text/plain, / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Referer: http://www.cpcheckme.com/checkme/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=cFGMXUN96TLXW7m1KAtQw1o0Wwl0SflKhVow0etQKvxcO8SPmedQnvmG0pYlGn5m7IXRRjFKDNYyMhf+fwOGNYF9NXBlLcPjP7nQ/QIglWbIdJrzhSWiiNfg6CY9
May 22, 2024 17:27:23.774127007 CEST	590	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:23 GMT Content-Type: application/json Content-Length: 8 Connection: keep-alive Set-Cookie: AWSALB=tQ/HqqPzR3/wvgjJxk7ib3UqJHaNOwpesce7/Aswl89Emsw4KfNk0xrunezgh/AkEI0sL+Plgg8Tfs8QPbaKEFaCtZ/hMiCP3Tpfvy/Tl1IqUNJFuTc/gcFEuLdw; Expires=Wed, 29 May 2024 15:27:23 GMT; Path=/ Set-Cookie: AWSALBCORS=tQ/HqqPzR3/wvgjJxk7ib3UqJHaNOwpesce7/Aswl89Emsw4KfNk0xrunezgh/AkEI0sL+Plgg8Tfs8QPbaKEFaCtZ/hMiCP3Tpfvy/Tl1IqUNJFuTc/gcFEuLdw; Expires=Wed, 29 May 2024 15:27:23 GMT; Path=/; SameSite=None Server: Apache Access-Control-Allow-Origin: * Data Raw: 22 47 4f 4f 47 4c 45 22 Data Ascii: "GOOGLE"
May 22, 2024 17:27:35.791786909 CEST	1392	OUT	POST /checkme/rest/test/startScan HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive Content-Length: 53 Accept: application/json, text/plain, / recaptcha-response: 03AFcWeA6WvnyrQJn06SJx5xd3h86h5aQuwf-ZJA3TJM7doWWVmMiy1ujpRylAfx-B9T_k-P-cqscLHdrJDYDmvHb3R7Sg-rDZxKchLnrvNZObc53Z1GqKjTI7jk0iDSqXytgaWB-JtzkwAXXFXZFwEOuWZDBch6efPrBe7LzatU23M418DgvjIhPP1sSTw0EyrqqfDNmBVeSqqkqS5OWb3nrbCUw1OavCI7WAKB_M3e2wzSaA97YUPUUkDEux5rWi3cdqB8Ey4gBAeGvBdmPTngzwmXdbGUHKtW8_b84xGKaKuZy4lrO6s4jPSPR9EHlGMFH-hn6UYJz7n4Pdbp8xspjwkY-TiJYdVzJqZmfW6KIUO77LQMveHvzMcM8UU62IJ00z4CqzrRrhYqzXE9DLbRelYJbIrwRP5B_IwqX4PsvbyVI0XO6qXrAcOYwMEY0nCLPmwTitho0IFXeV0xhj7DGnIxH8JSP10tSD2iSOevnxz8-OrrXd4Dpj-RiwYcBILgQWPYeS5TdoHDhjOIt-VpMPly5QXyeo6v7JYzphuTsd8OuQnQLsAiqFT7R8cOK9qj1TzZ6a2JPcxer8JpCZKk9uxoRdkFygNTWwL0TrXzKwr_AWEOnqHmToA1uws2xodnhw4rpXNOpus5VsiMQHhkZYmkVQnrnyOx63pTPwlsXcUgZtXdDzC5Y User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Origin: http://www.cpcheckme.com Referer: http://www.cpcheckme.com/checkme/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=ak9SY8TPsQNe93WRPRpIg1FnmR5cg6ewXFJLL/a90Yp+yxcH9d8ImadfD+w1eSXjqUO0sstMW7nlQagVlJkAnZ3RAvNQvtn8/91qdnpD0dkc74DuSaV+Z53JHFgH
May 22, 2024 17:27:36.128293037 CEST	780	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:36 GMT Content-Type: application/json Content-Length: 115 Connection: keep-alive Set-Cookie: AWSALB=sc8NwWVq+v4WUX8RsnnqqQjt23RnYsJWdQGvOmPVSOjA9+AMus/hV7yrMIehIaJULtIV8pppvOplgNrGLLRr2lylZJWL/W5STfBjbguv9QM7Ad0tbXdaYI21Lg7W; Expires=Wed, 29 May 2024 15:27:35 GMT; Path=/ Set-Cookie: AWSALBCORS=sc8NwWVq+v4WUX8RsnnqqQjt23RnYsJWdQGvOmPVSOjA9+AMus/hV7yrMIehIaJULtIV8pppvOplgNrGLLRr2lylZJWL/W5STfBjbguv9QM7Ad0tbXdaYI21Lg7W; Expires=Wed, 29 May 2024 15:27:35 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 69 64 22 3a 22 4e 6d 49 31 4f 44 4d 78 59 32 45 74 5a 44 4d 30 59 53 30 30 4f 47 4d 78 4c 57 45 78 59 6a 4d 74 4e 6a 6b 33 5a 6d 45 32 5a 6a 68 6b 4f 54 59 34 4d 54 63 78 4e 6a 4d 35 4d 54 59 31 4e 54 6b 7a 4e 77 3d 3d 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 75 73 22 2c 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"id":"NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw==","countryCode":"us","token":"yt22zMIg"}
May 22, 2024 17:27:36.131891012 CEST	804	OUT	POST /checkme/rest/test/updateStatuses HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive Content-Length: 111 Accept: application/json, text/plain, / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Origin: http://www.cpcheckme.com Referer: http://www.cpcheckme.com/checkme/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=sc8NwWVq+v4WUX8RsnnqqQjt23RnYsJWdQGvOmPVSOjA9+AMus/hV7yrMIehIaJULtIV8pppvOplgNrGLLRr2lylZJWL/W5STfBjbguv9QM7Ad0tbXdaYI21Lg7W Data Raw: 7b 22 69 64 22 3a 22 4e 6d 49 31 4f 44 4d 78 59 32 45 74 5a 44 4d 30 59 53 30 30 4f 47 4d 78 4c 57 45 78 59 6a 4d 74 4e 6a 6b 33 5a 6d 45 32 5a 6a 68 6b 4f 54 59 34 4d 54 63 78 4e 6a 4d 35 4d 54 59 31 4e 54 6b 7a 4e 77 3d 3d 22 2c 22 73 63 61 6e 53 74 61 74 75 73 65 73 22 3a 5b 7b 22 73 63 61 6e 54 79 70 65 22 3a 22 32 22 7d 5d 7d Data Ascii: {"id":"NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw==","scanStatuses":[{"scanType":"2"}]}
May 22, 2024 17:27:36.316692114 CEST	631	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:36 GMT Content-Length: 0 Connection: keep-alive Set-Cookie: AWSALB=jMrsGMf4HBXr3E8kN3u1knV6ORUbOzYHexJToT6pYanc7EwjCLlIunqEls3kew9A2JhXDg2hjSNTbamGtJqEPTE09X6hz0rmhDdHstrEOzA1ADhSzxn+cukEu0d7; Expires=Wed, 29 May 2024 15:27:36 GMT; Path=/ Set-Cookie: AWSALBCORS=jMrsGMf4HBXr3E8kN3u1knV6ORUbOzYHexJToT6pYanc7EwjCLlIunqEls3kew9A2JhXDg2hjSNTbamGtJqEPTE09X6hz0rmhDdHstrEOzA1ADhSzxn+cukEu0d7; Expires=Wed, 29 May 2024 15:27:36 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: *
May 22, 2024 17:27:46.047131062 CEST	690	OUT	GET /checkme/rest/test/getScanStatus?ts=1716391665606&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2 HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive Accept: application/json, text/plain, / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Referer: http://www.cpcheckme.com/checkme/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=i558L86v2j8D6ongz1E93KPCv88l5W+UelXAcR9Awmxn9haPtL4kuJjUF3Fg/FBPKJuGqgv2P8PZ6olc1W7shLsOwqbdLt1kSM1wGpZH7cvDodAllhAXS1XpbbIA
May 22, 2024 17:27:46.226417065 CEST	631	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:46 GMT Content-Length: 0 Connection: keep-alive Set-Cookie: AWSALB=x3L0QCYDVkvVRNRGzz0BKBrIucCZorXH9VrET52jl7rscxdCRRTtIQ85NnLZq4kRx187ftH75xALeZe6QGiG5t8nL02KsMevp3/rItyCVg1IftkfQnGRjS5mT/i3; Expires=Wed, 29 May 2024 15:27:46 GMT; Path=/ Set-Cookie: AWSALBCORS=x3L0QCYDVkvVRNRGzz0BKBrIucCZorXH9VrET52jl7rscxdCRRTtIQ85NnLZq4kRx187ftH75xALeZe6QGiG5t8nL02KsMevp3/rItyCVg1IftkfQnGRjS5mT/i3; Expires=Wed, 29 May 2024 15:27:46 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: *
May 22, 2024 17:27:51.234273911 CEST	690	OUT	GET /checkme/rest/test/getScanStatus?ts=1716391670793&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2 HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive Accept: application/json, text/plain, / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Referer: http://www.cpcheckme.com/checkme/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=+ESM9fTkWMrifQjs9xv+BOBt/iuLeuxrfpoWLjmjaDSaaH8mm4pCvt7kWQQwWRNseD7JSDCSggFLIBec9CyRekMU/HT+p1E6Z4D+MfAZnJUgwqi5eWfIQg/wGcY4
May 22, 2024 17:27:51.461894989 CEST	631	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:51 GMT Content-Length: 0 Connection: keep-alive Set-Cookie: AWSALB=fS0XR/8MNPGNfiCAn31eT9IrVnRLIezYwWqrKxPzDiDg+LZ4xO3UcbHm0ihfvVzDjWUSQxTFNzH/1eV870hDvARBw3FH/+3NIHFHKy2nHiCUGA4E8z5Gba1X/uFp; Expires=Wed, 29 May 2024 15:27:51 GMT; Path=/ Set-Cookie: AWSALBCORS=fS0XR/8MNPGNfiCAn31eT9IrVnRLIezYwWqrKxPzDiDg+LZ4xO3UcbHm0ihfvVzDjWUSQxTFNzH/1eV870hDvARBw3FH/+3NIHFHKy2nHiCUGA4E8z5Gba1X/uFp; Expires=Wed, 29 May 2024 15:27:51 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: *
May 22, 2024 17:27:56.483824015 CEST	690	OUT	GET /checkme/rest/test/getScanStatus?ts=1716391676043&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2 HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive Accept: application/json, text/plain, / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Referer: http://www.cpcheckme.com/checkme/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=DrxrrxdYOi18LtQfPSo+DNSPBORE7Z70/qW66K1uH+SlmoEJwoLcrASiouRyKNERRBOSQyLwIxy3uWFuFF54uCu9Q51TqG/+gnnnuOa9wcYZmfOvHQjc2zgP6JXF
May 22, 2024 17:27:56.661128044 CEST	631	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:56 GMT Content-Length: 0 Connection: keep-alive Set-Cookie: AWSALB=qHNXzFQPR8bUEUBeimgOzm3UX2HL/a3tLkxZjxG2G2tIzw9oQBZAtu0/QXva+/qPH9OzUbc0rQcrpbDEap0ZEKrCCDYv96kGcf0ImmPp9anA5VY+y8HdyXW+9dfZ; Expires=Wed, 29 May 2024 15:27:56 GMT; Path=/ Set-Cookie: AWSALBCORS=qHNXzFQPR8bUEUBeimgOzm3UX2HL/a3tLkxZjxG2G2tIzw9oQBZAtu0/QXva+/qPH9OzUbc0rQcrpbDEap0ZEKrCCDYv96kGcf0ImmPp9anA5VY+y8HdyXW+9dfZ; Expires=Wed, 29 May 2024 15:27:56 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: *
May 22, 2024 17:28:01.669121981 CEST	682	OUT	GET /checkme/rest/test/getScanStatus?ts=1716391681227&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2 HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive Accept: application/json, text/plain, / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Referer: http://www.cpcheckme.com/checkme/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; AWSALB=wiUJTf+Zln1u9bnrCjRfGvCWkbzer2LZ/9+ZIyESVk5xNHvIgLPX1SstXDNLZp03vt0q+HsRdDV9ckccZqApd1qjH4No4QnMruPPcqGt5FAmYZFdxIGO/4Yjp7CY
May 22, 2024 17:28:01.896898985 CEST	670	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:01 GMT Content-Type: application/json Content-Length: 7 Connection: keep-alive Set-Cookie: AWSALB=I8BfgbBPrnfAuyYj8Y2QYwDDgLbx4qdg0ehvojFdl9FxCozEKMBDB44icljiAClTZfRDxBZ6+ZVHDSlu3QnVJyYo3NnNZwNs/8EPmUNj1SasgjZ3Zb/WCF2FWtNg; Expires=Wed, 29 May 2024 15:28:01 GMT; Path=/ Set-Cookie: AWSALBCORS=I8BfgbBPrnfAuyYj8Y2QYwDDgLbx4qdg0ehvojFdl9FxCozEKMBDB44icljiAClTZfRDxBZ6+ZVHDSlu3QnVJyYo3NnNZwNs/8EPmUNj1SasgjZ3Zb/WCF2FWtNg; Expires=Wed, 29 May 2024 15:28:01 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 57 41 49 54 49 4e 47 Data Ascii: WAITING

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49699	52.49.232.14	80	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:26:58.580864906 CEST	493	OUT	GET /checkme/vendor.16be15e20a43eba17559.js HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.cpcheckme.com/checkme/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=20Ns1cykc2joaI0uxHJEMYgvGGHUue2tmpaEEXhEwxhv4HNw4ZZKMPAXVTAz9RSIPkfkOMp6Jt2LO8GXwX6ZGNx80WapsoBvhtPVs185fTTCt9rjgfcmGdeqPTBh
May 22, 2024 17:26:58.763725996 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:26:58 GMT Content-Type: application/javascript Content-Length: 1050369 Connection: keep-alive Set-Cookie: AWSALB=bsduMZTomvYSFgNx2wR5xW+6b2VDaeR0hqECoc9U1JO75fYazRzpSpARtz8sAODtnVU3RmQyTzFblof/N5wH5LrI2mWHMybo+IrGR3MI93Mh9syoIRR9XWLxQ6Xs; Expires=Wed, 29 May 2024 15:26:58 GMT; Path=/ Set-Cookie: AWSALBCORS=bsduMZTomvYSFgNx2wR5xW+6b2VDaeR0hqECoc9U1JO75fYazRzpSpARtz8sAODtnVU3RmQyTzFblof/N5wH5LrI2mWHMybo+IrGR3MI93Mh9syoIRR9XWLxQ6Xs; Expires=Wed, 29 May 2024 15:26:58 GMT; Path=/; SameSite=None Server: Apache Accept-Ranges: bytes ETag: W/"1050369-1684859588000" Last-Modified: Tue, 23 May 2023 16:33:08 GMT Access-Control-Allow-Origin: * Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 69 66 28 72 5b 6e 5d 29 72 65 74 75 72 6e 20 72 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 72 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 65 29 2c 6f 2e 6c 6f 61 64 65 64 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3b 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 75 29 7b 66 6f 72 28 76 61 72 20 61 2c 73 2c 63 3d 30 2c 6c 3d 5b 5d 3b 63 3c 69 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 73 3d 69 5b 63 5d 2c 6f 5b 73 5d 26 26 6c 2e 70 75 73 68 2e 61 70 70 6c 79 28 6c 2c 6f 5b 73 5d 29 2c 6f 5b 73 5d 3d 30 3b 66 6f 72 28 61 20 69 6e 20 75 29 74 5b 61 5d 3d 75 5b 61 5d 3b 66 6f 72 28 6e 26 26 6e 28 69 2c 75 29 3b 6c 2e 6c 65 6e 67 74 68 [TRUNCATED] Data Ascii: !function(t){function e(n){if(r[n])return r[n].exports;var o=r[n]={exports:{},id:n,loaded:!1};return t[n].call(o.exports,o,o.exports,e),o.loaded=!0,o.exports}var n=window.webpackJsonp;window.webpackJsonp=function(i,u){for(var a,s,c=0,l=[];c<i.length;c++)s=i[c],o[s]&&l.push.apply(l,o[s]),o[s]=0;for(a in u)t[a]=u[a];for(n&&n(i,u);l.length;)l.shift().call(null,e);if(u[0])return r[0]=0,e(0)};var r={},o={0:0};return e.e=function(t,n){if(0===o[t])return n.call(null,e);if(void 0!==o[t])o[t].push(n);else{o[t]=[n];var r=document.getElementsByTa
May 22, 2024 17:26:58.763884068 CEST	1236	IN	Data Raw: 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2c 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 69 2e 63 68 61 Data Ascii: gName("head")[0],i=document.createElement("script");i.type="text/javascript",i.charset="utf-8",i.async=!0,i.src=e.p+""+t+".bundle.16be15e20a43eba17559.js",r.appendChild(i)}},e.m=t,e.c=r,e.p="/checkme",e(0)}([function(t,e,n){n(287),n(543),n(327
May 22, 2024 17:26:58.764137983 CEST	1236	IN	Data Raw: 21 30 7d 29 2c 65 5b 22 64 65 66 61 75 6c 74 22 5d 3d 6e 2c 74 2e 65 78 70 6f 72 74 73 3d 65 5b 22 64 65 66 61 75 6c 74 22 5d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 Data Ascii: !0}),e["default"]=n,t.exports=e["default"]},function(t,e){t.exports=function(t){try{return!!t()}catch(e){return!0}}},function(t,e){t.exports="object"==typeof window&&window&&window.Math==Math?window:"object"==typeof self&&self&&self.Math==Math
May 22, 2024 17:26:58.764153957 CEST	1236	IN	Data Raw: 65 2c 6d 3d 69 2e 49 6e 74 38 41 72 72 61 79 2c 62 3d 6d 26 26 6d 2e 70 72 6f 74 6f 74 79 70 65 2c 78 3d 69 2e 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 2c 45 3d 78 26 26 78 2e 70 72 6f 74 6f 74 79 70 65 2c 43 3d 6d 26 26 70 28 6d 29 2c Data Ascii: e,m=i.Int8Array,b=m&&m.prototype,x=i.Uint8ClampedArray,E=x&&x.prototype,C=m&&p(m),A=b&&p(b),w=Object.prototype,_=w.isPrototypeOf,S=!(!i.ArrayBuffer\|\|!i.DataView),k=S&&!!d,P=!1,O={Int8Array:1,Uint8Array:1,Uint8ClampedArray:1,Int16Array:2,Uint16
May 22, 2024 17:26:58.764514923 CEST	1236	IN	Data Raw: 3d 3d 41 26 26 64 28 45 2c 41 29 2c 6f 26 26 21 61 28 41 2c 68 29 29 7b 50 3d 21 30 2c 66 28 41 2c 68 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 74 68 69 73 29 3f 74 68 69 73 5b 76 5d 3a 76 6f 69 64 20 30 7d 7d Data Ascii: ==A&&d(E,A),o&&!a(A,h)){P=!0,f(A,h,{get:function(){return u(this)?this[v]:void 0}});for(r in O)i[r]&&c(i[r],v,r)}S&&d&&p(y)!==w&&d(y,w),t.exports={NATIVE_ARRAY_BUFFER:S,NATIVE_ARRAY_BUFFER_VIEWS:k,TYPED_ARRAY_TAG:P&&v,aTypedArray:F,aTypedArray
May 22, 2024 17:26:58.764530897 CEST	1120	IN	Data Raw: 61 74 63 68 28 72 29 7b 7d 69 66 28 22 67 65 74 22 69 6e 20 6e 7c 7c 22 73 65 74 22 69 6e 20 6e 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 63 63 65 73 73 6f 72 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3b 72 65 74 75 72 6e Data Ascii: atch(r){}if("get"in n\|\|"set"in n)throw TypeError("Accessors not supported");return"value"in n&&(t[e]=n.value),t}},function(t,e){/object-assign(c) Sindre Sorhus@license MIT/"use strict";function n(t){if(null===t\|\|void 0===t)throw new
May 22, 2024 17:26:58.764545918 CEST	892	IN	Data Raw: 74 75 72 6e 20 73 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 39 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 72 28 74 29 29 7d 7d 2c 66 Data Ascii: turn s}},function(t,e,n){var r=n(49);t.exports=function(t){return Object(r(t))}},function(t,e,n){var r=n(18);t.exports=function(t,e,n){if(r(t),void 0===e)return t;switch(n){case 0:return function(){return t.call(e)};case 1:return function(n){r
May 22, 2024 17:26:58.766074896 CEST	1236	IN	Data Raw: 41 74 74 72 69 62 75 74 65 28 68 29 3d 3d 3d 53 74 72 69 6e 67 28 65 29 7c 7c 38 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 74 2e 6e 6f 64 65 56 61 6c 75 65 3d 3d 3d 22 20 72 65 61 63 74 2d 74 65 78 74 3a 20 22 2b 65 2b 22 20 22 7c 7c 38 3d 3d Data Ascii: Attribute(h)===String(e)\|\|8===t.nodeType&&t.nodeValue===" react-text: "+e+" "\|\|8===t.nodeType&&t.nodeValue===" react-empty: "+e+" "}function o(t){for(var e;e=t._renderedComponent;)t=e;return t}function i(t,e){var n=o(t);n._hostNode=e,e[g]=n}fu
May 22, 2024 17:26:58.766092062 CEST	1236	IN	Data Raw: 6f 6d 49 6e 73 74 61 6e 63 65 3a 6c 2c 70 72 65 63 61 63 68 65 43 68 69 6c 64 4e 6f 64 65 73 3a 61 2c 70 72 65 63 61 63 68 65 4e 6f 64 65 3a 69 2c 75 6e 63 61 63 68 65 4e 6f 64 65 3a 75 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 79 7d 2c 66 75 6e 63 74 Data Ascii: omInstance:l,precacheChildNodes:a,precacheNode:i,uncacheNode:u};t.exports=y},function(t,e){var n=t.exports={version:"2.6.12"};"number"==typeof __e&&(__e=n)},function(t,e){var n={}.hasOwnProperty;t.exports=function(t,e){return n.call(t,e)}},fun
May 22, 2024 17:26:58.766422033 CEST	1236	IN	Data Raw: 65 20 33 3a 72 65 74 75 72 6e 21 30 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 76 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 45 3b 63 61 73 65 20 32 3a 43 2e 70 75 73 68 28 76 29 7d 65 6c 73 65 20 69 66 28 6c 29 72 65 74 75 72 6e 21 31 3b 72 Data Ascii: e 3:return!0;case 5:return v;case 6:return E;case 2:C.push(v)}else if(l)return!1;return f?-1:c\|\|l?l:C}}},function(t,e,n){var r=n(104),o=n(34),i=n(371),u=n(27).f;t.exports=function(t){var e=r.Symbol\|\|(r.Symbol={});o(e,t)\|\|u(e,t,{value:i.f(t)})}
May 22, 2024 17:26:58.772120953 CEST	1236	IN	Data Raw: 76 61 72 20 73 20 69 6e 20 61 29 6f 2e 63 61 6c 6c 28 61 2c 73 29 26 26 28 6e 5b 73 5d 3d 61 5b 73 5d 29 7d 7d 76 61 72 20 63 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 63 5b 72 28 73 29 5d 3d 6e 5b 73 5d 3b 72 65 74 75 72 6e 20 63 Data Ascii: var s in a)o.call(a,s)&&(n[s]=a[s])}}var c={};for(var s in n)c[r(s)]=n[s];return c}},function(t,e,n){"use strict";var r=n(935),o=n(933)(),i=0;t.exports=function(t){var e="anim_"+ ++i+ +new Date,n="@"+o+"keyframes "+e+" {";for(var u in t){n+=u+
May 22, 2024 17:26:59.881673098 CEST	541	OUT	GET /checkme/rest/test/getAllTests?ts=1716391619429&category= HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive Accept: application/json, text/plain, / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Referer: http://www.cpcheckme.com/checkme/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rNwJ/gw1aCiGSddXo8tle6DTKjzDDrGTr1FsZcdttAgmUPmQlXsIxDRdIMU85JI0wKEYqybpebD1dufFxwO59QWmgjB4zQvAXsHzCTnadZq9W152JyctXaTLr4Or
May 22, 2024 17:27:00.061681986 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:26:59 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: AWSALB=Gd1uru2VcjlY0Je0e4n8PoEib9ijlg60pKhAZhVIahgFZjZa4+48AVW7q6KoX90AeJDkkWwwBcgaoTr8RoVTKs204AJgEPQ+gL0mR1quQXA7PYaVUT1d0tixllPV; Expires=Wed, 29 May 2024 15:26:59 GMT; Path=/ Set-Cookie: AWSALBCORS=Gd1uru2VcjlY0Je0e4n8PoEib9ijlg60pKhAZhVIahgFZjZa4+48AVW7q6KoX90AeJDkkWwwBcgaoTr8RoVTKs204AJgEPQ+gL0mR1quQXA7PYaVUT1d0tixllPV; Expires=Wed, 29 May 2024 15:26:59 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 31 66 66 38 0d 0a 7b 22 74 65 73 74 43 6f 6c 6c 65 63 74 69 6f 6e 22 3a 5b 7b 22 63 6f 6c 6c 65 63 74 69 6f 6e 54 79 70 65 22 3a 22 31 22 2c 22 74 65 73 74 73 43 6f 6c 6c 65 63 74 69 6f 6e 22 3a 5b 7b 22 69 64 22 3a 32 2c 22 6e 61 6d 65 22 3a 22 4d 61 6c 77 61 72 65 20 49 6e 66 65 63 74 69 6f 6e 22 2c 22 69 6d 61 67 65 4e 61 6d 65 22 3a 22 4d 61 6c 77 61 72 65 5f 49 6e 66 65 63 74 69 6f 6e 22 2c 22 69 6d 61 67 65 55 52 4c 22 3a 22 68 74 74 70 3a 2f 2f 73 63 31 2e 63 68 65 63 6b 70 6f 69 6e 74 2e 63 6f 6d 2f 63 68 65 63 6b 2d 6d 65 2f 52 65 70 6f 72 74 2f 53 56 47 2f 4d 61 6c 77 61 72 65 5f 49 6e 66 65 63 74 69 6f 6e 2e 73 76 67 22 2c 22 73 6f 72 74 4f 72 64 65 72 22 3a 31 2c 22 74 65 73 74 73 4c 69 73 74 22 3a 5b 7b 22 70 72 6f 67 72 65 73 73 5f 64 65 73 63 22 3a 22 44 6f 77 6e 6c 6f 61 64 69 6e 67 20 61 6e 20 69 6e 66 65 63 74 65 64 20 66 69 6c 65 20 20 74 68 72 6f 75 67 68 20 48 54 54 50 2e 22 2c 22 73 68 6f 72 74 5f 64 65 73 63 22 3a 22 44 6f 77 6e 6c 6f 61 64 69 6e 67 20 6f 66 20 69 6e 66 65 63 [TRUNCATED] Data Ascii: 1ff8{"testCollection":[{"collectionType":"1","testsCollection":[{"id":2,"name":"Malware Infection","imageName":"Malware_Infection","imageURL":"http://sc1.checkpoint.com/check-me/Report/SVG/Malware_Infection.svg","sortOrder":1,"testsList":[{"progress_desc":"Downloading an infected file through HTTP.","short_desc":"Downloading of infected zipped file through HTTP.","long_desc":"This test simulates downloading of infected zip file (EICAR virus) through your network.","additionalText":"NULL","appendixText":"NULL","result":null,"id":6,"startTime":0,"endTime":0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49701	52.49.232.14	80	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:26:58.591218948 CEST	493	OUT	GET /checkme/bundle.16be15e20a43eba17559.js HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.cpcheckme.com/checkme/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=20Ns1cykc2joaI0uxHJEMYgvGGHUue2tmpaEEXhEwxhv4HNw4ZZKMPAXVTAz9RSIPkfkOMp6Jt2LO8GXwX6ZGNx80WapsoBvhtPVs185fTTCt9rjgfcmGdeqPTBh
May 22, 2024 17:26:59.236233950 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:26:59 GMT Content-Type: application/javascript Content-Length: 331039 Connection: keep-alive Set-Cookie: AWSALB=hgou4MgWyuf1NbxB58p0H24yiV8HjvF4TXMdYeCCY4/W+fPDj1b5HkRAWWgeorZvRW/BM00Apj7x+C8RBFRquQVELDEB/a/egyaCG+1E3tzH/Yfp3YLoph15T1jP; Expires=Wed, 29 May 2024 15:26:59 GMT; Path=/ Set-Cookie: AWSALBCORS=hgou4MgWyuf1NbxB58p0H24yiV8HjvF4TXMdYeCCY4/W+fPDj1b5HkRAWWgeorZvRW/BM00Apj7x+C8RBFRquQVELDEB/a/egyaCG+1E3tzH/Yfp3YLoph15T1jP; Expires=Wed, 29 May 2024 15:26:59 GMT; Path=/; SameSite=None Server: Apache Accept-Ranges: bytes ETag: W/"331039-1684859588000" Last-Modified: Tue, 23 May 2023 16:33:08 GMT Access-Control-Allow-Origin: * Data Raw: 77 65 62 70 61 63 6b 4a 73 6f 6e 70 28 5b 31 5d 2c 7b 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 22 64 65 66 61 75 6c 74 22 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 4f 7c 7c 76 6f 69 64 20 30 3d 3d 3d 4f 5b 65 5d 3f 6f 28 65 29 3a 4f 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 54 6f 70 22 3a 72 65 74 75 72 6e 20 76 5b 22 64 65 66 61 75 6c 74 22 5d 3b 63 61 73 65 22 50 72 6f 76 69 64 65 72 22 3a 72 65 74 75 72 6e 20 70 2e 50 72 6f 76 69 64 65 72 3b 63 61 73 65 22 73 74 6f 72 65 22 3a 72 65 74 75 72 6e 20 68 5b 22 64 65 66 61 75 6c 74 22 5d 3b 63 61 73 65 22 4d 61 69 6e 22 3a 72 65 74 75 72 6e 20 77 5b 22 64 65 66 61 75 6c 74 22 5d 3b 63 61 73 65 22 42 6f 74 74 6f 6d 22 3a 72 65 74 75 72 6e 20 45 5b 22 64 65 66 61 75 6c [TRUNCATED] Data Ascii: webpackJsonp([1],{0:function(e,t,n){"use strict";function r(e){return e&&e.__esModule?e:{"default":e}}function a(e){return void 0===O\|\|void 0===O[e]?o(e):O[e]}function o(e){switch(e){case"Top":return v["default"];case"Provider":return p.Provider;case"store":return h["default"];case"Main":return w["default"];case"Bottom":return E["default"];case"Link":return g.Link;case"render":return f.render;case"Router":return g.Router;case"browserHistory":return g.browserHistory;case"Route":return g.Route;case"App":return D;case"NotFound":return P}}fu
May 22, 2024 17:26:59.236253977 CEST	1236	IN	Data Raw: 6e 63 74 69 6f 6e 20 5f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 5b 65 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 64 65 6c 65 74 65 20 4f 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 6e Data Ascii: nction _(e,t){return O[e]=t}function i(e){delete O[e]}function s(e){function t(){n.forEach(function(e){O[e]=r[e]})}var n=(0,d["default"])(e),r={};return function(a){n.forEach(function(t){r[t]=O[t],O[t]=e[t]});var o=a();return o&&"function"==ty
May 22, 2024 17:26:59.236324072 CEST	1236	IN	Data Raw: 74 6f 72 79 3a 61 28 22 62 72 6f 77 73 65 72 48 69 73 74 6f 72 79 22 29 7d 2c 53 5b 22 64 65 66 61 75 6c 74 22 5d 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 41 2c 7b 70 61 74 68 3a 22 2f 63 68 65 63 6b 6d 65 22 2c 63 6f 6d 70 6f 6e 65 6e 74 73 Data Ascii: tory:a("browserHistory")},S["default"].createElement(A,{path:"/checkme",components:a("App")}),S["default"].createElement(I,{path:"/checkme/*",component:a("NotFound")})),document.getElementById("app"));var O={},k={};!function(){function e(e,t){
May 22, 2024 17:26:59.236397982 CEST	1236	IN	Data Raw: 73 74 72 75 63 74 6f 72 3d 3d 3d 69 5b 22 64 65 66 61 75 6c 74 22 5d 26 26 65 21 3d 3d 69 5b 22 64 65 66 61 75 6c 74 22 5d 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 Data Ascii: structor===i["default"]&&e!==i["default"].prototype?"symbol":"undefined"==typeof e?"undefined":s(e)}},6:function(e,t,n){e.exports={"default":n(557),__esModule:!0}},12:function(e,t,n){e.exports={"default":n(556),__esModule:!0}},13:function(e,t)
May 22, 2024 17:26:59.236536026 CEST	1236	IN	Data Raw: 61 75 6c 74 22 5d 29 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 7d 2c 31 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e Data Ascii: ault"])(e,t):e.__proto__=t)}},16:function(e,t,n){"use strict";function r(e){return e&&e.__esModule?e:{"default":e}}t.__esModule=!0;var a=n(5),o=r(a);t["default"]=function(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - supe
May 22, 2024 17:26:59.236548901 CEST	1236	IN	Data Raw: 3d 22 72 65 73 74 2f 74 65 73 74 2f 73 74 61 72 74 53 63 61 6e 22 2c 74 2e 55 50 44 41 54 45 5f 53 54 41 54 55 53 3d 22 72 65 73 74 2f 74 65 73 74 2f 75 70 64 61 74 65 53 74 61 74 75 73 65 73 22 2c 74 2e 53 41 56 45 5f 55 53 45 52 5f 44 45 54 41 Data Ascii: ="rest/test/startScan",t.UPDATE_STATUS="rest/test/updateStatuses",t.SAVE_USER_DETAILS_POST="rest/test/saveUserDetails",t.SEND_MAIL="rest/test/sendMail",t.LOG_API_POST="rest/log/clientLog",t.GET_SCAN_TYPES_DETAILS="rest/test/getScanTypesDetails
May 22, 2024 17:26:59.236561060 CEST	1236	IN	Data Raw: 41 4e 5f 54 59 50 45 22 2c 74 2e 53 45 54 5f 53 43 41 4e 5f 50 41 52 41 4d 45 54 45 52 3d 22 53 45 54 5f 53 43 41 4e 5f 50 41 52 41 4d 45 54 45 52 22 2c 74 2e 53 45 54 5f 54 45 53 54 53 5f 44 41 54 41 5f 44 49 53 50 4c 41 59 3d 22 53 45 54 5f 54 Data Ascii: AN_TYPE",t.SET_SCAN_PARAMETER="SET_SCAN_PARAMETER",t.SET_TESTS_DATA_DISPLAY="SET_TESTS_DATA_DISPLAY",t.SET_SCANS_DATA_DISPLAY="SET_SCANS_DATA_DISPLAY",t.SET_TESTS_TO_RUN="SET_TESTS_TO_RUN",t.ADD_COMPLETED_SCAN_TYPE="ADD_COMPLETED_SCAN_TYPE",t.
May 22, 2024 17:26:59.236732006 CEST	1236	IN	Data Raw: 3d 77 5b 65 5d 3f 73 28 65 29 3a 77 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 78 69 6f 73 22 3a 72 65 74 75 72 6e 20 79 3b 63 61 73 65 22 61 70 69 54 69 6d 65 6f 75 74 22 3a 72 65 74 75 Data Ascii: =w[e]?s(e):w[e]}function s(e){switch(e){case"axios":return y;case"apiTimeout":return v;case"postData":return b;case"getData":return R;case"getTimeStamp":return o;case"getDataWithTimeout":return E;case"createClientErrorRequest":return _;case"re
May 22, 2024 17:26:59.236745119 CEST	1236	IN	Data Raw: 61 29 3a 6e 28 21 30 29 7d 29 5b 22 63 61 74 63 68 22 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 65 2e 72 65 73 70 6f 6e 73 65 7c 7c 65 2e 72 65 71 75 65 73 74 3f 21 30 3a 21 31 29 7d 29 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e Data Ascii: a):n(!0)})["catch"](function(e){n(e.response\|\|e.request?!0:!1)})},b=function(e,t,n,r,a,o){return i("axios").post(e,t,n).then(function(e){200===e.status?void 0!==a&&a(null==r?e.data:r):void 0!==o&&(null==r?o():o(r,e.status,e.data))})["catch"](f
May 22, 2024 17:26:59.243398905 CEST	1236	IN	Data Raw: 6e 2c 72 29 7b 72 65 74 75 72 6e 20 69 28 22 67 65 74 44 61 74 61 22 29 28 69 28 22 67 65 74 54 69 6d 65 53 74 61 6d 70 22 29 28 65 29 2c 74 2c 6e 2c 72 29 7d 2c 74 2e 67 65 74 43 61 70 74 63 68 61 54 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: n,r){return i("getData")(i("getTimeStamp")(e),t,n,r)},t.getCaptchaType=function(e){return i("axios").get(e)},{}),T={};!function(){function e(e,t){(0,f["default"])(T,e,{value:t,enumerable:!1,configurable:!0})}e("__get__",i),e("__GetDependency__
May 22, 2024 17:26:59.248526096 CEST	1236	IN	Data Raw: 20 30 3b 76 61 72 20 75 3d 6e 28 33 29 2c 6c 3d 72 28 75 29 2c 64 3d 6e 28 36 29 2c 66 3d 72 28 64 29 2c 70 3d 6e 28 32 29 2c 6d 3d 72 28 70 29 2c 68 3d 6e 28 35 29 2c 67 3d 72 28 68 29 2c 79 3d 6e 28 32 30 31 29 2c 76 3d 6e 28 35 33 38 29 2c 52 Data Ascii: 0;var u=n(3),l=r(u),d=n(6),f=r(d),p=n(2),m=r(p),h=n(5),g=r(h),y=n(201),v=n(538),R=r(v),E=o("createStore")(o("rootReducer"),{});t["default"]=o("store");var b="undefined"==typeof E?"undefined":(0,g["default"])(E);"object"!==b&&"function"!==b\|\|!
May 22, 2024 17:26:59.874514103 CEST	509	OUT	GET /checkme/rest/test/getScanTypesDetails?ts=1716391619425 HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.cpcheckme.com/checkme/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rNwJ/gw1aCiGSddXo8tle6DTKjzDDrGTr1FsZcdttAgmUPmQlXsIxDRdIMU85JI0wKEYqybpebD1dufFxwO59QWmgjB4zQvAXsHzCTnadZq9W152JyctXaTLr4Or
May 22, 2024 17:27:00.070921898 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:26:59 GMT Content-Type: application/json Content-Length: 1883 Connection: keep-alive Set-Cookie: AWSALB=fQ1vuCAQ+LX5fP9FFpX4jdqnMkhiJvjU3nvRj5GtmZ1hggHpUKlLmknHsxzKLxUo0skpUvNrqdMIjwyKtJS7T38Vlg2znlGzG4Ypo11dfhg4GJMJ1SR3ctSOwdvL; Expires=Wed, 29 May 2024 15:26:59 GMT; Path=/ Set-Cookie: AWSALBCORS=fQ1vuCAQ+LX5fP9FFpX4jdqnMkhiJvjU3nvRj5GtmZ1hggHpUKlLmknHsxzKLxUo0skpUvNrqdMIjwyKtJS7T38Vlg2znlGzG4Ypo11dfhg4GJMJ1SR3ctSOwdvL; Expires=Wed, 29 May 2024 15:26:59 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 5b 7b 22 69 64 22 3a 31 2c 22 6e 61 6d 65 22 3a 22 4e 65 74 77 6f 72 6b 22 2c 22 69 6d 67 22 3a 22 4e 65 74 77 6f 72 6b 5f 49 63 6f 6e 2e 73 76 67 22 2c 22 69 6d 67 50 61 74 68 22 3a 22 68 74 74 70 3a 2f 2f 73 63 31 2e 63 68 65 63 6b 70 6f 69 6e 74 2e 63 6f 6d 2f 63 68 65 63 6b 2d 6d 65 2f 53 56 47 2f 4e 65 74 77 6f 72 6b 5f 49 63 6f 6e 2e 73 76 67 22 2c 22 63 6f 6d 6d 65 6e 74 22 3a 22 22 2c 22 6d 6f 72 65 49 6e 66 6f 22 3a 22 43 68 65 63 6b 4d 65 20 72 75 6e 73 20 61 20 73 65 72 69 65 73 20 6f 66 20 73 69 6d 75 6c 61 74 69 6f 6e 73 20 6f 6e 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 70 72 65 73 65 6e 74 73 20 79 6f 75 72 20 73 65 63 75 72 69 74 79 20 73 74 61 74 75 73 2e 20 53 74 61 72 74 20 74 68 65 20 61 73 73 65 73 73 6d 65 6e 74 20 74 6f 20 66 69 6e 64 20 79 6f 75 72 20 65 78 70 6f 73 75 72 65 20 74 6f 20 5a 65 72 6f 20 44 61 79 20 61 74 74 61 63 6b 73 2c 20 42 72 6f 77 73 65 72 20 45 78 70 6c 6f 69 74 2c 20 44 61 74 61 20 4c 65 61 6b 61 67 65 20 61 6e 64 20 6d 6f 72 65 2e 22 2c 22 74 [TRUNCATED] Data Ascii: [{"id":1,"name":"Network","img":"Network_Icon.svg","imgPath":"http://sc1.checkpoint.com/check-me/SVG/Network_Icon.svg","comment":"","moreInfo":"CheckMe runs a series of simulations on the network and presents your security status. Start the assessment to find your exposure to Zero Day attacks, Browser Exploit, Data Leakage and more.","title":"NETWORK DETAILS","lead_name":"CheckMe Network","testable":true},{"id":2,"name":"Endpoint","img":"Endpoint_Icon.svg","imgPath":"http://sc1.checkpoint.com/check-me/SVG/Endpoint_Icon.svg","comment":"*Requires downloading & runni
May 22, 2024 17:27:00.089883089 CEST	518	OUT	GET /checkme/rest/utils/getCaptchaType HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive Accept: application/json, text/plain, / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Referer: http://www.cpcheckme.com/checkme/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=fQ1vuCAQ+LX5fP9FFpX4jdqnMkhiJvjU3nvRj5GtmZ1hggHpUKlLmknHsxzKLxUo0skpUvNrqdMIjwyKtJS7T38Vlg2znlGzG4Ypo11dfhg4GJMJ1SR3ctSOwdvL
May 22, 2024 17:27:00.328676939 CEST	590	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:00 GMT Content-Type: application/json Content-Length: 8 Connection: keep-alive Set-Cookie: AWSALB=O+UvY6TXnA9rmHnE72bgdMFFYpRam+J/trsVh2XJULbxW4Ij5wItM9iFOrFSWTfNnmS5qPz4cgn3K41atTYm6lzHDVpi6unFvi+2XvwUl9hPhO4/G+FkZjtvBfNS; Expires=Wed, 29 May 2024 15:27:00 GMT; Path=/ Set-Cookie: AWSALBCORS=O+UvY6TXnA9rmHnE72bgdMFFYpRam+J/trsVh2XJULbxW4Ij5wItM9iFOrFSWTfNnmS5qPz4cgn3K41atTYm6lzHDVpi6unFvi+2XvwUl9hPhO4/G+FkZjtvBfNS; Expires=Wed, 29 May 2024 15:27:00 GMT; Path=/; SameSite=None Server: Apache Access-Control-Allow-Origin: * Data Raw: 22 47 4f 4f 47 4c 45 22 Data Ascii: "GOOGLE"
May 22, 2024 17:27:23.400511026 CEST	615	OUT	GET /checkme/rest/test/getAllTests?ts=1716391642959&category= HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive Accept: application/json, text/plain, / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Referer: http://www.cpcheckme.com/checkme/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=OwocWPpZs5cdNA0YDmhebwepfiq1p6/4VMaaW37qnkp+q4fj95+8PSwINOLtf1mdvOf1D7REgn5mVAZr8l+unKdwXyocn3Ycu2jaq+iEhdf37h4/X5lgG5KVoodp
May 22, 2024 17:27:23.589261055 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:23 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: AWSALB=rpr0HGgZy2f2qU8vDNGoQSh6GHnqTarq6xQSJE6AOHCZ09cWRqa779g0z4awQzetbO0uf1i5awVAgmHuuJ3mr/qFt3/s5fm0K/2JNco9Q8wEjLjyLNKYSXTZO+TC; Expires=Wed, 29 May 2024 15:27:23 GMT; Path=/ Set-Cookie: AWSALBCORS=rpr0HGgZy2f2qU8vDNGoQSh6GHnqTarq6xQSJE6AOHCZ09cWRqa779g0z4awQzetbO0uf1i5awVAgmHuuJ3mr/qFt3/s5fm0K/2JNco9Q8wEjLjyLNKYSXTZO+TC; Expires=Wed, 29 May 2024 15:27:23 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 31 66 66 38 0d 0a 7b 22 74 65 73 74 43 6f 6c 6c 65 63 74 69 6f 6e 22 3a 5b 7b 22 63 6f 6c 6c 65 63 74 69 6f 6e 54 79 70 65 22 3a 22 31 22 2c 22 74 65 73 74 73 43 6f 6c 6c 65 63 74 69 6f 6e 22 3a 5b 7b 22 69 64 22 3a 32 2c 22 6e 61 6d 65 22 3a 22 4d 61 6c 77 61 72 65 20 49 6e 66 65 63 74 69 6f 6e 22 2c 22 69 6d 61 67 65 4e 61 6d 65 22 3a 22 4d 61 6c 77 61 72 65 5f 49 6e 66 65 63 74 69 6f 6e 22 2c 22 69 6d 61 67 65 55 52 4c 22 3a 22 68 74 74 70 3a 2f 2f 73 63 31 2e 63 68 65 63 6b 70 6f 69 6e 74 2e 63 6f 6d 2f 63 68 65 63 6b 2d 6d 65 2f 52 65 70 6f 72 74 2f 53 56 47 2f 4d 61 6c 77 61 72 65 5f 49 6e 66 65 63 74 69 6f 6e 2e 73 76 67 22 2c 22 73 6f 72 74 4f 72 64 65 72 22 3a 31 2c 22 74 65 73 74 73 4c 69 73 74 22 3a 5b 7b 22 70 72 6f 67 72 65 73 73 5f 64 65 73 63 22 3a 22 44 6f 77 6e 6c 6f 61 64 69 6e 67 20 61 6e 20 69 6e 66 65 63 74 65 64 20 66 69 6c 65 20 20 74 68 72 6f 75 67 68 20 48 54 54 50 2e 22 2c 22 73 68 6f 72 74 5f 64 65 73 63 22 3a 22 44 6f 77 6e 6c 6f 61 64 69 6e 67 20 6f 66 20 69 6e 66 65 63 [TRUNCATED] Data Ascii: 1ff8{"testCollection":[{"collectionType":"1","testsCollection":[{"id":2,"name":"Malware Infection","imageName":"Malware_Infection","imageURL":"http://sc1.checkpoint.com/check-me/Report/SVG/Malware_Infection.svg","sortOrder":1,"testsList":[{"progress_desc":"Downloading an infected file through HTTP.","short_desc":"Downloading of infected zipped file through HTTP.","long_desc":"This test simulates downloading of infected zip file (EICAR virus) through your network.","additionalText":"NULL","appendixText":"NULL","result":null,"id":6,"startTime":0,"endTime":0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49711	52.49.232.14	80	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:26:59.965068102 CEST	519	OUT	GET /checkme/fonts/din.woff?v=1.0.0 HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive Origin: http://www.cpcheckme.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.cpcheckme.com/checkme/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rNwJ/gw1aCiGSddXo8tle6DTKjzDDrGTr1FsZcdttAgmUPmQlXsIxDRdIMU85JI0wKEYqybpebD1dufFxwO59QWmgjB4zQvAXsHzCTnadZq9W152JyctXaTLr4Or
May 22, 2024 17:27:00.579624891 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:00 GMT Content-Type: application/x-font-woff Content-Length: 23790 Connection: keep-alive Set-Cookie: AWSALB=BmxR1unfrqTWHXf4PMzu6ErLmC0gvoYpC2Kxeczso616gO9gleBiF2d2/ExRl6ASf74B2bTRt/b/3h4b5TYBggaVoDDdDElO9EJ7d3yKDbO6dJKD+9J++wRx0jkC; Expires=Wed, 29 May 2024 15:27:00 GMT; Path=/ Set-Cookie: AWSALBCORS=BmxR1unfrqTWHXf4PMzu6ErLmC0gvoYpC2Kxeczso616gO9gleBiF2d2/ExRl6ASf74B2bTRt/b/3h4b5TYBggaVoDDdDElO9EJ7d3yKDbO6dJKD+9J++wRx0jkC; Expires=Wed, 29 May 2024 15:27:00 GMT; Path=/; SameSite=None Server: Apache Accept-Ranges: bytes ETag: W/"23790-1684859534000" Last-Modified: Tue, 23 May 2023 16:32:14 GMT Access-Control-Allow-Origin: * Data Raw: 77 4f 46 46 00 01 00 00 00 00 5c ee 00 11 00 00 00 00 c1 dc 00 00 00 00 00 00 5b 7c 00 00 01 72 00 00 02 dc 00 00 00 00 00 00 00 00 47 50 4f 53 00 00 55 08 00 00 05 ea 00 00 0d 52 3e 63 32 f5 47 53 55 42 00 00 5a f4 00 00 00 88 00 00 00 e0 08 ab f6 e7 4c 54 53 48 00 00 54 78 00 00 00 8d 00 00 01 4f 6a 0c 3c 38 4f 53 2f 32 00 00 01 d8 00 00 00 5a 00 00 00 60 7f dd 58 c8 63 6d 61 70 00 00 02 34 00 00 01 51 00 00 03 94 b5 cd cd 38 63 76 74 20 00 00 52 e0 00 00 00 1e 00 00 00 1e 00 eb 06 c3 66 70 67 6d 00 00 53 00 00 00 01 02 00 00 01 73 06 77 9c 35 67 61 73 70 00 00 52 cc 00 00 00 14 00 00 00 14 00 7c 00 2e 67 6c 79 66 00 00 0e 74 00 00 44 58 00 00 99 f0 75 81 20 9f 68 65 61 64 00 00 01 a0 00 00 00 36 00 00 00 36 f9 d7 d0 9b 68 68 65 61 00 00 03 88 00 00 00 21 00 00 00 24 06 f2 04 93 68 6d 74 78 00 00 03 ac 00 00 02 f2 00 00 05 2c ba b1 58 16 6c 6f 63 61 00 00 0b dc 00 00 02 98 00 00 02 98 44 27 6d 94 6d 61 78 70 00 00 01 80 00 00 00 20 00 00 00 20 03 63 02 37 6e 61 6d 65 00 00 06 a0 00 00 01 98 00 00 [TRUNCATED] Data Ascii: wOFF\[\|rGPOSUR>c2GSUBZLTSHTxOj<8OS/2Z`Xcmap4Q8cvt RfpgmSsw5gaspR\|.glyftDXu head66hhea!$hmtx,XlocaD'mmaxp c7name!gJpost8R9prepTsh^Ke]s _<coW[xc`aRdt) 4,1#/A-S(?",L@
May 22, 2024 17:27:00.579804897 CEST	1236	IN	Data Raw: 8d 20 39 c6 37 4c 27 14 94 18 14 18 98 00 42 e0 0d 72 00 00 78 da ed d1 4d 2b 84 51 14 07 f0 73 ef c3 90 97 c4 0c 31 4d e3 dc 5b 66 43 a1 59 51 0a 29 76 26 b3 b0 51 46 99 c5 94 85 05 65 16 66 24 a5 59 79 4d d9 d9 2a 76 92 32 69 52 8c 66 94 8d 34 Data Ascii: 97L'BrxM+Qs1M[fCYQ)v&QFef$YyM*v2iRf4%=^>s=3Ir~up\e<P]l[bI<ki#X%q1)<"i;b_rIz_v1QyQX/b,hvyLr47\)
May 22, 2024 17:27:00.581604004 CEST	1236	IN	Data Raw: 05 56 2f 78 53 38 d3 64 58 87 ae 7d 2a 9c 43 0f 17 0a e7 51 5f f1 6b 9c 5c ea d7 51 d3 be 14 de c0 93 56 52 78 93 9d 25 5f 40 11 ef 0a 6f c1 d4 8b 0a 6f ff c0 3b e8 6a af e8 a2 8f 31 26 f0 10 22 80 81 63 98 38 42 05 87 68 b0 aa 12 55 70 22 f1 15 Data Ascii: V/xS8dX}*CQ_k\QVRx%_@oo;j1&"c8BhUp"2U83\_0scmMX#}MH-&h^0pI-D6BvD<fpYm&3p?a? +j/Q7aI-T={uc{>K>e\o72S
May 22, 2024 17:27:00.581620932 CEST	1236	IN	Data Raw: fd 29 ce 7f 52 9c fe 14 47 a5 38 fd 29 4e f2 1f ae 0d 7a e5 00 00 00 30 00 30 00 30 00 30 00 5a 00 82 01 16 01 c2 02 50 02 ee 03 06 03 3c 03 72 03 be 03 e2 03 f4 04 08 04 20 04 34 04 86 04 ae 04 fe 05 72 05 ae 06 1c 06 74 06 a0 07 2e 07 88 07 ae Data Ascii: )RG8)Nz0000ZP<r 4rt.&*j,hHlr@D`<Nb@rTLx6\|:Pz88d&z
May 22, 2024 17:27:00.581635952 CEST	1236	IN	Data Raw: c3 77 19 7c 55 19 ec 82 c1 4e 64 69 3f de 54 15 89 a0 20 3a 2d d4 18 78 ab a3 b0 94 18 9d b9 24 96 0e 2e a5 b4 a1 49 5d ee 2d 87 46 87 f7 84 13 b6 89 21 87 c9 6f 37 f5 d9 9c f3 6a 95 29 e3 9c 5c f8 de 78 c5 a9 4b 99 9f 18 9c 4e 3b 84 ab ae 10 06 Data Ascii: w\|UNdi?T :-x$.I]-F!o7j)\xKN;G]Nubt/\|CHzzM31WR[Ld:@7]]B#anbEy3JI9sPRQ2:P9L~[j#Z}*R?FTRCRDp3<?22
May 22, 2024 17:27:00.581671000 CEST	1236	IN	Data Raw: f2 0b 91 f0 5c de c3 57 79 a3 3f 66 1e de 5e 99 1d 18 28 8f 55 d3 85 b2 a4 2a b8 32 d3 a1 c8 6c ca 76 d1 95 8f 27 b6 a5 cc fa d8 4c dc 15 b3 2b aa e5 89 d9 f1 a9 d1 52 b9 94 8b 4c c6 4c d6 64 35 72 5d 24 44 f1 10 84 8f df 00 5e 15 4d 3c 88 ab 43 Data Ascii: \Wy?f^(U*2lv'L+RLLd5r]$D^M<Cs"Sp^nFW=qB>S{g^{~=7-Z\C?y\|_&<cL@K129XC<sP\Z ?MS`B!R(e\|)Mj&Ncz
May 22, 2024 17:27:00.581686974 CEST	1236	IN	Data Raw: e2 0f d6 fe 82 f2 e4 4b e1 fd e7 c1 fb d5 30 03 82 dc 42 bd 07 32 6c 5f b6 01 4f f6 c2 eb 50 b6 41 c1 1e f8 55 83 ef 1a a9 2e 42 a6 c4 55 9b d4 f9 ae 4b e5 6a 61 b6 20 c9 a8 80 fd 08 80 89 08 d1 51 24 9c e7 c8 2f c6 6a 2f 93 fe a1 c5 9c 63 34 9a Data Ascii: K0B2l_OPAU.BUKja Q$/j/c4_(?xyOK\|&91-PiGkw:cfwS)1wM1,4iE[X<CP'cW.9~Ts.M!?ElR^*9[9k\|.Soll_9mr9Z^L
May 22, 2024 17:27:00.581701040 CEST	1236	IN	Data Raw: c0 5c d1 02 ee 72 4d 5d 99 1b fb e0 de 40 7b e9 86 2e 84 e8 3a 6a 84 aa 50 43 9e 54 d0 ba 3e a8 55 50 5e 99 80 16 58 c9 0f cf 27 da 75 65 22 3b 4f 03 56 63 c4 8f 96 2c dc eb e8 d1 8e 45 b7 bd 80 4c 07 a1 4a 72 5e eb 29 1d cc 07 2b 23 69 53 6a f0 Data Ascii: \rM]@{.:jPCT>UP^X'ue";OVc,ELJr^)+#iSjnk(<<p.ug"o9mK[^x55>uK~y(;:cv4gU%n40TmW4c.3($?#[&rw6q\~~#[BTTr0=X
May 22, 2024 17:27:00.581836939 CEST	1236	IN	Data Raw: 2c ed b7 d8 22 1a ab a6 d7 5e bc 70 e2 a6 5b df 75 8d 33 3b a0 57 ab 7a dd c1 a0 bb 57 a5 d6 0f 50 d9 0d 3e 2c fc 53 00 db 23 1b ce 20 51 b1 d6 b3 ce 1a 31 21 00 9d 81 38 79 01 d3 b0 71 8c fa a8 44 83 35 38 42 36 5e 05 f3 87 a3 32 4e 0a 51 35 42 Data Ascii: ,"^p[u3;WzWP>,S# Q1!8yqD58B6^2NQ5Btu&ju\|\|9L</GNs&}N"P&[rVE+0)oHGcdMt\|^[>MLn8uk>R.gA$;$`=0w&PZ.5s]
May 22, 2024 17:27:00.581852913 CEST	1236	IN	Data Raw: d5 b3 f1 9a df 31 43 fe 04 3a a8 a1 ca 9f bf bb f2 e9 c5 6b ff bc f8 9e 6b 16 69 08 09 ed 22 ed 26 f4 d3 05 1f 27 a0 9f 9d 3a a8 9e b3 90 4d ce 41 07 15 90 79 72 81 94 21 97 92 19 c8 25 6f bb 71 ef 97 3e b7 f7 da ab f7 7e ee 4b df fa d6 eb bf 7b Data Ascii: 1C:kki"&':MAyr!%oq>~K{0\R6v^w''S foO:m4}$O~g;SI='"4VK3W!AsuGV(hiz7E,6CBIS~jH0
May 22, 2024 17:27:00.593147993 CEST	1236	IN	Data Raw: 57 05 fb 58 ee 0a fe 00 f9 0b fe 6b 0d df 60 aa 3f 5a ae 6b 88 44 03 0a 70 16 17 ba b5 96 aa b5 17 ab fc 81 fd f0 0f fd 1b 17 57 4f 0b 6e c0 93 86 0b 70 b3 dc 5b e1 d7 11 f8 75 26 d6 be ad 5f 9f db 0d b4 45 d5 60 2c c1 84 c0 c5 d1 95 e3 02 68 02 Data Ascii: WXk`?ZkDpWOnp[u&_E`,hF)P3MQ353n>ae(w9]8\|m.W_3,lr`)lur5Mh:~Db5un:^e\m+6\m0YBW
May 22, 2024 17:27:23.399588108 CEST	583	OUT	GET /checkme/rest/test/getScanTypesDetails?ts=1716391642957 HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.cpcheckme.com/checkme/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=OwocWPpZs5cdNA0YDmhebwepfiq1p6/4VMaaW37qnkp+q4fj95+8PSwINOLtf1mdvOf1D7REgn5mVAZr8l+unKdwXyocn3Ycu2jaq+iEhdf37h4/X5lgG5KVoodp
May 22, 2024 17:27:23.580049038 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:23 GMT Content-Type: application/json Content-Length: 1883 Connection: keep-alive Set-Cookie: AWSALB=ZuiWETPTHcFA2bEClMxIeVAdun0EyEG/ulo0Ig75Ueg4cwb0vWX7XArR5HlLTUMK5/l2SmF2q1vZObocW7nRAxTBo4tW1d51WzkzhnnVUp7rpDmA2BC4mOnyzCGE; Expires=Wed, 29 May 2024 15:27:23 GMT; Path=/ Set-Cookie: AWSALBCORS=ZuiWETPTHcFA2bEClMxIeVAdun0EyEG/ulo0Ig75Ueg4cwb0vWX7XArR5HlLTUMK5/l2SmF2q1vZObocW7nRAxTBo4tW1d51WzkzhnnVUp7rpDmA2BC4mOnyzCGE; Expires=Wed, 29 May 2024 15:27:23 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 5b 7b 22 69 64 22 3a 31 2c 22 6e 61 6d 65 22 3a 22 4e 65 74 77 6f 72 6b 22 2c 22 69 6d 67 22 3a 22 4e 65 74 77 6f 72 6b 5f 49 63 6f 6e 2e 73 76 67 22 2c 22 69 6d 67 50 61 74 68 22 3a 22 68 74 74 70 3a 2f 2f 73 63 31 2e 63 68 65 63 6b 70 6f 69 6e 74 2e 63 6f 6d 2f 63 68 65 63 6b 2d 6d 65 2f 53 56 47 2f 4e 65 74 77 6f 72 6b 5f 49 63 6f 6e 2e 73 76 67 22 2c 22 63 6f 6d 6d 65 6e 74 22 3a 22 22 2c 22 6d 6f 72 65 49 6e 66 6f 22 3a 22 43 68 65 63 6b 4d 65 20 72 75 6e 73 20 61 20 73 65 72 69 65 73 20 6f 66 20 73 69 6d 75 6c 61 74 69 6f 6e 73 20 6f 6e 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 70 72 65 73 65 6e 74 73 20 79 6f 75 72 20 73 65 63 75 72 69 74 79 20 73 74 61 74 75 73 2e 20 53 74 61 72 74 20 74 68 65 20 61 73 73 65 73 73 6d 65 6e 74 20 74 6f 20 66 69 6e 64 20 79 6f 75 72 20 65 78 70 6f 73 75 72 65 20 74 6f 20 5a 65 72 6f 20 44 61 79 20 61 74 74 61 63 6b 73 2c 20 42 72 6f 77 73 65 72 20 45 78 70 6c 6f 69 74 2c 20 44 61 74 61 20 4c 65 61 6b 61 67 65 20 61 6e 64 20 6d 6f 72 65 2e 22 2c 22 74 [TRUNCATED] Data Ascii: [{"id":1,"name":"Network","img":"Network_Icon.svg","imgPath":"http://sc1.checkpoint.com/check-me/SVG/Network_Icon.svg","comment":"","moreInfo":"CheckMe runs a series of simulations on the network and presents your security status. Start the assessment to find your exposure to Zero Day attacks, Browser Exploit, Data Leakage and more.","title":"NETWORK DETAILS","lead_name":"CheckMe Network","testable":true},{"id":2,"name":"Endpoint","img":"Endpoint_Icon.svg","imgPath":"http://sc1.checkpoint.com/check-me/SVG/Endpoint_Icon.svg","comment":"*Requires downloading & runni

