Edit tour

Windows Analysis Report
https://survey3.medallia.com/?ehnm7d7764zrrfrsfyb9&reject=begin

Overview

General Information

Sample URL:	https://survey3.medallia.com/?ehnm7d7764zrrfrsfyb9&reject=begin
Analysis ID:	1320254
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Creates files inside the system directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6864 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7148 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 --field-trial-handle=2252,i,14294954126216412549,11794851394833694828,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2072 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://survey3.medallia.com/?ehnm7d7764zrrfrsfyb9&reject=begin MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-05-06; NID=511=UBeNCkZ3L8yXcx8qh4JFUXkwkNC9IrdiRdbjSTjqSiFh8WrRcbKr_rOJbgHY6TA4RT-6ps0bhemfwCPBsLMgPT7-gTcWqHvZvZbafOpkqRy0dLyYG9AjP2vbUBomarnc9pcZVlhHkUeUaWMurD0GGXyW05_B_1IyUNYEELmyqRg

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.99.186.246

Source: unknown	HTTPS traffic detected: 20.99.186.246:443 -> 192.168.2.6:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.99.186.246:443 -> 192.168.2.6:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.99.186.246:443 -> 192.168.2.6:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.99.186.246:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.50:443 -> 192.168.2.6:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.99.185.48:443 -> 192.168.2.6:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.99.185.48:443 -> 192.168.2.6:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.99.185.48:443 -> 192.168.2.6:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.99.185.48:443 -> 192.168.2.6:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.21.200:443 -> 192.168.2.6:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.6:49758 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_6864_428271084

Jump to behavior

Source: classification engine

Classification label: clean1.win@20/15@22/12

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 --field-trial-handle=2252,i,14294954126216412549,11794851394833694828,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://survey3.medallia.com/?ehnm7d7764zrrfrsfyb9&reject=begin
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 --field-trial-handle=2252,i,14294954126216412549,11794851394833694828,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	1 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://survey3.medallia.com/?ehnm7d7764zrrfrsfyb9&reject=begin	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://col.eum-appdynamics.com/eumcollector/beacons/browser/v1/AD-AAB-AAF-GTM/adrum	0%	Avira URL Cloud	safe
https://col.eum-appdynamics.com	0%	Avira URL Cloud	safe
http://col.eum-appdynamics.com	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
survey3.medallia.com	147.75.243.92	true	false	high
accounts.google.com	142.250.188.237	true	false	high
www.google.com	142.250.217.132	true	false	high
col.eum-appdynamics.com	44.239.32.243	true	false	unknown
clients.l.google.com	142.250.72.174	true	false	high
medallia2.map.fastly.net	146.75.93.230	true	false	unknown
d3n3mj7fomk6d6.cloudfront.net	18.154.206.79	true	false	high
clients2.google.com	unknown	unknown	false	high
global.cdn.survey.medallia.com	unknown	unknown	false	high
cdn.medallia.com	unknown	unknown	false	high
sea1.cdn.survey.medallia.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.medallia.com/vendor/appdynamics/adrum/adrum.js	false		high
https://global.cdn.survey.medallia.com/15de41a42ce4f647a5d1c5e8ea29f1913d26d6b5	false		high
https://sea1.cdn.survey.medallia.com/9ed43e593744b02426d9306ce6f2df3ea9048253	false		high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.134&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1	false		high
https://survey3.medallia.com/?ehnm7d7764zrrfrsfyb9&reject=confirm	false		high
https://sea1.cdn.survey.medallia.com/da39a3ee5e6b4b0d3255bfef95601890afd80709	false		high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://global.cdn.survey.medallia.com/3eab28210f45500e7cb73de05e830b82db6e151c	false		high
https://survey3.medallia.com/?ehnm7d7764zrrfrsfyb9&reject=cancel	false		high
https://global.cdn.survey.medallia.com/bf462afe26a7d27226f89ff85ee31dd12c9d10ed	false		high
https://cdn.medallia.com/vendor/appdynamics/adrum-xd.2aed9d091ef08efa95822e864b4554d2.html	false		high
https://cdn.medallia.com/react-surveys/6.21.7/main.css	false		high
https://survey3.medallia.com/?ehnm7d7764zrrfrsfyb9&reject=begin	false		high
https://col.eum-appdynamics.com/eumcollector/beacons/browser/v1/AD-AAB-AAF-GTM/adrum	false	Avira URL Cloud: safe	unknown
https://survey3.medallia.com/?ehnm7d7764zrrfrsfyb9&reject=begin	false		high
https://cdn.medallia.com/vendor/appdynamics/adrum-xd.2aed9d091ef08efa95822e864b4554d2.html	false		high
https://cdn.medallia.com/react-surveys/6.21.7/main.js	false		high
https://sea1.cdn.survey.medallia.com/a938a40fb1e58749cdb6a74ad5e2a74452ead2f7	false		high
https://cdn.medallia.com/react-surveys/6.21.7/vendorPolyfill.js	false		high
https://cdn.medallia.com/vendor/appdynamics/adrum-ext.2aed9d091ef08efa95822e864b4554d2.js	false		high
https://cdn.medallia.com/react-surveys/6.21.7/jquery-1.7.1.min.js	false		high
https://cdn.medallia.com/react-surveys/6.21.7/vendor.js	false		high
https://survey3.medallia.com/?ehnm7d7764zrrfrsfyb9&reject=cancel	false		high
https://survey3.medallia.com/?ehnm7d7764zrrfrsfyb9&reject=confirm	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.apache.org/licenses/LICENSE-2.0	chromecache_123.1.dr	false		high
http://col.eum-appdynamics.com	chromecache_121.1.dr	false	Avira URL Cloud: safe	unknown
https://col.eum-appdynamics.com	chromecache_121.1.dr	false	Avira URL Cloud: safe	unknown
http://code.google.com/p/episodes/	chromecache_123.1.dr	false		high
http://cdn.appdynamics.com	chromecache_121.1.dr	false		high
https://cdn.appdynamics.com	chromecache_121.1.dr	false		high
https://global.cdn.survey.medallia.com/3df43562644fab8a88fb366b0843bc8a8612e42a)	chromecache_122.1.dr	false		high
https://global.cdn.survey.medallia.com/15de41a42ce4f647a5d1c5e8ea29f1913d26d6b5)	chromecache_122.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
44.239.32.243	col.eum-appdynamics.com	United States	16509	AMAZON-02US	false
146.75.93.230	medallia2.map.fastly.net	Sweden	30051	SCCGOVUS	false
18.154.206.79	d3n3mj7fomk6d6.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.217.132	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.39.244.39	unknown	United States	16509	AMAZON-02US	false
147.75.243.92	survey3.medallia.com	Switzerland	30109	MEDALLIA-INCUS	false
151.101.25.230	unknown	United States	54113	FASTLYUS	false
142.250.188.237	accounts.google.com	United States	15169	GOOGLEUS	false
142.250.72.174	clients.l.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6
192.168.2.22

General Information

Joe Sandbox Version:	38.0.0 Ammolite
Analysis ID:	1320254
Start date and time:	2023-10-05 14:49:43 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 3m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://survey3.medallia.com/?ehnm7d7764zrrfrsfyb9&reject=begin
Analysis system description:	Windows 10 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@20/15@22/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://survey3.medallia.com/?ehnm7d7764zrrfrsfyb9&reject=cancel Browse: https://survey3.medallia.com/?ehnm7d7764zrrfrsfyb9&reject=confirm Browse: https://survey3.medallia.com/?ehnm7d7764zrrfrsfyb9&reject=cancel Browse: https://survey3.medallia.com/?ehnm7d7764zrrfrsfyb9&reject=confirm

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, BackgroundTransferHost.exe, backgroundTaskHost.exe, conhost.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.68.67, 34.104.35.123, 192.229.211.108, 142.250.68.3
Excluded domains from analysis (whitelisted): www.bing.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clientservices.googleapis.com, g.bing.com, arc.msn.com, dns.msftncsi.com
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: https://survey3.medallia.com/?ehnm7d7764zrrfrsfyb9&reject=begin

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (32771)
Category:	downloaded
Size (bytes):	93871
Entropy (8bit):	5.37206439278932
Encrypted:	false
SSDEEP:	1536:h5RKUpVgklsdruLP/l+0fGzA8gmtakgx/c9Rzzi4yff8qeLvHHEjam7rSvmBn9gv:pe8bbGzA8V+xRRi1Zf
MD5:	F76CC435BFFC06DBFB3400CA8B2F264A
SHA1:	C3F3EF28387302B4F1CB69CE24D891A36A7EE20B
SHA-256:	08B2AF59A4A464E1F97924A1530E6C96400B5285724B66E9B4AE43EABEE00E4D
SHA-512:	4C8D042D03D9C2A1D6A0853E67980AEC8E9145A108B771873DAAE21564610F2D7F85B6E0FDB12748AA3B3CB260A52D1423FD7965D32E71B369BF2B8099525A28
Malicious:	false
Reputation:	low
URL:	https://cdn.medallia.com/react-surveys/6.21.7/jquery-1.7.1.min.js
Preview:	/* jQuery v1.7.1 jquery.com \| jquery.org/license */.(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cv(a){if(!ck[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){cl\|\|(cl=c.createElement("iframe"),cl.frameBorder=cl.width=cl.height=0),b.appendChild(cl);if(!cm\|\|!cl.createElement)cm=(cl.contentWindow\|\|cl.contentDocument).document,cm.write((c.compatMode==="CSS1Compat"?"<!doctype html>":"")+"<html><body>"),cm.close();d=cm.createElement(a),cm.body.appendChild(d),e=f.css(d,"display"),b.removeChild(cl)}ck[a]=e}return ck[a]}function cu(a,b){var c={};f.each(cq.concat.apply([],cq.slice(0,b)),function(){c[this]=a});return c}function ct(){cr=b}function cs(){setTimeout(ct,0);return cr=f.now()}function cj(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ci(){try{return new a.XMLHttpRequest}catch(b){}}function cc(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var d=a

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1560
Entropy (8bit):	5.117633110252555
Encrypted:	false
SSDEEP:	48:89MvuqEvFnkxHqDZnUiZ0VNUxvmlbYtiJTb:86EF4KDVUiZ0VNKvmEtSv
MD5:	DF67316F1A6DAFC2FC50944EBE34367A
SHA1:	9ED43E593744B02426D9306CE6F2DF3EA9048253
SHA-256:	8D68895C63E914BAA0A9730B8EFAB9E6D8491B7C64F8BF6290E2C9C13B05ABA0
SHA-512:	69411DC7C57B1F71225E10E75E4F4FBE54D62948C5FD2A32FA7ACE088369E17B97AF728E03A07B1978A7D503010D553482D70F598CA91FE473653C1FC8E035A7
Malicious:	false
Reputation:	low
URL:	https://sea1.cdn.survey.medallia.com/9ed43e593744b02426d9306ce6f2df3ea9048253
Preview:	/* Custom Theme /./ Look & Feel v7 Standard Theme /../******* LOGO CUSTOMIZATIONS *******/../ Logo size adjustment /./ Assumes the image has a 1000px width to account for retina display /..layout_logo { ..width: 50%;.}../ Logo size adjustment -- narrow screen (mobile) /.@media screen and (max-width: 768px) {. .layout_logo {..width: 90%;..height: auto;. }.}../******* QUESTION AND ANSWER CUSTOMIZATIONS *******/../ Dropdown max height adjustment /./ When setting max-height value, use a multiple of 55px, since that aligns to height of an individual list item /..dropdown_dropdownList.dropdown_dropdownList_isActive {. max-height: 330px;. padding: 3px;. overflow: auto;.}../******* MOBILE FONT SIZES *******/../ Recommended: decrease font size on mobile if your client is optimizing for response rates over accessibility /.@media screen and (max-width: 768px) {.../ Reduce font size on questions /../...questionCaption {.. font-size: 18px;.. li

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32079)
Category:	downloaded
Size (bytes):	165704
Entropy (8bit):	5.28586254947165
Encrypted:	false
SSDEEP:	1536:3rsfzz8KJXCLg4YGbdmUg9A0Oaiz1bc1pyqr1g76ofj85iwTNW:4JJSrmQ0Di29KgiwTNW
MD5:	6555088CFDDB105C025EA40AEDB919A9
SHA1:	9C22B7133602C80DC4034C2419D93897A00E32C3
SHA-256:	7254791F93F37FCF043C39E9CC44047C5A45B649B556856A61645FD02EA4D767
SHA-512:	37490AC05B5CA8B9168918E82DF26B494735999A6C185E87E43E62E67FDEB9DCC02C8582F61C28E44D93EDCE29EACA649472C2C77FF8B8889091999FDD937DB0
Malicious:	false
Reputation:	low
URL:	https://cdn.medallia.com/react-surveys/6.21.7/vendor.js
Preview:	!function(e){function t(n){if(r[n])return r[n].exports;var o=r[n]={exports:{},id:n,loaded:!1};return e[n].call(o.exports,o,o.exports,t),o.loaded=!0,o.exports}var n=window.webpackJsonp;window.webpackJsonp=function(i,a){for(var s,u,c=0,l=[];i.length>c;c++)u=i[c],o[u]&&l.push.apply(l,o[u]),o[u]=0;for(s in a)if(Object.prototype.hasOwnProperty.call(a,s)){var p=a[s];switch(typeof p){case"object":e[s]=function(t){var n=t.slice(1),r=t[0];return function(t,o,i){e[r].apply(this,[t,o,i].concat(n))}}(p);break;case"function":e[s]=p;break;default:e[s]=e[p]}}for(n&&n(i,a);l.length;)l.shift().call(null,t);if(a[0])return r[0]=0,t(0)};var r={},o={0:0};return t.e=function(e,n){if(0===o[e])return n.call(null,t);if(void 0!==o[e])o[e].push(n);else{o[e]=[n];var r=document.getElementsByTagName("head")[0],i=document.createElement("script");i.type="text/javascript",i.charset="utf-8",i.async=!0,i.src=t.p+""+e+"."+({1:"main",2:"vendorPolyfill"}[e]\|\|e)+".js",r.appendChild(i)}},t.m=e,t.c=r,t.p="/",t(0)}(function(e)

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32004), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	94335
Entropy (8bit):	5.289761052552365
Encrypted:	false
SSDEEP:	1536:vd3Vk3zIDxJAO29RFYSQ5STiWuPeomEq5fBtx4zDLvqzuVER:v3k33r25STgL2Jtx4zDKuqR
MD5:	C8436675BF91ABC4EA8A89359CF1C98A
SHA1:	5F8173D61AABAC03EAFC76D1F99FE5B9C39DC47E
SHA-256:	C040106766416A41446EC17E0FD01DAED1679B4FACD8F9728D1B2FEB773AA1F8
SHA-512:	D092E0B94E80546EE81AE3CB8D57357344945C271387F858E160AA6796D6D278603726A3EE721FCF3E045C9BD7FE737A5BB2F128D77C3807B7996C9DBEA49304
Malicious:	false
Reputation:	low
URL:	https://cdn.medallia.com/react-surveys/6.21.7/vendorPolyfill.js
Preview:	webpackJsonp([2],[function(t,n,r){t.exports=r(515)},,function(t,n,r){var e=r(8),i=r(51),o=r(38),u=r(39),c=r(52),f="prototype",a=function(t,n,r){var s,l,h,v,p=t&a.F,d=t&a.G,g=t&a.S,y=t&a.P,x=t&a.B,b=d?e:g?e[n]\|\|(e[n]={}):(e[n]\|\|{})[f],m=d?i:i[n]\|\|(i[n]={}),w=m[f]\|\|(m[f]={});d&&(r=n);for(s in r)l=!p&&b&&void 0!==b[s],h=(l?b:r)[s],v=x&&l?c(h,e):y&&"function"==typeof h?c(Function.call,h):h,b&&u(b,s,h,t&a.U),m[s]!=h&&o(m,s,v),y&&w[s]!=h&&(w[s]=h)};e.core=i,a.F=1,a.G=2,a.S=4,a.P=8,a.B=16,a.W=32,a.U=64,a.R=128,t.exports=a},,,function(t,n,r){var e=r(11);t.exports=function(t){if(!e(t))throw TypeError(t+" is not an object!");return t}},,,function(t,n){var r=t.exports="undefined"!=typeof window&&window.Math==Math?window:"undefined"!=typeof self&&self.Math==Math?self:Function("return this")();"number"==typeof __g&&(__g=r)},function(t,n){t.exports=function(t){try{return!!t()}catch(t){return!0}}},,function(t,n){t.exports=function(t){return"object"==typeof t?null!==t:"function"==typeof t}},,,function

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 536 x 243, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17287
Entropy (8bit):	7.89830633795694
Encrypted:	false
SSDEEP:	384:sqcb7CY8nNopQoQ2HVqynzcjzzlfaYjX0dyXepqPVeYd5+:ib70nNGtHLnAj3lfasXqA03u5+
MD5:	5E8B4E85202428BD6288D3D8BA63C9DE
SHA1:	A938A40FB1E58749CDB6A74AD5E2A74452EAD2F7
SHA-256:	B719A2E801D5BA7F0223CAA5BB1A6C7F0795941A7B2F857825F91C6573C91B51
SHA-512:	A1A1C8B32C60DDED9D712AA2CE9A06801D572624F6F284EF625FF9F6F2C67F8B471973CFD40416A8A4A1E736A09ADD9437C813E2DF98C310752A9D78316BEE4D
Malicious:	false
Reputation:	low
URL:	https://sea1.cdn.survey.medallia.com/a938a40fb1e58749cdb6a74ad5e2a74452ead2f7
Preview:	.PNG........IHDR..............ox....sRGB.......@.IDATx....]E..O.9...N:+!........ I.a......y.y..2f....QG.$..Q...Fgqt.B$.^.&.E. ;I..l.N...........zO.._.......W...w...+.a!.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .....GZ.......V+.,\|.k\.UX.o..E~....p. ...(...q[4./3.YcS.JwB:....0.]7.9.0T....{z{O..t..m.B8z.UY;,..i.3K;..P9S.\|.#..B........s.W...ZV..kM.q.Nl....3.T.3.P.8...h..Bh..#..)..^L?.o../&DB..k...^{.....o.R.........II..jW<-.z,...n.o.gM.q.^......p.p...U.&.^...!)..`..F..}.3..........8..70.){S...A,6..q.#.t.#=.:.B.x..q7..{8......B..L..I.6t..%..8..G.'..B+........C..9ty..X..+..[.&&....[.(}...w.........2......./..5.x{j.^y.....\|.v...w......._k.,=c.a{..v.w....Y>....(=..U.5'J/v.L.k...........{.A._X...K'.4>o.....B4X.5..I...@ .i.....muS{.5...JcP..~.3.FC....ap.nO...q.y......M...pL]....x.{x.......x3E?...=.+.v.@.o.\q_....^...j....,.#D.6..1:<...f.9P.i.......a........Z....K.4..Rh....8U1(..?.B..}S]G.5

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (511)
Category:	downloaded
Size (bytes):	1905
Entropy (8bit):	5.5340068497697015
Encrypted:	false
SSDEEP:	48:x/nb0ux8SCnt0Wx9kF0S0Lv+TOOimGkM1O6NP:xfb0xIFf0bTO6k2P
MD5:	09A01A64397E4408E9500D332812C96F
SHA1:	00299302F8C4A89CDBBAE407A257FB633FDFF88C
SHA-256:	9E60B9F2EDE708B13A2C29ED8BD1E1B0C1EB35847824260A2B64D9093EE79E76
SHA-512:	98FD141A7422E16820AA94C8D9103830979C1FF31A37DE93D004A660F8283111618FAED02C07AEE1C55B4CA66397A4677B1389111D0BDEDAB1B5332B39A72A6C
Malicious:	false
Reputation:	low
URL:	https://cdn.medallia.com/vendor/appdynamics/adrum-xd.2aed9d091ef08efa95822e864b4554d2.html
Preview:	<!DOCTYPE html>.<html>.<head>. <script>. //./* Version 2aed9d091ef08efa95822e864b4554d2 v:4.3.2.1, c:DEVBUILD, b:9360 n:1471-4.3.2.next-build /var f,h=f\|\|(f={}),k=h.c\|\|(h.c={});k.b\|\|(k.b={});var l=f\|\|(f={}),m=l.c\|\|(l.c={});m.b\|\|(m.b={});.(function(e){(function(e){(function(e){var g=function(){function b(){}b.addEventListener=function(a,b,d){function n(){try{return d.apply(this,Array.prototype.slice.call(arguments))}catch(a){}}a.addEventListener?a.addEventListener(b,n,!1):a.attachEvent&&a.attachEvent("on"+b,n)};b.g=function(){if(b.d(window.crypto)&&b.e(window.crypto.getRandomValues)){var a=new Uint16Array(8);window.crypto.getRandomValues(a);var c=function(a){for(a=a.toString(16);4>a.length;)a="0"+a;return a};return c(a[0])+c(a[1])+."_"+c(a[2])+"_"+c(a[3])+"_"+c(a[4])+"_"+c(a[5])+c(a[6])+c(a[7])}return"xxxxxxxx_xxxx_4xxx_yxxx_xxxxxxxxxxxx".replace(/[xy]/g,function(a){var b=16Math.random()\|0;return("x"==a?b:b&3\|8).toString(16)})};b.d=function(a){return"undefined"!==typeof a&&n

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	185985
Entropy (8bit):	5.837456730002344
Encrypted:	false
SSDEEP:	3072:0ZirSx9XURyBv7Mxxd3Ic/FpZlMwwCPcgtVv2Sh5GshhW1jMbFdL1vc43zzZzbcE:eF9XURyBv7M53Ic/FvKwwCPcgtVvgazB
MD5:	D236DD44675F6AB3B44128522B884A9A
SHA1:	D9874F8A491CB3377F583C07AF1E97A375AEC083
SHA-256:	5CBD9E82BC69754FBBA72C7381A617ECA2C16E40F1E05C6695B139A0A8044279
SHA-512:	CB8F9BB96247F22F7C6B6B85AAE1B7E1790A4D61959C844A67BB5619523D215CACA5B32DCE731642F4598B01576CB9827B9CD62AF68CF83114EB02AF80322B43
Malicious:	false
Reputation:	low
URL:	https://cdn.medallia.com/react-surveys/6.21.7/main.css
Preview:	.panelMain_categoryItem{-ms-flex-align:center;align-items:center;background-color:#eaf3ff;border:none;border-radius:8px;color:#2b3449;display:-ms-flexbox;display:flex;-ms-flex-direction:row;flex-direction:row;font-size:14px;font-weight:700;min-height:48px;height:48px;-ms-flex-pack:justify;justify-content:space-between;margin-bottom:24px;padding-left:20px;padding-right:20px;text-decoration:none}@media screen and (max-width:480px){.panelMain_categoryItem{margin-bottom:16px}}@font-face{font-family:medallicons;src:url(data:application/vnd.ms-fontobject;base64,UB8AAKweAAABAAIAAAAAAAAAAAAAAAAAAAABAJABAAAAAExQAAAAAAAAAAAAAAAAAAAAAAEAAAAAAAAAf0kAqgAAAAAAAAAAAAAAAAAAAAAAAA4AaQBjAG8AbQBvAG8AbgAAAA4AUgBlAGcAdQBsAGEAcgAAABYAVgBlAHIAcwBpAG8AbgAgADEALgAwAAAADgBpAGMAbwBtAG8AbwBuAAAAAAAAAQAAAAsAgAADADBPUy8yD2AG2AAAALwAAABgY21hcNFg0PEAAAEcAAAAbGdhc3AAAAAQAAABiAAAAAhnbHlmurjCuQAAAZAAABpkaGVhZDtwd2IAABv0AAAANmhoZWElOSFPAAAcLAAAACRobXR4bVsD0AAAHFAAAABgbG9jYUcaPiQAABywAAAAMm1heHAANQKtAAAc5AAAACBuYW1lmUoJ+w

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (672)
Category:	downloaded
Size (bytes):	44897
Entropy (8bit):	5.379917659827832
Encrypted:	false
SSDEEP:	768:2YNap7hy9yxC6NHiECWWupyH5JS5GUiFndvllAlLN/9rkaUXP3:2YNFGCHbuXMaS
MD5:	5F8EC127DC5DD928EB98A2B847384A7D
SHA1:	12B6DA21579601F716826EFB0FB1F2FCA449B5CE
SHA-256:	6B4AF1BAD59B96026F537D7F4787FC221D7FBBB834766723559C92FEB4E22E35
SHA-512:	CEC2E81C68C2F0B272E39EEF439517281FC431B5752EB039403ECBE5570D8B97E569763BA442B302D9A58BBA653DE9653328783C9308D6A6540371028C969210
Malicious:	false
Reputation:	low
URL:	https://cdn.medallia.com/vendor/appdynamics/adrum/adrum.js
Preview:	;/* Version 2aed9d091ef08efa95822e864b4554d2 v:4.3.3.0, c:ee91955edc95c4f1dccace82affaa9d7c3fe7e8a, b:9316 n:1-4.3.3.next-build /(function(){new function(){if(!window.ADRUM&&!0!==window["adrum-disable"]){var h=window.ADRUM={};window["adrum-start-time"]=window["adrum-start-time"]\|\|(new Date).getTime();(function(a){(function(a){a.wd=function(){for(var a=[],b=0;b<arguments.length;b++)a[b-0]=arguments[b];for(b=0;b<a.length;b++){var c=a[b];c&&c.setUp()}}})(a.monitor\|\|(a.monitor={}))})(h\|\|(h={}));(function(a){(function(b){function g(a){return"undefined"!==typeof a&&null!==a}function e(a){return"object"==typeof a&&!b.isArray(a)&&null!==a}function c(a){return"function"==.typeof a\|\|!1}function d(a){return"string"==typeof a}function f(a,c){for(var d in c){var q=c[d];if(p(c,d)){var g=a[d];e(q)&&e(g)?f(g,q):b.isArray(g)&&b.isArray(q)?a[d]=g.concat(q):a[d]=q}}return a}function p(a,b){return Object.prototype.hasOwnProperty.call(a,b)&&g(a[b])}function q(a){return d(a)?a.replace(/^\s/,"").replace(/\

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	3745
Entropy (8bit):	5.267691115360359
Encrypted:	false
SSDEEP:	96:UPrKMbbQTJ5EtEzMSN3WaZBx4ywJRD6SfPi0dzL/PO:DabQTJ5E0N3WaZBxhaASfPi0dzTPO
MD5:	2183E73411F9B7620A9C2C8045BEFEF7
SHA1:	3EAB28210F45500E7CB73DE05E830B82DB6E151C
SHA-256:	16FB8615ADB508C670E8F88B3396B450035DB8711E2D019E7E3BA1CEDB399C96
SHA-512:	2EC5BF41DA8877DD17972818910EF03D7A34C476E33E0136B90E15497D1DDA79666A49B976C8D7067E5379C1A98696BB4D4F20837F1824B1B81FB3AE5F18A192
Malicious:	false
Reputation:	low
URL:	https://global.cdn.survey.medallia.com/3eab28210f45500e7cb73de05e830b82db6e151c
Preview:	/**UPDATE GENERAL BODY LNF/.body, html{. color: #012834;. font-family: Arial;. font-weight: normal;. font-size:13px !important;. text-align: left;. line-height: 1.6 !important;.}./BUTTON HOVER COLORS/..button_button_isPrimary:focus, .button_button_isPrimary:hover{. . background-color: #009775;. color: white;.}..button_button_isSecondary:focus, .button_button_isSecondary:hover {. background-color: #009775;. color: white;.}..questionCaption.{. font-size:13px !important;. .}...rowOption_leftCaptionContainer {. width: 15% !important;. .}..a:hover.{.color:#009775 !important;.}....layout_text.{. font-size: 13px !important;. padding: 5px 0 9px !important;. .}...textarea_textarea{. min-height: 110px;.}...anchor {. font-size: 12px !important;.}../QUESTION TEXT SIZE INCREASE**/..question_questionTitle {. font-size: 13px;. font-family: Arial;. padding: 5px 0 9px !important;. text-align: left;. line-height: 1.6 !important;.}..ques

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (550)
Category:	downloaded
Size (bytes):	47852
Entropy (8bit):	5.363325695119432
Encrypted:	false
SSDEEP:	768:2hTxv1jjzIDY/FsZHBXiQV+eFdnKaRQwWAwSJyhl+mC3/SulF:2Nxv1jGYcyBeFdnKuvbb
MD5:	4AEE3FB26FA6E2174A78A396A876404B
SHA1:	12BB9A70444CDC8CB57569960E04B0ED108E06B2
SHA-256:	DAE3BB58EF50123B2CD8483D5C0659036929E6EF8B8C2A6E4B731E5743CB971C
SHA-512:	79E9EC21C61E1C34B087A6A824A053C547B8A3FE3D212C19B43DD3327AD9D7EAE59EBF9EF989B443992B131C065727B08EA7D2E092D82DBA51AF5DBC7A299EC9
Malicious:	false
Reputation:	low
URL:	https://cdn.medallia.com/vendor/appdynamics/adrum-ext.2aed9d091ef08efa95822e864b4554d2.js
Preview:	;/* Version 2aed9d091ef08efa95822e864b4554d2 v:4.3.2.1, c:DEVBUILD, b:9360 n:1471-4.3.2.next-build /(function(){/... Copyright (c) 2013, AppDynamics, Inc. All rights reserved... Derivative of Google Episodes:.. Copyright 2010 Google Inc... Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License... See the source code here:. http://code.google.com/p/episodes/.*/.new function(){var g=window.ADRUM;if(g&&g.q&&!0!==window["adrum-disable"]){(function(a){(function(b){b.O=function(f){function e(a){return a.replace(/\s/g,"")===d}v

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1327x150, components 3
Category:	dropped
Size (bytes):	134427
Entropy (8bit):	7.906924833034966
Encrypted:	false
SSDEEP:	3072:/vpRnc07V9wBaj0XOHh0b0fYxL+hbA/zhSTHHEFS:rnctHumb0fYZ+hbUWHaS
MD5:	26EB5DD238CFB5B15435E1E2F7E8834E
SHA1:	15DE41A42CE4F647A5D1C5E8EA29F1913D26D6B5
SHA-256:	0428A17AA4188E61E4040807154E9ABB9852FCA26573F8C55F6F0C7DCDFC722A
SHA-512:	0DB66BAB494184B7B53B2B98C03123F67D9838020393887FE57AAB961AC058450F32BAE5CA589F77E55C7F2A4F6BB3A28470923EF54CA04AFA2D3D5C65FDAC0C
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....,Photoshop 3.0.8BIM.........H.......H.........XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Refer

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1327x150, components 3
Category:	downloaded
Size (bytes):	134427
Entropy (8bit):	7.906924833034966
Encrypted:	false
SSDEEP:	3072:/vpRnc07V9wBaj0XOHh0b0fYxL+hbA/zhSTHHEFS:rnctHumb0fYZ+hbUWHaS
MD5:	26EB5DD238CFB5B15435E1E2F7E8834E
SHA1:	15DE41A42CE4F647A5D1C5E8EA29F1913D26D6B5
SHA-256:	0428A17AA4188E61E4040807154E9ABB9852FCA26573F8C55F6F0C7DCDFC722A
SHA-512:	0DB66BAB494184B7B53B2B98C03123F67D9838020393887FE57AAB961AC058450F32BAE5CA589F77E55C7F2A4F6BB3A28470923EF54CA04AFA2D3D5C65FDAC0C
Malicious:	false
Reputation:	low
URL:	https://global.cdn.survey.medallia.com/15de41a42ce4f647a5d1c5e8ea29f1913d26d6b5
Preview:	......JFIF.....H.H.....,Photoshop 3.0.8BIM.........H.......H.........XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Refer

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 536 x 243, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17287
Entropy (8bit):	7.89830633795694
Encrypted:	false
SSDEEP:	384:sqcb7CY8nNopQoQ2HVqynzcjzzlfaYjX0dyXepqPVeYd5+:ib70nNGtHLnAj3lfasXqA03u5+
MD5:	5E8B4E85202428BD6288D3D8BA63C9DE
SHA1:	A938A40FB1E58749CDB6A74AD5E2A74452EAD2F7
SHA-256:	B719A2E801D5BA7F0223CAA5BB1A6C7F0795941A7B2F857825F91C6573C91B51
SHA-512:	A1A1C8B32C60DDED9D712AA2CE9A06801D572624F6F284EF625FF9F6F2C67F8B471973CFD40416A8A4A1E736A09ADD9437C813E2DF98C310752A9D78316BEE4D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............ox....sRGB.......@.IDATx....]E..O.9...N:+!........ I.a......y.y..2f....QG.$..Q...Fgqt.B$.^.&.E. ;I..l.N...........zO.._.......W...w...+.a!.. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .....GZ.......V+.,\|.k\.UX.o..E~....p. ...(...q[4./3.YcS.JwB:....0.]7.9.0T....{z{O..t..m.B8z.UY;,..i.3K;..P9S.\|.#..B........s.W...ZV..kM.q.Nl....3.T.3.P.8...h..Bh..#..)..^L?.o../&DB..k...^{.....o.R.........II..jW<-.z,...n.o.gM.q.^......p.p...U.&.^...!)..`..F..}.3..........8..70.){S...A,6..q.#.t.#=.:.B.x..q7..{8......B..L..I.6t..%..8..G.'..B+........C..9ty..X..+..[.&&....[.(}...w.........2......./..5.x{j.^y.....\|.v...w......._k.,=c.a{..v.w....Y>....(=..U.5'J/v.L.k...........{.A._X...K'.4>o.....B4X.5..I...@ .i.....muS{.5...JcP..~.3.FC....ap.nO...q.y......M...pL]....x.{x.......x3E?...=.+.v.@.o.\q_....^...j....,.#D.6..1:<...f.9P.i.......a........Z....K.4..Rh....8U1(..?.B..}S]G.5

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32056)
Category:	downloaded
Size (bytes):	883319
Entropy (8bit):	5.318647017360383
Encrypted:	false
SSDEEP:	12288:EkLvo25jRJhFVJza3PuBmTmjQTSAWN13mj4rqKWyS:EkLvo25jbhvha3PfTmjEWZ2X
MD5:	6763D39E6B07A1C8430FDF64E455071F
SHA1:	2082886BEB8544DEC7C0D8B9BA42035E23A2B04A
SHA-256:	1FDC77E5F214B1F443BC863C850BE44CA444B8B1BF701AD228D9EE46D190DE6A
SHA-512:	20D78814B8A0B054DEF9524FA6C72B7981D55BDB0F9B72605309272E2E4E6826BD5EF0C1812991F9AAE3DEE5023026A9106A205025D2130FBCF1A00C22E20B31
Malicious:	false
Reputation:	low
URL:	https://cdn.medallia.com/react-surveys/6.21.7/main.js
Preview:	webpackJsonp([1],[function(e,t,n){"use strict";function r(e){return e&&e.__esModule?e:{default:e}}var o=n(1),i=r(o),a=n(49),u=r(a),l=n(959),s=r(l),c=n(764),d=r(c),f=n(963),p=r(f),h=n(895),v=r(h),y=n(891),m=r(y),b=n(917),g=r(b),_=n(383),O=r(_),E=n(376),T=r(E),w=n(388),S=n(237),C=n(386),P=n(138),I=n(36),M=n(4),A=n(174),D=n(20),x=n(389);n(928);var k=n(98),R=r(k),N=n(949),L=r(N),j=n(139),F=r(j);document.addEventListener("DOMContentLoaded",function(){var e=(0,p.default)(window.surveyData\|\|{}),t=(0,s.default)(e),n=new v.default,r=new m.default,o=n.normalize({rawData:e,questionBlocks:t});o=r.normalize({rawData:e,normalizedData:o}),o.pageSettings=(0,w.getInitialState)(e),o.surveyStatus=(0,S.getInitialState)();var a=(0,D.createProvider)(t,e.cookieNotice);o.cookieBanner=(0,C.getInitialState)(a.cookieBanner);var l=(0,g.default)(o);(0,M.setFeatureFlags)(window.surveyData),(0,I.defineTranslations)(window.surveyData.translations),R.default.setStore(l).setFieldsService(L.default),L.default.setStore(l

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (927)
Category:	downloaded
Size (bytes):	2108
Entropy (8bit):	5.011139455674202
Encrypted:	false
SSDEEP:	48:P6mwNCza2zm01lCRC/r97lL3Bk1bO2E0EzC/JBwj/ykKfyDlT546NZCjaJCqJPY:uCe2FBpbBUO2E0EzC/Yj/yTyBT546UF
MD5:	4F7A35FFFEE2156D95149AC9DFEE5368
SHA1:	BF462AFE26A7D27226F89FF85EE31DD12C9D10ED
SHA-256:	54B64E8CEB89640D30DCA53A46AC00157621C6CF5D3777D3537E3661DFC6EFE3
SHA-512:	980A3B2753F21284E619D8906B83340A5EB3CF86AA137308BDCFCDF8DA578AB2785F832A085F861CFA942EE7BFB699FF76AA2C09524211F01DCB72C3FE1CA825
Malicious:	false
Reputation:	low
URL:	https://global.cdn.survey.medallia.com/bf462afe26a7d27226f89ff85ee31dd12c9d10ed
Preview:	header {. border-bottom-color: #dae0ea;. background-color: #ffffff;.}.html {. background: #ffffff;.}.body, .layout_answer, .dropdown_dropdownContainer {. background: none;.}..button_button_isPrimary {. color: #000000;.}..questionCaption {. font-size: 12px;.}..rowOption_topCaption {. font-size: 12px;.}..layout_text {. font-size: 12px;.}..button_button_isSecondary {. color: #000000;.}..anchor {. font-size: 12px;.}..progressbar_progressBarIndicator {. background-color: #009775;.}..layout_answers {. font-size: 11px;.}..dropdown_dropdownTitle {. height: auto;.}..indicatorCheckbox_indicatorCheckboxContainer {. font-size: 18px;.}..button_button_isPrimary, .button_button_isPrimary:focus, .button_button_isPrimary:hover {. background-color: #dddddd;.}..dropdown_dropdownSelector:focus, .dropdown_dropdownSelector:hover, .hasNoTouch .option_input:focus+.option_optionContainer, .hasNoTouch .option_input:hover+.option_optionContainer, .hasNoTouch .cellOption_input:focus+.cellOption_ind

Total Packets: 897
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 5, 2023 14:50:27.802889109 CEST	49677	443	192.168.2.6	20.189.173.14
Oct 5, 2023 14:50:27.927836895 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:27.927853107 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:28.240353107 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:32.521339893 CEST	49706	443	192.168.2.6	142.250.72.174
Oct 5, 2023 14:50:32.521392107 CEST	443	49706	142.250.72.174	192.168.2.6
Oct 5, 2023 14:50:32.521469116 CEST	49706	443	192.168.2.6	142.250.72.174
Oct 5, 2023 14:50:32.522243977 CEST	49707	443	192.168.2.6	142.250.188.237
Oct 5, 2023 14:50:32.522289991 CEST	443	49707	142.250.188.237	192.168.2.6
Oct 5, 2023 14:50:32.522346020 CEST	49707	443	192.168.2.6	142.250.188.237
Oct 5, 2023 14:50:32.522962093 CEST	49707	443	192.168.2.6	142.250.188.237
Oct 5, 2023 14:50:32.522972107 CEST	443	49707	142.250.188.237	192.168.2.6
Oct 5, 2023 14:50:32.523747921 CEST	49706	443	192.168.2.6	142.250.72.174
Oct 5, 2023 14:50:32.523770094 CEST	443	49706	142.250.72.174	192.168.2.6
Oct 5, 2023 14:50:32.835545063 CEST	443	49707	142.250.188.237	192.168.2.6
Oct 5, 2023 14:50:32.835760117 CEST	49707	443	192.168.2.6	142.250.188.237
Oct 5, 2023 14:50:32.835773945 CEST	443	49707	142.250.188.237	192.168.2.6
Oct 5, 2023 14:50:32.837115049 CEST	443	49707	142.250.188.237	192.168.2.6
Oct 5, 2023 14:50:32.837179899 CEST	49707	443	192.168.2.6	142.250.188.237
Oct 5, 2023 14:50:32.838177919 CEST	49707	443	192.168.2.6	142.250.188.237
Oct 5, 2023 14:50:32.838227987 CEST	443	49707	142.250.188.237	192.168.2.6
Oct 5, 2023 14:50:32.838378906 CEST	49707	443	192.168.2.6	142.250.188.237
Oct 5, 2023 14:50:32.838383913 CEST	443	49707	142.250.188.237	192.168.2.6
Oct 5, 2023 14:50:32.843523979 CEST	443	49706	142.250.72.174	192.168.2.6
Oct 5, 2023 14:50:32.843852997 CEST	49706	443	192.168.2.6	142.250.72.174
Oct 5, 2023 14:50:32.843864918 CEST	443	49706	142.250.72.174	192.168.2.6
Oct 5, 2023 14:50:32.844588041 CEST	443	49706	142.250.72.174	192.168.2.6
Oct 5, 2023 14:50:32.844664097 CEST	49706	443	192.168.2.6	142.250.72.174
Oct 5, 2023 14:50:32.845607996 CEST	443	49706	142.250.72.174	192.168.2.6
Oct 5, 2023 14:50:32.845660925 CEST	49706	443	192.168.2.6	142.250.72.174
Oct 5, 2023 14:50:32.846930981 CEST	49706	443	192.168.2.6	142.250.72.174
Oct 5, 2023 14:50:32.847009897 CEST	443	49706	142.250.72.174	192.168.2.6
Oct 5, 2023 14:50:32.847106934 CEST	49706	443	192.168.2.6	142.250.72.174
Oct 5, 2023 14:50:32.847115040 CEST	443	49706	142.250.72.174	192.168.2.6
Oct 5, 2023 14:50:32.970470905 CEST	49707	443	192.168.2.6	142.250.188.237
Oct 5, 2023 14:50:32.970474005 CEST	49706	443	192.168.2.6	142.250.72.174
Oct 5, 2023 14:50:33.161451101 CEST	443	49706	142.250.72.174	192.168.2.6
Oct 5, 2023 14:50:33.161742926 CEST	443	49706	142.250.72.174	192.168.2.6
Oct 5, 2023 14:50:33.161807060 CEST	49706	443	192.168.2.6	142.250.72.174
Oct 5, 2023 14:50:33.162163973 CEST	49706	443	192.168.2.6	142.250.72.174
Oct 5, 2023 14:50:33.162184000 CEST	443	49706	142.250.72.174	192.168.2.6
Oct 5, 2023 14:50:33.217533112 CEST	443	49707	142.250.188.237	192.168.2.6
Oct 5, 2023 14:50:33.217658043 CEST	443	49707	142.250.188.237	192.168.2.6
Oct 5, 2023 14:50:33.217717886 CEST	49707	443	192.168.2.6	142.250.188.237
Oct 5, 2023 14:50:33.218360901 CEST	49707	443	192.168.2.6	142.250.188.237
Oct 5, 2023 14:50:33.218388081 CEST	443	49707	142.250.188.237	192.168.2.6
Oct 5, 2023 14:50:34.192807913 CEST	49708	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:34.192846060 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:34.192924023 CEST	49708	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:34.193574905 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:34.193660021 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:34.193710089 CEST	49708	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:34.193727016 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:34.193763971 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:34.193981886 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:34.194013119 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:34.802838087 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:34.803205013 CEST	49708	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:34.803231955 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:34.804486036 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:34.804552078 CEST	49708	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:34.805661917 CEST	49708	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:34.805732012 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:34.806011915 CEST	49708	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:34.806022882 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:34.817868948 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:34.818109989 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:34.818137884 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:34.819618940 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:34.819813967 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:34.820080042 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:34.820182085 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:34.847196102 CEST	49708	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:34.863250017 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:34.863272905 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:34.910012007 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:35.025594950 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:35.025623083 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:35.025718927 CEST	49708	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:35.025748014 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:35.025764942 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:35.025818110 CEST	49708	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:35.025824070 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:35.025876045 CEST	49708	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:35.202502012 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.202538967 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.202601910 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.202821970 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.202851057 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.202898979 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.203124046 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.203145981 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.203213930 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.203325033 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.203353882 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.203418970 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.203496933 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.203507900 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.203567982 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.203854084 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.203875065 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.204106092 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.204117060 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.204849005 CEST	49716	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.204857111 CEST	443	49716	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.204902887 CEST	49716	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.205312967 CEST	49717	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.205322981 CEST	443	49717	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.205383062 CEST	49717	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.205836058 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.205849886 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.206001043 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.206017971 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.206172943 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.206187010 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.206506014 CEST	49718	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.206532955 CEST	443	49718	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.206583023 CEST	49718	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.206768036 CEST	49719	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.206792116 CEST	443	49719	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.206840038 CEST	49719	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.207089901 CEST	49716	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.207108974 CEST	443	49716	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.207259893 CEST	49719	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.207272053 CEST	443	49719	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.207418919 CEST	49718	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.207431078 CEST	443	49718	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.207571030 CEST	49717	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.207586050 CEST	443	49717	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.217356920 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:35.217426062 CEST	49708	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:35.217432022 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:35.217483044 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:35.217484951 CEST	49708	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:35.217495918 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:35.217533112 CEST	49708	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:35.217556000 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:35.217613935 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:35.217617035 CEST	49708	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:35.217648983 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:35.217709064 CEST	49708	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:35.217715025 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:35.217726946 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:35.217751026 CEST	49708	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:35.217784882 CEST	49708	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:35.217910051 CEST	49708	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:35.217919111 CEST	443	49708	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:35.577505112 CEST	443	49716	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.577961922 CEST	49716	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.577985048 CEST	443	49716	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.578999043 CEST	443	49716	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.579068899 CEST	49716	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.580631971 CEST	49716	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.580785990 CEST	443	49716	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.580879927 CEST	49716	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.580888987 CEST	443	49716	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.583229065 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.583507061 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.583525896 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.584621906 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.584697962 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.584815979 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.585078001 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.585088015 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.585875988 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.585943937 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.586216927 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.586224079 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.586225986 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.586282969 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.587399006 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.587495089 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.587593079 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.587600946 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.590622902 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.592782974 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.592808008 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.593849897 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.594429970 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.594429970 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.594500065 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.594835043 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.594845057 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.627274036 CEST	49716	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.627276897 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.627274036 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.637851000 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.638089895 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.638106108 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.639520884 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.639590025 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.640045881 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.640186071 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.640228987 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.642785072 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.642976999 CEST	443	49717	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.645060062 CEST	49717	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.645077944 CEST	443	49717	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.646939993 CEST	443	49717	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.647020102 CEST	49717	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.647583961 CEST	49717	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.647742033 CEST	443	49717	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.647964954 CEST	49717	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.648086071 CEST	443	49719	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.648363113 CEST	49719	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.648379087 CEST	443	49719	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.649722099 CEST	443	49719	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.649801016 CEST	49719	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.650907993 CEST	49719	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.651070118 CEST	443	49719	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.651087046 CEST	49719	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.665668011 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.665785074 CEST	443	49718	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.665956974 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.665982008 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.666152000 CEST	49718	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.666177034 CEST	443	49718	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.667661905 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.667690039 CEST	443	49718	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.667726040 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.667768955 CEST	49718	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.668184042 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.668303013 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.668318987 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.669512987 CEST	49718	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.669593096 CEST	443	49718	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.669750929 CEST	49718	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.669759035 CEST	443	49718	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.682449102 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.688807011 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.688819885 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.688920021 CEST	49717	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.688935041 CEST	443	49717	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.694446087 CEST	443	49719	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.705637932 CEST	49719	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.705646992 CEST	443	49719	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.708332062 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.708340883 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.719990969 CEST	49718	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.736682892 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.737175941 CEST	49717	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.751674891 CEST	49719	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.751935005 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.873703003 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.873827934 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.894198895 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.894215107 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.894229889 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.894364119 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.894391060 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.894396067 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.894406080 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.894426107 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.894464970 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.894503117 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.894512892 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.894512892 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.894520998 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.894531965 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.894566059 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.902622938 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.902652025 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.902658939 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.902687073 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.902720928 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.902756929 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.902781963 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.902800083 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.902831078 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.904146910 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.918862104 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.918893099 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.918958902 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.918970108 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.919023991 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.919080019 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.919102907 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.919157028 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.919167995 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.919198990 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.925580025 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.925612926 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.925642014 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.925661087 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.925681114 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.925683022 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.925709009 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.925714016 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.925725937 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.925739050 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.925761938 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.927248955 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.927278996 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.927385092 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.927385092 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.927397966 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.928772926 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.937968016 CEST	443	49718	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.938025951 CEST	443	49718	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.938077927 CEST	49718	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.938098907 CEST	443	49718	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.938127995 CEST	443	49718	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.938179970 CEST	49718	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.938932896 CEST	443	49716	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.938941002 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.938971996 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.938981056 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.938998938 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.939007998 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.939014912 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.939028025 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.939054966 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.939069986 CEST	443	49716	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.939083099 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.939116001 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.939155102 CEST	443	49716	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.939186096 CEST	49716	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.939201117 CEST	49716	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.939892054 CEST	49718	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.939907074 CEST	443	49718	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.942562103 CEST	443	49719	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.942622900 CEST	443	49719	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.942687988 CEST	49719	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.944505930 CEST	49719	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:35.944519997 CEST	443	49719	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:35.947406054 CEST	49716	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.947417974 CEST	443	49716	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.950217962 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.950261116 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.950284004 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.950299025 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.950303078 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.950325012 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.950350046 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.963428020 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.963494062 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.963574886 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.963576078 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.963607073 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:35.963665962 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.970396996 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:35.985615015 CEST	443	49717	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.985677958 CEST	443	49717	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.985716105 CEST	443	49717	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.985749960 CEST	49717	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.985764027 CEST	443	49717	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.985791922 CEST	443	49717	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:35.985820055 CEST	49717	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.985841990 CEST	49717	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.990459919 CEST	49717	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:35.990479946 CEST	443	49717	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:36.001270056 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.035331011 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.035361052 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.035444975 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.035470009 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.035470009 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.035475969 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.035495996 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.035517931 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.035522938 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.035541058 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.035552025 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.035568953 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.035582066 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.035614014 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.046479940 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.046540976 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.046600103 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.046611071 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.046653986 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.046653986 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.060111046 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.060198069 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.060281038 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.060281038 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.060316086 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.064165115 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.064218044 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.064277887 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.064301014 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.064317942 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.064341068 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.065505981 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.065535069 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.065582037 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.065582037 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.065599918 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.065620899 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.065629959 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.065645933 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.065664053 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.075182915 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.075227022 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.075323105 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.075323105 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.075331926 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.075407028 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.081727982 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.081789017 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.081875086 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.081876040 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.081907034 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.081954956 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.082633972 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.082684040 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.082720995 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.082750082 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.082777977 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.086788893 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.086810112 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.086865902 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.086875916 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.086905956 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.094258070 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.094302893 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.094348907 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.094357967 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.094384909 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.094403982 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.101916075 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.101938009 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.102212906 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.102232933 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.102417946 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.107270956 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.107292891 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.107398987 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.107454062 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.107464075 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.107477903 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.107503891 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.107510090 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.107517958 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.107558966 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.107574940 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.108531952 CEST	49711	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.108550072 CEST	443	49711	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.110547066 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.110594988 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.110627890 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.110639095 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.110665083 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.110708952 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.121084929 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.121134043 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.121189117 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.121197939 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.121227980 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.121243954 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.137197018 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.137253046 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.137278080 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.137290955 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.137335062 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.137348890 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.157474995 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.157782078 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.157819033 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.157855034 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.157862902 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.157890081 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.157908916 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.157922983 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.157965899 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.158402920 CEST	49712	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.158420086 CEST	443	49712	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.181466103 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.181543112 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.181664944 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.181664944 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.181694031 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.182451963 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.184669971 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.184695005 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.184737921 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.184767962 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.184803963 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.199867010 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.199934006 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.199976921 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.199991941 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.200007915 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.200032949 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.201133966 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.201162100 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.202481985 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.202506065 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.202872038 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.204145908 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.204161882 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.204232931 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.204248905 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.204294920 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.220962048 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.221009970 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.221057892 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.221075058 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.221223116 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.221223116 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.224360943 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.224410057 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.224649906 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.224668026 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.224725962 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.225368977 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.225394011 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.225435019 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.225445986 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.225481987 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.225501060 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.235059977 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.235157967 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.237078905 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.237137079 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.237152100 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.237181902 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.237198114 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.237219095 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.242614031 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.242660999 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.242767096 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.242767096 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.242777109 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.243330956 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.256928921 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.256947041 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.257049084 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.257056952 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.258090019 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.258131981 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.258171082 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.258177042 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.258215904 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.265101910 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.265141964 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.265362978 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.265362978 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.265391111 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.266499996 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.272622108 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.272677898 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.272716045 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.272726059 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.272749901 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.278227091 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.278309107 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.278323889 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.278378963 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.278453112 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.278508902 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.278635025 CEST	49713	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.278665066 CEST	443	49713	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.280389071 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.280405045 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.280474901 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.280484915 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.280522108 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.283855915 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.283876896 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.283997059 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.283997059 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.284008026 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.284400940 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.286201000 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.286283016 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.286300898 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.286339045 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.299490929 CEST	49715	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.299505949 CEST	443	49715	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.300873995 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.300895929 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.301006079 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.301006079 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.301017046 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.302458048 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.312913895 CEST	49720	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.312999964 CEST	443	49720	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.313077927 CEST	49720	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.313416958 CEST	49720	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.313441038 CEST	443	49720	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.319400072 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.319431067 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.319530964 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.319530964 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.319540977 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.320219994 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.340249062 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.340282917 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.340388060 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.340388060 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.340399027 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.340481043 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.354032993 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.354063988 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.354155064 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.354155064 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.354166985 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.354454994 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.366357088 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.366383076 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.366580009 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.366591930 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.366739988 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.379360914 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.379390001 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.379478931 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.379479885 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.379492044 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.382457972 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.390983105 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.391015053 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.392023087 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.392034054 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.392405033 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.403249979 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.403276920 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.403386116 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.403394938 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.403441906 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.416193008 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.416218042 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.416294098 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.416306973 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.416357994 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.427839041 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.427869081 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.427993059 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.428010941 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.428071976 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.438754082 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.438780069 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.438894033 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.438903093 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.438949108 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.448421955 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.448450089 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.448527098 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.448535919 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.448589087 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.458554983 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.458614111 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.458717108 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.458725929 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.458775997 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.467601061 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.467634916 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.467706919 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.467715025 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.467742920 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.467763901 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.477181911 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.477212906 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.477272034 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.477278948 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.477309942 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.477333069 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.485619068 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.485654116 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.485714912 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.485723019 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.485761881 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.485778093 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.492595911 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.492620945 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.492701054 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.492711067 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.492753029 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.498919010 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.498948097 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.498994112 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.499006987 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.499037981 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.499068022 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.505659103 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.505687952 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.505765915 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.505774021 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.505822897 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.512701035 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.512727022 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.512792110 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.512799978 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.512844086 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.519164085 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.519186974 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.519243956 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.519253969 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.519294977 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.524919033 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.524936914 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.524998903 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.525007963 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.525053024 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.531090021 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.531114101 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.531192064 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.531202078 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.531248093 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.536668062 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.536689043 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.536747932 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.536757946 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.536784887 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.536802053 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.542643070 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.542671919 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.542712927 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.542720079 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.542761087 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.542773008 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.549005985 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.549056053 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.549084902 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.549101114 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.549119949 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.549139023 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.554466009 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.554497957 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.554574966 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.554605007 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.554639101 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.554653883 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.559499979 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.559515953 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.559600115 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.559613943 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.559663057 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.564934969 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.564959049 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.565037012 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.565046072 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.565089941 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.569820881 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.569838047 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.569902897 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.569911957 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.569938898 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.569952011 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.575012922 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.575027943 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.575099945 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.575109005 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.575151920 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.580563068 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.580578089 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.580645084 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.580653906 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.580698967 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.585592985 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.585608959 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.585681915 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.585690975 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.585736036 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.590156078 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.590172052 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.590244055 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.590253115 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.590297937 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.595017910 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.595032930 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.595092058 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.595101118 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.595153093 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.600130081 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.600152016 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.600212097 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.600219011 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.600251913 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.600271940 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.604826927 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.604841948 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.604897022 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.604906082 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.604948044 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.609050035 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.609071016 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.609143972 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.609153032 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.609209061 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.612492085 CEST	443	49720	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.612752914 CEST	49720	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.612814903 CEST	443	49720	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.613198042 CEST	443	49720	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.613543987 CEST	49720	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.613606930 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.613630056 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.613646984 CEST	443	49720	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.613668919 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.613677979 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.613712072 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.613729954 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.613785982 CEST	49720	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.617681026 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.617696047 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.617770910 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.617779970 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.617822886 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.622081041 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.622095108 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.622165918 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.622174978 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.622217894 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.626697063 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.626725912 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.626789093 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.626796961 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.626811028 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.626836061 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.630258083 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.630291939 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.630359888 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.630366087 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.630389929 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.630403996 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.630453110 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.630498886 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.630700111 CEST	49714	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.630717039 CEST	443	49714	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.654454947 CEST	443	49720	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.923141956 CEST	443	49720	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.923166990 CEST	443	49720	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.923181057 CEST	443	49720	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.923264980 CEST	49720	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.923316956 CEST	443	49720	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.923378944 CEST	49720	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.932414055 CEST	49721	443	192.168.2.6	142.250.217.132
Oct 5, 2023 14:50:36.932451963 CEST	443	49721	142.250.217.132	192.168.2.6
Oct 5, 2023 14:50:36.932565928 CEST	49721	443	192.168.2.6	142.250.217.132
Oct 5, 2023 14:50:36.933197975 CEST	49721	443	192.168.2.6	142.250.217.132
Oct 5, 2023 14:50:36.933214903 CEST	443	49721	142.250.217.132	192.168.2.6
Oct 5, 2023 14:50:36.943840027 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:36.943877935 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:36.943958044 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:36.944174051 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:36.944190025 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:36.947683096 CEST	443	49720	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.947699070 CEST	443	49720	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.947767019 CEST	49720	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:36.947777987 CEST	443	49720	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:36.947818041 CEST	49720	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:37.062998056 CEST	443	49720	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:37.063052893 CEST	443	49720	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:37.063093901 CEST	443	49720	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:37.063363075 CEST	49720	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:37.063363075 CEST	49720	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:37.063412905 CEST	49720	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:37.063430071 CEST	443	49720	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:37.240761042 CEST	443	49721	142.250.217.132	192.168.2.6
Oct 5, 2023 14:50:37.241061926 CEST	49721	443	192.168.2.6	142.250.217.132
Oct 5, 2023 14:50:37.241080999 CEST	443	49721	142.250.217.132	192.168.2.6
Oct 5, 2023 14:50:37.242141008 CEST	443	49721	142.250.217.132	192.168.2.6
Oct 5, 2023 14:50:37.242217064 CEST	49721	443	192.168.2.6	142.250.217.132
Oct 5, 2023 14:50:37.243334055 CEST	49721	443	192.168.2.6	142.250.217.132
Oct 5, 2023 14:50:37.243396044 CEST	443	49721	142.250.217.132	192.168.2.6
Oct 5, 2023 14:50:37.249471903 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.249674082 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.249701023 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.250004053 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.250333071 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.250391006 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.250547886 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.284049988 CEST	49721	443	192.168.2.6	142.250.217.132
Oct 5, 2023 14:50:37.284060955 CEST	443	49721	142.250.217.132	192.168.2.6
Oct 5, 2023 14:50:37.294450045 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.330895901 CEST	49721	443	192.168.2.6	142.250.217.132
Oct 5, 2023 14:50:37.536600113 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:37.536741972 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:37.549365044 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.574256897 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.574278116 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.574487925 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.574515104 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.574703932 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.604243040 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.604262114 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.604594946 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.604655027 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.645101070 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.714044094 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.714062929 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.714173079 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.714219093 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.714293003 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.739312887 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.739331007 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.739435911 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.739456892 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.739517927 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.758490086 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.758510113 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.758629084 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.758647919 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.758707047 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.774049997 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.774065971 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.774142027 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.774159908 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.774210930 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.850963116 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:37.859685898 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.859703064 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.859930038 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.859994888 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.860071898 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.875185013 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.875205040 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.875379086 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.875401020 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.875447989 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.877247095 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.877311945 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.877321005 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.877331972 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:37.877370119 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.878112078 CEST	49722	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:37.878132105 CEST	443	49722	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:38.116863012 CEST	49723	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:38.116913080 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.117032051 CEST	49723	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:38.118402004 CEST	49723	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:38.118421078 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.119697094 CEST	49724	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:38.119745970 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.119843960 CEST	49724	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:38.120381117 CEST	49724	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:38.120400906 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.282150984 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:38.282181978 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:38.282238007 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:38.282887936 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:38.282898903 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:38.417870045 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.418215990 CEST	49723	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:38.418236017 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.418606997 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.419178963 CEST	49723	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:38.419239044 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.419389963 CEST	49723	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:38.428685904 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.428977966 CEST	49724	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:38.429013968 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.429387093 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.429914951 CEST	49724	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:38.429982901 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.430063963 CEST	49724	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:38.462443113 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.470453024 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.588187933 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:38.588504076 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:38.588520050 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:38.589396954 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:38.589484930 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:38.589965105 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:38.590015888 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:38.590097904 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:38.590104103 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:38.639919043 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:38.712892056 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.733325958 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.733345032 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.733436108 CEST	49723	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:38.733464003 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.733515024 CEST	49723	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:38.758040905 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.758064032 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.758133888 CEST	49723	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:38.758142948 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.799087048 CEST	49723	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:38.827563047 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.827639103 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.827666044 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.827872038 CEST	49724	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:38.827948093 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.828007936 CEST	49724	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:38.832220078 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.837285995 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.837392092 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.837481022 CEST	49724	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:38.837500095 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.837558985 CEST	49724	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:38.842242956 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.847304106 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.847389936 CEST	49724	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:38.847405910 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.852333069 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.852415085 CEST	49724	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:38.852427959 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.852581978 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.852639914 CEST	49724	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:38.853032112 CEST	49724	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:38.853063107 CEST	443	49724	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:38.870198965 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.870261908 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.870296955 CEST	49723	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:38.870332956 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.870351076 CEST	49723	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:38.874186039 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.874242067 CEST	49723	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:38.874260902 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.874275923 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.874296904 CEST	49723	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:38.874314070 CEST	49723	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:38.874806881 CEST	49723	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:38.874821901 CEST	443	49723	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.888016939 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:38.913069963 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:38.913083076 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:38.913094997 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:38.913294077 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:38.913321018 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:38.913376093 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:38.930847883 CEST	49727	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:38.930881977 CEST	443	49727	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.930968046 CEST	49727	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:38.931518078 CEST	49727	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:38.931528091 CEST	443	49727	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:38.943105936 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:38.943118095 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:38.943160057 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:38.943188906 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:38.943200111 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:38.943207979 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:38.943253040 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.055296898 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.055318117 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.055532932 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.055553913 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.055600882 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.081089973 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.081110954 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.081187963 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.081217051 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.081258059 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.100615025 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.100629091 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.100708961 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.100718021 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.100760937 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.116424084 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.116437912 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.116534948 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.116544962 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.116586924 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.200227022 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.200248957 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.200333118 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.200360060 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.200404882 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.207983971 CEST	443	49698	173.222.162.64	192.168.2.6
Oct 5, 2023 14:50:39.208101988 CEST	49698	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:39.215790033 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.215806007 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.215902090 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.215912104 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.215949059 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.217937946 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.217994928 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.218002081 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.218014002 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.218035936 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.218066931 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.218211889 CEST	49725	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.218230009 CEST	443	49725	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.231424093 CEST	443	49727	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:39.236618996 CEST	49727	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:39.236628056 CEST	443	49727	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:39.236994028 CEST	443	49727	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:39.237481117 CEST	49727	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:39.237541914 CEST	443	49727	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:39.237663984 CEST	49727	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:39.278461933 CEST	443	49727	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:39.509341955 CEST	49728	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.509391069 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.509457111 CEST	49728	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.509896994 CEST	49728	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.509917974 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.552261114 CEST	443	49727	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:39.552288055 CEST	443	49727	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:39.552369118 CEST	443	49727	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:39.552376986 CEST	49727	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:39.552429914 CEST	49727	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:39.593401909 CEST	49727	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:39.593420029 CEST	443	49727	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:39.822122097 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.850960016 CEST	49728	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.850986004 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.854635954 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.854729891 CEST	49728	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.855258942 CEST	49728	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.855406046 CEST	49728	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.855446100 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.900825024 CEST	49728	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:39.900834084 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:39.943368912 CEST	49728	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:40.122236967 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:40.122498989 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:40.122555017 CEST	49728	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:40.122577906 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:40.126816988 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:40.126869917 CEST	49728	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:40.126877069 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:40.131858110 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:40.131933928 CEST	49728	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:40.131942034 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:40.136795044 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:40.136857986 CEST	49728	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:40.136864901 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:40.141796112 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:40.141865015 CEST	49728	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:40.141875029 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:40.146950960 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:40.147021055 CEST	49728	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:40.147028923 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:40.147185087 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:40.147236109 CEST	49728	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:40.175601959 CEST	49729	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:40.175632000 CEST	443	49729	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:40.175697088 CEST	49729	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:40.176615953 CEST	49729	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:40.176630020 CEST	443	49729	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:40.178802013 CEST	49728	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:40.178817034 CEST	443	49728	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:40.715213060 CEST	443	49729	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:40.715488911 CEST	49729	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:40.715502024 CEST	443	49729	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:40.716932058 CEST	443	49729	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:40.717001915 CEST	49729	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:40.718105078 CEST	49729	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:40.718179941 CEST	443	49729	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:40.718365908 CEST	49729	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:40.718372107 CEST	443	49729	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:40.718417883 CEST	49729	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:40.718470097 CEST	443	49729	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:40.767498016 CEST	49729	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:41.070812941 CEST	443	49729	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:41.070950985 CEST	443	49729	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:41.071255922 CEST	49729	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:41.071446896 CEST	49729	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:41.071466923 CEST	443	49729	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:41.225804090 CEST	49730	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:41.225842953 CEST	443	49730	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:41.225922108 CEST	49730	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:41.226521969 CEST	49730	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:41.226532936 CEST	443	49730	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:41.759568930 CEST	443	49730	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:41.759928942 CEST	49730	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:41.759963989 CEST	443	49730	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:41.761007071 CEST	443	49730	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:41.761086941 CEST	49730	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:41.761439085 CEST	49730	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:41.761502028 CEST	443	49730	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:41.761574984 CEST	49730	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:41.761583090 CEST	443	49730	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:41.814474106 CEST	49730	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:41.939116001 CEST	443	49730	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:41.939192057 CEST	443	49730	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:41.939450979 CEST	49730	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:41.940193892 CEST	49730	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:41.940216064 CEST	443	49730	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:46.934602022 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:46.951813936 CEST	49731	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:46.951864958 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:46.951963902 CEST	49731	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:46.952418089 CEST	49731	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:46.952438116 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:46.978451014 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.146748066 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.146823883 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.146846056 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.146922112 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:47.146945953 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.146981001 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.146991968 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:47.147008896 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.147027969 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.147037029 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:47.147054911 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.147064924 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:47.147094965 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:47.251751900 CEST	443	49721	142.250.217.132	192.168.2.6
Oct 5, 2023 14:50:47.251811981 CEST	443	49721	142.250.217.132	192.168.2.6
Oct 5, 2023 14:50:47.251979113 CEST	49721	443	192.168.2.6	142.250.217.132
Oct 5, 2023 14:50:47.339041948 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.340476990 CEST	49731	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:47.340538025 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.341034889 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.344297886 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.344357967 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.344400883 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.344415903 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:47.344419956 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.344436884 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.344450951 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:47.344474077 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.344515085 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.344521046 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:47.344568968 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:47.344583035 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.394315958 CEST	49731	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:47.394315958 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:47.442418098 CEST	49731	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:47.442640066 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.487674952 CEST	49731	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:47.541064024 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.541194916 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:47.541205883 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:47.541256905 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:47.636614084 CEST	49709	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:47.636683941 CEST	443	49709	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:48.360208035 CEST	49721	443	192.168.2.6	142.250.217.132
Oct 5, 2023 14:50:48.360245943 CEST	443	49721	142.250.217.132	192.168.2.6
Oct 5, 2023 14:50:48.664936066 CEST	49698	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:48.665010929 CEST	49698	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:48.665436983 CEST	49732	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:48.665487051 CEST	443	49732	173.222.162.64	192.168.2.6
Oct 5, 2023 14:50:48.665589094 CEST	49732	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:48.667573929 CEST	49732	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:48.667598963 CEST	443	49732	173.222.162.64	192.168.2.6
Oct 5, 2023 14:50:48.813360929 CEST	443	49698	173.222.162.64	192.168.2.6
Oct 5, 2023 14:50:48.813389063 CEST	443	49698	173.222.162.64	192.168.2.6
Oct 5, 2023 14:50:48.907226086 CEST	49733	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:48.907279015 CEST	443	49733	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:48.907349110 CEST	49733	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:48.907922983 CEST	49733	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:48.907951117 CEST	443	49733	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:49.126048088 CEST	443	49732	173.222.162.64	192.168.2.6
Oct 5, 2023 14:50:49.126239061 CEST	49732	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:49.242908001 CEST	49732	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:49.242935896 CEST	443	49732	173.222.162.64	192.168.2.6
Oct 5, 2023 14:50:49.243237019 CEST	443	49732	173.222.162.64	192.168.2.6
Oct 5, 2023 14:50:49.243288994 CEST	49732	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:49.243835926 CEST	49732	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:49.243899107 CEST	443	49732	173.222.162.64	192.168.2.6
Oct 5, 2023 14:50:49.244054079 CEST	49732	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:49.286454916 CEST	443	49732	173.222.162.64	192.168.2.6
Oct 5, 2023 14:50:49.436506033 CEST	443	49733	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:49.436760902 CEST	49733	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:49.436783075 CEST	443	49733	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:49.437159061 CEST	443	49733	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:49.437542915 CEST	49733	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:49.437609911 CEST	443	49733	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:49.437684059 CEST	49733	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:49.437728882 CEST	49733	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:49.437763929 CEST	443	49733	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:49.474898100 CEST	443	49732	173.222.162.64	192.168.2.6
Oct 5, 2023 14:50:49.474987984 CEST	49732	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:49.475167036 CEST	443	49732	173.222.162.64	192.168.2.6
Oct 5, 2023 14:50:49.475214005 CEST	49732	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:49.475218058 CEST	443	49732	173.222.162.64	192.168.2.6
Oct 5, 2023 14:50:49.475269079 CEST	49732	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:49.513174057 CEST	49732	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:49.513221025 CEST	443	49732	173.222.162.64	192.168.2.6
Oct 5, 2023 14:50:49.513268948 CEST	49732	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:49.513295889 CEST	49732	443	192.168.2.6	173.222.162.64
Oct 5, 2023 14:50:49.787796974 CEST	443	49733	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:49.787908077 CEST	443	49733	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:49.787970066 CEST	49733	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:49.789314985 CEST	49733	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:49.789344072 CEST	443	49733	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:49.792963982 CEST	49734	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:49.793004990 CEST	443	49734	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:49.793106079 CEST	49734	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:49.793464899 CEST	49734	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:49.793473959 CEST	443	49734	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:50.146872044 CEST	443	49734	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:50.147320032 CEST	49734	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:50.147361040 CEST	443	49734	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:50.147675991 CEST	443	49734	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:50.148014069 CEST	49734	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:50.148094893 CEST	443	49734	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:50.148154020 CEST	49734	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:50.190464973 CEST	443	49734	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:50.497545004 CEST	443	49734	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:50.497642994 CEST	443	49734	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:50.497703075 CEST	49734	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:50.498284101 CEST	49734	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:50.498301983 CEST	443	49734	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:50.668824911 CEST	49735	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:50.668875933 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:50.668972015 CEST	49735	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:50.669486046 CEST	49736	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:50.669548988 CEST	443	49736	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:50.669599056 CEST	49736	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:50.669847965 CEST	49735	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:50.669867992 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:50.670166969 CEST	49736	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:50.670186043 CEST	443	49736	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:50.670717955 CEST	49737	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:50.670763969 CEST	443	49737	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:50.670809984 CEST	49737	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:50.671950102 CEST	49738	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:50.671961069 CEST	443	49738	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:50.672020912 CEST	49738	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:50.672382116 CEST	49738	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:50.672394037 CEST	443	49738	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:50.672584057 CEST	49737	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:50.672595978 CEST	443	49737	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:50.679465055 CEST	49731	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:50.722464085 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.013277054 CEST	443	49738	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:51.013614893 CEST	49738	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:51.013642073 CEST	443	49738	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:51.014102936 CEST	443	49738	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:51.014554977 CEST	49738	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:51.014637947 CEST	443	49738	146.75.93.230	192.168.2.6
Oct 5, 2023 14:50:51.018682957 CEST	443	49736	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:51.018949986 CEST	49736	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:51.018964052 CEST	443	49736	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:51.019381046 CEST	443	49736	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:51.019793034 CEST	49736	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:51.019866943 CEST	443	49736	18.154.206.79	192.168.2.6
Oct 5, 2023 14:50:51.024065018 CEST	443	49737	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:51.024266005 CEST	49737	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:51.024277925 CEST	443	49737	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:51.024630070 CEST	443	49737	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:51.024981976 CEST	49737	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:51.025052071 CEST	443	49737	151.101.25.230	192.168.2.6
Oct 5, 2023 14:50:51.063947916 CEST	49738	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:50:51.064080000 CEST	49736	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:50:51.068223000 CEST	49737	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:50:51.105802059 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.106012106 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.106044054 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.106053114 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.106110096 CEST	49731	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:51.106144905 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.106189013 CEST	49731	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:51.131458998 CEST	49735	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:51.131479025 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.132687092 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.145083904 CEST	49735	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:51.145148993 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.188494921 CEST	49735	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:51.296762943 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.296788931 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.296814919 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.296849966 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.296902895 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.296911955 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.297028065 CEST	49731	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:51.297029018 CEST	49731	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:51.297029018 CEST	49731	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:51.297091961 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.297120094 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.297137022 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.297164917 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.297197104 CEST	49731	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:51.297198057 CEST	49731	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:51.297198057 CEST	49731	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:51.352224112 CEST	49731	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:51.487545013 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.487693071 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.487731934 CEST	49731	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:51.487797976 CEST	49731	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:51.488226891 CEST	49731	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:50:51.488267899 CEST	443	49731	147.75.243.92	192.168.2.6
Oct 5, 2023 14:50:51.582695961 CEST	49739	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:51.582736969 CEST	49740	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:51.582758904 CEST	443	49739	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:51.582777977 CEST	443	49740	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:51.582834959 CEST	49739	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:51.582854986 CEST	49741	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:51.582882881 CEST	443	49741	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:51.582887888 CEST	49740	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:51.582930088 CEST	49741	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:51.583205938 CEST	49742	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:51.583218098 CEST	443	49742	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:51.583298922 CEST	49742	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:51.588640928 CEST	49739	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:51.588654995 CEST	443	49739	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:51.588807106 CEST	49741	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:51.588820934 CEST	443	49741	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:51.588865042 CEST	49740	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:51.588881016 CEST	443	49740	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:51.588963032 CEST	49742	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:51.588974953 CEST	443	49742	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.177942038 CEST	443	49741	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.178065062 CEST	49741	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.189400911 CEST	443	49739	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.189532995 CEST	49739	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.211141109 CEST	443	49740	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.211258888 CEST	49740	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.211906910 CEST	443	49742	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.211997032 CEST	49742	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.251794100 CEST	49742	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.251816988 CEST	49740	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.251835108 CEST	443	49742	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.251840115 CEST	443	49740	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.252686977 CEST	49739	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.252703905 CEST	443	49739	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.252739906 CEST	443	49742	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.252789021 CEST	49742	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.252921104 CEST	443	49740	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.252989054 CEST	49740	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.253113031 CEST	443	49739	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.253165960 CEST	49739	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.253365993 CEST	49741	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.253384113 CEST	443	49741	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.254338026 CEST	443	49741	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.254410982 CEST	49741	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.254884005 CEST	49741	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.254913092 CEST	49742	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.254967928 CEST	443	49742	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.255091906 CEST	49739	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.255114079 CEST	443	49739	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.255145073 CEST	443	49741	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.255237103 CEST	49740	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.255296946 CEST	443	49740	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.450577021 CEST	443	49739	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.450666904 CEST	49739	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.450681925 CEST	443	49739	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.450700998 CEST	443	49739	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.450728893 CEST	49739	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.450741053 CEST	49739	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.451299906 CEST	443	49742	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.451328993 CEST	443	49742	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.451364994 CEST	49742	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.451374054 CEST	443	49742	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.451386929 CEST	49742	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.451405048 CEST	443	49742	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.451443911 CEST	49742	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.451443911 CEST	49742	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.453028917 CEST	49739	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.453042030 CEST	443	49739	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.453202963 CEST	49742	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.453208923 CEST	443	49742	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.455909967 CEST	443	49740	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.455950975 CEST	443	49740	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.456008911 CEST	49740	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.456041098 CEST	443	49740	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.456113100 CEST	443	49740	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.456120014 CEST	49740	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.456120014 CEST	49740	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.456157923 CEST	49740	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.456248045 CEST	49740	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.456263065 CEST	443	49740	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.532541990 CEST	443	49741	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.532599926 CEST	443	49741	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.532655954 CEST	49741	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.532671928 CEST	443	49741	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.532708883 CEST	49741	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.532741070 CEST	49741	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.532748938 CEST	443	49741	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.532788038 CEST	49741	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.532812119 CEST	443	49741	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.532857895 CEST	49741	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.534127951 CEST	49741	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:50:52.534137964 CEST	443	49741	20.99.186.246	192.168.2.6
Oct 5, 2023 14:50:52.569864988 CEST	49743	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:52.569912910 CEST	443	49743	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:52.569983959 CEST	49743	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:52.570574045 CEST	49743	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:52.570591927 CEST	443	49743	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:53.100904942 CEST	443	49743	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:53.101438999 CEST	49743	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:53.101468086 CEST	443	49743	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:53.101819992 CEST	443	49743	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:53.102329969 CEST	49743	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:53.102396011 CEST	443	49743	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:53.102582932 CEST	49743	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:53.102653027 CEST	49743	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:53.102684021 CEST	443	49743	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:53.455074072 CEST	443	49743	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:53.455161095 CEST	443	49743	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:53.455339909 CEST	49743	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:53.455972910 CEST	49743	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:50:53.455992937 CEST	443	49743	44.239.32.243	192.168.2.6
Oct 5, 2023 14:50:53.461620092 CEST	49744	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:53.461668015 CEST	443	49744	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:53.461756945 CEST	49744	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:53.462058067 CEST	49744	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:53.462078094 CEST	443	49744	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:53.766810894 CEST	49745	443	192.168.2.6	173.222.162.50
Oct 5, 2023 14:50:53.766859055 CEST	443	49745	173.222.162.50	192.168.2.6
Oct 5, 2023 14:50:53.766942024 CEST	49745	443	192.168.2.6	173.222.162.50
Oct 5, 2023 14:50:53.772731066 CEST	49745	443	192.168.2.6	173.222.162.50
Oct 5, 2023 14:50:53.772753000 CEST	443	49745	173.222.162.50	192.168.2.6
Oct 5, 2023 14:50:53.816646099 CEST	443	49744	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:53.818298101 CEST	49744	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:53.818326950 CEST	443	49744	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:53.818762064 CEST	443	49744	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:53.820116997 CEST	49744	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:53.820178986 CEST	443	49744	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:53.820456028 CEST	49744	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:53.862447023 CEST	443	49744	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:54.168270111 CEST	443	49744	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:54.168385029 CEST	443	49744	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:54.168442011 CEST	49744	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:54.168972969 CEST	49744	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:50:54.168994904 CEST	443	49744	52.39.244.39	192.168.2.6
Oct 5, 2023 14:50:54.229458094 CEST	443	49745	173.222.162.50	192.168.2.6
Oct 5, 2023 14:50:54.229556084 CEST	49745	443	192.168.2.6	173.222.162.50
Oct 5, 2023 14:50:54.300945044 CEST	49745	443	192.168.2.6	173.222.162.50
Oct 5, 2023 14:50:54.300985098 CEST	443	49745	173.222.162.50	192.168.2.6
Oct 5, 2023 14:50:54.301248074 CEST	49745	443	192.168.2.6	173.222.162.50
Oct 5, 2023 14:50:54.301261902 CEST	443	49745	173.222.162.50	192.168.2.6
Oct 5, 2023 14:50:54.301500082 CEST	443	49745	173.222.162.50	192.168.2.6
Oct 5, 2023 14:50:54.301554918 CEST	49745	443	192.168.2.6	173.222.162.50
Oct 5, 2023 14:50:54.545351982 CEST	443	49745	173.222.162.50	192.168.2.6
Oct 5, 2023 14:50:54.545512915 CEST	443	49745	173.222.162.50	192.168.2.6
Oct 5, 2023 14:50:54.545628071 CEST	49745	443	192.168.2.6	173.222.162.50
Oct 5, 2023 14:50:54.547113895 CEST	49745	443	192.168.2.6	173.222.162.50
Oct 5, 2023 14:50:54.552139044 CEST	49745	443	192.168.2.6	173.222.162.50
Oct 5, 2023 14:50:54.552160025 CEST	443	49745	173.222.162.50	192.168.2.6
Oct 5, 2023 14:51:00.734122038 CEST	49746	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:00.734219074 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:00.734347105 CEST	49746	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:00.736979008 CEST	49746	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:00.737010002 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:00.761486053 CEST	49735	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:00.802455902 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:01.128403902 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:01.129005909 CEST	49746	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:01.129045963 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:01.130165100 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:01.132469893 CEST	49746	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:01.132647038 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:01.174611092 CEST	49746	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:01.673964977 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:01.674001932 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:01.674014091 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:01.674108028 CEST	49735	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:01.674148083 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:01.674211025 CEST	49735	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:01.865165949 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:01.865184069 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:01.865258932 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:01.865273952 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:01.865305901 CEST	49735	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:01.865362883 CEST	49735	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:01.865371943 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:01.865417957 CEST	49735	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:02.056372881 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:02.056519032 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:02.056545973 CEST	49735	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:02.056569099 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:02.056587934 CEST	49735	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:02.056595087 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:02.056653023 CEST	49735	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:02.056660891 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:02.099545002 CEST	49735	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:02.246990919 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:02.247117996 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:02.247124910 CEST	49735	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:02.247191906 CEST	49735	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:02.257509947 CEST	49735	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:02.257529974 CEST	443	49735	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:04.006643057 CEST	49747	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:51:04.006690979 CEST	443	49747	44.239.32.243	192.168.2.6
Oct 5, 2023 14:51:04.006767988 CEST	49747	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:51:04.007214069 CEST	49747	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:51:04.007236004 CEST	443	49747	44.239.32.243	192.168.2.6
Oct 5, 2023 14:51:04.535151005 CEST	443	49747	44.239.32.243	192.168.2.6
Oct 5, 2023 14:51:04.535586119 CEST	49747	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:51:04.535619974 CEST	443	49747	44.239.32.243	192.168.2.6
Oct 5, 2023 14:51:04.535938978 CEST	443	49747	44.239.32.243	192.168.2.6
Oct 5, 2023 14:51:04.536375999 CEST	49747	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:51:04.536432028 CEST	443	49747	44.239.32.243	192.168.2.6
Oct 5, 2023 14:51:04.536649942 CEST	49747	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:51:04.536712885 CEST	49747	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:51:04.536740065 CEST	443	49747	44.239.32.243	192.168.2.6
Oct 5, 2023 14:51:04.700850964 CEST	49746	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:04.705326080 CEST	49748	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:04.705355883 CEST	443	49748	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:04.705431938 CEST	49748	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:04.706794024 CEST	49748	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:04.706813097 CEST	443	49748	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:04.742499113 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:04.884980917 CEST	443	49747	44.239.32.243	192.168.2.6
Oct 5, 2023 14:51:04.885073900 CEST	443	49747	44.239.32.243	192.168.2.6
Oct 5, 2023 14:51:04.885160923 CEST	49747	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:51:04.885504961 CEST	49747	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:51:04.885520935 CEST	443	49747	44.239.32.243	192.168.2.6
Oct 5, 2023 14:51:04.889435053 CEST	49749	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:51:04.889533043 CEST	443	49749	52.39.244.39	192.168.2.6
Oct 5, 2023 14:51:04.889669895 CEST	49749	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:51:04.889971018 CEST	49749	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:51:04.889993906 CEST	443	49749	52.39.244.39	192.168.2.6
Oct 5, 2023 14:51:05.091192007 CEST	443	49748	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:05.091512918 CEST	49748	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:05.091528893 CEST	443	49748	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:05.091825008 CEST	443	49748	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:05.092108011 CEST	49748	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:05.092159986 CEST	443	49748	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:05.132616997 CEST	49748	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:05.197458982 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:05.197520971 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:05.197603941 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:05.197696924 CEST	49746	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:05.197734118 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:05.197796106 CEST	49746	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:05.245049953 CEST	443	49749	52.39.244.39	192.168.2.6
Oct 5, 2023 14:51:05.245481014 CEST	49749	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:51:05.245546103 CEST	443	49749	52.39.244.39	192.168.2.6
Oct 5, 2023 14:51:05.245896101 CEST	443	49749	52.39.244.39	192.168.2.6
Oct 5, 2023 14:51:05.246213913 CEST	49749	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:51:05.246284008 CEST	443	49749	52.39.244.39	192.168.2.6
Oct 5, 2023 14:51:05.246332884 CEST	49749	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:51:05.286444902 CEST	443	49749	52.39.244.39	192.168.2.6
Oct 5, 2023 14:51:05.293138027 CEST	49749	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:51:05.389627934 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:05.389692068 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:05.389744043 CEST	49746	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:05.389794111 CEST	49746	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:05.389847994 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:05.389930964 CEST	49746	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:05.389990091 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:05.390067101 CEST	49746	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:05.390100956 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:05.390162945 CEST	49746	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:05.580905914 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:05.581046104 CEST	49746	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:05.581091881 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:05.581154108 CEST	49746	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:05.581167936 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:05.581310034 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:05.581374884 CEST	49746	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:05.585362911 CEST	49746	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:05.585393906 CEST	443	49746	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:05.596244097 CEST	443	49749	52.39.244.39	192.168.2.6
Oct 5, 2023 14:51:05.596338987 CEST	443	49749	52.39.244.39	192.168.2.6
Oct 5, 2023 14:51:05.596442938 CEST	49749	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:51:05.621208906 CEST	49749	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:51:05.621272087 CEST	443	49749	52.39.244.39	192.168.2.6
Oct 5, 2023 14:51:06.943933010 CEST	49750	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:51:06.943968058 CEST	443	49750	44.239.32.243	192.168.2.6
Oct 5, 2023 14:51:06.944047928 CEST	49750	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:51:06.944330931 CEST	49750	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:51:06.944343090 CEST	443	49750	44.239.32.243	192.168.2.6
Oct 5, 2023 14:51:07.485898972 CEST	443	49750	44.239.32.243	192.168.2.6
Oct 5, 2023 14:51:07.486480951 CEST	49750	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:51:07.486521959 CEST	443	49750	44.239.32.243	192.168.2.6
Oct 5, 2023 14:51:07.487166882 CEST	443	49750	44.239.32.243	192.168.2.6
Oct 5, 2023 14:51:07.487673998 CEST	49750	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:51:07.487785101 CEST	443	49750	44.239.32.243	192.168.2.6
Oct 5, 2023 14:51:07.487833023 CEST	49750	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:51:07.487893105 CEST	49750	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:51:07.487915993 CEST	443	49750	44.239.32.243	192.168.2.6
Oct 5, 2023 14:51:07.533279896 CEST	49750	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:51:07.841180086 CEST	443	49750	44.239.32.243	192.168.2.6
Oct 5, 2023 14:51:07.841465950 CEST	443	49750	44.239.32.243	192.168.2.6
Oct 5, 2023 14:51:07.841582060 CEST	49750	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:51:07.842658997 CEST	49750	443	192.168.2.6	44.239.32.243
Oct 5, 2023 14:51:07.842679977 CEST	443	49750	44.239.32.243	192.168.2.6
Oct 5, 2023 14:51:07.846512079 CEST	49751	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:51:07.846565962 CEST	443	49751	52.39.244.39	192.168.2.6
Oct 5, 2023 14:51:07.846645117 CEST	49751	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:51:07.846988916 CEST	49751	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:51:07.847003937 CEST	443	49751	52.39.244.39	192.168.2.6
Oct 5, 2023 14:51:08.207293987 CEST	443	49751	52.39.244.39	192.168.2.6
Oct 5, 2023 14:51:08.207839012 CEST	49751	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:51:08.207874060 CEST	443	49751	52.39.244.39	192.168.2.6
Oct 5, 2023 14:51:08.208995104 CEST	443	49751	52.39.244.39	192.168.2.6
Oct 5, 2023 14:51:08.209450960 CEST	49751	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:51:08.209623098 CEST	49751	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:51:08.209631920 CEST	443	49751	52.39.244.39	192.168.2.6
Oct 5, 2023 14:51:08.250487089 CEST	443	49751	52.39.244.39	192.168.2.6
Oct 5, 2023 14:51:08.251780987 CEST	49751	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:51:08.556488991 CEST	443	49751	52.39.244.39	192.168.2.6
Oct 5, 2023 14:51:08.556679964 CEST	443	49751	52.39.244.39	192.168.2.6
Oct 5, 2023 14:51:08.556783915 CEST	49751	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:51:08.557516098 CEST	49751	443	192.168.2.6	52.39.244.39
Oct 5, 2023 14:51:08.557559967 CEST	443	49751	52.39.244.39	192.168.2.6
Oct 5, 2023 14:51:18.143528938 CEST	49691	80	192.168.2.6	23.10.223.85
Oct 5, 2023 14:51:18.290224075 CEST	80	49691	23.10.223.85	192.168.2.6
Oct 5, 2023 14:51:18.290396929 CEST	49691	80	192.168.2.6	23.10.223.85
Oct 5, 2023 14:51:18.865135908 CEST	49692	443	192.168.2.6	173.222.162.27
Oct 5, 2023 14:51:21.016279936 CEST	443	49736	18.154.206.79	192.168.2.6
Oct 5, 2023 14:51:21.016467094 CEST	443	49736	18.154.206.79	192.168.2.6
Oct 5, 2023 14:51:21.016597033 CEST	49736	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:51:22.645036936 CEST	49736	443	192.168.2.6	18.154.206.79
Oct 5, 2023 14:51:22.645076036 CEST	443	49736	18.154.206.79	192.168.2.6
Oct 5, 2023 14:51:26.848723888 CEST	49753	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:26.848825932 CEST	443	49753	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:26.848901987 CEST	49753	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:26.849555969 CEST	49755	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:26.849596977 CEST	443	49755	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:26.849636078 CEST	49754	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:26.849651098 CEST	49755	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:26.849679947 CEST	443	49754	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:26.849729061 CEST	49754	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:26.850178957 CEST	49756	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:26.850198984 CEST	443	49756	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:26.850256920 CEST	49756	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:26.860563993 CEST	49755	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:26.860569000 CEST	49754	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:26.860579014 CEST	443	49755	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:26.860586882 CEST	443	49754	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:26.860750914 CEST	49756	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:26.860785961 CEST	443	49756	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:26.860838890 CEST	49753	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:26.860861063 CEST	443	49753	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.456572056 CEST	443	49755	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.456661940 CEST	49755	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.474011898 CEST	443	49753	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.474134922 CEST	49753	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.493618011 CEST	443	49756	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.493748903 CEST	49756	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.494292021 CEST	443	49754	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.494357109 CEST	49754	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.518949032 CEST	49755	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.518982887 CEST	443	49755	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.519324064 CEST	443	49755	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.519381046 CEST	49755	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.543965101 CEST	49754	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.543996096 CEST	443	49754	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.544076920 CEST	49756	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.544107914 CEST	443	49756	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.544419050 CEST	443	49756	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.544430971 CEST	443	49754	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.544461012 CEST	49756	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.544482946 CEST	49754	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.545499086 CEST	49753	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.545509100 CEST	443	49753	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.545883894 CEST	443	49753	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.545922041 CEST	49753	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.553006887 CEST	49755	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.553064108 CEST	443	49755	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.553142071 CEST	49756	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.553186893 CEST	443	49756	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.553263903 CEST	49754	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.553306103 CEST	443	49754	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.553399086 CEST	49753	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.553443909 CEST	443	49753	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.750360012 CEST	443	49756	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.750463009 CEST	443	49756	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.750552893 CEST	443	49755	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.750582933 CEST	443	49755	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.750603914 CEST	49756	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.750603914 CEST	49756	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.750629902 CEST	49755	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.750644922 CEST	443	49755	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.750684977 CEST	49755	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.750684977 CEST	49755	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.750695944 CEST	443	49755	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.750741959 CEST	49755	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.750758886 CEST	443	49755	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.750798941 CEST	49755	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.753676891 CEST	443	49754	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.753706932 CEST	443	49754	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.753814936 CEST	443	49754	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.753832102 CEST	49754	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.753894091 CEST	49754	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.760598898 CEST	443	49753	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.760636091 CEST	443	49753	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.760690928 CEST	49753	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.760723114 CEST	443	49753	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.760739088 CEST	443	49753	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.760746002 CEST	49753	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.760767937 CEST	49753	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.760792971 CEST	49753	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.763829947 CEST	49756	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.763843060 CEST	443	49756	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.764028072 CEST	49755	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.764040947 CEST	443	49755	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.769035101 CEST	49754	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.769061089 CEST	443	49754	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:27.769623995 CEST	49753	443	192.168.2.6	20.99.185.48
Oct 5, 2023 14:51:27.769637108 CEST	443	49753	20.99.185.48	192.168.2.6
Oct 5, 2023 14:51:28.433368921 CEST	49757	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:28.433417082 CEST	443	49757	13.107.21.200	192.168.2.6
Oct 5, 2023 14:51:28.433495998 CEST	49757	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:28.434161901 CEST	49757	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:28.434179068 CEST	443	49757	13.107.21.200	192.168.2.6
Oct 5, 2023 14:51:28.886162996 CEST	443	49757	13.107.21.200	192.168.2.6
Oct 5, 2023 14:51:28.886270046 CEST	49757	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:28.886883974 CEST	443	49757	13.107.21.200	192.168.2.6
Oct 5, 2023 14:51:28.886946917 CEST	49757	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:28.891942978 CEST	49757	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:28.891952991 CEST	443	49757	13.107.21.200	192.168.2.6
Oct 5, 2023 14:51:28.892220974 CEST	443	49757	13.107.21.200	192.168.2.6
Oct 5, 2023 14:51:28.892251968 CEST	49757	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:28.892277002 CEST	49757	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:28.934458971 CEST	443	49757	13.107.21.200	192.168.2.6
Oct 5, 2023 14:51:29.086447001 CEST	443	49757	13.107.21.200	192.168.2.6
Oct 5, 2023 14:51:29.086529016 CEST	443	49757	13.107.21.200	192.168.2.6
Oct 5, 2023 14:51:29.086708069 CEST	49757	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:29.086709023 CEST	49757	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:29.086709023 CEST	49757	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:29.086709023 CEST	49757	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:29.245395899 CEST	49758	443	192.168.2.6	204.79.197.200
Oct 5, 2023 14:51:29.245440960 CEST	443	49758	204.79.197.200	192.168.2.6
Oct 5, 2023 14:51:29.245501995 CEST	49758	443	192.168.2.6	204.79.197.200
Oct 5, 2023 14:51:29.246383905 CEST	49758	443	192.168.2.6	204.79.197.200
Oct 5, 2023 14:51:29.246398926 CEST	443	49758	204.79.197.200	192.168.2.6
Oct 5, 2023 14:51:29.697694063 CEST	443	49758	204.79.197.200	192.168.2.6
Oct 5, 2023 14:51:29.697864056 CEST	49758	443	192.168.2.6	204.79.197.200
Oct 5, 2023 14:51:29.698299885 CEST	443	49758	204.79.197.200	192.168.2.6
Oct 5, 2023 14:51:29.698370934 CEST	49758	443	192.168.2.6	204.79.197.200
Oct 5, 2023 14:51:29.700912952 CEST	49758	443	192.168.2.6	204.79.197.200
Oct 5, 2023 14:51:29.700944901 CEST	443	49758	204.79.197.200	192.168.2.6
Oct 5, 2023 14:51:29.701142073 CEST	49758	443	192.168.2.6	204.79.197.200
Oct 5, 2023 14:51:29.701155901 CEST	443	49758	204.79.197.200	192.168.2.6
Oct 5, 2023 14:51:29.701220989 CEST	49758	443	192.168.2.6	204.79.197.200
Oct 5, 2023 14:51:29.742456913 CEST	443	49758	204.79.197.200	192.168.2.6
Oct 5, 2023 14:51:29.898899078 CEST	443	49758	204.79.197.200	192.168.2.6
Oct 5, 2023 14:51:29.899029970 CEST	49758	443	192.168.2.6	204.79.197.200
Oct 5, 2023 14:51:29.899041891 CEST	443	49758	204.79.197.200	192.168.2.6
Oct 5, 2023 14:51:29.899085045 CEST	49758	443	192.168.2.6	204.79.197.200
Oct 5, 2023 14:51:29.899101973 CEST	443	49758	204.79.197.200	192.168.2.6
Oct 5, 2023 14:51:29.899115086 CEST	49758	443	192.168.2.6	204.79.197.200
Oct 5, 2023 14:51:29.901139975 CEST	49759	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:29.901180983 CEST	443	49759	13.107.21.200	192.168.2.6
Oct 5, 2023 14:51:29.901242971 CEST	49759	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:29.901475906 CEST	49759	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:29.901493073 CEST	443	49759	13.107.21.200	192.168.2.6
Oct 5, 2023 14:51:30.350251913 CEST	443	49759	13.107.21.200	192.168.2.6
Oct 5, 2023 14:51:30.350347042 CEST	49759	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:30.350845098 CEST	49759	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:30.350857019 CEST	443	49759	13.107.21.200	192.168.2.6
Oct 5, 2023 14:51:30.351280928 CEST	49759	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:30.351288080 CEST	443	49759	13.107.21.200	192.168.2.6
Oct 5, 2023 14:51:30.544195890 CEST	443	49759	13.107.21.200	192.168.2.6
Oct 5, 2023 14:51:30.544298887 CEST	443	49759	13.107.21.200	192.168.2.6
Oct 5, 2023 14:51:30.544323921 CEST	49759	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:30.544363976 CEST	49759	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:30.544426918 CEST	49759	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:30.544442892 CEST	443	49759	13.107.21.200	192.168.2.6
Oct 5, 2023 14:51:30.544452906 CEST	49759	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:30.544492006 CEST	49759	443	192.168.2.6	13.107.21.200
Oct 5, 2023 14:51:36.017858982 CEST	49738	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:51:36.017887115 CEST	443	49738	146.75.93.230	192.168.2.6
Oct 5, 2023 14:51:36.033477068 CEST	49737	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:51:36.033503056 CEST	443	49737	151.101.25.230	192.168.2.6
Oct 5, 2023 14:51:36.818816900 CEST	49764	443	192.168.2.6	142.250.217.132
Oct 5, 2023 14:51:36.818845987 CEST	443	49764	142.250.217.132	192.168.2.6
Oct 5, 2023 14:51:36.818928003 CEST	49764	443	192.168.2.6	142.250.217.132
Oct 5, 2023 14:51:36.819508076 CEST	49764	443	192.168.2.6	142.250.217.132
Oct 5, 2023 14:51:36.819523096 CEST	443	49764	142.250.217.132	192.168.2.6
Oct 5, 2023 14:51:37.123311996 CEST	443	49764	142.250.217.132	192.168.2.6
Oct 5, 2023 14:51:37.123866081 CEST	49764	443	192.168.2.6	142.250.217.132
Oct 5, 2023 14:51:37.123881102 CEST	443	49764	142.250.217.132	192.168.2.6
Oct 5, 2023 14:51:37.124206066 CEST	443	49764	142.250.217.132	192.168.2.6
Oct 5, 2023 14:51:37.125139952 CEST	49764	443	192.168.2.6	142.250.217.132
Oct 5, 2023 14:51:37.125190973 CEST	443	49764	142.250.217.132	192.168.2.6
Oct 5, 2023 14:51:37.174081087 CEST	49764	443	192.168.2.6	142.250.217.132
Oct 5, 2023 14:51:47.137347937 CEST	443	49764	142.250.217.132	192.168.2.6
Oct 5, 2023 14:51:47.137454033 CEST	443	49764	142.250.217.132	192.168.2.6
Oct 5, 2023 14:51:47.137512922 CEST	49764	443	192.168.2.6	142.250.217.132
Oct 5, 2023 14:51:48.643075943 CEST	49764	443	192.168.2.6	142.250.217.132
Oct 5, 2023 14:51:48.643102884 CEST	443	49764	142.250.217.132	192.168.2.6
Oct 5, 2023 14:51:50.094547033 CEST	49748	443	192.168.2.6	147.75.243.92
Oct 5, 2023 14:51:50.094582081 CEST	443	49748	147.75.243.92	192.168.2.6
Oct 5, 2023 14:51:52.645740986 CEST	49738	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:51:52.645781040 CEST	49737	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:51:52.645894051 CEST	443	49738	146.75.93.230	192.168.2.6
Oct 5, 2023 14:51:52.646006107 CEST	49738	443	192.168.2.6	146.75.93.230
Oct 5, 2023 14:51:52.646064043 CEST	443	49737	151.101.25.230	192.168.2.6
Oct 5, 2023 14:51:52.646126986 CEST	49737	443	192.168.2.6	151.101.25.230
Oct 5, 2023 14:52:01.527606964 CEST	49765	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:52:01.527662992 CEST	443	49765	20.99.186.246	192.168.2.6
Oct 5, 2023 14:52:01.528507948 CEST	49765	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:52:01.532690048 CEST	49765	443	192.168.2.6	20.99.186.246
Oct 5, 2023 14:52:01.532702923 CEST	443	49765	20.99.186.246	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 5, 2023 14:50:32.360913038 CEST	57411	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:32.368474960 CEST	56610	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:32.369049072 CEST	63899	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:32.369229078 CEST	60792	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:32.497394085 CEST	53	62702	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:32.510926962 CEST	53	57411	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:32.518790007 CEST	53	63899	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:32.518841028 CEST	53	56610	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:32.518918037 CEST	53	60792	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:33.351852894 CEST	53	54952	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:34.038424015 CEST	56672	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:34.038842916 CEST	58824	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:34.188891888 CEST	53	56672	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:34.192071915 CEST	53	58824	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:35.046149015 CEST	63453	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:35.046452045 CEST	55565	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:35.047218084 CEST	50629	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:35.047514915 CEST	56999	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:35.048561096 CEST	54000	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:35.049000978 CEST	57235	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:35.196809053 CEST	53	63453	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:35.199094057 CEST	53	54000	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:35.201482058 CEST	53	56999	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:35.202049971 CEST	53	55565	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:35.203094959 CEST	53	57235	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:35.203653097 CEST	53	50629	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:36.773407936 CEST	58921	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:36.773694038 CEST	55029	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:36.923240900 CEST	53	58921	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:36.923682928 CEST	53	55029	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:38.126279116 CEST	52274	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:38.127176046 CEST	53842	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:38.276673079 CEST	53	52274	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:38.281403065 CEST	53	53842	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:39.353862047 CEST	60876	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:39.355036020 CEST	57726	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:39.508341074 CEST	53	60876	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:39.508563042 CEST	53	57726	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:39.902829885 CEST	61622	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:39.903111935 CEST	59342	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:40.052753925 CEST	53	59342	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:40.053251028 CEST	53	61622	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:41.074750900 CEST	52822	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:41.074963093 CEST	52591	53	192.168.2.6	1.1.1.1
Oct 5, 2023 14:50:41.224916935 CEST	53	52822	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:41.224931002 CEST	53	52591	1.1.1.1	192.168.2.6
Oct 5, 2023 14:50:50.512629986 CEST	53	65265	1.1.1.1	192.168.2.6
Oct 5, 2023 14:51:09.294683933 CEST	53	64547	1.1.1.1	192.168.2.6
Oct 5, 2023 14:51:09.445444107 CEST	138	138	192.168.2.6	192.168.2.255
Oct 5, 2023 14:51:32.047210932 CEST	53	51046	1.1.1.1	192.168.2.6
Oct 5, 2023 14:51:32.357070923 CEST	53	58176	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 5, 2023 14:50:32.360913038 CEST	192.168.2.6	1.1.1.1	0x9f6b	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:32.368474960 CEST	192.168.2.6	1.1.1.1	0x7609	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Oct 5, 2023 14:50:32.369049072 CEST	192.168.2.6	1.1.1.1	0x6140	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:32.369229078 CEST	192.168.2.6	1.1.1.1	0x6adb	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Oct 5, 2023 14:50:34.038424015 CEST	192.168.2.6	1.1.1.1	0x7bc2	Standard query (0)	survey3.medallia.com	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:34.038842916 CEST	192.168.2.6	1.1.1.1	0x929e	Standard query (0)	survey3.medallia.com	65	IN (0x0001)	false
Oct 5, 2023 14:50:35.046149015 CEST	192.168.2.6	1.1.1.1	0xf7d0	Standard query (0)	cdn.medallia.com	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:35.046452045 CEST	192.168.2.6	1.1.1.1	0x4ee6	Standard query (0)	cdn.medallia.com	65	IN (0x0001)	false
Oct 5, 2023 14:50:35.047218084 CEST	192.168.2.6	1.1.1.1	0xea9e	Standard query (0)	sea1.cdn.survey.medallia.com	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:35.047514915 CEST	192.168.2.6	1.1.1.1	0x8ac9	Standard query (0)	sea1.cdn.survey.medallia.com	65	IN (0x0001)	false
Oct 5, 2023 14:50:35.048561096 CEST	192.168.2.6	1.1.1.1	0x5a55	Standard query (0)	global.cdn.survey.medallia.com	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:35.049000978 CEST	192.168.2.6	1.1.1.1	0xcc4e	Standard query (0)	global.cdn.survey.medallia.com	65	IN (0x0001)	false
Oct 5, 2023 14:50:36.773407936 CEST	192.168.2.6	1.1.1.1	0xf025	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:36.773694038 CEST	192.168.2.6	1.1.1.1	0x7746	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 5, 2023 14:50:38.126279116 CEST	192.168.2.6	1.1.1.1	0x55d7	Standard query (0)	global.cdn.survey.medallia.com	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:38.127176046 CEST	192.168.2.6	1.1.1.1	0xca78	Standard query (0)	global.cdn.survey.medallia.com	65	IN (0x0001)	false
Oct 5, 2023 14:50:39.353862047 CEST	192.168.2.6	1.1.1.1	0xffc	Standard query (0)	sea1.cdn.survey.medallia.com	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:39.355036020 CEST	192.168.2.6	1.1.1.1	0xc8cb	Standard query (0)	sea1.cdn.survey.medallia.com	65	IN (0x0001)	false
Oct 5, 2023 14:50:39.902829885 CEST	192.168.2.6	1.1.1.1	0x4e32	Standard query (0)	col.eum-appdynamics.com	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:39.903111935 CEST	192.168.2.6	1.1.1.1	0x2921	Standard query (0)	col.eum-appdynamics.com	65	IN (0x0001)	false
Oct 5, 2023 14:50:41.074750900 CEST	192.168.2.6	1.1.1.1	0xe767	Standard query (0)	col.eum-appdynamics.com	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:41.074963093 CEST	192.168.2.6	1.1.1.1	0x88c8	Standard query (0)	col.eum-appdynamics.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 5, 2023 14:50:32.510926962 CEST	1.1.1.1	192.168.2.6	0x9f6b	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2023 14:50:32.510926962 CEST	1.1.1.1	192.168.2.6	0x9f6b	No error (0)	clients.l.google.com		142.250.72.174	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:32.518790007 CEST	1.1.1.1	192.168.2.6	0x6140	No error (0)	accounts.google.com		142.250.188.237	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:32.518841028 CEST	1.1.1.1	192.168.2.6	0x7609	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2023 14:50:34.188891888 CEST	1.1.1.1	192.168.2.6	0x7bc2	No error (0)	survey3.medallia.com		147.75.243.92	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:35.196809053 CEST	1.1.1.1	192.168.2.6	0xf7d0	No error (0)	cdn.medallia.com	d3n3mj7fomk6d6.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2023 14:50:35.196809053 CEST	1.1.1.1	192.168.2.6	0xf7d0	No error (0)	d3n3mj7fomk6d6.cloudfront.net		18.154.206.79	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:35.196809053 CEST	1.1.1.1	192.168.2.6	0xf7d0	No error (0)	d3n3mj7fomk6d6.cloudfront.net		18.154.206.88	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:35.196809053 CEST	1.1.1.1	192.168.2.6	0xf7d0	No error (0)	d3n3mj7fomk6d6.cloudfront.net		18.154.206.92	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:35.196809053 CEST	1.1.1.1	192.168.2.6	0xf7d0	No error (0)	d3n3mj7fomk6d6.cloudfront.net		18.154.206.129	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:35.199094057 CEST	1.1.1.1	192.168.2.6	0x5a55	No error (0)	global.cdn.survey.medallia.com	medallia2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2023 14:50:35.199094057 CEST	1.1.1.1	192.168.2.6	0x5a55	No error (0)	medallia2.map.fastly.net		146.75.93.230	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:35.201482058 CEST	1.1.1.1	192.168.2.6	0x8ac9	No error (0)	sea1.cdn.survey.medallia.com	medallia2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2023 14:50:35.202049971 CEST	1.1.1.1	192.168.2.6	0x4ee6	No error (0)	cdn.medallia.com	d3n3mj7fomk6d6.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2023 14:50:35.203094959 CEST	1.1.1.1	192.168.2.6	0xcc4e	No error (0)	global.cdn.survey.medallia.com	medallia2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2023 14:50:35.203653097 CEST	1.1.1.1	192.168.2.6	0xea9e	No error (0)	sea1.cdn.survey.medallia.com	medallia2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2023 14:50:35.203653097 CEST	1.1.1.1	192.168.2.6	0xea9e	No error (0)	medallia2.map.fastly.net		151.101.25.230	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:36.923240900 CEST	1.1.1.1	192.168.2.6	0xf025	No error (0)	www.google.com		142.250.217.132	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:36.923682928 CEST	1.1.1.1	192.168.2.6	0x7746	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 5, 2023 14:50:38.276673079 CEST	1.1.1.1	192.168.2.6	0x55d7	No error (0)	global.cdn.survey.medallia.com	medallia2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2023 14:50:38.276673079 CEST	1.1.1.1	192.168.2.6	0x55d7	No error (0)	medallia2.map.fastly.net		146.75.93.230	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:38.281403065 CEST	1.1.1.1	192.168.2.6	0xca78	No error (0)	global.cdn.survey.medallia.com	medallia2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2023 14:50:39.508341074 CEST	1.1.1.1	192.168.2.6	0xffc	No error (0)	sea1.cdn.survey.medallia.com	medallia2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2023 14:50:39.508341074 CEST	1.1.1.1	192.168.2.6	0xffc	No error (0)	medallia2.map.fastly.net		146.75.93.230	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:39.508563042 CEST	1.1.1.1	192.168.2.6	0xc8cb	No error (0)	sea1.cdn.survey.medallia.com	medallia2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 5, 2023 14:50:40.053251028 CEST	1.1.1.1	192.168.2.6	0x4e32	No error (0)	col.eum-appdynamics.com		44.239.32.243	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:40.053251028 CEST	1.1.1.1	192.168.2.6	0x4e32	No error (0)	col.eum-appdynamics.com		35.83.121.41	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:40.053251028 CEST	1.1.1.1	192.168.2.6	0x4e32	No error (0)	col.eum-appdynamics.com		54.71.73.48	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:40.053251028 CEST	1.1.1.1	192.168.2.6	0x4e32	No error (0)	col.eum-appdynamics.com		44.236.60.144	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:40.053251028 CEST	1.1.1.1	192.168.2.6	0x4e32	No error (0)	col.eum-appdynamics.com		52.43.20.155	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:40.053251028 CEST	1.1.1.1	192.168.2.6	0x4e32	No error (0)	col.eum-appdynamics.com		44.233.173.242	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:40.053251028 CEST	1.1.1.1	192.168.2.6	0x4e32	No error (0)	col.eum-appdynamics.com		44.227.173.5	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:40.053251028 CEST	1.1.1.1	192.168.2.6	0x4e32	No error (0)	col.eum-appdynamics.com		52.39.244.39	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:41.224916935 CEST	1.1.1.1	192.168.2.6	0xe767	No error (0)	col.eum-appdynamics.com		52.39.244.39	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:41.224916935 CEST	1.1.1.1	192.168.2.6	0xe767	No error (0)	col.eum-appdynamics.com		52.39.198.249	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:41.224916935 CEST	1.1.1.1	192.168.2.6	0xe767	No error (0)	col.eum-appdynamics.com		54.71.73.48	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:41.224916935 CEST	1.1.1.1	192.168.2.6	0xe767	No error (0)	col.eum-appdynamics.com		44.233.173.242	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:41.224916935 CEST	1.1.1.1	192.168.2.6	0xe767	No error (0)	col.eum-appdynamics.com		35.162.33.152	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:41.224916935 CEST	1.1.1.1	192.168.2.6	0xe767	No error (0)	col.eum-appdynamics.com		44.236.60.144	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:41.224916935 CEST	1.1.1.1	192.168.2.6	0xe767	No error (0)	col.eum-appdynamics.com		35.82.115.25	A (IP address)	IN (0x0001)	false
Oct 5, 2023 14:50:41.224916935 CEST	1.1.1.1	192.168.2.6	0xe767	No error (0)	col.eum-appdynamics.com		44.239.32.243	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