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49712	52.49.232.14	80	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:26:59.965101957 CEST	608	OUT	GET /checkme/assets/libs/fontawesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive Origin: http://www.cpcheckme.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.cpcheckme.com/checkme/assets/libs/fontawesome/css/font-awesome.min.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rNwJ/gw1aCiGSddXo8tle6DTKjzDDrGTr1FsZcdttAgmUPmQlXsIxDRdIMU85JI0wKEYqybpebD1dufFxwO59QWmgjB4zQvAXsHzCTnadZq9W152JyctXaTLr4Or
May 22, 2024 17:27:00.594830036 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:00 GMT Content-Length: 77160 Connection: keep-alive Set-Cookie: AWSALB=TEMWwQGxTT8oScuLovE3w7W5pjDc7NcFjmXhyUcm6n/YsyQLMHhpKI871Vw/ioiM57Vr8Xfgd5eGdVZdt8CO09xT1xFHj+utQxKQuLo8kWuTu124rVrzL/B9y/Xy; Expires=Wed, 29 May 2024 15:27:00 GMT; Path=/ Set-Cookie: AWSALBCORS=TEMWwQGxTT8oScuLovE3w7W5pjDc7NcFjmXhyUcm6n/YsyQLMHhpKI871Vw/ioiM57Vr8Xfgd5eGdVZdt8CO09xT1xFHj+utQxKQuLo8kWuTu124rVrzL/B9y/Xy; Expires=Wed, 29 May 2024 15:27:00 GMT; Path=/; SameSite=None Server: Apache Accept-Ranges: bytes ETag: W/"77160-1684859534000" Last-Modified: Tue, 23 May 2023 16:32:14 GMT Access-Control-Allow-Origin: * Data Raw: 77 4f 46 32 00 01 00 00 00 01 2d 68 00 0d 00 00 00 02 86 98 00 01 2d 0e 00 04 01 cb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 85 72 11 08 0a 89 99 28 87 b6 58 01 36 02 24 03 95 70 0b 96 10 00 04 20 05 89 06 07 b4 75 5b 52 09 72 47 61 f7 91 84 2a ba 0d 81 27 ed 3d eb 3a b5 1a 26 d3 cd 3d 72 b7 2a 0a 02 19 e5 1a f1 f6 5d 04 74 07 dc 45 aa 6e a3 b2 ff ff ff ff e4 a4 31 46 db 0e dc 40 e0 d5 f4 fb 7c ad 8a 14 08 66 93 6d 92 60 9b 24 d8 91 a1 40 64 5b 42 51 11 24 28 5b 55 3c 2b 28 ad b8 40 50 d0 35 1e e4 60 81 b0 0e da 3e f6 50 10 1a 3b e1 28 91 d1 31 b3 fd 6c db fe 68 d4 a8 a2 c2 29 9f dc 59 79 94 f2 4a 69 e9 eb 17 ad 85 ce 7c 25 db 81 b7 5e ac 14 47 82 a2 33 b8 12 6e 9e 95 e8 ba da 95 dc 0a c4 cd 90 44 8a 9e 70 5c 59 72 20 94 4c df 50 f4 0e 8d 1b 83 74 a5 29 cb 11 98 ef 13 a7 36 52 c2 5e 22 53 0b 4c 7e f1 59 52 d7 43 58 52 15 09 8a 34 81 8e e6 46 fa 79 5c 5b bf e8 37 6e a1 e2 ae 7c 1d 73 e0 bb 8c 71 1e a3 4d bb 8e 25 4b c9 ff 17 2e db ba 0e 2c 0b fa 84 [TRUNCATED] Data Ascii: wOF2-h-?FFTM `r(X6$p u[RrGa'=:&=r]tEn1F@\|fm`$@d[BQ$([U<+(@P5`>P;(1lh)YyJi\|%^G3nDp\Yr LPt)6R^"SL~YRCXR4Fy\[7n\|sqM%K.,Lt'M,c+bOs^$z.mh&gbv'6:smb1m0"*Vc$,0ATPT1<;`'H?s:NDI$T[b4,bl6ILi}&4m,'#Rwbu,Kvm_-\HHH?
May 22, 2024 17:27:00.595017910 CEST	1236	IN	Data Raw: 96 d3 6d f3 0b 39 50 88 ad d8 29 39 e7 4a a8 86 24 c6 bd 88 9c e7 b1 f4 38 f8 e8 c7 da ce ce 7e b9 3b c4 72 15 8d 6e bf 3d 24 11 1a b5 1f 94 4e 64 64 6e 1b 21 27 ae a6 f0 e3 3b b3 f4 ac 38 99 bc 27 d9 4e a6 ed 1e 21 7f 2d 18 06 4a 19 ca b6 d3 2e Data Ascii: m9P)9J$8~;rn=$Nddn!';8'N!-J.X=,"`: {K!'-FH#$~Z_N5VU8F%PCp$Qrkk3:R%2{h%)8ILK6v#
May 22, 2024 17:27:00.595035076 CEST	1236	IN	Data Raw: 4f 02 ad 19 b8 96 c8 90 48 a0 1e e2 45 77 21 01 2e 1f d7 e9 fd 21 42 53 12 43 aa 67 1e c4 9d 89 63 e3 0e b9 e4 73 2a d5 a7 73 89 28 35 6d 94 3d 71 c6 ca 8a 65 a2 fb f1 59 91 0b 24 eb 5c 3e 10 66 4e 38 80 71 97 8c 78 ea 23 76 0a a5 36 75 6d ef 09 Data Ascii: OHEw!.!BSCgcss(5m=qeY$\>fN8qx#v6um`NM-J\FrDZ0#'nGjLXAgYsY^;"$hb=0vH<Vvc_\Yw;dBN3!$I\|P ~&d.-aa++
May 22, 2024 17:27:00.595439911 CEST	672	IN	Data Raw: c6 7b ae a5 f2 17 17 41 5a d2 26 87 19 53 f3 e2 d9 74 d8 ca f9 9c cf 03 0b cd af 01 e9 a2 50 ea eb 43 a1 a4 14 a2 30 13 08 b4 b6 44 2c fb 70 62 70 d0 b7 d4 7a 29 a7 20 5d 80 49 f7 3e 1a 00 0e 51 5c 42 6c c1 22 ba 97 5e 33 52 3e 72 fd 2a fb bb 04 Data Ascii: {AZ&StPC0D,pbpz) ]I>Q\Bl"^3R>r*C>xPUz}Y=}6-`/"Ho&DI0E2Xa-{5<,}``6jiim<UujYZjB\@g3Ejfp:Wp3ao1da
May 22, 2024 17:27:00.595455885 CEST	1236	IN	Data Raw: 78 b9 8a ae 3e 95 47 d9 0c 53 82 11 83 80 ee bd 67 c0 cc 89 22 94 51 cb 76 a4 62 14 30 2a 7a db c8 50 45 f4 79 c1 c9 89 8c 3f 37 af 24 13 0b c1 8e d8 f0 25 9e 1d 89 47 87 d2 d1 e4 70 c9 64 59 c8 26 66 e2 07 21 ed fb c7 61 36 94 8e 7c a8 08 29 bf Data Ascii: x>GSg"Qvb0*zPEy?7$%GpdY&f!a6\|);u7#34mJoOpv8jx(K/Zdxm7V_\fL7pXzH7-,(1KHbe,r-pL3=T2t2Xk:Z5spSsT:.]D"
May 22, 2024 17:27:00.595469952 CEST	1236	IN	Data Raw: b8 38 ea 92 78 ff 36 e7 99 67 53 a6 68 b1 09 b2 93 52 5e 5e 93 44 2e f8 78 8a 4d d1 4d 53 3f e6 bc 9e 27 47 fa 23 fc 7e e1 2b 9d ac ba c4 ec 08 76 34 8a 64 21 46 79 54 dc 39 f1 2d b2 66 56 61 37 68 fb 42 ae cb 17 34 fe ab 9f 96 e8 17 2c a9 32 bc Data Ascii: 8x6gShR^^D.xMMS?'G#~+v4d!FyT9-fVa7hB4,2&vTHMqp4?R\Xa<4@MiHD_EgRyMlTJyc"HJ, 6u/yVnJnH\PRBd\|4_$k.wIpS$
May 22, 2024 17:27:00.595866919 CEST	448	IN	Data Raw: 7d ea 11 a6 36 08 f9 c3 a2 ff b5 60 3f b5 69 10 91 2a bc 5b 39 65 2b 62 d1 56 4c ef 61 4c cd 99 13 b3 a6 9f e9 64 0c 02 42 59 70 2e b3 cf 88 0a c6 6e 5c 34 ec e7 b3 85 c6 a4 8a dc 1e 8d 64 ec 11 3c 77 a0 df 57 22 06 05 cf d3 3f 20 9f 27 b9 4f 25 Data Ascii: }6`?i*[9e+bVLaLdBYp.n\4d<wW"? 'O%a2N9,!.yZ%4U^ug)M%CVM!z&\|D,i~R,%\|O"h\3+ai8\$!1La6sz+MRb_kv
May 22, 2024 17:27:00.595881939 CEST	1236	IN	Data Raw: 2e 3b 6d c9 1d 07 b4 ef 39 e0 39 c1 73 dd 48 72 4c 1e 37 26 aa a4 07 92 91 8e 33 1b 42 73 04 e0 8e 7c 5b 6f 10 01 26 12 6f 75 da 53 67 f7 d5 ad 18 ae 2b 7b a1 41 45 bf df e5 6b 5a e2 09 a4 22 4e e2 8a 64 ea 19 35 83 a2 3a 9a 98 49 56 b5 a2 da 8a Data Ascii: .;m99sHrL7&3Bs\|[o&ouSg+{AEkZ"Nd5:IV>FbKf)cG5<C.g]k A0-vT d4K(Yq`(u{,:0$\|2/I,`ExP#q`/:';VD)r
May 22, 2024 17:27:00.596211910 CEST	1116	IN	Data Raw: c3 dd d6 27 8c 93 44 46 9f f5 dd 10 5b 4e 5d c5 7e e6 64 18 44 3f 56 f0 f6 17 51 95 57 a1 cd cd b2 81 7d 76 53 3e c1 4e 0e 03 6d f7 c9 c3 2b 03 53 de 71 f0 b8 0e 48 b0 ff 61 ff fa ca 55 21 f7 ce 92 af e6 86 1a 17 89 da 57 62 5f 2b a5 ab 8d 99 e8 Data Ascii: 'DF[N]~dD?VQW}vS>Nm+SqHaU!Wb_+UO]^l59@1'A^mo:9s-N:tD-zkSja4rczF xv7[C8#7p5+ ~*bJJYzw+-p/LL[cg
May 22, 2024 17:27:00.596227884 CEST	1236	IN	Data Raw: 26 a9 a8 a9 cf 22 91 fe 2e 63 d6 82 09 56 bb f1 7d 65 e7 4a df da eb 3a 34 32 71 60 47 cc 4f f4 a6 9b 2d 13 14 95 f2 9c af c1 e3 2d 42 94 8b ee 99 4a 97 46 b8 e9 59 c3 db be a2 33 7c ff c5 7c 29 c9 e4 0e 8a e0 f3 06 ac ba ea f6 49 47 ee cc c1 61 Data Ascii: &".cV}eJ:42q`GO--BJFY3\|\|)IGa+*ttPbADo?Cgt;I]G2RE<^mK3+;[3[1yv#p<jiCaf~\GC4dubt BKQm=aTq<^z
May 22, 2024 17:27:00.600919962 CEST	1236	IN	Data Raw: 19 16 80 29 02 6f 90 d0 10 aa 74 6b fd 6c 03 9a e6 c8 2c ae 14 fb 6c 11 e8 a1 eb 0f f3 55 1f ec 29 dd b9 65 98 35 81 3c 41 ba 08 b0 1e 5c 30 9c eb 9e 5f ec 37 d8 d9 f6 ed 5e 7e 7b d8 24 0d 71 52 82 ce b0 66 93 13 01 fb eb 50 0a 10 61 1a 21 66 97 Data Ascii: )otkl,lU)e5<A\0_7^~{$qRfPa!fXUhXl^:(m?@=bhgO{-i:'A8?gzHFz0[D#A.%'w=23Z'Hx&I41IJiezo{i80[K/
May 22, 2024 17:27:23.062479019 CEST	770	OUT	GET /checkme/ HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=oZwKzeTpVngadSgeD4roJp3GVgWR3NzYjEQPnSG6Zu1xS2uZQirezWaTe/9AcIMkybv5PxLV5mic9qBNHt4TY8wyIM9Wc4WkDqhvVYs0ktGiOIUTKWAu9I9YqTxj If-None-Match: W/"3971-1684859588000" If-Modified-Since: Tue, 23 May 2023 16:33:08 GMT
May 22, 2024 17:27:23.317945004 CEST	539	IN	HTTP/1.1 304 Not Modified Date: Wed, 22 May 2024 15:27:23 GMT Connection: keep-alive Set-Cookie: AWSALB=OwocWPpZs5cdNA0YDmhebwepfiq1p6/4VMaaW37qnkp+q4fj95+8PSwINOLtf1mdvOf1D7REgn5mVAZr8l+unKdwXyocn3Ycu2jaq+iEhdf37h4/X5lgG5KVoodp; Expires=Wed, 29 May 2024 15:27:23 GMT; Path=/ Set-Cookie: AWSALBCORS=OwocWPpZs5cdNA0YDmhebwepfiq1p6/4VMaaW37qnkp+q4fj95+8PSwINOLtf1mdvOf1D7REgn5mVAZr8l+unKdwXyocn3Ycu2jaq+iEhdf37h4/X5lgG5KVoodp; Expires=Wed, 29 May 2024 15:27:23 GMT; Path=/; SameSite=None Server: Apache ETag: W/"3971-1684859588000"
May 22, 2024 17:27:23.336296082 CEST	586	OUT	GET /check/testsAssets/instant_checkup.js?v=0.6537682150719368 HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.cpcheckme.com/checkme/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=OwocWPpZs5cdNA0YDmhebwepfiq1p6/4VMaaW37qnkp+q4fj95+8PSwINOLtf1mdvOf1D7REgn5mVAZr8l+unKdwXyocn3Ycu2jaq+iEhdf37h4/X5lgG5KVoodp
May 22, 2024 17:27:23.533503056 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:23 GMT Content-Type: application/javascript Content-Length: 11494 Connection: keep-alive Set-Cookie: AWSALB=Yh57DKMqbTJo4EKyNnwNi1mjpwz0Q3Ip6BoC8lP2Bav4AALKcTUezwkMAfJxCRfJkcXVcq8LB0VSTaQfsmIcPyODWzNVf2nSL15FbaSnCXOKFT7Py3Tj6jbXGO8+; Expires=Wed, 29 May 2024 15:27:23 GMT; Path=/ Set-Cookie: AWSALBCORS=Yh57DKMqbTJo4EKyNnwNi1mjpwz0Q3Ip6BoC8lP2Bav4AALKcTUezwkMAfJxCRfJkcXVcq8LB0VSTaQfsmIcPyODWzNVf2nSL15FbaSnCXOKFT7Py3Tj6jbXGO8+; Expires=Wed, 29 May 2024 15:27:23 GMT; Path=/; SameSite=None Server: Apache Accept-Ranges: bytes ETag: W/"11494-1692734355000" Last-Modified: Tue, 22 Aug 2023 19:59:15 GMT Access-Control-Allow-Origin: * Data Raw: 76 61 72 20 64 65 66 61 75 6c 74 5f 74 69 6d 65 6f 75 74 20 3d 20 31 30 30 30 30 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 5f 74 65 73 74 5f 72 65 73 28 75 72 6c 2c 20 74 65 73 74 5f 72 65 73 75 6c 74 29 20 7b 0a 09 69 66 20 28 74 65 73 74 5f 72 65 73 75 6c 74 29 0a 09 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 50 61 73 73 65 64 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 65 6c 73 65 0a 09 09 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 46 61 69 6c 65 64 3a 20 22 20 2b 20 75 72 6c 29 3b 0a 09 72 65 74 75 72 6e 20 7b 20 27 74 65 73 74 5f 72 65 73 75 6c 74 27 3a 20 74 65 73 74 5f 72 65 73 75 6c 74 20 7d 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 78 68 72 5f 74 65 73 74 28 6a 73 6f 6e 2c 20 63 62 29 20 7b 0a 09 74 72 79 20 7b 0a 09 09 76 61 72 20 75 72 6c 20 3d 20 6a 73 6f 6e 5b 22 75 72 6c 22 5d 3b 0a 09 09 75 72 6c 20 2b 3d 20 28 75 72 6c 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 20 3e 20 30 29 20 3f 20 22 26 22 20 3a 20 22 3f 22 3b 0a 09 09 75 72 6c 20 2b 3d 20 27 73 74 61 74 69 63 3d 43 50 43 68 65 63 6b 4d [TRUNCATED] Data Ascii: var default_timeout = 10000;function get_test_res(url, test_result) {if (test_result)console.log("Passed: " + url);elseconsole.warn("Failed: " + url);return { 'test_result': test_result };}function xhr_test(json, cb) {try {var url = json["url"];url += (url.indexOf('?') > 0) ? "&" : "?";url += 'static=CPCheckMe&rand=' + new Date().getTime();var xhr = new XMLHttpRequest();xhr.onload = function() {var success = (xhr.status != 404) && (xhr.status != 200);if ((xhr.status == 200) && (json["expected_size"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49720	52.49.232.14	80	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:27:00.358407974 CEST	467	OUT	GET /checkme/rest/test/getAllTests?ts=1716391619429&category= HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=Gd1uru2VcjlY0Je0e4n8PoEib9ijlg60pKhAZhVIahgFZjZa4+48AVW7q6KoX90AeJDkkWwwBcgaoTr8RoVTKs204AJgEPQ+gL0mR1quQXA7PYaVUT1d0tixllPV
May 22, 2024 17:27:00.994158983 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:00 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: AWSALB=eb+VoeUAAzJQ+wta6IYE+KtRMvjNHE2nrUPM4MjDDa2fA+T5fPRvLfrvWajwyV7oT308KiODhejaXmPh5LdUs6G+JtVjd357CvUHSUv6lCCHOQ9z1wwrxt7/WP9a; Expires=Wed, 29 May 2024 15:27:00 GMT; Path=/ Set-Cookie: AWSALBCORS=eb+VoeUAAzJQ+wta6IYE+KtRMvjNHE2nrUPM4MjDDa2fA+T5fPRvLfrvWajwyV7oT308KiODhejaXmPh5LdUs6G+JtVjd357CvUHSUv6lCCHOQ9z1wwrxt7/WP9a; Expires=Wed, 29 May 2024 15:27:00 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 32 63 36 37 0d 0a 7b 22 74 65 73 74 43 6f 6c 6c 65 63 74 69 6f 6e 22 3a 5b 7b 22 63 6f 6c 6c 65 63 74 69 6f 6e 54 79 70 65 22 3a 22 31 22 2c 22 74 65 73 74 73 43 6f 6c 6c 65 63 74 69 6f 6e 22 3a 5b 7b 22 69 64 22 3a 32 2c 22 6e 61 6d 65 22 3a 22 4d 61 6c 77 61 72 65 20 49 6e 66 65 63 74 69 6f 6e 22 2c 22 69 6d 61 67 65 4e 61 6d 65 22 3a 22 4d 61 6c 77 61 72 65 5f 49 6e 66 65 63 74 69 6f 6e 22 2c 22 69 6d 61 67 65 55 52 4c 22 3a 22 68 74 74 70 3a 2f 2f 73 63 31 2e 63 68 65 63 6b 70 6f 69 6e 74 2e 63 6f 6d 2f 63 68 65 63 6b 2d 6d 65 2f 52 65 70 6f 72 74 2f 53 56 47 2f 4d 61 6c 77 61 72 65 5f 49 6e 66 65 63 74 69 6f 6e 2e 73 76 67 22 2c 22 73 6f 72 74 4f 72 64 65 72 22 3a 31 2c 22 74 65 73 74 73 4c 69 73 74 22 3a 5b 7b 22 70 72 6f 67 72 65 73 73 5f 64 65 73 63 22 3a 22 44 6f 77 6e 6c 6f 61 64 69 6e 67 20 61 6e 20 69 6e 66 65 63 74 65 64 20 66 69 6c 65 20 20 74 68 72 6f 75 67 68 20 48 54 54 50 2e 22 2c 22 73 68 6f 72 74 5f 64 65 73 63 22 3a 22 44 6f 77 6e 6c 6f 61 64 69 6e 67 20 6f 66 20 69 6e 66 65 63 [TRUNCATED] Data Ascii: 2c67{"testCollection":[{"collectionType":"1","testsCollection":[{"id":2,"name":"Malware Infection","imageName":"Malware_Infection","imageURL":"http://sc1.checkpoint.com/check-me/Report/SVG/Malware_Infection.svg","sortOrder":1,"testsList":[{"progress_desc":"Downloading an infected file through HTTP.","short_desc":"Downloading of infected zipped file through HTTP.","long_desc":"This test simulates downloading of infected zip file (EICAR virus) through your network.","additionalText":"NULL","appendixText":"NULL","result":null,"id":6,"startTime":0,"endTime":0
May 22, 2024 17:27:00.994833946 CEST	224	IN	Data Raw: 2c 22 73 74 61 74 75 73 22 3a 6e 75 6c 6c 2c 22 73 6f 72 74 4f 72 64 65 72 22 3a 31 2c 22 61 64 64 69 74 69 6f 6e 61 6c 52 65 73 75 6c 74 73 22 3a 6e 75 6c 6c 2c 22 61 64 64 69 74 69 6f 6e 61 6c 52 65 73 75 6c 74 73 52 61 77 22 3a 6e 75 6c 6c 2c Data Ascii: ,"status":null,"sortOrder":1,"additionalResults":null,"additionalResultsRaw":null,"startTimeDate":1716391620912,"endTimeDate":1716391620912,"totalTime":0},{"progress_desc":"Downloading an infected file through HTTPS.","short
May 22, 2024 17:27:00.994853973 CEST	1236	IN	Data Raw: 5f 64 65 73 63 22 3a 22 44 6f 77 6e 6c 6f 61 64 69 6e 67 20 6f 66 20 69 6e 66 65 63 74 65 64 20 66 69 6c 65 20 74 68 72 6f 75 67 68 20 48 54 54 50 53 2e 22 2c 22 6c 6f 6e 67 5f 64 65 73 63 22 3a 22 54 68 69 73 20 74 65 73 74 20 73 69 6d 75 6c 61 Data Ascii: _desc":"Downloading of infected file through HTTPS.","long_desc":"This test simulates downloading of infected file (EICAR virus) through your network over https.","additionalText":"NULL","appendixText":"NULL","result":null,"id":16,"startTime":
May 22, 2024 17:27:00.994904995 CEST	1236	IN	Data Raw: 4c 69 73 74 22 3a 5b 7b 22 70 72 6f 67 72 65 73 73 5f 64 65 73 63 22 3a 22 43 6f 6e 6e 65 63 74 69 6e 67 20 74 6f 20 43 26 43 20 73 65 72 76 65 72 2e 22 2c 22 73 68 6f 72 74 5f 64 65 73 63 22 3a 22 53 69 6d 75 6c 61 74 69 6e 67 20 63 6f 6d 6d 61 Data Ascii: List":[{"progress_desc":"Connecting to C&C server.","short_desc":"Simulating command and control communication to external server.","long_desc":"This test simulates contact attempt to known command and control server by generating requests for
May 22, 2024 17:27:00.995023966 CEST	1236	IN	Data Raw: 6f 72 74 4f 72 64 65 72 22 3a 32 2c 22 61 64 64 69 74 69 6f 6e 61 6c 52 65 73 75 6c 74 73 22 3a 6e 75 6c 6c 2c 22 61 64 64 69 74 69 6f 6e 61 6c 52 65 73 75 6c 74 73 52 61 77 22 3a 6e 75 6c 6c 2c 22 73 74 61 72 74 54 69 6d 65 44 61 74 65 22 3a 31 Data Ascii: ortOrder":2,"additionalResults":null,"additionalResultsRaw":null,"startTimeDate":1716391620912,"endTimeDate":1716391620912,"totalTime":0},{"progress_desc":"Downloading an infected PDF.","short_desc":"Downloading of PDF file.","long_desc":"This
May 22, 2024 17:27:00.995044947 CEST	1236	IN	Data Raw: 75 6c 74 22 3a 6e 75 6c 6c 2c 22 69 64 22 3a 31 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 30 2c 22 65 6e 64 54 69 6d 65 22 3a 30 2c 22 73 74 61 74 75 73 22 3a 6e 75 6c 6c 2c 22 73 6f 72 74 4f 72 64 65 72 22 3a 31 2c 22 61 64 64 69 74 69 6f 6e 61 6c Data Ascii: ult":null,"id":1,"startTime":0,"endTime":0,"status":null,"sortOrder":1,"additionalResults":null,"additionalResultsRaw":null,"startTimeDate":1716391620912,"endTimeDate":1716391620912,"totalTime":0}],"moreInfo":"A browser exploit is an attack th
May 22, 2024 17:27:00.995229959 CEST	1236	IN	Data Raw: 2c 22 6d 6f 72 65 49 6e 66 6f 22 3a 22 41 6e 6f 6e 79 6d 69 7a 65 72 73 20 6c 65 74 20 75 73 65 72 73 20 68 69 64 65 20 74 68 65 69 72 20 6f 6e 6c 69 6e 65 20 61 63 74 69 76 69 74 79 2e 20 54 68 69 73 20 63 61 6e 20 6f 70 65 6e 20 61 20 62 61 63 Data Ascii: ,"moreInfo":"Anonymizers let users hide their online activity. This can open a back door into your organizations network.","rightImage":null,"bottomImage":null},{"id":31,"name":"Data Leakage","imageName":"Data_Leakage","imageURL":"http://sc
May 22, 2024 17:27:00.995249987 CEST	1236	IN	Data Raw: 65 44 61 74 65 22 3a 31 37 31 36 33 39 31 36 32 30 39 31 32 2c 22 74 6f 74 61 6c 54 69 6d 65 22 3a 30 7d 5d 2c 22 6d 6f 72 65 49 6e 66 6f 22 3a 22 44 61 74 61 20 6c 65 61 6b 61 67 65 20 69 73 20 74 68 65 20 72 65 73 75 6c 74 20 6f 66 20 75 73 65 Data Ascii: eDate":1716391620912,"totalTime":0}],"moreInfo":"Data leakage is the result of users transferring classified or sensitive information outside the corporate network intentionally or by mistake.","rightImage":null,"bottomImage":null}]},{"collect
May 22, 2024 17:27:00.995270967 CEST	1236	IN	Data Raw: 63 6f 6e 74 72 6f 6c 5f 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 5f 36 34 2e 73 76 67 22 2c 22 73 6f 72 74 4f 72 64 65 72 22 3a 32 2c 22 74 65 73 74 73 4c 69 73 74 22 3a 5b 7b 22 70 72 6f 67 72 65 73 73 5f 64 65 73 63 22 3a 22 43 6f 6e 6e 65 63 74 Data Ascii: control_communication_64.svg","sortOrder":2,"testsList":[{"progress_desc":"Connecting to C&C server.","short_desc":"Simulating command and control communication to external server.","long_desc":"This test simulates contact attempt to known com
May 22, 2024 17:27:00.995452881 CEST	1236	IN	Data Raw: 22 3a 32 2c 22 61 64 64 69 74 69 6f 6e 61 6c 52 65 73 75 6c 74 73 22 3a 6e 75 6c 6c 2c 22 61 64 64 69 74 69 6f 6e 61 6c 52 65 73 75 6c 74 73 52 61 77 22 3a 6e 75 6c 6c 2c 22 73 74 61 72 74 54 69 6d 65 44 61 74 65 22 3a 31 37 31 36 33 39 31 36 32 Data Ascii: ":2,"additionalResults":null,"additionalResultsRaw":null,"startTimeDate":1716391620912,"endTimeDate":1716391620912,"totalTime":0}],"moreInfo":"A browser exploit is an attack that takes advantage of a particular vulnerability in a computing sys
May 22, 2024 17:27:01.003753901 CEST	704	IN	Data Raw: 2f 52 65 70 6f 72 74 2f 53 56 47 2f 50 65 72 73 69 73 74 65 6e 63 65 5f 54 68 72 65 61 74 2e 73 76 67 22 2c 22 73 6f 72 74 4f 72 64 65 72 22 3a 37 2c 22 74 65 73 74 73 4c 69 73 74 22 3a 5b 7b 22 70 72 6f 67 72 65 73 73 5f 64 65 73 63 22 3a 22 50 Data Ascii: /Report/SVG/Persistence_Threat.svg","sortOrder":7,"testsList":[{"progress_desc":"Persistent Malware detection.","short_desc":"Simulating persistence extraction of infected file.","long_desc":"This test checks that the encrypted files and exe n
May 22, 2024 17:27:23.587095976 CEST	537	OUT	GET /checkme/rest/test/getExcludedEmails?ts=1716391642959 HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=cFGMXUN96TLXW7m1KAtQw1o0Wwl0SflKhVow0etQKvxcO8SPmedQnvmG0pYlGn5m7IXRRjFKDNYyMhf+fwOGNYF9NXBlLcPjP7nQ/QIglWbIdJrzhSWiiNfg6CY9
May 22, 2024 17:27:23.773305893 CEST	751	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:23 GMT Content-Type: application/json Content-Length: 87 Connection: keep-alive Set-Cookie: AWSALB=BZCGg23y0UPS+iGcjzUJjZ87+WZa0FRx7tUOpwzYCfPBUSdiSdjO+nJp78DjP1qxMqr9Xrire9cH6Y1rr1aR5ZpWZl3IMgEZOxsOUFPmsfD7GczHqz/sAByCZx24; Expires=Wed, 29 May 2024 15:27:23 GMT; Path=/ Set-Cookie: AWSALBCORS=BZCGg23y0UPS+iGcjzUJjZ87+WZa0FRx7tUOpwzYCfPBUSdiSdjO+nJp78DjP1qxMqr9Xrire9cH6Y1rr1aR5ZpWZl3IMgEZOxsOUFPmsfD7GczHqz/sAByCZx24; Expires=Wed, 29 May 2024 15:27:23 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 5b 22 67 6d 61 69 6c 22 2c 22 68 6f 74 6d 61 69 6c 22 2c 22 79 61 68 6f 6f 22 2c 22 6d 61 69 6c 22 2c 22 6f 75 74 6c 6f 6f 6b 22 2c 22 67 6d 78 22 2c 22 70 72 6f 74 6f 6e 6d 61 69 6c 22 2c 22 61 6f 6c 22 2c 22 79 61 6e 64 65 78 22 2c 22 69 63 6c 6f 75 64 22 5d Data Ascii: ["gmail","hotmail","yahoo","mail","outlook","gmx","protonmail","aol","yandex","icloud"]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49719	52.49.232.14	80	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:27:00.358488083 CEST	465	OUT	GET /checkme/rest/test/getScanTypesDetails?ts=1716391619425 HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=fQ1vuCAQ+LX5fP9FFpX4jdqnMkhiJvjU3nvRj5GtmZ1hggHpUKlLmknHsxzKLxUo0skpUvNrqdMIjwyKtJS7T38Vlg2znlGzG4Ypo11dfhg4GJMJ1SR3ctSOwdvL
May 22, 2024 17:27:00.994003057 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:00 GMT Content-Type: application/json Content-Length: 1883 Connection: keep-alive Set-Cookie: AWSALB=8fQ5WAjIV/z8Cdl1hr0W+TuB3BpV2wJtC6Yh67XkUau2Rq28aPM24cCqU6vtsF5Yx3KPpdtIhihhL6jMWNNJEKftzcU1yX5h1Uz86i+7Qf8p5r/X68cmen5/G3Qc; Expires=Wed, 29 May 2024 15:27:00 GMT; Path=/ Set-Cookie: AWSALBCORS=8fQ5WAjIV/z8Cdl1hr0W+TuB3BpV2wJtC6Yh67XkUau2Rq28aPM24cCqU6vtsF5Yx3KPpdtIhihhL6jMWNNJEKftzcU1yX5h1Uz86i+7Qf8p5r/X68cmen5/G3Qc; Expires=Wed, 29 May 2024 15:27:00 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 5b 7b 22 69 64 22 3a 31 2c 22 6e 61 6d 65 22 3a 22 4e 65 74 77 6f 72 6b 22 2c 22 69 6d 67 22 3a 22 4e 65 74 77 6f 72 6b 5f 49 63 6f 6e 2e 73 76 67 22 2c 22 69 6d 67 50 61 74 68 22 3a 22 68 74 74 70 3a 2f 2f 73 63 31 2e 63 68 65 63 6b 70 6f 69 6e 74 2e 63 6f 6d 2f 63 68 65 63 6b 2d 6d 65 2f 53 56 47 2f 4e 65 74 77 6f 72 6b 5f 49 63 6f 6e 2e 73 76 67 22 2c 22 63 6f 6d 6d 65 6e 74 22 3a 22 22 2c 22 6d 6f 72 65 49 6e 66 6f 22 3a 22 43 68 65 63 6b 4d 65 20 72 75 6e 73 20 61 20 73 65 72 69 65 73 20 6f 66 20 73 69 6d 75 6c 61 74 69 6f 6e 73 20 6f 6e 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 70 72 65 73 65 6e 74 73 20 79 6f 75 72 20 73 65 63 75 72 69 74 79 20 73 74 61 74 75 73 2e 20 53 74 61 72 74 20 74 68 65 20 61 73 73 65 73 73 6d 65 6e 74 20 74 6f 20 66 69 6e 64 20 79 6f 75 72 20 65 78 70 6f 73 75 72 65 20 74 6f 20 5a 65 72 6f 20 44 61 79 20 61 74 74 61 63 6b 73 2c 20 42 72 6f 77 73 65 72 20 45 78 70 6c 6f 69 74 2c 20 44 61 74 61 20 4c 65 61 6b 61 67 65 20 61 6e 64 20 6d 6f 72 65 2e 22 2c 22 74 [TRUNCATED] Data Ascii: [{"id":1,"name":"Network","img":"Network_Icon.svg","imgPath":"http://sc1.checkpoint.com/check-me/SVG/Network_Icon.svg","comment":"","moreInfo":"CheckMe runs a series of simulations on the network and presents your security status. Start the assessment to find your exposure to Zero Day attacks, Browser Exploit, Data Leakage and more.","title":"NETWORK DETAILS","lead_name":"CheckMe Network","testable":true},{"id":2,"name":"Endpoint","img":"Endpoint_Icon.svg","imgPath":"http://sc1.checkpoint.com/check-me/SVG/Endpoint_Icon.svg","comment":"*Requires downloading & runni
May 22, 2024 17:27:00.994019985 CEST	1236	IN	Data Raw: 6e 67 20 61 6e 20 65 78 65 63 75 74 61 62 6c 65 22 2c 22 6d 6f 72 65 49 6e 66 6f 22 3a 22 43 68 65 63 6b 4d 65 20 72 75 6e 73 20 61 20 73 65 72 69 65 73 20 6f 66 20 73 69 6d 75 6c 61 74 69 6f 6e 73 20 6f 6e 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 Data Ascii: ng an executable","moreInfo":"CheckMe runs a series of simulations on the Endpoint and presents your security status. Start the assessment to find your exposure to Ransomware, Zero Day attacks, Browser Exploits and more.","title":"ENDPOINT DET
May 22, 2024 17:27:00.994046926 CEST	77	IN	Data Raw: 65 73 2e 22 2c 22 74 69 74 6c 65 22 3a 22 4d 4f 42 49 4c 45 20 44 45 54 41 49 4c 53 22 2c 22 6c 65 61 64 5f 6e 61 6d 65 22 3a 22 43 68 65 63 6b 4d 65 20 4d 6f 62 69 6c 65 22 2c 22 74 65 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 5d Data Ascii: es.","title":"MOBILE DETAILS","lead_name":"CheckMe Mobile","testable":false}]
May 22, 2024 17:27:45.999712944 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49718	52.49.232.14	80	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:27:00.358539104 CEST	463	OUT	GET /checkme/rest/test/getExcludedEmails?ts=1716391619429 HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=0mYBx9525ryXtIoqeRqKbJeZKPWEHu74769q2/P/0rN0jCrBXwkvsh1iHvz66BNYG2PgBlt8EEIkoOwHqxZuE1UA1bCeqI+XBChklCloRHSo5d4L1vPJDqnTmwM7
May 22, 2024 17:27:00.995472908 CEST	751	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:00 GMT Content-Type: application/json Content-Length: 87 Connection: keep-alive Set-Cookie: AWSALB=tivvrEoeV1HvZtYTzwX/lby4SEl0vjEuljdtUOu6DGNZTehmiRTm2AiOFjzsrtPIsWv0qc0zWHYOYYvcl5wM97ZiaO2+FjhDQcWAlQQjm1TlEyoeeAnmI9vVeWxZ; Expires=Wed, 29 May 2024 15:27:00 GMT; Path=/ Set-Cookie: AWSALBCORS=tivvrEoeV1HvZtYTzwX/lby4SEl0vjEuljdtUOu6DGNZTehmiRTm2AiOFjzsrtPIsWv0qc0zWHYOYYvcl5wM97ZiaO2+FjhDQcWAlQQjm1TlEyoeeAnmI9vVeWxZ; Expires=Wed, 29 May 2024 15:27:00 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 5b 22 67 6d 61 69 6c 22 2c 22 68 6f 74 6d 61 69 6c 22 2c 22 79 61 68 6f 6f 22 2c 22 6d 61 69 6c 22 2c 22 6f 75 74 6c 6f 6f 6b 22 2c 22 67 6d 78 22 2c 22 70 72 6f 74 6f 6e 6d 61 69 6c 22 2c 22 61 6f 6c 22 2c 22 79 61 6e 64 65 78 22 2c 22 69 63 6c 6f 75 64 22 5d Data Ascii: ["gmail","hotmail","yahoo","mail","outlook","gmx","protonmail","aol","yandex","icloud"]
May 22, 2024 17:27:23.595360041 CEST	541	OUT	GET /checkme/rest/test/getAllTests?ts=1716391642959&category= HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=rpr0HGgZy2f2qU8vDNGoQSh6GHnqTarq6xQSJE6AOHCZ09cWRqa779g0z4awQzetbO0uf1i5awVAgmHuuJ3mr/qFt3/s5fm0K/2JNco9Q8wEjLjyLNKYSXTZO+TC
May 22, 2024 17:27:23.775396109 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:23 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: AWSALB=nqkbPslmcaeQsyH/RXSyBsP3XeMuXx/24eOvbCdyloxX4y39vVy5M+M4WV5Diegpp2TD86Rax9syCzIfd325AlbkkOH7t/nbwbrY7fAL0umo2f2g/sIpzgq803iS; Expires=Wed, 29 May 2024 15:27:23 GMT; Path=/ Set-Cookie: AWSALBCORS=nqkbPslmcaeQsyH/RXSyBsP3XeMuXx/24eOvbCdyloxX4y39vVy5M+M4WV5Diegpp2TD86Rax9syCzIfd325AlbkkOH7t/nbwbrY7fAL0umo2f2g/sIpzgq803iS; Expires=Wed, 29 May 2024 15:27:23 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 31 66 66 38 0d 0a 7b 22 74 65 73 74 43 6f 6c 6c 65 63 74 69 6f 6e 22 3a 5b 7b 22 63 6f 6c 6c 65 63 74 69 6f 6e 54 79 70 65 22 3a 22 31 22 2c 22 74 65 73 74 73 43 6f 6c 6c 65 63 74 69 6f 6e 22 3a 5b 7b 22 69 64 22 3a 32 2c 22 6e 61 6d 65 22 3a 22 4d 61 6c 77 61 72 65 20 49 6e 66 65 63 74 69 6f 6e 22 2c 22 69 6d 61 67 65 4e 61 6d 65 22 3a 22 4d 61 6c 77 61 72 65 5f 49 6e 66 65 63 74 69 6f 6e 22 2c 22 69 6d 61 67 65 55 52 4c 22 3a 22 68 74 74 70 3a 2f 2f 73 63 31 2e 63 68 65 63 6b 70 6f 69 6e 74 2e 63 6f 6d 2f 63 68 65 63 6b 2d 6d 65 2f 52 65 70 6f 72 74 2f 53 56 47 2f 4d 61 6c 77 61 72 65 5f 49 6e 66 65 63 74 69 6f 6e 2e 73 76 67 22 2c 22 73 6f 72 74 4f 72 64 65 72 22 3a 31 2c 22 74 65 73 74 73 4c 69 73 74 22 3a 5b 7b 22 70 72 6f 67 72 65 73 73 5f 64 65 73 63 22 3a 22 44 6f 77 6e 6c 6f 61 64 69 6e 67 20 61 6e 20 69 6e 66 65 63 74 65 64 20 66 69 6c 65 20 20 74 68 72 6f 75 67 68 20 48 54 54 50 2e 22 2c 22 73 68 6f 72 74 5f 64 65 73 63 22 3a 22 44 6f 77 6e 6c 6f 61 64 69 6e 67 20 6f 66 20 69 6e 66 65 63 [TRUNCATED] Data Ascii: 1ff8{"testCollection":[{"collectionType":"1","testsCollection":[{"id":2,"name":"Malware Infection","imageName":"Malware_Infection","imageURL":"http://sc1.checkpoint.com/check-me/Report/SVG/Malware_Infection.svg","sortOrder":1,"testsList":[{"progress_desc":"Downloading an infected file through HTTP.","short_desc":"Downloading of infected zipped file through HTTP.","long_desc":"This test simulates downloading of infected zip file (EICAR virus) through your network.","additionalText":"NULL","appendixText":"NULL","result":null,"id":6,"startTime":0,"endTime":0
May 22, 2024 17:27:23.775612116 CEST	1236	IN	Data Raw: 2c 22 73 74 61 74 75 73 22 3a 6e 75 6c 6c 2c 22 73 6f 72 74 4f 72 64 65 72 22 3a 31 2c 22 61 64 64 69 74 69 6f 6e 61 6c 52 65 73 75 6c 74 73 22 3a 6e 75 6c 6c 2c 22 61 64 64 69 74 69 6f 6e 61 6c 52 65 73 75 6c 74 73 52 61 77 22 3a 6e 75 6c 6c 2c Data Ascii: ,"status":null,"sortOrder":1,"additionalResults":null,"additionalResultsRaw":null,"startTimeDate":1716391643691,"endTimeDate":1716391643691,"totalTime":0},{"progress_desc":"Downloading an infected file through HTTPS.","short_desc":"Downloading
May 22, 2024 17:27:23.775890112 CEST	1236	IN	Data Raw: 6c 6c 7d 2c 7b 22 69 64 22 3a 38 2c 22 6e 61 6d 65 22 3a 22 43 6f 6d 6d 61 6e 64 20 26 20 43 6f 6e 74 72 6f 6c 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 22 2c 22 69 6d 61 67 65 4e 61 6d 65 22 3a 22 63 6f 6d 6d 61 6e 64 5f 61 6e 64 5f 63 6f 6e 74 Data Ascii: ll},{"id":8,"name":"Command & Control Communication","imageName":"command_and_control_communication_64","imageURL":"http://sc1.checkpoint.com/check-me/Report/SVG/command_and_control_communication_64.svg","sortOrder":2,"testsList":[{"progress_d
May 22, 2024 17:27:23.775901079 CEST	1236	IN	Data Raw: 6e 67 20 6f 66 20 7a 69 70 70 65 64 20 50 44 46 20 66 69 6c 65 20 74 68 61 74 20 63 6f 6e 74 61 69 6e 73 20 6d 61 6c 69 63 69 6f 75 73 20 61 74 74 72 69 62 75 74 65 73 20 61 73 20 65 6d 62 65 64 64 65 64 20 6d 61 63 72 6f 20 61 6e 64 20 6a 61 76 Data Ascii: ng of zipped PDF file that contains malicious attributes as embedded macro and java script through your network.","additionalText":"NULL","appendixText":"NULL","result":null,"id":26,"startTime":0,"endTime":0,"status":null,"sortOrder":2,"additi
May 22, 2024 17:27:23.775911093 CEST	1236	IN	Data Raw: 6d 75 6c 61 74 69 6e 67 20 61 63 63 65 73 73 20 74 6f 20 61 20 77 65 62 73 69 74 65 20 74 68 61 74 20 63 61 6e 20 62 65 20 69 6e 66 65 63 74 65 64 20 77 69 74 68 20 6a 61 76 61 20 73 63 72 69 70 74 20 63 6f 64 65 2e 22 2c 22 6c 6f 6e 67 5f 64 65 Data Ascii: mulating access to a website that can be infected with java script code.","long_desc":"This test simulates connection to website that can be infected with java script code.","additionalText":"NULL","appendixText":"NULL","result":null,"id":1,"s
May 22, 2024 17:27:23.775921106 CEST	1236	IN	Data Raw: 22 61 70 70 65 6e 64 69 78 54 65 78 74 22 3a 22 4e 55 4c 4c 22 2c 22 72 65 73 75 6c 74 22 3a 6e 75 6c 6c 2c 22 69 64 22 3a 35 36 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 30 2c 22 65 6e 64 54 69 6d 65 22 3a 30 2c 22 73 74 61 74 75 73 22 3a 6e 75 6c Data Ascii: "appendixText":"NULL","result":null,"id":56,"startTime":0,"endTime":0,"status":null,"sortOrder":1,"additionalResults":null,"additionalResultsRaw":null,"startTimeDate":1716391643691,"endTimeDate":1716391643691,"totalTime":0}],"moreInfo":"Anonym
May 22, 2024 17:27:23.776588917 CEST	1236	IN	Data Raw: 6c 69 63 20 73 69 74 65 73 2e 22 2c 22 61 64 64 69 74 69 6f 6e 61 6c 54 65 78 74 22 3a 22 4e 55 4c 4c 22 2c 22 61 70 70 65 6e 64 69 78 54 65 78 74 22 3a 22 4e 55 4c 4c 22 2c 22 72 65 73 75 6c 74 22 3a 6e 75 6c 6c 2c 22 69 64 22 3a 38 36 2c 22 73 Data Ascii: lic sites.","additionalText":"NULL","appendixText":"NULL","result":null,"id":86,"startTime":0,"endTime":0,"status":null,"sortOrder":2,"additionalResults":null,"additionalResultsRaw":null,"startTimeDate":1716391643691,"endTimeDate":171639164369
May 22, 2024 17:27:23.776611090 CEST	1236	IN	Data Raw: 61 6c 20 6f 70 65 72 61 74 69 6f 6e 73 2e 22 2c 22 72 69 67 68 74 49 6d 61 67 65 22 3a 6e 75 6c 6c 2c 22 62 6f 74 74 6f 6d 49 6d 61 67 65 22 3a 6e 75 6c 6c 7d 2c 7b 22 69 64 22 3a 38 2c 22 6e 61 6d 65 22 3a 22 43 6f 6d 6d 61 6e 64 20 26 20 43 6f Data Ascii: al operations.","rightImage":null,"bottomImage":null},{"id":8,"name":"Command & Control Communication","imageName":"command_and_control_communication_64","imageURL":"http://sc1.checkpoint.com/check-me/Report/SVc6fG/command_and_control_comm
May 22, 2024 17:27:23.776619911 CEST	1236	IN	Data Raw: 74 68 65 20 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 2e 22 2c 22 6c 6f 6e 67 5f 64 65 73 63 22 3a 22 54 68 69 73 20 74 65 73 74 20 73 69 6d 75 6c 61 74 65 73 20 61 6e 20 65 78 70 6c 6f 69 74 20 61 74 74 61 63 6b 20 62 79 20 62 72 6f 77 Data Ascii: the Internet Explorer.","long_desc":"This test simulates an exploit attack by browsing to an injected website ","additionalText":"NULL","appendixText":"NULL","result":null,"id":143,"startTime":0,"endTime":0,"status":null,"sortOrder":2,"additio
May 22, 2024 17:27:23.778125048 CEST	935	IN	Data Raw: 20 65 6e 63 72 79 70 74 73 20 75 73 65 72 73 e2 80 99 20 66 69 6c 65 73 20 61 6e 64 20 72 65 71 75 69 72 65 73 20 61 20 72 61 6e 73 6f 6d 20 70 61 79 6d 65 6e 74 20 74 6f 20 64 65 63 72 79 70 74 20 74 68 65 20 66 69 6c 65 73 2e 22 2c 22 72 69 67 Data Ascii: encrypts users files and requires a ransom payment to decrypt the files.","rightImage":null,"bottomImage":null},{"id":5,"name":"Persistent Malware","imageName":"Persistence_Threat","imageURL":"http://sc1.checkpoint.com/check-me/Report/SVG/
May 22, 2024 17:27:23.788184881 CEST	518	OUT	GET /checkme/rest/utils/getCaptchaType HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=nqkbPslmcaeQsyH/RXSyBsP3XeMuXx/24eOvbCdyloxX4y39vVy5M+M4WV5Diegpp2TD86Rax9syCzIfd325AlbkkOH7t/nbwbrY7fAL0umo2f2g/sIpzgq803iS
May 22, 2024 17:27:23.988320112 CEST	590	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:23 GMT Content-Type: application/json Content-Length: 8 Connection: keep-alive Set-Cookie: AWSALB=ak9SY8TPsQNe93WRPRpIg1FnmR5cg6ewXFJLL/a90Yp+yxcH9d8ImadfD+w1eSXjqUO0sstMW7nlQagVlJkAnZ3RAvNQvtn8/91qdnpD0dkc74DuSaV+Z53JHFgH; Expires=Wed, 29 May 2024 15:27:23 GMT; Path=/ Set-Cookie: AWSALBCORS=ak9SY8TPsQNe93WRPRpIg1FnmR5cg6ewXFJLL/a90Yp+yxcH9d8ImadfD+w1eSXjqUO0sstMW7nlQagVlJkAnZ3RAvNQvtn8/91qdnpD0dkc74DuSaV+Z53JHFgH; Expires=Wed, 29 May 2024 15:27:23 GMT; Path=/; SameSite=None Server: Apache Access-Control-Allow-Origin: * Data Raw: 22 47 4f 4f 47 4c 45 22 Data Ascii: "GOOGLE"
May 22, 2024 17:27:36.131190062 CEST	512	OUT	GET /checkme/rest/test/startScan HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=sc8NwWVq+v4WUX8RsnnqqQjt23RnYsJWdQGvOmPVSOjA9+AMus/hV7yrMIehIaJULtIV8pppvOplgNrGLLRr2lylZJWL/W5STfBjbguv9QM7Ad0tbXdaYI21Lg7W
May 22, 2024 17:27:36.311877966 CEST	599	IN	HTTP/1.1 405 Method Not Allowed Date: Wed, 22 May 2024 15:27:36 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 6 Connection: keep-alive Set-Cookie: AWSALB=tzd0j4iWDHNd2061Ph9LSA9Q65/6nW61xc7JSjgJNCTXeTSzGBMH8xEfzKkt107WXeUtvl9Y6MWmVD9iddT5MaGgxCdyYjTbL6EN5Udqzsp68y7Vh9QB/iSgNdW1; Expires=Wed, 29 May 2024 15:27:36 GMT; Path=/ Set-Cookie: AWSALBCORS=tzd0j4iWDHNd2061Ph9LSA9Q65/6nW61xc7JSjgJNCTXeTSzGBMH8xEfzKkt107WXeUtvl9Y6MWmVD9iddT5MaGgxCdyYjTbL6EN5Udqzsp68y7Vh9QB/iSgNdW1; Expires=Wed, 29 May 2024 15:27:36 GMT; Path=/; SameSite=None Server: Apache Allow: TRACE Data Raw: 26 6e 62 73 70 3b Data Ascii:
May 22, 2024 17:27:36.319583893 CEST	517	OUT	GET /checkme/rest/test/updateStatuses HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=jMrsGMf4HBXr3E8kN3u1knV6ORUbOzYHexJToT6pYanc7EwjCLlIunqEls3kew9A2JhXDg2hjSNTbamGtJqEPTE09X6hz0rmhDdHstrEOzA1ADhSzxn+cukEu0d7
May 22, 2024 17:27:36.503386974 CEST	599	IN	HTTP/1.1 405 Method Not Allowed Date: Wed, 22 May 2024 15:27:36 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 6 Connection: keep-alive Set-Cookie: AWSALB=i558L86v2j8D6ongz1E93KPCv88l5W+UelXAcR9Awmxn9haPtL4kuJjUF3Fg/FBPKJuGqgv2P8PZ6olc1W7shLsOwqbdLt1kSM1wGpZH7cvDodAllhAXS1XpbbIA; Expires=Wed, 29 May 2024 15:27:36 GMT; Path=/ Set-Cookie: AWSALBCORS=i558L86v2j8D6ongz1E93KPCv88l5W+UelXAcR9Awmxn9haPtL4kuJjUF3Fg/FBPKJuGqgv2P8PZ6olc1W7shLsOwqbdLt1kSM1wGpZH7cvDodAllhAXS1XpbbIA; Expires=Wed, 29 May 2024 15:27:36 GMT; Path=/; SameSite=None Server: Apache Allow: TRACE Data Raw: 26 6e 62 73 70 3b Data Ascii:
May 22, 2024 17:27:46.229779005 CEST	616	OUT	GET /checkme/rest/test/getScanStatus?ts=1716391665606&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2 HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=x3L0QCYDVkvVRNRGzz0BKBrIucCZorXH9VrET52jl7rscxdCRRTtIQ85NnLZq4kRx187ftH75xALeZe6QGiG5t8nL02KsMevp3/rItyCVg1IftkfQnGRjS5mT/i3
May 22, 2024 17:27:46.443567991 CEST	631	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:46 GMT Content-Length: 0 Connection: keep-alive Set-Cookie: AWSALB=+ESM9fTkWMrifQjs9xv+BOBt/iuLeuxrfpoWLjmjaDSaaH8mm4pCvt7kWQQwWRNseD7JSDCSggFLIBec9CyRekMU/HT+p1E6Z4D+MfAZnJUgwqi5eWfIQg/wGcY4; Expires=Wed, 29 May 2024 15:27:46 GMT; Path=/ Set-Cookie: AWSALBCORS=+ESM9fTkWMrifQjs9xv+BOBt/iuLeuxrfpoWLjmjaDSaaH8mm4pCvt7kWQQwWRNseD7JSDCSggFLIBec9CyRekMU/HT+p1E6Z4D+MfAZnJUgwqi5eWfIQg/wGcY4; Expires=Wed, 29 May 2024 15:27:46 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: *
May 22, 2024 17:27:51.473999977 CEST	616	OUT	GET /checkme/rest/test/getScanStatus?ts=1716391670793&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2 HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=fS0XR/8MNPGNfiCAn31eT9IrVnRLIezYwWqrKxPzDiDg+LZ4xO3UcbHm0ihfvVzDjWUSQxTFNzH/1eV870hDvARBw3FH/+3NIHFHKy2nHiCUGA4E8z5Gba1X/uFp
May 22, 2024 17:27:51.655092955 CEST	631	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:51 GMT Content-Length: 0 Connection: keep-alive Set-Cookie: AWSALB=DrxrrxdYOi18LtQfPSo+DNSPBORE7Z70/qW66K1uH+SlmoEJwoLcrASiouRyKNERRBOSQyLwIxy3uWFuFF54uCu9Q51TqG/+gnnnuOa9wcYZmfOvHQjc2zgP6JXF; Expires=Wed, 29 May 2024 15:27:51 GMT; Path=/ Set-Cookie: AWSALBCORS=DrxrrxdYOi18LtQfPSo+DNSPBORE7Z70/qW66K1uH+SlmoEJwoLcrASiouRyKNERRBOSQyLwIxy3uWFuFF54uCu9Q51TqG/+gnnnuOa9wcYZmfOvHQjc2zgP6JXF; Expires=Wed, 29 May 2024 15:27:51 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: *
May 22, 2024 17:27:56.665471077 CEST	616	OUT	GET /checkme/rest/test/getScanStatus?ts=1716391676043&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2 HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=qHNXzFQPR8bUEUBeimgOzm3UX2HL/a3tLkxZjxG2G2tIzw9oQBZAtu0/QXva+/qPH9OzUbc0rQcrpbDEap0ZEKrCCDYv96kGcf0ImmPp9anA5VY+y8HdyXW+9dfZ
May 22, 2024 17:27:56.847618103 CEST	631	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:56 GMT Content-Length: 0 Connection: keep-alive Set-Cookie: AWSALB=wiUJTf+Zln1u9bnrCjRfGvCWkbzer2LZ/9+ZIyESVk5xNHvIgLPX1SstXDNLZp03vt0q+HsRdDV9ckccZqApd1qjH4No4QnMruPPcqGt5FAmYZFdxIGO/4Yjp7CY; Expires=Wed, 29 May 2024 15:27:56 GMT; Path=/ Set-Cookie: AWSALBCORS=wiUJTf+Zln1u9bnrCjRfGvCWkbzer2LZ/9+ZIyESVk5xNHvIgLPX1SstXDNLZp03vt0q+HsRdDV9ckccZqApd1qjH4No4QnMruPPcqGt5FAmYZFdxIGO/4Yjp7CY; Expires=Wed, 29 May 2024 15:27:56 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: *
May 22, 2024 17:28:01.900263071 CEST	608	OUT	GET /checkme/rest/test/getScanStatus?ts=1716391681227&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2 HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; AWSALB=I8BfgbBPrnfAuyYj8Y2QYwDDgLbx4qdg0ehvojFdl9FxCozEKMBDB44icljiAClTZfRDxBZ6+ZVHDSlu3QnVJyYo3NnNZwNs/8EPmUNj1SasgjZ3Zb/WCF2FWtNg
May 22, 2024 17:28:02.086146116 CEST	670	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:01 GMT Content-Type: application/json Content-Length: 7 Connection: keep-alive Set-Cookie: AWSALB=US6SxikHSO6q7zHrRCWUcPxurw/2oMVwks1XPRLTUGJOSktek/LulRfpi6LMB5ZBRRUtG98h3GKLt6/NskyK78FSXGvXt0DRFLXrsTltd2/fh9p+ZPGqgQHIgMpu; Expires=Wed, 29 May 2024 15:28:01 GMT; Path=/ Set-Cookie: AWSALBCORS=US6SxikHSO6q7zHrRCWUcPxurw/2oMVwks1XPRLTUGJOSktek/LulRfpi6LMB5ZBRRUtG98h3GKLt6/NskyK78FSXGvXt0DRFLXrsTltd2/fh9p+ZPGqgQHIgMpu; Expires=Wed, 29 May 2024 15:28:01 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 57 41 49 54 49 4e 47 Data Ascii: WAITING
May 22, 2024 17:28:47.086817980 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49722	52.49.232.14	80	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:27:00.361793995 CEST	444	OUT	GET /checkme/rest/utils/getCaptchaType HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=O+UvY6TXnA9rmHnE72bgdMFFYpRam+J/trsVh2XJULbxW4Ij5wItM9iFOrFSWTfNnmS5qPz4cgn3K41atTYm6lzHDVpi6unFvi+2XvwUl9hPhO4/G+FkZjtvBfNS
May 22, 2024 17:27:01.009357929 CEST	590	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:00 GMT Content-Type: application/json Content-Length: 8 Connection: keep-alive Set-Cookie: AWSALB=oZwKzeTpVngadSgeD4roJp3GVgWR3NzYjEQPnSG6Zu1xS2uZQirezWaTe/9AcIMkybv5PxLV5mic9qBNHt4TY8wyIM9Wc4WkDqhvVYs0ktGiOIUTKWAu9I9YqTxj; Expires=Wed, 29 May 2024 15:27:00 GMT; Path=/ Set-Cookie: AWSALBCORS=oZwKzeTpVngadSgeD4roJp3GVgWR3NzYjEQPnSG6Zu1xS2uZQirezWaTe/9AcIMkybv5PxLV5mic9qBNHt4TY8wyIM9Wc4WkDqhvVYs0ktGiOIUTKWAu9I9YqTxj; Expires=Wed, 29 May 2024 15:27:00 GMT; Path=/; SameSite=None Server: Apache Access-Control-Allow-Origin: * Data Raw: 22 47 4f 4f 47 4c 45 22 Data Ascii: "GOOGLE"
May 22, 2024 17:27:23.587059021 CEST	539	OUT	GET /checkme/rest/test/getScanTypesDetails?ts=1716391642957 HTTP/1.1 Host: www.cpcheckme.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.1557742294.1716391620; _gid=GA1.2.862825209.1716391620; _gat=1; AWSALB=cFGMXUN96TLXW7m1KAtQw1o0Wwl0SflKhVow0etQKvxcO8SPmedQnvmG0pYlGn5m7IXRRjFKDNYyMhf+fwOGNYF9NXBlLcPjP7nQ/QIglWbIdJrzhSWiiNfg6CY9
May 22, 2024 17:27:23.774173021 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:23 GMT Content-Type: application/json Content-Length: 1883 Connection: keep-alive Set-Cookie: AWSALB=uL7RIUelhIBOtrM7bzx++nhIB8/ZqGdB3tVWJfJ5fHqXYWYDEFT/53IDMMWsaa+4b/P2gDco7kEeGnRiL2ELbrMMnp3T3ib0gqOZ/SHkli3ooJ5UaAWIjtUrKRBc; Expires=Wed, 29 May 2024 15:27:23 GMT; Path=/ Set-Cookie: AWSALBCORS=uL7RIUelhIBOtrM7bzx++nhIB8/ZqGdB3tVWJfJ5fHqXYWYDEFT/53IDMMWsaa+4b/P2gDco7kEeGnRiL2ELbrMMnp3T3ib0gqOZ/SHkli3ooJ5UaAWIjtUrKRBc; Expires=Wed, 29 May 2024 15:27:23 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 5b 7b 22 69 64 22 3a 31 2c 22 6e 61 6d 65 22 3a 22 4e 65 74 77 6f 72 6b 22 2c 22 69 6d 67 22 3a 22 4e 65 74 77 6f 72 6b 5f 49 63 6f 6e 2e 73 76 67 22 2c 22 69 6d 67 50 61 74 68 22 3a 22 68 74 74 70 3a 2f 2f 73 63 31 2e 63 68 65 63 6b 70 6f 69 6e 74 2e 63 6f 6d 2f 63 68 65 63 6b 2d 6d 65 2f 53 56 47 2f 4e 65 74 77 6f 72 6b 5f 49 63 6f 6e 2e 73 76 67 22 2c 22 63 6f 6d 6d 65 6e 74 22 3a 22 22 2c 22 6d 6f 72 65 49 6e 66 6f 22 3a 22 43 68 65 63 6b 4d 65 20 72 75 6e 73 20 61 20 73 65 72 69 65 73 20 6f 66 20 73 69 6d 75 6c 61 74 69 6f 6e 73 20 6f 6e 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 61 6e 64 20 70 72 65 73 65 6e 74 73 20 79 6f 75 72 20 73 65 63 75 72 69 74 79 20 73 74 61 74 75 73 2e 20 53 74 61 72 74 20 74 68 65 20 61 73 73 65 73 73 6d 65 6e 74 20 74 6f 20 66 69 6e 64 20 79 6f 75 72 20 65 78 70 6f 73 75 72 65 20 74 6f 20 5a 65 72 6f 20 44 61 79 20 61 74 74 61 63 6b 73 2c 20 42 72 6f 77 73 65 72 20 45 78 70 6c 6f 69 74 2c 20 44 61 74 61 20 4c 65 61 6b 61 67 65 20 61 6e 64 20 6d 6f 72 65 2e 22 2c 22 74 [TRUNCATED] Data Ascii: [{"id":1,"name":"Network","img":"Network_Icon.svg","imgPath":"http://sc1.checkpoint.com/check-me/SVG/Network_Icon.svg","comment":"","moreInfo":"CheckMe runs a series of simulations on the network and presents your security status. Start the assessment to find your exposure to Zero Day attacks, Browser Exploit, Data Leakage and more.","title":"NETWORK DETAILS","lead_name":"CheckMe Network","testable":true},{"id":2,"name":"Endpoint","img":"Endpoint_Icon.svg","imgPath":"http://sc1.checkpoint.com/check-me/SVG/Endpoint_Icon.svg","comment":"*Requires downloading & runni
May 22, 2024 17:27:23.775266886 CEST	1236	IN	Data Raw: 6e 67 20 61 6e 20 65 78 65 63 75 74 61 62 6c 65 22 2c 22 6d 6f 72 65 49 6e 66 6f 22 3a 22 43 68 65 63 6b 4d 65 20 72 75 6e 73 20 61 20 73 65 72 69 65 73 20 6f 66 20 73 69 6d 75 6c 61 74 69 6f 6e 73 20 6f 6e 20 74 68 65 20 45 6e 64 70 6f 69 6e 74 Data Ascii: ng an executable","moreInfo":"CheckMe runs a series of simulations on the Endpoint and presents your security status. Start the assessment to find your exposure to Ransomware, Zero Day attacks, Browser Exploits and more.","title":"ENDPOINT DET
May 22, 2024 17:27:23.775278091 CEST	77	IN	Data Raw: 65 73 2e 22 2c 22 74 69 74 6c 65 22 3a 22 4d 4f 42 49 4c 45 20 44 45 54 41 49 4c 53 22 2c 22 6c 65 61 64 5f 6e 61 6d 65 22 3a 22 43 68 65 63 6b 4d 65 20 4d 6f 62 69 6c 65 22 2c 22 74 65 73 74 61 62 6c 65 22 3a 66 61 6c 73 65 7d 5d Data Ascii: es.","title":"MOBILE DETAILS","lead_name":"CheckMe Mobile","testable":false}]
May 22, 2024 17:28:08.782850027 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49803	34.251.116.243	80	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:27:41.068691015 CEST	533	OUT	GET /cpcheckme.exe?uid=yt22zMIg HTTP/1.1 Host: cpcheckmefiles-lb-1966426125.eu-west-1.elb.amazonaws.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://www.cpcheckme.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 22, 2024 17:27:41.685300112 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:41 GMT Content-Type: application/octet-stream Content-Length: 1216832 Connection: keep-alive Content-Disposition: attachment; filename="cpcheckme_yt22zMIg.exe" Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 87 1d 78 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 5e 12 00 00 08 00 00 00 00 00 00 7a 7c 12 00 00 20 00 00 00 80 12 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 12 00 00 02 00 00 a6 93 12 00 02 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 28 7c 12 00 4f 00 00 00 00 80 12 00 f8 05 00 00 00 00 00 00 00 00 00 00 00 68 12 00 40 29 00 00 00 a0 12 00 0c 00 00 00 f0 7a 12 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELxe"0^z\| @ `(\|Oh@)z H.text\ ^ `.rsrc`@@.relocf@B\\|H,Lxx0k(.(o/(.rp(+o3(,oO,(o&(o(.o2(.o1QQ0(.(o/(.rp(+o3~~~r/prprps%oo(.rp((+o3(.o1( (~-rp(!o"s#~~j(rp~o$tj(rp~o$t*V(r!p [TRUNCATED]
May 22, 2024 17:27:41.686840057 CEST	224	IN	Data Raw: 6a 28 07 00 00 06 72 41 03 00 70 7e 02 00 00 04 6f 24 00 00 0a 74 01 00 00 1b 2a 6a 28 07 00 00 06 72 63 03 00 70 7e 02 00 00 04 6f 24 00 00 0a 74 01 00 00 1b 2a 56 28 07 00 00 06 72 99 03 00 70 7e 02 00 00 04 6f 25 00 00 0a 2a 56 28 07 00 00 06 Data Ascii: j(rAp~o$tj(rcp~o$tV(rp~o%V(rp~o%j(rp~o$tV(rp~o%j(rp~o$tj(rp~o$tV(rp~o%*j
May 22, 2024 17:27:41.690310955 CEST	1236	IN	Data Raw: 28 07 00 00 06 72 35 04 00 70 7e 02 00 00 04 6f 24 00 00 0a 74 01 00 00 1b 2a 6a 28 07 00 00 06 72 53 04 00 70 7e 02 00 00 04 6f 24 00 00 0a 74 01 00 00 1b 2a 2e 72 71 04 00 70 28 19 00 00 06 2a 5a 28 1f 00 00 06 28 26 00 00 0a 02 28 27 00 00 0a Data Ascii: (r5p~o$tj(rSp~o$t.rqp(Z((&('((B(~((F~(((.~(^(((%()( 2(((B~( ~(-(+o,-r{p(-szB('~((
May 22, 2024 17:27:41.693834066 CEST	1236	IN	Data Raw: 6f 48 00 00 06 25 28 4c 00 00 0a 6f 4d 00 00 0a 6f 44 00 00 06 6f 4e 00 00 0a 02 7b 14 00 00 04 6f 42 00 00 0a 26 de 0a 07 2c 06 06 28 40 00 00 0a dc 2a 00 00 01 10 00 00 02 00 1e 00 61 7f 00 0a 00 00 00 00 1b 30 04 00 a0 00 00 00 07 00 00 11 02 Data Ascii: oH%(LoMoDoN{oB&,(@a0{,&{2(/-{,{oC-{(>{sL%o:%(<oF%o@%o>%o<%(LoMoDoN{oB&,(@*
May 22, 2024 17:27:41.693912029 CEST	1236	IN	Data Raw: 00 04 07 6f 5b 00 00 0a 6f 72 00 00 0a 0b 07 2a 00 01 1c 00 00 00 00 02 00 09 0b 00 33 23 00 00 01 00 00 02 00 09 3e 00 25 11 00 00 01 13 30 03 00 68 00 00 00 0c 00 00 11 02 28 39 00 00 06 0a 06 2c 46 06 17 33 54 02 02 28 41 00 00 06 17 28 4b 00 Data Ascii: o[or3#>%0h(9,F3T(A(K(Aos,(Aos(K+~rp((=(?(t~0Pr+pohoioj(`('ok(`-rp+(G(`('(
May 22, 2024 17:27:41.693929911 CEST	1236	IN	Data Raw: 00 51 51 00 0f 11 00 00 01 3a 02 28 20 00 00 0a 02 03 7d 29 00 00 04 2a 00 13 30 02 00 14 00 00 00 13 00 00 11 02 28 60 00 00 06 0a 06 2d 01 2a 06 03 6f 8f 00 00 0a 26 2a 13 30 06 00 5e 00 00 00 14 00 00 11 73 23 02 00 06 0a 06 04 7d 30 01 00 04 Data Ascii: QQ:( })0(`-o&0^s#}0{0-$s(+%s(+&s(+jsm0o&0{)(&
May 22, 2024 17:27:41.700731993 CEST	1236	IN	Data Raw: d8 de 0a 06 2c 06 06 6f 57 00 00 0a dc 02 03 28 86 00 00 06 de 03 26 de 00 2a 00 00 00 01 1c 00 00 02 00 2a 00 2c 56 00 0a 00 00 00 00 00 00 00 00 69 69 00 03 11 00 00 01 1b 30 02 00 7f 00 00 00 1b 00 00 11 73 b3 00 00 0a 0a 02 28 88 00 00 06 2d Data Ascii: ,oW(&,Vii0s(-krpv(soo+.ot7rpo(o(oo-,oW&2:lrx0rp
May 22, 2024 17:27:41.705080986 CEST	1236	IN	Data Raw: 00 3c 00 00 00 23 00 00 11 02 7b 34 00 00 04 0a 16 0b 06 12 01 28 3e 00 00 0a 02 03 16 04 28 94 00 00 06 0c de 1d 0d 28 2e 00 00 06 1a 09 6f 32 00 00 06 de 00 14 0c de 0a 07 2c 06 06 28 40 00 00 0a dc 08 2a 01 1c 00 00 00 00 11 00 0c 1d 00 0f 11 Data Ascii: <#{4(>((.o2,(@*'00.$(.rp%o3r@psornp(%~5o(rporp(o~5o-(.rp(
May 22, 2024 17:27:41.705111027 CEST	776	IN	Data Raw: 6a 02 28 9a 00 00 06 16 14 72 f7 05 00 70 16 15 73 6f 00 00 06 28 9f 00 00 06 de 0a 07 2c 06 06 28 40 00 00 0a dc 2a 00 00 01 10 00 00 02 00 21 00 7e 9f 00 0a 00 00 00 00 13 30 04 00 40 00 00 00 00 00 00 00 02 28 9a 00 00 06 15 2e 01 2a 02 02 72 Data Ascii: j(rpso(,(@!~0@(.rp(}7{7so{7o&*0({E(>~<(+~=(+~>(+~?(+~@(+~A(+(.
May 22, 2024 17:27:41.711179972 CEST	1236	IN	Data Raw: d5 00 00 0a 6f c7 00 00 0a 03 6f c8 00 00 0a 6f c9 00 00 0a a5 0d 00 00 1b 2a 5e 72 9c 13 00 70 03 04 28 1f 00 00 0a 73 d3 00 00 0a 73 d4 00 00 0a 2a 00 00 00 13 30 01 00 47 00 00 00 00 00 00 00 72 f4 13 00 70 80 3c 00 00 04 72 ff 0b 00 70 80 3d Data Ascii: ooo^rp(ss0Grp<rp=rp>r.p?r6p@rNpArbpDs%}C%}D+s(+s,%}E%}F-s(+0*(o[(
May 22, 2024 17:27:41.711199045 CEST	1236	IN	Data Raw: 00 31 00 00 11 03 1a 73 e8 00 00 0a 0a 02 7b 4d 00 00 04 6f e6 00 00 0a 02 7b 4d 00 00 04 6f e7 00 00 0a 06 28 c8 00 00 06 26 de 0a 06 2c 06 06 6f 57 00 00 0a dc 2a 00 00 01 10 00 00 02 00 08 00 1f 27 00 0a 00 00 00 00 1b 30 03 00 4e 00 00 00 32 Data Ascii: 1s{Mo{Mo(&,oW'0N2ssoo(oo(,oW,oW*9;C023 s(,oW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49808	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:27:57.261384964 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:27:57.309887886 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:27:57.984395027 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:57 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=ukf2/B78Xxk8PoniLkg/KrWAnabMoGxVP+4uz1e30wdORWbT/KQ7XCwjVV2vbxDcJm2hQgLgw75VVZI/ZOfpdQc6ZNoUvdnPJi2qRA6EDQsO8xc92sxk4Z8+Z9Sc; Expires=Wed, 29 May 2024 15:27:57 GMT; Path=/ Set-Cookie: AWSALBCORS=ukf2/B78Xxk8PoniLkg/KrWAnabMoGxVP+4uz1e30wdORWbT/KQ7XCwjVV2vbxDcJm2hQgLgw75VVZI/ZOfpdQc6ZNoUvdnPJi2qRA6EDQsO8xc92sxk4Z8+Z9Sc; Expires=Wed, 29 May 2024 15:27:57 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}
May 22, 2024 17:27:59.057859898 CEST	175	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20
May 22, 2024 17:27:59.065993071 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:27:59.414541960 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:27:59 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=qvSHrcujkrEf0ljxt3tvRXp9vifHuL5OzO+ZTJIAzujF/PrCVu8UY6JKA8Mw76jlTh9+db75VjjDFBV8Hv9P9keTkZ5yZxktoUNiwhFYWXWr2HxU6cHtasAVc79o; Expires=Wed, 29 May 2024 15:27:59 GMT; Path=/ Set-Cookie: AWSALBCORS=qvSHrcujkrEf0ljxt3tvRXp9vifHuL5OzO+ZTJIAzujF/PrCVu8UY6JKA8Mw76jlTh9+db75VjjDFBV8Hv9P9keTkZ5yZxktoUNiwhFYWXWr2HxU6cHtasAVc79o; Expires=Wed, 29 May 2024 15:27:59 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	62341	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:00.441920042 CEST	175	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20
May 22, 2024 17:28:00.483830929 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:01.165374041 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:01 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=uBL6cg1EAoLqK/CPQpb/ExdIxynhvu2VGanmLpB4nJ1n9kaOWdmPsAsTi1XP3IH9Pxt49DWoJj624O7vn4eHvrpUUKfXVy9IGkaOc7pCOjpGfc68E3c3TSmAkcIf; Expires=Wed, 29 May 2024 15:28:00 GMT; Path=/ Set-Cookie: AWSALBCORS=uBL6cg1EAoLqK/CPQpb/ExdIxynhvu2VGanmLpB4nJ1n9kaOWdmPsAsTi1XP3IH9Pxt49DWoJj624O7vn4eHvrpUUKfXVy9IGkaOc7pCOjpGfc68E3c3TSmAkcIf; Expires=Wed, 29 May 2024 15:28:00 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	62342	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:02.222364902 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:02.245210886 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:03.071960926 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:02 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=sROyFWgCxDXlgMeLWflxCnHbfz/AHQNCBdHNP0aMp4ZLsoSWDkSNp3rtrsCDA4GVc1mPVCS5lgdpNwZVbsL6y2U+eS7m1TZGAXt2P41gd8YCo/7OQDMAv2sFcmlA; Expires=Wed, 29 May 2024 15:28:02 GMT; Path=/ Set-Cookie: AWSALBCORS=sROyFWgCxDXlgMeLWflxCnHbfz/AHQNCBdHNP0aMp4ZLsoSWDkSNp3rtrsCDA4GVc1mPVCS5lgdpNwZVbsL6y2U+eS7m1TZGAXt2P41gd8YCo/7OQDMAv2sFcmlA; Expires=Wed, 29 May 2024 15:28:02 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	62344	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:04.099942923 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:04.114620924 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:04.851350069 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:04 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=swOX0Sk0Hwnm+5XmzzD/yZriay0IeGKnuTJmCOIutXPSgHyOHm1Awi+L784W2Nt5n36kBAbhzr9/JVK8mzn8Hy0heGasqT8zmp7LT0fXw8//RmhJ/vNrYZVz24Qg; Expires=Wed, 29 May 2024 15:28:04 GMT; Path=/ Set-Cookie: AWSALBCORS=swOX0Sk0Hwnm+5XmzzD/yZriay0IeGKnuTJmCOIutXPSgHyOHm1Awi+L784W2Nt5n36kBAbhzr9/JVK8mzn8Hy0heGasqT8zmp7LT0fXw8//RmhJ/vNrYZVz24Qg; Expires=Wed, 29 May 2024 15:28:04 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	62345	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:05.915657043 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:05.922346115 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:06.632606983 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:06 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=iXXk+gU3aEuyTE59xmg0jRx0k9Qs2u+LejekFYxDbObG1N00QSBfNffx1ZnIIJ1zyVuVu4foB/Jl7a+4kbtAlHkdpPT1aLqMpKAnPlGmd5D1B3eMm8pcIHm3n6MX; Expires=Wed, 29 May 2024 15:28:06 GMT; Path=/ Set-Cookie: AWSALBCORS=iXXk+gU3aEuyTE59xmg0jRx0k9Qs2u+LejekFYxDbObG1N00QSBfNffx1ZnIIJ1zyVuVu4foB/Jl7a+4kbtAlHkdpPT1aLqMpKAnPlGmd5D1B3eMm8pcIHm3n6MX; Expires=Wed, 29 May 2024 15:28:06 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	62346	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:07.670058966 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:07.721538067 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:08.471421003 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:08 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=5EUb7UsavHSmEl+M/upvnz6B968ur+2r3a8ebEwe6MD54C7/hud5QgqZrRUfMQ5SpyAGTNqLMy3tTaQQOLrWp2oqoyaGdf1CH69N2Lk4SkX5UFnW4COyCcORmxpG; Expires=Wed, 29 May 2024 15:28:08 GMT; Path=/ Set-Cookie: AWSALBCORS=5EUb7UsavHSmEl+M/upvnz6B968ur+2r3a8ebEwe6MD54C7/hud5QgqZrRUfMQ5SpyAGTNqLMy3tTaQQOLrWp2oqoyaGdf1CH69N2Lk4SkX5UFnW4COyCcORmxpG; Expires=Wed, 29 May 2024 15:28:08 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	62347	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:09.501732111 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:09.512583971 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:10.325406075 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:10 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=xIJ0yhYpR1BxZlD1nHGJQpFPkBPA67eXNLRgHk5WQYhQRUOXfadgP129ROnGKgUrHGPNwVoLGBYu24VDgQOUkYFb6DHDdGeTwrzNu+27pGxI88kw11YpShp9QU/W; Expires=Wed, 29 May 2024 15:28:10 GMT; Path=/ Set-Cookie: AWSALBCORS=xIJ0yhYpR1BxZlD1nHGJQpFPkBPA67eXNLRgHk5WQYhQRUOXfadgP129ROnGKgUrHGPNwVoLGBYu24VDgQOUkYFb6DHDdGeTwrzNu+27pGxI88kw11YpShp9QU/W; Expires=Wed, 29 May 2024 15:28:10 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	62348	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:11.357671022 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:11.388912916 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:12.105803967 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:12 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=631uHI6NVIrYqXGM5bMe4m08b8+9PyI2Px6+vxUWYEpef0oZPJdwfXqv5pRXGwxLDraRCURFGwB8rXdt9RNGfns5zUdXta8ApM7nk0iDOHvGHNhp47SYagVRDp7Y; Expires=Wed, 29 May 2024 15:28:11 GMT; Path=/ Set-Cookie: AWSALBCORS=631uHI6NVIrYqXGM5bMe4m08b8+9PyI2Px6+vxUWYEpef0oZPJdwfXqv5pRXGwxLDraRCURFGwB8rXdt9RNGfns5zUdXta8ApM7nk0iDOHvGHNhp47SYagVRDp7Y; Expires=Wed, 29 May 2024 15:28:11 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	62349	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:13.146337032 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:13.163053036 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:13.883857012 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:13 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=pkBRmhRISMxCr398NQRBMCn5vGvLSk9KAV1IXsRfNbuyDGCJAjmHP+0qCwiUaxM5DfiF8vW2q1VMaZonUrYYmTebMmsroJFrmSLtXH1ItTULRckzBAHnNt4TTu4X; Expires=Wed, 29 May 2024 15:28:13 GMT; Path=/ Set-Cookie: AWSALBCORS=pkBRmhRISMxCr398NQRBMCn5vGvLSk9KAV1IXsRfNbuyDGCJAjmHP+0qCwiUaxM5DfiF8vW2q1VMaZonUrYYmTebMmsroJFrmSLtXH1ItTULRckzBAHnNt4TTu4X; Expires=Wed, 29 May 2024 15:28:13 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	62351	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:14.905951977 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:14.967638969 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:15.733800888 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:15 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=SmnjI7uf29VBnXrZC43lMNJCXO/WLSNoCNM+xt5n3cr3+YYiNJ/RE6KV5i7W+k31bn+iousx/am4dpBU8O3NVcOR50GYiUM/qpJplB605k2Grvum57+aTpHAQqTB; Expires=Wed, 29 May 2024 15:28:15 GMT; Path=/ Set-Cookie: AWSALBCORS=SmnjI7uf29VBnXrZC43lMNJCXO/WLSNoCNM+xt5n3cr3+YYiNJ/RE6KV5i7W+k31bn+iousx/am4dpBU8O3NVcOR50GYiUM/qpJplB605k2Grvum57+aTpHAQqTB; Expires=Wed, 29 May 2024 15:28:15 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	62128	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:16.780904055 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:16.815197945 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:17.614090919 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:17 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=4pqIHQm4GFY2ZZ0777Q7CmgpCaAjGuH5TQ1ulcvJikVc5kZC70wQL8oCCIycLch9QMIdWYCW71CfcVvpxjIpA8Wn19KLfNAws06z/q+uqhXxuUCLZDKEWVP0JN0b; Expires=Wed, 29 May 2024 15:28:17 GMT; Path=/ Set-Cookie: AWSALBCORS=4pqIHQm4GFY2ZZ0777Q7CmgpCaAjGuH5TQ1ulcvJikVc5kZC70wQL8oCCIycLch9QMIdWYCW71CfcVvpxjIpA8Wn19KLfNAws06z/q+uqhXxuUCLZDKEWVP0JN0b; Expires=Wed, 29 May 2024 15:28:17 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	62129	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:18.641236067 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:18.648397923 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:19.536070108 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:19 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=HybvgbbHHnAPbvVwOeDx3DzHCt7TRPDr2dCyxLMDueiKl04s2GapUC+ajjFe2NIyKRiH0ippqaYb1diJuvsHvLx48WRbgKkhO3l4kH9fcKMr99mgHA6H4Mj4jwYz; Expires=Wed, 29 May 2024 15:28:19 GMT; Path=/ Set-Cookie: AWSALBCORS=HybvgbbHHnAPbvVwOeDx3DzHCt7TRPDr2dCyxLMDueiKl04s2GapUC+ajjFe2NIyKRiH0ippqaYb1diJuvsHvLx48WRbgKkhO3l4kH9fcKMr99mgHA6H4Mj4jwYz; Expires=Wed, 29 May 2024 15:28:19 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	62130	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:20.550736904 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:20.561939955 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:21.277909040 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:21 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=xEFIGT00TaWGVH2Xqp/9CPqbZ88VloGjE11yhp0xZxF0eNuYgty8Y9wook/d0dV6O2smcJXhhFqvDpAZVZwELyUX7mtrSpANNz9y80LeNXRU6dwVthCLVE2s3P81; Expires=Wed, 29 May 2024 15:28:21 GMT; Path=/ Set-Cookie: AWSALBCORS=xEFIGT00TaWGVH2Xqp/9CPqbZ88VloGjE11yhp0xZxF0eNuYgty8Y9wook/d0dV6O2smcJXhhFqvDpAZVZwELyUX7mtrSpANNz9y80LeNXRU6dwVthCLVE2s3P81; Expires=Wed, 29 May 2024 15:28:21 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	62131	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:22.297020912 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:22.352221966 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:23.127484083 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:23 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=4DobksixPyl+qTUHvMB0nk/f9JAUXoyF/pY2P1xe4H0eVga3LJF/PugC+WPvPfV82WyzLQ8cFtCjJLKBV3XCRa3SSnOGPUCl4+qzXyypKynnMOwGyNFnc7AXbBbN; Expires=Wed, 29 May 2024 15:28:22 GMT; Path=/ Set-Cookie: AWSALBCORS=4DobksixPyl+qTUHvMB0nk/f9JAUXoyF/pY2P1xe4H0eVga3LJF/PugC+WPvPfV82WyzLQ8cFtCjJLKBV3XCRa3SSnOGPUCl4+qzXyypKynnMOwGyNFnc7AXbBbN; Expires=Wed, 29 May 2024 15:28:22 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	62132	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:24.144854069 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:24.154625893 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:24.861237049 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:24 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=T6QxLgn7rjZCVOMNBq4S5SJY9gc9+UIBPiLKGYPW4BSHFfebjxZT3sE26LoiutALi/qV4Ok+zLzkLOqqEOr1SLm217PaaiyhBYBJLgvZMCvlh3TjidOV7DezIodg; Expires=Wed, 29 May 2024 15:28:24 GMT; Path=/ Set-Cookie: AWSALBCORS=T6QxLgn7rjZCVOMNBq4S5SJY9gc9+UIBPiLKGYPW4BSHFfebjxZT3sE26LoiutALi/qV4Ok+zLzkLOqqEOr1SLm217PaaiyhBYBJLgvZMCvlh3TjidOV7DezIodg; Expires=Wed, 29 May 2024 15:28:24 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	62133	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:26.008344889 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:26.016388893 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:26.808310032 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:26 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=gubq2zPGs3Ygz7LqCULB9dNrduqe+oDONE1EQhLEcz/9eGkLuq7uE5vum8IkCIfx7+Mweu6YE/8BLPIBkoTXvaSc9fylFPM0HqHRYQFpO0xyWK2ccrmqVoE49dEQ; Expires=Wed, 29 May 2024 15:28:26 GMT; Path=/ Set-Cookie: AWSALBCORS=gubq2zPGs3Ygz7LqCULB9dNrduqe+oDONE1EQhLEcz/9eGkLuq7uE5vum8IkCIfx7+Mweu6YE/8BLPIBkoTXvaSc9fylFPM0HqHRYQFpO0xyWK2ccrmqVoE49dEQ; Expires=Wed, 29 May 2024 15:28:26 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49805	34.251.116.243	80	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:26.111787081 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	62135	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:27.835787058 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:27.845823050 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:28.650635958 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:28 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=veU5J/b0p162Q8pneXoE6Fo1qdpBm7L6+qP55SE1CaAon6h4dUhVFvHIWYXKpeNBRn5ufQbKAMtvIa9j2JGr9/YHBRpTt9Vtu96TUswFDL8PEjiIlTqN4ElZO9ik; Expires=Wed, 29 May 2024 15:28:28 GMT; Path=/ Set-Cookie: AWSALBCORS=veU5J/b0p162Q8pneXoE6Fo1qdpBm7L6+qP55SE1CaAon6h4dUhVFvHIWYXKpeNBRn5ufQbKAMtvIa9j2JGr9/YHBRpTt9Vtu96TUswFDL8PEjiIlTqN4ElZO9ik; Expires=Wed, 29 May 2024 15:28:28 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	62136	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:29.675184011 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:29.689685106 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:30.428194046 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:30 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=2RQiR8ZE3wPTcAtdhQQKKQtuOu6IhkB/IMtMr3Y+IkKoZIRAVMGh+3BnbVOha+DLU6qQPdTkV5jTxtAJ9+ba/3raDd5h8GxFkZdQsHH+vrotp6EPuSmbZdlGgG1X; Expires=Wed, 29 May 2024 15:28:30 GMT; Path=/ Set-Cookie: AWSALBCORS=2RQiR8ZE3wPTcAtdhQQKKQtuOu6IhkB/IMtMr3Y+IkKoZIRAVMGh+3BnbVOha+DLU6qQPdTkV5jTxtAJ9+ba/3raDd5h8GxFkZdQsHH+vrotp6EPuSmbZdlGgG1X; Expires=Wed, 29 May 2024 15:28:30 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	62137	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:31.459930897 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:31.469798088 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:32.278912067 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:32 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=cl0F6QM/HPlnpfIUxfwUalFlUHwCIrfDmsnNB3rKIi8uhyrJJ76sXYLEdlUcFdznufLi3Vb5aMre1yr37DBQTmpmH/coM5QAWG0xJkXXBH7IV1GqLGPYKppkX/VW; Expires=Wed, 29 May 2024 15:28:32 GMT; Path=/ Set-Cookie: AWSALBCORS=cl0F6QM/HPlnpfIUxfwUalFlUHwCIrfDmsnNB3rKIi8uhyrJJ76sXYLEdlUcFdznufLi3Vb5aMre1yr37DBQTmpmH/coM5QAWG0xJkXXBH7IV1GqLGPYKppkX/VW; Expires=Wed, 29 May 2024 15:28:32 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	62138	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:33.347716093 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:33.360004902 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:34.102324009 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:33 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=KU14UATlsegTqKbq+pphF3vP6rHv596VIvh91dFVperuPAoVWTwXd9DgwOgBDt7/jfgV3nysCcD4lkBKIVbbw83ZuD7nujGMxIKQyTgtD51y42+CP05TSjvp6Hn+; Expires=Wed, 29 May 2024 15:28:33 GMT; Path=/ Set-Cookie: AWSALBCORS=KU14UATlsegTqKbq+pphF3vP6rHv596VIvh91dFVperuPAoVWTwXd9DgwOgBDt7/jfgV3nysCcD4lkBKIVbbw83ZuD7nujGMxIKQyTgtD51y42+CP05TSjvp6Hn+; Expires=Wed, 29 May 2024 15:28:33 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	62139	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:35.137471914 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:35.156116009 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:35.856726885 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:35 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=ZpshEj6a3eAAVTA6cwSrfKmlI4qOaoZ4W25OW8vRUE2sN89VaDViAMNJfnB5LgIOqWKUsJ0E6C4aFuMfzY1pd2uWH8XUgof+F7AICtXq0UkG79XOB5LSscMSBEdV; Expires=Wed, 29 May 2024 15:28:35 GMT; Path=/ Set-Cookie: AWSALBCORS=ZpshEj6a3eAAVTA6cwSrfKmlI4qOaoZ4W25OW8vRUE2sN89VaDViAMNJfnB5LgIOqWKUsJ0E6C4aFuMfzY1pd2uWH8XUgof+F7AICtXq0UkG79XOB5LSscMSBEdV; Expires=Wed, 29 May 2024 15:28:35 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	62140	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:36.884540081 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:36.894309044 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:37.627471924 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:37 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=HYtoKmf8ohsiku9GB0voXHB4wjTXx7N5X8+9A/WR4f0Xoc+dRYNceXqL6yTZCuwKazzTzGYKs78N3bBfF4F6TjPXa98piaBzwFydUJK7d2Cz3HI82hma43ndz5b7; Expires=Wed, 29 May 2024 15:28:37 GMT; Path=/ Set-Cookie: AWSALBCORS=HYtoKmf8ohsiku9GB0voXHB4wjTXx7N5X8+9A/WR4f0Xoc+dRYNceXqL6yTZCuwKazzTzGYKs78N3bBfF4F6TjPXa98piaBzwFydUJK7d2Cz3HI82hma43ndz5b7; Expires=Wed, 29 May 2024 15:28:37 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	62141	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:38.672347069 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:38.682593107 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:39.440851927 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:39 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=M4NabBbv4sYE6XocFuo+C4/1X42kdpPbPDS23nvxJ1l516AN8LWVoaxJt4DI8GhUwBHHLm01T8BvV8x1ynJq+B1RX9Hpnos6dCNxy2HRaFdQWAWTKVG92gTTanvH; Expires=Wed, 29 May 2024 15:28:39 GMT; Path=/ Set-Cookie: AWSALBCORS=M4NabBbv4sYE6XocFuo+C4/1X42kdpPbPDS23nvxJ1l516AN8LWVoaxJt4DI8GhUwBHHLm01T8BvV8x1ynJq+B1RX9Hpnos6dCNxy2HRaFdQWAWTKVG92gTTanvH; Expires=Wed, 29 May 2024 15:28:39 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	62142	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:40.458317041 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:40.494384050 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:41.188349009 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:41 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=33PAVsbgWHvhYF0kttTfoUjozxpEFeUwqLIjeIoruQxuJ9YBXdOeB+EFHJZjMvu5XCKj5Y1Eh6u+Fxpx7NO0p8qTmX3WL8cLgcMF4zLEFYnqMfR2aRqRFR7Z6BcH; Expires=Wed, 29 May 2024 15:28:41 GMT; Path=/ Set-Cookie: AWSALBCORS=33PAVsbgWHvhYF0kttTfoUjozxpEFeUwqLIjeIoruQxuJ9YBXdOeB+EFHJZjMvu5XCKj5Y1Eh6u+Fxpx7NO0p8qTmX3WL8cLgcMF4zLEFYnqMfR2aRqRFR7Z6BcH; Expires=Wed, 29 May 2024 15:28:41 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	62143	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:42.205667973 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:42.215298891 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:43.012212038 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:42 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=fl+1l5XokEX0Ed+aC/uUC6RoFfP1U76perQ+idSay9946AIdnnV3G67nlN0klxogoqhOwFzjvenbqYPegs1/5rWYlCaZc0DncLpI/RW/7wFkvfJnMdjuI2gpd0ee; Expires=Wed, 29 May 2024 15:28:42 GMT; Path=/ Set-Cookie: AWSALBCORS=fl+1l5XokEX0Ed+aC/uUC6RoFfP1U76perQ+idSay9946AIdnnV3G67nlN0klxogoqhOwFzjvenbqYPegs1/5rWYlCaZc0DncLpI/RW/7wFkvfJnMdjuI2gpd0ee; Expires=Wed, 29 May 2024 15:28:42 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	62144	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:44.048418045 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:44.083870888 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:44.919859886 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:44 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=r71/tjMByzfM4lu5PP27U1gjwwWmYJwuxfRg5kMEO/f7dTiT6toTKPcZ1aAaK19LmSSHSGn/GNP3ZvmqDomlbdifC0571uS1ss/cD1zDZQQZ1ajKuqm+S94LUN7h; Expires=Wed, 29 May 2024 15:28:44 GMT; Path=/ Set-Cookie: AWSALBCORS=r71/tjMByzfM4lu5PP27U1gjwwWmYJwuxfRg5kMEO/f7dTiT6toTKPcZ1aAaK19LmSSHSGn/GNP3ZvmqDomlbdifC0571uS1ss/cD1zDZQQZ1ajKuqm+S94LUN7h; Expires=Wed, 29 May 2024 15:28:44 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	56728	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:45.941119909 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:45.950741053 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:46.657752991 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:46 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=TP/EUmQt2RUrM0G/kvgTdTBbVCBBp3LlrL8+0z9Qj56RTgFdnTYzKT0OiPMDZUva/owHiszEGlmBARW7m6VPZ1ebEQKjqq7+WffiKxc7/buD5FOqB3mQvfMi3iVx; Expires=Wed, 29 May 2024 15:28:46 GMT; Path=/ Set-Cookie: AWSALBCORS=TP/EUmQt2RUrM0G/kvgTdTBbVCBBp3LlrL8+0z9Qj56RTgFdnTYzKT0OiPMDZUva/owHiszEGlmBARW7m6VPZ1ebEQKjqq7+WffiKxc7/buD5FOqB3mQvfMi3iVx; Expires=Wed, 29 May 2024 15:28:46 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	56729	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:47.678208113 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:47.701184034 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:48.427495003 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:48 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=rblUnDse/8vrjYTkQLX1IKr/Lp+lb/qjweZKBedFvSd2n5FMZo7LdOHy3/nztYLTCYiPjrmWNIsXo6mOxqt+mOEYQvGm239hkEV7E0VOFMnhqbOvBE/UFIzBma2/; Expires=Wed, 29 May 2024 15:28:48 GMT; Path=/ Set-Cookie: AWSALBCORS=rblUnDse/8vrjYTkQLX1IKr/Lp+lb/qjweZKBedFvSd2n5FMZo7LdOHy3/nztYLTCYiPjrmWNIsXo6mOxqt+mOEYQvGm239hkEV7E0VOFMnhqbOvBE/UFIzBma2/; Expires=Wed, 29 May 2024 15:28:48 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	56731	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:49.927400112 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:49.941808939 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:50.730993986 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:50 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=ELTu2pw8Cx0U3qvXjKToSaqRyWeqqNhpgpYS7nLq/bqucDsLGNSwMWpxKZg5z/1QLeLNhYASV6u92WWYDJEZARq6n8D/XmyIl6ufTY8pwJK6HBjUkwYKugQUOdxX; Expires=Wed, 29 May 2024 15:28:50 GMT; Path=/ Set-Cookie: AWSALBCORS=ELTu2pw8Cx0U3qvXjKToSaqRyWeqqNhpgpYS7nLq/bqucDsLGNSwMWpxKZg5z/1QLeLNhYASV6u92WWYDJEZARq6n8D/XmyIl6ufTY8pwJK6HBjUkwYKugQUOdxX; Expires=Wed, 29 May 2024 15:28:50 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	56732	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:51.775933981 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:51.789237976 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:52.607275963 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:52 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=oZqAQ/SyuHBU4KUiFK6xuMEP0QKw9Fknkbs89qHRHs5uOdpEaHuVDwuOR3QAH2JU+20aebUy3nfzPVQFQi+/1Xf9CU9qSFeqPUwCs1TtwmelIXJYsRevmMTADyg1; Expires=Wed, 29 May 2024 15:28:52 GMT; Path=/ Set-Cookie: AWSALBCORS=oZqAQ/SyuHBU4KUiFK6xuMEP0QKw9Fknkbs89qHRHs5uOdpEaHuVDwuOR3QAH2JU+20aebUy3nfzPVQFQi+/1Xf9CU9qSFeqPUwCs1TtwmelIXJYsRevmMTADyg1; Expires=Wed, 29 May 2024 15:28:52 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	56733	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:53.761601925 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:53.776933908 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:54.583724976 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:54 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=FG6Sterx/C6t54ZNvXhMoxh6mYKX3Kc3CVEsdR9aMzy/97bPp3ZkgONkSxCdzMkjmxDQ7WO9puvcGXeRUpihNG+CbOyTrF9n7p3rHas/T5rJunw92ZB0SwsFCWz3; Expires=Wed, 29 May 2024 15:28:54 GMT; Path=/ Set-Cookie: AWSALBCORS=FG6Sterx/C6t54ZNvXhMoxh6mYKX3Kc3CVEsdR9aMzy/97bPp3ZkgONkSxCdzMkjmxDQ7WO9puvcGXeRUpihNG+CbOyTrF9n7p3rHas/T5rJunw92ZB0SwsFCWz3; Expires=Wed, 29 May 2024 15:28:54 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	56734	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:55.641093016 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:55.648891926 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:56.471631050 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:56 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=Oepz/BUfO3vkD8ujUa/ASurmcUka98WRCd1linCHqOtCWsd5I8UEy1+76NBO9VaEf81ZORAjbxzyzxMnUNRz9m6S8BsQjnfv9zbjS5tUJHnDDyz6md3teY4nE4hP; Expires=Wed, 29 May 2024 15:28:56 GMT; Path=/ Set-Cookie: AWSALBCORS=Oepz/BUfO3vkD8ujUa/ASurmcUka98WRCd1linCHqOtCWsd5I8UEy1+76NBO9VaEf81ZORAjbxzyzxMnUNRz9m6S8BsQjnfv9zbjS5tUJHnDDyz6md3teY4nE4hP; Expires=Wed, 29 May 2024 15:28:56 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	56735	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:57.522291899 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:57.582925081 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:28:58.338095903 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:58 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=6DX1kbIGuXVP1pnEXwvwbD9+RCItTMsuiAeE+ANaFKmi8iNSYOW5r1dO83WHN6UTgqHN8urAV8C0tKzRQ4w+6ID+UotZJfHCp1u0R1d3QIZ9nOsKIA6fjeu2a1hz; Expires=Wed, 29 May 2024 15:28:58 GMT; Path=/ Set-Cookie: AWSALBCORS=6DX1kbIGuXVP1pnEXwvwbD9+RCItTMsuiAeE+ANaFKmi8iNSYOW5r1dO83WHN6UTgqHN8urAV8C0tKzRQ4w+6ID+UotZJfHCp1u0R1d3QIZ9nOsKIA6fjeu2a1hz; Expires=Wed, 29 May 2024 15:28:58 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	56736	52.213.172.255	80	8176	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:28:59.288283110 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:28:59.297840118 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:29:00.018434048 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:28:59 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=GNS9fm2In1ra3ZNNoua+FcjcujYII5Md7bQ4LrlcxmIltDB/u2baxn8Jm7oIj/cyH6nKxKA1wY5I70pKs3ybNejwVZoq5P4jyxHfl3mLPQtB2KFUzmlLhGyNaXoJ; Expires=Wed, 29 May 2024 15:28:59 GMT; Path=/ Set-Cookie: AWSALBCORS=GNS9fm2In1ra3ZNNoua+FcjcujYII5Md7bQ4LrlcxmIltDB/u2baxn8Jm7oIj/cyH6nKxKA1wY5I70pKs3ybNejwVZoq5P4jyxHfl3mLPQtB2KFUzmlLhGyNaXoJ; Expires=Wed, 29 May 2024 15:28:59 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.16	56738	52.213.172.255	80