accounts.google.com

clients2.google.com

survey3.medallia.com

https:

global.cdn.survey.medallia.com

cdn.medallia.com

sea1.cdn.survey.medallia.com

col.eum-appdynamics.com

www.bing.com

arc.msn.com

g.bing.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.6	49707	142.250.188.237	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:32 UTC	0	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2023-10-05-06; NID=511=UBeNCkZ3L8yXcx8qh4JFUXkwkNC9IrdiRdbjSTjqSiFh8WrRcbKr_rOJbgHY6TA4RT-6ps0bhemfwCPBsLMgPT7-gTcWqHvZvZbafOpkqRy0dLyYG9AjP2vbUBomarnc9pcZVlhHkUeUaWMurD0GGXyW05_B_1IyUNYEELmyqRg
2023-10-05 12:50:32 UTC	0	OUT	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.6	49706	142.250.72.174	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:32 UTC	0	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.134&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.134 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.6	49715	18.154.206.79	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:35 UTC	46	OUT	GET /react-surveys/6.21.7/vendor.js HTTP/1.1 Host: cdn.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://survey3.medallia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.6	49717	146.75.93.230	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:35 UTC	47	OUT	GET /3eab28210f45500e7cb73de05e830b82db6e151c HTTP/1.1 Host: global.cdn.survey.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://survey3.medallia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.6	49719	151.101.25.230	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:35 UTC	48	OUT	GET /da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1 Host: sea1.cdn.survey.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://survey3.medallia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.6	49712	18.154.206.79	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:35 UTC	48	OUT	GET /react-surveys/6.21.7/vendorPolyfill.js HTTP/1.1 Host: cdn.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://survey3.medallia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.6	49718	151.101.25.230	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:35 UTC	49	OUT	GET /9ed43e593744b02426d9306ce6f2df3ea9048253 HTTP/1.1 Host: sea1.cdn.survey.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://survey3.medallia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	18.154.206.79	443	192.168.2.6	49713	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:35 UTC	49	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 185985 Connection: close Date: Mon, 02 Oct 2023 01:55:04 GMT x-amz-replication-status: FAILED Last-Modified: Mon, 25 Sep 2023 09:04:57 GMT ETag: "d236dd44675f6ab3b44128522b884a9a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=604800 x-amz-version-id: 2JR9p0SjI43N4lIxSr8t4hhTbK88nk59 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5d30c0fb621781d1b876b873574bb1d8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: JVormaH7f9dk2Rv_Lc9J-LQk8TFhjYaTAmngjJV6lepB2qRWuQM-dg== Age: 298532
2023-10-05 12:50:35 UTC	51	IN	Data Raw: 2e 70 61 6e 65 6c 4d 61 69 6e 5f 63 61 74 65 67 6f 72 79 49 74 65 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 61 66 33 66 66 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 63 6f 6c 6f 72 3a 23 32 62 33 34 34 39 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 38 70 78 Data Ascii: .panelMain_categoryItem{-ms-flex-align:center;align-items:center;background-color:#eaf3ff;border:none;border-radius:8px;color:#2b3449;display:-ms-flexbox;display:flex;-ms-flex-direction:row;flex-direction:row;font-size:14px;font-weight:700;min-height:48px
2023-10-05 12:50:35 UTC	99	IN	Data Raw: 56 4c 53 7a 55 43 77 52 4d 4e 44 52 4e 41 51 50 7a 2f 47 69 59 6d 47 67 4c 42 41 41 41 44 41 41 44 2f 6a 77 51 42 41 35 41 41 48 41 42 41 41 49 4d 41 41 41 45 79 46 78 34 42 46 78 59 56 46 41 63 4f 41 51 63 47 49 79 49 6e 4c 67 45 6e 4a 6a 55 30 4e 7a 34 42 4e 7a 59 7a 46 53 49 48 44 67 45 48 42 68 55 55 46 78 34 42 46 78 59 7a 4d 6a 63 2b 41 54 63 32 4e 54 51 6e 4c 67 45 6e 4a 69 63 6d 4a 79 34 42 4a 79 59 6a 46 79 4d 36 41 52 63 7a 48 77 45 65 41 54 4d 58 46 42 59 66 41 78 34 42 42 77 34 42 4c 77 49 52 46 41 59 48 42 69 59 6e 45 51 63 4f 41 53 38 42 4c 67 45 2f 41 6a 34 42 4d 77 63 2b 41 54 63 77 4e 6a 63 79 4e 6a 4d 2b 41 54 4d 79 4e 6a 73 42 4f 67 45 7a 41 67 42 72 58 56 32 4c 4b 53 67 6f 4b 59 74 64 58 57 70 72 58 56 32 4c 4b 53 67 6f 4b 59 74 64 58 Data Ascii: VLSzUCwRMNDRNAQPz/GiYmGgLBAAADAAD/jwQBA5AAHABAAIMAAAEyFx4BFxYVFAcOAQcGIyInLgEnJjU0Nz4BNzYzFSIHDgEHBhUUFx4BFxYzMjc+ATc2NTQnLgEnJicmJy4BJyYjFyM6ARczHwEeATMXFBYfAx4BBw4BLwIRFAYHBiYnEQcOAS8BLgE/Aj4BMwc+ATcwNjcyNjM+ATMyNjsBOgEzAgBrXV2LKSgoKYtdXWprXV2LKSgoKYtdX
2023-10-05 12:50:36 UTC	221	IN	Data Raw: 47 46 42 63 65 41 51 38 42 44 67 45 58 48 67 45 7a 4d 6a 59 33 50 67 45 76 41 53 59 69 42 77 63 4f 41 51 63 47 46 68 38 42 48 67 45 50 41 51 34 42 46 78 34 42 4d 7a 49 32 4e 7a 34 42 4c 77 45 75 41 51 63 42 4d 68 59 66 41 52 45 55 42 67 63 6a 49 53 49 6d 4a 7a 30 42 4e 44 59 7a 4d 68 59 58 48 51 45 55 46 68 63 7a 49 54 49 32 50 77 45 52 4e 43 59 6e 49 79 45 69 42 67 38 42 46 52 51 47 49 79 49 6d 4c 77 45 31 4e 44 59 33 4d 79 45 43 41 43 51 79 4d 69 50 2b 71 69 51 79 4d 69 53 6e 5a 54 63 4a 44 51 30 4a 4e 32 55 44 42 77 51 4a 44 51 4d 44 42 68 49 47 63 41 63 48 4b 51 4d 6e 42 67 51 44 41 77 49 4c 42 67 55 48 41 7a 63 44 4d 77 63 47 45 51 59 6d 42 67 67 42 41 51 45 44 41 68 49 43 44 77 55 45 41 77 4d 43 43 77 59 45 43 41 4d 65 41 68 73 46 42 41 73 46 41 64 Data Ascii: GFBceAQ8BDgEXHgEzMjY3PgEvASYiBwcOAQcGFh8BHgEPAQ4BFx4BMzI2Nz4BLwEuAQcBMhYfAREUBgcjISImJz0BNDYzMhYXHQEUFhczITI2PwERNCYnIyEiBg8BFRQGIyImLwE1NDY3MyECACQyMiP+qiQyMiSnZTcJDQ0JN2UDBwQJDQMDBhIGcAcHKQMnBgQDAwILBgUHAzcDMwcGEQYmBggBAQEDAhICDwUEAwMCCwYECAMeAhsFBAsFAd
2023-10-05 12:50:36 UTC	284	IN	Data Raw: 34 30 4d 7a 4a 36 49 69 41 76 50 67 6f 38 5a 32 78 35 63 47 67 67 64 57 35 70 59 32 39 6b 5a 54 30 69 4a 69 4e 34 5a 54 67 77 4d 54 73 69 49 47 64 73 65 58 42 6f 4c 57 35 68 62 57 55 39 49 6b 46 79 63 6d 39 33 54 47 56 6d 64 43 49 67 5a 44 30 69 54 54 67 32 4e 79 34 7a 4d 6a 67 67 4d 7a 55 78 4c 6a 49 7a 4d 6d 67 74 4e 54 6b 32 4c 6a 6b 35 4d 6d 77 79 4d 44 55 75 4f 44 49 30 4c 54 49 78 4d 43 34 35 4e 44 52 6a 4d 54 51 75 4d 7a 4d 32 4c 54 45 32 4c 6a 4d 34 4e 43 41 78 4e 43 34 7a 4d 7a 59 74 4e 44 41 75 4f 54 59 67 4d 43 30 31 4e 69 34 7a 4d 69 30 78 4e 53 34 7a 4e 69 30 78 4e 53 34 7a 4e 69 30 7a 4f 53 34 35 4d 7a 59 74 4d 54 55 75 4d 7a 59 74 4e 54 51 75 4d 6a 63 79 49 44 42 73 4c 54 49 33 4d 53 34 7a 4e 69 41 79 4e 7a 6b 75 4e 54 55 79 59 79 30 78 4c Data Ascii: 40MzJ6IiAvPgo8Z2x5cGggdW5pY29kZT0iJiN4ZTgwMTsiIGdseXBoLW5hbWU9IkFycm93TGVmdCIgZD0iTTg2Ny4zMjggMzUxLjIzMmgtNTk2Ljk5MmwyMDUuODI0LTIxMC45NDRjMTQuMzM2LTE2LjM4NCAxNC4zMzYtNDAuOTYgMC01Ni4zMi0xNS4zNi0xNS4zNi0zOS45MzYtMTUuMzYtNTQuMjcyIDBsLTI3MS4zNiAyNzkuNTUyYy0xL
2023-10-05 12:50:36 UTC	348	IN	Data Raw: 41 35 4e 69 41 78 4c 6a 41 79 4e 43 41 78 4d 69 34 79 4f 44 68 73 4e 44 6b 75 4d 54 55 79 49 44 49 34 4e 53 34 32 4f 54 59 74 4d 6a 41 33 4c 6a 67 33 4d 69 41 79 4d 44 45 75 4e 7a 49 34 63 53 30 78 4e 43 34 7a 4d 7a 59 67 4d 54 55 75 4d 7a 59 74 4d 54 51 75 4d 7a 4d 32 49 44 49 33 4c 6a 59 30 4f 43 41 77 49 44 49 78 4c 6a 55 77 4e 43 41 7a 4d 53 34 33 4e 44 51 67 4d 6a 59 75 4e 6a 49 30 62 44 49 34 4e 69 34 33 4d 69 41 30 4d 43 34 35 4e 69 41 78 4d 6a 6b 75 4d 44 49 30 49 44 49 32 4d 43 34 77 4f 54 5a 78 4d 54 45 75 4d 6a 59 30 49 44 49 7a 4c 6a 55 31 4d 69 41 79 4e 79 34 32 4e 44 67 67 4d 6a 4d 75 4e 54 55 79 64 44 49 34 4c 6a 59 33 4d 69 30 79 4d 79 34 31 4e 54 4a 73 4d 54 49 34 4c 54 49 32 4d 43 34 77 4f 54 59 67 4d 6a 67 32 4c 6a 63 79 4c 54 51 77 4c Data Ascii: A5NiAxLjAyNCAxMi4yODhsNDkuMTUyIDI4NS42OTYtMjA3Ljg3MiAyMDEuNzI4cS0xNC4zMzYgMTUuMzYtMTQuMzM2IDI3LjY0OCAwIDIxLjUwNCAzMS43NDQgMjYuNjI0bDI4Ni43MiA0MC45NiAxMjkuMDI0IDI2MC4wOTZxMTEuMjY0IDIzLjU1MiAyNy42NDggMjMuNTUydDI4LjY3Mi0yMy41NTJsMTI4LTI2MC4wOTYgMjg2LjcyLTQwL
2023-10-05 12:50:36 UTC	407	IN	Data Raw: 30 78 4e 43 34 7a 4d 6a 63 74 4d 7a 49 74 4d 7a 49 74 4d 7a 49 74 4d 54 59 75 4d 69 41 77 4c 54 49 35 4c 6a 55 34 4f 53 41 78 4d 69 34 77 4d 7a 6b 74 4d 7a 45 75 4e 7a 41 34 49 44 49 33 4c 6a 59 31 4f 47 77 74 4d 43 34 79 4f 54 49 67 4e 43 34 7a 4e 44 4a 32 4d 7a 49 75 4e 54 67 32 59 7a 41 67 4e 54 41 75 4f 44 45 67 4d 7a 6b 75 4e 44 63 30 49 44 6b 79 4c 6a 51 77 4d 53 41 34 4f 53 34 30 4d 6a 63 67 4f 54 55 75 4e 7a 63 35 62 44 59 75 4e 54 63 7a 49 44 41 75 4d 6a 49 78 61 44 55 31 4e 43 34 32 4e 6a 64 36 54 54 51 79 4e 69 34 32 4e 6a 63 67 4e 6a 51 77 59 7a 51 33 4c 6a 45 79 4f 43 41 77 49 44 67 31 4c 6a 4d 7a 4d 79 30 7a 4f 43 34 79 4d 44 55 67 4f 44 55 75 4d 7a 4d 7a 4c 54 67 31 4c 6a 4d 7a 4d 33 59 74 4d 7a 51 78 4c 6a 4d 7a 4d 32 4d 77 4c 54 51 33 4c Data Ascii: 0xNC4zMjctMzItMzItMzItMTYuMiAwLTI5LjU4OSAxMi4wMzktMzEuNzA4IDI3LjY1OGwtMC4yOTIgNC4zNDJ2MzIuNTg2YzAgNTAuODEgMzkuNDc0IDkyLjQwMSA4OS40MjcgOTUuNzc5bDYuNTczIDAuMjIxaDU1NC42Njd6TTQyNi42NjcgNjQwYzQ3LjEyOCAwIDg1LjMzMy0zOC4yMDUgODUuMzMzLTg1LjMzM3YtMzQxLjMzM2MwLTQ3L
2023-10-05 12:50:36 UTC	512	IN	Data Raw: 74 6f 6e 2e 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 50 61 6e 65 6c 41 63 74 69 6f 6e 5f 6f 75 74 6c 69 6e 65 64 3a 66 6f 63 75 73 2c 2e 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 50 61 6e 65 6c 41 63 74 69 6f 6e 5f 62 75 74 74 6f 6e 2e 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 50 61 6e 65 6c 41 63 74 69 6f 6e 5f 6f 75 74 6c 69 6e 65 64 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 62 36 65 63 32 7d 2e 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 50 61 6e 65 6c 41 63 74 69 6f 6e 5f 62 75 74 74 6f 6e 2e 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 50 61 6e 65 6c 41 63 74 69 6f 6e 5f 74 65 78 74 7b 63 6f 6c 6f 72 3a 23 31 62 36 65 63 32 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 20 73 63 72 65 Data Ascii: ton.cookieBannerPanelAction_outlined:focus,.cookieBannerPanelAction_button.cookieBannerPanelAction_outlined:hover{border-color:#1b6ec2}.cookieBannerPanelAction_button.cookieBannerPanelAction_text{color:#1b6ec2;background-color:#fff;border:none}@media scre
2023-10-05 12:50:36 UTC	560	IN	Data Raw: 76 69 67 61 74 69 6f 6e 42 75 74 74 6f 6e 73 43 6f 6e 74 61 69 6e 65 72 5f 68 61 73 54 77 6f 4f 72 54 68 72 65 65 42 75 74 74 6f 6e 73 20 2e 6e 61 76 69 67 61 74 69 6f 6e 42 75 74 74 6f 6e 73 5f 70 61 67 65 42 75 74 74 6f 6e 43 6f 6e 74 61 69 6e 65 72 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 77 69 64 74 68 3a 33 30 25 7d 2e 6e 61 76 69 67 61 74 69 6f 6e 42 75 74 74 6f 6e 73 5f 70 61 67 65 42 75 74 74 6f 6e 41 72 72 6f 77 49 63 6f 6e 7b 6f 70 61 63 69 74 79 3a 2e 35 35 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 72 74 6c 20 2e 6e 61 76 69 67 61 74 69 6f 6e 42 75 74 74 6f 6e 73 5f 70 61 67 65 42 75 74 74 6f 6e 41 72 72 6f 77 49 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 7d 7d 40 6b 65 79 66 72 Data Ascii: vigationButtonsContainer_hasTwoOrThreeButtons .navigationButtons_pageButtonContainer:last-child{width:30%}.navigationButtons_pageButtonArrowIcon{opacity:.55;margin-left:8px}.rtl .navigationButtons_pageButtonArrowIcon{margin-left:0;margin-right:8px}}@keyfr
2023-10-05 12:50:36 UTC	608	IN	Data Raw: 64 6f 77 3a 30 20 30 20 30 20 33 70 78 20 23 31 62 36 65 63 32 7d 2e 6f 70 74 69 6f 6e 5f 69 6e 70 75 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 37 70 78 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 68 65 69 67 68 74 3a 36 30 70 78 3b 77 69 64 74 68 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 6f 70 61 63 69 74 79 3a 30 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 2e 6f 70 74 69 6f 6e 5f 69 6e 64 69 63 61 74 6f 72 43 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e Data Ascii: dow:0 0 0 3px #1b6ec2}.option_input{position:absolute;top:0;left:7px;right:0;bottom:0;height:60px;width:auto;margin:auto;cursor:pointer;opacity:0;outline:none;-webkit-appearance:none;-moz-appearance:none;appearance:none}.option_indicatorContainer{position
2023-10-05 12:50:36 UTC	624	IN	Data Raw: 29 3b 7a 2d 69 6e 64 65 78 3a 33 30 30 31 7d 2e 72 6f 77 4f 70 74 69 6f 6e 5f 6e 61 41 6e 63 68 6f 72 43 6f 6e 74 61 69 6e 65 72 2c 2e 72 6f 77 4f 70 74 69 6f 6e 5f 6e 61 53 65 6c 65 63 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 7b 6d 69 6e 2d 77 69 64 74 68 3a 36 34 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 32 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 7d 2e 72 74 6c 20 2e 72 6f 77 4f 70 74 69 6f 6e 5f 6e 61 41 6e 63 68 6f 72 43 6f 6e 74 61 69 6e 65 72 2c 2e 72 74 6c 20 2e 72 6f 77 4f 70 74 69 6f 6e 5f 6e 61 53 65 6c 65 63 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 32 70 78 7d 2e 72 6f 77 4f 70 74 69 6f 6e 5f 6e 61 53 65 6c 65 63 74 Data Ascii: );z-index:3001}.rowOption_naAnchorContainer,.rowOption_naSelectionContainer{min-width:64px;padding-left:12px;vertical-align:bottom}.rtl .rowOption_naAnchorContainer,.rtl .rowOption_naSelectionContainer{padding-left:0;padding-right:12px}.rowOption_naSelect
2023-10-05 12:50:36 UTC	660	IN	Data Raw: 47 48 69 73 74 73 43 59 73 73 51 63 65 4b 79 32 77 4a 79 79 78 43 42 34 72 4c 62 41 6f 4c 4c 45 4a 48 69 73 74 73 43 6b 73 49 44 79 77 41 57 41 74 73 43 6f 73 49 47 43 77 45 47 41 67 51 79 4f 77 41 57 42 44 73 41 49 6c 59 62 41 42 59 4c 41 70 4b 69 45 74 73 43 73 73 73 43 6f 72 73 43 6f 71 4c 62 41 73 4c 43 41 67 52 79 41 67 73 41 74 44 59 37 67 45 41 47 49 67 73 41 42 51 57 4c 42 41 59 46 6c 6d 73 41 46 6a 59 43 4e 68 4f 43 4d 67 69 6c 56 59 49 45 63 67 49 4c 41 4c 51 32 4f 34 42 41 42 69 49 4c 41 41 55 46 69 77 51 47 42 5a 5a 72 41 42 59 32 41 6a 59 54 67 62 49 56 6b 74 73 43 30 73 41 4c 45 41 41 6b 56 55 57 4c 41 42 46 72 41 73 4b 72 41 42 46 54 41 62 49 6c 6b 74 73 43 34 73 41 4c 41 4e 4b 37 45 41 41 6b 56 55 57 4c 41 42 46 72 41 73 4b 72 41 42 46 54 Data Ascii: GHistsCYssQceKy2wJyyxCB4rLbAoLLEJHistsCksIDywAWAtsCosIGCwEGAgQyOwAWBDsAIlYbABYLApKiEtsCsssCorsCoqLbAsLCAgRyAgsAtDY7gEAGIgsABQWLBAYFlmsAFjYCNhOCMgilVYIEcgILALQ2O4BABiILAAUFiwQGBZZrABY2AjYTgbIVktsC0sALEAAkVUWLABFrAsKrABFTAbIlktsC4sALANK7EAAkVUWLABFrAsKrABFT
2023-10-05 12:50:36 UTC	708	IN	Data Raw: 34 6a 73 36 6a 54 61 35 4e 2b 6f 44 5a 79 39 70 4a 58 6c 57 79 33 34 42 64 62 33 4c 33 36 55 37 7a 44 4a 56 33 2b 50 77 33 57 34 59 35 75 32 68 52 64 5a 78 67 4f 59 58 4e 75 35 62 6f 2f 5a 74 48 38 72 36 57 65 32 4d 71 51 2b 70 42 66 6d 75 4f 36 68 58 71 66 44 66 4d 2f 77 76 39 49 70 46 6a 41 41 41 41 65 4a 78 6a 59 47 4b 41 41 43 34 47 37 49 43 4a 6b 59 6d 52 6d 59 47 72 75 43 53 78 53 44 63 31 74 36 43 6b 6b 6f 45 42 41 43 47 78 42 44 59 41 65 4a 78 6a 38 4e 37 42 63 43 49 6f 59 69 4d 6a 59 31 2f 6b 42 73 61 64 48 41 77 63 44 4d 6b 46 47 78 6c 59 6e 54 59 78 4d 44 4a 6f 67 52 69 62 75 5a 67 59 4f 53 41 73 50 67 59 77 69 38 31 70 46 39 4d 42 6f 44 51 6e 6b 4d 33 75 74 49 76 42 41 63 4a 6d 5a 6e 44 5a 71 4d 4c 59 45 52 69 78 77 61 45 6a 59 69 4e 7a 69 73 Data Ascii: 4js6jTa5N+oDZy9pJXlWy34Bdb3L36U7zDJV3+Pw3W4Y5u2hRdZxgOYXNu5bo/ZtH8r6We2MqQ+pBfmuO6hXqfDfM/wv9IpFjAAAAeJxjYGKAAC4G7ICJkYmRmYGruCSxSDc1t6CkkoEBACGxBDYAeJxj8N7BcCIoYiMjY1/kBsadHAwcDMkFGxlYnTYxMDJogRibuZgYOSAsPgYwi81pF9MBoDQnkM3utIvBAcJmZnDZqMLYERixwaEjYiNzis
2023-10-05 12:50:36 UTC	724	IN	Data Raw: 47 72 69 64 51 75 65 73 74 69 6f 6e 20 2e 63 65 6c 6c 5f 63 65 6c 6c 2e 72 6f 77 4f 70 74 69 6f 6e 5f 6e 61 53 65 6c 65 63 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 7b 6d 69 6e 2d 77 69 64 74 68 3a 38 30 70 78 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 2e 73 75 62 43 6f 6d 70 6f 6e 65 6e 74 43 65 6c 6c 5f 67 72 69 64 20 2e 72 61 74 69 6e 67 47 72 69 64 51 75 65 73 74 69 6f 6e 20 2e 63 65 6c 6c 5f 63 65 6c 6c 2e 6c 61 79 6f 75 74 5f 61 6e 73 77 65 72 7b 77 69 64 74 68 3a 32 36 70 78 7d 2e 73 75 62 43 6f 6d 70 6f 6e 65 6e 74 43 65 6c 6c 5f 63 68 6f 6f 73 65 2c 2e 73 75 62 43 6f 6d 70 6f 6e 65 6e 74 43 65 6c 6c 5f 6c 6f 6e 67 66 6f 72 6d 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 73 75 62 43 6f Data Ascii: GridQuestion .cell_cell.rowOption_naSelectionContainer{min-width:80px}@media screen and (max-width:600px){.subComponentCell_grid .ratingGridQuestion .cell_cell.layout_answer{width:26px}.subComponentCell_choose,.subComponentCell_longform{height:auto}.subCo