Timestamp	Bytes transferred	Direction	Data
May 22, 2024 17:29:02.859462023 CEST	199	OUT	POST /checkme/rest/endpoint/start HTTP/1.1 Content-Type: application/json Host: www.cpcheckme.com Cache-Control: no-store,no-cache Pragma: no-cache Content-Length: 20 Connection: Keep-Alive
May 22, 2024 17:29:02.903489113 CEST	20	OUT	Data Raw: 7b 22 74 6f 6b 65 6e 22 3a 22 79 74 32 32 7a 4d 49 67 22 7d Data Ascii: {"token":"yt22zMIg"}
May 22, 2024 17:29:03.723432064 CEST	695	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:29:03 GMT Content-Type: application/json Content-Length: 31 Connection: keep-alive Set-Cookie: AWSALB=+5cNGUImArEuh0+4AiHBG7qRS4uWKXOfjtA3kZE871VpT3rcOepvfArZxbxrh1sJzAb32JNtEhdEeUCKXb6Gs+Ny7VwxYOZgXdy23GMLmtLspYCoDQqm6RF9xEac; Expires=Wed, 29 May 2024 15:29:03 GMT; Path=/ Set-Cookie: AWSALBCORS=+5cNGUImArEuh0+4AiHBG7qRS4uWKXOfjtA3kZE871VpT3rcOepvfArZxbxrh1sJzAb32JNtEhdEeUCKXb6Gs+Ny7VwxYOZgXdy23GMLmtLspYCoDQqm6RF9xEac; Expires=Wed, 29 May 2024 15:29:03 GMT; Path=/; SameSite=None Server: Apache pragma: no-cache cache-control: private cache-control: no-cache, no-transform Access-Control-Allow-Origin: * Data Raw: 7b 22 74 65 73 74 73 49 64 73 22 3a 5b 5d 2c 22 73 74 61 74 75 73 22 3a 22 77 61 69 74 22 7d Data Ascii: {"testsIds":[],"status":"wait"}