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	18.154.206.79	443	192.168.2.6	49711	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:35 UTC	50	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 93871 Connection: close Date: Mon, 02 Oct 2023 08:27:18 GMT x-amz-replication-status: FAILED Last-Modified: Mon, 25 Sep 2023 09:04:57 GMT ETag: "f76cc435bffc06dbfb3400ca8b2f264a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=604800 x-amz-version-id: HsfI_2L_cG6A22YhxWH4jYAcXDvR647m Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e8e40876c34ba0a595da68411cedd210.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: gRg6MZIUNXG1goWw-gvp4CzZ4GUD7v_vlpEmGrJppSEQ1RnReZVyBQ== Age: 274998
2023-10-05 12:50:35 UTC	67	IN	Data Raw: 2f 2a 20 6a 51 75 65 72 79 20 76 31 2e 37 2e 31 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 79 28 61 29 7b 72 65 74 75 72 6e 20 66 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 61 3a 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 3f 61 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 61 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 76 28 61 29 7b 69 66 28 21 63 6b 5b 61 5d 29 7b 76 61 72 20 62 3d 63 2e 62 6f 64 79 2c 64 3d 66 28 22 3c 22 2b 61 2b 22 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 62 29 2c 65 3d 64 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b 64 2e 72 65 6d 6f 76 65 28 29 3b 69 66 28 65 3d 3d Data Ascii: /* jQuery v1.7.1 jquery.com \| jquery.org/license */(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cv(a){if(!ck[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==
2023-10-05 12:50:35 UTC	115	IN	Data Raw: 67 2e 70 72 6f 6d 69 73 65 28 29 2e 74 68 65 6e 28 64 2e 72 65 73 6f 6c 76 65 2c 64 2e 72 65 6a 65 63 74 2c 64 2e 6e 6f 74 69 66 79 29 3a 64 5b 65 2b 22 57 69 74 68 22 5d 28 74 68 69 73 3d 3d 3d 69 3f 64 3a 74 68 69 73 2c 5b 67 5d 29 7d 29 3a 69 5b 61 5d 28 64 5b 65 5d 29 7d 29 7d 29 2e 70 72 6f 6d 69 73 65 28 29 7d 2c 70 72 6f 6d 69 73 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 61 3d 68 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 62 20 69 6e 20 68 29 61 5b 62 5d 3d 68 5b 62 5d 3b 72 65 74 75 72 6e 20 61 7d 7d 2c 69 3d 68 2e 70 72 6f 6d 69 73 65 28 7b 7d 29 2c 6a 3b 66 6f 72 28 6a 20 69 6e 20 67 29 69 5b 6a 5d 3d 67 5b 6a 5d 2e 66 69 72 65 2c 69 5b 6a 2b 22 57 69 74 68 22 5d 3d 67 5b 6a 5d 2e 66 69 72 65 57 69 74 68 3b 69 2e Data Ascii: g.promise().then(d.resolve,d.reject,d.notify):d[e+"With"](this===i?d:this,[g])}):i[a](d[e])})}).promise()},promise:function(a){if(a==null)a=h;else for(var b in h)a[b]=h[b];return a}},i=h.promise({}),j;for(j in g)i[j]=g[j].fire,i[j+"With"]=g[j].fireWith;i.
2023-10-05 12:50:36 UTC	237	IN	Data Raw: 66 2e 65 76 65 6e 74 2e 64 69 73 70 61 74 63 68 2e 61 70 70 6c 79 28 69 2e 65 6c 65 6d 2c 61 72 67 75 6d 65 6e 74 73 29 3a 62 7d 2c 69 2e 65 6c 65 6d 3d 61 29 2c 63 3d 66 2e 74 72 69 6d 28 49 28 63 29 29 2e 73 70 6c 69 74 28 22 20 22 29 3b 66 6f 72 28 6b 3d 30 3b 6b 3c 63 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 6c 3d 41 2e 65 78 65 63 28 63 5b 6b 5d 29 7c 7c 5b 5d 2c 6d 3d 6c 5b 31 5d 2c 6e 3d 28 6c 5b 32 5d 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 2e 22 29 2e 73 6f 72 74 28 29 2c 73 3d 66 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 6d 5d 7c 7c 7b 7d 2c 6d 3d 28 67 3f 73 2e 64 65 6c 65 67 61 74 65 54 79 70 65 3a 73 2e 62 69 6e 64 54 79 70 65 29 7c 7c 6d 2c 73 3d 66 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 6d 5d 7c 7c 7b 7d 2c 6f 3d 66 2e 65 78 74 65 6e Data Ascii: f.event.dispatch.apply(i.elem,arguments):b},i.elem=a),c=f.trim(I(c)).split(" ");for(k=0;k<c.length;k++){l=A.exec(c[k])\|\|[],m=l[1],n=(l[2]\|\|"").split(".").sort(),s=f.event.special[m]\|\|{},m=(g?s.delegateType:s.bindType)\|\|m,s=f.event.special[m]\|\|{},o=f.exten
2023-10-05 12:50:36 UTC	269	IN	Data Raw: 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 5b 31 5d 29 3b 72 65 74 75 72 6e 20 64 26 26 64 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 5b 64 5d 3a 5b 5d 7d 7d 2c 4e 41 4d 45 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 61 5b 31 5d 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 2c 66 3d 64 2e 6c 65 6e 67 74 68 3b 65 3c 66 3b 65 2b 2b 29 64 5b 65 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 29 3d 3d 3d 61 5b 31 5d 26 26 63 2e 70 75 73 68 28 64 5b 65 5d 29 3b 72 65 74 75 72 6e 20 63 2e 6c 65 6e 67 74 68 3d 3d 3d 30 3f 6e 75 Data Ascii: b.getElementById(a[1]);return d&&d.parentNode?[d]:[]}},NAME:function(a,b){if(typeof b.getElementsByName!="undefined"){var c=[],d=b.getElementsByName(a[1]);for(var e=0,f=d.length;e<f;e++)d[e].getAttribute("name")===a[1]&&c.push(d[e]);return c.length===0?nu
2023-10-05 12:50:36 UTC	359	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 26 26 74 68 69 73 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 6f 6d 4d 61 6e 69 70 28 61 72 67 75 6d 65 6e 74 73 2c 21 30 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 26 26 74 68 69 73 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 74 68 69 73 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 29 7d 2c 62 65 66 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 5b 30 5d 26 26 74 68 69 73 5b 30 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 64 6f 6d 4d 61 6e 69 70 28 61 72 67 75 6d 65 6e 74 Data Ascii: unction(a){this.nodeType===1&&this.appendChild(a)})},prepend:function(){return this.domManip(arguments,!0,function(a){this.nodeType===1&&this.insertBefore(a,this.firstChild)})},before:function(){if(this[0]&&this[0].parentNode)return this.domManip(argument
2023-10-05 12:50:36 UTC	423	IN	Data Raw: 74 65 72 28 22 73 63 72 69 70 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 63 61 63 68 65 3d 3d 3d 62 26 26 28 61 2e 63 61 63 68 65 3d 21 31 29 2c 61 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 26 26 28 61 2e 74 79 70 65 3d 22 47 45 54 22 2c 61 2e 67 6c 6f 62 61 6c 3d 21 31 29 7d 29 2c 66 2e 61 6a 61 78 54 72 61 6e 73 70 6f 72 74 28 22 73 63 72 69 70 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 29 7b 76 61 72 20 64 2c 65 3d 63 2e 68 65 61 64 7c 7c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 7c 7c 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 7b 73 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 64 3d 63 2e 63 72 65 61 74 65 Data Ascii: ter("script",function(a){a.cache===b&&(a.cache=!1),a.crossDomain&&(a.type="GET",a.global=!1)}),f.ajaxTransport("script",function(a){if(a.crossDomain){var d,e=c.head\|\|c.getElementsByTagName("head")[0]\|\|c.documentElement;return{send:function(f,g){d=c.create

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	18.154.206.79	443	192.168.2.6	49714	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:35 UTC	83	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 883319 Connection: close Date: Sat, 30 Sep 2023 01:56:53 GMT x-amz-replication-status: FAILED Last-Modified: Mon, 25 Sep 2023 09:04:57 GMT ETag: "6763d39e6b07a1c8430fdf64e455071f" x-amz-server-side-encryption: AES256 Cache-Control: max-age=604800 x-amz-version-id: fDiCYIvWrmBfW7I2g7MVS_IW1i3OLAmQ Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e18d3804375a86d48383ad266efc5b0a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: EQeM3hrI9h98KCv_T0ZYfebZ2xspsBjq5E6xTBkfASmNfalLwhhkGg== Age: 471223
2023-10-05 12:50:35 UTC	83	IN	Data Raw: 77 65 62 70 61 63 6b 4a 73 6f 6e 70 28 5b 31 5d 2c 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 76 61 72 20 6f 3d 6e 28 31 29 2c 69 3d 72 28 6f 29 2c 61 3d 6e 28 34 39 29 2c 75 3d 72 28 61 29 2c 6c 3d 6e 28 39 35 39 29 2c 73 3d 72 28 6c 29 2c 63 3d 6e 28 37 36 34 29 2c 64 3d 72 28 63 29 2c 66 3d 6e 28 39 36 33 29 2c 70 3d 72 28 66 29 2c 68 3d 6e 28 38 39 35 29 2c 76 3d 72 28 68 29 2c 79 3d 6e 28 38 39 31 29 2c 6d 3d 72 28 79 29 2c 62 3d 6e 28 39 31 37 29 2c 67 3d 72 28 62 29 2c 5f 3d 6e 28 33 38 33 29 2c 4f 3d 72 28 5f 29 2c 45 3d 6e 28 33 37 36 29 2c 54 3d 72 Data Ascii: webpackJsonp([1],[function(e,t,n){"use strict";function r(e){return e&&e.__esModule?e:{default:e}}var o=n(1),i=r(o),a=n(49),u=r(a),l=n(959),s=r(l),c=n(764),d=r(c),f=n(963),p=r(f),h=n(895),v=r(h),y=n(891),m=r(y),b=n(917),g=r(b),_=n(383),O=r(_),E=n(376),T=r
2023-10-05 12:50:35 UTC	147	IN	Data Raw: 75 74 73 2c 61 74 74 72 69 62 75 74 65 73 3a 7b 6f 70 74 69 6f 6e 73 3a 6e 65 77 20 53 65 74 28 5b 74 2e 69 64 5d 29 7d 7d 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 2e 76 61 6c 75 65 26 26 6f 26 26 21 6f 2e 69 73 54 65 78 74 41 6e 73 77 65 72 28 29 26 26 6f 2e 70 6f 73 73 69 62 6c 65 56 61 6c 75 65 73 2e 61 64 64 28 74 2e 76 61 6c 75 65 29 2c 74 7d 7d 2c 7b 6b 65 79 3a 22 63 72 65 61 74 65 43 6f 6d 70 6f 6e 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 74 68 69 73 2e 5f 72 65 73 6f 75 72 63 65 73 2e 63 6f 6d 70 6f 6e 65 6e 74 73 Data Ascii: uts,attributes:{options:new Set([t.id])}});return void 0!==t.value&&o&&!o.isTextAnswer()&&o.possibleValues.add(t.value),t}},{key:"createComponent",value:function(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};this._resources.components
2023-10-05 12:50:36 UTC	253	IN	Data Raw: 29 7d 72 65 74 75 72 6e 20 45 7d 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 41 4e 53 57 45 52 5f 51 55 45 53 54 49 4f 4e 3d 76 6f 69 64 20 30 2c 74 2e 64 65 66 61 75 6c 74 3d 69 3b 76 61 72 20 61 3d 6e 28 35 39 29 2c 75 3d 72 28 61 29 2c 6c 3d 6e 28 31 37 34 29 2c 73 3d 6e 28 31 31 36 29 2c 63 3d 6e 28 34 29 2c 64 3d 6e 28 38 33 29 2c 66 3d 72 28 64 29 2c 70 3d 74 2e 41 4e 53 57 45 52 5f 51 55 45 53 54 49 4f 4e 3d 22 41 4e 53 57 45 52 5f 51 55 45 53 54 49 4f 4e 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d Data Ascii: )}return E}}Object.defineProperty(t,"__esModule",{value:!0}),t.ANSWER_QUESTION=void 0,t.default=i;var a=n(59),u=r(a),l=n(174),s=n(116),c=n(4),d=n(83),f=r(d),p=t.ANSWER_QUESTION="ANSWER_QUESTION"},function(e,t,n){"use strict";Object.defineProperty(t,"__esM
2023-10-05 12:50:36 UTC	316	IN	Data Raw: 3a 67 2c 6f 6e 43 6c 69 63 6b 3a 67 2c 6f 6e 43 6c 69 63 6b 48 61 6e 64 6c 65 55 70 64 61 74 65 56 61 6c 75 65 3a 67 2c 6f 6e 46 6f 63 75 73 3a 67 2c 6f 6e 4b 65 79 55 70 3a 67 2c 6f 6e 4d 6f 75 73 65 4c 65 61 76 65 3a 67 2c 6f 6e 4d 6f 75 73 65 4d 6f 76 65 3a 67 2c 6f 6e 4d 6f 75 73 65 4f 76 65 72 3a 67 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 4f 2c 74 61 62 49 6e 64 65 78 3a 5f 2c 64 69 73 61 62 6c 65 4d 6f 75 73 65 4f 75 74 42 6c 75 72 3a 62 2c 64 61 74 61 52 65 70 72 65 73 65 6e 74 61 74 69 76 65 56 61 6c 75 65 3a 45 28 5b 4f 2c 5f 5d 29 7d 2c 54 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 66 6f 72 6d 56 61 6c 75 65 3a 22 22 2c 63 68 65 63 6b 65 64 3a 21 31 7d 2c 74 2e 64 65 66 61 75 6c 74 3d 54 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 Data Ascii: :g,onClick:g,onClickHandleUpdateValue:g,onFocus:g,onKeyUp:g,onMouseLeave:g,onMouseMove:g,onMouseOver:g,placeholder:O,tabIndex:_,disableMouseOutBlur:b,dataRepresentativeValue:E([O,_])},T.defaultProps={formValue:"",checked:!1},t.default=T},function(e,t){"us
2023-10-05 12:50:36 UTC	391	IN	Data Raw: 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 74 3d 6f 28 74 2c 65 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 75 6c 6c 21 3d 65 26 26 72 3e 6e 3b 29 65 3d 65 5b 69 28 74 5b 6e 2b 2b 5d 29 5d 3b 72 65 74 75 72 6e 20 6e 26 26 6e 3d 3d 72 3f 65 3a 76 6f 69 64 20 30 7d 76 61 72 20 6f 3d 6e 28 31 34 31 29 2c 69 3d 6e 28 31 32 30 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 68 61 73 28 74 29 7d 65 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 5f 5f 64 61 74 61 5f 5f 3b Data Ascii: ion(e,t,n){function r(e,t){t=o(t,e);for(var n=0,r=t.length;null!=e&&r>n;)e=e[i(t[n++])];return n&&n==r?e:void 0}var o=n(141),i=n(120);e.exports=r},function(e,t){function n(e,t){return e.has(t)}e.exports=n},function(e,t,n){function r(e,t){var n=e.__data__;
2023-10-05 12:50:36 UTC	496	IN	Data Raw: 3d 74 2e 69 73 53 65 61 72 63 68 61 62 6c 65 2c 6f 3d 74 68 69 73 2e 73 74 61 74 65 2c 69 3d 6f 2e 73 65 6c 65 63 74 56 61 6c 75 65 2c 61 3d 6f 2e 66 6f 63 75 73 65 64 56 61 6c 75 65 3b 69 66 28 6e 29 7b 74 68 69 73 2e 73 65 74 53 74 61 74 65 28 7b 66 6f 63 75 73 65 64 4f 70 74 69 6f 6e 3a 6e 75 6c 6c 7d 29 3b 76 61 72 20 75 3d 69 2e 69 6e 64 65 78 4f 66 28 61 29 3b 61 7c 7c 28 75 3d 2d 31 2c 74 68 69 73 2e 61 6e 6e 6f 75 6e 63 65 41 72 69 61 4c 69 76 65 43 6f 6e 74 65 78 74 28 7b 65 76 65 6e 74 3a 22 76 61 6c 75 65 22 7d 29 29 3b 76 61 72 20 6c 3d 69 2e 6c 65 6e 67 74 68 2d 31 2c 73 3d 2d 31 3b 69 66 28 69 2e 6c 65 6e 67 74 68 29 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 70 72 65 76 69 6f 75 73 22 3a 73 3d 30 3d 3d 3d 75 3f 30 3a 75 3d 3d 3d 2d 31 Data Ascii: =t.isSearchable,o=this.state,i=o.selectValue,a=o.focusedValue;if(n){this.setState({focusedOption:null});var u=i.indexOf(a);a\|\|(u=-1,this.announceAriaLiveContext({event:"value"}));var l=i.length-1,s=-1;if(i.length){switch(e){case"previous":s=0===u?0:u===-1
2023-10-05 12:50:36 UTC	544	IN	Data Raw: 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 6c 65 63 74 2e 66 6f 63 75 73 28 29 7d 7d 2c 7b 6b 65 79 3a 22 62 6c 75 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 6c 65 63 74 2e 62 6c 75 72 28 29 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 50 72 6f 70 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 70 72 6f 70 73 5b 65 5d 3f 74 68 69 73 2e 70 72 6f 70 73 5b 65 5d 3a 74 68 69 73 2e 73 74 61 74 65 5b 65 5d 7d 7d 2c 7b 6b 65 79 3a 22 63 61 6c 6c 50 72 6f 70 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 70 72 6f 70 73 5b 65 5d 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d Data Ascii: tion(){this.select.focus()}},{key:"blur",value:function(){this.select.blur()}},{key:"getProp",value:function(e){return void 0!==this.props[e]?this.props[e]:this.state[e]}},{key:"callProp",value:function(e){if("function"==typeof this.props[e]){for(var t,n=
2023-10-05 12:50:36 UTC	592	IN	Data Raw: 75 72 6c 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 41 72 72 61 79 28 65 2e 6c 65 6e 67 74 68 29 3b 65 2e 6c 65 6e 67 74 68 3e 74 3b 74 2b 2b 29 6e 5b 74 5d 3d 65 5b 74 5d 3b 72 65 74 75 72 6e 20 6e 7d 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 71 75 65 73 74 69 6f Data Ascii: url)return!1}return!0}},function(e,t,n){"use strict";function r(e){return e&&e.__esModule?e:{default:e}}function o(e){if(Array.isArray(e)){for(var t=0,n=Array(e.length);e.length>t;t++)n[t]=e[t];return n}return Array.from(e)}function i(e,t){var n=e.questio
2023-10-05 12:50:36 UTC	644	IN	Data Raw: 3b 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 74 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 2c 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 28 72 3d 72 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 6e 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6e 2c 65 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 72 Data Ascii: ;arguments.length>t;t++){var n=null!=arguments[t]?arguments[t]:{},r=Object.keys(n);"function"==typeof Object.getOwnPropertySymbols&&(r=r.concat(Object.getOwnPropertySymbols(n).filter(function(e){return Object.getOwnPropertyDescriptor(n,e).enumerable}))),r
2023-10-05 12:50:36 UTC	692	IN	Data Raw: 6f 6c 6f 72 3a 74 2c 62 6f 72 64 65 72 52 61 64 69 75 73 3a 22 31 65 6d 22 2c 64 69 73 70 6c 61 79 3a 22 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 22 2c 6d 61 72 67 69 6e 4c 65 66 74 3a 72 3f 22 31 65 6d 22 3a 6e 75 6c 6c 2c 68 65 69 67 68 74 3a 22 31 65 6d 22 2c 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3a 22 74 6f 70 22 2c 77 69 64 74 68 3a 22 31 65 6d 22 7d 29 7d 29 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2c 6e 3d 65 2e 63 78 2c 72 3d 65 2e 67 65 74 53 74 79 6c 65 73 2c 69 3d 65 2e 69 6e 6e 65 72 50 72 6f 70 73 2c 61 3d 65 2e 69 73 46 6f 63 75 73 65 64 2c 73 3d 65 2e 69 73 52 74 6c 2c 63 3d 65 2e 74 68 65 6d 65 2e 63 6f 6c 6f 72 73 2c 64 3d 61 3f 63 2e 6e 65 75 74 72 61 6c 38 30 3a 63 2e 6e 65 75 74 72 Data Ascii: olor:t,borderRadius:"1em",display:"inline-block",marginLeft:r?"1em":null,height:"1em",verticalAlign:"top",width:"1em"})})},T=function(e){var t=e.className,n=e.cx,r=e.getStyles,i=e.innerProps,a=e.isFocused,s=e.isRtl,c=e.theme.colors,d=a?c.neutral80:c.neutr
2023-10-05 12:50:36 UTC	744	IN	Data Raw: 22 73 65 6c 65 63 74 49 74 65 6d 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 70 72 6f 70 73 2c 6e 3d 74 2e 69 73 4d 75 6c 74 69 56 61 6c 75 65 64 2c 72 3d 74 2e 73 65 6c 65 63 74 65 64 3b 69 66 28 6e 29 7b 76 61 72 20 6f 3d 72 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 69 64 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 3d 6e 2c 65 7d 2c 7b 7d 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 6f 5b 65 2e 69 64 5d 3f 64 65 6c 65 74 65 20 6f 5b 65 2e 69 64 5d 3a 6f 5b 65 2e 69 64 5d 3d 65 2e 69 64 2c 76 6f 69 64 20 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 43 68 61 6e 67 65 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 29 29 7d 76 61 72 20 69 3d 72 7c 7c 7b 7d 2c 61 3d 69 2e Data Ascii: "selectItem",value:function(e){var t=this.props,n=t.isMultiValued,r=t.selected;if(n){var o=r.reduce(function(e,t){var n=t.id;return e[n]=n,e},{});return void 0!==o[e.id]?delete o[e.id]:o[e.id]=e.id,void this.props.onChange(Object.keys(o))}var i=r\|\|{},a=i.
2023-10-05 12:50:36 UTC	765	IN	Data Raw: 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 6f 3d 6e 28 37 39 37 29 2c 69 3d 72 28 6f 29 2c 61 3d 6e 28 37 39 38 29 2c 75 3d 72 28 61 29 2c 6c 3d 6e 28 33 35 32 29 2c 73 3d 72 28 6c 29 3b 74 2e 64 65 66 61 75 6c 74 3d 7b 52 6f 6f 74 3a 73 2e 64 65 66 61 75 6c 74 2c 43 6f 6e 74 65 6e 74 3a 69 2e 64 65 66 61 75 6c 74 2c 48 65 61 64 65 72 3a 75 2e 64 65 66 61 75 6c 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 Data Ascii: &&e.__esModule?e:{default:e}}Object.defineProperty(t,"__esModule",{value:!0});var o=n(797),i=r(o),a=n(798),u=r(a),l=n(352),s=r(l);t.default={Root:s.default,Content:i.default,Header:u.default}},function(e,t,n){"use strict";function r(e){return e&&e.__esMod
2023-10-05 12:50:36 UTC	781	IN	Data Raw: 3d 75 2e 70 6f 73 69 74 69 6f 6e 3f 69 2e 6c 65 6e 67 74 68 2d 75 2e 70 6f 73 69 74 69 6f 6e 3a 30 3b 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 33 44 28 30 2c 20 22 2b 64 2b 22 70 78 2c 20 22 2b 66 2b 22 70 78 29 22 2c 61 2e 73 74 79 6c 65 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 22 74 72 61 6e 73 66 6f 72 6d 20 30 6d 73 22 2c 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 30 2c 20 22 2b 66 2b 22 70 78 29 22 2c 61 2e 73 74 79 6c 65 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 22 Data Ascii: =u.position?i.length-u.position:0;requestAnimationFrame(function(){a.style.transform="translate3D(0, "+d+"px, "+f+"px)",a.style.transition="transform 0ms",requestAnimationFrame(function(){a.style.transform="translate3d(0, 0, "+f+"px)",a.style.transition="
2023-10-05 12:50:36 UTC	797	IN	Data Raw: 46 6f 72 45 76 61 6c 75 61 74 69 6f 6e 7d 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 2e 61 64 64 28 65 29 7d 29 2c 74 5b 65 5d 3d 28 30 2c 67 2e 64 65 66 61 75 6c 74 29 28 74 5b 65 5d 29 3f 6f 3a 6f 5b 30 5d 7d 7d 29 2c 74 2e 66 69 65 6c 64 73 46 6f 72 45 76 61 6c 75 61 74 69 6f 6e 3d 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 66 69 65 6c 64 73 46 6f 72 45 76 61 6c 75 61 74 69 6f 6e 3f 65 2e 66 69 65 6c 64 73 46 6f 72 45 76 61 6c 75 61 74 69 6f 6e 3a 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 Data Ascii: ForEvaluation})).forEach(function(e){return n.add(e)}),t[e]=(0,g.default)(t[e])?o:o[0]}}),t.fieldsForEvaluation=Array.from(n),t}function a(e){return e&&e.fieldsForEvaluation?e.fieldsForEvaluation:[]}function u(){var e=arguments.length>0&&void 0!==argument
2023-10-05 12:50:36 UTC	813	IN	Data Raw: 72 28 76 29 2c 6d 3d 74 2e 4d 41 54 43 48 5f 52 41 54 49 4e 47 5f 47 52 49 44 3d 22 67 72 69 64 22 2c 62 3d 74 2e 6e 6f 72 6d 61 6c 69 7a 65 43 61 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 71 75 65 73 74 69 6f 6e 44 61 74 61 2c 6e 3d 74 2e 68 61 73 43 61 70 74 69 6f 6e 2c 72 3d 74 2e 67 72 69 64 43 61 70 74 69 6f 6e 2c 6f 3d 74 2e 69 73 53 63 61 6c 65 51 75 65 73 74 69 6f 6e 2c 69 3d 74 2e 73 63 61 6c 65 43 61 70 74 69 6f 6e 2c 61 3d 74 2e 73 69 6d 70 6c 65 51 75 65 73 74 69 6f 6e 47 72 69 64 3b 72 65 74 75 72 6e 20 6f 26 26 21 61 3f 69 3a 6e 3f 72 3a 6e 75 6c 6c 7d 2c 67 3d 74 2e 6e 6f 72 6d 61 6c 69 7a 65 41 6e 63 68 6f 72 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 70 61 6e 73 2c 6e 3d 65 2e Data Ascii: r(v),m=t.MATCH_RATING_GRID="grid",b=t.normalizeCaption=function(e){var t=e.questionData,n=t.hasCaption,r=t.gridCaption,o=t.isScaleQuestion,i=t.scaleCaption,a=t.simpleQuestionGrid;return o&&!a?i:n?r:null},g=t.normalizeAnchors=function(e){var t=e.spans,n=e.
2023-10-05 12:50:36 UTC	829	IN	Data Raw: 70 64 6f 77 6e 73 22 2c 72 3d 74 2e 54 45 58 54 41 52 45 41 5f 42 4c 4f 43 4b 54 59 50 45 3d 22 74 65 78 74 61 72 65 61 22 2c 6f 3d 28 74 2e 4d 41 54 52 49 58 5f 42 4c 4f 43 4b 54 59 50 45 3d 22 6d 61 74 72 69 78 22 2c 74 2e 51 55 45 53 54 49 4f 4e 5f 42 4c 4f 43 4b 5f 54 59 50 45 53 3d 5b 6e 2c 72 2c 22 63 61 6c 65 6e 64 61 72 22 2c 22 63 68 6f 6f 73 65 22 2c 22 64 72 6f 70 64 6f 77 6e 22 2c 22 67 72 69 64 22 2c 22 6c 6f 6e 67 66 6f 72 6d 22 2c 22 6d 65 64 69 61 53 74 72 65 61 6d 65 72 46 69 6c 65 55 70 6c 6f 61 64 65 72 22 2c 22 71 75 65 73 74 69 6f 6e 54 65 78 74 22 2c 22 72 61 77 68 74 6d 6c 22 2c 22 74 65 78 74 22 2c 22 74 65 78 74 66 69 65 6c 64 22 2c 22 74 69 6d 65 6f 75 74 2d 70 61 67 65 22 2c 22 74 6f 6f 6c 74 69 70 22 2c 22 74 72 69 70 41 64 76 Data Ascii: pdowns",r=t.TEXTAREA_BLOCKTYPE="textarea",o=(t.MATRIX_BLOCKTYPE="matrix",t.QUESTION_BLOCK_TYPES=[n,r,"calendar","choose","dropdown","grid","longform","mediaStreamerFileUploader","questionText","rawhtml","text","textfield","timeout-page","tooltip","tripAdv
2023-10-05 12:50:36 UTC	845	IN	Data Raw: 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 74 2e 6c 65 6e 67 74 68 3e 6e 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: eturn e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},c=function(){function e(e,t){for(var n=0;t.length>n;n++){var r=t[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.def
2023-10-05 12:50:36 UTC	861	IN	Data Raw: 72 3d 65 2e 67 65 74 53 74 79 6c 65 73 2c 75 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2c 6c 3d 65 2e 69 73 44 69 73 61 62 6c 65 64 2c 73 3d 65 2e 69 73 46 6f 63 75 73 65 64 2c 63 3d 65 2e 69 6e 6e 65 72 52 65 66 2c 64 3d 65 2e 69 6e 6e 65 72 50 72 6f 70 73 2c 66 3d 65 2e 6d 65 6e 75 49 73 4f 70 65 6e 3b 72 65 74 75 72 6e 20 69 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 6f 28 7b 72 65 66 3a 63 2c 63 6c 61 73 73 4e 61 6d 65 3a 6e 28 28 30 2c 61 2e 63 73 73 29 28 72 28 22 63 6f 6e 74 72 6f 6c 22 2c 65 29 29 2c 7b 63 6f 6e 74 72 6f 6c 3a 21 30 2c 22 63 6f 6e 74 72 6f 6c 2d 2d 69 73 2d 64 69 73 61 62 6c 65 64 22 3a 6c 2c 22 63 6f 6e 74 72 6f 6c 2d 2d 69 73 2d 66 6f 63 75 73 65 64 22 3a 73 2c 22 63 6f 6e 74 72 6f 6c 2d 2d Data Ascii: r=e.getStyles,u=e.className,l=e.isDisabled,s=e.isFocused,c=e.innerRef,d=e.innerProps,f=e.menuIsOpen;return i.default.createElement("div",o({ref:c,className:n((0,a.css)(r("control",e)),{control:!0,"control--is-disabled":l,"control--is-focused":s,"control--
2023-10-05 12:50:36 UTC	877	IN	Data Raw: 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 29 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 69 66 28 65 3d 3d 3d 74 29 72 65 74 75 72 6e 21 30 3b 69 66 28 65 26 26 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 6e 28 65 29 26 26 22 6f 62 6a 65 63 74 22 3d 3d 6e 28 74 29 29 7b 76 61 Data Ascii: symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}function r(e,t){if(e===t)return!0;if(e&&t&&"object"==n(e)&&"object"==n(t)){va
2023-10-05 12:50:36 UTC	893	IN	Data Raw: 64 65 78 4f 66 28 22 3a 22 2c 39 29 2b 31 3b 76 61 72 20 6c 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 65 2c 61 2e 6c 65 6e 67 74 68 2d 31 29 2e 74 72 69 6d 28 29 3b 72 65 74 75 72 6e 20 6c 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 65 29 2e 74 72 69 6d 28 29 2b 6c 2b 22 3b 22 2c 31 3d 3d 3d 44 7c 7c 32 3d 3d 3d 44 26 26 69 28 6c 2c 31 29 3f 22 2d 77 65 62 6b 69 74 2d 22 2b 6c 2b 6c 3a 6c 7d 69 66 28 30 3d 3d 3d 44 7c 7c 32 3d 3d 3d 44 26 26 21 69 28 61 2c 31 29 29 72 65 74 75 72 6e 20 61 3b 73 77 69 74 63 68 28 75 29 7b 63 61 73 65 20 31 30 31 35 3a 72 65 74 75 72 6e 20 39 37 3d 3d 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 31 30 29 3f 22 2d 77 65 62 6b 69 74 2d 22 2b 61 2b 61 3a 61 3b 63 61 73 65 20 39 35 31 3a 72 65 74 75 72 6e 20 31 31 36 3d 3d 3d 61 2e Data Ascii: dexOf(":",9)+1;var l=a.substring(e,a.length-1).trim();return l=a.substring(0,e).trim()+l+";",1===D\|\|2===D&&i(l,1)?"-webkit-"+l+l:l}if(0===D\|\|2===D&&!i(a,1))return a;switch(u){case 1015:return 97===a.charCodeAt(10)?"-webkit-"+a+a:a;case 951:return 116===a.
2023-10-05 12:50:36 UTC	909	IN	Data Raw: 3b 28 30 2c 75 2e 64 65 66 61 75 6c 74 29 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2c 22 6c 69 73 74 65 6e 65 72 20 6d 75 73 74 20 62 65 20 61 20 66 75 6e 63 74 69 6f 6e 2e 22 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 73 74 6f 72 65 2e 67 65 74 53 74 61 74 65 28 29 2e 64 72 61 67 4f 66 66 73 65 74 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 2e 73 74 6f 72 65 2e 67 65 74 53 74 61 74 65 28 29 2e 64 72 61 67 4f 66 66 73 65 74 3b 72 21 3d 3d 6e 26 26 28 6e 3d 72 2c 65 28 29 29 7d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 6f 72 65 2e 73 75 62 73 63 72 69 62 65 28 72 29 7d 7d 2c 7b 6b 65 79 3a 22 63 61 6e 44 72 61 67 53 6f 75 72 63 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 Data Ascii: ;(0,u.default)("function"==typeof e,"listener must be a function.");var n=this.store.getState().dragOffset,r=function(){var r=t.store.getState().dragOffset;r!==n&&(n=r,e())};return this.store.subscribe(r)}},{key:"canDragSource",value:function(e){var t=thi
2023-10-05 12:50:36 UTC	925	IN	Data Raw: 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 64 65 66 61 75 6c 74 2c 7b 74 79 70 65 3a 73 2e 49 43 4f 4e 5f 54 59 50 45 53 2e 41 52 52 4f 57 5f 52 49 47 48 54 7d 29 29 29 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 74 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 Data Ascii: t.createElement(c.default,{type:s.ICON_TYPES.ARROW_RIGHT}))))}Object.defineProperty(t,"__esModule",{value:!0});var i=Object.assign\|\|function(e){for(var t=1;arguments.length>t;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)
2023-10-05 12:50:36 UTC	941	IN	Data Raw: 70 65 2c 6e 29 2c 72 26 26 65 28 74 2c 72 29 2c 74 7d 7d 28 29 2c 63 3d 6e 28 31 29 2c 64 3d 72 28 63 29 2c 66 3d 6e 28 37 36 29 2c 70 3d 72 28 66 29 2c 68 3d 6e 28 35 38 29 2c 76 3d 72 28 68 29 2c 79 3d 6e 28 33 29 2c 6d 3d 72 28 79 29 2c 62 3d 6e 28 31 33 30 39 29 2c 67 3d 72 28 62 29 2c 5f 3d 6e 28 32 34 29 2c 4f 3d 72 28 5f 29 2c 45 3d 6e 28 33 33 29 2c 54 3d 72 28 45 29 2c 77 3d 6e 28 31 31 35 29 2c 53 3d 6e 28 39 39 29 2c 43 3d 72 28 53 29 2c 50 3d 6e 28 31 35 29 2c 49 3d 72 28 50 29 2c 4d 3d 6e 28 37 34 37 29 2c 41 3d 72 28 4d 29 2c 44 3d 6e 28 34 29 2c 78 3d 6e 28 31 30 39 29 2c 6b 3d 6e 28 33 34 35 29 2c 52 3d 63 2e 50 72 6f 70 54 79 70 65 73 2e 62 6f 6f 6c 2c 4e 3d 63 2e 50 72 6f 70 54 79 70 65 73 2e 73 74 72 69 6e 67 2c 4c 3d 63 2e 50 72 6f 70 Data Ascii: pe,n),r&&e(t,r),t}}(),c=n(1),d=r(c),f=n(76),p=r(f),h=n(58),v=r(h),y=n(3),m=r(y),b=n(1309),g=r(b),_=n(24),O=r(_),E=n(33),T=r(E),w=n(115),S=n(99),C=r(S),P=n(15),I=r(P),M=n(747),A=r(M),D=n(4),x=n(109),k=n(345),R=c.PropTypes.bool,N=c.PropTypes.string,L=c.Prop
2023-10-05 12:50:36 UTC	957	IN	Data Raw: 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 2e 54 41 5f 43 4c 4f 53 45 3b 72 65 74 75 72 6e 20 65 7c 7c 22 43 6c 6f 73 65 22 7d 2c 6f 3d 6e 2c 61 28 72 2c 6f 29 7d 72 65 74 75 72 6e 20 75 28 74 2c 65 29 2c 73 28 74 2c 5b 7b 6b 65 79 3a 22 72 65 6e 64 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 70 72 6f 70 73 2c 74 3d 65 2e 69 73 44 72 6f 70 64 6f 77 6e 4c 61 62 65 6c 49 6e 61 63 74 69 76 65 2c 6e 3d 65 2e 6c 61 62 65 6c 2c 72 3d 65 2e 64 72 6f 70 64 6f 77 6e 4c 69 73 74 2c 69 3d 65 2e 74 69 74 6c 65 2c 61 3d 65 2e 63 6f 6e 74 61 69 6e 65 72 53 74 79 6c 65 73 2c 75 3d 65 2e 73 65 6c 65 63 74 6f 72 53 74 79 6c 65 73 2c 73 3d 65 2e 73 65 6c 65 63 74 49 74 65 6d 2c 63 3d 65 2e 63 61 6c 65 6e 64 61 72 54 69 74 6c Data Ascii: .translations.TA_CLOSE;return e\|\|"Close"},o=n,a(r,o)}return u(t,e),s(t,[{key:"render",value:function(){var e=this.props,t=e.isDropdownLabelInactive,n=e.label,r=e.dropdownList,i=e.title,a=e.containerStyles,u=e.selectorStyles,s=e.selectItem,c=e.calendarTitl
2023-10-05 12:50:36 UTC	973	IN	Data Raw: 76 65 72 66 6c 6f 77 3d 6e 2e 65 76 61 6c 75 61 74 65 43 6f 6e 74 65 6e 74 4f 76 65 72 66 6c 6f 77 2e 62 69 6e 64 28 6e 29 2c 6e 2e 63 6f 6e 74 65 6e 74 53 69 7a 65 4f 62 73 65 72 76 65 72 3d 6e 65 77 20 76 2e 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 28 6e 2e 65 76 61 6c 75 61 74 65 43 6f 6e 74 65 6e 74 4f 76 65 72 66 6c 6f 77 29 2c 6e 7d 72 65 74 75 72 6e 20 75 28 74 2c 65 29 2c 6c 28 74 2c 5b 7b 6b 65 79 3a 22 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 66 2e 64 65 66 61 75 6c 74 2e 66 69 6e 64 44 4f 4d 4e 6f 64 65 28 74 68 69 73 29 3b 74 68 69 73 2e 63 6f 6e 74 65 6e 74 53 69 7a 65 4f 62 73 65 72 76 65 72 2e 6f 62 73 65 72 76 65 28 65 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6f Data Ascii: verflow=n.evaluateContentOverflow.bind(n),n.contentSizeObserver=new v.ResizeObserver(n.evaluateContentOverflow),n}return u(t,e),l(t,[{key:"componentDidMount",value:function(){var e=f.default.findDOMNode(this);this.contentSizeObserver.observe(e)}},{key:"co
2023-10-05 12:50:36 UTC	989	IN	Data Raw: 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2e 6b 65 79 2c 72 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 29 2c 72 26 26 65 28 74 2c 72 29 2c 74 7d 7d 28 29 2c 73 3d 6e 28 31 29 2c 63 3d 72 28 73 29 2c 64 3d 6e 28 37 29 2c 66 3d 6e 28 38 35 31 29 2c 70 3d 72 28 66 29 2c 68 3d 73 2e 50 72 6f 70 54 79 70 65 73 2e 61 72 72 61 79 2c 76 3d 73 2e 50 72 6f 70 54 79 70 65 73 2e 6f 62 6a 65 63 74 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 Data Ascii: merable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,r.key,r)}}return function(t,n,r){return n&&e(t.prototype,n),r&&e(t,r),t}}(),s=n(1),c=r(s),d=n(7),f=n(851),p=r(f),h=s.PropTypes.array,v=s.PropTypes.object,y=function(e){func
2023-10-05 12:50:36 UTC	1005	IN	Data Raw: 6c 6c 79 4e 65 63 65 73 73 61 72 79 43 6f 6f 6b 69 65 73 49 6e 66 6f 2c 6e 3d 74 2e 74 69 74 6c 65 2c 72 3d 74 2e 6d 65 73 73 61 67 65 2c 6f 3d 74 2e 63 6f 6f 6b 69 65 73 49 6e 66 6f 2c 69 3d 65 2e 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 2e 63 6f 6f 6b 69 65 49 6e 66 6f 4c 61 62 65 6c 73 3b 72 65 74 75 72 6e 7b 74 69 74 6c 65 3a 6e 2c 6d 65 73 73 61 67 65 3a 72 2c 63 6f 6f 6b 69 65 73 49 6e 66 6f 3a 6f 2c 63 6f 6f 6b 69 65 49 6e 66 6f 4c 61 62 65 6c 73 3a 69 7d 7d 3b 74 2e 64 65 66 61 75 6c 74 3d 28 30 2c 61 2e 77 69 74 68 44 61 74 61 29 28 75 29 28 69 2e 64 65 66 61 75 6c 74 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 Data Ascii: llyNecessaryCookiesInfo,n=t.title,r=t.message,o=t.cookiesInfo,i=e.cookieBanner.cookieInfoLabels;return{title:n,message:r,cookiesInfo:o,cookieInfoLabels:i}};t.default=(0,a.withData)(u)(i.default)},function(e,t,n){"use strict";function r(e){return e&&e.__es
2023-10-05 12:50:36 UTC	1021	IN	Data Raw: 61 63 6b 3a 65 2e 70 6f 70 2c 6f 6e 43 6c 6f 73 65 3a 6e 2c 73 68 6f 77 42 61 63 6b 42 75 74 74 6f 6e 3a 65 2e 70 61 74 68 6e 61 6d 65 21 3d 3d 75 2e 50 41 4e 45 4c 5f 49 44 5f 4d 41 49 4e 2c 76 65 72 73 69 6f 6e 3a 45 2e 43 4f 4f 4b 49 45 5f 42 41 4e 4e 45 52 5f 56 45 52 53 49 4f 4e 5f 56 33 2c 62 61 63 6b 42 75 74 74 6f 6e 54 65 78 74 3a 6f 7d 29 2c 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 4f 2e 64 65 66 61 75 6c 74 2e 43 6f 6e 74 65 6e 74 2c 6e 75 6c 6c 2c 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 2e 64 65 66 61 75 6c 74 2e 43 6f 6e 73 75 6d 65 72 2c 7b 6e 61 76 69 67 61 74 69 6f 6e 3a 65 7d 2c 61 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 2e 64 65 66 61 75 6c Data Ascii: ack:e.pop,onClose:n,showBackButton:e.pathname!==u.PANEL_ID_MAIN,version:E.COOKIE_BANNER_VERSION_V3,backButtonText:o}),a.default.createElement(O.default.Content,null,a.default.createElement(s.default.Consumer,{navigation:e},a.default.createElement(s.defaul
2023-10-05 12:50:36 UTC	1037	IN	Data Raw: 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 74 2e 6c 65 6e 67 74 68 3e 6e 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 Data Ascii: alue:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}Object.defineProperty(t,"__esModule",{value:!0});var l=function(){function e(e,t){for(var n=0;t.length>n;n++){var r=t[n];r.enumerable=r
2023-10-05 12:50:36 UTC	1053	IN	Data Raw: 49 4f 4e 5f 4d 4f 56 45 5f 46 4f 52 57 41 52 44 5f 42 55 54 54 4f 4e 5f 43 4c 49 43 4b 45 44 3d 22 47 45 4f 4c 4f 43 41 54 49 4f 4e 5f 4d 4f 56 45 5f 46 4f 52 57 41 52 44 5f 42 55 54 54 4f 4e 5f 43 4c 49 43 4b 45 44 22 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 6f 28 74 68 69 73 2c 74 29 3b 76 61 72 20 6e 3d 69 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 29 3b 72 65 74 75 72 6e 20 6e 2e 73 74 61 74 65 3d 7b 6c 6f 6e 67 69 74 75 64 65 3a 22 22 2c 6c 61 74 69 74 75 64 65 3a 22 22 7d 2c 6e 2e 68 61 6e 64 6c 65 43 75 72 72 65 6e 74 50 6f 73 69 74 69 6f 6e 3d 6e 2e 68 61 6e 64 6c 65 43 75 Data Ascii: ION_MOVE_FORWARD_BUTTON_CLICKED="GEOLOCATION_MOVE_FORWARD_BUTTON_CLICKED",v=function(e){function t(e){o(this,t);var n=i(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,e));return n.state={longitude:"",latitude:""},n.handleCurrentPosition=n.handleCu
2023-10-05 12:50:36 UTC	1069	IN	Data Raw: 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 53 65 6c 65 63 74 41 6c 6c 4d 65 73 73 61 67 65 56 69 73 69 62 69 6c 69 74 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 73 65 74 53 74 61 74 65 28 7b 73 68 6f 77 4d 75 6c 74 69 53 65 6c 65 63 74 4d 65 73 73 61 67 65 3a 65 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 6e 64 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 74 68 69 73 2e 70 72 6f 70 73 2c 6e 3d 74 2e 61 72 69 61 4c 61 62 65 6c 2c 72 3d 74 2e 63 61 70 74 69 6f 6e 2c 61 3d 74 2e 68 61 73 56 61 6c 69 64 61 74 69 6f 6e 46 61 69 6c 75 72 65 2c 75 3d 74 2e 68 61 73 56 61 6c 69 64 61 74 69 6f 6e 46 61 69 6c 75 72 65 46 6f 72 45 6d 70 74 79 2c 6c 3d 74 2e 69 73 4d 75 6c 74 69 53 65 Data Ascii: ,{key:"handleSelectAllMessageVisibility",value:function(e){this.setState({showMultiSelectMessage:e})}},{key:"render",value:function(){var e=this,t=this.props,n=t.ariaLabel,r=t.caption,a=t.hasValidationFailure,u=t.hasValidationFailureForEmpty,l=t.isMultiSe
2023-10-05 12:50:36 UTC	1085	IN	Data Raw: 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 65 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 Data Ascii: nnot call a class as a function")}function a(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!=typeof t&&"function"!=typeof t?e:t}function u(e,t){if("function"!=typeof t&&null!==t)throw ne
2023-10-05 12:50:36 UTC	1101	IN	Data Raw: 75 65 2e 62 69 6e 64 28 6e 29 2c 6e 2e 73 65 74 45 72 72 6f 72 3d 6e 2e 73 65 74 45 72 72 6f 72 2e 62 69 6e 64 28 6e 29 2c 6e 2e 73 65 74 45 72 72 6f 72 43 6f 64 65 3d 6e 2e 73 65 74 45 72 72 6f 72 43 6f 64 65 2e 62 69 6e 64 28 6e 29 2c 6e 2e 73 65 74 4d 65 64 69 61 53 74 61 74 75 73 3d 6e 2e 73 65 74 4d 65 64 69 61 53 74 61 74 75 73 2e 62 69 6e 64 28 6e 29 2c 6e 2e 67 65 74 4d 75 6c 74 69 6d 65 64 69 61 43 6f 6d 70 6f 6e 65 6e 74 3d 6e 2e 67 65 74 4d 75 6c 74 69 6d 65 64 69 61 43 6f 6d 70 6f 6e 65 6e 74 2e 62 69 6e 64 28 6e 29 2c 6e 2e 72 65 6e 64 65 72 45 72 72 6f 72 4d 65 73 73 61 67 65 3d 6e 2e 72 65 6e 64 65 72 45 72 72 6f 72 4d 65 73 73 61 67 65 2e 62 69 6e 64 28 6e 29 2c 6e 2e 76 61 6c 69 64 61 74 69 6f 6e 49 44 3d 30 2c 6e 2e 6d 75 6c 74 69 6d 65 Data Ascii: ue.bind(n),n.setError=n.setError.bind(n),n.setErrorCode=n.setErrorCode.bind(n),n.setMediaStatus=n.setMediaStatus.bind(n),n.getMultimediaComponent=n.getMultimediaComponent.bind(n),n.renderErrorMessage=n.renderErrorMessage.bind(n),n.validationID=0,n.multime
2023-10-05 12:50:36 UTC	1117	IN	Data Raw: 2e 62 6f 6f 6c 2c 45 3d 73 2e 50 72 6f 70 54 79 70 65 73 2e 6e 75 6d 62 65 72 2c 54 3d 73 2e 50 72 6f 70 54 79 70 65 73 2e 73 74 72 69 6e 67 2c 77 3d 73 2e 50 72 6f 70 54 79 70 65 73 2e 73 68 61 70 65 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 28 74 68 69 73 2c 74 29 3b 76 61 72 20 6e 3d 61 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 29 3b 72 65 74 75 72 6e 20 6e 2e 73 74 61 74 65 3d 7b 73 68 6f 77 4e 65 73 74 65 64 44 72 6f 70 64 6f 77 6e 3a 65 2e 73 68 6f 77 46 75 6c 6c 4e 44 44 2c 68 61 73 42 6f 78 53 68 61 64 6f 77 3a 21 31 7d 2c 6e 2e 68 61 6e 64 6c 65 53 68 6f 77 42 6f 78 53 Data Ascii: .bool,E=s.PropTypes.number,T=s.PropTypes.string,w=s.PropTypes.shape,S=function(e){function t(e){i(this,t);var n=a(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,e));return n.state={showNestedDropdown:e.showFullNDD,hasBoxShadow:!1},n.handleShowBoxS
2023-10-05 12:50:36 UTC	1133	IN	Data Raw: 4c 41 4e 47 55 41 47 45 2c 75 73 65 4e 61 74 69 76 65 44 72 6f 70 64 6f 77 6e 3a 62 7d 29 29 29 29 29 7d 7d 5d 29 2c 74 7d 28 6c 2e 43 6f 6d 70 6f 6e 65 6e 74 29 3b 6d 2e 70 72 6f 70 54 79 70 65 73 3d 7b 70 61 67 65 72 50 61 67 65 3a 6c 2e 50 72 6f 70 54 79 70 65 73 2e 6e 75 6d 62 65 72 2c 70 61 67 65 72 50 65 72 63 65 6e 74 3a 6c 2e 50 72 6f 70 54 79 70 65 73 2e 6e 75 6d 62 65 72 2c 64 65 63 6f 72 61 74 69 76 65 4c 6f 67 6f 3a 6c 2e 50 72 6f 70 54 79 70 65 73 2e 73 74 72 69 6e 67 2c 64 65 63 6f 72 61 74 69 76 65 4c 6f 67 6f 41 6c 74 3a 6c 2e 50 72 6f 70 54 79 70 65 73 2e 73 74 72 69 6e 67 2c 73 70 6c 61 73 68 4c 6f 67 6f 3a 6c 2e 50 72 6f 70 54 79 70 65 73 2e 73 74 72 69 6e 67 2c 73 70 6c 61 73 68 4c 6f 67 6f 41 6c 74 3a 6c 2e 50 72 6f 70 54 79 70 65 73 Data Ascii: LANGUAGE,useNativeDropdown:b})))))}}]),t}(l.Component);m.propTypes={pagerPage:l.PropTypes.number,pagerPercent:l.PropTypes.number,decorativeLogo:l.PropTypes.string,decorativeLogoAlt:l.PropTypes.string,splashLogo:l.PropTypes.string,splashLogoAlt:l.PropTypes
2023-10-05 12:50:36 UTC	1149	IN	Data Raw: 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 29 2c 72 26 26 65 28 74 2c 72 29 2c 74 7d 7d 28 29 2c 6c 3d 6e 28 31 29 2c 73 3d 72 28 6c 29 2c 63 3d 6e 28 35 39 29 2c 64 3d 72 28 63 29 2c 66 3d 6e 28 33 35 38 29 2c 70 3d 6e 28 38 35 37 29 2c 68 3d 6e 28 31 30 33 33 29 2c 76 3d 72 28 68 29 2c 79 3d 6c 2e 50 72 6f 70 54 79 70 65 73 2e 61 72 72 61 79 4f 66 2c 6d 3d 6c 2e 50 72 6f 70 54 79 70 65 73 2e 73 68 61 70 65 2c 62 3d 6c 2e 50 72 6f 70 54 79 70 65 73 2e 73 74 72 69 6e 67 2c 67 3d 6c 2e 50 72 6f 70 54 79 70 65 73 2e 66 75 6e 63 2c 5f 3d 74 2e 44 4e 44 4c 61 79 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 6f 28 74 68 69 Data Ascii: turn function(t,n,r){return n&&e(t.prototype,n),r&&e(t,r),t}}(),l=n(1),s=r(l),c=n(59),d=r(c),f=n(358),p=n(857),h=n(1033),v=r(h),y=l.PropTypes.arrayOf,m=l.PropTypes.shape,b=l.PropTypes.string,g=l.PropTypes.func,_=t.DNDLayout=function(e){function t(e){o(thi
2023-10-05 12:50:36 UTC	1165	IN	Data Raw: 65 44 4e 44 4c 61 79 6f 75 74 3a 70 2e 44 65 73 6b 74 6f 70 44 4e 44 4c 61 79 6f 75 74 3b 72 65 74 75 72 6e 20 63 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 71 75 65 73 74 69 6f 6e 42 6c 6f 63 6b 20 72 61 6e 6b 69 6e 67 51 75 65 73 74 69 6f 6e 22 2c 72 65 66 3a 74 68 69 73 2e 73 65 74 57 72 61 70 70 65 72 52 65 66 7d 2c 63 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 66 2e 64 65 66 61 75 6c 74 2c 7b 6b 65 79 3a 22 71 75 65 73 74 69 6f 6e 22 2c 63 61 70 74 69 6f 6e 3a 6e 2c 76 61 6c 69 64 61 74 69 6f 6e 45 6d 70 74 79 3a 73 2c 76 61 6c 69 64 61 74 69 6f 6e 46 61 69 6c 65 64 3a 64 2c 72 65 71 75 69 72 65 64 46 69 65 6c 64 3a 68 2c 76 61 6c 69 64 61 74 69 Data Ascii: eDNDLayout:p.DesktopDNDLayout;return c.default.createElement("div",{className:"questionBlock rankingQuestion",ref:this.setWrapperRef},c.default.createElement(f.default,{key:"question",caption:n,validationEmpty:s,validationFailed:d,requiredField:h,validati
2023-10-05 12:50:36 UTC	1181	IN	Data Raw: 73 52 65 71 75 69 72 65 64 3a 6f 2c 71 75 65 73 74 69 6f 6e 49 64 3a 73 2c 69 73 53 75 62 43 6f 6d 70 6f 6e 65 6e 74 3a 75 7d 29 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 6e 64 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 74 68 69 73 2e 70 72 6f 70 73 2c 6e 3d 74 2e 69 64 2c 72 3d 74 2e 61 72 69 61 4c 61 62 65 6c 2c 69 3d 74 2e 63 61 70 74 69 6f 6e 2c 61 3d 74 2e 6f 70 74 69 6f 6e 73 2c 75 3d 74 2e 71 46 69 65 6c 64 73 2c 6c 3d 74 2e 68 61 73 56 61 6c 69 64 61 74 69 6f 6e 46 61 69 6c 75 72 65 2c 73 3d 74 2e 68 61 73 56 61 6c 69 64 61 74 69 6f 6e 46 61 69 6c 75 72 65 46 6f 72 45 6d 70 74 79 2c 63 3d 74 2e 69 73 52 65 71 75 69 72 65 64 2c 66 3d 74 2e 75 73 65 46 69 65 6c 64 73 65 74 2c 68 3d 74 2e 69 73 53 75 62 43 6f Data Ascii: sRequired:o,questionId:s,isSubComponent:u})})}},{key:"render",value:function(){var e,t=this.props,n=t.id,r=t.ariaLabel,i=t.caption,a=t.options,u=t.qFields,l=t.hasValidationFailure,s=t.hasValidationFailureForEmpty,c=t.isRequired,f=t.useFieldset,h=t.isSubCo
2023-10-05 12:50:36 UTC	1197	IN	Data Raw: 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 28 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 75 28 65 29 29 3f 65 2e 63 61 70 74 69 6f 6e 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 65 2e 62 6c 6f 63 6b 54 79 70 65 2c 61 3d 65 2e 73 75 72 76 65 79 54 79 70 65 2c 6c 3d 76 6f 69 64 20 30 3b 6e 75 6c 6c 21 3d 3d 65 2e 63 61 70 74 69 6f 6e 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 75 28 65 2e 63 61 70 74 69 6f 6e 29 26 26 28 61 3d 65 2e 63 61 70 74 69 6f 6e 2e 62 6c 6f 63 6b 54 79 70 65 2c 6c 3d 65 2e 63 61 70 74 69 6f 6e 2e 6c 69 6e 6b 74 65 78 74 29 3b 76 61 72 20 63 3d 74 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 7c 7c 7b 7d 2c 66 3d 69 28 65 2e 63 61 70 74 69 6f 6e 2c 63 2c 61 2c 72 29 2c 68 3d 21 21 65 Data Ascii: e&&"object"===(void 0===e?"undefined":u(e))?e.caption:e}function a(e,t){var n,r=e.blockType,a=e.surveyType,l=void 0;null!==e.caption&&"object"===u(e.caption)&&(a=e.caption.blockType,l=e.caption.linktext);var c=t.translations\|\|{},f=i(e.caption,c,a,r),h=!!e
2023-10-05 12:50:36 UTC	1213	IN	Data Raw: 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 67 2e 64 65 66 61 75 6c 74 2e 74 69 6d 65 6f 75 74 57 61 72 6e 69 6e 67 42 6f 64 79 4d 65 73 73 61 67 65 7d 2c 65 2e 54 49 4d 45 4f 55 54 5f 57 41 52 4e 49 4e 47 5f 43 4f 4e 54 45 4e 54 5f 42 45 46 4f 52 45 5f 54 49 4d 45 2c 74 68 69 73 2e 73 74 61 74 65 2e 74 69 6d 65 52 65 6d 61 69 6e 69 6e 67 4d 65 73 73 61 67 65 2c 65 2e 54 49 4d 45 4f 55 54 5f 57 41 52 4e 49 4e 47 5f 43 4f 4e 54 45 4e 54 5f 41 46 54 45 52 5f 54 49 4d 45 29 2c 63 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 79 2e 64 65 66 61 75 6c 74 2c 75 28 7b 7d 2c 6e 2c 7b 73 74 79 6c 69 6e 67 3a 76 2e 42 55 54 54 4f 4e 5f 53 54 59 4c 45 53 2e 54 45 52 54 49 41 52 59 2c 6f 6e 43 6c 69 63 6b 43 61 6c 6c 42 61 63 6b 3a 74 68 69 73 2e Data Ascii: v",{className:g.default.timeoutWarningBodyMessage},e.TIMEOUT_WARNING_CONTENT_BEFORE_TIME,this.state.timeRemainingMessage,e.TIMEOUT_WARNING_CONTENT_AFTER_TIME),c.default.createElement(y.default,u({},n,{styling:v.BUTTON_STYLES.TERTIARY,onClickCallBack:this.
2023-10-05 12:50:36 UTC	1229	IN	Data Raw: 74 69 6f 6e 44 61 74 61 2c 72 3d 65 2e 72 61 77 44 61 74 61 2c 6f 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 7b 7d 3a 72 3b 69 66 28 74 68 69 73 2e 73 68 6f 75 6c 64 4e 6f 72 6d 61 6c 69 7a 65 28 7b 71 75 65 73 74 69 6f 6e 44 61 74 61 3a 6e 7d 29 29 7b 76 61 72 20 61 3d 6e 65 77 20 64 2e 64 65 66 61 75 6c 74 2c 75 3d 6f 2e 74 72 61 6e 73 6c 61 74 69 6f 6e 73 7c 7c 7b 7d 2c 63 3d 6f 2e 74 65 78 74 44 69 72 65 63 74 69 6f 6e 2c 66 3d 22 72 74 6c 22 3d 3d 3d 63 2c 68 3d 77 28 75 29 2c 67 3d 4f 28 75 29 2c 43 3d 45 28 75 29 2c 50 3d 5f 28 75 29 2c 49 3d 76 28 75 29 2c 4d 3d 79 28 75 29 2c 41 3d 6d 28 75 29 2c 44 3d 62 28 75 29 2c 78 3d 53 28 43 2c 44 29 2c 6b 3d 6e 65 77 20 70 2e 64 65 66 61 75 6c 74 28 69 28 7b 64 61 74 65 46 6f 72 6d 61 74 3a 43 2c 63 61 6c 65 6e Data Ascii: tionData,r=e.rawData,o=void 0===r?{}:r;if(this.shouldNormalize({questionData:n})){var a=new d.default,u=o.translations\|\|{},c=o.textDirection,f="rtl"===c,h=w(u),g=O(u),C=E(u),P=_(u),I=v(u),M=y(u),A=m(u),D=b(u),x=S(C,D),k=new p.default(i({dateFormat:C,calen
2023-10-05 12:50:36 UTC	1245	IN	Data Raw: 3a 69 2c 64 65 62 75 67 49 6e 66 6f 3a 61 2c 70 6f 70 75 70 49 6e 66 6f 3a 75 2c 77 69 64 67 65 74 49 6e 66 6f 3a 6c 7d 29 2c 6f 2e 72 65 73 6f 75 72 63 65 73 28 29 7d 7d 7d 5d 29 2c 65 7d 28 29 3b 74 2e 64 65 66 61 75 6c 74 3d 68 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 4f 62 Data Ascii: :i,debugInfo:a,popupInfo:u,widgetInfo:l}),o.resources()}}}]),e}();t.default=h},function(e,t,n){"use strict";function r(e){return e&&e.__esModule?e:{default:e}}function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}Ob
2023-10-05 12:50:36 UTC	1261	IN	Data Raw: 41 4e 54 2c 6f 29 2c 74 2e 64 65 66 61 75 6c 74 3d 6f 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 5b 65 2e 66 69 65 6c 64 5d 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 69 3d 6e 28 32 36 29 2c 61 3d 72 28 69 29 2c 75 3d 6e 28 32 35 29 3b 61 2e 64 65 66 61 75 6c 74 2e 72 65 67 69 73 74 65 72 45 76 61 6c 75 61 74 6f 72 46 6f 72 4e 6f 64 65 54 79 70 65 28 75 2e 4e 4f 44 45 Data Ascii: ANT,o),t.default=o},function(e,t,n){"use strict";function r(e){return e&&e.__esModule?e:{default:e}}function o(e,t){return t[e.field]}Object.defineProperty(t,"__esModule",{value:!0});var i=n(26),a=r(i),u=n(25);a.default.registerEvaluatorForNodeType(u.NODE
2023-10-05 12:50:36 UTC	1277	IN	Data Raw: 7d 2c 7b 6b 65 79 3a 22 73 75 62 73 63 72 69 62 65 43 6f 6d 70 6f 6e 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 73 65 74 28 65 2c 74 29 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 49 6e 73 74 61 6e 63 65 46 6f 72 43 6f 6d 70 6f 6e 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 67 65 74 28 65 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 73 65 74 56 61 6c 69 64 61 74 69 6f 6e 73 46 6f 72 43 6f 6d 70 6f 6e 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 73 74 6f 72 65 2c 6e 3d 74 2e 64 69 73 70 61 74 63 68 2c 72 3d 74 2e 67 65 74 53 74 61 74 65 3b 28 30 Data Ascii: },{key:"subscribeComponent",value:function(e,t){this.components.set(e,t)}},{key:"getInstanceForComponent",value:function(e){return this.components.get(e)}},{key:"resetValidationsForComponent",value:function(e){var t=this.store,n=t.dispatch,r=t.getState;(0
2023-10-05 12:50:36 UTC	1293	IN	Data Raw: 78 53 68 61 64 6f 77 22 2c 69 6e 70 75 74 3a 22 6f 70 74 69 6f 6e 5f 69 6e 70 75 74 22 2c 69 6e 64 69 63 61 74 6f 72 43 6f 6e 74 61 69 6e 65 72 3a 22 6f 70 74 69 6f 6e 5f 69 6e 64 69 63 61 74 6f 72 43 6f 6e 74 61 69 6e 65 72 22 2c 69 6e 64 69 63 61 74 6f 72 43 6f 6e 74 61 69 6e 65 72 48 6f 72 69 7a 6f 6e 74 61 6c 3a 22 6f 70 74 69 6f 6e 5f 69 6e 64 69 63 61 74 6f 72 43 6f 6e 74 61 69 6e 65 72 48 6f 72 69 7a 6f 6e 74 61 6c 22 2c 73 65 6c 65 63 74 69 6f 6e 55 6e 69 74 3a 22 6f 70 74 69 6f 6e 5f 73 65 6c 65 63 74 69 6f 6e 55 6e 69 74 22 2c 69 6e 64 69 63 61 74 6f 72 3a 22 6f 70 74 69 6f 6e 5f 69 6e 64 69 63 61 74 6f 72 22 2c 63 61 70 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 3a 22 6f 70 74 69 6f 6e 5f 63 61 70 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 22 2c 74 65 Data Ascii: xShadow",input:"option_input",indicatorContainer:"option_indicatorContainer",indicatorContainerHorizontal:"option_indicatorContainerHorizontal",selectionUnit:"option_selectionUnit",indicator:"option_indicator",captionContainer:"option_captionContainer",te
2023-10-05 12:50:36 UTC	1309	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2d 31 2c 72 3d 41 72 72 61 79 28 65 29 3b 2b 2b 6e 3c 65 3b 29 72 5b 6e 5d 3d 74 28 6e 29 3b 72 65 74 75 72 6e 20 72 7d 65 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 65 3b 69 66 28 61 28 65 29 29 72 65 74 75 72 6e 20 69 28 65 2c 72 29 2b 22 22 3b 69 66 28 75 28 65 29 29 72 65 74 75 72 6e 20 63 3f 63 2e 63 61 6c 6c 28 65 29 3a 22 22 3b 76 61 72 20 74 3d 65 2b 22 22 3b 72 65 74 75 72 6e 22 30 22 3d 3d 74 26 26 31 2f 65 3d 3d 2d 6c 3f 22 2d 30 22 3a 74 7d 76 61 72 20 6f 3d 6e Data Ascii: unction(e,t){function n(e,t){for(var n=-1,r=Array(e);++n<e;)r[n]=t(n);return r}e.exports=n},function(e,t,n){function r(e){if("string"==typeof e)return e;if(a(e))return i(e,r)+"";if(u(e))return c?c.call(e):"";var t=e+"";return"0"==t&&1/e==-l?"-0":t}var o=n
2023-10-05 12:50:36 UTC	1325	IN	Data Raw: 61 72 20 6e 3d 75 28 65 29 3f 6f 3a 69 3b 72 65 74 75 72 6e 20 6e 28 65 2c 61 28 74 29 29 7d 76 61 72 20 6f 3d 6e 28 31 30 36 36 29 2c 69 3d 6e 28 31 30 37 36 29 2c 61 3d 6e 28 32 35 39 29 2c 75 3d 6e 28 31 38 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 26 26 6f 28 65 2c 69 28 74 29 29 7d 76 61 72 20 6f 3d 6e 28 32 35 35 29 2c 69 3d 6e 28 32 35 39 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 69 28 65 2c 74 2c 6f 29 7d 76 61 72 20 6f 3d 6e 28 31 30 38 30 29 2c 69 3d 6e 28 31 31 33 32 29 3b 65 2e Data Ascii: ar n=u(e)?o:i;return n(e,a(t))}var o=n(1066),i=n(1076),a=n(259),u=n(18);e.exports=r},function(e,t,n){function r(e,t){return e&&o(e,i(t))}var o=n(255),i=n(259);e.exports=r},function(e,t,n){function r(e,t){return null!=e&&i(e,t,o)}var o=n(1080),i=n(1132);e.
2023-10-05 12:50:36 UTC	1341	IN	Data Raw: 6e 73 68 69 66 74 28 74 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 54 6f 70 44 72 61 67 45 6e 74 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 74 68 69 73 2e 64 72 61 67 45 6e 74 65 72 54 61 72 67 65 74 49 64 73 3b 69 66 28 74 68 69 73 2e 64 72 61 67 45 6e 74 65 72 54 61 72 67 65 74 49 64 73 3d 5b 5d 2c 74 68 69 73 2e 6d 6f 6e 69 74 6f 72 2e 69 73 44 72 61 67 67 69 6e 67 28 29 29 7b 74 68 69 73 2e 61 6c 74 4b 65 79 50 72 65 73 73 65 64 3d 65 2e 61 6c 74 4b 65 79 2c 28 30 2c 70 2e 69 73 46 69 72 65 66 6f 78 29 28 29 7c 7c 74 68 69 73 2e 61 63 74 69 6f 6e 73 2e 68 6f 76 65 72 28 6e 2c 7b 63 6c 69 65 6e 74 4f 66 66 73 65 74 3a 28 30 2c 68 2e 67 65 74 45 76 65 6e 74 43 6c 69 65 6e 74 4f 66 66 73 Data Ascii: nshift(t)}},{key:"handleTopDragEnter",value:function(e){var t=this,n=this.dragEnterTargetIds;if(this.dragEnterTargetIds=[],this.monitor.isDragging()){this.altKeyPressed=e.altKey,(0,p.isFirefox)()\|\|this.actions.hover(n,{clientOffset:(0,h.getEventClientOffs
2023-10-05 12:50:36 UTC	1357	IN	Data Raw: 50 6f 69 6e 74 28 6f 2e 78 2c 6f 2e 79 2c 61 29 3a 5f 28 6f 2e 78 2c 6f 2e 79 29 2c 6c 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 75 29 69 66 28 75 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 73 29 29 7b 76 61 72 20 64 3d 75 5b 73 5d 3b 66 6f 72 28 6c 2e 70 75 73 68 28 64 29 3b 64 3b 29 64 3d 64 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2c 6c 2e 69 6e 63 6c 75 64 65 73 28 64 29 7c 7c 6c 2e 70 75 73 68 28 64 29 7d 76 61 72 20 66 3d 6c 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 69 6e 64 65 78 4f 66 28 65 29 3e 2d 31 7d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 2e 74 61 72 67 65 74 4e 6f 64 65 73 29 69 66 28 65 3d 3d 3d 74 2e 74 61 72 67 65 74 4e 6f Data Ascii: Point(o.x,o.y,a):_(o.x,o.y),l=[];for(var s in u)if(u.hasOwnProperty(s)){var d=u[s];for(l.push(d);d;)d=d.parentElement,l.includes(d)\|\|l.push(d)}var f=l.filter(function(e){return a.indexOf(e)>-1}).map(function(e){for(var n in t.targetNodes)if(e===t.targetNo
2023-10-05 12:50:36 UTC	1373	IN	Data Raw: 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 75 26 26 28 75 28 29 2c 75 3d 6e 75 6c 6c 29 2c 72 26 26 6f 26 26 28 75 3d 65 2e 63 6f 6e 6e 65 63 74 44 72 6f 70 54 61 72 67 65 74 28 72 2c 6f 2c 69 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 65 21 3d 3d 72 26 26 28 72 3d 65 2c 74 28 29 29 7d 76 61 72 20 72 3d 76 6f 69 64 20 30 2c 6f 3d 76 6f 69 64 20 30 2c 69 3d 76 6f 69 64 20 30 2c 75 3d 76 6f 69 64 20 30 2c 73 3d 28 30 2c 61 2e 64 65 66 61 75 6c 74 29 28 7b 64 72 6f 70 54 61 72 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 65 3d 3d 3d 6f 26 26 28 30 Data Ascii: ";function r(e){return e&&e.__esModule?e:{default:e}}function o(e){function t(){u&&(u(),u=null),r&&o&&(u=e.connectDropTarget(r,o,i))}function n(e){e!==r&&(r=e,t())}var r=void 0,o=void 0,i=void 0,u=void 0,s=(0,a.default)({dropTarget:function(e,n){e===o&&(0
2023-10-05 12:50:36 UTC	1389	IN	Data Raw: 2e 66 6f 63 75 73 65 64 56 61 6c 75 65 2c 6e 3d 65 2e 67 65 74 4f 70 74 69 6f 6e 4c 61 62 65 6c 2c 72 3d 65 2e 73 65 6c 65 63 74 56 61 6c 75 65 3b 72 65 74 75 72 6e 22 76 61 6c 75 65 20 22 2e 63 6f 6e 63 61 74 28 6e 28 74 29 2c 22 20 66 6f 63 75 73 65 64 2c 20 22 29 2e 63 6f 6e 63 61 74 28 72 2e 69 6e 64 65 78 4f 66 28 74 29 2b 31 2c 22 20 6f 66 20 22 29 2e 63 6f 6e 63 61 74 28 72 2e 6c 65 6e 67 74 68 2c 22 2e 22 29 7d 3b 74 2e 76 61 6c 75 65 46 6f 63 75 73 41 72 69 61 4d 65 73 73 61 67 65 3d 6f 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 66 6f 63 75 73 65 64 4f 70 74 69 6f 6e 2c 6e 3d 65 2e 67 65 74 4f 70 74 69 6f 6e 4c 61 62 65 6c 2c 72 3d 65 2e 6f 70 74 69 6f 6e 73 3b 72 65 74 75 72 6e 22 6f 70 74 69 6f 6e 20 22 2e Data Ascii: .focusedValue,n=e.getOptionLabel,r=e.selectValue;return"value ".concat(n(t)," focused, ").concat(r.indexOf(t)+1," of ").concat(r.length,".")};t.valueFocusAriaMessage=o;var i=function(e){var t=e.focusedOption,n=e.getOptionLabel,r=e.options;return"option ".
2023-10-05 12:50:36 UTC	1405	IN	Data Raw: 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 70 72 6f 70 73 2c 74 3d 65 2e 69 6e 6e 65 72 52 65 66 2c 6e 3d 61 28 65 2c 5b 22 69 6e 22 2c 22 6f 75 74 22 2c 22 6f 6e 45 78 69 74 65 64 22 2c 22 61 70 70 65 61 72 22 2c 22 65 6e 74 65 72 22 2c 22 65 78 69 74 22 2c 22 69 6e 6e 65 72 52 65 66 22 2c 22 65 6d 6f 74 69 6f 6e 22 5d 29 3b 72 65 74 75 72 6e 20 79 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 2c 69 28 7b 72 65 66 3a 74 7d 2c 6e 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 28 30 2c 6d 2e 63 73 73 29 28 7b 6c 61 62 65 6c 3a 22 64 75 6d 6d 79 49 6e 70 75 74 22 2c 62 61 63 6b 67 72 6f 75 6e 64 3a 30 2c 62 6f 72 64 65 72 3a 30 2c 66 6f 6e 74 53 69 7a 65 3a 22 69 6e 68 65 72 69 74 22 2c 6f Data Ascii: lue:function(){var e=this.props,t=e.innerRef,n=a(e,["in","out","onExited","appear","enter","exit","innerRef","emotion"]);return y.default.createElement("input",i({ref:t},n,{className:(0,m.css)({label:"dummyInput",background:0,border:0,fontSize:"inherit",o
2023-10-05 12:50:36 UTC	1421	IN	Data Raw: 3d 41 72 72 61 79 28 65 29 2c 72 3d 30 3b 65 3e 72 3b 72 2b 2b 29 6e 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 4c 69 66 65 63 79 63 6c 65 28 22 6f 6e 45 78 69 74 65 64 22 2c 31 2c 6e 29 7d 2c 74 7d 69 28 74 2c 65 29 3b 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6e 2e 68 61 6e 64 6c 65 4c 69 66 65 63 79 63 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 3d 74 68 69 73 2e 70 72 6f 70 73 2e 63 68 69 6c 64 72 65 6e 2c 69 3d 61 2e 64 65 66 61 75 6c 74 2e 43 68 69 6c 64 72 65 6e 2e 74 6f 41 72 72 61 79 28 6f 29 5b 74 5d 3b 69 2e 70 72 6f 70 73 5b 65 5d 26 26 28 72 3d 69 2e 70 72 6f 70 73 29 5b 65 5d 2e 61 70 70 6c 79 28 72 2c 6e 29 2c 74 68 69 73 Data Ascii: =Array(e),r=0;e>r;r++)n[r]=arguments[r];return t.handleLifecycle("onExited",1,n)},t}i(t,e);var n=t.prototype;return n.handleLifecycle=function(e,t,n){var r,o=this.props.children,i=a.default.Children.toArray(o)[t];i.props[e]&&(r=i.props)[e].apply(r,n),this
2023-10-05 12:50:36 UTC	1437	IN	Data Raw: 2e 70 72 6f 70 73 2c 61 2c 74 68 69 73 2e 5f 69 6e 73 74 61 6e 63 65 50 72 6f 70 73 29 2c 6c 3d 64 28 74 68 69 73 2e 70 72 6f 70 73 2c 75 2c 61 2c 74 68 69 73 2e 5f 69 6e 73 74 61 6e 63 65 50 72 6f 70 73 29 2c 73 3d 6f 26 26 22 62 61 63 6b 77 61 72 64 22 21 3d 3d 69 3f 31 3a 4d 61 74 68 2e 6d 61 78 28 31 2c 6e 29 2c 66 3d 6f 26 26 22 66 6f 72 77 61 72 64 22 21 3d 3d 69 3f 31 3a 4d 61 74 68 2e 6d 61 78 28 31 2c 6e 29 3b 72 65 74 75 72 6e 5b 4d 61 74 68 2e 6d 61 78 28 30 2c 75 2d 73 29 2c 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 74 2d 31 2c 6c 2b 66 29 29 2c 75 2c 6c 5d 7d 2c 74 7d 28 6d 2e 50 75 72 65 43 6f 6d 70 6f 6e 65 6e 74 29 2c 74 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 64 69 72 65 63 74 69 6f 6e 3a 22 6c 74 72 22 2c 69 74 65 Data Ascii: .props,a,this._instanceProps),l=d(this.props,u,a,this._instanceProps),s=o&&"backward"!==i?1:Math.max(1,n),f=o&&"forward"!==i?1:Math.max(1,n);return[Math.max(0,u-s),Math.max(0,Math.min(t-1,l+f)),u,l]},t}(m.PureComponent),t.defaultProps={direction:"ltr",ite

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	18.154.206.79	443	192.168.2.6	49715	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:35 UTC	99	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 165704 Connection: close Date: Sat, 30 Sep 2023 02:38:43 GMT x-amz-replication-status: FAILED Last-Modified: Mon, 25 Sep 2023 09:04:57 GMT ETag: "6555088cfddb105c025ea40aedb919a9" x-amz-server-side-encryption: AES256 Cache-Control: max-age=604800 x-amz-version-id: 09urif2m8iP0Y2DphI5._Yy6hEq4MglF Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c6c3c6447e7024b0ed2242e7aa9cff6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: GJ_qtVWu8TeSdpKwIZNWeYcE0Q7q75InKnfbWB-0gv46lYMI-h2BjA== Age: 468713
2023-10-05 12:50:35 UTC	131	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 6e 29 7b 69 66 28 72 5b 6e 5d 29 72 65 74 75 72 6e 20 72 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 72 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 74 29 2c 6f 2e 6c 6f 61 64 65 64 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3b 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 61 29 7b 66 6f 72 28 76 61 72 20 73 2c 75 2c 63 3d 30 2c 6c 3d 5b 5d 3b 69 2e 6c 65 6e 67 74 68 3e 63 3b 63 2b 2b 29 75 Data Ascii: !function(e){function t(n){if(r[n])return r[n].exports;var o=r[n]={exports:{},id:n,loaded:!1};return e[n].call(o.exports,o,o.exports,t),o.loaded=!0,o.exports}var n=window.webpackJsonp;window.webpackJsonp=function(i,a){for(var s,u,c=0,l=[];i.length>c;c++)u
2023-10-05 12:50:35 UTC	185	IN	Data Raw: 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 7b 76 61 72 20 79 3d 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3b 66 6f 72 28 69 20 69 6e 20 79 29 76 6f 69 64 20 30 3d 3d 3d 75 5b 69 5d 26 26 28 75 5b 69 5d 3d 79 5b 69 5d 29 7d 72 65 74 75 72 6e 20 6c 28 65 2c 70 2c 64 2c 66 2c 68 2c 61 2e 63 75 72 72 65 6e 74 2c 75 29 7d 2c 6c 2e 63 72 65 61 74 65 46 61 63 74 6f 72 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 74 79 70 65 3d 65 2c 74 7d 2c 6c 2e 63 6c 6f 6e 65 41 6e 64 52 65 70 6c 61 63 65 4b 65 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 6c 28 65 2e 74 79 70 65 2c 74 2c 65 2e 72 65 66 2c 65 2e 5f 73 65 6c 66 2c Data Ascii: .defaultProps){var y=e.defaultProps;for(i in y)void 0===u[i]&&(u[i]=y[i])}return l(e,p,d,f,h,a.current,u)},l.createFactory=function(e){var t=l.createElement.bind(null,e);return t.type=e,t},l.cloneAndReplaceKey=function(e,t){var n=l(e.type,t,e.ref,e._self,
2023-10-05 12:50:36 UTC	300	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 22 74 6f 70 4d 6f 75 73 65 55 70 22 3d 3d 3d 65 7c 7c 22 74 6f 70 54 6f 75 63 68 45 6e 64 22 3d 3d 3d 65 7c 7c 22 74 6f 70 54 6f 75 63 68 43 61 6e 63 65 6c 22 3d 3d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 22 74 6f 70 4d 6f 75 73 65 4d 6f 76 65 22 3d 3d 3d 65 7c 7c 22 74 6f 70 54 6f 75 63 68 4d 6f 76 65 22 3d 3d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 22 74 6f 70 4d 6f 75 73 65 44 6f 77 6e 22 3d 3d 3d 65 7c 7c 22 74 6f 70 54 6f 75 63 68 53 74 61 72 74 22 3d 3d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 6f 3d 65 2e 74 79 70 65 7c 7c 22 75 6e 6b 6e 6f 77 6e 2d 65 76 65 6e 74 22 3b 65 2e 63 75 72 72 65 6e Data Ascii: function r(e){return"topMouseUp"===e\|\|"topTouchEnd"===e\|\|"topTouchCancel"===e}function o(e){return"topMouseMove"===e\|\|"topTouchMove"===e}function i(e){return"topMouseDown"===e\|\|"topTouchStart"===e}function a(e,t,n,r){var o=e.type\|\|"unknown-event";e.curren
2023-10-05 12:50:36 UTC	375	IN	Data Raw: 61 73 4d 75 6c 74 69 70 6c 65 3a 21 21 74 2e 6d 75 6c 74 69 70 6c 65 7d 2c 76 6f 69 64 20 30 3d 3d 3d 74 2e 76 61 6c 75 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 7c 7c 6c 7c 7c 28 6c 3d 21 30 29 7d 2c 67 65 74 53 65 6c 65 63 74 56 61 6c 75 65 43 6f 6e 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 7d 2c 70 6f 73 74 55 70 64 61 74 65 57 72 61 70 70 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 5f 63 75 72 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 70 72 6f 70 73 3b 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 3d 76 6f 69 64 20 30 3b 76 61 72 20 6e 3d 65 2e 5f Data Ascii: asMultiple:!!t.multiple},void 0===t.value\|\|void 0===t.defaultValue\|\|l\|\|(l=!0)},getSelectValueContext:function(e){return e._wrapperState.initialValue},postUpdateWrapper:function(e){var t=e._currentElement.props;e._wrapperState.initialValue=void 0;var n=e._
2023-10-05 12:50:36 UTC	452	IN	Data Raw: 74 3d 6f 3b 76 61 72 20 69 3d 6e 28 36 31 29 2c 61 3d 72 28 69 29 2c 73 3d 6e 28 32 39 34 29 2c 75 3d 72 28 73 29 7d 2c 34 39 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 76 61 72 20 74 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 72 3d 52 65 67 45 78 70 28 22 5e 22 2b 74 2e 63 61 6c 6c 28 6e 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 5c 5e 24 2e 2a 2b 3f 28 29 5b 5c 5d 7b 7d 7c 5d 2f 67 2c 22 5c 5c 24 26 22 29 2e 72 65 70 6c 61 63 65 28 2f 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 7c 28 66 75 6e 63 74 69 6f 6e 29 2e 2a 3f 28 3f Data Ascii: t=o;var i=n(61),a=r(i),s=n(294),u=r(s)},496:function(e,t,n){"use strict";function r(e){var t=Function.prototype.toString,n=Object.prototype.hasOwnProperty,r=RegExp("^"+t.call(n).replace(/[\\^$.+?()[\]{}\|]/g,"\\$&").replace(/hasOwnProperty\|(function).?(?
2023-10-05 12:50:36 UTC	528	IN	Data Raw: 30 3a 72 28 22 35 37 22 29 2c 22 48 54 4d 4c 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 72 28 22 35 38 22 29 3a 76 6f 69 64 20 30 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 7b 76 61 72 20 6e 3d 61 28 74 2c 73 29 5b 30 5d 3b 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 6e 2c 65 29 7d 65 6c 73 65 20 6f 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 57 69 74 68 54 72 65 65 28 65 2c 74 29 7d 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 75 7d 2c 31 32 35 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 5b 22 52 65 73 70 6f 6e 64 65 72 45 76 65 6e 74 50 6c 75 67 69 6e 22 2c 22 53 69 6d 70 6c 65 45 76 65 6e 74 50 6c 75 67 69 6e 22 2c 22 54 61 70 45 76 65 6e 74 50 6c 75 Data Ascii: 0:r("57"),"HTML"===e.nodeName?r("58"):void 0,"string"==typeof t){var n=a(t,s)[0];e.parentNode.replaceChild(n,e)}else o.replaceChildWithTree(e,t)}});e.exports=u},1250:function(e,t){"use strict";var n=["ResponderEventPlugin","SimpleEventPlugin","TapEventPlu
2023-10-05 12:50:36 UTC	576	IN	Data Raw: 65 64 22 2c 74 6f 70 45 6e 64 65 64 3a 22 65 6e 64 65 64 22 2c 74 6f 70 45 72 72 6f 72 3a 22 65 72 72 6f 72 22 2c 74 6f 70 4c 6f 61 64 65 64 44 61 74 61 3a 22 6c 6f 61 64 65 64 64 61 74 61 22 2c 74 6f 70 4c 6f 61 64 65 64 4d 65 74 61 64 61 74 61 3a 22 6c 6f 61 64 65 64 6d 65 74 61 64 61 74 61 22 2c 74 6f 70 4c 6f 61 64 53 74 61 72 74 3a 22 6c 6f 61 64 73 74 61 72 74 22 2c 74 6f 70 50 61 75 73 65 3a 22 70 61 75 73 65 22 2c 74 6f 70 50 6c 61 79 3a 22 70 6c 61 79 22 2c 74 6f 70 50 6c 61 79 69 6e 67 3a 22 70 6c 61 79 69 6e 67 22 2c 74 6f 70 50 72 6f 67 72 65 73 73 3a 22 70 72 6f 67 72 65 73 73 22 2c 74 6f 70 52 61 74 65 43 68 61 6e 67 65 3a 22 72 61 74 65 63 68 61 6e 67 65 22 2c 74 6f 70 53 65 65 6b 65 64 3a 22 73 65 65 6b 65 64 22 2c 74 6f 70 53 65 65 6b 69 Data Ascii: ed",topEnded:"ended",topError:"error",topLoadedData:"loadeddata",topLoadedMetadata:"loadedmetadata",topLoadStart:"loadstart",topPause:"pause",topPlay:"play",topPlaying:"playing",topProgress:"progress",topRateChange:"ratechange",topSeeked:"seeked",topSeeki
2023-10-05 12:50:36 UTC	631	IN	Data Raw: 2c 63 6c 6f 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 69 73 42 61 74 63 68 69 6e 67 55 70 64 61 74 65 73 3d 21 31 7d 7d 2c 63 3d 7b 69 6e 69 74 69 61 6c 69 7a 65 3a 73 2c 63 6c 6f 73 65 3a 69 2e 66 6c 75 73 68 42 61 74 63 68 65 64 55 70 64 61 74 65 73 2e 62 69 6e 64 28 69 29 7d 2c 6c 3d 5b 63 2c 75 5d 3b 6f 28 72 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 67 65 74 54 72 61 6e 73 61 63 74 69 6f 6e 57 72 61 70 70 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 7d 29 3b 76 61 72 20 70 3d 6e 65 77 20 72 2c 64 3d 7b 69 73 42 61 74 63 68 69 6e 67 55 70 64 61 74 65 73 3a 21 31 2c 62 61 74 63 68 65 64 55 70 64 61 74 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 29 7b 76 61 72 20 61 3d 64 2e 69 73 42 61 74 63 68 Data Ascii: ,close:function(){d.isBatchingUpdates=!1}},c={initialize:s,close:i.flushBatchedUpdates.bind(i)},l=[c,u];o(r.prototype,a,{getTransactionWrappers:function(){return l}});var p=new r,d={isBatchingUpdates:!1,batchedUpdates:function(e,t,n,r,o,i){var a=d.isBatch
2023-10-05 12:50:36 UTC	676	IN	Data Raw: 56 61 6c 75 65 73 22 2c 74 61 72 67 65 74 58 3a 22 74 61 72 67 65 74 58 22 2c 74 61 72 67 65 74 59 3a 22 74 61 72 67 65 74 59 22 2c 74 65 78 74 41 6e 63 68 6f 72 3a 22 74 65 78 74 2d 61 6e 63 68 6f 72 22 2c 74 65 78 74 44 65 63 6f 72 61 74 69 6f 6e 3a 22 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 22 2c 74 65 78 74 52 65 6e 64 65 72 69 6e 67 3a 22 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 22 2c 74 65 78 74 4c 65 6e 67 74 68 3a 22 74 65 78 74 4c 65 6e 67 74 68 22 2c 74 6f 3a 30 2c 74 72 61 6e 73 66 6f 72 6d 3a 30 2c 75 31 3a 30 2c 75 32 3a 30 2c 75 6e 64 65 72 6c 69 6e 65 50 6f 73 69 74 69 6f 6e 3a 22 75 6e 64 65 72 6c 69 6e 65 2d 70 6f 73 69 74 69 6f 6e 22 2c 75 6e 64 65 72 6c 69 6e 65 54 68 69 63 6b 6e 65 73 73 3a 22 75 6e 64 65 72 6c 69 6e 65 2d 74 68 Data Ascii: Values",targetX:"targetX",targetY:"targetY",textAnchor:"text-anchor",textDecoration:"text-decoration",textRendering:"text-rendering",textLength:"textLength",to:0,transform:0,u1:0,u2:0,underlinePosition:"underline-position",underlineThickness:"underline-th
2023-10-05 12:50:36 UTC	728	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 74 2e 69 6e 64 65 78 4f 66 28 72 29 3c 30 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 72 29 26 26 28 6e 5b 72 5d 3d 65 5b 72 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 72 65 74 75 72 6e 20 6e 28 65 28 6f 2c 69 29 2c 74 28 72 2c 69 29 2c 69 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 2c 6e 2c Data Ascii: unction r(e){return e&&e.__esModule?e:{default:e}}function o(e,t){var n={};for(var r in e)t.indexOf(r)<0&&Object.prototype.hasOwnProperty.call(e,r)&&(n[r]=e[r]);return n}function i(e,t,n,r){return function(o,i){return n(e(o,i),t(r,i),i)}}function a(e,t,n,
2023-10-05 12:50:36 UTC	760	IN	Data Raw: 6f 69 6e 28 22 2c 20 22 29 2b 22 7d 22 3a 78 2c 77 29 7d 7d 72 65 74 75 72 6e 20 76 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 30 3a 6f 28 65 2c 22 22 2c 74 2c 6e 29 7d 76 61 72 20 61 3d 6e 28 31 33 30 29 2c 73 3d 28 6e 28 37 38 29 2c 6e 28 34 39 37 29 29 2c 75 3d 6e 28 35 30 30 29 2c 63 3d 28 6e 28 36 29 2c 6e 28 31 33 34 32 29 29 2c 6c 3d 28 6e 28 31 30 29 2c 22 2e 22 29 2c 70 3d 22 3a 22 3b 65 2e 65 78 70 6f 72 74 73 3d 69 7d 2c 31 33 35 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 66 75 6e 63 74 Data Ascii: oin(", ")+"}":x,w)}}return v}function i(e,t,n){return null==e?0:o(e,"",t,n)}var a=n(130),s=(n(78),n(497)),u=n(500),c=(n(6),n(1342)),l=(n(10),"."),p=":";e.exports=i},1354:function(e,t,n){"use strict";function r(e){return e&&e.__esModule?e:{default:e}}funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	151.101.25.230	443	192.168.2.6	49718	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:35 UTC	163	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1560 x-amz-id-2: VwC/35t4n3hcc4pS8M2X8bvzmVbXqVbufrigSF6DTDNdE/zyxj3Ch7Dwrwq8YNgOBJUQHd/DDjI= x-amz-request-id: 7RWR94205VR49FZA Last-Modified: Thu, 21 Jan 2021 22:54:43 GMT ETag: "df67316f1a6dafc2fc50944ebe34367a" x-amz-meta-originalfilename: custom.css Content-Type: text/css Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 05 Oct 2023 12:50:35 GMT Via: 1.1 varnish Age: 3122 X-Served-By: cache-lax10647-LGB X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1696510236.850535,VS0,VE1 Strict-Transport-Security: max-age=31557600
2023-10-05 12:50:35 UTC	164	IN	Data Raw: 2f 2a 20 43 75 73 74 6f 6d 20 54 68 65 6d 65 20 2a 2f 0a 2f 2a 2a 2a 20 4c 6f 6f 6b 20 26 20 46 65 65 6c 20 76 37 20 53 74 61 6e 64 61 72 64 20 54 68 65 6d 65 20 2a 2a 2a 2f 0a 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 20 4c 4f 47 4f 20 43 55 53 54 4f 4d 49 5a 41 54 49 4f 4e 53 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 0a 2f 2a 20 4c 6f 67 6f 20 73 69 7a 65 20 61 64 6a 75 73 74 6d 65 6e 74 20 2a 2f 0a 2f 2a 20 41 73 73 75 6d 65 73 20 74 68 65 20 69 6d 61 67 65 20 68 61 73 20 61 20 31 30 30 30 70 78 20 77 69 64 74 68 20 74 6f 20 61 63 63 6f 75 6e 74 20 66 6f 72 20 72 65 74 69 6e 61 20 64 69 73 70 6c 61 79 20 2a 2f 0a 2e 6c 61 79 6f 75 74 5f 6c 6f 67 6f 20 7b 20 0a 09 77 69 64 74 68 3a 20 35 30 25 3b 0a 7d 0a 0a 2f 2a 20 4c 6f 67 6f 20 73 69 7a 65 20 61 64 6a 75 73 Data Ascii: /* Custom Theme // Look & Feel v7 Standard Theme //******* LOGO CUSTOMIZATIONS *******// Logo size adjustment // Assumes the image has a 1000px width to account for retina display /.layout_logo { width: 50%;}/ Logo size adjus
2023-10-05 12:50:35 UTC	165	IN	Data Raw: 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 0a 09 7d 0a 09 2a 2f 0a 0a 09 2f 2a 20 48 69 64 65 20 74 68 65 20 6c 6f 6e 67 66 6f 72 6d 20 6d 75 6c 74 69 73 65 6c 65 63 74 20 6d 65 73 73 61 67 65 20 28 65 2e 67 2e 20 74 68 65 20 22 53 65 6c 65 63 74 20 61 6c 6c 20 74 68 61 74 20 61 70 70 6c 79 22 20 6d 65 73 73 61 67 65 20 74 68 61 74 20 61 70 70 65 61 72 73 29 20 2a 2f 0a 09 2e 6c 6f 6e 67 66 6f 72 6d 5f 6d 75 6c 74 69 53 65 6c 65 63 74 4d 65 73 73 61 67 65 20 7b 0a 09 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 7d 0a 0a 7d Data Ascii: ing-bottom: 5px;}// Hide the longform multiselect message (e.g. the "Select all that apply" message that appears) */.longform_multiSelectMessage { display: none;}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	142.250.72.174	443	192.168.2.6	49706	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:33 UTC	1	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-n5cBgNAacG82QRwTvzGTrQ' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 05 Oct 2023 12:50:33 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6121 X-Daystart: 21033 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-10-05 12:50:33 UTC	2	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 31 32 31 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 32 31 30 33 33 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6121" elapsed_seconds="21033"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2023-10-05 12:50:33 UTC	2	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2023-10-05 12:50:33 UTC	2	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	18.154.206.79	443	192.168.2.6	49712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:35 UTC	165	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 94335 Connection: close Date: Mon, 02 Oct 2023 12:17:29 GMT x-amz-replication-status: FAILED Last-Modified: Mon, 25 Sep 2023 09:04:57 GMT ETag: "c8436675bf91abc4ea8a89359cf1c98a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=604800 x-amz-version-id: P7rEJT_3xxH_O0oQpMzXflA1Pph3ittn Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 635bd1c840f5a1bf81a934c65cca8472.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: YQJ2qWnF6xNz6t258yfk05trK5U6fmdNIXVcgEM2ZWU652JD6XqdsQ== Age: 261187
2023-10-05 12:50:35 UTC	166	IN	Data Raw: 77 65 62 70 61 63 6b 4a 73 6f 6e 70 28 5b 32 5d 2c 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 74 2e 65 78 70 6f 72 74 73 3d 72 28 35 31 35 29 7d 2c 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 72 28 38 29 2c 69 3d 72 28 35 31 29 2c 6f 3d 72 28 33 38 29 2c 75 3d 72 28 33 39 29 2c 63 3d 72 28 35 32 29 2c 66 3d 22 70 72 6f 74 6f 74 79 70 65 22 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 73 2c 6c 2c 68 2c 76 2c 70 3d 74 26 61 2e 46 2c 64 3d 74 26 61 2e 47 2c 67 3d 74 26 61 2e 53 2c 79 3d 74 26 61 2e 50 2c 78 3d 74 26 61 2e 42 2c 62 3d 64 3f 65 3a 67 3f 65 5b 6e 5d 7c 7c 28 65 5b 6e 5d 3d 7b 7d 29 3a 28 65 5b 6e 5d 7c 7c 7b 7d 29 5b 66 5d 2c 6d 3d 64 3f 69 3a 69 5b 6e 5d 7c 7c 28 69 5b 6e 5d 3d 7b 7d 29 Data Ascii: webpackJsonp([2],[function(t,n,r){t.exports=r(515)},,function(t,n,r){var e=r(8),i=r(51),o=r(38),u=r(39),c=r(52),f="prototype",a=function(t,n,r){var s,l,h,v,p=t&a.F,d=t&a.G,g=t&a.S,y=t&a.P,x=t&a.B,b=d?e:g?e[n]\|\|(e[n]={}):(e[n]\|\|{})[f],m=d?i:i[n]\|\|(i[n]={})
2023-10-05 12:50:35 UTC	201	IN	Data Raw: 6c 61 63 65 28 73 2c 22 22 29 29 2c 74 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 6c 7d 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 72 28 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 65 28 74 68 69 73 29 2c 6e 3d 22 22 3b 72 65 74 75 72 6e 20 74 2e 67 6c 6f 62 61 6c 26 26 28 6e 2b 3d 22 67 22 29 2c 74 2e 69 67 6e 6f 72 65 43 61 73 65 26 26 28 6e 2b 3d 22 69 22 29 2c 74 2e 6d 75 6c 74 69 6c 69 6e 65 26 26 28 6e 2b 3d 22 6d 22 29 2c 74 2e 75 6e 69 63 6f 64 65 26 26 28 6e 2b 3d 22 75 22 29 2c 74 2e 73 74 69 63 6b 79 26 26 28 6e 2b 3d 22 79 22 29 2c 6e 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: lace(s,"")),t};t.exports=l},,,,,,,,,,,,,,,,,,,,,,,function(t,n,r){"use strict";var e=r(5);t.exports=function(){var t=e(this),n="";return t.global&&(n+="g"),t.ignoreCase&&(n+="i"),t.multiline&&(n+="m"),t.unicode&&(n+="u"),t.sticky&&(n+="y"),n}},function(t,
2023-10-05 12:50:36 UTC	332	IN	Data Raw: 66 6f 72 28 3b 3b 29 7b 69 66 28 68 20 69 6e 20 73 29 7b 63 3d 73 5b 68 5d 2c 68 2b 3d 76 3b 62 72 65 61 6b 7d 69 66 28 68 2b 3d 76 2c 66 3f 30 3e 68 3a 68 3e 3d 6c 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 52 65 64 75 63 65 20 6f 66 20 65 6d 70 74 79 20 61 72 72 61 79 20 77 69 74 68 20 6e 6f 20 69 6e 69 74 69 61 6c 20 76 61 6c 75 65 22 29 7d 66 6f 72 28 3b 66 3f 68 3e 3d 30 3a 6c 3e 68 3b 68 2b 3d 76 29 68 20 69 6e 20 73 26 26 28 63 3d 6e 28 63 2c 73 5b 68 5d 2c 68 2c 61 29 29 3b 72 65 74 75 72 6e 20 63 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 72 28 33 32 29 2c 69 3d 72 28 31 31 29 2c 6f 3d 72 28 33 31 35 29 2c 75 3d 5b 5d 2e 73 6c 69 63 65 2c 63 3d 7b 7d 2c 66 3d 66 75 Data Ascii: for(;;){if(h in s){c=s[h],h+=v;break}if(h+=v,f?0>h:h>=l)throw TypeError("Reduce of empty array with no initial value")}for(;f?h>=0:l>h;h+=v)h in s&&(c=n(c,s[h],h,a));return c}},function(t,n,r){"use strict";var e=r(32),i=r(11),o=r(315),u=[].slice,c={},f=fu
2023-10-05 12:50:36 UTC	436	IN	Data Raw: 79 70 65 29 7c 7c 28 6e 3d 76 6f 69 64 20 30 29 2c 65 28 6e 29 26 26 28 6e 3d 6e 5b 6f 5d 2c 6e 75 6c 6c 3d 3d 3d 6e 26 26 28 6e 3d 76 6f 69 64 20 30 29 29 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 41 72 72 61 79 3a 6e 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 72 28 39 29 2c 69 3d 44 61 74 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 54 69 6d 65 2c 6f 3d 44 61 74 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 49 53 4f 53 74 72 69 6e 67 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3e 39 3f 74 3a 22 30 22 2b 74 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 30 33 38 35 2d 30 37 2d 32 35 54 30 37 3a 30 36 3a 33 39 2e 39 39 Data Ascii: ype)\|\|(n=void 0),e(n)&&(n=n[o],null===n&&(n=void 0))),void 0===n?Array:n}},function(t,n,r){"use strict";var e=r(9),i=Date.prototype.getTime,o=Date.prototype.toISOString,u=function(t){return t>9?t:"0"+t};t.exports=e(function(){return"0385-07-25T07:06:39.99
2023-10-05 12:50:36 UTC	468	IN	Data Raw: 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 74 29 7d 7d 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6e 65 77 20 65 3b 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 74 2c 74 68 69 73 2e 72 65 73 6f 6c 76 65 3d 61 28 47 2c 74 2c 31 29 2c 74 68 69 73 2e 72 65 6a 65 63 74 3d 61 28 44 2c 74 2c 31 29 7d 2c 62 2e 66 3d 6a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 46 7c 7c 74 3d 3d 3d 75 3f 6e 65 77 20 6f 28 74 29 3a 69 28 74 29 7d 29 2c 6c 28 6c 2e 47 2b 6c 2e 57 2b 6c 2e 46 2a 21 4e 2c 7b 50 72 6f 6d 69 73 65 3a 46 7d 29 2c 72 28 31 30 37 29 28 46 2c 5f 29 2c 72 28 39 34 29 28 5f 29 2c 75 3d 72 28 35 31 29 5b 5f 5d 2c 6c 28 6c 2e 53 2b 6c 2e 46 2a 21 4e 2c 5f 2c 7b 72 65 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 Data Ascii: .then(void 0,t)}}),o=function(){var t=new e;this.promise=t,this.resolve=a(G,t,1),this.reject=a(D,t,1)},b.f=j=function(t){return t===F\|\|t===u?new o(t):i(t)}),l(l.G+l.W+l.F!N,{Promise:F}),r(107)(F,_),r(94)(_),u=r(51)[_],l(l.S+l.F!N,_,{reject:function(t){v
2023-10-05 12:50:36 UTC	484	IN	Data Raw: 22 49 6e 74 33 32 22 2c 34 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 65 29 7b 72 65 74 75 72 6e 20 74 28 74 68 69 73 2c 6e 2c 72 2c 65 29 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 28 37 32 29 28 22 49 6e 74 38 22 2c 31 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 65 29 7b 72 65 74 75 72 6e 20 74 28 74 68 69 73 2c 6e 2c 72 2c 65 29 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 28 37 32 29 28 22 55 69 6e 74 31 36 22 2c 32 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 65 29 7b 72 65 74 75 72 6e 20 74 28 74 68 69 73 2c 6e 2c 72 2c 65 29 7d 7d 29 7d 2c 66 Data Ascii: "Int32",4,function(t){return function(n,r,e){return t(this,n,r,e)}})},function(t,n,r){r(72)("Int8",1,function(t){return function(n,r,e){return t(this,n,r,e)}})},function(t,n,r){r(72)("Uint16",2,function(t){return function(n,r,e){return t(this,n,r,e)}})},f