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49703	104.17.25.14	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:26:59 UTC	560	OUT	GET /ajax/libs/bluebird/3.3.5/bluebird.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.cpcheckme.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 15:26:59 UTC	963	IN	HTTP/1.1 200 OK Date: Wed, 22 May 2024 15:26:59 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03d8b-12e38" Last-Modified: Mon, 04 May 2020 16:06:35 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 101090 Expires: Mon, 12 May 2025 15:26:59 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eUVoVz%2F5yQ7l4chFxILSLrsqVDn5FrJg2mZgMd5vOSUcKSPn4KX6115%2BLLJfKSg4GZwtcIRcYcCM%2BePXyZ10KVm7bWEkXhaHX9jmycB0mNOExoIi97Dmvsg%2Fh%2FJA2ghcuXGlXZ3j"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 887dd3e3ecae42d3-EWR alt-svc: h3=":443"; ma=86400
2024-05-22 15:26:59 UTC	406	IN	Data Raw: 37 62 65 64 0d 0a 2f 2a 20 40 70 72 65 73 65 72 76 65 0a 20 2a 20 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 0a 20 2a 20 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 2d 32 30 31 35 20 50 65 74 6b 61 20 41 6e 74 6f 6e 6f 76 0a 20 2a 20 0a 20 2a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 0a 20 2a 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 61 6e 64 20 61 73 73 6f 63 69 61 74 65 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 66 69 6c 65 73 20 28 74 68 65 20 22 53 6f 66 74 77 61 72 65 22 29 2c 20 74 6f 20 64 65 61 6c 0a 20 Data Ascii: 7bed/* @preserve * The MIT License (MIT) * * Copyright (c) 2013-2015 Petka Antonov * * Permission is hereby granted, free of charge, to any person obtaining a copy * of this software and associated documentation files (the "Software"), to deal
2024-05-22 15:26:59 UTC	1369	IN	Data Raw: 73 65 6c 6c 0a 20 2a 20 63 6f 70 69 65 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 2a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 20 2a 20 0a 20 2a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 0a 20 2a 20 61 6c 6c 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f Data Ascii: sell * copies of the Software, and to permit persons to whom the Software is * furnished to do so, subject to the following conditions: * * The above copyright notice and this permission notice shall be included in * all copies or substantial portio
2024-05-22 15:26:59 UTC	1369	IN	Data Raw: 72 6e 20 63 28 73 2c 21 30 29 3b 69 66 28 6f 29 72 65 74 75 72 6e 20 6f 28 73 2c 21 30 29 3b 76 61 72 20 6c 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 73 2b 22 27 22 29 3b 74 68 72 6f 77 20 6c 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 6c 7d 76 61 72 20 75 3d 65 5b 73 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 74 5b 73 5d 5b 30 5d 2e 63 61 6c 6c 28 75 2e 65 78 70 6f 72 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 5b 73 5d 5b 31 5d 5b 65 5d 3b 72 65 74 75 72 6e 20 69 28 6e 3f 6e 3a 65 29 7d 2c 75 2c 75 2e 65 78 70 6f 72 74 73 2c 72 2c 74 2c 65 2c 6e 29 7d 72 65 74 75 72 6e 20 65 5b 73 5d 2e 65 78 70 6f 72 74 73 7d 66 6f 72 28 76 61 72 20 6f 3d Data Ascii: rn c(s,!0);if(o)return o(s,!0);var l=new Error("Cannot find module '"+s+"'");throw l.code="MODULE_NOT_FOUND",l}var u=e[s]={exports:{}};t[s][0].call(u.exports,function(e){var n=t[s][1][e];return i(n?n:e)},u,u.exports,r,t,e,n)}return e[s].exports}for(var o=
2024-05-22 15:26:59 UTC	1369	IN	Data Raw: 69 6e 65 45 6e 61 62 6c 65 64 3d 21 30 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 73 61 62 6c 65 54 72 61 6d 70 6f 6c 69 6e 65 49 66 4e 65 63 65 73 73 61 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 70 2e 68 61 73 44 65 76 54 6f 6f 6c 73 26 26 28 74 68 69 73 2e 5f 74 72 61 6d 70 6f 6c 69 6e 65 45 6e 61 62 6c 65 64 3d 21 31 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 76 65 49 74 65 6d 73 51 75 65 75 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 73 54 69 63 6b 55 73 65 64 7c 7c 74 68 69 73 2e 5f 68 61 76 65 44 72 61 69 6e 65 64 51 75 65 75 65 73 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 66 61 74 61 6c 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 65 3f 28 70 72 6f 63 65 73 73 2e 73 74 64 65 72 72 Data Ascii: ineEnabled=!0},r.prototype.disableTrampolineIfNecessary=function(){p.hasDevTools&&(this._trampolineEnabled=!1)},r.prototype.haveItemsQueued=function(){return this._isTickUsed\|\|this._haveDrainedQueues},r.prototype.fatalError=function(t,e){e?(process.stderr
2024-05-22 15:26:59 UTC	1369	IN	Data Raw: 6f 6d 69 73 65 73 28 29 7d 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 64 72 61 69 6e 51 75 65 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 72 61 69 6e 51 75 65 75 65 28 74 68 69 73 2e 5f 6e 6f 72 6d 61 6c 51 75 65 75 65 29 2c 74 68 69 73 2e 5f 72 65 73 65 74 28 29 2c 74 68 69 73 2e 5f 68 61 76 65 44 72 61 69 6e 65 64 51 75 65 75 65 73 3d 21 30 2c 74 68 69 73 2e 5f 64 72 61 69 6e 51 75 65 75 65 28 74 68 69 73 2e 5f 6c 61 74 65 51 75 65 75 65 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 71 75 65 75 65 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 54 69 63 6b 55 73 65 64 7c 7c 28 74 68 69 73 2e 5f 69 73 54 69 63 6b 55 73 65 64 3d 21 30 2c 74 68 69 73 2e 5f 73 63 68 65 64 75 6c 65 28 74 68 69 73 2e 64 72 61 Data Ascii: omises()}},r.prototype._drainQueues=function(){this._drainQueue(this._normalQueue),this._reset(),this._haveDrainedQueues=!0,this._drainQueue(this._lateQueue)},r.prototype._queueTick=function(){this._isTickUsed\|\|(this._isTickUsed=!0,this._schedule(this.dra
2024-05-22 15:26:59 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 73 6f 6c 76 65 28 6e 29 2e 62 69 6e 64 28 65 29 7d 7d 7d 2c 7b 7d 5d 2c 34 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 74 72 79 7b 50 72 6f 6d 69 73 65 3d 3d 3d 6f 26 26 28 50 72 6f 6d 69 73 65 3d 69 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 6f 7d 76 61 72 20 69 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 50 72 6f 6d 69 73 65 26 26 28 69 3d 50 72 6f 6d 69 73 65 29 3b 76 61 72 20 6f 3d 74 28 22 2e 2f 70 72 6f 6d 69 73 65 22 29 28 29 3b 6f 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 72 2c 65 2e 65 78 70 6f 72 74 73 3d 6f 7d 2c 7b 22 2e 2f 70 72 6f 6d 69 73 65 22 3a 32 32 Data Ascii: function(e,n){return t.resolve(n).bind(e)}}},{}],4:[function(t,e,n){"use strict";function r(){try{Promise===o&&(Promise=i)}catch(t){}return o}var i;"undefined"!=typeof Promise&&(i=Promise);var o=t("./promise")();o.noConflict=r,e.exports=o},{"./promise":22
2024-05-22 15:26:59 UTC	1369	IN	Data Raw: 66 6f 6c 6c 6f 77 65 65 28 29 2e 63 61 6e 63 65 6c 28 29 3a 65 2e 5f 63 61 6e 63 65 6c 42 72 61 6e 63 68 65 64 28 29 3b 62 72 65 61 6b 7d 76 61 72 20 6e 3d 74 2e 5f 63 61 6e 63 65 6c 6c 61 74 69 6f 6e 50 61 72 65 6e 74 3b 69 66 28 6e 75 6c 6c 3d 3d 6e 7c 7c 21 6e 2e 69 73 43 61 6e 63 65 6c 6c 61 62 6c 65 28 29 29 7b 74 2e 5f 69 73 46 6f 6c 6c 6f 77 69 6e 67 28 29 3f 74 2e 5f 66 6f 6c 6c 6f 77 65 65 28 29 2e 63 61 6e 63 65 6c 28 29 3a 74 2e 5f 63 61 6e 63 65 6c 42 72 61 6e 63 68 65 64 28 29 3b 62 72 65 61 6b 7d 74 2e 5f 69 73 46 6f 6c 6c 6f 77 69 6e 67 28 29 26 26 74 2e 5f 66 6f 6c 6c 6f 77 65 65 28 29 2e 63 61 6e 63 65 6c 28 29 2c 65 3d 74 2c 74 3d 6e 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 62 72 61 6e 63 68 48 61 73 43 61 6e 63 65 6c 6c 65 64 3d Data Ascii: followee().cancel():e._cancelBranched();break}var n=t._cancellationParent;if(null==n\|\|!n.isCancellable()){t._isFollowing()?t._followee().cancel():t._cancelBranched();break}t._isFollowing()&&t._followee().cancel(),e=t,t=n}},e.prototype._branchHasCancelled=
2024-05-22 15:26:59 UTC	1369	IN	Data Raw: 6c 6c 65 64 28 74 68 69 73 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 6e 76 6f 6b 65 4f 6e 43 61 6e 63 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 6f 6e 43 61 6e 63 65 6c 28 29 3b 74 68 69 73 2e 5f 75 6e 73 65 74 4f 6e 43 61 6e 63 65 6c 28 29 2c 63 2e 69 6e 76 6f 6b 65 28 74 68 69 73 2e 5f 64 6f 49 6e 76 6f 6b 65 4f 6e 43 61 6e 63 65 6c 2c 74 68 69 73 2c 74 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 6e 76 6f 6b 65 49 6e 74 65 72 6e 61 6c 4f 6e 43 61 6e 63 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 73 43 61 6e 63 65 6c 6c 61 62 6c 65 28 29 26 26 28 74 68 69 73 2e 5f 64 6f 49 6e 76 6f 6b 65 4f 6e 43 61 6e 63 65 6c 28 74 68 69 73 2e 5f 6f 6e 43 61 6e 63 65 6c 28 29 2c 21 30 29 2c 74 68 69 73 Data Ascii: lled(this)},e.prototype._invokeOnCancel=function(){var t=this._onCancel();this._unsetOnCancel(),c.invoke(this._doInvokeOnCancel,this,t)},e.prototype._invokeInternalOnCancel=function(){this.isCancellable()&&(this._doInvokeOnCancel(this._onCancel(),!0),this
2024-05-22 15:26:59 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 74 72 61 63 65 2e 5f 70 72 6f 6d 69 73 65 43 72 65 61 74 65 64 3d 6e 75 6c 6c 2c 6f 2e 70 75 73 68 28 74 68 69 73 2e 5f 74 72 61 63 65 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 70 6f 70 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 5f 74 72 61 63 65 29 7b 76 61 72 20 74 3d 6f 2e 70 6f 70 28 29 2c 65 3d 74 2e 5f 70 72 6f 6d 69 73 65 43 72 65 61 74 65 64 3b 72 65 74 75 72 6e 20 74 2e 5f 70 72 6f 6d 69 73 65 43 72 65 61 74 65 64 3d 6e 75 6c 6c 2c 65 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 65 2e 43 61 70 74 75 72 65 64 54 72 61 63 65 3d 6e 75 6c 6c 2c 65 2e 63 72 65 61 74 65 3d 6e 2c 65 2e 64 65 61 63 74 69 76 61 74 65 4c 6f 6e 67 53 74 61 63 6b 54 72 61 63 65 73 3d 66 Data Ascii: this._trace._promiseCreated=null,o.push(this._trace))},e.prototype._popContext=function(){if(void 0!==this._trace){var t=o.pop(),e=t._promiseCreated;return t._promiseCreated=null,e}return null},e.CapturedTrace=null,e.create=n,e.deactivateLongStackTraces=f
2024-05-22 15:26:59 UTC	1369	IN	Data Raw: 69 73 2e 5f 6f 6e 43 61 6e 63 65 6c 46 69 65 6c 64 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 74 68 69 73 2e 5f 6f 6e 43 61 6e 63 65 6c 46 69 65 6c 64 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 74 68 69 73 2e 5f 63 61 6e 63 65 6c 6c 61 74 69 6f 6e 50 61 72 65 6e 74 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 5f 6f 6e 43 61 6e 63 65 6c 46 69 65 6c 64 3d 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 65 29 7b 69 66 28 30 21 3d 3d 28 31 26 65 29 29 7b 74 68 69 73 2e 5f 63 61 6e 63 65 6c 6c 61 74 69 6f 6e 50 61 72 65 6e 74 3d 74 3b 76 61 72 20 6e 3d 74 2e 5f 62 72 61 6e 63 68 65 73 52 65 6d 61 69 6e 69 6e 67 54 6f 43 61 6e 63 65 6c 3b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 30 29 2c 74 2e 5f 62 72 61 6e 63 68 65 73 52 65 6d 61 69 6e 69 6e Data Ascii: is._onCancelField}function c(t){this._onCancelField=t}function l(){this._cancellationParent=void 0,this._onCancelField=void 0}function u(t,e){if(0!==(1&e)){this._cancellationParent=t;var n=t._branchesRemainingToCancel;void 0===n&&(n=0),t._branchesRemainin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49702	172.217.18.4	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:26:59 UTC	639	OUT	GET /recaptcha/api.js?render=explicit HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.cpcheckme.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 15:26:59 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 22 May 2024 15:26:59 GMT Date: Wed, 22 May 2024 15:26:59 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-22 15:26:59 UTC	862	IN	Data Raw: 35 38 38 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 588/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-05-22 15:26:59 UTC	561	IN	Data Raw: 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e 67 65 74 56 61 6c 75 65 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 69 66 28 6c 21 3d 3d 27 74 72 65 61 74 6d 65 6e 74 5f 31 2e 31 27 26 26 6c 21 3d 3d 27 74 72 65 61 74 6d 65 6e 74 5f 31 2e 32 27 26 26 6c 21 3d 3d 27 63 6f 6e 74 72 6f 6c 5f 31 2e 31 27 29 7b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 7d 7d 29 3b 7d 65 6c 73 65 7b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 7d 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 38 6b 38 35 51 42 49 2d 71 7a 78 6d 65 6e 44 76 33 31 38 41 5a 48 33 30 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f Data Ascii: eprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m);}});}else{d.head.prepend(m);}po.src='https://www.gstatic.com/recaptcha/releases/8k85QBI-qzxmenDv318AZH30/recaptcha__en.js';po.cro
2024-05-22 15:26:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49710	18.66.147.95	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:27:00 UTC	634	OUT	GET /wp-content/themes/checkpoint-theme-v2/images/parsley.png HTTP/1.1 Host: www.checkpoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://www.cpcheckme.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 15:27:01 UTC	880	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 17687 Connection: close Server: nginx Date: Wed, 22 May 2024 15:27:01 GMT Last-Modified: Tue, 23 Aug 2022 23:06:20 GMT ETag: "63055d6c-4517" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * Accept-Ranges: bytes Content-Security-Policy: 1 Permissions-Policy: geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), fullscreen=(self), payment=() Referrer-Policy: origin Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 ba67e20db38657ee5cb05d05b3da9d70.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: -q-jPeKuy3KV0R3VgwSTf_7pserzuthTLsFSUuQMnIgWkyBYHVNzEA==
2024-05-22 15:27:01 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0b b8 00 00 05 b5 04 03 00 00 00 6f 9a 80 c9 00 00 00 24 50 4c 54 45 f0 f0 f0 f6 f6 f6 eb eb eb f1 f1 f1 f5 f5 f5 f4 f4 f4 f3 f3 f3 f2 f2 f2 ed ed ed ef ef ef ec ec ec ee ee ee cc 27 1c d1 00 00 20 00 49 44 41 54 78 9c ed dd 3d af 34 d7 75 e7 6d 01 84 25 4b 8a 04 be a5 82 23 8f 9d b0 60 39 98 50 a0 9d b3 41 d8 f1 51 f0 d8 29 1b 0e 8c 27 6b dc d1 60 a2 81 32 db 49 e3 ce 66 22 43 d1 00 fe 72 03 ea 95 75 b3 4f f7 a9 ae 5d f5 5f 7b d7 75 7d 82 d3 b5 f6 5a f8 41 a0 c8 1f fc 0c 92 3e fd 01 74 eb 47 e9 fd b9 e3 07 e9 3f 80 83 fb 2a bd 9e f0 bc 73 7a 7f ee 70 dc 89 12 ee 74 ac 72 b8 3b ee 64 09 77 3a 76 4e ef cf 3d 8e 3b 49 c2 9d 8e 95 0e 77 c7 9d 28 e1 4e c7 ce e9 fd b9 cb 71 27 48 b8 d3 b1 da e1 ee b8 93 24 Data Ascii: PNGIHDRo$PLTE' IDATx=4um%K#`9PAQ)'k`2If"CruO]_{u}ZA>tG?*szptr;dw:vN=;Iw(Nq'H$
2024-05-22 15:27:01 UTC	1303	IN	Data Raw: e9 57 15 30 b5 fe 86 c2 9d be 09 f7 21 a5 9f d5 fe 3e 6a fe 0d 85 3b 7d 13 ee 43 4a 3f ab fd 4d ad 3f a1 70 a7 6f c2 7d 4c e9 77 b5 3b e1 0e 73 c2 7d 4c e9 77 b5 bb a9 f5 17 14 ee f4 4d b8 0f 2a fd b0 f6 26 dc 61 4e b8 0f 2a fd b0 f6 36 b5 fe 80 c2 9d be 09 f7 51 a5 5f d6 ce 84 3b cc 09 f7 51 a5 5f d6 74 06 f3 e9 00 00 04 96 49 44 41 54 ce a6 d6 df 4f b8 d3 37 e1 3e ac f4 d3 da 97 70 87 39 e1 3e ac f4 d3 da d7 d4 fa f3 09 77 fa 26 dc c7 95 7e 5b bb 12 ee 30 27 dc c7 95 7e 5b bb 9a 5a 7f 3d e1 4e df 84 fb c0 d2 8f 6b 4f c2 1d e6 84 fb c0 d2 8f 6b 4f 53 eb 8f 27 dc e9 9b 70 1f 59 fa 75 ed 48 b8 c3 9c 70 1f 59 fa 75 ed 68 6a fd ed 84 3b 7d 13 ee 43 4b 3f af fd b4 0f f7 97 f4 4f 82 55 84 fb d0 d2 cf 6b 3f 53 eb 4f f7 59 fa 17 c1 2a c2 7d 6c e9 f7 b5 1b e1 0e Data Ascii: W0!>j;}CJ?M?po}Lw;s}LwM&aN6Q_;Q_tIDATO7>p9>w&~[0'~[Z=NkOkOS'pYuHpYuhj;}CK?OUk?SOY*}l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49721	172.217.18.4	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:27:01 UTC	623	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://www.cpcheckme.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 15:27:01 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 22 May 2024 15:27:01 GMT Date: Wed, 22 May 2024 15:27:01 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-22 15:27:01 UTC	862	IN	Data Raw: 35 38 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 586/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-05-22 15:27:01 UTC	559	IN	Data Raw: 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e 67 65 74 56 61 6c 75 65 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 69 66 28 6c 21 3d 3d 27 74 72 65 61 74 6d 65 6e 74 5f 31 2e 31 27 26 26 6c 21 3d 3d 27 74 72 65 61 74 6d 65 6e 74 5f 31 2e 32 27 26 26 6c 21 3d 3d 27 63 6f 6e 74 72 6f 6c 5f 31 2e 31 27 29 7b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 7d 7d 29 3b 7d 65 6c 73 65 7b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 7d 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 38 6b 38 35 51 42 49 2d 71 7a 78 6d 65 6e 44 76 33 31 38 41 5a 48 33 30 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 Data Ascii: recationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m);}});}else{d.head.prepend(m);}po.src='https://www.gstatic.com/recaptcha/releases/8k85QBI-qzxmenDv318AZH30/recaptcha__en.js';po.cross
2024-05-22 15:27:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49735	18.66.147.106	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:27:02 UTC	398	OUT	GET /wp-content/themes/checkpoint-theme-v2/images/parsley.png HTTP/1.1 Host: www.checkpoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 15:27:02 UTC	887	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 17687 Connection: close Server: nginx Date: Wed, 22 May 2024 15:27:01 GMT Last-Modified: Tue, 23 Aug 2022 23:06:20 GMT ETag: "63055d6c-4517" Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * Accept-Ranges: bytes Content-Security-Policy: 1 Permissions-Policy: geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), fullscreen=(self), payment=() Referrer-Policy: origin Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6b25d4ce9efa3f2699980e1915129606.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: DpVEti0cErfuXN65SFoUL0uLcjJ53lcjGnrvi_ggSncrox-zDkiSPA== Age: 1
2024-05-22 15:27:02 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0b b8 00 00 05 b5 04 03 00 00 00 6f 9a 80 c9 00 00 00 24 50 4c 54 45 f0 f0 f0 f6 f6 f6 eb eb eb f1 f1 f1 f5 f5 f5 f4 f4 f4 f3 f3 f3 f2 f2 f2 ed ed ed ef ef ef ec ec ec ee ee ee cc 27 1c d1 00 00 20 00 49 44 41 54 78 9c ed dd 3d af 34 d7 75 e7 6d 01 84 25 4b 8a 04 be a5 82 23 8f 9d b0 60 39 98 50 a0 9d b3 41 d8 f1 51 f0 d8 29 1b 0e 8c 27 6b dc d1 60 a2 81 32 db 49 e3 ce 66 22 43 d1 00 fe 72 03 ea 95 75 b3 4f f7 a9 ae 5d f5 5f 7b d7 75 7d 82 d3 b5 f6 5a f8 41 a0 c8 1f fc 0c 92 3e fd 01 74 eb 47 e9 fd b9 e3 07 e9 3f 80 83 fb 2a bd 9e f0 bc 73 7a 7f ee 70 dc 89 12 ee 74 ac 72 b8 3b ee 64 09 77 3a 76 4e ef cf 3d 8e 3b 49 c2 9d 8e 95 0e 77 c7 9d 28 e1 4e c7 ce e9 fd b9 cb 71 27 48 b8 d3 b1 da e1 ee b8 93 24 Data Ascii: PNGIHDRo$PLTE' IDATx=4um%K#`9PAQ)'k`2If"CruO]_{u}ZA>tG?*szptr;dw:vN=;Iw(Nq'H$
2024-05-22 15:27:02 UTC	1303	IN	Data Raw: e9 57 15 30 b5 fe 86 c2 9d be 09 f7 21 a5 9f d5 fe 3e 6a fe 0d 85 3b 7d 13 ee 43 4a 3f ab fd 4d ad 3f a1 70 a7 6f c2 7d 4c e9 77 b5 3b e1 0e 73 c2 7d 4c e9 77 b5 bb a9 f5 17 14 ee f4 4d b8 0f 2a fd b0 f6 26 dc 61 4e b8 0f 2a fd b0 f6 36 b5 fe 80 c2 9d be 09 f7 51 a5 5f d6 ce 84 3b cc 09 f7 51 a5 5f d6 74 06 f3 e9 00 00 04 96 49 44 41 54 ce a6 d6 df 4f b8 d3 37 e1 3e ac f4 d3 da 97 70 87 39 e1 3e ac f4 d3 da d7 d4 fa f3 09 77 fa 26 dc c7 95 7e 5b bb 12 ee 30 27 dc c7 95 7e 5b bb 9a 5a 7f 3d e1 4e df 84 fb c0 d2 8f 6b 4f c2 1d e6 84 fb c0 d2 8f 6b 4f 53 eb 8f 27 dc e9 9b 70 1f 59 fa 75 ed 48 b8 c3 9c 70 1f 59 fa 75 ed 68 6a fd ed 84 3b 7d 13 ee 43 4b 3f af fd b4 0f f7 97 f4 4f 82 55 84 fb d0 d2 cf 6b 3f 53 eb 4f f7 59 fa 17 c1 2a c2 7d 6c e9 f7 b5 1b e1 0e Data Ascii: W0!>j;}CJ?M?po}Lw;s}LwM&aN6Q_;Q_tIDATO7>p9>w&~[0'~[Z=NkOkOS'pYuHpYuhj;}CK?OUk?SOY*}l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49761	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:27:09 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=FmAnyWgMhHnay6U&MD=oYOMN+rE HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-22 15:27:09 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 74a6fbbf-b75b-41a9-9b9e-0257542264e5 MS-RequestId: 6f7ad3dd-0f32-456f-816c-55717512701f MS-CV: o69rcBleZE+uGL+C.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 22 May 2024 15:27:09 GMT Connection: close Content-Length: 24490
2024-05-22 15:27:09 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-05-22 15:27:09 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49763	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:27:10 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-22 15:27:11 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=88937 Date: Wed, 22 May 2024 15:27:11 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49764	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:27:11 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-22 15:27:12 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=88967 Date: Wed, 22 May 2024 15:27:12 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-22 15:27:12 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49770	216.58.212.164	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:27:24 UTC	984	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb&co=aHR0cDovL3d3dy5jcGNoZWNrbWUuY29tOjgw&hl=en&type=image&v=8k85QBI-qzxmenDv318AZH30&theme=light&size=invisible&badge=bottomright&cb=11wz3iwh9xgn HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://www.cpcheckme.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 15:27:24 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 22 May 2024 15:27:24 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-_9pARs-lqBiVDYCottEcWw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-22 15:27:24 UTC	499	IN	Data Raw: 35 37 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 5755<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-05-22 15:27:24 UTC	1390	IN	Data Raw: 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 Data Ascii: FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04
2024-05-22 15:27:24 UTC	1390	IN	Data Raw: 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b Data Ascii: EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2) format('woff2');
2024-05-22 15:27:24 UTC	1390	IN	Data Raw: 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f Data Ascii: 4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/robo
2024-05-22 15:27:24 UTC	1390	IN	Data Raw: 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e Data Ascii: format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCn
2024-05-22 15:27:24 UTC	1390	IN	Data Raw: 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 Data Ascii: nqEu92Fr1MmYUtfChc4EsA.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-s
2024-05-22 15:27:24 UTC	1390	IN	Data Raw: 55 45 57 6e 37 59 54 69 50 78 4a 66 72 41 6c 74 79 68 46 57 46 4f 56 57 45 38 42 37 70 64 38 51 6e 44 62 68 58 79 75 73 58 6b 4e 45 46 4e 41 68 4f 66 44 62 71 76 67 45 76 5a 37 48 56 52 33 65 66 35 66 71 51 46 4b 6b 75 4d 4b 4a 4a 69 49 72 79 4f 66 55 51 38 44 57 31 78 61 54 36 4b 52 75 48 4b 34 4d 6f 30 67 71 6f 68 57 6c 55 64 47 52 43 79 4f 52 4f 67 43 74 34 47 53 4f 67 35 69 39 6d 73 65 73 64 44 69 37 73 76 4a 2d 68 74 34 62 70 79 58 6e 4d 75 79 66 76 34 4d 4e 37 51 62 70 62 4e 75 6f 43 59 74 64 4f 68 4b 39 49 2d 31 53 37 6d 7a 6a 78 61 33 73 57 36 59 5a 7a 37 72 72 71 33 37 7a 76 37 45 44 74 48 44 73 48 63 48 69 77 57 73 6a 48 36 4c 73 35 39 79 61 31 52 4e 71 50 4e 44 62 69 74 41 58 44 78 5a 65 73 35 4a 36 70 74 4c 75 47 37 6d 35 6e 59 51 33 34 2d 41 Data Ascii: UEWn7YTiPxJfrAltyhFWFOVWE8B7pd8QnDbhXyusXkNEFNAhOfDbqvgEvZ7HVR3ef5fqQFKkuMKJJiIryOfUQ8DW1xaT6KRuHK4Mo0gqohWlUdGRCyOROgCt4GSOg5i9msesdDi7svJ-ht4bpyXnMuyfv4MN7QbpbNuoCYtdOhK9I-1S7mzjxa3sW6YZz7rrq37zv7EDtHDsHcHiwWsjH6Ls59ya1RNqPNDbitAXDxZes5J6ptLuG7m5nYQ34-A
2024-05-22 15:27:24 UTC	1390	IN	Data Raw: 49 35 4c 31 68 59 30 52 33 44 4b 34 6d 33 39 58 43 39 71 62 4e 33 4a 36 46 56 52 42 36 42 64 6c 43 49 31 45 44 34 4b 2d 62 5f 6e 77 34 6b 4d 7a 57 59 31 54 64 4c 41 6b 77 71 4d 53 77 63 58 66 4c 78 2d 6a 6e 4c 68 44 6f 39 47 4d 75 4b 48 6a 5f 51 65 51 74 4f 5a 39 75 50 5f 47 62 45 4a 43 6c 4d 4b 32 52 38 73 42 5a 69 61 62 79 6d 54 43 39 76 41 77 47 6c 55 53 33 73 31 68 46 33 43 61 36 39 54 65 69 6f 4d 50 6f 58 41 32 6b 41 79 44 65 56 63 66 46 70 4d 31 35 58 49 79 52 53 6c 75 42 6b 38 2d 43 57 48 53 6c 4e 78 46 44 34 59 38 54 64 31 33 37 5f 73 56 54 52 74 74 77 44 6c 54 4f 44 2d 59 4e 66 37 72 51 6a 74 6d 51 6f 5a 4f 76 70 67 62 34 4e 38 74 6d 75 5f 4a 57 31 46 7a 79 70 6c 52 4b 49 41 53 44 7a 6d 4a 79 49 38 6d 6b 76 6a 36 76 32 35 6d 52 43 32 32 79 43 5f Data Ascii: I5L1hY0R3DK4m39XC9qbN3J6FVRB6BdlCI1ED4K-b_nw4kMzWY1TdLAkwqMSwcXfLx-jnLhDo9GMuKHj_QeQtOZ9uP_GbEJClMK2R8sBZiabymTC9vAwGlUS3s1hF3Ca69TeioMPoXA2kAyDeVcfFpM15XIyRSluBk8-CWHSlNxFD4Y8Td137_sVTRttwDlTOD-YNf7rQjtmQoZOvpgb4N8tmu_JW1FzyplRKIASDzmJyI8mkvj6v25mRC22yC_
2024-05-22 15:27:24 UTC	1390	IN	Data Raw: 72 53 33 6b 79 65 57 70 5a 63 47 4a 36 51 33 42 6a 51 57 70 30 59 7a 59 32 52 32 67 72 5a 44 52 31 59 6e 42 50 61 47 73 35 57 46 56 50 55 44 4a 61 63 45 5a 5a 55 6a 6c 32 4e 47 35 6d 4d 55 46 49 63 54 4a 53 53 7a 55 35 54 57 68 31 56 30 39 57 55 6e 42 73 59 32 70 55 64 6d 4e 4e 57 58 70 44 61 45 51 76 4d 54 68 48 61 32 52 59 4d 48 70 73 4e 6b 31 30 61 46 68 78 4e 58 68 35 63 32 64 49 5a 6d 70 30 54 56 55 7a 4f 58 4e 54 4d 31 56 55 57 54 4a 4c 4b 33 42 74 65 6d 64 76 54 32 51 32 59 7a 4e 47 63 58 5a 51 4f 57 52 50 5a 31 6c 70 63 54 6c 36 4f 47 4a 42 52 6b 52 4f 65 6b 64 68 4e 79 39 42 64 44 52 7a 53 30 74 43 54 6c 67 31 64 6c 5a 69 52 31 52 6f 53 44 4a 35 4f 57 56 4e 4d 6d 31 6f 62 55 64 49 5a 7a 59 79 5a 46 6c 6f 5a 6b 68 32 65 6c 52 50 63 54 41 34 4e 30 Data Ascii: rS3kyeWpZcGJ6Q3BjQWp0YzY2R2grZDR1YnBPaGs5WFVPUDJacEZZUjl2NG5mMUFIcTJSSzU5TWh1V09WUnBsY2pUdmNNWXpDaEQvMThHa2RYMHpsNk10aFhxNXh5c2dIZmp0TVUzOXNTM1VUWTJLK3BtemdvT2Q2YzNGcXZQOWRPZ1lpcTl6OGJBRkROekdhNy9BdDRzS0tCTlg1dlZiR1RoSDJ5OWVNMm1obUdIZzYyZFloZkh2elRPcTA4N0
2024-05-22 15:27:24 UTC	1390	IN	Data Raw: 47 52 6e 55 56 6c 6d 54 6a 5a 61 64 48 42 70 65 55 74 74 59 55 51 77 55 48 70 58 4d 55 4d 35 61 30 4a 48 62 58 42 33 57 44 42 71 4b 33 56 49 61 44 5a 46 59 58 59 77 63 32 52 72 5a 33 51 77 4d 32 52 48 53 31 5a 53 54 46 4e 30 59 6b 68 73 54 45 39 5a 56 32 39 30 52 32 4e 78 56 30 5a 61 4d 45 56 54 5a 6e 4a 6f 4f 44 46 46 4d 54 6b 77 5a 54 6c 30 65 6b 6c 4f 56 6b 46 36 4e 32 78 36 57 45 5a 6d 61 6e 4e 59 63 32 64 48 4d 46 6c 48 4d 54 4a 4c 64 7a 4a 77 54 57 68 70 54 57 6c 69 63 33 52 68 57 6b 70 51 56 32 6b 31 4d 44 6c 72 54 54 5a 56 61 58 64 79 56 58 64 59 4d 32 5a 53 4d 6b 31 44 57 6b 5a 55 63 55 64 44 52 55 4e 68 56 55 35 4a 4d 6c 5a 69 4d 45 4a 68 4d 6e 6c 35 62 6a 52 6a 4c 33 4e 73 4e 44 42 72 56 47 74 71 4d 43 39 32 65 53 38 35 62 46 5a 44 59 55 78 43 Data Ascii: GRnUVlmTjZadHBpeUttYUQwUHpXMUM5a0JHbXB3WDBqK3VIaDZFYXYwc2RrZ3QwM2RHS1ZSTFN0YkhsTE9ZV290R2NxV0ZaMEVTZnJoODFFMTkwZTl0eklOVkF6N2x6WEZmanNYc2dHMFlHMTJLdzJwTWhpTWlic3RhWkpQV2k1MDlrTTZVaXdyVXdYM2ZSMk1DWkZUcUdDRUNhVU5JMlZiMEJhMnl5bjRjL3NsNDBrVGtqMC92eS85bFZDYUxC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49777	216.58.212.164	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:27:27 UTC	884	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=8k85QBI-qzxmenDv318AZH30 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb&co=aHR0cDovL3d3dy5jcGNoZWNrbWUuY29tOjgw&hl=en&type=image&v=8k85QBI-qzxmenDv318AZH30&theme=light&size=invisible&badge=bottomright&cb=11wz3iwh9xgn Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 15:27:27 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Wed, 22 May 2024 15:27:27 GMT Date: Wed, 22 May 2024 15:27:27 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-22 15:27:27 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 38 6b 38 35 51 42 49 2d 71 7a 78 6d 65 6e 44 76 33 31 38 41 5a 48 33 30 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/8k85QBI-qzxmenDv318AZH30/recaptcha__en.js');
2024-05-22 15:27:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49779	216.58.212.164	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:27:27 UTC	872	OUT	GET /js/bg/cF9tiRHt4BzQa_gljZbyGUbjFHSRXJeGZWCTLs0pBwQ.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb&co=aHR0cDovL3d3dy5jcGNoZWNrbWUuY29tOjgw&hl=en&type=image&v=8k85QBI-qzxmenDv318AZH30&theme=light&size=invisible&badge=bottomright&cb=11wz3iwh9xgn Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 15:27:27 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18224 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 22 May 2024 05:20:36 GMT Expires: Thu, 22 May 2025 05:20:36 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 29 Apr 2024 11:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 36411 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-22 15:27:27 UTC	579	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 4f 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 68 29 7b 69 66 28 43 3d 28 68 3d 6e 75 6c 6c 2c 48 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 21 43 7c 7c 21 43 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 68 3b 74 72 79 7b 68 3d 43 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 6b 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 6b 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 6b 7d 29 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var O=function(C,h){if(C=(h=null,H.trustedTypes),!C\|\|!C.createPolicy)return h;try{h=C.createPolicy("bg",{createHTML:k,createScript:k,createScriptURL:k})}
2024-05-22 15:27:27 UTC	1390	IN	Data Raw: 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 43 2c 48 2c 6b 2c 45 2c 51 29 7b 69 66 28 68 2e 49 3d 3d 68 29 66 6f 72 28 45 3d 52 28 68 2c 48 29 2c 33 37 32 3d 3d 48 7c 7c 31 36 34 3d 3d 48 7c 7c 33 38 37 3d 3d 48 3f 28 48 3d 66 75 6e 63 74 69 6f 6e 28 53 2c 67 2c 4f 2c 6e 2c 62 29 7b 69 66 28 28 4f 3d 28 28 62 3d 45 2e 6c 65 6e 67 74 68 2c 62 29 7c 30 29 2d 34 3e 3e 33 2c 45 2e 78 4a 29 21 3d 4f 29 7b 67 3d 5b 30 2c 30 2c 28 6e 3d 28 4f 3c 3c 33 29 2d 34 2c 51 5b 45 2e 78 4a 3d 4f 2c 31 5d 29 2c 51 5b 32 5d 5d 3b 74 72 79 7b 45 2e 74 49 3d 43 6c 28 67 2c 68 45 28 6e 2c 45 29 2c 68 45 28 28 6e 7c 30 29 2b 34 2c 45 29 29 7d 63 61 74 63 68 28 4d 29 7b 74 68 72 6f 77 20 4d 3b 7d 7d 45 2e 70 75 73 68 28 45 2e Data Ascii: e-2.0','*/','var x=function(h,C,H,k,E,Q){if(h.I==h)for(E=R(h,H),372==H\|\|164==H\|\|387==H?(H=function(S,g,O,n,b){if((O=((b=E.length,b)\|0)-4>>3,E.xJ)!=O){g=[0,0,(n=(O<<3)-4,Q[E.xJ=O,1]),Q[2]];try{E.tI=Cl(g,hE(n,E),hE((n\|0)+4,E))}catch(M){throw M;}}E.push(E.
2024-05-22 15:27:27 UTC	1390	IN	Data Raw: 43 2c 73 74 61 63 6b 3a 43 2c 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 3a 43 2c 66 6c 6f 6f 72 3a 43 2c 70 61 72 65 6e 74 3a 43 2c 64 6f 63 75 6d 65 6e 74 3a 43 2c 63 6f 6e 73 6f 6c 65 3a 43 2c 6c 65 6e 67 74 68 3a 43 2c 63 61 6c 6c 3a 43 2c 70 72 6f 74 6f 74 79 70 65 3a 43 2c 70 6f 70 3a 43 2c 73 70 6c 69 63 65 3a 43 7d 29 7d 2c 67 43 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 43 2c 48 2c 6b 2c 45 29 7b 66 6f 72 28 48 3d 28 6b 3d 28 68 3d 68 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 72 5c 5c 6e 2f 67 2c 22 5c 5c 6e 22 29 2c 43 3d 30 29 2c 5b 5d 29 3b 6b 3c 68 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 45 3d 68 2e 63 68 61 72 43 6f 64 65 41 74 28 6b 29 2c 31 32 38 3e 45 3f 48 5b 43 2b 2b 5d 3d 45 3a 28 32 30 34 38 3e 45 3f 48 5b 43 2b 2b 5d 3d 45 3e 3e 36 Data Ascii: C,stack:C,propertyIsEnumerable:C,floor:C,parent:C,document:C,console:C,length:C,call:C,prototype:C,pop:C,splice:C})},gC=function(h,C,H,k,E){for(H=(k=(h=h.replace(/\\r\\n/g,"\\n"),C=0),[]);k<h.length;k++)E=h.charCodeAt(k),128>E?H[C++]=E:(2048>E?H[C++]=E>>6
2024-05-22 15:27:27 UTC	1390	IN	Data Raw: 6e 2c 62 29 7b 41 28 28 6e 3d 52 28 67 2c 28 62 3d 28 4f 3d 28 6e 3d 55 28 67 29 2c 62 3d 55 28 67 29 2c 55 29 28 67 29 2c 52 28 67 2c 62 29 29 2c 6e 29 29 2c 4f 29 2c 67 2c 6e 20 69 6e 20 62 7c 30 29 7d 2c 43 2c 28 79 28 66 75 6e 63 74 69 6f 6e 28 67 2c 4f 2c 6e 29 7b 70 28 4f 2c 66 61 6c 73 65 2c 74 72 75 65 2c 67 29 7c 7c 28 4f 3d 55 28 67 29 2c 6e 3d 55 28 67 29 2c 41 28 6e 2c 67 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 65 76 61 6c 28 62 29 7d 28 72 43 28 52 28 67 2e 49 2c 4f 29 29 29 29 29 7d 2c 28 79 28 66 75 6e 63 74 69 6f 6e 28 67 2c 4f 2c 6e 2c 62 2c 4d 29 7b 28 4d 3d 28 4f 3d 52 28 67 2c 28 4f 3d 28 4d 3d 28 6e 3d 28 62 3d 55 28 67 29 2c 55 28 67 29 29 2c 55 29 28 67 29 2c 55 28 67 29 29 2c 4f 29 29 2c 6e 3d 52 28 67 2c 6e 29 Data Ascii: n,b){A((n=R(g,(b=(O=(n=U(g),b=U(g),U)(g),R(g,b)),n)),O),g,n in b\|0)},C,(y(function(g,O,n){p(O,false,true,g)\|\|(O=U(g),n=U(g),A(n,g,function(b){return eval(b)}(rC(R(g.I,O)))))},(y(function(g,O,n,b,M){(M=(O=R(g,(O=(M=(n=(b=U(g),U(g)),U)(g),U(g)),O)),n=R(g,n)
2024-05-22 15:27:27 UTC	1390	IN	Data Raw: 29 29 7d 2c 28 41 28 31 36 34 2c 43 2c 28 79 28 66 75 6e 63 74 69 6f 6e 28 67 2c 4f 2c 6e 2c 62 29 7b 69 66 28 4f 3d 67 2e 48 2e 70 6f 70 28 29 29 7b 66 6f 72 28 62 3d 66 28 67 29 3b 30 3c 62 3b 62 2d 2d 29 6e 3d 55 28 67 29 2c 4f 5b 6e 5d 3d 67 2e 5a 5b 6e 5d 3b 28 4f 5b 33 34 5d 3d 67 2e 5a 5b 4f 5b 39 32 5d 3d 67 2e 5a 5b 39 32 5d 2c 33 34 5d 2c 67 29 2e 5a 3d 4f 7d 65 6c 73 65 20 41 28 32 35 31 2c 67 2c 67 2e 57 29 7d 2c 28 41 28 39 32 2c 43 2c 28 79 28 66 75 6e 63 74 69 6f 6e 28 67 2c 4f 2c 6e 2c 62 29 7b 4f 3d 28 6e 3d 52 28 67 2c 28 62 3d 28 6e 3d 28 4f 3d 55 28 67 29 2c 55 28 67 29 29 2c 55 28 67 29 29 2c 6e 29 29 2c 52 28 67 2c 4f 29 29 2c 41 28 62 2c 67 2c 4f 5b 6e 5d 29 7d 2c 43 2c 28 41 28 32 36 36 2c 28 79 28 66 75 6e 63 74 69 6f 6e 28 67 29 Data Ascii: ))},(A(164,C,(y(function(g,O,n,b){if(O=g.H.pop()){for(b=f(g);0<b;b--)n=U(g),O[n]=g.Z[n];(O[34]=g.Z[O[92]=g.Z[92],34],g).Z=O}else A(251,g,g.W)},(A(92,C,(y(function(g,O,n,b){O=(n=R(g,(b=(n=(O=U(g),U(g)),U(g)),n)),R(g,O)),A(b,g,O[n])},C,(A(266,(y(function(g)
2024-05-22 15:27:27 UTC	1390	IN	Data Raw: 43 2e 5a 3d 5b 5d 2c 31 29 2c 43 2e 55 3d 76 6f 69 64 20 30 2c 43 29 2e 54 3d 6e 75 6c 6c 2c 48 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 7b 7d 2c 48 2e 74 69 6d 65 4f 72 69 67 69 6e 29 7c 7c 28 48 2e 74 69 6d 69 6e 67 7c 7c 7b 7d 29 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 7c 7c 30 2c 43 29 2c 30 29 2c 43 29 2c 30 29 2c 43 2e 52 59 3d 30 2c 79 28 66 75 6e 63 74 69 6f 6e 28 67 2c 4f 2c 6e 2c 62 2c 4d 2c 77 2c 74 29 7b 66 6f 72 28 4f 3d 28 62 3d 28 4d 3d 28 77 3d 28 6e 3d 55 28 67 29 2c 74 3d 63 58 28 67 29 2c 22 22 29 2c 52 28 67 2c 34 34 29 29 2c 4d 2e 6c 65 6e 67 74 68 29 2c 30 29 3b 74 2d 2d 3b 29 4f 3d 28 28 4f 7c 30 29 2b 28 63 58 28 67 29 7c 30 29 29 25 62 2c 77 2b 3d 53 5b 4d 5b 4f 5d 5d 3b 41 28 6e 2c 67 2c 77 29 7d 2c Data Ascii: C.Z=[],1),C.U=void 0,C).T=null,H=window.performance\|\|{},H.timeOrigin)\|\|(H.timing\|\|{}).navigationStart\|\|0,C),0),C),0),C.RY=0,y(function(g,O,n,b,M,w,t){for(O=(b=(M=(w=(n=U(g),t=cX(g),""),R(g,44)),M.length),0);t--;)O=((O\|0)+(cX(g)\|0))%b,w+=S[M[O]];A(n,g,w)},
2024-05-22 15:27:27 UTC	1390	IN	Data Raw: 2e 44 29 26 26 6b 3c 48 2e 57 3f 28 41 28 32 35 31 2c 48 2c 48 2e 57 29 2c 4e 6d 28 68 2c 48 29 29 3a 41 28 32 35 31 2c 48 2c 68 29 2c 48 29 29 2c 48 29 2c 6b 29 2c 33 30 30 29 29 7d 2c 54 54 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 43 29 7b 28 43 2e 70 75 73 68 28 68 5b 30 5d 3c 3c 32 34 7c 68 5b 31 5d 3c 3c 31 36 7c 68 5b 32 5d 3c 3c 38 7c 68 5b 33 5d 29 2c 43 29 2e 70 75 73 68 28 68 5b 34 5d 3c 3c 32 34 7c 68 5b 35 5d 3c 3c 31 36 7c 68 5b 36 5d 3c 3c 38 7c 68 5b 37 5d 29 2c 43 2e 70 75 73 68 28 68 5b 38 5d 3c 3c 32 34 7c 68 5b 39 5d 3c 3c 31 36 7c 68 5b 31 30 5d 3c 3c 38 7c 68 5b 31 31 5d 29 7d 2c 69 4b 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 43 2c 48 29 7b 69 66 28 33 3d 3d 68 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 48 3d 30 3b 33 3e 48 3b 48 2b 2b 29 43 5b 48 Data Ascii: .D)&&k<H.W?(A(251,H,H.W),Nm(h,H)):A(251,H,h),H)),H),k),300))},TT=function(h,C){(C.push(h[0]<<24\|h[1]<<16\|h[2]<<8\|h[3]),C).push(h[4]<<24\|h[5]<<16\|h[6]<<8\|h[7]),C.push(h[8]<<24\|h[9]<<16\|h[10]<<8\|h[11])},iK=function(h,C,H){if(3==h.length){for(H=0;3>H;H++)C[H
2024-05-22 15:27:27 UTC	1390	IN	Data Raw: 7b 72 65 74 75 72 6e 28 43 3d 66 28 68 29 2c 43 29 26 31 32 38 26 26 28 43 3d 43 26 31 32 37 7c 66 28 68 29 3c 3c 37 29 2c 43 7d 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 43 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 68 3d 68 2e 5a 5b 43 5d 2c 68 29 29 74 68 72 6f 77 5b 7a 2c 33 30 2c 43 5d 3b 69 66 28 68 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 29 3b 72 65 74 75 72 6e 28 68 2e 63 72 65 61 74 65 28 32 2a 43 2a 43 2b 2d 33 35 2a 43 2b 38 31 29 2c 68 29 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 43 6c 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 43 2c 48 2c 6b 2c 45 29 7b 66 6f 72 28 68 3d 28 6b 3d 68 5b 32 5d 7c 30 2c 45 3d 30 2c 68 29 5b 33 5d 7c 30 3b 31 35 3e 45 3b 45 2b 2b 29 48 3d 48 3e 3e 3e 38 7c 48 3c 3c 32 34 2c 48 2b 3d 43 7c 30 2c Data Ascii: {return(C=f(h),C)&128&&(C=C&127\|f(h)<<7),C},R=function(h,C){if(void 0===(h=h.Z[C],h))throw[z,30,C];if(h.value)return h.create();return(h.create(2CC+-35*C+81),h).prototype},Cl=function(h,C,H,k,E){for(h=(k=h[2]\|0,E=0,h)[3]\|0;15>E;E++)H=H>>>8\|H<<24,H+=C\|0,
2024-05-22 15:27:27 UTC	1390	IN	Data Raw: 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 51 2c 53 2c 76 29 7d 7d 72 65 74 75 72 6e 20 53 7d 2c 65 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 43 2c 48 29 7b 69 66 28 28 43 3d 74 79 70 65 6f 66 20 68 2c 22 6f 62 6a 65 63 74 22 29 3d 3d 43 29 69 66 28 68 29 7b 69 66 28 68 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 69 66 28 68 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 72 65 74 75 72 6e 20 43 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 57 69 6e 64 6f 77 5d 22 3d 3d 28 48 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 68 29 2c 48 29 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 48 Data Ascii: oveEventListener(Q,S,v)}}return S},eh=function(h,C,H){if((C=typeof h,"object")==C)if(h){if(h instanceof Array)return"array";if(h instanceof Object)return C;if("[object Window]"==(H=Object.prototype.toString.call(h),H))return"object";if("[object Array]"==H
2024-05-22 15:27:27 UTC	1390	IN	Data Raw: 31 5d 5d 7d 2c 48 2e 70 72 6f 74 6f 74 79 70 65 29 2e 42 4f 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 45 29 7b 35 30 3e 28 74 68 69 73 2e 6e 2b 2b 2c 74 68 69 73 2e 4e 29 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 4e 2e 70 75 73 68 28 6b 29 3a 28 45 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 74 68 69 73 2e 6e 29 2c 35 30 3e 45 26 26 28 74 68 69 73 2e 4e 5b 45 5d 3d 6b 29 29 7d 2c 6e 65 77 20 48 29 2c 48 29 2c 5b 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 28 68 2e 42 4f 28 6b 29 2c 43 29 2e 42 4f 28 6b 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 3d 68 2e 57 4f 28 29 2e 63 6f 6e 63 61 74 28 43 2e 57 4f 28 29 29 2c 43 3d 6e 65 77 20 48 2c 6b 7d 5d 7d 2c 4c 6c 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 43 2c 48 2c 6b 29 7b Data Ascii: 1]]},H.prototype).BO=function(k,E){50>(this.n++,this.N).length?this.N.push(k):(E=Math.floor(Math.random()*this.n),50>E&&(this.N[E]=k))},new H),H),[function(k){(h.BO(k),C).BO(k)},function(k){return k=h.WO().concat(C.WO()),C=new H,k}]},Ll=function(h,C,H,k){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49783	216.58.212.164	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:27:28 UTC	887	OUT	GET /recaptcha/api2/bframe?hl=en&v=8k85QBI-qzxmenDv318AZH30&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: http://www.cpcheckme.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 15:27:28 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 22 May 2024 15:27:28 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-ecBAbpzmVKz7rtXlaQ9Ltg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-22 15:27:28 UTC	499	IN	Data Raw: 31 64 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-05-22 15:27:28 UTC	1390	IN	Data Raw: 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 Data Ascii: -FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-0
2024-05-22 15:27:28 UTC	1390	IN	Data Raw: 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 Data Ascii: 1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2) format('woff2')
2024-05-22 15:27:28 UTC	1390	IN	Data Raw: 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 Data Ascii: c4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/rob
2024-05-22 15:27:28 UTC	1390	IN	Data Raw: 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 Data Ascii: ) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlC
2024-05-22 15:27:28 UTC	1390	IN	Data Raw: 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d Data Ascii: CnqEu92Fr1MmYUtfChc4EsA.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-
2024-05-22 15:27:28 UTC	3	IN	Data Raw: 3e 0d 0a Data Ascii: >
2024-05-22 15:27:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49784	216.58.212.164	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:27:29 UTC	859	OUT	POST /recaptcha/api2/reload?k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 9078 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=8k85QBI-qzxmenDv318AZH30&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 15:27:29 UTC	9078	OUT	Data Raw: 0a 18 38 6b 38 35 51 42 49 2d 71 7a 78 6d 65 6e 44 76 33 31 38 41 5a 48 33 30 12 a4 0f 30 33 41 46 63 57 65 41 36 33 64 64 5f 53 67 76 5f 30 54 30 68 45 5a 48 65 46 4a 53 73 58 75 64 51 76 57 6c 57 75 43 43 67 2d 74 42 46 58 48 6e 6e 4c 71 55 4c 38 6b 47 74 4d 34 72 70 5f 75 49 75 49 42 4c 57 43 61 33 57 53 76 62 49 51 2d 61 48 6f 6f 73 37 65 47 44 78 49 79 51 67 77 77 30 44 35 35 70 5a 59 35 37 73 2d 47 43 4c 76 37 72 59 39 48 31 45 6b 31 57 54 51 69 46 32 39 42 2d 58 4a 4c 36 6d 6c 4d 46 54 33 67 56 44 6e 78 52 31 53 4d 50 65 6d 42 58 78 5f 2d 55 6c 49 38 34 6a 61 4d 34 39 37 6a 31 47 54 6a 68 71 74 59 39 73 79 33 55 61 6f 48 52 36 30 50 6f 52 37 62 6f 53 34 58 38 50 6c 6e 6d 5f 6c 4a 45 6c 64 58 56 79 4e 63 36 75 73 72 57 52 70 79 58 6f 7a 6c 63 46 6d Data Ascii: 8k85QBI-qzxmenDv318AZH3003AFcWeA63dd_Sgv_0T0hEZHeFJSsXudQvWlWuCCg-tBFXHnnLqUL8kGtM4rp_uIuIBLWCa3WSvbIQ-aHoos7eGDxIyQgww0D55pZY57s-GCLv7rY9H1Ek1WTQiF29B-XJL6mlMFT3gVDnxR1SMPemBXx_-UlI84jaM497j1GTjhqtY9sy3UaoHR60PoR7boS4X8Plnm_lJEldXVyNc6usrWRpyXozlcFm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49785	216.58.212.164	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:27:30 UTC	1003	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb&co=aHR0cDovL3d3dy5jcGNoZWNrbWUuY29tOjgw&hl=en&type=image&v=8k85QBI-qzxmenDv318AZH30&theme=light&size=invisible&badge=bottomright&cb=l5a3zuoxr6a HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: http://www.cpcheckme.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 15:27:30 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 22 May 2024 15:27:30 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-AyTNYtJPEcpawCgHTBWc_w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-22 15:27:30 UTC	499	IN	Data Raw: 35 37 35 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 575a<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-05-22 15:27:30 UTC	1390	IN	Data Raw: 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 Data Ascii: FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04
2024-05-22 15:27:30 UTC	1390	IN	Data Raw: 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b Data Ascii: EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2) format('woff2');
2024-05-22 15:27:30 UTC	1390	IN	Data Raw: 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f Data Ascii: 4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/robo
2024-05-22 15:27:30 UTC	1390	IN	Data Raw: 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e Data Ascii: format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCn
2024-05-22 15:27:30 UTC	1390	IN	Data Raw: 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 Data Ascii: nqEu92Fr1MmYUtfChc4EsA.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-s
2024-05-22 15:27:30 UTC	1390	IN	Data Raw: 74 49 31 38 52 67 32 45 70 78 72 51 66 45 69 46 61 4c 56 7a 5a 77 6a 74 62 41 36 4f 49 41 4e 74 56 70 5a 67 71 37 62 50 5a 44 4b 71 77 4f 6e 6c 46 66 77 54 74 33 77 70 67 48 37 74 30 6c 58 6c 4c 58 52 61 67 2d 72 71 59 38 41 37 61 4a 70 48 48 48 7a 35 30 52 41 37 36 50 66 6a 49 53 4a 36 53 4b 6a 76 4e 32 54 67 4e 4b 41 6f 4c 52 76 76 78 39 74 34 53 77 4c 71 6f 59 57 47 32 77 4b 73 4d 37 62 63 58 39 68 4c 49 41 37 4e 77 68 6b 46 77 7a 62 76 74 54 37 47 47 46 35 4a 4d 61 66 31 55 73 63 45 45 56 64 5f 45 4c 4e 77 35 38 43 59 65 63 41 75 42 51 44 34 6b 73 66 6e 75 51 47 43 6a 47 74 36 75 74 70 31 71 6a 65 31 76 35 6f 39 74 43 36 61 77 34 39 69 36 70 52 6e 67 6a 7a 75 34 37 56 5f 42 6e 64 69 6a 74 69 6a 46 5f 39 43 79 70 4b 2d 63 36 4a 78 63 61 53 4e 74 7a 45 Data Ascii: tI18Rg2EpxrQfEiFaLVzZwjtbA6OIANtVpZgq7bPZDKqwOnlFfwTt3wpgH7t0lXlLXRag-rqY8A7aJpHHHz50RA76PfjISJ6SKjvN2TgNKAoLRvvx9t4SwLqoYWG2wKsM7bcX9hLIA7NwhkFwzbvtT7GGF5JMaf1UscEEVd_ELNw58CYecAuBQD4ksfnuQGCjGt6utp1qje1v5o9tC6aw49i6pRngjzu47V_BndijtijF_9CypK-c6JxcaSNtzE
2024-05-22 15:27:30 UTC	1390	IN	Data Raw: 67 4f 6a 46 68 38 61 36 5a 61 4a 73 6e 56 65 43 55 78 70 53 45 70 48 5a 48 43 76 34 4c 5f 36 71 4f 48 48 45 36 77 43 71 32 39 55 74 56 67 49 6f 33 69 76 37 59 4c 77 51 65 55 66 51 73 44 30 62 38 4d 74 38 6d 4d 79 47 75 69 44 70 79 6e 6d 30 31 52 33 6d 54 47 68 31 2d 62 51 38 59 4e 79 65 6b 71 4d 62 64 49 37 66 49 33 62 73 32 6e 76 53 48 35 5a 63 56 5a 6a 52 68 38 43 70 74 57 59 4f 69 64 39 67 70 6a 34 39 44 39 7a 2d 71 4f 35 41 65 36 55 45 73 52 36 36 7a 35 68 61 4f 61 35 37 35 43 69 73 52 67 37 41 48 42 50 79 5a 47 62 50 6d 38 42 58 50 52 37 30 6f 31 36 6c 74 44 65 4d 43 51 45 35 59 65 45 56 74 50 4c 6b 76 6a 72 71 6a 47 36 75 56 54 46 73 4c 38 68 6a 55 47 53 77 64 38 68 46 65 57 67 53 47 4b 36 52 7a 38 70 52 50 41 77 55 75 62 70 35 68 53 4f 70 30 77 4b Data Ascii: gOjFh8a6ZaJsnVeCUxpSEpHZHCv4L_6qOHHE6wCq29UtVgIo3iv7YLwQeUfQsD0b8Mt8mMyGuiDpynm01R3mTGh1-bQ8YNyekqMbdI7fI3bs2nvSH5ZcVZjRh8CptWYOid9gpj49D9z-qO5Ae6UEsR66z5haOa575CisRg7AHBPyZGbPm8BXPR70o16ltDeMCQE5YeEVtPLkvjrqjG6uVTFsL8hjUGSwd8hFeWgSGK6Rz8pRPAwUubp5hSOp0wK
2024-05-22 15:27:30 UTC	1390	IN	Data Raw: 42 62 6a 68 6f 56 47 6c 77 64 53 38 30 5a 33 51 32 4e 31 5a 47 51 55 70 5a 4e 47 6c 46 62 45 52 57 56 31 64 4c 65 55 31 45 52 48 4a 72 56 45 52 45 59 32 52 4a 62 30 67 31 4e 47 70 6f 61 7a 64 6b 4e 43 39 50 62 6a 6c 48 56 54 4d 78 57 48 4d 79 64 46 68 6e 51 6d 73 33 63 7a 68 48 65 6d 67 34 62 47 31 31 56 56 68 6a 59 57 6c 6c 65 56 6c 36 54 54 42 53 4f 57 74 6f 51 33 6f 35 54 46 6c 79 56 30 56 4f 62 58 5a 53 61 47 46 61 5a 6c 4d 30 65 55 4a 73 55 45 4d 78 62 56 6c 43 63 45 64 72 52 57 74 50 55 45 52 43 53 55 4e 30 4e 46 59 76 63 57 4e 4d 61 48 5a 75 55 58 5a 51 64 47 68 42 56 55 5a 4e 63 47 70 36 65 6c 6c 55 62 54 6c 70 61 45 78 71 54 44 49 78 54 43 39 30 59 55 46 32 52 6a 49 77 64 33 70 44 55 31 64 56 4d 6e 42 69 53 57 64 79 61 44 4a 52 57 57 74 50 4f 58 Data Ascii: BbjhoVGlwdS80Z3Q2N1ZGQUpZNGlFbERWV1dLeU1ERHJrVEREY2RJb0g1NGpoazdkNC9PbjlHVTMxWHMydFhnQms3czhHemg4bG11VVhjYWlleVl6TTBSOWtoQ3o5TFlyV0VObXZSaGFaZlM0eUJsUEMxbVlCcEdrRWtPUERCSUN0NFYvcWNMaHZuUXZQdGhBVUZNcGp6ellUbTlpaExqTDIxTC90YUF2RjIwd3pDU1dVMnBiSWdyaDJRWWtPOX
2024-05-22 15:27:30 UTC	1390	IN	Data Raw: 57 55 32 63 6e 64 76 54 6b 70 53 56 46 64 34 56 6a 45 31 51 31 6b 76 55 56 5a 50 5a 33 6b 30 5a 57 31 6d 54 47 6c 45 4f 46 63 30 52 6b 4e 35 55 57 64 30 52 32 5a 46 64 31 4e 33 52 58 4e 45 65 6a 4a 4f 63 46 5a 4c 5a 6a 6c 78 54 6b 63 33 52 30 59 34 54 6a 4e 53 4d 6b 4a 54 4f 46 49 72 64 44 46 32 61 47 39 43 52 6e 55 30 4f 57 74 54 4f 58 64 77 56 30 46 52 65 55 77 34 51 57 78 55 5a 45 6f 78 65 6d 31 6d 55 6b 35 30 51 54 6c 6f 52 44 56 78 5a 44 4e 44 55 43 74 56 4e 79 38 32 63 30 6c 5a 61 79 39 76 5a 46 42 71 56 30 39 5a 5a 30 6b 79 61 46 46 68 63 44 4a 6e 61 6b 6c 6c 63 47 78 71 62 6b 5a 36 5a 6b 73 34 57 43 74 44 4e 30 74 31 57 6c 56 49 61 32 74 61 54 6c 52 34 5a 6a 42 4f 4e 6a 46 5a 63 6d 5a 72 63 6c 4a 78 54 56 42 51 62 45 4e 70 53 57 64 4e 5a 6e 4e 45 Data Ascii: WU2cndvTkpSVFd4VjE1Q1kvUVZPZ3k0ZW1mTGlEOFc0RkN5UWd0R2ZFd1N3RXNEejJOcFZLZjlxTkc3R0Y4TjNSMkJTOFIrdDF2aG9CRnU0OWtTOXdwV0FReUw4QWxUZEoxem1mUk50QTloRDVxZDNDUCtVNy82c0lZay9vZFBqV09ZZ0kyaFFhcDJnakllcGxqbkZ6Zks4WCtDN0t1WlVIa2taTlR4ZjBONjFZcmZrclJxTVBQbENpSWdNZnNE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49787	216.58.212.164	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:27:31 UTC	887	OUT	GET /recaptcha/api2/bframe?hl=en&v=8k85QBI-qzxmenDv318AZH30&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: http://www.cpcheckme.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 15:27:32 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 22 May 2024 15:27:32 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-yiYEIsGkiLjrH1AZOGhZZw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-22 15:27:32 UTC	499	IN	Data Raw: 31 64 31 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d11<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-05-22 15:27:32 UTC	1390	IN	Data Raw: 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 Data Ascii: -FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-0
2024-05-22 15:27:32 UTC	1390	IN	Data Raw: 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 Data Ascii: 1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2) format('woff2')
2024-05-22 15:27:32 UTC	1390	IN	Data Raw: 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 Data Ascii: c4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/rob
2024-05-22 15:27:32 UTC	1390	IN	Data Raw: 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 Data Ascii: ) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlC
2024-05-22 15:27:32 UTC	1390	IN	Data Raw: 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d Data Ascii: CnqEu92Fr1MmYUtfChc4EsA.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-
2024-05-22 15:27:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49788	216.58.212.164	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:27:33 UTC	859	OUT	POST /recaptcha/api2/reload?k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7860 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=8k85QBI-qzxmenDv318AZH30&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 15:27:33 UTC	7860	OUT	Data Raw: 0a 18 38 6b 38 35 51 42 49 2d 71 7a 78 6d 65 6e 44 76 33 31 38 41 5a 48 33 30 12 a4 0f 30 33 41 46 63 57 65 41 34 75 76 35 62 44 5f 30 6a 78 42 57 6e 4a 46 46 4b 4d 58 31 72 69 73 51 77 4f 33 6a 74 39 57 76 2d 42 64 6b 48 72 6a 65 31 56 6e 45 71 57 62 57 6a 52 53 39 64 51 4d 58 73 37 53 51 55 53 66 79 32 68 67 77 4d 4c 70 78 6d 79 49 64 79 54 50 75 48 50 4d 68 6a 41 5f 49 34 74 69 62 5f 36 6f 4a 52 34 37 46 63 56 6b 2d 52 6b 62 68 54 69 36 66 49 57 31 6b 4f 66 39 2d 46 58 52 75 37 6b 6c 34 33 6f 75 71 45 43 39 49 54 33 79 78 4f 51 6f 7a 78 30 59 68 72 7a 49 34 6f 67 42 47 4c 70 74 67 73 4e 30 68 63 61 72 41 6a 33 2d 53 78 32 57 30 4d 6c 50 70 4c 46 44 4c 56 74 4d 34 6a 43 5a 71 76 53 65 39 79 69 72 74 69 4e 31 6a 47 5f 6b 74 53 30 51 58 4d 59 2d 68 6a 6a Data Ascii: 8k85QBI-qzxmenDv318AZH3003AFcWeA4uv5bD_0jxBWnJFFKMX1risQwO3jt9Wv-BdkHrje1VnEqWbWjRS9dQMXs7SQUSfy2hgwMLpxmyIdyTPuHPMhjA_I4tib_6oJR47FcVk-RkbhTi6fIW1kOf9-FXRu7kl43ouqEC9IT3yxOQozx0YhrzI4ogBGLptgsN0hcarAj3-Sx2W0MlPpLFDLVtM4jCZqvSe9yirtiN1jG_ktS0QXMY-hjj
2024-05-22 15:27:33 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Wed, 22 May 2024 15:27:33 GMT Expires: Wed, 22 May 2024 15:27:33 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09AOG1W2WMBU3Lx0soNhShTRFwELDfLwcuwdnkZ9CgIoYm0zp46CK031UHe6slDJOYHtKJUib-89BCs-dJrXG-9oE;Path=/recaptcha;Expires=Mon, 18-Nov-2024 15:27:33 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-22 15:27:33 UTC	568	IN	Data Raw: 32 33 31 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 5f 7a 75 31 35 66 70 6f 5a 41 30 65 34 48 6b 39 58 52 70 34 54 70 72 73 38 57 59 51 34 47 5f 47 41 73 47 33 6c 51 62 50 79 61 42 7a 44 35 31 41 35 6d 42 57 48 69 6f 61 46 66 64 51 50 62 4b 4e 49 59 45 71 33 75 4b 57 79 7a 4b 64 70 74 66 63 6e 4a 34 44 32 71 47 77 5a 2d 69 33 4b 79 7a 79 54 71 61 50 59 62 50 56 48 71 75 70 67 41 50 31 51 52 6f 5a 77 6f 70 70 47 36 45 51 4b 67 75 75 4e 37 5f 45 75 71 57 5f 2d 33 42 6c 38 6a 67 59 6e 73 72 71 4d 4c 69 38 65 6c 41 61 2d 44 79 46 69 5a 4f 47 7a 46 53 48 30 7a 36 4b 44 67 6b 57 67 69 4e 78 67 57 66 2d 54 4b 53 37 30 43 72 77 52 73 74 52 31 42 34 5f 47 77 4b 75 57 6c 50 6b 4c 33 32 48 37 44 64 64 4b 56 74 77 52 79 50 6a 4e 4c Data Ascii: 231)]}'["rresp","03AFcWeA7_zu15fpoZA0e4Hk9XRp4Tprs8WYQ4G_GAsG3lQbPyaBzD51A5mBWHioaFfdQPbKNIYEq3uKWyzKdptfcnJ4D2qGwZ-i3KyzyTqaPYbPVHqupgAP1QRoZwoppG6EQKguuN7_EuqW_-3Bl8jgYnsrqMLi8elAa-DyFiZOGzFSH0z6KDgkWgiNxgWf-TKS70CrwRstR1B4_GwKuWlPkL32H7DddKVtwRyPjNL
2024-05-22 15:27:33 UTC	1390	IN	Data Raw: 61 33 34 0d 0a 78 61 66 57 32 6f 41 5a 68 72 39 53 4b 30 42 69 4d 57 74 47 71 2d 76 7a 4c 6f 55 39 58 46 34 4f 34 43 54 35 5a 72 59 56 31 39 64 35 59 38 49 65 4b 59 38 72 7a 64 67 6a 6d 45 68 5f 45 61 54 54 68 50 50 68 30 46 75 74 4a 6a 53 70 6f 61 61 65 51 65 49 74 79 57 7a 67 74 5a 4c 69 47 43 32 5f 4d 4c 6a 69 74 6c 4e 4a 4d 5a 55 47 39 4b 52 71 6f 5a 49 6c 56 6c 4c 70 41 31 39 61 64 49 67 47 5f 36 79 77 46 38 79 57 76 45 49 34 78 73 33 30 4d 44 45 51 72 4f 57 57 76 37 32 77 33 35 4d 73 74 32 59 4f 6b 69 4c 65 4f 4d 59 6e 70 55 2d 5a 50 69 78 56 66 51 51 75 4d 50 68 50 45 33 79 6e 7a 68 4c 34 2d 56 52 45 55 5a 57 45 67 5f 78 64 66 36 4d 5f 50 5f 48 7a 37 4a 44 52 37 50 76 4a 76 79 6a 66 4f 52 56 45 36 48 4b 31 34 43 6a 34 4b 4a 54 30 4c 62 30 4d 6f 54 Data Ascii: a34xafW2oAZhr9SK0BiMWtGq-vzLoU9XF4O4CT5ZrYV19d5Y8IeKY8rzdgjmEh_EaTThPPh0FutJjSpoaaeQeItyWzgtZLiGC2_MLjitlNJMZUG9KRqoZIlVlLpA19adIgG_6ywF8yWvEI4xs30MDEQrOWWv72w35Mst2YOkiLeOMYnpU-ZPixVfQQuMPhPE3ynzhL4-VREUZWEg_xdf6M_P_Hz7JDR7PvJvyjfORVE6HK14Cj4KJT0Lb0MoT
2024-05-22 15:27:33 UTC	1229	IN	Data Raw: 69 58 61 65 53 70 31 65 4a 42 4e 61 34 48 70 48 56 33 31 4c 72 6c 51 39 35 2d 2d 41 43 4e 69 68 31 4b 74 68 34 54 78 64 6f 74 31 5a 43 59 30 57 35 62 58 31 74 6e 72 61 77 44 6a 63 6e 39 7a 64 30 4a 66 35 58 4b 48 4b 4c 6c 74 47 41 44 49 66 79 39 31 51 4f 4b 33 4e 69 48 56 78 2d 46 2d 39 6c 49 57 31 65 64 75 58 61 51 72 61 49 54 38 4b 4c 71 51 4b 42 68 69 63 6c 4c 41 4a 52 4f 4f 43 4a 6a 6e 62 66 46 41 79 67 74 39 6c 52 4e 5f 35 43 48 6d 57 47 4e 39 72 50 76 39 39 72 41 63 71 4b 6b 35 50 46 2d 35 6b 32 35 52 74 33 67 6e 4b 30 41 5f 73 63 76 37 50 50 31 79 65 37 47 35 4c 5a 34 6f 30 39 78 55 6d 62 4f 76 36 35 56 6a 59 35 4b 45 48 2d 53 38 33 46 62 42 33 4c 5a 75 69 6c 50 6f 4b 35 2d 55 61 78 59 35 49 46 37 77 4f 41 6c 78 41 66 79 57 33 41 76 52 55 48 51 36 Data Ascii: iXaeSp1eJBNa4HpHV31LrlQ95--ACNih1Kth4Txdot1ZCY0W5bX1tnrawDjcn9zd0Jf5XKHKLltGADIfy91QOK3NiHVx-F-9lIW1eduXaQraIT8KLqQKBhiclLAJROOCJjnbfFAygt9lRN_5CHmWGN9rPv99rAcqKk5PF-5k25Rt3gnK0A_scv7PP1ye7G5LZ4o09xUmbOv65VjY5KEH-S83FbB3LZuilPoK5-UaxY5IF7wOAlxAfyW3AvRUHQ6
2024-05-22 15:27:33 UTC	1390	IN	Data Raw: 31 35 63 39 0d 0a 56 48 52 55 44 44 43 5f 73 39 4e 35 54 65 56 37 39 7a 75 31 46 61 78 72 6e 4c 75 39 32 32 4f 42 35 32 6a 46 63 78 6b 6c 6c 5f 46 36 42 33 67 38 55 6b 56 6e 74 46 43 79 66 79 44 78 46 4c 4f 5a 48 65 64 2d 75 78 64 41 48 79 77 41 6b 59 39 33 6f 42 46 67 64 4c 39 4e 6a 5a 34 30 4f 79 77 66 38 68 45 51 6e 78 6b 71 5f 32 52 6b 31 53 7a 71 61 47 75 46 4a 30 6c 4b 77 37 47 78 55 2d 75 77 30 56 56 4a 57 67 68 72 72 6a 66 6b 6c 63 36 65 30 78 2d 41 4a 76 52 37 74 49 6a 35 77 53 6e 70 6a 57 4d 53 4b 4f 63 53 72 41 46 34 53 47 46 53 6d 4b 6f 44 48 37 57 4f 72 46 59 55 4e 39 76 6c 53 4c 72 71 63 4d 46 75 38 75 41 34 36 63 6e 42 69 38 47 5a 53 7a 38 58 47 2d 59 63 75 6f 4f 5a 57 43 32 4e 70 6b 57 41 41 36 38 4e 6a 47 78 6b 38 4f 77 76 4b 45 58 59 45 Data Ascii: 15c9VHRUDDC_s9N5TeV79zu1FaxrnLu922OB52jFcxkll_F6B3g8UkVntFCyfyDxFLOZHed-uxdAHywAkY93oBFgdL9NjZ40Oywf8hEQnxkq_2Rk1SzqaGuFJ0lKw7GxU-uw0VVJWghrrjfklc6e0x-AJvR7tIj5wSnpjWMSKOcSrAF4SGFSmKoDH7WOrFYUN9vlSLrqcMFu8uA46cnBi8GZSz8XG-YcuoOZWC2NpkWAA68NjGxk8OwvKEXYE
2024-05-22 15:27:33 UTC	1390	IN	Data Raw: 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 35 4e 55 6c 76 57 47 70 76 4c 56 39 6c 54 56 39 66 52 6c 6f 33 51 6e 46 73 64 30 52 48 4d 45 5a 58 55 58 5a 43 62 6b 68 4f 53 6b 78 47 51 57 68 55 4e 46 46 59 61 48 70 42 4c 6d 70 7a 22 2c 22 22 2c 22 53 48 64 44 4e 57 74 46 57 6d 46 77 4d 32 78 4d 61 53 39 79 4e 32 4d 72 4f 53 74 56 65 6c 4e 47 4d 6a 6c 56 4e 47 52 4d 59 30 35 79 4c 31 4a 69 5a 33 67 33 4e 56 64 46 4c 7a 68 75 4e 33 4a 6b 4d 55 63 76 56 57 56 59 54 57 56 76 4e 6b 4e 59 62 46 46 79 64 44 5a 4d 55 58 6b 30 4e 32 68 51 53 31 70 6a 63 31 4a 6a 61 58 4a 74 62 56 46 52 4d 46 4a 79 61 47 59 32 61 58 42 73 56 6e 45 32 52 6c 42 77 55 6b 68 33 53 6d 39 6f 56 55 31 76 54 30 4e 75 4d 33 6f 32 53 6a 51 34 55 32 34 30 59 Data Ascii: d3cuZ29vZ2xlLmNvbS9qcy9iZy95NUlvWGpvLV9lTV9fRlo3QnFsd0RHMEZXUXZCbkhOSkxGQWhUNFFYaHpBLmpz","","SHdDNWtFWmFwM2xMaS9yN2MrOStVelNGMjlVNGRMY05yL1JiZ3g3NVdFLzhuN3JkMUcvVWVYTWVvNkNYbFFydDZMUXk0N2hQS1pjc1JjaXJtbVFRMFJyaGY2aXBsVnE2RlBwUkh3Sm9oVU1vT0NuM3o2SjQ4U240Y
2024-05-22 15:27:33 UTC	1390	IN	Data Raw: 57 46 63 72 59 54 55 76 63 31 46 55 52 56 42 42 63 6b 68 48 54 55 70 43 54 6e 5a 6f 56 31 56 7a 59 6d 5a 71 54 57 34 30 57 57 64 68 51 58 6c 61 59 6b 68 47 4e 56 70 6f 56 6a 6c 34 4e 31 4e 6b 61 44 6c 32 53 33 41 72 62 45 49 32 63 30 39 70 57 55 35 43 55 55 73 33 52 57 35 42 59 55 5a 79 52 33 45 78 61 48 64 32 54 57 39 68 59 7a 64 6e 4c 32 67 72 63 7a 4a 55 56 33 70 6d 5a 6c 70 74 4e 6e 42 56 4f 47 46 54 63 47 46 42 59 6e 68 76 59 32 74 55 51 6c 4e 6d 4d 57 6f 78 56 6c 46 55 53 31 42 49 56 6b 56 71 52 33 46 6c 65 53 74 30 61 6b 52 30 52 57 46 5a 53 6b 5a 48 64 31 45 33 54 32 31 73 4d 56 56 30 65 44 5a 36 54 47 39 30 59 6e 4a 36 57 6d 6b 30 65 48 56 59 65 55 78 6c 63 46 49 78 64 57 64 35 59 6b 78 43 54 6e 6f 35 56 56 52 75 53 47 51 77 62 54 46 73 53 30 63 Data Ascii: WFcrYTUvc1FURVBBckhHTUpCTnZoV1VzYmZqTW40WWdhQXlaYkhGNVpoVjl4N1NkaDl2S3ArbEI2c09pWU5CUUs3RW5BYUZyR3ExaHd2TW9hYzdnL2grczJUV3pmZlptNnBVOGFTcGFBYnhvY2tUQlNmMWoxVlFUS1BIVkVqR3FleSt0akR0RWFZSkZHd1E3T21sMVV0eDZ6TG90YnJ6Wmk0eHVYeUxlcFIxdWd5YkxCTno5VVRuSGQwbTFsS0c
2024-05-22 15:27:33 UTC	1390	IN	Data Raw: 4a 74 65 6a 6c 54 59 6a 67 33 4e 55 52 45 4d 56 4e 73 4d 6b 35 32 51 32 63 34 55 6b 6c 78 4e 54 51 78 4e 6c 42 47 61 7a 42 33 63 54 46 7a 55 55 30 30 55 6b 74 6b 53 31 70 75 52 32 46 59 53 30 52 74 4b 32 52 61 5a 55 46 6c 57 6d 74 6a 51 55 73 35 56 6c 4a 31 5a 54 41 79 52 48 42 61 4b 32 64 47 63 55 31 44 53 56 49 7a 51 32 63 78 59 6e 68 4a 52 30 6f 7a 56 56 56 59 4e 33 46 74 4e 79 39 46 62 46 52 78 4c 7a 46 31 61 45 39 72 64 30 39 4d 61 32 6b 79 57 6d 6c 4e 4d 32 6c 69 64 55 55 79 53 33 64 30 61 56 6f 76 61 47 68 78 65 55 46 54 4c 33 45 78 54 48 52 50 62 47 74 50 63 45 64 4c 52 45 70 4f 62 31 59 32 61 6c 42 68 64 6c 42 5a 61 56 42 77 56 54 6c 68 5a 54 5a 75 56 54 49 33 5a 32 56 75 61 6b 56 51 61 47 35 6e 61 30 6c 56 4b 31 64 54 65 47 74 45 62 31 42 4f 51 Data Ascii: JtejlTYjg3NUREMVNsMk52Q2c4UklxNTQxNlBGazB3cTFzUU00UktkS1puR2FYS0RtK2RaZUFlWmtjQUs5VlJ1ZTAyRHBaK2dGcU1DSVIzQ2cxYnhJR0ozVVVYN3FtNy9FbFRxLzF1aE9rd09Ma2kyWmlNM2lidUUyS3d0aVovaGhxeUFTL3ExTHRPbGtPcEdLREpOb1Y2alBhdlBZaVBwVTlhZTZuVTI3Z2VuakVQaG5na0lVK1dTeGtEb1BOQ
2024-05-22 15:27:33 UTC	25	IN	Data Raw: 65 57 46 49 65 54 49 35 4e 47 4e 6a 64 56 68 47 61 55 6b 33 56 55 78 0d 0a Data Ascii: eWFIeTI5NGNjdVhGaUk3VUx
2024-05-22 15:27:33 UTC	1390	IN	Data Raw: 32 39 34 36 0d 0a 45 62 57 74 75 4c 30 46 5a 54 48 6c 59 64 6c 42 33 51 6c 46 33 51 30 39 4e 52 6b 4a 4f 54 6e 70 46 61 45 35 30 56 6a 52 35 4d 6c 4e 6e 64 56 45 30 52 58 56 69 56 47 39 30 55 7a 6c 6c 64 44 52 34 56 6e 67 32 4e 48 6b 33 4e 6c 52 6b 62 57 52 50 62 53 74 78 54 30 78 54 4f 56 46 32 53 32 4e 73 52 56 56 56 54 6a 6c 6a 61 32 78 69 61 6c 4a 46 64 33 4e 75 5a 56 68 77 62 57 55 31 4c 30 4e 51 63 6b 74 45 4d 55 67 78 63 6e 68 58 53 6c 70 49 65 58 46 58 4d 7a 56 73 54 6a 4e 72 61 47 70 42 4e 46 41 30 65 45 35 34 61 53 38 7a 52 57 4a 35 5a 44 5a 69 56 48 4e 4d 5a 69 38 78 4f 44 68 7a 4b 31 4a 79 4e 46 68 75 52 57 6c 6d 5a 47 64 34 62 47 6b 78 52 48 5a 6e 4d 44 52 76 64 46 68 6b 4e 6c 4e 51 4e 6b 6b 35 55 6e 68 33 52 55 6f 30 4d 44 5a 32 59 30 59 72 Data Ascii: 2946EbWtuL0FZTHlYdlB3QlF3Q09NRkJOTnpFaE50VjR5MlNndVE0RXViVG90UzlldDR4Vng2NHk3NlRkbWRPbStxT0xTOVF2S2NsRVVVTjlja2xialJFd3NuZVhwbWU1L0NQcktEMUgxcnhXSlpIeXFXMzVsTjNraGpBNFA0eE54aS8zRWJ5ZDZiVHNMZi8xODhzK1JyNFhuRWlmZGd4bGkxRHZnMDRvdFhkNlNQNkk5Unh3RUo0MDZ2Y0Yr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49790	142.250.186.68	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:27:34 UTC	606	OUT	GET /recaptcha/api2/reload?k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AOG1W2WMBU3Lx0soNhShTRFwELDfLwcuwdnkZ9CgIoYm0zp46CK031UHe6slDJOYHtKJUib-89BCs-dJrXG-9oE
2024-05-22 15:27:34 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Wed, 22 May 2024 15:27:34 GMT Expires: Wed, 22 May 2024 15:27:34 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-22 15:27:34 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-05-22 15:27:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49789	216.58.212.164	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:27:34 UTC	755	OUT	GET /js/bg/y5IoXjo-_eM__FZ7BqlwDG0FWQvBnHNJLFAhT4QXhzA.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=8k85QBI-qzxmenDv318AZH30&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-22 15:27:34 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18217 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 22 May 2024 06:39:15 GMT Expires: Thu, 22 May 2025 06:39:15 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 14 May 2024 11:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 31699 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-22 15:27:34 UTC	579	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6d 3d 66 75 6e 63 74 69 6f 6e 28 76 29 7b 72 65 74 75 72 6e 20 76 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 76 2c 63 29 7b 69 66 28 63 3d 28 76 3d 6e 75 6c 6c 2c 5a 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 21 63 7c 7c 21 63 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 76 3b 74 72 79 7b 76 3d 63 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 6d 2c 63 72 65 61 74 65 53 63 72 69 70 Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var m=function(v){return v},V=function(v,c){if(c=(v=null,Z.trustedTypes),!c\|\|!c.createPolicy)return v;try{v=c.createPolicy("bg",{createHTML:m,createScrip
2024-05-22 15:27:34 UTC	1390	IN	Data Raw: 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 76 32 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 76 29 7b 72 65 74 75 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 28 76 28 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6d 28 63 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 5d 7d 2c 63 32 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 76 29 7b 72 65 74 75 72 6e 20 76 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 3c 63 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 63 5b 76 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d 7d 2c 6b 56 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 76 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 74 68 69 73 2e 4e 3d 74 68 69 73 2e 6c 3d 74 68 69 73 2e 6e 3d 30 7d 72 65 74 Data Ascii: e-2.0','*/','var v2=function(c,v){return[function(){return c},(v(function(m){m(c)}),function(){})]},c2=function(c,v){return v=0,function(){return v<c.length?{done:false,value:c[v++]}:{done:true}}},kV=function(c,v){function m(){this.N=this.l=this.n=0}ret
2024-05-22 15:27:34 UTC	1390	IN	Data Raw: 2c 65 29 7c 30 29 2d 34 3e 3e 33 2c 6c 2e 47 55 29 21 3d 6b 29 7b 6b 3d 5b 30 2c 30 2c 59 5b 31 5d 2c 59 5b 56 3d 28 28 6c 2e 47 55 3d 6b 2c 6b 29 3c 3c 33 29 2d 34 2c 32 5d 5d 3b 74 72 79 7b 6c 2e 76 57 3d 61 56 28 59 56 28 6c 2c 56 29 2c 59 56 28 6c 2c 28 56 7c 30 29 2b 34 29 2c 6b 29 7d 63 61 74 63 68 28 61 29 7b 74 68 72 6f 77 20 61 3b 7d 7d 6c 2e 70 75 73 68 28 6c 2e 76 57 5b 65 26 37 5d 5e 43 29 7d 2c 59 3d 41 28 32 33 37 2c 63 29 29 3a 76 3d 66 75 6e 63 74 69 6f 6e 28 43 29 7b 6c 2e 70 75 73 68 28 43 29 7d 2c 5a 26 26 76 28 5a 26 32 35 35 29 2c 63 3d 6d 2e 6c 65 6e 67 74 68 2c 5a 3d 30 3b 5a 3c 63 3b 5a 2b 2b 29 76 28 6d 5b 5a 5d 29 7d 2c 59 56 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 76 29 7b 72 65 74 75 72 6e 20 63 5b 76 5d 3c 3c 32 34 7c 63 5b 28 76 Data Ascii: ,e)\|0)-4>>3,l.GU)!=k){k=[0,0,Y[1],Y[V=((l.GU=k,k)<<3)-4,2]];try{l.vW=aV(YV(l,V),YV(l,(V\|0)+4),k)}catch(a){throw a;}}l.push(l.vW[e&7]^C)},Y=A(237,c)):v=function(C){l.push(C)},Z&&v(Z&255),c=m.length,Z=0;Z<c;Z++)v(m[Z])},YV=function(c,v){return c[v]<<24\|c[(v
2024-05-22 15:27:34 UTC	1390	IN	Data Raw: 22 2c 76 26 26 28 76 2e 6d 65 73 73 61 67 65 26 26 28 63 2b 3d 76 2e 6d 65 73 73 61 67 65 29 2c 76 2e 73 74 61 63 6b 26 26 28 63 2b 3d 22 3a 22 2b 76 2e 73 74 61 63 6b 29 29 2c 76 3d 41 28 33 31 37 2c 6d 29 2c 33 3c 76 5b 30 5d 29 29 7b 6d 2e 6f 3d 28 76 3d 28 63 3d 28 76 5b 30 5d 2d 3d 28 28 63 3d 63 2e 73 6c 69 63 65 28 30 2c 28 76 5b 30 5d 7c 30 29 2d 33 29 2c 63 2e 6c 65 6e 67 74 68 29 7c 30 29 2b 33 2c 67 4a 28 63 29 29 2c 6d 2e 6f 29 2c 6d 29 3b 74 72 79 7b 50 28 6d 2c 31 33 39 2c 5b 39 35 5d 29 2c 50 28 6d 2c 32 35 31 2c 74 28 63 2e 6c 65 6e 67 74 68 2c 32 29 2e 63 6f 6e 63 61 74 28 63 29 2c 39 29 7d 66 69 6e 61 6c 6c 79 7b 6d 2e 6f 3d 76 7d 7d 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 76 29 7b 76 2e 68 3d 28 28 76 2e 68 3f 76 2e 68 2b 22 7e 22 Data Ascii: ",v&&(v.message&&(c+=v.message),v.stack&&(c+=":"+v.stack)),v=A(317,m),3<v[0])){m.o=(v=(c=(v[0]-=((c=c.slice(0,(v[0]\|0)-3),c.length)\|0)+3,gJ(c)),m.o),m);try{P(m,139,[95]),P(m,251,t(c.length,2).concat(c),9)}finally{m.o=v}}},f=function(c,v){v.h=((v.h?v.h+"~"
2024-05-22 15:27:34 UTC	1390	IN	Data Raw: 65 6c 73 65 20 56 3d 44 58 28 63 2c 6b 29 3b 72 65 74 75 72 6e 20 56 7d 6c 26 26 59 26 26 6c 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 59 2c 43 2c 4c 29 7d 7d 72 65 74 75 72 6e 20 43 7d 2c 69 6b 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 76 2c 6d 2c 5a 2c 6c 2c 59 2c 43 2c 6b 29 7b 72 65 74 75 72 6e 28 28 6b 3d 28 6d 3d 5b 36 36 2c 2d 32 34 2c 28 43 3d 4e 56 2c 32 33 29 2c 2d 32 30 2c 28 6c 3d 5a 26 37 2c 33 34 29 2c 2d 35 37 2c 6d 2c 36 37 2c 36 36 2c 38 37 5d 2c 67 5b 76 2e 43 5d 28 76 2e 55 69 29 29 2c 6b 29 5b 76 2e 43 5d 3d 66 75 6e 63 74 69 6f 6e 28 56 29 7b 59 3d 28 6c 2b 3d 36 2b 37 2a 5a 2c 56 29 2c 6c 26 3d 37 7d 2c 6b 29 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 56 29 7b 72 65 74 75 72 6e 28 59 3d 28 56 3d 28 56 3d 28 56 Data Ascii: else V=DX(c,k);return V}l&&Y&&l.removeEventListener(Y,C,L)}}return C},ik=function(c,v,m,Z,l,Y,C,k){return((k=(m=[66,-24,(C=NV,23),-20,(l=Z&7,34),-57,m,67,66,87],g[v.C](v.Ui)),k)[v.C]=function(V){Y=(l+=6+7*Z,V),l&=7},k).concat=function(V){return(Y=(V=(V=(V
2024-05-22 15:27:34 UTC	1390	IN	Data Raw: 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 26 26 21 63 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 73 70 6c 69 63 65 22 29 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 3d 3d 76 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 2e 63 61 6c 6c 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 26 26 21 63 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 63 61 6c 6c 22 29 29 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 7d 65 6c 73 65 20 72 65 74 75 72 6e 22 6e 75 6c 6c 22 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d Data Ascii: propertyIsEnumerable&&!c.propertyIsEnumerable("splice"))return"array";if("[object Function]"==v\|\|"undefined"!=typeof c.call&&"undefined"!=typeof c.propertyIsEnumerable&&!c.propertyIsEnumerable("call"))return"function"}else return"null";else if("function"=
2024-05-22 15:27:34 UTC	1390	IN	Data Raw: 31 36 3a 32 31 31 29 2c 76 29 2c 76 2e 57 29 29 2c 76 2e 48 29 2e 70 75 73 68 28 5b 66 75 2c 63 2c 6d 3f 5a 2b 31 3a 5a 2c 76 2e 4c 2c 76 2e 55 5d 29 2c 41 41 29 2c 30 29 7d 2c 49 56 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 76 2c 6d 2c 5a 29 7b 74 72 79 7b 5a 3d 63 5b 28 28 76 7c 30 29 2b 32 29 25 33 5d 2c 63 5b 76 5d 3d 28 63 5b 76 5d 7c 30 29 2d 28 63 5b 28 28 76 7c 30 29 2b 31 29 25 33 5d 7c 30 29 2d 28 5a 7c 30 29 5e 28 31 3d 3d 76 3f 5a 3c 3c 6d 3a 5a 3e 3e 3e 6d 29 7d 63 61 74 63 68 28 6c 29 7b 74 68 72 6f 77 20 6c 3b 7d 7d 2c 44 58 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 76 2c 6d 2c 5a 2c 6c 29 7b 69 66 28 28 6c 3d 76 5b 30 5d 2c 6c 29 3d 3d 58 69 29 63 2e 55 3d 74 72 75 65 2c 63 2e 48 57 3d 32 35 2c 63 2e 69 28 76 29 3b 65 6c 73 65 20 69 66 28 6c 3d 3d 4a Data Ascii: 16:211),v),v.W)),v.H).push([fu,c,m?Z+1:Z,v.L,v.U]),AA),0)},IV=function(c,v,m,Z){try{Z=c[((v\|0)+2)%3],c[v]=(c[v]\|0)-(c[((v\|0)+1)%3]\|0)-(Z\|0)^(1==v?Z<<m:Z>>>m)}catch(l){throw l;}},DX=function(c,v,m,Z,l){if((l=v[0],l)==Xi)c.U=true,c.HW=25,c.i(v);else if(l==J
2024-05-22 15:27:34 UTC	1390	IN	Data Raw: 5a 2d 6c 7d 29 2c 74 68 69 73 2e 6e 29 2c 74 68 69 73 2e 44 5b 74 68 69 73 2e 44 2e 6c 65 6e 67 74 68 3e 3e 31 5d 5d 7d 29 2c 63 3d 6e 65 77 20 6d 2c 76 3d 6e 65 77 20 6d 2c 5b 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 28 63 2e 50 57 28 5a 29 2c 76 29 2e 50 57 28 5a 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 72 65 74 75 72 6e 20 76 3d 28 5a 3d 63 2e 57 57 28 29 2e 63 6f 6e 63 61 74 28 76 2e 57 57 28 29 29 2c 6e 65 77 20 6d 29 2c 5a 7d 5d 7d 2c 61 56 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 76 2c 6d 2c 5a 2c 6c 29 7b 66 6f 72 28 6d 3d 6d 5b 5a 3d 28 6c 3d 30 2c 6d 5b 33 5d 29 7c 30 2c 32 5d 7c 30 3b 31 35 3e 6c 3b 6c 2b 2b 29 76 3d 76 3e 3e 3e 38 7c 76 3c 3c 32 34 2c 76 2b 3d 63 7c 30 2c 76 5e 3d 6d 2b 33 30 34 36 2c 5a 3d 5a 3e 3e 3e 38 7c 5a 3c 3c 32 34 2c 63 3d Data Ascii: Z-l}),this.n),this.D[this.D.length>>1]]}),c=new m,v=new m,[function(Z){(c.PW(Z),v).PW(Z)},function(Z){return v=(Z=c.WW().concat(v.WW()),new m),Z}]},aV=function(c,v,m,Z,l){for(m=m[Z=(l=0,m[3])\|0,2]\|0;15>l;l++)v=v>>>8\|v<<24,v+=c\|0,v^=m+3046,Z=Z>>>8\|Z<<24,c=
2024-05-22 15:27:34 UTC	1390	IN	Data Raw: 2e 74 69 6d 65 4f 72 69 67 69 6e 7c 7c 28 63 2e 74 69 6d 69 6e 67 7c 7c 7b 7d 29 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 7c 7c 30 29 2c 30 29 29 2c 30 29 29 2c 76 29 2c 66 75 6e 63 74 69 6f 6e 28 6b 2c 56 2c 65 29 7b 4e 28 66 61 6c 73 65 2c 6b 2c 74 72 75 65 2c 56 29 7c 7c 28 56 3d 46 28 6b 29 2c 65 3d 46 28 6b 29 2c 75 28 65 2c 6b 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 65 76 61 6c 28 61 29 7d 28 4c 75 28 41 28 56 2c 6b 2e 6f 29 29 29 29 29 7d 29 2c 76 29 2c 66 75 6e 63 74 69 6f 6e 28 6b 2c 56 2c 65 2c 61 2c 48 29 7b 75 28 28 48 3d 41 28 28 65 3d 28 61 3d 28 61 3d 28 48 3d 28 65 3d 28 56 3d 46 28 6b 29 2c 46 28 6b 29 29 2c 46 28 6b 29 29 2c 46 28 6b 29 29 2c 41 28 61 2c 6b 29 29 2c 41 28 65 2c 6b 29 29 2c 48 29 2c 6b 29 2c 56 Data Ascii: .timeOrigin\|\|(c.timing\|\|{}).navigationStart\|\|0),0)),0)),v),function(k,V,e){N(false,k,true,V)\|\|(V=F(k),e=F(k),u(e,k,function(a){return eval(a)}(Lu(A(V,k.o)))))}),v),function(k,V,e,a,H){u((H=A((e=(a=(a=(H=(e=(V=F(k),F(k)),F(k)),F(k)),A(a,k)),A(e,k)),H),k),V
2024-05-22 15:27:34 UTC	1390	IN	Data Raw: 71 3d 30 3d 3d 48 3f 6e 65 77 20 65 5b 71 5d 3a 31 3d 3d 48 3f 6e 65 77 20 65 5b 71 5d 28 61 5b 30 5d 29 3a 32 3d 3d 48 3f 6e 65 77 20 65 5b 71 5d 28 61 5b 30 5d 2c 61 5b 31 5d 29 3a 33 3d 3d 48 3f 6e 65 77 20 65 5b 71 5d 28 61 5b 30 5d 2c 61 5b 31 5d 2c 61 5b 32 5d 29 3a 34 3d 3d 48 3f 6e 65 77 20 65 5b 71 5d 28 61 5b 30 5d 2c 61 5b 31 5d 2c 61 5b 32 5d 2c 61 5b 33 5d 29 3a 32 28 29 2c 75 28 56 2c 6b 2c 71 29 29 7d 29 29 2c 76 2e 74 70 3d 30 2c 76 2e 52 51 3d 30 2c 30 29 29 2c 31 31 34 29 2c 76 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 78 56 28 33 2c 6b 29 7d 29 2c 76 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 5b 30 2c 30 2c 30 5d 29 29 2c 5b 32 30 34 38 5d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 6b 2c 56 2c 65 2c 61 2c 48 29 7b 28 56 3d 46 28 28 48 3d 46 Data Ascii: q=0==H?new e[q]:1==H?new e[q](a[0]):2==H?new e[q](a[0],a[1]):3==H?new e[q](a[0],a[1],a[2]):4==H?new e[q](a[0],a[1],a[2],a[3]):2(),u(V,k,q))})),v.tp=0,v.RQ=0,0)),114),v,function(k){xV(3,k)}),v),function(){}),[0,0,0])),[2048])),function(k,V,e,a,H){(V=F((H=F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49791	216.58.212.164	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:27:35 UTC	996	OUT	POST /recaptcha/api2/userverify?k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 5541 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=8k85QBI-qzxmenDv318AZH30&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AOG1W2WMBU3Lx0soNhShTRFwELDfLwcuwdnkZ9CgIoYm0zp46CK031UHe6slDJOYHtKJUib-89BCs-dJrXG-9oE
2024-05-22 15:27:35 UTC	5541	OUT	Data Raw: 76 3d 38 6b 38 35 51 42 49 2d 71 7a 78 6d 65 6e 44 76 33 31 38 41 5a 48 33 30 26 63 3d 30 33 41 46 63 57 65 41 37 5f 7a 75 31 35 66 70 6f 5a 41 30 65 34 48 6b 39 58 52 70 34 54 70 72 73 38 57 59 51 34 47 5f 47 41 73 47 33 6c 51 62 50 79 61 42 7a 44 35 31 41 35 6d 42 57 48 69 6f 61 46 66 64 51 50 62 4b 4e 49 59 45 71 33 75 4b 57 79 7a 4b 64 70 74 66 63 6e 4a 34 44 32 71 47 77 5a 2d 69 33 4b 79 7a 79 54 71 61 50 59 62 50 56 48 71 75 70 67 41 50 31 51 52 6f 5a 77 6f 70 70 47 36 45 51 4b 67 75 75 4e 37 5f 45 75 71 57 5f 2d 33 42 6c 38 6a 67 59 6e 73 72 71 4d 4c 69 38 65 6c 41 61 2d 44 79 46 69 5a 4f 47 7a 46 53 48 30 7a 36 4b 44 67 6b 57 67 69 4e 78 67 57 66 2d 54 4b 53 37 30 43 72 77 52 73 74 52 31 42 34 5f 47 77 4b 75 57 6c 50 6b 4c 33 32 48 37 44 64 64 4b Data Ascii: v=8k85QBI-qzxmenDv318AZH30&c=03AFcWeA7_zu15fpoZA0e4Hk9XRp4Tprs8WYQ4G_GAsG3lQbPyaBzD51A5mBWHioaFfdQPbKNIYEq3uKWyzKdptfcnJ4D2qGwZ-i3KyzyTqaPYbPVHqupgAP1QRoZwoppG6EQKguuN7_EuqW_-3Bl8jgYnsrqMLi8elAa-DyFiZOGzFSH0z6KDgkWgiNxgWf-TKS70CrwRstR1B4_GwKuWlPkL32H7DddK
2024-05-22 15:27:35 UTC	529	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 22 May 2024 15:27:35 GMT X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-22 15:27:35 UTC	860	IN	Data Raw: 33 35 35 0d 0a 29 5d 7d 27 0a 5b 22 75 76 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 36 57 76 6e 79 72 51 4a 6e 30 36 53 4a 78 35 78 64 33 68 38 36 68 35 61 51 75 77 66 2d 5a 4a 41 33 54 4a 4d 37 64 6f 57 57 56 6d 4d 69 79 31 75 6a 70 52 79 6c 41 66 78 2d 42 39 54 5f 6b 2d 50 2d 63 71 73 63 4c 48 64 72 4a 44 59 44 6d 76 48 62 33 52 37 53 67 2d 72 44 5a 78 4b 63 68 4c 6e 72 76 4e 5a 4f 62 63 35 33 5a 31 47 71 4b 6a 54 49 37 6a 6b 30 69 44 53 71 58 79 74 67 61 57 42 2d 4a 74 7a 6b 77 41 58 58 46 58 5a 46 77 45 4f 75 57 5a 44 42 63 68 36 65 66 50 72 42 65 37 4c 7a 61 74 55 32 33 4d 34 31 38 44 67 76 6a 49 68 50 50 31 73 53 54 77 30 45 79 72 71 71 66 44 4e 6d 42 56 65 53 71 71 6b 71 53 35 4f 57 62 33 6e 72 62 43 55 77 31 4f 61 76 43 49 37 57 41 4b 42 5f 4d Data Ascii: 355)]}'["uvresp","03AFcWeA6WvnyrQJn06SJx5xd3h86h5aQuwf-ZJA3TJM7doWWVmMiy1ujpRylAfx-B9T_k-P-cqscLHdrJDYDmvHb3R7Sg-rDZxKchLnrvNZObc53Z1GqKjTI7jk0iDSqXytgaWB-JtzkwAXXFXZFwEOuWZDBch6efPrBe7LzatU23M418DgvjIhPP1sSTw0EyrqqfDNmBVeSqqkqS5OWb3nrbCUw1OavCI7WAKB_M
2024-05-22 15:27:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49792	142.250.186.68	443	3608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:27:36 UTC	610	OUT	GET /recaptcha/api2/userverify?k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AOG1W2WMBU3Lx0soNhShTRFwELDfLwcuwdnkZ9CgIoYm0zp46CK031UHe6slDJOYHtKJUib-89BCs-dJrXG-9oE
2024-05-22 15:27:36 UTC	473	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 22 May 2024 15:27:36 GMT Content-Type: text/html; charset=utf-8 Allow: POST X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-22 15:27:36 UTC	917	IN	Data Raw: 36 37 36 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 Data Ascii: 676<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;c
2024-05-22 15:27:36 UTC	744	IN	Data Raw: 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b Data Ascii: ges/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{back
2024-05-22 15:27:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49807	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-05-22 15:27:47 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=FmAnyWgMhHnay6U&MD=oYOMN+rE HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-22 15:27:47 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_1440" MS-CorrelationId: 2a193b78-66ab-4184-9983-f70bd2c32cb0 MS-RequestId: 7e4a45fa-4bc7-4b4d-9d96-4fa764e895ee MS-CV: aehGIi0430Sz0hy+.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 22 May 2024 15:27:47 GMT Connection: close Content-Length: 25457
2024-05-22 15:27:47 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-05-22 15:27:47 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Target ID:	0
Start time:	11:26:55
Start date:	22/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.cpcheckme.com/
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	11:26:56
Start date:	22/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1956,i,12651588172182524890,15873818534290352819,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	11:27:41
Start date:	22/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5184 --field-trial-handle=1956,i,12651588172182524890,15873818534290352819,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	11:27:47
Start date:	22/05/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
Imagebase:	0x7ff746100000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	11:27:55
Start date:	22/05/2024
Path:	C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe"
Imagebase:	0x22b8aa40000
File size:	1'216'832 bytes
MD5 hash:	1F5E1935BC678EA70274516D5FA9C7A0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Function 00007FFEBC7F84A3 Relevance: 5.2, Strings: 4, Instructions: 224COMMON