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	146.75.93.230	443	192.168.2.6	49716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:35 UTC	181	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2108 x-amz-id-2: 8Z5/HZu/GzwYILx9MfRd+5xICHE+Supu1/Vm73Ddioqh3fypXK8t7HuiiNFtUBSb87XDf4BuO4w= x-amz-request-id: RSKKF1EJ4X4XDQ22 x-amz-replication-status: COMPLETED Last-Modified: Fri, 11 Jun 2021 03:48:35 GMT ETag: "4f7a35fffee2156d95149ac9dfee5368" x-amz-meta-originalfilename: main.css x-amz-version-id: null Content-Type: text/css Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 05 Oct 2023 12:50:35 GMT Via: 1.1 varnish Age: 0 X-Served-By: cache-bur-kbur8200035-BUR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1696510236.782752,VS0,VE69 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000
2023-10-05 12:50:35 UTC	182	IN	Data Raw: 68 65 61 64 65 72 20 7b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 20 23 64 61 65 30 65 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a 68 74 6d 6c 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a 62 6f 64 79 2c 20 2e 6c 61 79 6f 75 74 5f 61 6e 73 77 65 72 2c 20 2e 64 72 6f 70 64 6f 77 6e 5f 64 72 6f 70 64 6f 77 6e 43 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 62 75 74 74 6f 6e 5f 62 75 74 74 6f 6e 5f 69 73 50 72 69 6d 61 72 79 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 2e 71 75 65 73 74 69 6f 6e 43 61 70 74 69 6f 6e 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 Data Ascii: header { border-bottom-color: #dae0ea; background-color: #ffffff;}html { background: #ffffff;}body, .layout_answer, .dropdown_dropdownContainer { background: none;}.button_button_isPrimary { color: #000000;}.questionCaption { font-size
2023-10-05 12:50:35 UTC	183	IN	Data Raw: 74 61 69 6e 65 72 3a 68 6f 76 65 72 2c 20 2e 68 61 73 4e 6f 54 6f 75 63 68 20 2e 6f 70 74 69 6f 6e 5f 6f 70 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 5f 68 61 73 42 6f 78 53 68 61 64 6f 77 2c 20 2e 74 65 78 74 46 69 65 6c 64 5f 74 65 78 74 46 69 65 6c 64 3a 66 6f 63 75 73 2c 20 2e 74 65 78 74 46 69 65 6c 64 5f 74 65 78 74 46 69 65 6c 64 3a 68 6f 76 65 72 2c 20 2e 63 61 6c 65 6e 64 61 72 54 65 78 74 66 69 65 6c 64 49 6e 70 75 74 3a 68 6f 76 65 72 2c 20 2e 63 61 6c 65 6e 64 61 72 54 65 78 74 66 69 65 6c 64 49 6e 70 75 74 3a 66 6f 63 75 73 2c 20 2e 63 61 6c 65 6e 64 61 72 5f 63 61 6c 65 6e 64 61 72 49 63 6f 6e 43 6f 6e 74 61 69 6e 65 72 3a 66 6f 63 75 73 2c 20 2e 63 61 6c 65 6e 64 61 72 5f 63 61 6c 65 6e 64 61 72 49 63 6f 6e 43 6f 6e 74 61 69 6e 65 72 3a 68 6f Data Ascii: tainer:hover, .hasNoTouch .option_optionContainer_hasBoxShadow, .textField_textField:focus, .textField_textField:hover, .calendarTextfieldInput:hover, .calendarTextfieldInput:focus, .calendar_calendarIconContainer:focus, .calendar_calendarIconContainer:ho

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	151.101.25.230	443	192.168.2.6	49719	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:35 UTC	184	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 x-amz-id-2: x/7EzLkmHkLW9DYyEPEsND7JDFxm5BcVEUYH2RAROBVpCxlvYVefzjSYwVDqoXa6bBIMt/h+45E= x-amz-request-id: 739SR1D4R8S7VJQZ Last-Modified: Thu, 21 Jan 2021 22:59:22 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" x-amz-meta-originalfilename: main.css Content-Type: text/css Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 05 Oct 2023 12:50:35 GMT Via: 1.1 varnish Age: 1227 X-Served-By: cache-lax10644-LGB X-Cache: HIT X-Cache-Hits: 2 X-Timer: S1696510236.852394,VS0,VE0 Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	146.75.93.230	443	192.168.2.6	49717	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:35 UTC	217	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3745 x-amz-id-2: O2tlPsWKfU6RoPHXVkNUKRhZjPgL8kM8e7jSfGgSKq8HIqlVZ4VBdrF434XC9zRrkUhJ4dwetn0= x-amz-request-id: RSKXV9EY0P6J7X8X x-amz-replication-status: COMPLETED Last-Modified: Thu, 07 Jul 2022 13:34:18 GMT ETag: "2183e73411f9b7620a9c2c8045befef7" x-amz-meta-originalfilename: custom.css x-amz-version-id: null Content-Type: text/css Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 05 Oct 2023 12:50:35 GMT Via: 1.1 varnish Age: 0 X-Served-By: cache-bur-kbur8200133-BUR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1696510236.815519,VS0,VE81 Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000
2023-10-05 12:50:35 UTC	217	IN	Data Raw: 2f 2a 2a 2a 2a 55 50 44 41 54 45 20 47 45 4e 45 52 41 4c 20 42 4f 44 59 20 4c 4e 46 2a 2a 2a 2a 2f 0a 62 6f 64 79 2c 20 68 74 6d 6c 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 31 32 38 33 34 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2f 2a 2a 2a 2a 42 55 54 54 4f 4e 20 48 4f 56 45 52 20 43 4f 4c 4f 52 53 2a 2a 2a 2a 2f 0a 2e 62 75 74 74 6f 6e 5f 62 75 74 74 6f 6e 5f 69 73 50 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 20 2e Data Ascii: /**UPDATE GENERAL BODY LNF/body, html{ color: #012834; font-family: Arial; font-weight: normal; font-size:13px !important; text-align: left; line-height: 1.6 !important;}/BUTTON HOVER COLORS**/.button_button_isPrimary:focus, .
2023-10-05 12:50:35 UTC	219	IN	Data Raw: 74 61 6e 74 3b 0a 7d 0a 0a 2e 63 65 6c 6c 5f 63 65 6c 6c 2e 72 6f 77 4f 70 74 69 6f 6e 5f 61 6e 63 68 6f 72 73 43 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 20 3b 0a 7d 0a 2e 6c 61 79 6f 75 74 5f 61 6e 73 77 65 72 73 7b 0a 20 20 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 6d 61 72 67 69 6e 3a 20 30 20 30 20 35 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 09 09 0a 7d 09 09 0a 0a 0a 2e 6c 6f 6e 67 66 6f 72 6d 5f 67 72 6f 75 70 43 6f 6e 74 61 69 6e 65 72 09 09 0a 7b 09 09 0a 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 09 09 0a 7d 09 09 0a 0a 0a 2e 6c 6f 6e 67 66 6f 72 6d 5f 6d 75 6c 74 69 53 65 6c 65 63 74 4d 65 73 73 61 67 Data Ascii: tant;}.cell_cell.rowOption_anchorsContainer { font-size: 12px ;}.layout_answers{ font-size: 13px !important;margin: 0 0 5px !important;}.longform_groupContainer{padding-bottom: 10px !important;}.longform_multiSelectMessag
2023-10-05 12:50:35 UTC	220	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 0a 20 20 20 20 7d 0a 20 20 20 20 2e 6c 61 79 6f 75 74 5f 6d 61 69 6e 48 65 61 64 65 72 52 69 67 68 74 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 7d 0a 0a 2f 2a 2a 2a 2a 41 44 41 50 54 49 4f 4e 20 53 4d 41 4c 4c 20 44 45 56 49 43 45 20 2d 20 4d 4f 42 49 4c 45 2a 2a 2a 2a 2f 0a 0a 0a 2f 2a 2a 2a 2a 41 44 41 50 54 49 4f 4e 20 53 4d 41 4c 4c 20 44 45 56 49 43 45 20 2d 20 4d 4f 42 49 4c 45 2a 2a 2a 2a 2f 0a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 34 30 70 78 29 20 7b 0a 2e 68 61 73 54 6f 75 63 68 20 2e 6c 61 79 6f 75 74 5f 6d 61 69 6e 48 65 61 64 65 72 20 7b 0a 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a Data Ascii: !important; } .layout_mainHeaderRight { width: 0% !important;}}/**ADAPTION SMALL DEVICE - MOBILE//ADAPTION SMALL DEVICE - MOBILE**/@media screen and (max-width: 540px) {.hasTouch .layout_mainHeader { background:

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.6	49720	18.154.206.79	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:36 UTC	1389	OUT	GET /vendor/appdynamics/adrum/adrum.js HTTP/1.1 Host: cdn.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://survey3.medallia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	18.154.206.79	443	192.168.2.6	49720	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:36 UTC	1453	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 44897 Connection: close Date: Sat, 30 Sep 2023 15:51:12 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 24 Aug 2017 19:55:43 GMT ETag: "5f8ec127dc5dd928eb98a2b847384a7d" Cache-Control: max-age=604800 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 543187fc7ea66083565b6fbfd76d9a1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: qSqaRi5oyOvTxcTTlZ_VDdElvRQ58Gsg_fd_rFkTjPgTlMbwmpi0qg== Age: 421165
2023-10-05 12:50:36 UTC	1453	IN	Data Raw: 3b 2f 2a 20 56 65 72 73 69 6f 6e 20 32 61 65 64 39 64 30 39 31 65 66 30 38 65 66 61 39 35 38 32 32 65 38 36 34 62 34 35 35 34 64 32 20 76 3a 34 2e 33 2e 33 2e 30 2c 20 63 3a 65 65 39 31 39 35 35 65 64 63 39 35 63 34 66 31 64 63 63 61 63 65 38 32 61 66 66 61 61 39 64 37 63 33 66 65 37 65 38 61 2c 20 62 3a 39 33 31 36 20 6e 3a 31 2d 34 2e 33 2e 33 2e 6e 65 78 74 2d 62 75 69 6c 64 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 41 44 52 55 4d 26 26 21 30 21 3d 3d 77 69 6e 64 6f 77 5b 22 61 64 72 75 6d 2d 64 69 73 61 62 6c 65 22 5d 29 7b 76 61 72 20 68 3d 77 69 6e 64 6f 77 2e 41 44 52 55 4d 3d 7b 7d 3b 77 69 6e 64 6f 77 5b 22 61 64 72 75 6d 2d 73 74 61 72 74 2d 74 69 6d 65 22 5d 3d 77 Data Ascii: ;/* Version 2aed9d091ef08efa95822e864b4554d2 v:4.3.3.0, c:ee91955edc95c4f1dccace82affaa9d7c3fe7e8a, b:9316 n:1-4.3.3.next-build */(function(){new function(){if(!window.ADRUM&&!0!==window["adrum-disable"]){var h=window.ADRUM={};window["adrum-start-time"]=w
2023-10-05 12:50:36 UTC	1469	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 66 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 68 61 73 65 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 61 63 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 2e 61 63 5b 63 5d 3d 3d 3d 61 29 72 65 74 75 72 6e 20 63 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 68 61 73 65 43 61 6c 6c 62 61 63 6b 54 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 74 68 69 73 2e 43 61 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 69 66 28 62 5b 64 5d 2e 62 64 3d 3d 3d 61 29 72 65 74 75 72 6e 20 62 5b 64 5d 2e 4e 67 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 Data Ascii: ){return this.wf};b.prototype.getPhaseID=function(a){for(var c=0;c<b.ac.length;c++)if(b.ac[c]===a)return c;return null};b.prototype.getPhaseCallbackTime=function(a){for(var b=this.Ca,d=0;d<b.length;d++)if(b[d].bd===a)return b[d].Ng;return null};b.prototyp
2023-10-05 12:50:37 UTC	1485	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 29 29 3a 0a 61 2e 75 74 69 6c 73 2e 69 62 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 63 6f 6d 6d 61 6e 64 28 22 72 65 70 6f 72 74 45 76 65 6e 74 22 2c 62 29 7d 29 3a 61 2e 72 65 70 6f 72 74 41 50 49 4d 65 73 73 61 67 65 28 31 2c 22 22 2c 22 41 44 52 55 4d 2e 72 65 70 6f 72 74 22 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 7d 7d 29 28 68 7c 7c 28 68 3d 7b 7d 29 29 3b 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 41 50 50 5f 4b 45 59 5f 4e 4f 54 5f 53 45 54 22 3d 3d 3d 61 2e 63 6f 6e 66 2e 61 70 70 4b 65 79 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 Data Ascii: arguments)):a.utils.ib(function(){a.command("reportEvent",b)}):a.reportAPIMessage(1,"","ADRUM.report",Array.prototype.slice.call(arguments))}})(h\|\|(h={}));(function(a){"APP_KEY_NOT_SET"===a.conf.appKey&&"undefined"!==typeof console&&"undefined"!==typeof

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.6	49722	146.75.93.230	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:37 UTC	1497	OUT	GET /15de41a42ce4f647a5d1c5e8ea29f1913d26d6b5 HTTP/1.1 Host: global.cdn.survey.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://global.cdn.survey.medallia.com/3eab28210f45500e7cb73de05e830b82db6e151c Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	146.75.93.230	443	192.168.2.6	49722	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:37 UTC	1498	IN	HTTP/1.1 200 OK Connection: close Content-Length: 134427 x-amz-id-2: a/ggDWy320Iq3ksBGsZAu0gUfrX5OHJulctp6BG9GQ0QMzJhKWYD8A4IM6hC+2Icnn/lTISSfL4= x-amz-request-id: MT449KXBSSN5G7VK x-amz-replication-status: COMPLETED Last-Modified: Fri, 11 Jun 2021 03:38:33 GMT ETag: "26eb5dd238cfb5b15435e1e2f7e8834e" x-amz-meta-originalfilename: fisbanner.jpg x-amz-version-id: null Content-Type: image/jpeg Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 05 Oct 2023 12:50:37 GMT Via: 1.1 varnish Age: 3474 X-Served-By: cache-bur-kbur8200165-BUR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1696510237.461870,VS0,VE1 Strict-Transport-Security: max-age=31536000
2023-10-05 12:50:37 UTC	1498	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff ed 00 2c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 Data Ascii: JFIFHH,Photoshop 3.08BIMHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkp
2023-10-05 12:50:37 UTC	1514	IN	Data Raw: 38 f4 bb a6 a1 63 4f 35 c1 e2 19 8f f8 1f db 6b 71 fe c3 e9 ec 39 2d c7 78 fb 47 f8 7a 21 92 e2 8c 0f cc 7f 87 aa 06 67 b7 f8 7e 6f fe b5 fe 96 ff 00 5b df da c3 49 4a f5 9b 61 7a c2 f2 ff 00 8d ff 00 de bf d6 f6 95 e5 cf 57 54 27 a8 cf 2f f5 37 b7 f4 3c 7f 5f e9 ed 33 cb e4 3a 50 b1 53 ac 0f 2f f8 f1 fe f1 fe c7 da 57 7a 74 ea a7 a7 4a 1d bf b4 b3 bb 90 ac d4 74 ff 00 6f 40 5f 4b 64 eb 04 91 52 90 2d af ed 80 52 d3 11 fd 23 04 7f 56 1e ce 36 6e 5a bc df a8 d0 ae 98 eb 43 34 95 09 f9 79 b7 fb 50 47 a9 1d 14 6e fc c1 6b b2 82 25 6a bd 2a 23 4a 17 fc fc 97 fd b1 fb 01 e8 5e a0 db bb 53 65 e9 9a a0 ff 00 15 cc 01 e4 49 67 44 92 74 60 0e 8f b5 a3 d4 63 a7 1c fe b7 2c ff 00 d1 8f d3 dc 91 69 b2 ed 9c a5 47 90 f8 d3 f1 05 80 2c 29 fc 2b f0 a7 da 49 3e 87 a8 f6 Data Ascii: 8cO5kq9-xGz!g~o[IJazWT'/7<_3:PS/WztJto@_KdR-R#V6nZC4yPGnk%j*#J^SeIgDt`c,iG,)+I>
2023-10-05 12:50:37 UTC	1530	IN	Data Raw: 8f 4b 2a 61 f7 5d 7f ba 29 ff 00 b5 43 9c c2 64 94 7f a9 8a 5b 53 31 1f eb 9f af b5 cb dd 65 28 fe 19 62 7f c8 d5 7a 0e ca 7c 1d da d9 bf 8e 09 e3 fb 48 ee ff 00 07 48 48 f8 3c ff 00 4f f6 1f 8f a7 fb 6f 61 fe 85 2e 7a 71 88 b7 07 9b da ff 00 4b 1e 0f f8 fb 6b cf a4 32 0e 34 e9 f3 05 2f 83 33 88 9c 9d 22 2c a5 03 ff 00 b0 5a 98 89 b5 ff 00 d6 f6 a2 16 d0 ea 7d 19 4f f3 1d 15 ee 71 f8 d6 d2 a7 1a c6 e3 f6 a9 eb db ce 23 16 f0 dc 91 91 62 32 f5 52 58 5b e9 2b 2d 40 b7 fd 4c 1e d9 de 07 87 73 28 ff 00 86 3f f3 24 ff 00 97 ab 72 ec 9e 26 dd 6e df f0 a4 1f b3 b7 fc 9d 33 c7 fa 47 d3 e9 fd 7f db 8f c7 b2 a3 d2 f9 38 f5 2e 3e 3f af d0 70 3e 9f d3 fd f5 fd fb a4 ef d2 e3 11 eb d9 9b ed 3f d4 c7 b7 e6 03 eb ca e4 ec 49 ff 00 61 ed 64 59 b7 98 7f cd 33 ff 00 1b ff Data Ascii: K*a])Cd[S1e(bz\|HHH<Ooa.zqKk24/3",Z}Oq#b2RX[+-@Ls(?$r&n3G8.>?p>?IadY3
2023-10-05 12:50:37 UTC	1546	IN	Data Raw: 18 ad 5c 48 a5 01 f9 b0 34 1c 47 9f 42 38 36 1b a8 65 16 ef 0c a2 46 c8 8c c6 e2 46 19 e0 a5 6a 46 0e 69 e5 d4 0d e1 f0 67 e7 72 1a cc 96 47 e1 67 cb 5c 76 13 0f 4f 51 53 55 91 ae f8 e3 dc 54 98 ea 5a 6a 74 69 6a f2 15 75 75 1b 36 28 e3 89 15 09 69 5d 82 aa ad c9 02 fe c1 17 bc c1 69 70 d4 13 c2 40 c0 a4 a9 ff 00 41 75 28 6c fc b5 75 63 16 60 97 53 64 fe 9b e3 e5 c3 a0 c7 68 fc 4f f9 4b bf 76 08 ed 5d 8d f1 ab e4 06 f3 ea f6 a4 cc 57 af 64 6d 3e 9c ec 5d c5 b0 9a 83 6e cf 5b 4b b8 6b 86 f0 c3 ed ca cc 7f 86 82 5c 6d 44 55 b2 8a 8d 30 35 3c 8b 21 53 1b 80 c3 6e 36 f0 37 86 f2 c6 ad 8e d6 75 0d 9f 91 35 e9 72 6d d7 13 ae b4 8a 46 53 c1 95 18 83 42 41 c8 04 75 cf ae be 2b 7c 9f ed bd ad 51 be ba a3 e3 8f 7c 76 76 c7 a5 ab ae c7 d5 6f 2e bc ea 1e c1 de 9b 52 Data Ascii: \H4GB86eFFjFigrGg\vOQSUTZjtijuu6(i]ip@Au(luc`SdhOKv]Wdm>]n[Kk\mDU05<!Sn67u5rmFSBAu+\|Q\|vvo.R
2023-10-05 12:50:37 UTC	1562	IN	Data Raw: 12 59 8d 7f c1 d0 a5 45 44 91 00 aa 05 85 bf c2 f6 fa 8b 1b 0f c5 fd 84 6e 2e 0b 74 06 ba ba 2f d2 9a 14 01 6d 6b 0f f8 9f f1 fe be ca 99 bc fa 24 91 c9 c9 ea 7e 6f 73 ed be ae d9 f5 5d 8f bd 10 d4 63 e9 a6 5a 4d b5 b7 a2 65 5a dd dd 9f 90 1f b5 a1 a6 0e 0e 98 90 83 24 d3 30 2b 1a 23 48 d7 0b a5 d3 6d fb 45 d7 37 5e ae d7 60 74 b9 1a a7 98 82 56 da 11 c5 8d 3f 11 e0 ab c5 89 0a 32 6a 14 6c 1c bd 75 ce b7 eb b7 59 61 88 2d 34 a7 e0 82 21 4d 4c d4 fd 81 45 0b 31 0a 32 6a 2a e3 7b ef 5d d1 da 7b bb 25 bc b7 75 5a d5 e5 72 2c b0 c5 0c 02 51 8e c4 63 22 79 5e 83 09 86 a7 9a 49 4c 54 b0 09 88 50 49 67 66 69 64 2d 23 bb 1c b6 d8 76 2b 4e 51 b2 4b 1b 25 d3 1a 64 93 4d 72 48 40 0d 23 90 05 5d a9 93 c0 00 14 51 40 03 37 f9 7f 60 b4 e4 eb 14 b1 b2 5d 28 82 a5 8d 35 Data Ascii: YEDn.t/mk$~os]cZMeZ$0+#HmE7^`tV?2jluYa-4!MLE12j*{]{%uZr,Qc"y^ILTPIgfid-#v+NQK%dMrH@#]Q@7`](5
2023-10-05 12:50:37 UTC	1578	IN	Data Raw: 86 3f ec 3f 3e d4 da c5 e2 ca 89 fc 4e a3 f6 90 3a 2d bf 93 c1 8a 47 fe 18 d9 bf 60 27 a8 bd c7 58 2b 37 ec f1 83 74 a1 c5 63 69 00 16 3a 1d d6 6a b9 14 8f c1 b5 52 9f f6 3e d5 f3 a4 c2 5d c1 c0 fc 28 8b f9 d3 57 fc fd d3 fe db db fd 3e d2 ac 78 bc b2 3f da 01 0a 3f e3 a7 a4 55 30 fd 23 9f c7 16 b1 fc 9f a5 fd 84 5c f4 25 97 cf a7 ea 7f af 1f 5f f5 ff 00 e2 2c 7d b3 d1 5c bc 3a 7b 87 e8 3f d8 71 6f f0 e3 9f 7a f3 e8 aa 5f f2 f5 39 7e 87 fe 0a 6d c9 fe 9f 9f 7b e9 2b ff 00 9b a5 37 6d da 38 3a fa 9e fc a6 db 95 c8 b5 88 fd bc 52 8b ff 00 b1 f6 75 cd fd a9 66 be 96 f5 fe 49 d1 3f b7 e3 53 6e 0d eb 72 07 f3 97 a0 c2 98 fd 3f c6 c7 eb f4 fa 71 ec 14 fc 3a 1b 4e 3a 50 53 f0 3f 3f 8f a7 f4 ff 00 7d fd 7d b5 d1 44 bc 7a 75 88 f0 0f f8 f3 7f f6 ff 00 4f 7e e9 03 Data Ascii: ??>N:-G`'X+7tci:jR>](W>x??U0#\%_,}\:{?qoz_9~m{+7m8:RufI?Snr?q:N:PS??}}DzuO~
2023-10-05 12:50:37 UTC	1594	IN	Data Raw: 7c cb 9f f8 cb 7f 87 a4 8c 0e 2c 39 bf fc 41 36 b7 fb 6f 61 d0 73 d1 f4 ab 9e 97 b4 a3 f8 d6 c7 ce 63 00 d5 59 b6 aa a2 dc 14 03 f2 d4 33 93 16 52 24 1f e0 35 48 7f 00 b0 27 f1 ec e5 07 d6 d9 49 1f 16 85 84 c9 fe 94 d1 1f fc 84 f4 15 9a bb 6e e9 0c df 82 e5 4d bc 9f 29 17 ba 33 f9 e1 7f 97 48 78 1a c4 0f af 02 df ef 85 fd 85 98 e7 a1 34 a2 9d 3b d1 55 4b 49 57 49 5b 11 b4 b4 75 10 55 47 6b 83 ae 9e 65 94 0b 80 7f 56 8b 1f f5 fd da 39 4c 4c 18 71 52 18 7d a0 83 d2 1b 88 16 e1 1a 36 e0 ea ca 7e c6 04 7f 97 a7 fd fb 49 15 36 e9 aa ab a7 b8 a4 cd 53 51 e7 29 8a ad 91 92 be 20 d3 11 6e 3f ce 23 92 01 36 b8 fe be d4 73 04 4b 1d cb 32 7c 32 01 2a fd 92 00 4f ec 35 1d 14 f2 a4 ed 35 8a a3 fc 50 b3 c0 de b5 8c d0 7f 2a 74 9b 84 ff 00 be 1f 9f f5 fd 92 1c f4 73 27 Data Ascii: \|,9A6oascY3R$5H'InM)3Hx4;UKIWI[uUGkeV9LLqR}6~I6SQ) n?#6sK2\|2O55Pts'
2023-10-05 12:50:37 UTC	1610	IN	Data Raw: d5 7f f8 f7 42 4e 5b ce d9 6b ff 00 34 63 ff 00 00 1d 41 a6 b1 ff 00 79 ff 00 89 fa 71 fe 3e c8 cf 0e 9f 9f 87 4f 70 f2 05 87 e4 7f 5f a5 87 fb d7 b6 c3 67 a2 e9 ba 9e b7 b5 ef f8 1f 9f a7 02 f7 f7 e4 3d 23 61 5e 96 7b bc 7d cf 5a ec ca 91 c9 a1 cc e4 a9 49 03 e9 e4 5a cb 0f fa c3 fe f1 ec f3 74 fd 5d aa d9 bf 86 59 57 f6 d4 ff 00 93 a0 e7 2f fe 86 f5 7a 9f ef c8 63 6f d9 a7 fc fd 06 34 bf d7 fa 8f f7 b2 3e 84 fb 06 b9 ff 00 0f 43 79 ba 7b 80 ff 00 b6 1f 9f a7 fb ee 0f b6 f8 f4 59 28 e9 c5 0f d3 f3 fe 1c 8f af fc 56 fe f5 d2 26 e3 d2 c3 7b 8f bd d8 fb 03 25 f5 92 8d b2 78 79 9c f2 6d 1b a7 8c 71 fe 34 6d ec eb 78 fd 6b 0b 49 3c d7 c5 88 fd 80 e3 fc 1d 07 b9 67 fc 5b 73 bf 87 c9 c4 53 01 f6 83 5f f8 f0 e8 3c a5 6e 79 fe 80 70 78 e4 8f f1 f6 10 93 8f 42 f9 Data Ascii: BN[k4cAyq>Op_g=#a^{}ZIZt]YW/zco4>Cy{Y(V&{%xymq4mxkI<g[sS_<nypxB
2023-10-05 12:50:37 UTC	1626	IN	Data Raw: e1 b5 c7 d3 e8 2d 7f f7 8b 7b a7 45 92 f4 e5 17 d3 fd eb eb fe db de c7 48 64 e8 4b da 86 54 da 7d 87 25 1a 99 b2 03 03 38 8a 00 42 31 87 ec b2 5e 46 0f 21 0b 6f 57 f5 fe cf fa d7 17 ec 95 16 97 a6 3c bf 82 68 3c e9 47 af 1f cb a0 6e f8 15 b7 0b 01 21 a4 7f 50 b5 3c 45 75 c7 4e 19 ff 00 8b f4 e8 bb d1 db 4a 58 dd 6c b6 3c de d6 fa f3 ee 39 3f e4 ea 5f b9 ae 6b d2 86 9f ea 3f d6 3c 7f 5f af 1f 4f 6d c9 d1 44 dc 3a 7a 87 eb fd 4f 1f e1 fd 79 f6 d7 45 72 74 eb 0f e9 ff 00 62 6d fe f3 ee ad fe 6e 91 49 d2 e7 61 69 fe f6 e1 2e 47 f9 da 9f f9 2b ec 6a 38 e3 d9 ef 2e 7f b9 d0 ff 00 a6 6f f8 e3 74 18 e6 af f9 27 4f f6 2f fc 7d 7a 0e f7 3d ce ee dc da ae 09 dc 19 ab 8e 78 ff 00 72 15 17 bd 89 ff 00 1f 61 ed da bf 53 35 7f df b2 7f c7 cf 43 1d 97 1b 7d b7 fc d0 8b Data Ascii: -{EHdKT}%8B1^F!oW<h<Gn!P<EuNJXl<9?_k?<_OmD:zOyErtbmnIai.G+j8.ot'O/}z=xraS5C}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.6	49723	18.154.206.79	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:38 UTC	1630	OUT	GET /vendor/appdynamics/adrum-ext.2aed9d091ef08efa95822e864b4554d2.js HTTP/1.1 Host: cdn.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://survey3.medallia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.6	49724	151.101.25.230	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:38 UTC	1630	OUT	GET /a938a40fb1e58749cdb6a74ad5e2a74452ead2f7 HTTP/1.1 Host: sea1.cdn.survey.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://survey3.medallia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	142.250.188.237	443	192.168.2.6	49707	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:33 UTC	2	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 05 Oct 2023 12:50:33 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: script-src 'report-sample' 'nonce-GPgiHIYvcGfNXqnplNUS8g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-10-05 12:50:33 UTC	4	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2023-10-05 12:50:33 UTC	4	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.6	49725	146.75.93.230	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:38 UTC	1631	OUT	GET /15de41a42ce4f647a5d1c5e8ea29f1913d26d6b5 HTTP/1.1 Host: global.cdn.survey.medallia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	18.154.206.79	443	192.168.2.6	49723	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:38 UTC	1631	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 47852 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Thu, 24 Aug 2017 19:57:21 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Sun, 01 Oct 2023 09:03:27 GMT Cache-Control: max-age=604800 ETag: "4aee3fb26fa6e2174a78a396a876404b" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7fa1cf564cbbac2b29dcfb38f6cc0b5e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: sB8uoh3n7Do4WJcrh7gTWZygZv4n2OMcX9NdTWWR6Az_FuzVgJBRiQ== Age: 359232
2023-10-05 12:50:38 UTC	1632	IN	Data Raw: 3b 2f 2a 20 56 65 72 73 69 6f 6e 20 32 61 65 64 39 64 30 39 31 65 66 30 38 65 66 61 39 35 38 32 32 65 38 36 34 62 34 35 35 34 64 32 20 76 3a 34 2e 33 2e 32 2e 31 2c 20 63 3a 44 45 56 42 55 49 4c 44 2c 20 62 3a 39 33 36 30 20 6e 3a 31 34 37 31 2d 34 2e 33 2e 32 2e 6e 65 78 74 2d 62 75 69 6c 64 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 2c 20 41 70 70 44 79 6e 61 6d 69 63 73 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 0a 20 44 65 72 69 76 61 74 69 76 65 20 6f 66 20 47 6f 6f 67 6c 65 20 45 70 69 73 6f 64 65 73 3a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 30 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 0a 0a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 Data Ascii: ;/* Version 2aed9d091ef08efa95822e864b4554d2 v:4.3.2.1, c:DEVBUILD, b:9360 n:1471-4.3.2.next-build /(function(){/ Copyright (c) 2013, AppDynamics, Inc. All rights reserved. Derivative of Google Episodes: Copyright 2010 Google Inc. Licensed unde
2023-10-05 12:50:38 UTC	1648	IN	Data Raw: 61 2c 65 29 7b 69 66 28 33 3e 3d 65 29 72 65 74 75 72 6e 22 2e 2e 2e 22 3b 61 2e 6c 65 6e 67 74 68 3e 65 26 26 28 61 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 28 65 2d 33 29 2f 32 29 2b 22 2e 2e 2e 22 2b 61 2e 73 75 62 73 74 72 69 6e 67 28 61 2e 6c 65 6e 67 74 68 2d 28 65 2d 33 29 2f 32 2c 61 2e 6c 65 6e 67 74 68 29 29 3b 72 65 74 75 72 6e 20 61 7d 3b 61 2e 46 68 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 65 29 7b 66 2e 6c 65 6e 67 74 68 3c 3d 65 7c 7c 28 66 3d 61 2e 62 61 28 66 2c 65 2d 31 29 2c 66 2b 3d 22 3a 22 29 3b 72 65 74 75 72 6e 20 66 7d 3b 61 2e 44 68 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 65 2c 63 2c 64 2c 68 2c 71 29 7b 66 3d 61 2e 46 68 28 66 2c 64 29 3b 63 3d 61 2e 62 61 28 63 2c 68 29 3b 66 2e 6c 65 6e 67 74 68 2b 65 2e 6c 65 6e 67 74 68 2b 63 2e Data Ascii: a,e){if(3>=e)return"...";a.length>e&&(a=a.substring(0,(e-3)/2)+"..."+a.substring(a.length-(e-3)/2,a.length));return a};a.Fh=function(f,e){f.length<=e\|\|(f=a.ba(f,e-1),f+=":");return f};a.Dh=function(f,e,c,d,h,q){f=a.Fh(f,d);c=a.ba(c,h);f.length+e.length+c.
2023-10-05 12:50:38 UTC	1681	IN	Data Raw: 61 6c 6c 62 61 63 6b 54 69 6d 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 63 2e 67 65 74 50 68 61 73 65 43 61 6c 6c 62 61 63 6b 54 69 6d 65 28 22 41 54 5f 4f 4e 4c 4f 41 44 22 29 2c 64 3d 64 2e 67 65 74 50 68 61 73 65 43 61 6c 6c 62 61 63 6b 54 69 6d 65 28 22 41 54 5f 4f 4e 4c 4f 41 44 22 29 2c 66 3d 6e 75 6c 6c 3d 3d 64 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 62 3f 28 61 2e 65 72 72 6f 72 28 22 4d 39 31 22 29 2c 6e 75 6c 6c 29 3a 61 2e 6c 69 66 65 63 79 63 6c 65 2e 67 65 74 50 68 61 73 65 49 44 28 66 7c 7c 62 3c 3d 64 3f 22 41 46 54 45 52 5f 46 49 52 53 54 5f 42 59 54 45 22 3a 22 41 46 54 45 52 5f 4f 4e 4c 4f 41 44 22 29 7d 3b 72 65 74 75 72 6e 20 62 7d 28 29 3b 61 2e 4f 65 3d 62 3b 61 2e 63 50 4c 50 49 3d 62 2e 6a 63 7d 29 28 67 7c 7c Data Ascii: allbackTime)return null;var b=c.getPhaseCallbackTime("AT_ONLOAD"),d=d.getPhaseCallbackTime("AT_ONLOAD"),f=null==d;return null==b?(a.error("M91"),null):a.lifecycle.getPhaseID(f\|\|b<=d?"AFTER_FIRST_BYTE":"AFTER_ONLOAD")};return b}();a.Oe=b;a.cPLPI=b.jc})(g\|\|
2023-10-05 12:50:38 UTC	1693	IN	Data Raw: 28 62 29 7b 76 61 72 20 66 3d 6e 65 77 20 62 2e 5a 65 3b 61 2e 63 68 61 6e 6e 65 6c 2e 61 64 64 52 65 73 6f 6c 76 65 72 28 66 29 3b 62 2e 6d 61 72 6b 73 3d 7b 7d 3b 62 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 63 29 7b 61 2e 6c 6f 67 28 22 4d 31 30 33 22 2c 65 2c 63 29 3b 62 2e 6d 61 72 6b 73 5b 65 5d 3d 63 7d 3b 62 2e 72 65 70 6f 72 74 4f 6e 6c 6f 61 64 3d 0a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 6c 6f 67 28 22 4d 31 30 34 22 29 3b 61 2e 72 65 70 6f 72 74 65 72 2e 72 65 70 6f 72 74 45 76 65 6e 74 28 65 29 3b 66 2e 6f 6e 52 65 61 64 79 28 29 7d 2c 61 2e 63 6f 6e 66 2e 58 65 29 7d 3b 62 2e 72 65 70 6f 72 74 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 72 65 70 6f 72 Data Ascii: (b){var f=new b.Ze;a.channel.addResolver(f);b.marks={};b.mark=function(e,c){a.log("M103",e,c);b.marks[e]=c};b.reportOnload=function(e){setTimeout(function(){a.log("M104");a.reporter.reportEvent(e);f.onReady()},a.conf.Xe)};b.reportEvent=function(){a.repor