Download Yara Rule

Strings

K_^3, xrefs: 00007FFEBC7F8532
K_^, xrefs: 00007FFEBC7F8499
^, xrefs: 00007FFEBC7F8462
^, xrefs: 00007FFEBC7F846A

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID: K_^$K_^3$^$^
API String ID: 0-1590839672
Opcode ID: e0d3049883c44ca7f51155436717149664b0d142d51d4a35b9c2f72f9e0ea1ce
Instruction ID: 071ba98e7c92aeba1e0ff769b526192f570f78f92bf7e8ed6f450fe22628c428
Opcode Fuzzy Hash: e0d3049883c44ca7f51155436717149664b0d142d51d4a35b9c2f72f9e0ea1ce
Instruction Fuzzy Hash: 2761073661DA9E8FDB04FF2CE8905E977A0FF85328B4002B6D148CB1A3DE34A415CB94

Function 00007FFEBC7F4A94 Relevance: 1.4, Strings: 1, Instructions: 136COMMON

Download Yara Rule

Strings

d, xrefs: 00007FFEBC7F4B34

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID: d
API String ID: 0-2564639436
Opcode ID: 21c46e5fa0f500de8532747129c97ea2b7f04b5a6754dfe84d6a5f5d25018704
Instruction ID: 19c07af2e8ea7e6b3729ea426891f08403e9d9c55191f94b374495b5484d8be3
Opcode Fuzzy Hash: 21c46e5fa0f500de8532747129c97ea2b7f04b5a6754dfe84d6a5f5d25018704
Instruction Fuzzy Hash: 5741123051DB894FD31AEB2C98811B5B7E1EF4A314B5446FEC58AC75A7DA29B8438780

Function 00007FFEBC7FAA7F Relevance: 1.3, Strings: 1, Instructions: 58COMMON

Download Yara Rule

Strings

zK_H, xrefs: 00007FFEBC7FAA81

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID: zK_H
API String ID: 0-472741372
Opcode ID: a65bd2c4b324e224c835bb310b52168b182a064d035048e05240beec2250fc15
Instruction ID: 97b6497e2e656b4de14966b898e4ec754f9b30c3dd4fbf47277651bef5f91ca3
Opcode Fuzzy Hash: a65bd2c4b324e224c835bb310b52168b182a064d035048e05240beec2250fc15
Instruction Fuzzy Hash: 34015E31B1C9094F9B8CDF2CA4952BEB7E2EB8C361F10423EE14ED33A1CE2598418705

Function 00007FFEBC7F1F99 Relevance: 1.3, Strings: 1, Instructions: 30COMMON

Download Yara Rule

Strings

{<L_^, xrefs: 00007FFEBC7F1FD8

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID: {<L_^
API String ID: 0-3006531661
Opcode ID: 504b569cf61e3ef66e56704b5a1b039eaadf695a6044c8374063ef8d35e53cf9
Instruction ID: e0a1a2261242813762f7ec4227a05848ff37ce87edea264c6c73717de6ce0263
Opcode Fuzzy Hash: 504b569cf61e3ef66e56704b5a1b039eaadf695a6044c8374063ef8d35e53cf9
Instruction Fuzzy Hash: ECF0A710A1DFD94FD756A73C44655797BE09F9D210B4142FBD18AC72F3DD18AC008341

Function 00007FFEBC7F62E4 Relevance: 1.3, Strings: 1, Instructions: 17COMMON

Download Yara Rule

Strings

H, xrefs: 00007FFEBC7F62E8

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID: H
API String ID: 0-2852464175
Opcode ID: 07934fbc8848a0427182b8ce7aa93327ae338cbe7e1de4459c63b6d2dee47039
Instruction ID: 14399b34e266ead47735b1dbe497e18b80e5a59871d6de8dd028ac3f4414e42c
Opcode Fuzzy Hash: 07934fbc8848a0427182b8ce7aa93327ae338cbe7e1de4459c63b6d2dee47039
Instruction Fuzzy Hash: 1CD0C220604E454FE746EF38C02862D7AE1DF4A244B4804B9C04AC7AE2CD28EC088310

Function 00007FFEBC8A0013 Relevance: .3, Instructions: 263COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363684109.00007FFEBC8A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC8A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc8a0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: deb102cbf255d21c3d5d939b5ae926e3f44e3b4a1dbde996a73f3f62d9222a90
Instruction ID: 64c17e37c4254450e12b4edc743eb13245f85677c3b68567c499ef41c9723436
Opcode Fuzzy Hash: deb102cbf255d21c3d5d939b5ae926e3f44e3b4a1dbde996a73f3f62d9222a90
Instruction Fuzzy Hash: 5D712A2064DA890FD756972C94697757FE1EF96310F0802FFD18EC72A3DA18AC46C782

Function 00007FFEBC7F9655 Relevance: .3, Instructions: 259COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0d80985e65351ad4aa882b22dd8519ea4d2ceac50d4c43557867bac448c4bb4e
Instruction ID: 1e1840c2a5ca77af9f5e9216d34ee7cdd23c904917d7c3d0c6b5e3a8ba6209cc
Opcode Fuzzy Hash: 0d80985e65351ad4aa882b22dd8519ea4d2ceac50d4c43557867bac448c4bb4e
Instruction Fuzzy Hash: 3DF0F02191CE8D4FE795EB3C446C2787BE2EF99308B1502BBD85CC72A2ED249C484381

Function 00007FFEBC7F6E16 Relevance: .2, Instructions: 189COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da137d6658aeb8940d2d68289bbe118b26dca67cf62c3f57175cfff69cf02c21
Instruction ID: 4f0626662d46dd2e94078738f29f31c8d4fdf0babf88f3d0f4240191b3b3f26c
Opcode Fuzzy Hash: da137d6658aeb8940d2d68289bbe118b26dca67cf62c3f57175cfff69cf02c21
Instruction Fuzzy Hash: 4351A31690DBEA5FD706B73CBC610EA7FA0DF46374B4452B7D2C8CA0A3CC18545A8799

Function 00007FFEBC7F6E30 Relevance: .2, Instructions: 173COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3342821e0682bb0e700be271baa7836ea3ff17d521b4c4ac4001280f88d52c1
Instruction ID: 7c12091eb7faf0013e9dcfd9aef0076e058e8ac7d8c09655768423cbc2a6761e
Opcode Fuzzy Hash: e3342821e0682bb0e700be271baa7836ea3ff17d521b4c4ac4001280f88d52c1
Instruction Fuzzy Hash: 9341E62690DABA5FD705F73CBC610EEBF90DF45374B4452B7E2C88A0A3CC18645A8799

Function 00007FFEBC7F1343 Relevance: .2, Instructions: 165COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d106084f83d9a2b13fd947876b7b84f161117cc3b46f4b322ac60f2cf2317fb
Instruction ID: 873caa653d169285355fa72bea7a85c1bee6ca37362d53c85c9dd5133cb81cad
Opcode Fuzzy Hash: 6d106084f83d9a2b13fd947876b7b84f161117cc3b46f4b322ac60f2cf2317fb
Instruction Fuzzy Hash: 7251C43050E7898FD756DF3CC5546697FA2EF4B344B1402EAC549CB6F2CA25A844C751

Function 00007FFEBC7F5C50 Relevance: .1, Instructions: 145COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fded73a82c3be33c841240b1ecb53a64949046e9d7edcfb273929d9adfa7e09d
Instruction ID: abe869a242b12880a0966a0f86af0be0a6f9f00cd4512e3e1fc963f4c9dd84bf
Opcode Fuzzy Hash: fded73a82c3be33c841240b1ecb53a64949046e9d7edcfb273929d9adfa7e09d
Instruction Fuzzy Hash: 8641F23195EA8D8FDB55DF28C8543EA7BA0FF48314F0002ABE94EC71A1DB39A954C781

Function 00007FFEBC7F6E98 Relevance: .1, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68ebce5a4c854f8213c06a06a772af4af70ae8f0fe598c7dd49ea05c1b80f925
Instruction ID: bec4e5eaf5002a527d4206b2ef50590a2dd0483b8cb3fe65cd26d9483131abe3
Opcode Fuzzy Hash: 68ebce5a4c854f8213c06a06a772af4af70ae8f0fe598c7dd49ea05c1b80f925
Instruction Fuzzy Hash: 9E31B72290DAA99FD705FB3CAC610EEBBE0EF45334B4052B7D1C88B1A3CD285455C799

Function 00007FFEBC7F44A8 Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 29c5c6992561e9181a73bb4a40bfc4996d89e531abdacbed5eb05e1f3f385922
Instruction ID: 0747bdec05f1579257010c6a1ceda252109b7580e70e22df55dd5326659fe218
Opcode Fuzzy Hash: 29c5c6992561e9181a73bb4a40bfc4996d89e531abdacbed5eb05e1f3f385922
Instruction Fuzzy Hash: 6E41E73150C9454FD7A4EF2CD0849A5BBE1FF58310B6446BED08ECB1A6CA39BC82C780

Function 00007FFEBC7F223C Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cea34fcc6874a94b1025fc6da2188ebc316c9096b7f1957cf756428868d21df7
Instruction ID: 7e8ad26af2542900cdaeac6c07c839e08d98a48f9cb495a95b342ea34f29ffc2
Opcode Fuzzy Hash: cea34fcc6874a94b1025fc6da2188ebc316c9096b7f1957cf756428868d21df7
Instruction Fuzzy Hash: A8414A30718A0A8FEB44EB7C8655B68BBE2EF4D360F5401B6E509CB6A7CD24EC458751

Function 00007FFEBC7F2081 Relevance: .1, Instructions: 122COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a3a3ad38f2a30a68d86e3bb1370dbf7e4b844d05372514b6c040caa0974ca73c
Instruction ID: b21d564d36b9db95a3f19b4d02ba1adbd8ae0427c539f960e03a7c1e640228ef
Opcode Fuzzy Hash: a3a3ad38f2a30a68d86e3bb1370dbf7e4b844d05372514b6c040caa0974ca73c
Instruction Fuzzy Hash: 7541E930A1C69A8FE754DF3CC555AAABBE1FF59350F0402AAD549CB2A2CB34E844C751

Function 00007FFEBC7F307A Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: af4e8d0e1bfcffead23fe8694e439c08a28edeba63a5df3b699b001ba5e69d03
Instruction ID: b608cbf3cf2951f265f5dc4cd4ed3845d5dd4fb83b0bcb64412f444e16da16f4
Opcode Fuzzy Hash: af4e8d0e1bfcffead23fe8694e439c08a28edeba63a5df3b699b001ba5e69d03
Instruction Fuzzy Hash: A6313C3154DB994FE71D9B3C95464B53BD1EF4A314B0401BFE68AC72A3DD25F8028791

Function 00007FFEBC7F5704 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 824bcac0ffe4df7bdcf379b7b98a94f23313802f550fade1dd7d81c48f98e79a
Instruction ID: db4afb3efba9bbd0c40aa218bb548c081f8c279384185ced9d275581e192b7a8
Opcode Fuzzy Hash: 824bcac0ffe4df7bdcf379b7b98a94f23313802f550fade1dd7d81c48f98e79a
Instruction Fuzzy Hash: D5216D30308A498FDB89EF3CC194A2577E2EF9D70470402A9D509CB7A7CE20EC84CB91

Function 00007FFEBC7FA435 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a95854536629061e45c0de67a60fc680a00c97b6e9fb2ccd4b457fad4e73bf4e
Instruction ID: 47f2a8ef2ec237ac295b37548fb470d1655b654e5a1cf2b8d98de8d187d94860
Opcode Fuzzy Hash: a95854536629061e45c0de67a60fc680a00c97b6e9fb2ccd4b457fad4e73bf4e
Instruction Fuzzy Hash: AA21493189EBDD4FC312A73C9C054F27BA4EF46324B0502E7E498C71A2D62D9946C392

Function 00007FFEBC7F2100 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6a895351f4e3afca934206091a1d54b5cbf003111d15ef1b810230205339112
Instruction ID: f7539021f26e08245e517fc008489ed49e6149cde832c933a0346a1261b2c27e
Opcode Fuzzy Hash: c6a895351f4e3afca934206091a1d54b5cbf003111d15ef1b810230205339112
Instruction Fuzzy Hash: 0021A13091D6998FE754DF3CC8496AA7BE1FF1A351F0401AAE449CB2A2CB38A844C751

Function 00007FFEBC7F35DF Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1a6b13313eae9d76be97d08f70ce18651ce33083c25eb7c255377b3408dc1ec
Instruction ID: 9aad201ccdfaf93f8936ea42ed9753af577b4e8fd5392df7bf3efae22f696a5f
Opcode Fuzzy Hash: e1a6b13313eae9d76be97d08f70ce18651ce33083c25eb7c255377b3408dc1ec
Instruction Fuzzy Hash: 2C21C12190EBC64FD357CB3C89A41957FE1EF5B21470A41EBC184CF1A3C628988AC751

Function 00007FFEBC7F3CF9 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91728caa888112c2af20712a7cbac867fa50396f7e7e393e9eef0c73ea48106f
Instruction ID: 83008d4cfadde074723c37143ad897f1b5b3eb4d59087ce2816a0a575108db7a
Opcode Fuzzy Hash: 91728caa888112c2af20712a7cbac867fa50396f7e7e393e9eef0c73ea48106f
Instruction Fuzzy Hash: 5721022088EBDA5FD317973C54615F67FB1AF8A210B4902FBE588CB0A7DD18A9098391

Function 00007FFEBC7F237B Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a5daaff10bec1b7bb425a1884885429cf86363290949fe42596038910305bcd0
Instruction ID: 34f0b787c25661c4ec186116569f938913464f1875d4e599a56177696f6f361b
Opcode Fuzzy Hash: a5daaff10bec1b7bb425a1884885429cf86363290949fe42596038910305bcd0
Instruction Fuzzy Hash: 66116D30718D198FDB44EB6CE555B68B7E2EF8D350B6402E6E00DC72A7CD25EC418741

Function 00007FFEBC7F5CCA Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0660a833da00bca2b7c44b03a9d8b7d3fc5afc8f8085cefcde88c6cd1f19be21
Instruction ID: 245d923bf13449adb303dc20e39a61f2c627e294bd8107794b58270928d6de74
Opcode Fuzzy Hash: 0660a833da00bca2b7c44b03a9d8b7d3fc5afc8f8085cefcde88c6cd1f19be21
Instruction Fuzzy Hash: 6121073180EACD8FDB95DF28C8652A93BF0FF19314F1402ABD449C71E2D628A954C751

Function 00007FFEBC7F3C5D Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 834f2df037b26414ba120b4756f19e492dc369fb913e2e28927365642f56d4dc
Instruction ID: 34f4a524a917980b9a40e1cd5831837a6d3bd2f7b03d31b13abc68d358d51d8a
Opcode Fuzzy Hash: 834f2df037b26414ba120b4756f19e492dc369fb913e2e28927365642f56d4dc
Instruction Fuzzy Hash: 2211022290EAA56FD219F23CB8A64FA7FD4CF8233574441B7D288CA473CC08145587A5

Function 00007FFEBC7F2F82 Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c5195a7ebb998a96e1e1bf69c29a8b70b105a4e8b4f6660930141bbc6b35cbb
Instruction ID: af549a2d6b1a49a0c6772fd195b395f2ec0afa440777dcdba056220969c88399
Opcode Fuzzy Hash: 0c5195a7ebb998a96e1e1bf69c29a8b70b105a4e8b4f6660930141bbc6b35cbb
Instruction Fuzzy Hash: DA11A31108F7C61FD79347799D646A23FE59F47164B0E01EBD5C8CE4A3D85E884AC322

Function 00007FFEBC7F4CD4 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 24014c8d29321e878151b185db2a1fa53bab36d71c2000c78c4632bd347fa8bc
Instruction ID: afd534f713e3538f92c9f94741eaa5d7edb3c987cb76d0e8a46923241fc9164e
Opcode Fuzzy Hash: 24014c8d29321e878151b185db2a1fa53bab36d71c2000c78c4632bd347fa8bc
Instruction Fuzzy Hash: 3211A531A1CE864FDB99EB3C82949AA77D2FF9934474006BAD04ECB5E6CD38F9448740

Function 00007FFEBC7FAA44 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70f3f21ec952430682276e17f2fe26a85724019c93b1c7ec08e103e21f395f9a
Instruction ID: e6601b74798acd160f6f816d324b9efbfd942bb4ca4cf73fc9e45e2c0950dd17
Opcode Fuzzy Hash: 70f3f21ec952430682276e17f2fe26a85724019c93b1c7ec08e103e21f395f9a
Instruction Fuzzy Hash: DA117331B1CC188FDB98EB6CE4596BD73E1FF98361B44027AE14DC32A1DE259C418741

Function 00007FFEBC7F632D Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d153581b3e7d984d53fe2fb044c294d5bdbeef255c0a38032c77d4d8c2c0223
Instruction ID: 309599ce7d2d60ddf9fc9660c8daa3491a8ff30cd7e863cd43c265d22a79eb88
Opcode Fuzzy Hash: 4d153581b3e7d984d53fe2fb044c294d5bdbeef255c0a38032c77d4d8c2c0223
Instruction Fuzzy Hash: 8E11A731B5DF5A4BE754FB3C95921B8B3C1EF49750B900679E15AC76E3CD29BC418280

Function 00007FFEBC7F5B96 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5178deedf86cb4be42572c9ae0451017d3d67a9f34ae9f68e56b6c57cd0d6fef
Instruction ID: e594ca5e9ace91bb17193d672a3f1a9999fc4efac3b630e28436a27888eef17a
Opcode Fuzzy Hash: 5178deedf86cb4be42572c9ae0451017d3d67a9f34ae9f68e56b6c57cd0d6fef
Instruction Fuzzy Hash: 25110D31B5DA5A8BE364BF7C9481178B3C1EF48720F50067DE15AC36E3CD15BC418240

Function 00007FFEBC7F1995 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6de9401deef32a018354bac643e4604d406a54910e3ba0d565d5953a34486b5d
Instruction ID: 2ce7347a47212dc5c34704eb8fe62f4a48b0de279f30f4418e8d4864da419090
Opcode Fuzzy Hash: 6de9401deef32a018354bac643e4604d406a54910e3ba0d565d5953a34486b5d
Instruction Fuzzy Hash: A3118671A2DE458AE718BB3CA4820B9B3D1FF58361740157EE14EC25A3DF35F4528A85

Function 00007FFEBC7F64C7 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a87aa083128ce20dfb1277f6335e44508e52c2c8f7a8d002904a93826066316c
Instruction ID: e97fda65b9f5bfef07c03ac9c2d3a8fa667dcf5fc1c93bbf528211ec4d1fb087
Opcode Fuzzy Hash: a87aa083128ce20dfb1277f6335e44508e52c2c8f7a8d002904a93826066316c
Instruction Fuzzy Hash: C3014C3060DA8A4FD691EB3C94589757BD2EF8A22470842F7E40CCB1AACD18A841C350

Function 00007FFEBC7F48FD Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b79ee9fc52d9bcc27340420c623e29b9e9390e9a4bed6f6d2b2797b158188e5f
Instruction ID: 3f8d8eb21026fce093f244bc589b9a8f413933bd011f561eb9a06a58594781ba
Opcode Fuzzy Hash: b79ee9fc52d9bcc27340420c623e29b9e9390e9a4bed6f6d2b2797b158188e5f
Instruction Fuzzy Hash: 9B01D62094E7D56FD31A963D9858AB33FE4DF5B220F0502EFE085CB1A3D5685806C3A5

Function 00007FFEBC7F9882 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 43985c4ff3d5bba520454a0ba1ad4528188006e14cf37278e1ad64da8f07c283
Instruction ID: 87333b91f6bc3b02ab0c74d76b9220ecb61874516d293754715dec4e589fe36d
Opcode Fuzzy Hash: 43985c4ff3d5bba520454a0ba1ad4528188006e14cf37278e1ad64da8f07c283
Instruction Fuzzy Hash: 6711783060894E8FDF85EF2CC199E697BF2EFAD354B554191E509CB665CA30EC85CB40

Function 00007FFEBC7FA3B0 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 183fb258a5cc17199a53604d53b92392fb5cf9f51b7bc708a2f02a213b12119d
Instruction ID: 13dfec9010467ebfb3da38edbfd1dbaa4b0d4c21f60571eb6fbf182e681018a6
Opcode Fuzzy Hash: 183fb258a5cc17199a53604d53b92392fb5cf9f51b7bc708a2f02a213b12119d
Instruction Fuzzy Hash: 78116D30A4985D8FDB84FB6C9899AFDB7E1FF5D311B0102BAE54DD32A2DE24A8018740

Function 00007FFEBC7F185F Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36491b4b0c9e81847327537e56276da735e3696ca148cc204556f9e4638b352f
Instruction ID: c15cd1f1c29ebfef230037480475228980cdb5ba96d40296174b8fd398d32924
Opcode Fuzzy Hash: 36491b4b0c9e81847327537e56276da735e3696ca148cc204556f9e4638b352f
Instruction Fuzzy Hash: F8118630A18B468FE368AB3891513B973D2AF45354F9015BCD14EC72E7CE3EA845C301

Function 00007FFEBC7F40E0 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 999e88c4b646f99960fcd56faae6c186801a9003e9807b4c4a9ceef58a81bf4b
Instruction ID: fe360bc8f7970541f1f5856562cbeddf4fe25d462126660c08cbbce6193a4946
Opcode Fuzzy Hash: 999e88c4b646f99960fcd56faae6c186801a9003e9807b4c4a9ceef58a81bf4b
Instruction Fuzzy Hash: 2401F712F5ED6E4BE398663C10E813852C3EBDD1617A406B7D64DC32B6FC198C425304

Function 00007FFEBC8A034F Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363684109.00007FFEBC8A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC8A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc8a0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ad2f2912b900c51c20d639f1b70f8bcd590b5e62523c773a96b10486c72cfba
Instruction ID: 6ca8c279e22e9de54e5342320eb5fd56fbf4e3e19d39d4d9b2832c8b805a0bbf
Opcode Fuzzy Hash: 0ad2f2912b900c51c20d639f1b70f8bcd590b5e62523c773a96b10486c72cfba
Instruction Fuzzy Hash: 7C018F31708A1A8FD788DB2C85A8A7937D2EFAD314714026A944AC72E5CE35ED418740

Function 00007FFEBC7F9E4F Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ffdd13c5854964906b0ffb5fc84d283e51e88cd7e7ae8608c3131c14b6f2274
Instruction ID: 8deea01c9828225a58db7d4aa956bd851a486144bf552059b3cacc0fc62c7ede
Opcode Fuzzy Hash: 2ffdd13c5854964906b0ffb5fc84d283e51e88cd7e7ae8608c3131c14b6f2274
Instruction Fuzzy Hash: 82018F31209A4A8FDB09DF3C96555647BE1EF4A38870402ABD549CB6E2CD25EA45C700

Function 00007FFEBC7F6B4D Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9fdbcc834b0fdacb480f030f8b501078bae9140c4ebdd2812e46bcaafab21c15
Instruction ID: 45a672b1343835ec39fafc4d4274044b11a6ff89fb90e969840ca52ececfecb8
Opcode Fuzzy Hash: 9fdbcc834b0fdacb480f030f8b501078bae9140c4ebdd2812e46bcaafab21c15
Instruction Fuzzy Hash: 42018F20B0D9994FEB99EB3C859967C27D2EF9D300F600179D54DC73E2DD28AD058740

Function 00007FFEBC7F2EB8 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c278f22368984a6f4780adca43a3d774e0778661a18bb343a951c64f6bd1fbe
Instruction ID: 270a3d48577e8f49cc2d342dfe989aeb76a27f5243a888d3f99f1cae089e434c
Opcode Fuzzy Hash: 1c278f22368984a6f4780adca43a3d774e0778661a18bb343a951c64f6bd1fbe
Instruction Fuzzy Hash: 57F03161B5C91A4FDB44EB5CD4527EDB3F1FB8C315F400239D24ED3292CE2868028750

Function 00007FFEBC7F150E Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c7f1ae90c5892ea79d313dd72211726cb37c8c0e7387a1916c9e475a766cf1fd
Instruction ID: 0aa42416ed7d28bfe3f533d7e964892a9dc9db16c042998098d60f2d377dd687
Opcode Fuzzy Hash: c7f1ae90c5892ea79d313dd72211726cb37c8c0e7387a1916c9e475a766cf1fd
Instruction Fuzzy Hash: DB01D61045E7D60FDB93537859252A13FE19F8B220F4900FBD989CB0A7D84D484AC3A2

Function 00007FFEBC7F5E1E Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ea54a879d0434bb7a0e206e8d303dd000de55c5003daa5d94b30ed2f9502e8f
Instruction ID: f051398f4d94989c0b382b98d53674876867fa6e7cc10bdbf04b6b7ee6288a70
Opcode Fuzzy Hash: 4ea54a879d0434bb7a0e206e8d303dd000de55c5003daa5d94b30ed2f9502e8f
Instruction Fuzzy Hash: 4501AD1044EBC60FD39397B889686623FF98E8B12070E00EBD488CF5A3C80D580AC332

Function 00007FFEBC7F994D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 209de57bce49e404740360a96c7c9012b47fe102a22f9ea1fa5e8035875c5e8a
Instruction ID: 9aa3dd303cab51290b80f558e3874e6dc53eeaa120463477498181e21b044000
Opcode Fuzzy Hash: 209de57bce49e404740360a96c7c9012b47fe102a22f9ea1fa5e8035875c5e8a
Instruction Fuzzy Hash: E001F631A4C85E4FDE81FB2CC495ABCB7E2EF9C301B0102B4D10DE32A6CE28A8018700

Function 00007FFEBC7F9DDD Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3972a808d01b4f9a0db7aac9fd0d8525473f368f4bf736d70ac268fea065b003
Instruction ID: 6e61bdc8dfcdbdd460d9aa353963d49c22471f08cf78f9fc2fea5d4a1f03ef79
Opcode Fuzzy Hash: 3972a808d01b4f9a0db7aac9fd0d8525473f368f4bf736d70ac268fea065b003
Instruction Fuzzy Hash: A3014C71D1DE859BD3549B3C8CB94AABBD1FF5031470442BBD41C870A3DD249815C7C4

Function 00007FFEBC7F5B28 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62b2381a812b8cb400e30bc117060f7439c26850850ae1f9a5fe3e09a2eed878
Instruction ID: bc9cd4c6f430959dd6d19f08a2edc1c75d1c80f9fad52995cf71b572cd12197f
Opcode Fuzzy Hash: 62b2381a812b8cb400e30bc117060f7439c26850850ae1f9a5fe3e09a2eed878
Instruction Fuzzy Hash: AEF0B420509A884FD756EB39C46D5653FE5EF5E25030505FFE04DC75E2DC286C40C320

Function 00007FFEBC7F2E62 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4436197a0d3a84a48a5d759052f8311062491fb65605f369d7bc0ab7ae51edda
Instruction ID: d9286012f3ea11851c35ff59aa3627a19a3a29ea3afa377ccf8527d586447a6f
Opcode Fuzzy Hash: 4436197a0d3a84a48a5d759052f8311062491fb65605f369d7bc0ab7ae51edda
Instruction Fuzzy Hash: 22F06D2190EEC84FDB52E73C48686A93FE0EF9A211B1D01E7E848C71B3D8649C488752

Function 00007FFEBC7F4E45 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 232e41bac8b9ac49c9f00444a2a0040b702d26bccc86cfade49316a2eb791272
Instruction ID: c4b24a59965eef6fa88d528d8670baceae20c4a5b9de43b9a265bf6565bc3dde
Opcode Fuzzy Hash: 232e41bac8b9ac49c9f00444a2a0040b702d26bccc86cfade49316a2eb791272
Instruction Fuzzy Hash: A0F0A72195EE964FD7A5923C449837965D5AF88311F5942BFD04CC32E5DF28D8458381

Function 00007FFEBC8A0160 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363684109.00007FFEBC8A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC8A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc8a0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2972fe5a4f4af114efd03cb1fcfc09d74043137faf148a56f7c125c4d7e0db3a
Instruction ID: 8a3a04b5f45684e24bf6502291a88994258c40476c5a2d1d36eac81feb7b5302
Opcode Fuzzy Hash: 2972fe5a4f4af114efd03cb1fcfc09d74043137faf148a56f7c125c4d7e0db3a
Instruction Fuzzy Hash: B1F0A01160DE4E2FE258A16D581EAB368C9CFA6266B04417EF54EC22A3DDC8AC0542D1

Function 00007FFEBC7F1DF3 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f51aef6595def8312378a2d1156d26b6a89e3cc83dc005c2dffe44efbb13ecdb
Instruction ID: f9229ed6c14b1fa273942f1a89ff2f4481b907d83362a63d4499871bbe67fe94
Opcode Fuzzy Hash: f51aef6595def8312378a2d1156d26b6a89e3cc83dc005c2dffe44efbb13ecdb
Instruction Fuzzy Hash: 80F03A21A6E8998FDF81EB2C9495AE977A1EF09210F4401B5E559DB1E2CD29A801C741

Function 00007FFEBC7F1AF4 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a18b2f33562b20d48e42e9b687de4a9c3259143db2d98a45749075fa125c6ae
Instruction ID: 0f1f17bc631e4218635bf893e91321f24f5bd449a237799ae2382c49ae70a96c
Opcode Fuzzy Hash: 7a18b2f33562b20d48e42e9b687de4a9c3259143db2d98a45749075fa125c6ae
Instruction Fuzzy Hash: 74F04F3055AA859FE7A9EB3C809067433A2BF59345B4406BCD58A976A2DE29A845C700

Function 00007FFEBC7F1E2E Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a2831d0a7bd0a1fea7ab476a6061560c2f65d08ab738ec6fd7dbed68af6dfe37
Instruction ID: 83ddf5ffb6a41c204437072bc8c337a12649d2600b3297a426068a03fc3cc2d7
Opcode Fuzzy Hash: a2831d0a7bd0a1fea7ab476a6061560c2f65d08ab738ec6fd7dbed68af6dfe37
Instruction Fuzzy Hash: 73F06531A6A85E8FDF84FB6CD495AF973A1FF5C305F400135D14DD31A1CE25A8028740

Function 00007FFEBC7F62B9 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f106de45f86a3a0a4dd4d5e62416ffdbc65fdad7dccf4e161397e7750869691
Instruction ID: d338abdd36d0173d5339957e73b54363f257366b0a2a080925009cc0007543a4
Opcode Fuzzy Hash: 6f106de45f86a3a0a4dd4d5e62416ffdbc65fdad7dccf4e161397e7750869691
Instruction Fuzzy Hash: AAF0EC207199564FD684FF3CC1759B967D1EF9D350B440679D44EC72E2CC14AC458300

Function 00007FFEBC7F1700 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e0fe9f8ec81cd7a0e290456a847fe20992b10efa17503d37b404c590cf5cfa1
Instruction ID: 1bc45f0632d6eaca9053c70694571058f01b1f8469ac5d0a2492c089824b41d0
Opcode Fuzzy Hash: 5e0fe9f8ec81cd7a0e290456a847fe20992b10efa17503d37b404c590cf5cfa1
Instruction Fuzzy Hash: A0E0D825FA9C6E4BDB84EA3CA8956E93391FFE8311B405772D54DC3256CE34AC5243C0

Function 00007FFEBC7F4428 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0723ee53ac67d2735c6a696d19ecd27ee6d0c3f3d154a3886c634ab41cee3e19
Instruction ID: a1f1f22e815d1dc29b2121da2125b4be90743ea684d53bb9110e84a92b0a2d0b
Opcode Fuzzy Hash: 0723ee53ac67d2735c6a696d19ecd27ee6d0c3f3d154a3886c634ab41cee3e19
Instruction Fuzzy Hash: A2E0ED31D19D2D8F8B90EB1CE4446EA77F0FB59315B410696E46DD3264DB30ED448BC1

Function 00007FFEBC7F0558 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eaab1d239ade998e559f01908d6f26005f6b43b8a1699e8d72c21efcdc82d1b6
Instruction ID: 0df43212ab7897d47c16d02c40959c54669b5417f3b9fa086c1e35b42b86ba3f
Opcode Fuzzy Hash: eaab1d239ade998e559f01908d6f26005f6b43b8a1699e8d72c21efcdc82d1b6
Instruction Fuzzy Hash: 6CE04F30504D4C5F8B94F72C844CA7A7BE6EF98311B1A46A6B40DD3271CD60DC818751

Function 00007FFEBC7F2F49 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d9a925c363d24b900ab6f655a1110b3956e9022cf99b814ccacbded04f70713
Instruction ID: f75b440e350a4a875a2862d60093115d1f6cdc8dd6726d478da135de05236012
Opcode Fuzzy Hash: 1d9a925c363d24b900ab6f655a1110b3956e9022cf99b814ccacbded04f70713
Instruction Fuzzy Hash: 08E0C23318980C1B8A00AA8BFC41CC27B5CE98127CB420327EC1CC2160E12382A6C391

Function 00007FFEBC7F1540 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9395340fb2e68232ab6b5e461e66faa6f7713b382103d9f0df42088cf355b7e3
Instruction ID: b1e7706e07d06698c10ba4313df8da2de1e56c7fc8d5f4350ce77e9a731277ad
Opcode Fuzzy Hash: 9395340fb2e68232ab6b5e461e66faa6f7713b382103d9f0df42088cf355b7e3
Instruction Fuzzy Hash: F6E0DF20A3E82E0AE998623C20057B812C1EF8D210F4001BAE90ED32C6EC1A484183C0

Function 00007FFEBC7F6D3F Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce3bd1adbfd756fe508870acf0518e9f808ab72ea455c2f598c162114abe468e
Instruction ID: ce956a74da9ab1353fdb3351a44ccad20bf691d8ced9c0e0d114b4ffc2b12a34
Opcode Fuzzy Hash: ce3bd1adbfd756fe508870acf0518e9f808ab72ea455c2f598c162114abe468e
Instruction Fuzzy Hash: 14E0923164C9598F8B9CDE2C402537473E2EB9E315B28472DD16BC37E0CE22EC424740

Function 00007FFEBC7F1B69 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f897d5e7ca5734d7897cdb23118921a9fa8a2a1b635225e56790f390aa9f6565
Instruction ID: fae28e482c6295a34633efb751b8ac38ad000e78d05fab83a9a8b99f7d5a0a52
Opcode Fuzzy Hash: f897d5e7ca5734d7897cdb23118921a9fa8a2a1b635225e56790f390aa9f6565
Instruction Fuzzy Hash: 1FF0303545D5C89FCB059F2888599E5BFA0EF66201B0942EAE199CB072D6259A18CB81

Function 00007FFEBC7F56C5 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2dda39d71b1824d592d2c2ba423bc64af6aad311421a3e1c3df6b8f8f223f0f4
Instruction ID: 7c861a562d778ba4099a85efa0f15a5fe8c69bfeb214e9a8e53c3b731f996720
Opcode Fuzzy Hash: 2dda39d71b1824d592d2c2ba423bc64af6aad311421a3e1c3df6b8f8f223f0f4
Instruction Fuzzy Hash: E5E09A1084EAD41FC306833C5868BA57FA4AF8B115B0E02EBD188CB1E3DD08680883A1

Function 00007FFEBC7F1FFD Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 71fbf6922ace5b94925bea1b59e4e779770ffc7e476973f744ec8bca1b8a9302
Instruction ID: 465d6682780000dd9acc1748b6f82b6a483c1cba7912be7e36e4599b2cdc6a29
Opcode Fuzzy Hash: 71fbf6922ace5b94925bea1b59e4e779770ffc7e476973f744ec8bca1b8a9302
Instruction Fuzzy Hash: 7DF06D3150EB885FC359EB3CC9A96143FA1EF1A24574902EAD008CB2A3DA29E818C761

Function 00007FFEBC7F648D Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b12af89aa8d13880b2ea27d1aa06635d8dcaa5bad22d09ef39885c3d4a527d83
Instruction ID: 2065a87f599530287ea00b0a2045215e5ec2ad9874ad95d17c1ecded98b9dd8f
Opcode Fuzzy Hash: b12af89aa8d13880b2ea27d1aa06635d8dcaa5bad22d09ef39885c3d4a527d83
Instruction Fuzzy Hash: 1DE0123184A6959FC251D774D855D777BE8EE8621074981EBE444C70A6DA18A410C7A1

Function 00007FFEBC7F6D6A Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 900ec04034267f5191748a9314a46ad77fa53a096ff5d3b62cdb180b85a5ad1c
Instruction ID: bdd80efe87e38cb0112ea6e366537953d23b1b8fbfac416ebcac7115af9b9471
Opcode Fuzzy Hash: 900ec04034267f5191748a9314a46ad77fa53a096ff5d3b62cdb180b85a5ad1c
Instruction Fuzzy Hash: DDE05271A1C7858B8B8CDF28906517FBAE2EB99355B505A3FB19BD27A0CE318440460A

Function 00007FFEBC7F6B0D Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 009c9369babb2bf1b884b8042a638479b6f8583af9396ead4e9dd29c3923b0c1
Instruction ID: 11b13b1d69bf199827a075416ac3bfb9aa6a9ba23897ce1f8327d9bf5c9e7ef2
Opcode Fuzzy Hash: 009c9369babb2bf1b884b8042a638479b6f8583af9396ead4e9dd29c3923b0c1
Instruction Fuzzy Hash: 3DE0C220709D580F9385EA3C41DC33826C2DB9D201320017A914CC73E6CC149C058380

Function 00007FFEBC7F4133 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0870a001d23f957fdae32024de7ccfab2365ab47468b27252e8cc1c560fe08a
Instruction ID: 0ca8ed364bfe0d6fea548f5f77e29fd76117f236b5c53d33546aa8ab1af73a91
Opcode Fuzzy Hash: e0870a001d23f957fdae32024de7ccfab2365ab47468b27252e8cc1c560fe08a
Instruction Fuzzy Hash: 32D05E24F16D1F5B63CD9A2C00AC77662C3EFEC6527A4423A445EC33A9DE29DC020744

Function 00007FFEBC7F8B10 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9e1d13713d44ceedfb4dadc4bef320752631694263a16cffac938a9bf70fd337
Instruction ID: d3a5f081481d6c43e52c6a3fafb1a5d8d7a0c0ab8c97e1cc7229611e357056e2
Opcode Fuzzy Hash: 9e1d13713d44ceedfb4dadc4bef320752631694263a16cffac938a9bf70fd337
Instruction Fuzzy Hash: BBD02B30D1DD5C1B5374A52C180CABB79D9DB8C360F00029FF40CC3155CC509C0086D1

Function 00007FFEBC7F9909 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7fe9cb19c0575c4691751d0170a3119d713a93c4e4fe85e7a33560a5621ab47b
Instruction ID: 64dce6cd62a70ed74f5950d4aedee0b115bdb15dcd3373e272f8c38aea2f1d7c
Opcode Fuzzy Hash: 7fe9cb19c0575c4691751d0170a3119d713a93c4e4fe85e7a33560a5621ab47b
Instruction Fuzzy Hash: CBE0E5306489098FDBC4EB5CC085FBAB7E2EFA9300F0400A99109D72B6CA64EC51C780

Function 00007FFEBC7F6DB1 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c0d8fd81c9176c2e44bdd307221b4ef159974f0c0a80b4d5333ecd263fbc732f
Instruction ID: 81ed4984485cbf1886f8c8875230cd220c86bf5c2b8b9592804bfec4a82a738b
Opcode Fuzzy Hash: c0d8fd81c9176c2e44bdd307221b4ef159974f0c0a80b4d5333ecd263fbc732f
Instruction Fuzzy Hash: 3DD0A720B5D9090F8B8AEF7C04A617CB793DBCC6123444E7EE05FC2296CE289C039302

Function 00007FFEBC7F5FE5 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bdee571fc0b8c05457f9e10ce7dc235807e565d7f6e7b0bcc316c874061bb2cf
Instruction ID: 51d64165fa6a4d9039d202b9743dcf7d5539201f97e3b6d072b388e2c2b33b99
Opcode Fuzzy Hash: bdee571fc0b8c05457f9e10ce7dc235807e565d7f6e7b0bcc316c874061bb2cf
Instruction Fuzzy Hash: 64E0C2202098494FD349EF3CC1A8AA03BF1EF4935830400DAD84ACB567DD518C16D790

Function 00007FFEBC7F08EF Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b2d15e773051c6535a537bc83b5e985b325a99c694afac071cdf4b328db7acad
Instruction ID: 4739bf6db1a2e1f1cf900da7051d275e7ede763926bdc976c5d9374f0246f772
Opcode Fuzzy Hash: b2d15e773051c6535a537bc83b5e985b325a99c694afac071cdf4b328db7acad
Instruction Fuzzy Hash: E7E08C3080890A9FDB40EF68C6558ACBFA1FF48340F4001B2D90CCB2B2DE346A948600

Function 00007FFEBC7F0550 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f3c68563714286b73c1a4ee47c45815420d9d22c5b5565f47f9e12f0ae4731c
Instruction ID: 26b839334cf53c7dc940fb43cd946857364fae585b1f763e798dbdc8b4727ae7
Opcode Fuzzy Hash: 7f3c68563714286b73c1a4ee47c45815420d9d22c5b5565f47f9e12f0ae4731c
Instruction Fuzzy Hash: 81D05E3545494C8F8B44EF28D414DEAB3A0FB18314F00029AF41EC7470DB31EA58CB82

Function 00007FFEBC7F72EE Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e8d7247ce801db110c36815461bb2de9f3f166bb2b4d73a3b0de986c4d51af27
Instruction ID: d821b58adbb05b0ff76ee483e542c0ffbd038ff397ecb0cbfbdc060dfd82c1c1
Opcode Fuzzy Hash: e8d7247ce801db110c36815461bb2de9f3f166bb2b4d73a3b0de986c4d51af27
Instruction Fuzzy Hash: 45D0C23071DA1A8FE355AF38A1000A4B7E1AF8A21434004F8D409CA2A2CD3A9DC28340

Function 00007FFEBC7F0877 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9645eeff5399c083f8bc73c7b15ae659aea0207514760cc295127d963ca587e
Instruction ID: 9c953c9afe5544da8c107f54931af6be6595fee8fa8a782a079985cabcb81840
Opcode Fuzzy Hash: c9645eeff5399c083f8bc73c7b15ae659aea0207514760cc295127d963ca587e
Instruction Fuzzy Hash: 20D0170588FBC54FDB03223D1CA10203FB08E9B101B8A02E7C1C4CA1A3D81C595C8363

Function 00007FFEBC7F3554 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8853073948e5133789042acd08a2ba4c19053409bd28c2e09d9382cdfe3f2f49
Instruction ID: dfaf4f8bb86470a6700055224c748e517bb1c5a107a31888c396cc5fd9c7f49d
Opcode Fuzzy Hash: 8853073948e5133789042acd08a2ba4c19053409bd28c2e09d9382cdfe3f2f49
Instruction Fuzzy Hash: 76D01212B4EC590FE595A36C74926ACA7C2EBC827176803B3E21CC72BFDC189C964395

Function 00007FFEBC7F4787 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f461675c1840624a7b76f94c82885f8240fba0305b8f5f71344f7459893027c5
Instruction ID: e2fdf48a872c5eb9b328b0072628cab2192f9d14a2c5184ef73856a66feab243
Opcode Fuzzy Hash: f461675c1840624a7b76f94c82885f8240fba0305b8f5f71344f7459893027c5
Instruction Fuzzy Hash: 45D0C72065CD554F8F95EB1D80F8E7A67D2DF9C3143154399C18DC76A7CD24D8419744

Function 00007FFEBC7F6B47 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1da2c8151bff065a22ec360dade5deff717a643ce954552a8abccd1d9bdcba30
Instruction ID: ce48f062b615b64bec831b957f5881a6eb3bd8cb4a6590a067cf9ebfd1f5976e
Opcode Fuzzy Hash: 1da2c8151bff065a22ec360dade5deff717a643ce954552a8abccd1d9bdcba30
Instruction Fuzzy Hash: 08D01201B5FCA90B6281A57D10CD27C17C2D7AC1017304136518DC32B6DC0458064241

Function 00007FFEBC7F473E Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b2a3763219d143540200e90aee3735b6f9e12a1400d6c79d95941395bb032c92
Instruction ID: 18861732325b77731706748cae206e133abfff6d05b0b3a9cd79033d71f6cf52
Opcode Fuzzy Hash: b2a3763219d143540200e90aee3735b6f9e12a1400d6c79d95941395bb032c92
Instruction Fuzzy Hash: D3D01211A0DD456B8FD4EA2D80E9F7D17D2EF9C2113190699C29DC72A3CD289C025714

Function 00007FFEBC7F4689 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bfbaa56d983f5ad007f1d40e15593fe6d29ab1a5ad0c39ca0b40d29062b28908
Instruction ID: 2e036c3da819607d494fc2f48db57614b91800b8f3ae6c25fd41a1ad079e1838
Opcode Fuzzy Hash: bfbaa56d983f5ad007f1d40e15593fe6d29ab1a5ad0c39ca0b40d29062b28908
Instruction Fuzzy Hash: B0D0C93074A5018BDB58962C95A52753292EFCE305F10047CA80EC73F6DD29A8598642

Function 00007FFEBC7F46F7 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a1a0e7bb60cb78a644617b3ea9803840ef93bf65fd01599343e87e83bcc7b5a
Instruction ID: 69e7ba4578710d60d16e373a5a1a9e0296a9dd5cdc22fd4635a486e725ffd20e
Opcode Fuzzy Hash: 1a1a0e7bb60cb78a644617b3ea9803840ef93bf65fd01599343e87e83bcc7b5a
Instruction Fuzzy Hash: D1D0121561DF499F5B64EA2C4098A7A52C2979C111704065DC14EC339BCD189841535A

Function 00007FFEBC7F6DE7 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 836605a036ddf24d6f47605ab2dbf43931394bd5c09b9716540f2fa94ce4eeb4
Instruction ID: 821df4334c3d873ef4e79b62b97e83308aed00798603aca11efc21baea328edb
Opcode Fuzzy Hash: 836605a036ddf24d6f47605ab2dbf43931394bd5c09b9716540f2fa94ce4eeb4
Instruction Fuzzy Hash: CFC09B1074ED5D0F55DAD62C1155679D7D3D78C74034148AE914DC33C5DD144C0243C1

Function 00007FFEBC7F3C58 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 676bbffa7986417e2a1831b998377ae5bf3dbbca658ad2e7874e19256886fd82
Instruction ID: cf0a9a0c5f2e10b8f56ff8981d4eacbec6a9c9ccacf81b5ec18150114a495548
Opcode Fuzzy Hash: 676bbffa7986417e2a1831b998377ae5bf3dbbca658ad2e7874e19256886fd82
Instruction Fuzzy Hash: CBB09220C9ADA915A0B8B17D0849A7A0498CF89625B8582B6AC99E21ADDC0C384002A1

Function 00007FFEBC7F595C Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 553ee510e9b9d833636351aa02dfbb0beb2b3ea23e76b7df3f20b66690d0055a
Instruction ID: 92c483474b5c43d29f78d8fd5b18a39c171a7df97a1d1cd7f112d17c0d63a826
Opcode Fuzzy Hash: 553ee510e9b9d833636351aa02dfbb0beb2b3ea23e76b7df3f20b66690d0055a
Instruction Fuzzy Hash: 08C09B35546504CBCB155B10D5145597671FF57302751417DD80ACA6A0DB76D819CB41

Function 00007FFEBC7F8FC0 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4c4e3a83b250f5278a7fe01f03483e66794db33709cc6cac3341254efcc16c5a
Instruction ID: 0a5a4dd9c0a41a71df091db030a0e5fff3dff051c6b48d665d89d9374071cd0b
Opcode Fuzzy Hash: 4c4e3a83b250f5278a7fe01f03483e66794db33709cc6cac3341254efcc16c5a
Instruction Fuzzy Hash: E7A004015CF45D055445715D34D11FC71C5C7CD1107C71555F54DC5355DD4D1DD351D1

Function 00007FFEBC7F1FEB Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2363307310.00007FFEBC7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFEBC7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffebc7f0000_cpcheckme_yt22zMIg.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 873b1a93904ead30c921746b6e9de3d92a42b749ece121dc88e8ede39df52a1a
Instruction ID: 3f854a19a435d6f268b2a2c9055f6e9fd363556cf1d998b50b10825fbbb115d5
Opcode Fuzzy Hash: 873b1a93904ead30c921746b6e9de3d92a42b749ece121dc88e8ede39df52a1a
Instruction Fuzzy Hash: 3DA002165C981501A655109A3D530D47182CAC5064B4B3145A4A885684D5DA6DD34185

Source: http://www.cpcheckme.com/checkme/rest/test/getScanTypesDetails?ts=1716391642957	Avira URL Cloud: Label: malware
Source: http://www.cpcheckme.com/checkme/rest/test/getScanStatus?ts=1716391676043&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2	Avira URL Cloud: Label: malware
Source: http://www.cpcheckme.com/checkme/rest/test/getExcludedEmails?ts=1716391642959	Avira URL Cloud: Label: malware
Source: http://www.cpcheckme.com/checkme/rest/endpoint/p	Avira URL Cloud: Label: malware
Source: http://www.cpcheckme.com/checkme/rest/endpoint/start	Avira URL Cloud: Label: malware
Source: http://www.cpcheckme.com/checkme/vendor.16be15e20a43eba17559.js	Avira URL Cloud: Label: malware
Source: http://www.cpcheckme.com/checkme/assets/libs/fontawesome/fonts/fontawesome-webfont.woff2?v=4.7.0	Avira URL Cloud: Label: malware
Source: http://www.cpcheckme.com/checkme/rest/endpoint/starte	Avira URL Cloud: Label: malware
Source: http://www.cpcheckme.com/checkme/rest/test/getAllTests?ts=1716391619429&category=	Avira URL Cloud: Label: malware
Source: http://www.cpcheckme.com/checkme/rest/test/getScanStatus?ts=1716391670793&id=NmI1ODMxY2EtZDM0YS00OGMxLWExYjMtNjk3ZmE2ZjhkOTY4MTcxNjM5MTY1NTkzNw%3D%3D&type=2	Avira URL Cloud: Label: malware

Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb&co=aHR0cDovL3d3dy5jcGNoZWNrbWUuY29tOjgw&hl=en&type=image&v=8k85QBI-qzxmenDv318AZH30&theme=light&size=invisible&badge=bottomright&cb=11wz3iwh9xgn	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=8k85QBI-qzxmenDv318AZH30&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=8k85QBI-qzxmenDv318AZH30&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=8k85QBI-qzxmenDv318AZH30&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb&co=aHR0cDovL3d3dy5jcGNoZWNrbWUuY29tOjgw&hl=en&type=image&v=8k85QBI-qzxmenDv318AZH30&theme=light&size=invisible&badge=bottomright&cb=l5a3zuoxr6a	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LewKIgUAAAAANzf9kcgi8Orr1VGgBzWRk3dOMOb&co=aHR0cDovL3d3dy5jcGNoZWNrbWUuY29tOjgw&hl=en&type=image&v=8k85QBI-qzxmenDv318AZH30&theme=light&size=invisible&badge=bottomright&cb=l5a3zuoxr6a	HTTP Parser: No favicon

Source: Yara match	File source: 15.0.cpcheckme_yt22zMIg.exe.22b8aa40000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: C:\Users\user\Downloads\Unconfirmed 6574.crdownload, type: DROPPED
Source: Yara match	File source: dropped/chromecache_176, type: DROPPED

Source: global traffic	TCP traffic: 192.168.2.16:62127 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:62339 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:56727 -> 1.1.1.1:53

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads (ex: `rundll32.exe {DLLname, DLLfunction}` ).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.cpcheckme.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Users\user\Downloads\Unconfirmed 6574.crdownload

C:\Users\user\Downloads\c06b9dbc-dc73-4ca5-8be7-44a4c0c2d82b.tmp

C:\Users\user\Downloads\cpcheckme_yt22zMIg.exe (copy)

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1048212\Google.Widevine.CDM.dll

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1048212\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1048212\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1048212\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1233813918\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1233813918\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1233813918\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping1996_1233813918\manifest.json

Windows Analysis Report
http://www.cpcheckme.com