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	151.101.25.230	443	192.168.2.6	49724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:38 UTC	1664	IN	HTTP/1.1 200 OK Connection: close Content-Length: 17287 x-amz-id-2: IOTeQjd5WgaX85qxcKVnqJysfhaMWPNNXykEpG7D15uWxW7dwt3JyqfgGJC4KkvoX7d3q3IRxDU= x-amz-request-id: 72PCPE4WEKBV74Q2 Last-Modified: Thu, 21 Jan 2021 22:55:33 GMT ETag: "5e8b4e85202428bd6288d3d8ba63c9de" x-amz-meta-originalfilename: FIS-logo-WEB.png Content-Type: image/png Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 05 Oct 2023 12:50:38 GMT Via: 1.1 varnish Age: 0 X-Served-By: cache-lax10657-LGB X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1696510239.641235,VS0,VE99 Strict-Transport-Security: max-age=31557600
2023-10-05 12:50:38 UTC	1664	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 18 00 00 00 f3 08 06 00 00 00 c4 98 6f 78 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 40 00 49 44 41 54 78 01 ed 9d 09 80 5d 45 99 ef 4f d5 39 e7 de ee 4e 3a 2b 21 81 a0 80 c0 88 06 a3 12 20 49 ef 61 15 14 95 11 a2 cf 79 f2 86 79 ce e0 32 66 c8 c6 a2 8e de 51 47 84 24 1d c5 51 c4 99 81 e7 8c a2 46 67 71 74 82 42 24 9d 5e 13 26 91 45 c3 8c 20 3b 49 08 84 6c 9d 4e f7 bd f7 9c aa f7 af db e9 d0 84 f4 7a 4f dd f5 5f d0 e9 db f7 9c f3 d5 57 bf b3 d4 77 be fa ea 2b c7 61 21 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 Data Ascii: PNGIHDRoxsRGB@IDATx]EO9N:+! Iayy2fQG$QFgqtB$^&E ;IlNzO_Ww+a!
2023-10-05 12:50:38 UTC	1666	IN	Data Raw: 2c 7a 6f 28 c2 2f c0 89 12 47 87 1a 0c d6 67 9c 9f e3 30 b4 76 ba ae b7 f2 86 05 bf 7e 6c 9c 32 46 7d 98 f1 de f5 f9 ee 8f 30 14 72 69 aa 0f 4e a3 2c 4d 02 9c 43 c7 f3 11 68 92 54 6b 0f dd bf 69 05 62 9a a2 b9 b7 46 dd 22 ee 48 02 24 50 68 04 fa 7d 9c 85 a6 95 2d 7d f0 8a 79 ee 49 75 a7 46 6a 5c 18 5d 61 a8 08 2f 38 a1 e2 7d 1b 10 98 68 b7 64 3c 17 7d ee 22 74 aa 91 18 17 46 5b f3 f2 8a e1 89 aa 9e a4 ba 14 9d ff 34 9b 2d b8 6b eb 3c 1f 11 b3 d7 09 47 9e 8b a1 84 64 b6 c6 45 46 7f b8 0f d0 86 34 fe bd e4 f9 d9 2f 5d 65 53 7f 23 fb 6b 9b 1a 1a 32 c6 85 23 62 11 19 17 46 2c 3c 20 ce 49 41 98 be fd d6 8d 4d a7 99 2f 6c 15 63 e0 f5 ba ee bd 7e 0c c6 45 6f f6 c6 85 d1 13 e3 8b 4e 90 52 4e 2c ee 2e 9d 70 71 e3 57 6c e9 4e b9 24 40 02 c5 43 a0 ac 0c 8c bf 6d ab Data Ascii: ,zo(/Gg0v~l2F}0riN,MChTkibF"H$Ph}-}yIuFj\]a/8}hd<}"tF[4-k<GdEF4/]eS#k2#bF,< IAM/lc~EoNRN,.pqWlN$@Cm
2023-10-05 12:50:38 UTC	1667	IN	Data Raw: fa 04 4a de c0 98 a4 a4 87 a0 f9 48 86 2a c6 72 39 84 78 fd ac d8 97 bd 81 b1 4e 5f 63 96 74 ad 40 96 ca 9c 1a 18 c6 a0 c1 ca a5 55 63 69 f3 50 fb 86 81 0b f7 3c 16 f9 ca 61 31 b1 1e 48 46 e6 fa ae 9f 7d 1b 5a 5a 10 b7 eb 4c 41 ee 8b 9c 79 60 0c 2a 9c 70 a4 0b 71 4e 88 02 1b d2 c9 9f 88 c0 d1 9c 16 63 cc 60 41 b4 09 61 20 b3 36 f2 72 aa 38 2b 23 01 12 88 84 40 4e 1f fa 91 68 3c 46 21 7d 6e 98 e3 c7 6a bf 82 a6 7f d3 15 95 59 f3 dd b7 0d ab 7b 63 c4 05 2b 50 8d b1 e5 d9 ef 7e 64 11 d6 ac 05 99 e5 43 b3 16 92 4f 01 87 ba 31 4a 65 16 32 cb 71 31 f3 56 1c 91 bd 81 94 63 b5 59 1d 09 90 00 09 18 02 59 77 80 85 8e b1 22 44 28 81 09 8a c8 71 31 55 8a be de ac df 78 a7 ce db 86 29 1d 98 da e9 e6 6c 12 cc 51 52 30 92 22 b1 6a cc 94 94 a3 42 8b f0 c3 34 f7 80 59 e5 Data Ascii: JHr9xN_ct@UciP<a1HF}ZZLAy`pqNc`Aa 6r8+#@Nh<F!}njY{c+P~dCO1Je2q1VcYYw"D(q1Ux)lQR0"jB4Y
2023-10-05 12:50:38 UTC	1669	IN	Data Raw: 22 c9 5b 70 bc 4b 68 e5 65 8f f5 48 99 6e 81 91 94 44 96 8a 48 db 60 8c 16 2c 45 76 c8 3d 98 da 64 82 32 8f 57 7f 14 df 75 a7 e5 7a 74 ce c6 50 8a d4 0b 60 8c 8b cc 9b bf d0 f7 ad ac 6f df 12 85 ae c7 93 61 bc 0a 81 70 be 84 80 4f 93 78 2b 52 43 0f f6 4b 0c 9e 8b e7 d2 4a 7d 69 59 4d 57 64 b1 17 c7 b6 e3 50 52 7c 21 95 54 eb 91 ab e5 d8 4d 59 fd 6d 8c 0b 33 fc 12 a4 c2 af de 58 db f6 2f 59 09 e3 c1 24 40 02 45 4f 20 da 27 4c e1 e3 d0 3d 0d 17 3e 87 b7 dc bd 91 c6 63 98 d8 8e d0 79 79 79 43 eb 8b b6 11 a0 e3 d9 81 0e 68 03 1c 31 29 33 1c 10 45 7d e8 18 cc 7a 27 87 94 2f 1e 58 f6 9e ae bd 51 c8 1c 4a 86 71 d3 4b 19 7c 0f f1 24 db f0 aa 6b 3a d4 ac 87 ac 4c dc 88 31 2e 90 f9 e2 57 87 6b 2e fa b7 a1 ea 8e ea fb 9b 6b 5a 3b 91 b8 2a 01 43 09 46 86 8e ca 1b 13 Data Ascii: "[pKheHnDH`,Ev=d2WuztP`oapOx+RCKJ}iYMWdPR\|!TMYm3X/Y$@EO 'L=>cyyyCh1)3E}z'/XQJqK\|$k:L1.Wk.kZ;*CF
2023-10-05 12:50:38 UTC	1670	IN	Data Raw: 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 af 11 10 af Data Ascii: @$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@
2023-10-05 12:50:38 UTC	1671	IN	Data Raw: b7 4f 0e 1b cc 39 d4 c1 c7 fb 3e e3 05 14 0e a6 52 2e 41 6c 93 7f bc 5d ca ed 3b 5c 0a 62 75 57 fd 27 62 9e 6a 47 10 de 9f e0 da 38 62 5c 94 1b 09 b6 37 1f 04 4c 5f 27 85 fb c7 6b bb ea cf cd 47 fd a6 ce 92 34 30 8c 2b 72 72 f7 09 bf f6 3c f7 fb 98 37 3e d7 bc 31 04 70 47 b2 90 40 2e 08 a4 71 bd a1 33 b9 74 cd a6 86 37 e5 a2 be f1 d4 21 ba 93 35 70 a3 be d5 0c 13 46 55 32 2e 7f 47 9c 7f 20 19 9f 13 95 cc 62 95 63 66 86 ac dd dc f8 23 df f3 ee 84 ed 35 2b 0d 8f 29 5f 6c 8a f5 6c 16 a7 de e6 7a 33 2f 3b a1 96 1f c9 57 0b 4a ca c0 58 db 56 f7 96 b5 9b 9b ee c1 bc d2 f5 d2 93 75 e6 81 67 7e 58 48 20 97 04 cc ec 23 04 3e 4e d5 9e 9e 9f cb 7a c7 52 17 a6 98 d6 7b 98 da 16 65 31 0f b4 58 dc 45 0a 07 0f 39 1c ca b7 ac 69 6f 5a e0 c4 dd 07 30 64 b4 d8 bc d8 70 56 Data Ascii: O9>R.Al];\buW'bjG8b\7L_'kG40+rr<7>1pG@.q3t7!5pFU2.G bcf#5+)_llz3/;WJXVug~XH #>NzR{e1XE9ioZ0dpV
2023-10-05 12:50:38 UTC	1673	IN	Data Raw: 83 1f d1 83 fb 1f 33 07 f2 97 9a b5 d0 98 0d a7 8f 49 25 09 8e 26 47 7e cc ca c2 5b c3 55 3e 8e 6d 26 3b 27 74 4e 22 bb db 1e fc 7e 0a 29 78 1f 08 82 f0 97 37 d5 75 ec 1c 87 38 1e 52 44 04 52 61 c5 ff 8e 55 c8 b3 f3 e1 bd 30 c6 84 c9 67 20 f1 dc 49 21 b9 20 8c f2 1e 15 a8 03 b8 1e 0f 64 42 f9 8a 88 23 55 8d 88 80 79 99 45 26 bf 40 eb 97 d0 2f 6d 11 4a af 5f ba 60 d3 66 3c 50 0b 2a 43 6f 41 19 18 d5 fb a7 7f c1 af 74 3f 50 28 c6 85 f1 48 18 17 b8 8b bc 06 66 06 0b 92 e9 ec 0e 52 fa f7 38 89 8f e2 26 ff 9d 94 fa 59 e1 b9 3b 84 0c f6 fa 61 2c d5 93 ee 4b f5 ee 83 65 74 52 44 17 51 a9 8b d9 85 55 78 26 56 c7 fc 2a d7 3d 58 04 6d 35 2b 78 1d 72 45 70 a8 3b e8 41 10 67 5e 52 ef 16 01 a6 92 53 f1 b6 9f d5 56 a3 51 4b 72 9d ef a2 ff d9 83 44 49 29 75 10 cf 9d 4e Data Ascii: 3I%&G~[U>m&;'tN"~)x7u8RDRaU0g I! dB#UyE&@/mJ_`f<PCoAt?P(HfR8&Y;a,KetRDQUx&V=Xm5+xrEp;Ag^RSVQKrDI)uN
2023-10-05 12:50:38 UTC	1674	IN	Data Raw: d0 7c 33 63 04 59 41 7f 13 93 c9 cf 0e 7c c7 df 24 40 02 24 30 56 02 f0 5d c4 c6 7a cc 68 f6 37 c3 2e 42 3b 2f 2e 16 3f b1 34 3f 65 34 5a 70 1f 12 c8 0d 81 9c 18 18 ab 7e 75 e9 04 2c 36 72 75 68 31 a7 bf 79 33 40 ea ef be 50 a8 25 4b 16 30 9f 7f 6e 2e 1f d6 42 02 a5 49 00 46 c0 64 1b 33 48 cc 10 2e 4a 4f 69 52 63 ab 48 e0 f5 04 72 62 60 c8 ea f4 02 d7 95 7f 84 29 a3 af af 3d c2 bf fc 98 8b 29 a9 ea 3b 37 2e 6c eb 88 50 2c 45 91 00 09 94 21 01 d8 01 7e 19 36 9b 4d 26 81 48 09 e4 c4 c0 70 9c f0 83 66 f8 c2 56 71 11 38 9a ea 0b 9e f7 95 fe aa ad 3a 28 97 04 48 a0 ac 08 ec 45 1c 86 9d 06 0b 6d 65 f8 c5 8e b2 94 4a 02 e3 27 60 af d7 3f a2 53 e2 e7 f3 aa 30 af e3 62 9b c3 23 26 71 0d 62 3c d6 2c 69 68 7b 65 fc 28 78 24 09 90 00 09 f4 13 80 af 35 b0 c1 02 d3 e7 Data Ascii: \|3cYA\|$@$0V]zh7.B;/.?4?e4Zp~u,6ruh1y3@P%K0n.BIFd3H.JOiRcHrb`)=);7.lP,E!~6M&HpfVq8:(HEmeJ'`?S0b#&qb<,ih{e(x$5
2023-10-05 12:50:38 UTC	1675	IN	Data Raw: 2f 5e 8f f6 20 3f d4 0b 9e 52 2f ee db d7 bb 27 71 e5 b6 c3 05 ab 78 04 8a 59 33 30 d0 31 47 3f 7d 04 0d 36 6b 90 40 72 9f ee 4d 5a c9 e0 b9 a6 b3 fe 22 29 e5 72 28 7f b1 1f f7 7c f3 c6 82 21 19 96 02 21 60 3c d5 78 93 7c af d3 a7 be 10 4c 3b bc b5 b9 b3 61 ed b2 85 ad 3f 84 13 d9 ca f5 56 20 cd a6 1a 79 26 20 43 f5 4d 18 17 7f 0a e3 76 8a 8d dc 3e 43 35 cf 18 1a f0 62 64 36 1b 63 03 53 66 cf c0 f5 7f 46 e6 39 48 b3 62 28 6c 05 f5 7d ff 69 c2 bf f8 5f 05 da 41 d0 b0 0a a4 db 33 69 46 f5 f3 ab 3b 1b 7f 8f 0e ed bf 3c ed 74 f6 c5 63 8f de 7c de 86 03 05 a5 7c 96 ca d8 33 30 a4 9d 35 48 b2 6c ef 90 87 27 7e 3e af aa 7a c6 84 bf 95 42 fe 25 02 ba 3c 73 53 a7 7a 73 f3 b6 32 a4 52 dc 30 34 01 dc ac 9e 2b cf d3 ae f3 83 e6 2d 8d 57 05 0f 89 cf dc 78 41 0b e3 72 Data Ascii: /^ ?R/'qxY301G?}6k@rMZ")r(\|!!`<x\|L;a?V y& CMv>C5bd6cSfF9Hb(l}i_A3iF;<tc\|\|305Hl'~>zB%<sSzs2R04+-WxAr
2023-10-05 12:50:38 UTC	1677	IN	Data Raw: c9 bc 95 b2 bd fa 7f b2 f8 27 21 16 97 59 87 15 ed 58 4a 88 40 7f 76 45 fd 9f 66 dd 88 12 6a 16 9b 52 64 04 96 2f 68 5d 1f 06 e9 a6 20 a5 7f 8a 75 72 4c de 82 22 6b 01 d5 2d 66 02 66 21 48 4c 9f 3e 53 8a f0 ee e6 ce 85 95 f9 6a 4b 59 77 af 4a c7 ee 4d f6 a9 17 79 f3 e7 eb f2 8b b6 5e 0c 8b 20 ad 6e d8 a7 43 75 67 b4 92 29 8d 04 c6 4e 60 45 6d e7 73 58 bb 64 31 86 ec fe 0c d3 e1 e1 cd 70 cd d0 dd d8 05 f1 08 12 18 07 01 93 90 cb af 70 2f 0c b5 ff c5 71 1c 1e c9 21 65 6d 60 ac ac bd ff 65 b8 d3 13 bc e9 23 b9 96 f2 2e c4 24 3c 52 8e fe d6 8a fa f6 6d 79 57 86 0a 90 80 21 80 21 93 95 b5 9b ee 71 52 61 4d 90 0e 9b b1 5c 73 b7 19 36 e1 33 87 97 47 2e 08 e0 85 cb 2c 9f b0 bc b9 a3 e1 d2 5c d4 77 6c 1d 65 6d 60 18 18 2b 6a 5b ef c6 62 32 ff 10 67 a2 9c 63 af 8d Data Ascii: '!YXJ@vEfjRd/h] urL"k-ff!HL>SjKYwJMy^ nCug)N`EmsXd1pp/q!em`e#.$<RmyW!!qRaM\s63G.,\wlem`+j[b2gc
2023-10-05 12:50:38 UTC	1678	IN	Data Raw: 20 01 12 20 81 12 26 10 3a c1 17 83 a4 da 9b 59 93 c6 46 3b fb 53 89 9e 6f 43 f4 80 4c 1a 18 03 24 f8 9b 04 48 80 04 48 80 04 0a 84 c0 8d b5 9d 4f 21 c9 e7 f7 bc 98 9d 71 12 33 4c 82 ac 5b 6f 4f 6c 9f 13 b3 d5 64 1a 18 b6 c8 52 2e 09 90 00 09 90 00 09 64 41 00 8b 39 de 8d 95 76 fb cc dc 86 a8 8b 42 3a 0c 44 32 9e 34 71 ff cc 93 a2 96 3d 20 8f 06 c6 00 09 fe 26 01 12 20 01 12 20 81 02 22 d0 f3 40 d3 e3 58 55 77 ab eb 45 df 55 6b b8 47 a4 27 26 7b 52 cf b2 d5 e4 e8 b5 b6 a5 29 e5 92 00 09 90 00 09 90 40 19 11 48 24 12 58 3c 44 ad b7 15 87 01 b9 22 1d 86 a7 da 42 4a 03 c3 16 59 ca 25 01 12 20 01 12 20 81 2c 09 28 2d b6 64 d2 7b 67 29 e7 78 87 67 86 5e 84 a0 07 e3 78 70 f8 1d 09 90 00 09 90 00 09 94 34 81 c0 79 06 89 b7 0e 09 19 7d 20 86 91 89 a4 9e d3 6d f1 Data Ascii: &:YF;SoCL$HHO!q3L[oOldR.dA9vB:D24q= & "@XUwEUkG'&{R)@H$X<D"BJY% ,(-d{g)xg^xp4y} m
2023-10-05 12:50:38 UTC	1679	IN	Data Raw: 2a 66 a8 ec 73 5c 7d 4b 22 e1 e4 d4 12 a6 81 31 e2 e9 e1 0e 24 40 02 24 f0 1a 81 35 ed 4d 1f f6 7d 77 99 19 4b 37 13 fe 58 48 a0 90 09 b8 1e 0c 0c a5 ff 66 c5 82 b6 c7 73 ad 27 0d 8c 5c 13 67 7d 24 40 02 45 4b a0 b9 f3 b2 69 8e d4 5f 31 73 03 68 5c 14 ed 69 2c 1b c5 63 15 2e b2 76 86 eb 0f 2d 94 df ca 47 a3 69 60 e4 83 3a eb 24 01 12 28 4a 02 5a f7 7d 38 56 21 cf b4 b9 8c 76 51 82 a1 d2 05 47 c0 c3 82 66 e9 94 7a d6 f1 9d 4f 24 44 0b 66 c9 e6 be d0 c0 c8 3d 73 d6 48 02 24 50 84 04 d6 ad bb c6 85 e7 e2 23 66 ca 21 0b 09 14 32 01 13 77 81 eb b4 07 59 2f fe 2c 17 29 c1 87 62 41 03 63 28 32 fc 9e 04 48 80 04 06 11 78 f1 94 17 67 21 6d d6 5c 95 49 90 34 68 03 3f 92 40 01 11 10 e8 d5 85 10 2a 08 f4 67 96 2f d8 b4 31 9f aa d1 c0 c8 27 7d d6 4d 02 24 50 34 04 94 Data Ascii: fs\}K"1$@$5M}wK7XHfs'\g}$@EKi_1sh\i,c.v-Gi`:$(JZ}8V!vQGfzO$Df=sH$P#f!2wY/,)bAc(2Hxg!m\I4h?@g/1'}M$P4
2023-10-05 12:50:38 UTC	1681	IN	Data Raw: 39 db 58 6a 66 da 69 ff 4d 69 d2 73 22 1b 99 6b 02 c5 1c 07 1e 8b 97 84 56 df 4f 05 e1 5a 44 c9 ee 1c b9 29 dc 83 04 48 20 1b 02 5f 6d ad 9f 51 19 77 3f 0d e3 e2 e3 e8 34 67 9b 38 83 d7 ee 4f 3c 0c f1 b4 c8 7c 17 6a 07 0b 29 3d 87 1b f7 ae ee fd 7d df 4a 5c b1 e5 60 36 f5 16 fb b1 6b 3a 1b 6a 90 53 64 b9 23 c5 65 f0 b8 4e 30 ed c9 78 34 c6 37 e2 54 ec 38 a8 ff f1 08 18 63 22 f3 63 fe 71 1c a4 70 30 2f d9 01 be 7b 11 bb 3f 8e 5e b0 55 29 d1 3a 29 3e e9 d1 eb cf fb 79 41 07 6e 1e af 79 43 7d 87 a6 e6 be 24 d6 cf 9f 54 3d bd b2 41 28 7d a1 d2 7a ae 14 62 2a c6 98 24 ee c7 6e 3c c0 1e 87 52 ed da 0b 7f bd f4 bc b6 5d b9 d7 8e 35 92 40 79 13 30 86 46 55 85 7b 21 8c 8b 06 74 94 e7 e0 81 58 8d 7b 52 e3 f3 01 64 ce f9 2d 86 52 36 e9 a0 af a5 58 dd b6 b6 ce ee ea Data Ascii: 9XjfiMis"kVOZD)H _mQw?4g8O<\|j)=}J\`6k:jSd#eN0x47T8c"cqp0/{?^U):)>yAnyC}$T=A(}zb*$n<R]5@y0FU{!tX{Rd-R6X

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	146.75.93.230	443	192.168.2.6	49725	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:38 UTC	1696	IN	HTTP/1.1 200 OK Connection: close Content-Length: 134427 x-amz-id-2: a/ggDWy320Iq3ksBGsZAu0gUfrX5OHJulctp6BG9GQ0QMzJhKWYD8A4IM6hC+2Icnn/lTISSfL4= x-amz-request-id: MT449KXBSSN5G7VK x-amz-replication-status: COMPLETED Last-Modified: Fri, 11 Jun 2021 03:38:33 GMT ETag: "26eb5dd238cfb5b15435e1e2f7e8834e" x-amz-meta-originalfilename: fisbanner.jpg x-amz-version-id: null Content-Type: image/jpeg Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 05 Oct 2023 12:50:38 GMT Via: 1.1 varnish Age: 3476 X-Served-By: cache-bur-kbur8200103-BUR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1696510239.800705,VS0,VE1 Strict-Transport-Security: max-age=31536000
2023-10-05 12:50:38 UTC	1697	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff ed 00 2c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 01 00 48 00 00 00 01 00 01 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 Data Ascii: JFIFHH,Photoshop 3.08BIMHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkp
2023-10-05 12:50:38 UTC	1713	IN	Data Raw: 38 f4 bb a6 a1 63 4f 35 c1 e2 19 8f f8 1f db 6b 71 fe c3 e9 ec 39 2d c7 78 fb 47 f8 7a 21 92 e2 8c 0f cc 7f 87 aa 06 67 b7 f8 7e 6f fe b5 fe 96 ff 00 5b df da c3 49 4a f5 9b 61 7a c2 f2 ff 00 8d ff 00 de bf d6 f6 95 e5 cf 57 54 27 a8 cf 2f f5 37 b7 f4 3c 7f 5f e9 ed 33 cb e4 3a 50 b1 53 ac 0f 2f f8 f1 fe f1 fe c7 da 57 7a 74 ea a7 a7 4a 1d bf b4 b3 bb 90 ac d4 74 ff 00 6f 40 5f 4b 64 eb 04 91 52 90 2d af ed 80 52 d3 11 fd 23 04 7f 56 1e ce 36 6e 5a bc df a8 d0 ae 98 eb 43 34 95 09 f9 79 b7 fb 50 47 a9 1d 14 6e fc c1 6b b2 82 25 6a bd 2a 23 4a 17 fc fc 97 fd b1 fb 01 e8 5e a0 db bb 53 65 e9 9a a0 ff 00 15 cc 01 e4 49 67 44 92 74 60 0e 8f b5 a3 d4 63 a7 1c fe b7 2c ff 00 d1 8f d3 dc 91 69 b2 ed 9c a5 47 90 f8 d3 f1 05 80 2c 29 fc 2b f0 a7 da 49 3e 87 a8 f6 Data Ascii: 8cO5kq9-xGz!g~o[IJazWT'/7<_3:PS/WztJto@_KdR-R#V6nZC4yPGnk%j*#J^SeIgDt`c,iG,)+I>
2023-10-05 12:50:39 UTC	1729	IN	Data Raw: 8f 4b 2a 61 f7 5d 7f ba 29 ff 00 b5 43 9c c2 64 94 7f a9 8a 5b 53 31 1f eb 9f af b5 cb dd 65 28 fe 19 62 7f c8 d5 7a 0e ca 7c 1d da d9 bf 8e 09 e3 fb 48 ee ff 00 07 48 48 f8 3c ff 00 4f f6 1f 8f a7 fb 6f 61 fe 85 2e 7a 71 88 b7 07 9b da ff 00 4b 1e 0f f8 fb 6b cf a4 32 0e 34 e9 f3 05 2f 83 33 88 9c 9d 22 2c a5 03 ff 00 b0 5a 98 89 b5 ff 00 d6 f6 a2 16 d0 ea 7d 19 4f f3 1d 15 ee 71 f8 d6 d2 a7 1a c6 e3 f6 a9 eb db ce 23 16 f0 dc 91 91 62 32 f5 52 58 5b e9 2b 2d 40 b7 fd 4c 1e d9 de 07 87 73 28 ff 00 86 3f f3 24 ff 00 97 ab 72 ec 9e 26 dd 6e df f0 a4 1f b3 b7 fc 9d 33 c7 fa 47 d3 e9 fd 7f db 8f c7 b2 a3 d2 f9 38 f5 2e 3e 3f af d0 70 3e 9f d3 fd f5 fd fb a4 ef d2 e3 11 eb d9 9b ed 3f d4 c7 b7 e6 03 eb ca e4 ec 49 ff 00 61 ed 64 59 b7 98 7f cd 33 ff 00 1b ff Data Ascii: K*a])Cd[S1e(bz\|HHH<Ooa.zqKk24/3",Z}Oq#b2RX[+-@Ls(?$r&n3G8.>?p>?IadY3
2023-10-05 12:50:39 UTC	1745	IN	Data Raw: 18 ad 5c 48 a5 01 f9 b0 34 1c 47 9f 42 38 36 1b a8 65 16 ef 0c a2 46 c8 8c c6 e2 46 19 e0 a5 6a 46 0e 69 e5 d4 0d e1 f0 67 e7 72 1a cc 96 47 e1 67 cb 5c 76 13 0f 4f 51 53 55 91 ae f8 e3 dc 54 98 ea 5a 6a 74 69 6a f2 15 75 75 1b 36 28 e3 89 15 09 69 5d 82 aa ad c9 02 fe c1 17 bc c1 69 70 d4 13 c2 40 c0 a4 a9 ff 00 41 75 28 6c fc b5 75 63 16 60 97 53 64 fe 9b e3 e5 c3 a0 c7 68 fc 4f f9 4b bf 76 08 ed 5d 8d f1 ab e4 06 f3 ea f6 a4 cc 57 af 64 6d 3e 9c ec 5d c5 b0 9a 83 6e cf 5b 4b b8 6b 86 f0 c3 ed ca cc 7f 86 82 5c 6d 44 55 b2 8a 8d 30 35 3c 8b 21 53 1b 80 c3 6e 36 f0 37 86 f2 c6 ad 8e d6 75 0d 9f 91 35 e9 72 6d d7 13 ae b4 8a 46 53 c1 95 18 83 42 41 c8 04 75 cf ae be 2b 7c 9f ed bd ad 51 be ba a3 e3 8f 7c 76 76 c7 a5 ab ae c7 d5 6f 2e bc ea 1e c1 de 9b 52 Data Ascii: \H4GB86eFFjFigrGg\vOQSUTZjtijuu6(i]ip@Au(luc`SdhOKv]Wdm>]n[Kk\mDU05<!Sn67u5rmFSBAu+\|Q\|vvo.R
2023-10-05 12:50:39 UTC	1761	IN	Data Raw: 12 59 8d 7f c1 d0 a5 45 44 91 00 aa 05 85 bf c2 f6 fa 8b 1b 0f c5 fd 84 6e 2e 0b 74 06 ba ba 2f d2 9a 14 01 6d 6b 0f f8 9f f1 fe be ca 99 bc fa 24 91 c9 c9 ea 7e 6f 73 ed be ae d9 f5 5d 8f bd 10 d4 63 e9 a6 5a 4d b5 b7 a2 65 5a dd dd 9f 90 1f b5 a1 a6 0e 0e 98 90 83 24 d3 30 2b 1a 23 48 d7 0b a5 d3 6d fb 45 d7 37 5e ae d7 60 74 b9 1a a7 98 82 56 da 11 c5 8d 3f 11 e0 ab c5 89 0a 32 6a 14 6c 1c bd 75 ce b7 eb b7 59 61 88 2d 34 a7 e0 82 21 4d 4c d4 fd 81 45 0b 31 0a 32 6a 2a e3 7b ef 5d d1 da 7b bb 25 bc b7 75 5a d5 e5 72 2c b0 c5 0c 02 51 8e c4 63 22 79 5e 83 09 86 a7 9a 49 4c 54 b0 09 88 50 49 67 66 69 64 2d 23 bb 1c b6 d8 76 2b 4e 51 b2 4b 1b 25 d3 1a 64 93 4d 72 48 40 0d 23 90 05 5d a9 93 c0 00 14 51 40 03 37 f9 7f 60 b4 e4 eb 14 b1 b2 5d 28 82 a5 8d 35 Data Ascii: YEDn.t/mk$~os]cZMeZ$0+#HmE7^`tV?2jluYa-4!MLE12j*{]{%uZr,Qc"y^ILTPIgfid-#v+NQK%dMrH@#]Q@7`](5
2023-10-05 12:50:39 UTC	1777	IN	Data Raw: 86 3f ec 3f 3e d4 da c5 e2 ca 89 fc 4e a3 f6 90 3a 2d bf 93 c1 8a 47 fe 18 d9 bf 60 27 a8 bd c7 58 2b 37 ec f1 83 74 a1 c5 63 69 00 16 3a 1d d6 6a b9 14 8f c1 b5 52 9f f6 3e d5 f3 a4 c2 5d c1 c0 fc 28 8b f9 d3 57 fc fd d3 fe db db fd 3e d2 ac 78 bc b2 3f da 01 0a 3f e3 a7 a4 55 30 fd 23 9f c7 16 b1 fc 9f a5 fd 84 5c f4 25 97 cf a7 ea 7f af 1f 5f f5 ff 00 e2 2c 7d b3 d1 5c bc 3a 7b 87 e8 3f d8 71 6f f0 e3 9f 7a f3 e8 aa 5f f2 f5 39 7e 87 fe 0a 6d c9 fe 9f 9f 7b e9 2b ff 00 9b a5 37 6d da 38 3a fa 9e fc a6 db 95 c8 b5 88 fd bc 52 8b ff 00 b1 f6 75 cd fd a9 66 be 96 f5 fe 49 d1 3f b7 e3 53 6e 0d eb 72 07 f3 97 a0 c2 98 fd 3f c6 c7 eb f4 fa 71 ec 14 fc 3a 1b 4e 3a 50 53 f0 3f 3f 8f a7 f4 ff 00 7d fd 7d b5 d1 44 bc 7a 75 88 f0 0f f8 f3 7f f6 ff 00 4f 7e e9 03 Data Ascii: ??>N:-G`'X+7tci:jR>](W>x??U0#\%_,}\:{?qoz_9~m{+7m8:RufI?Snr?q:N:PS??}}DzuO~
2023-10-05 12:50:39 UTC	1793	IN	Data Raw: 7c cb 9f f8 cb 7f 87 a4 8c 0e 2c 39 bf fc 41 36 b7 fb 6f 61 d0 73 d1 f4 ab 9e 97 b4 a3 f8 d6 c7 ce 63 00 d5 59 b6 aa a2 dc 14 03 f2 d4 33 93 16 52 24 1f e0 35 48 7f 00 b0 27 f1 ec e5 07 d6 d9 49 1f 16 85 84 c9 fe 94 d1 1f fc 84 f4 15 9a bb 6e e9 0c df 82 e5 4d bc 9f 29 17 ba 33 f9 e1 7f 97 48 78 1a c4 0f af 02 df ef 85 fd 85 98 e7 a1 34 a2 9d 3b d1 55 4b 49 57 49 5b 11 b4 b4 75 10 55 47 6b 83 ae 9e 65 94 0b 80 7f 56 8b 1f f5 fd da 39 4c 4c 18 71 52 18 7d a0 83 d2 1b 88 16 e1 1a 36 e0 ea ca 7e c6 04 7f 97 a7 fd fb 49 15 36 e9 aa ab a7 b8 a4 cd 53 51 e7 29 8a ad 91 92 be 20 d3 11 6e 3f ce 23 92 01 36 b8 fe be d4 73 04 4b 1d cb 32 7c 32 01 2a fd 92 00 4f ec 35 1d 14 f2 a4 ed 35 8a a3 fc 50 b3 c0 de b5 8c d0 7f 2a 74 9b 84 ff 00 be 1f 9f f5 fd 92 1c f4 73 27 Data Ascii: \|,9A6oascY3R$5H'InM)3Hx4;UKIWI[uUGkeV9LLqR}6~I6SQ) n?#6sK2\|2O55Pts'
2023-10-05 12:50:39 UTC	1809	IN	Data Raw: d5 7f f8 f7 42 4e 5b ce d9 6b ff 00 34 63 ff 00 00 1d 41 a6 b1 ff 00 79 ff 00 89 fa 71 fe 3e c8 cf 0e 9f 9f 87 4f 70 f2 05 87 e4 7f 5f a5 87 fb d7 b6 c3 67 a2 e9 ba 9e b7 b5 ef f8 1f 9f a7 02 f7 f7 e4 3d 23 61 5e 96 7b bc 7d cf 5a ec ca 91 c9 a1 cc e4 a9 49 03 e9 e4 5a cb 0f fa c3 fe f1 ec f3 74 fd 5d aa d9 bf 86 59 57 f6 d4 ff 00 93 a0 e7 2f fe 86 f5 7a 9f ef c8 63 6f d9 a7 fc fd 06 34 bf d7 fa 8f f7 b2 3e 84 fb 06 b9 ff 00 0f 43 79 ba 7b 80 ff 00 b6 1f 9f a7 fb ee 0f b6 f8 f4 59 28 e9 c5 0f d3 f3 fe 1c 8f af fc 56 fe f5 d2 26 e3 d2 c3 7b 8f bd d8 fb 03 25 f5 92 8d b2 78 79 9c f2 6d 1b a7 8c 71 fe 34 6d ec eb 78 fd 6b 0b 49 3c d7 c5 88 fd 80 e3 fc 1d 07 b9 67 fc 5b 73 bf 87 c9 c4 53 01 f6 83 5f f8 f0 e8 3c a5 6e 79 fe 80 70 78 e4 8f f1 f6 10 93 8f 42 f9 Data Ascii: BN[k4cAyq>Op_g=#a^{}ZIZt]YW/zco4>Cy{Y(V&{%xymq4mxkI<g[sS_<nypxB
2023-10-05 12:50:39 UTC	1825	IN	Data Raw: e1 b5 c7 d3 e8 2d 7f f7 8b 7b a7 45 92 f4 e5 17 d3 fd eb eb fe db de c7 48 64 e8 4b da 86 54 da 7d 87 25 1a 99 b2 03 03 38 8a 00 42 31 87 ec b2 5e 46 0f 21 0b 6f 57 f5 fe cf fa d7 17 ec 95 16 97 a6 3c bf 82 68 3c e9 47 af 1f cb a0 6e f8 15 b7 0b 01 21 a4 7f 50 b5 3c 45 75 c7 4e 19 ff 00 8b f4 e8 bb d1 db 4a 58 dd 6c b6 3c de d6 fa f3 ee 39 3f e4 ea 5f b9 ae 6b d2 86 9f ea 3f d6 3c 7f 5f af 1f 4f 6d c9 d1 44 dc 3a 7a 87 eb fd 4f 1f e1 fd 79 f6 d7 45 72 74 eb 0f e9 ff 00 62 6d fe f3 ee ad fe 6e 91 49 d2 e7 61 69 fe f6 e1 2e 47 f9 da 9f f9 2b ec 6a 38 e3 d9 ef 2e 7f b9 d0 ff 00 a6 6f f8 e3 74 18 e6 af f9 27 4f f6 2f fc 7d 7a 0e f7 3d ce ee dc da ae 09 dc 19 ab 8e 78 ff 00 72 15 17 bd 89 ff 00 1f 61 ed da bf 53 35 7f df b2 7f c7 cf 43 1d 97 1b 7d b7 fc d0 8b Data Ascii: -{EHdKT}%8B1^F!oW<h<Gn!P<EuNJXl<9?_k?<_OmD:zOyErtbmnIai.G+j8.ot'O/}z=xraS5C}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.6	49727	18.154.206.79	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:39 UTC	1828	OUT	GET /vendor/appdynamics/adrum-xd.2aed9d091ef08efa95822e864b4554d2.html HTTP/1.1 Host: cdn.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://survey3.medallia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	18.154.206.79	443	192.168.2.6	49727	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:39 UTC	1829	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1905 Connection: close Date: Sun, 01 Oct 2023 12:30:46 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 24 Aug 2017 19:58:45 GMT ETag: "09a01a64397e4408e9500d332812c96f" Cache-Control: max-age=604800 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 543187fc7ea66083565b6fbfd76d9a1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P5 X-Amz-Cf-Id: 4SXhIBYoGt98Xehc0v2I1yc1pnh7VYp662wWDp_egc-VcnIWL8idoA== Age: 346794
2023-10-05 12:50:39 UTC	1829	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 2f 2f 0a 2f 2a 20 56 65 72 73 69 6f 6e 20 32 61 65 64 39 64 30 39 31 65 66 30 38 65 66 61 39 35 38 32 32 65 38 36 34 62 34 35 35 34 64 32 20 76 3a 34 2e 33 2e 32 2e 31 2c 20 63 3a 44 45 56 42 55 49 4c 44 2c 20 62 3a 39 33 36 30 20 6e 3a 31 34 37 31 2d 34 2e 33 2e 32 2e 6e 65 78 74 2d 62 75 69 6c 64 20 2a 2f 76 61 72 20 66 2c 68 3d 66 7c 7c 28 66 3d 7b 7d 29 2c 6b 3d 68 2e 63 7c 7c 28 68 2e 63 3d 7b 7d 29 3b 6b 2e 62 7c 7c 28 6b 2e 62 3d 7b 7d 29 3b 76 61 72 20 6c 3d 66 7c 7c 28 66 3d 7b 7d 29 2c 6d 3d 6c 2e 63 7c 7c 28 6c 2e 63 3d 7b 7d 29 3b 6d 2e 62 7c 7c 28 6d 2e 62 3d 7b 7d 29 3b 0a 28 66 75 6e 63 74 Data Ascii: <!DOCTYPE html><html><head> <script> ///* Version 2aed9d091ef08efa95822e864b4554d2 v:4.3.2.1, c:DEVBUILD, b:9360 n:1471-4.3.2.next-build */var f,h=f\|\|(f={}),k=h.c\|\|(h.c={});k.b\|\|(k.b={});var l=f\|\|(f={}),m=l.c\|\|(l.c={});m.b\|\|(m.b={});(funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.6	49728	146.75.93.230	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:39 UTC	1831	OUT	GET /a938a40fb1e58749cdb6a74ad5e2a74452ead2f7 HTTP/1.1 Host: sea1.cdn.survey.medallia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	146.75.93.230	443	192.168.2.6	49728	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:40 UTC	1832	IN	HTTP/1.1 200 OK Connection: close Content-Length: 17287 x-amz-id-2: ozXGddjdt1CYJS7XGrhnZd/PbW+TbISN/0M9KanKc1NtmnhEwla8bK+5KA4Hrs4cSMZ5/XGZbtI= x-amz-request-id: S0K61C798QB9B22N Last-Modified: Thu, 21 Jan 2021 22:55:33 GMT ETag: "5e8b4e85202428bd6288d3d8ba63c9de" x-amz-meta-originalfilename: FIS-logo-WEB.png Content-Type: image/png Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 05 Oct 2023 12:50:40 GMT Via: 1.1 varnish Age: 1021 X-Served-By: cache-bur-kbur8200109-BUR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1696510240.034463,VS0,VE1 Strict-Transport-Security: max-age=31557600
2023-10-05 12:50:40 UTC	1832	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 18 00 00 00 f3 08 06 00 00 00 c4 98 6f 78 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 40 00 49 44 41 54 78 01 ed 9d 09 80 5d 45 99 ef 4f d5 39 e7 de ee 4e 3a 2b 21 81 a0 80 c0 88 06 a3 12 20 49 ef 61 15 14 95 11 a2 cf 79 f2 86 79 ce e0 32 66 c8 c6 a2 8e de 51 47 84 24 1d c5 51 c4 99 81 e7 8c a2 46 67 71 74 82 42 24 9d 5e 13 26 91 45 c3 8c 20 3b 49 08 84 6c 9d 4e f7 bd f7 9c aa f7 af db e9 d0 84 f4 7a 4f dd f5 5f d0 e9 db f7 9c f3 d5 57 bf b3 d4 77 be fa ea 2b c7 61 21 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 Data Ascii: PNGIHDRoxsRGB@IDATx]EO9N:+! Iayy2fQG$QFgqtB$^&E ;IlNzO_Ww+a!
2023-10-05 12:50:40 UTC	1834	IN	Data Raw: 2c 7a 6f 28 c2 2f c0 89 12 47 87 1a 0c d6 67 9c 9f e3 30 b4 76 ba ae b7 f2 86 05 bf 7e 6c 9c 32 46 7d 98 f1 de f5 f9 ee 8f 30 14 72 69 aa 0f 4e a3 2c 4d 02 9c 43 c7 f3 11 68 92 54 6b 0f dd bf 69 05 62 9a a2 b9 b7 46 dd 22 ee 48 02 24 50 68 04 fa 7d 9c 85 a6 95 2d 7d f0 8a 79 ee 49 75 a7 46 6a 5c 18 5d 61 a8 08 2f 38 a1 e2 7d 1b 10 98 68 b7 64 3c 17 7d ee 22 74 aa 91 18 17 46 5b f3 f2 8a e1 89 aa 9e a4 ba 14 9d ff 34 9b 2d b8 6b eb 3c 1f 11 b3 d7 09 47 9e 8b a1 84 64 b6 c6 45 46 7f b8 0f d0 86 34 fe bd e4 f9 d9 2f 5d 65 53 7f 23 fb 6b 9b 1a 1a 32 c6 85 23 62 11 19 17 46 2c 3c 20 ce 49 41 98 be fd d6 8d 4d a7 99 2f 6c 15 63 e0 f5 ba ee bd 7e 0c c6 45 6f f6 c6 85 d1 13 e3 8b 4e 90 52 4e 2c ee 2e 9d 70 71 e3 57 6c e9 4e b9 24 40 02 c5 43 a0 ac 0c 8c bf 6d ab Data Ascii: ,zo(/Gg0v~l2F}0riN,MChTkibF"H$Ph}-}yIuFj\]a/8}hd<}"tF[4-k<GdEF4/]eS#k2#bF,< IAM/lc~EoNRN,.pqWlN$@Cm
2023-10-05 12:50:40 UTC	1835	IN	Data Raw: fa 04 4a de c0 98 a4 a4 87 a0 f9 48 86 2a c6 72 39 84 78 fd ac d8 97 bd 81 b1 4e 5f 63 96 74 ad 40 96 ca 9c 1a 18 c6 a0 c1 ca a5 55 63 69 f3 50 fb 86 81 0b f7 3c 16 f9 ca 61 31 b1 1e 48 46 e6 fa ae 9f 7d 1b 5a 5a 10 b7 eb 4c 41 ee 8b 9c 79 60 0c 2a 9c 70 a4 0b 71 4e 88 02 1b d2 c9 9f 88 c0 d1 9c 16 63 cc 60 41 b4 09 61 20 b3 36 f2 72 aa 38 2b 23 01 12 88 84 40 4e 1f fa 91 68 3c 46 21 7d 6e 98 e3 c7 6a bf 82 a6 7f d3 15 95 59 f3 dd b7 0d ab 7b 63 c4 05 2b 50 8d b1 e5 d9 ef 7e 64 11 d6 ac 05 99 e5 43 b3 16 92 4f 01 87 ba 31 4a 65 16 32 cb 71 31 f3 56 1c 91 bd 81 94 63 b5 59 1d 09 90 00 09 18 02 59 77 80 85 8e b1 22 44 28 81 09 8a c8 71 31 55 8a be de ac df 78 a7 ce db 86 29 1d 98 da e9 e6 6c 12 cc 51 52 30 92 22 b1 6a cc 94 94 a3 42 8b f0 c3 34 f7 80 59 e5 Data Ascii: JHr9xN_ct@UciP<a1HF}ZZLAy`pqNc`Aa 6r8+#@Nh<F!}njY{c+P~dCO1Je2q1VcYYw"D(q1Ux)lQR0"jB4Y
2023-10-05 12:50:40 UTC	1836	IN	Data Raw: 22 c9 5b 70 bc 4b 68 e5 65 8f f5 48 99 6e 81 91 94 44 96 8a 48 db 60 8c 16 2c 45 76 c8 3d 98 da 64 82 32 8f 57 7f 14 df 75 a7 e5 7a 74 ce c6 50 8a d4 0b 60 8c 8b cc 9b bf d0 f7 ad ac 6f df 12 85 ae c7 93 61 bc 0a 81 70 be 84 80 4f 93 78 2b 52 43 0f f6 4b 0c 9e 8b e7 d2 4a 7d 69 59 4d 57 64 b1 17 c7 b6 e3 50 52 7c 21 95 54 eb 91 ab e5 d8 4d 59 fd 6d 8c 0b 33 fc 12 a4 c2 af de 58 db f6 2f 59 09 e3 c1 24 40 02 45 4f 20 da 27 4c e1 e3 d0 3d 0d 17 3e 87 b7 dc bd 91 c6 63 98 d8 8e d0 79 79 79 43 eb 8b b6 11 a0 e3 d9 81 0e 68 03 1c 31 29 33 1c 10 45 7d e8 18 cc 7a 27 87 94 2f 1e 58 f6 9e ae bd 51 c8 1c 4a 86 71 d3 4b 19 7c 0f f1 24 db f0 aa 6b 3a d4 ac 87 ac 4c dc 88 31 2e 90 f9 e2 57 87 6b 2e fa b7 a1 ea 8e ea fb 9b 6b 5a 3b 91 b8 2a 01 43 09 46 86 8e ca 1b 13 Data Ascii: "[pKheHnDH`,Ev=d2WuztP`oapOx+RCKJ}iYMWdPR\|!TMYm3X/Y$@EO 'L=>cyyyCh1)3E}z'/XQJqK\|$k:L1.Wk.kZ;*CF
2023-10-05 12:50:40 UTC	1838	IN	Data Raw: 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 af 11 10 af Data Ascii: @$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@$@
2023-10-05 12:50:40 UTC	1839	IN	Data Raw: b7 4f 0e 1b cc 39 d4 c1 c7 fb 3e e3 05 14 0e a6 52 2e 41 6c 93 7f bc 5d ca ed 3b 5c 0a 62 75 57 fd 27 62 9e 6a 47 10 de 9f e0 da 38 62 5c 94 1b 09 b6 37 1f 04 4c 5f 27 85 fb c7 6b bb ea cf cd 47 fd a6 ce 92 34 30 8c 2b 72 72 f7 09 bf f6 3c f7 fb 98 37 3e d7 bc 31 04 70 47 b2 90 40 2e 08 a4 71 bd a1 33 b9 74 cd a6 86 37 e5 a2 be f1 d4 21 ba 93 35 70 a3 be d5 0c 13 46 55 32 2e 7f 47 9c 7f 20 19 9f 13 95 cc 62 95 63 66 86 ac dd dc f8 23 df f3 ee 84 ed 35 2b 0d 8f 29 5f 6c 8a f5 6c 16 a7 de e6 7a 33 2f 3b a1 96 1f c9 57 0b 4a ca c0 58 db 56 f7 96 b5 9b 9b ee c1 bc d2 f5 d2 93 75 e6 81 67 7e 58 48 20 97 04 cc ec 23 04 3e 4e d5 9e 9e 9f cb 7a c7 52 17 a6 98 d6 7b 98 da 16 65 31 0f b4 58 dc 45 0a 07 0f 39 1c ca b7 ac 69 6f 5a e0 c4 dd 07 30 64 b4 d8 bc d8 70 56 Data Ascii: O9>R.Al];\buW'bjG8b\7L_'kG40+rr<7>1pG@.q3t7!5pFU2.G bcf#5+)_llz3/;WJXVug~XH #>NzR{e1XE9ioZ0dpV
2023-10-05 12:50:40 UTC	1840	IN	Data Raw: 83 1f d1 83 fb 1f 33 07 f2 97 9a b5 d0 98 0d a7 8f 49 25 09 8e 26 47 7e cc ca c2 5b c3 55 3e 8e 6d 26 3b 27 74 4e 22 bb db 1e fc 7e 0a 29 78 1f 08 82 f0 97 37 d5 75 ec 1c 87 38 1e 52 44 04 52 61 c5 ff 8e 55 c8 b3 f3 e1 bd 30 c6 84 c9 67 20 f1 dc 49 21 b9 20 8c f2 1e 15 a8 03 b8 1e 0f 64 42 f9 8a 88 23 55 8d 88 80 79 99 45 26 bf 40 eb 97 d0 2f 6d 11 4a af 5f ba 60 d3 66 3c 50 0b 2a 43 6f 41 19 18 d5 fb a7 7f c1 af 74 3f 50 28 c6 85 f1 48 18 17 b8 8b bc 06 66 06 0b 92 e9 ec 0e 52 fa f7 38 89 8f e2 26 ff 9d 94 fa 59 e1 b9 3b 84 0c f6 fa 61 2c d5 93 ee 4b f5 ee 83 65 74 52 44 17 51 a9 8b d9 85 55 78 26 56 c7 fc 2a d7 3d 58 04 6d 35 2b 78 1d 72 45 70 a8 3b e8 41 10 67 5e 52 ef 16 01 a6 92 53 f1 b6 9f d5 56 a3 51 4b 72 9d ef a2 ff d9 83 44 49 29 75 10 cf 9d 4e Data Ascii: 3I%&G~[U>m&;'tN"~)x7u8RDRaU0g I! dB#UyE&@/mJ_`f<PCoAt?P(HfR8&Y;a,KetRDQUx&V=Xm5+xrEp;Ag^RSVQKrDI)uN
2023-10-05 12:50:40 UTC	1842	IN	Data Raw: d0 7c 33 63 04 59 41 7f 13 93 c9 cf 0e 7c c7 df 24 40 02 24 30 56 02 f0 5d c4 c6 7a cc 68 f6 37 c3 2e 42 3b 2f 2e 16 3f b1 34 3f 65 34 5a 70 1f 12 c8 0d 81 9c 18 18 ab 7e 75 e9 04 2c 36 72 75 68 31 a7 bf 79 33 40 ea ef be 50 a8 25 4b 16 30 9f 7f 6e 2e 1f d6 42 02 a5 49 00 46 c0 64 1b 33 48 cc 10 2e 4a 4f 69 52 63 ab 48 e0 f5 04 72 62 60 c8 ea f4 02 d7 95 7f 84 29 a3 af af 3d c2 bf fc 98 8b 29 a9 ea 3b 37 2e 6c eb 88 50 2c 45 91 00 09 94 21 01 d8 01 7e 19 36 9b 4d 26 81 48 09 e4 c4 c0 70 9c f0 83 66 f8 c2 56 71 11 38 9a ea 0b 9e f7 95 fe aa ad 3a 28 97 04 48 a0 ac 08 ec 45 1c 86 9d 06 0b 6d 65 f8 c5 8e b2 94 4a 02 e3 27 60 af d7 3f a2 53 e2 e7 f3 aa 30 af e3 62 9b c3 23 26 71 0d 62 3c d6 2c 69 68 7b 65 fc 28 78 24 09 90 00 09 f4 13 80 af 35 b0 c1 02 d3 e7 Data Ascii: \|3cYA\|$@$0V]zh7.B;/.?4?e4Zp~u,6ruh1y3@P%K0n.BIFd3H.JOiRcHrb`)=);7.lP,E!~6M&HpfVq8:(HEmeJ'`?S0b#&qb<,ih{e(x$5
2023-10-05 12:50:40 UTC	1843	IN	Data Raw: 2f 5e 8f f6 20 3f d4 0b 9e 52 2f ee db d7 bb 27 71 e5 b6 c3 05 ab 78 04 8a 59 33 30 d0 31 47 3f 7d 04 0d 36 6b 90 40 72 9f ee 4d 5a c9 e0 b9 a6 b3 fe 22 29 e5 72 28 7f b1 1f f7 7c f3 c6 82 21 19 96 02 21 60 3c d5 78 93 7c af d3 a7 be 10 4c 3b bc b5 b9 b3 61 ed b2 85 ad 3f 84 13 d9 ca f5 56 20 cd a6 1a 79 26 20 43 f5 4d 18 17 7f 0a e3 76 8a 8d dc 3e 43 35 cf 18 1a f0 62 64 36 1b 63 03 53 66 cf c0 f5 7f 46 e6 39 48 b3 62 28 6c 05 f5 7d ff 69 c2 bf f8 5f 05 da 41 d0 b0 0a a4 db 33 69 46 f5 f3 ab 3b 1b 7f 8f 0e ed bf 3c ed 74 f6 c5 63 8f de 7c de 86 03 05 a5 7c 96 ca d8 33 30 a4 9d 35 48 b2 6c ef 90 87 27 7e 3e af aa 7a c6 84 bf 95 42 fe 25 02 ba 3c 73 53 a7 7a 73 f3 b6 32 a4 52 dc 30 34 01 dc ac 9e 2b cf d3 ae f3 83 e6 2d 8d 57 05 0f 89 cf dc 78 41 0b e3 72 Data Ascii: /^ ?R/'qxY301G?}6k@rMZ")r(\|!!`<x\|L;a?V y& CMv>C5bd6cSfF9Hb(l}i_A3iF;<tc\|\|305Hl'~>zB%<sSzs2R04+-WxAr
2023-10-05 12:50:40 UTC	1844	IN	Data Raw: c9 bc 95 b2 bd fa 7f b2 f8 27 21 16 97 59 87 15 ed 58 4a 88 40 7f 76 45 fd 9f 66 dd 88 12 6a 16 9b 52 64 04 96 2f 68 5d 1f 06 e9 a6 20 a5 7f 8a 75 72 4c de 82 22 6b 01 d5 2d 66 02 66 21 48 4c 9f 3e 53 8a f0 ee e6 ce 85 95 f9 6a 4b 59 77 af 4a c7 ee 4d f6 a9 17 79 f3 e7 eb f2 8b b6 5e 0c 8b 20 ad 6e d8 a7 43 75 67 b4 92 29 8d 04 c6 4e 60 45 6d e7 73 58 bb 64 31 86 ec fe 0c d3 e1 e1 cd 70 cd d0 dd d8 05 f1 08 12 18 07 01 93 90 cb af 70 2f 0c b5 ff c5 71 1c 1e c9 21 65 6d 60 ac ac bd ff 65 b8 d3 13 bc e9 23 b9 96 f2 2e c4 24 3c 52 8e fe d6 8a fa f6 6d 79 57 86 0a 90 80 21 80 21 93 95 b5 9b ee 71 52 61 4d 90 0e 9b b1 5c 73 b7 19 36 e1 33 87 97 47 2e 08 e0 85 cb 2c 9f b0 bc b9 a3 e1 d2 5c d4 77 6c 1d 65 6d 60 18 18 2b 6a 5b ef c6 62 32 ff 10 67 a2 9c 63 af 8d Data Ascii: '!YXJ@vEfjRd/h] urL"k-ff!HL>SjKYwJMy^ nCug)N`EmsXd1pp/q!em`e#.$<RmyW!!qRaM\s63G.,\wlem`+j[b2gc
2023-10-05 12:50:40 UTC	1846	IN	Data Raw: 20 01 12 20 81 12 26 10 3a c1 17 83 a4 da 9b 59 93 c6 46 3b fb 53 89 9e 6f 43 f4 80 4c 1a 18 03 24 f8 9b 04 48 80 04 48 80 04 0a 84 c0 8d b5 9d 4f 21 c9 e7 f7 bc 98 9d 71 12 33 4c 82 ac 5b 6f 4f 6c 9f 13 b3 d5 64 1a 18 b6 c8 52 2e 09 90 00 09 90 00 09 64 41 00 8b 39 de 8d 95 76 fb cc dc 86 a8 8b 42 3a 0c 44 32 9e 34 71 ff cc 93 a2 96 3d 20 8f 06 c6 00 09 fe 26 01 12 20 01 12 20 81 02 22 d0 f3 40 d3 e3 58 55 77 ab eb 45 df 55 6b b8 47 a4 27 26 7b 52 cf b2 d5 e4 e8 b5 b6 a5 29 e5 92 00 09 90 00 09 90 40 19 11 48 24 12 58 3c 44 ad b7 15 87 01 b9 22 1d 86 a7 da 42 4a 03 c3 16 59 ca 25 01 12 20 01 12 20 81 2c 09 28 2d b6 64 d2 7b 67 29 e7 78 87 67 86 5e 84 a0 07 e3 78 70 f8 1d 09 90 00 09 90 00 09 94 34 81 c0 79 06 89 b7 0e 09 19 7d 20 86 91 89 a4 9e d3 6d f1 Data Ascii: &:YF;SoCL$HHO!q3L[oOldR.dA9vB:D24q= & "@XUwEUkG'&{R)@H$X<D"BJY% ,(-d{g)xg^xp4y} m
2023-10-05 12:50:40 UTC	1847	IN	Data Raw: 2a 66 a8 ec 73 5c 7d 4b 22 e1 e4 d4 12 a6 81 31 e2 e9 e1 0e 24 40 02 24 f0 1a 81 35 ed 4d 1f f6 7d 77 99 19 4b 37 13 fe 58 48 a0 90 09 b8 1e 0c 0c a5 ff 66 c5 82 b6 c7 73 ad 27 0d 8c 5c 13 67 7d 24 40 02 45 4b a0 b9 f3 b2 69 8e d4 5f 31 73 03 68 5c 14 ed 69 2c 1b c5 63 15 2e b2 76 86 eb 0f 2d 94 df ca 47 a3 69 60 e4 83 3a eb 24 01 12 28 4a 02 5a f7 7d 38 56 21 cf b4 b9 8c 76 51 82 a1 d2 05 47 c0 c3 82 66 e9 94 7a d6 f1 9d 4f 24 44 0b 66 c9 e6 be d0 c0 c8 3d 73 d6 48 02 24 50 84 04 d6 ad bb c6 85 e7 e2 23 66 ca 21 0b 09 14 32 01 13 77 81 eb b4 07 59 2f fe 2c 17 29 c1 87 62 41 03 63 28 32 fc 9e 04 48 80 04 06 11 78 f1 94 17 67 21 6d d6 5c 95 49 90 34 68 03 3f 92 40 01 11 10 e8 d5 85 10 2a 08 f4 67 96 2f d8 b4 31 9f aa d1 c0 c8 27 7d d6 4d 02 24 50 34 04 94 Data Ascii: fs\}K"1$@$5M}wK7XHfs'\g}$@EKi_1sh\i,c.v-Gi`:$(JZ}8V!vQGfzO$Df=sH$P#f!2wY/,)bAc(2Hxg!m\I4h?@g/1'}M$P4
2023-10-05 12:50:40 UTC	1848	IN	Data Raw: 39 db 58 6a 66 da 69 ff 4d 69 d2 73 22 1b 99 6b 02 c5 1c 07 1e 8b 97 84 56 df 4f 05 e1 5a 44 c9 ee 1c b9 29 dc 83 04 48 20 1b 02 5f 6d ad 9f 51 19 77 3f 0d e3 e2 e3 e8 34 67 9b 38 83 d7 ee 4f 3c 0c f1 b4 c8 7c 17 6a 07 0b 29 3d 87 1b f7 ae ee fd 7d df 4a 5c b1 e5 60 36 f5 16 fb b1 6b 3a 1b 6a 90 53 64 b9 23 c5 65 f0 b8 4e 30 ed c9 78 34 c6 37 e2 54 ec 38 a8 ff f1 08 18 63 22 f3 63 fe 71 1c a4 70 30 2f d9 01 be 7b 11 bb 3f 8e 5e b0 55 29 d1 3a 29 3e e9 d1 eb cf fb 79 41 07 6e 1e af 79 43 7d 87 a6 e6 be 24 d6 cf 9f 54 3d bd b2 41 28 7d a1 d2 7a ae 14 62 2a c6 98 24 ee c7 6e 3c c0 1e 87 52 ed da 0b 7f bd f4 bc b6 5d b9 d7 8e 35 92 40 79 13 30 86 46 55 85 7b 21 8c 8b 06 74 94 e7 e0 81 58 8d 7b 52 e3 f3 01 64 ce f9 2d 86 52 36 e9 a0 af a5 58 dd b6 b6 ce ee ea Data Ascii: 9XjfiMis"kVOZD)H _mQw?4g8O<\|j)=}J\`6k:jSd#eN0x47T8c"cqp0/{?^U):)>yAnyC}$T=A(}zb*$n<R]5@y0FU{!tX{Rd-R6X

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.6	49729	44.239.32.243	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:40 UTC	1849	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-AAF-GTM/adrum HTTP/1.1 Host: col.eum-appdynamics.com Connection: keep-alive Content-Length: 2635 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://survey3.medallia.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://survey3.medallia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-10-05 12:50:40 UTC	1850	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 33 2e 33 2e 30 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 30 22 2c 22 65 74 22 3a 30 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 3f 32 22 2c 22 74 73 22 3a 31 36 39 36 35 31 30 32 33 33 33 39 34 2c 22 75 64 22 3a 7b 22 56 65 72 73 69 6f 6e 22 3a 22 56 37 22 2c 22 56 37 56 65 72 73 69 6f 6e 22 3a 22 36 2e 32 31 2e 31 33 22 2c 22 56 37 4d 69 6c 65 73 74 6f 6e 65 22 3a 22 6c 65 67 61 63 79 22 2c 22 53 75 72 76 65 79 49 64 22 3a 22 65 68 6e 6d 37 64 37 37 36 34 7a 72 72 66 72 73 66 79 62 39 22 2c 22 53 70 65 63 49 64 22 3a 22 31 35 36 31 2d 66 69 73 2d 33 31 31 39 22 2c 22 43 6c 69 65 6e 74 49 64 22 3a 22 31 35 36 31 2d 35 33 22 2c 22 43 6f 6d 70 61 6e 79 4e 61 6d 65 22 3a 22 69 73 Data Ascii: {"vr":"4.3.3.0","dt":"R","rg":"0","es":[{"eg":"0","et":0,"eu":"0://1/?2","ts":1696510233394,"ud":{"Version":"V7","V7Version":"6.21.13","V7Milestone":"legacy","SurveyId":"ehnm7d7764zrrfrsfyb9","SpecId":"1561-fis-3119","ClientId":"1561-53","CompanyName":"is

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	44.239.32.243	443	192.168.2.6	49729	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:41 UTC	1852	IN	HTTP/1.1 200 OK Date: Thu, 05 Oct 2023 12:50:40 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:29\|g:596b3112-ee80-40d0-8e73-7d5a2c31cf31; Path=/; Expires=Thu, 05-Oct-2023 12:51:10 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:29\|g:596b3112-ee80-40d0-8e73-7d5a2c31cf31\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 05-Oct-2023 12:51:10 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 05-Oct-2023 12:51:10 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:29\|i:559461; Path=/; Expires=Thu, 05-Oct-2023 12:51:10 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:29\|i:559461\|e:3; Path=/; Expires=Thu, 05-Oct-2023 12:51:10 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2023-10-05 12:50:41 UTC	1853	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.6	49708	147.75.243.92	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:34 UTC	4	OUT	GET /?ehnm7d7764zrrfrsfyb9&reject=begin HTTP/1.1 Host: survey3.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.6	49730	52.39.244.39	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:41 UTC	1853	OUT	GET /eumcollector/beacons/browser/v1/AD-AAB-AAF-GTM/adrum HTTP/1.1 Host: col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	52.39.244.39	443	192.168.2.6	49730	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:41 UTC	1854	IN	HTTP/1.1 200 OK Date: Thu, 05 Oct 2023 12:50:41 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:12872c5b-f82d-4d3e-882d-10af5d61b313; Path=/; Expires=Thu, 05-Oct-2023 12:51:11 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:0\|g:12872c5b-f82d-4d3e-882d-10af5d61b313\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 05-Oct-2023 12:51:11 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 05-Oct-2023 12:51:11 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:559461; Path=/; Expires=Thu, 05-Oct-2023 12:51:11 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:4; Path=/; Expires=Thu, 05-Oct-2023 12:51:11 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2023-10-05 12:50:41 UTC	1855	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.6	49709	147.75.243.92	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:46 UTC	1855	OUT	GET /?ehnm7d7764zrrfrsfyb9&reject=cancel HTTP/1.1 Host: survey3.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_tvswfz3.nfebmmjb.dpn=14b5a3d946c40ade39f765eb549522cee1cb1b6a69b13dc600a8f7ff2dc131b31f1bf447

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	147.75.243.92	443	192.168.2.6	49709	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:47 UTC	1856	IN	HTTP/1.1 200 OK Pragma: no-cache token Expires: Mon, 03 Jul 2001 09:00:00 GMT Cache-Control: private, no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Content-Type: text/html;charset=utf-8 Vary: Accept-Language Vary: Accept-Encoding, User-Agent Transfer-Encoding: chunked Server: Jetty(9.3.25.v20180904)
2023-10-05 12:50:47 UTC	1856	IN	Data Raw: 38 30 30 30 0d 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 77 69 6e 64 6f 77 2e 6c 6f 61 64 69 6e 67 53 74 61 72 74 54 69 6d 65 20 3d 20 44 61 74 65 2e 6e 6f 77 28 29 3b 0a 09 09 77 69 6e 64 6f 77 5b 27 61 64 72 75 6d 2d 73 74 61 72 74 2d 74 69 6d 65 27 5d 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 0a 09 09 77 69 6e 64 6f 77 2e 41 50 50 5f 44 59 4e 41 4d 49 43 53 20 3d 20 7b 0a 09 09 09 75 73 65 72 44 61 74 61 3a 20 7b 7d 2c 0a 09 09 09 75 73 65 72 44 61 74 61 4c 6f 6e 67 3a 20 7b 7d 2c 0a 09 09 09 75 73 65 72 44 61 74 61 44 6f 75 62 6c 65 3a Data Ascii: 8000<!doctype html><html lang="en"><head><script type="text/javascript">window.loadingStartTime = Date.now();window['adrum-start-time'] = new Date().getTime();window.APP_DYNAMICS = {userData: {},userDataLong: {},userDataDouble:
2023-10-05 12:50:47 UTC	1863	IN	Data Raw: 43 77 63 41 42 77 41 4f 51 41 39 41 41 41 48 2f 34 41 44 67 6f 4f 45 68 59 61 44 42 56 59 64 48 56 55 41 67 6f 73 6a 52 42 47 48 6c 4a 57 57 68 69 39 57 48 35 65 45 56 51 6d 63 6f 4a 5a 45 56 59 5a 53 56 36 63 6f 70 31 63 64 6d 34 51 6a 42 51 47 68 73 6b 53 74 41 31 52 57 45 51 4b 67 55 6f 36 43 48 30 53 79 6c 79 69 31 55 70 50 42 41 77 45 46 48 59 4e 56 4b 4d 65 47 56 6f 4e 53 7a 35 6a 52 67 69 50 55 41 79 39 54 6a 79 2f 5a 6c 78 38 46 78 37 53 43 31 74 2b 55 43 5a 73 41 34 71 47 66 74 75 65 63 42 77 76 77 39 4a 55 42 38 36 44 73 39 63 66 72 6c 51 57 4f 2b 50 61 42 57 67 41 41 67 4c 64 44 6d 78 62 45 45 67 67 71 77 41 63 41 55 78 61 36 73 6e 57 41 6f 61 77 49 42 63 30 56 63 6d 63 78 6c 43 59 41 78 67 53 52 36 6e 6a 73 48 67 41 4f 67 36 36 51 70 50 62 43 Data Ascii: CwcABwAOQA9AAAH/4ADgoOEhYaDBVYdHVUAgosjRBGHlJWWhi9WH5eEVQmcoJZEVYZSV6cop1cdm4QjBQGhskStA1RWEQKgUo6CH0Sylyi1UpPBAwEFHYNVKMeGVoNSz5jRgiPUAy9Tjy/Zlx8Fx7SC1t+UCZsA4qGftuecBwvw9JUB86Ds9cfrlQWO+PaBWgAAgLdDmxbEEggqwAcAUxa6snWAoawIBc0VcmcxlCYAxgSR6njsHgAOg66QpPbC
2023-10-05 12:50:47 UTC	1870	IN	Data Raw: 62 71 47 6d 64 67 65 68 77 5a 74 58 41 4d 79 2b 67 2b 72 32 33 64 73 54 73 46 39 51 68 6d 6b 4b 37 59 73 54 5a 56 71 65 69 2f 4f 69 57 70 75 33 57 44 79 34 54 41 47 63 41 61 7a 77 4a 47 43 4a 6e 2f 6e 61 4a 57 63 76 4c 30 2b 52 33 42 4a 51 62 52 67 53 74 63 70 38 6c 38 4e 68 67 79 33 62 70 47 5a 77 4f 37 4e 4e 63 7a 78 73 6e 4c 48 59 41 61 57 78 35 4d 67 4f 6c 43 54 65 79 68 4c 59 42 68 55 5a 35 4b 39 6d 71 6c 71 35 6f 74 65 73 74 4d 31 6c 7a 7a 2b 6c 30 68 56 56 78 6f 30 42 6b 49 52 48 47 67 42 38 57 43 41 41 49 66 6b 45 42 51 51 41 42 41 41 73 49 67 41 63 41 44 63 41 50 51 41 41 42 2f 2b 41 41 6f 4b 44 68 49 57 43 42 7a 63 78 52 57 70 71 49 51 41 41 6a 44 45 33 46 67 47 47 6c 70 65 59 6c 68 5a 46 6a 6f 2b 65 6e 36 41 6d 52 51 65 5a 70 61 55 78 4b 61 46 Data Ascii: bqGmdgehwZtXAMy+g+r23dsTsF9QhmkK7YsTZVqei/OiWpu3WDy4TAGcAazwJGCJn/naJWcvL0+R3BJQbRgStcp8l8Nhgy3bpGZwO7NNczxsnLHYAaWx5MgOlCTeyhLYBhUZ5K9mqlq5otestM1lzz+l0hVVxo0BkIRHGgB8WCAAIfkEBQQABAAsIgAcADcAPQAAB/+AAoKDhIWCBzcxRWpqIQAAjDE3FgGGlpeYlhZFjo+en6AmRQeZpaUxKaF
2023-10-05 12:50:47 UTC	1872	IN	Data Raw: 4d 6b 2f 66 66 46 79 64 4f 69 4a 42 67 51 49 74 59 6a 6d 43 31 77 68 59 49 41 43 48 35 42 41 55 45 41 41 51 41 4c 42 77 41 48 41 41 39 41 44 30 41 41 41 66 2f 67 41 53 43 67 34 53 46 68 6f 4d 43 69 51 4d 68 68 41 39 49 42 69 6f 2b 68 35 4f 55 6c 5a 57 4a 6d 41 49 44 6c 53 45 73 4a 35 61 67 6f 59 57 5a 69 52 47 43 6d 77 51 59 52 34 79 45 44 4a 47 69 73 4a 53 5a 6c 67 47 70 44 49 4d 66 42 72 57 78 76 4c 32 43 41 68 46 49 75 42 43 2b 78 62 77 2b 47 49 4d 73 78 73 79 69 45 36 77 4d 70 73 33 54 6b 77 4c 55 31 35 59 52 43 4e 6a 63 68 71 7a 64 34 4b 77 46 34 4e 7a 66 35 4e 69 4d 74 2b 66 63 77 75 76 75 37 37 7a 6d 38 4d 33 4c 38 38 58 4c 48 2f 62 46 6b 67 54 6a 2b 72 31 48 43 4d 6a 37 46 34 6f 59 67 51 6b 45 34 36 56 4b 47 47 74 5a 51 49 61 69 2f 45 47 63 75 45 Data Ascii: Mk/ffFydOiJBgQItYjmC1whYIACH5BAUEAAQALBwAHAA9AD0AAAf/gASCg4SFhoMCiQMhhA9IBio+h5OUlZWJmAIDlSEsJ5agoYWZiRGCmwQYR4yEDJGisJSZlgGpDIMfBrWxvL2CAhFIuBC+xbw+GIMsxsyiE6wMps3TkwLU15YRCNjchqzd4KwF4Nzf5NiMt+fcwuvu77zm8M3L88XLH/bFkgTj+r1HCMj7F4oYgQkE46VKGGtZQIai/EGcuE
2023-10-05 12:50:47 UTC	1879	IN	Data Raw: 20 54 68 69 73 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 61 63 63 65 73 73 20 63 6f 64 65 2e 22 2c 22 4c 41 4e 44 49 4e 47 5f 50 41 47 45 5f 48 45 41 44 45 52 22 3a 22 57 65 6c 63 6f 6d 65 20 61 6e 64 20 74 68 61 6e 6b 20 79 6f 75 20 66 6f 72 20 74 61 6b 69 6e 67 20 74 68 69 73 20 73 75 72 76 65 79 20 6f 6e 6c 69 6e 65 2e 22 2c 22 4c 41 4e 44 49 4e 47 5f 50 41 47 45 5f 54 45 58 54 22 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 20 69 6e 20 74 68 65 20 62 6f 78 20 62 65 6c 6f 77 2e 22 2c 22 4c 41 4e 44 49 4e 47 5f 50 41 47 45 5f 49 4e 56 49 54 41 54 49 4f 4e 5f 45 52 52 4f 52 22 3a 22 49 66 20 79 6f 75 20 64 69 64 20 6e 6f 74 20 73 74 61 79 20 61 74 20 43 69 6e 64 79 20 4b 69 65 66 61 74 20 6f 72 20 72 65 63 65 Data Ascii: This is not a valid access code.","LANDING_PAGE_HEADER":"Welcome and thank you for taking this survey online.","LANDING_PAGE_TEXT":"Please enter your password in the box below.","LANDING_PAGE_INVITATION_ERROR":"If you did not stay at Cindy Kiefat or rece
2023-10-05 12:50:47 UTC	1886	IN	Data Raw: 5f 53 45 52 56 49 43 45 5f 4c 41 42 45 4c 22 3a 22 53 65 72 76 69 63 65 22 2c 22 54 41 5f 56 41 4c 55 45 5f 4c 41 42 45 4c 22 3a 22 56 61 6c 75 65 22 2c 22 54 41 5f 53 4c 45 45 50 5f 51 55 41 4c 49 54 59 5f 4c 41 42 45 4c 22 3a 22 53 6c 65 65 70 20 51 75 61 6c 69 74 79 22 2c 22 54 41 5f 43 4c 45 41 4e 4c 49 4e 45 53 53 5f 4c 41 42 45 4c 22 3a 22 43 6c 65 61 6e 6c 69 6e 65 73 73 22 2c 22 54 41 5f 4c 4f 43 41 54 49 4f 4e 5f 4c 41 42 45 4c 22 3a 22 4c 6f 63 61 74 69 6f 6e 22 2c 22 54 41 5f 52 4f 4f 4d 53 5f 4c 41 42 45 4c 22 3a 22 52 6f 6f 6d 73 22 2c 22 54 41 5f 4c 45 47 41 4c 22 3a 22 49 20 63 6f 6e 66 69 72 6d 20 74 68 61 74 20 49 20 68 61 76 65 20 72 65 61 64 20 61 6e 64 20 61 67 72 65 65 20 74 6f 20 74 68 65 20 50 72 69 76 61 63 79 20 61 6e 64 20 49 6e Data Ascii: _SERVICE_LABEL":"Service","TA_VALUE_LABEL":"Value","TA_SLEEP_QUALITY_LABEL":"Sleep Quality","TA_CLEANLINESS_LABEL":"Cleanliness","TA_LOCATION_LABEL":"Location","TA_ROOMS_LABEL":"Rooms","TA_LEGAL":"I confirm that I have read and agree to the Privacy and In
2023-10-05 12:50:47 UTC	1888	IN	Data Raw: 52 5f 48 41 4c 46 5f 43 41 50 53 22 3a 22 50 6c 65 61 73 65 20 72 65 76 69 65 77 20 79 6f 75 72 20 75 73 65 20 6f 66 20 41 4c 4c 20 43 41 50 53 20 69 6e 20 79 6f 75 72 20 63 6f 6d 6d 65 6e 74 2e 22 2c 22 54 41 5f 45 52 52 4f 52 5f 52 45 50 45 41 54 45 44 5f 43 48 41 52 53 22 3a 22 59 6f 75 27 76 65 20 61 63 63 69 64 65 6e 74 61 6c 6c 79 20 72 65 70 65 61 74 65 64 20 73 6f 6d 65 20 6c 65 74 74 65 72 73 2f 63 68 61 72 61 63 74 65 72 73 2e 20 50 6c 65 61 73 65 20 64 65 6c 65 74 65 20 74 68 65 6d 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 22 54 41 5f 50 52 4f 4d 4f 54 45 5f 4c 45 47 45 4e 44 5f 31 22 3a 22 22 2c 22 54 41 5f 50 52 4f 4d 4f 54 45 5f 4c 45 47 45 4e 44 5f 32 22 3a 22 22 2c 22 54 41 5f 50 52 4f 4d 4f 54 45 5f 4c 45 47 45 4e 44 5f 33 22 3a Data Ascii: R_HALF_CAPS":"Please review your use of ALL CAPS in your comment.","TA_ERROR_REPEATED_CHARS":"You've accidentally repeated some letters/characters. Please delete them and try again.","TA_PROMOTE_LEGEND_1":"","TA_PROMOTE_LEGEND_2":"","TA_PROMOTE_LEGEND_3":
2023-10-05 12:50:47 UTC	1888	IN	Data Raw: 0d 0a 31 39 39 39 0d 0a 22 3a 22 61 6e 64 20 73 75 62 6d 69 74 20 73 75 72 76 65 79 22 2c 22 42 41 5a 41 41 52 5f 56 4f 49 43 45 5f 4e 45 58 54 22 3a 22 61 6e 64 20 63 6f 6e 74 69 6e 75 65 22 2c 22 42 41 5a 41 41 52 5f 56 4f 49 43 45 5f 53 4b 49 50 5f 53 54 45 50 22 3a 22 53 6b 69 70 20 54 68 69 73 20 53 74 65 70 22 2c 22 45 4d 41 49 4c 5f 49 53 5f 49 4e 56 41 4c 49 44 22 3a 22 49 6e 76 61 6c 69 64 20 45 6d 61 69 6c 22 2c 22 49 4e 54 45 47 45 52 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 46 41 49 4c 45 44 22 3a 22 54 68 65 20 69 6e 70 75 74 20 6d 75 73 74 20 62 65 20 61 6e 20 69 6e 74 65 67 65 72 20 76 61 6c 75 65 22 2c 22 46 49 4e 44 5f 4f 54 48 45 52 5f 4c 4f 43 41 54 49 4f 4e 53 22 3a 22 46 69 6e 64 20 6f 74 68 65 72 20 6c 6f 63 61 74 69 6f 6e 73 22 2c 22 41 Data Ascii: 1999":"and submit survey","BAZAAR_VOICE_NEXT":"and continue","BAZAAR_VOICE_SKIP_STEP":"Skip This Step","EMAIL_IS_INVALID":"Invalid Email","INTEGER_VALIDATION_FAILED":"The input must be an integer value","FIND_OTHER_LOCATIONS":"Find other locations","A
2023-10-05 12:50:47 UTC	1894	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.6	49732	173.222.162.64	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:49 UTC	1894	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900C4F3 X-BM-CBT: 1696488253 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: 1D6F504B5A5A465DBDB84F31C63A581D X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900C4F3 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshldspcl40,msbdsborgv2co,msbwdsbi920cf,optfsth3,premsbdsbchtupcf,wsbfixcachec,wsbqfasmsall_c,wsbqfminiserp_c,wsbref-c X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 516 Connection: Keep-Alive Cache-Control: no-cache Cookie: SRCHUID=V=2&GUID=CE2BE0509FF742BD822F50D98AD10391&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231005; SRCHHPGUSR=SRCHLANG=en&HV=1696488191&IPMH=5767d621&IPMID=1696488252989&LUT=1696487541024; CortanaAppUID=2020E25DAB158E420BA06F1C8DEF7959; MUID=81C61E09498D41CC97CDBBA354824ED1; _SS=SID=1D9FAF807E686D422B86BC217FC66C71&CPID=1696488253968&AC=1&CPH=071f2185; _EDGE_S=SID=1D9FAF807E686D422B86BC217FC66C71; MUIDB=81C61E09498D41CC97CDBBA354824ED1
2023-10-05 12:50:49 UTC	1897	OUT	Data Raw: 3c Data Ascii: <
2023-10-05 12:50:49 UTC	1897	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 38 31 43 36 31 45 30 39 34 39 38 44 34 31 43 43 39 37 43 44 42 42 41 33 35 34 38 32 34 45 44 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 33 35 31 41 41 38 32 41 45 39 30 43 34 36 36 39 39 46 35 42 31 46 45 33 34 32 42 45 37 45 31 30 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>81C61E09498D41CC97CDBBA354824ED1</CID><Events><E><T>Event.ClientInst</T><IG>351AA82AE90C46699F5B1FE342BE7E10</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2023-10-05 12:50:49 UTC	1900	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 0650CF66200D4B35A6F62E4B1D90DE16 Ref B: LAXEDGE1814 Ref C: 2023-10-05T12:50:49Z Date: Thu, 05 Oct 2023 12:50:49 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.40a6dc17.1696510249.13419c6f

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.6	49733	44.239.32.243	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:49 UTC	1897	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-AAF-GTM/adrum HTTP/1.1 Host: col.eum-appdynamics.com Connection: keep-alive Content-Length: 2554 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://survey3.medallia.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://survey3.medallia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-10-05 12:50:49 UTC	1898	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 33 2e 33 2e 30 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 30 22 2c 22 65 74 22 3a 30 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 3f 32 22 2c 22 74 73 22 3a 31 36 39 36 35 31 30 32 34 36 32 35 37 2c 22 75 64 22 3a 7b 22 56 65 72 73 69 6f 6e 22 3a 22 56 37 22 2c 22 56 37 56 65 72 73 69 6f 6e 22 3a 22 36 2e 32 31 2e 31 33 22 2c 22 56 37 4d 69 6c 65 73 74 6f 6e 65 22 3a 22 6c 65 67 61 63 79 22 2c 22 53 75 72 76 65 79 49 64 22 3a 22 65 68 6e 6d 37 64 37 37 36 34 7a 72 72 66 72 73 66 79 62 39 22 2c 22 53 70 65 63 49 64 22 3a 22 31 35 36 31 2d 66 69 73 2d 33 31 31 39 22 2c 22 43 6c 69 65 6e 74 49 64 22 3a 22 31 35 36 31 2d 35 33 22 2c 22 43 6f 6d 70 61 6e 79 4e 61 6d 65 22 3a 22 69 73 Data Ascii: {"vr":"4.3.3.0","dt":"R","rg":"0","es":[{"eg":"0","et":0,"eu":"0://1/?2","ts":1696510246257,"ud":{"Version":"V7","V7Version":"6.21.13","V7Milestone":"legacy","SurveyId":"ehnm7d7764zrrfrsfyb9","SpecId":"1561-fis-3119","ClientId":"1561-53","CompanyName":"is

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	44.239.32.243	443	192.168.2.6	49733	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:49 UTC	1901	IN	HTTP/1.1 200 OK Date: Thu, 05 Oct 2023 12:50:49 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:29\|g:7cf30864-4945-4146-8c4d-18540027cbe6; Path=/; Expires=Thu, 05-Oct-2023 12:51:19 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:29\|g:7cf30864-4945-4146-8c4d-18540027cbe6\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 05-Oct-2023 12:51:19 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 05-Oct-2023 12:51:19 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:29\|i:559461; Path=/; Expires=Thu, 05-Oct-2023 12:51:19 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:29\|i:559461\|e:2; Path=/; Expires=Thu, 05-Oct-2023 12:51:19 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2023-10-05 12:50:49 UTC	1902	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.6	49734	52.39.244.39	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:50 UTC	1902	OUT	GET /eumcollector/beacons/browser/v1/AD-AAB-AAF-GTM/adrum HTTP/1.1 Host: col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:12872c5b-f82d-4d3e-882d-10af5d61b313\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; SameSite=None; ADRUM_BT1=R:0\|i:559461\|e:4

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	52.39.244.39	443	192.168.2.6	49734	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:50 UTC	1902	IN	HTTP/1.1 200 OK Date: Thu, 05 Oct 2023 12:50:50 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:12872c5b-f82d-4d3e-882d-10af5d61b313\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:4; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:64b34f14-9cf5-49c3-82ad-f5521345a324; Path=/; Expires=Thu, 05-Oct-2023 12:51:20 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:64b34f14-9cf5-49c3-82ad-f5521345a324\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 05-Oct-2023 12:51:20 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 05-Oct-2023 12:51:20 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:559461; Path=/; Expires=Thu, 05-Oct-2023 12:51:20 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:4; Path=/; Expires=Thu, 05-Oct-2023 12:51:20 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2023-10-05 12:50:50 UTC	1904	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.6	49731	147.75.243.92	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:50 UTC	1904	OUT	GET /?ehnm7d7764zrrfrsfyb9&reject=confirm HTTP/1.1 Host: survey3.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_tvswfz3.nfebmmjb.dpn=14b5a3d946c40ade39f765eb549522cee1cb1b6a69b13dc600a8f7ff2dc131b31f1bf447

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	147.75.243.92	443	192.168.2.6	49708	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:35 UTC	5	IN	HTTP/1.1 200 OK Pragma: no-cache token Expires: Mon, 03 Jul 2001 09:00:00 GMT Cache-Control: private, no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Content-Type: text/html;charset=utf-8 Vary: Accept-Language Vary: Accept-Encoding, User-Agent Transfer-Encoding: chunked Server: Jetty(9.3.25.v20180904) Set-Cookie: NSC_tvswfz3.nfebmmjb.dpn=14b5a3d946c40ade39f765eb549522cee1cb1b6a69b13dc600a8f7ff2dc131b31f1bf447;path=/;secure;httponly
2023-10-05 12:50:35 UTC	5	IN	Data Raw: 38 30 30 30 0d 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 77 69 6e 64 6f 77 2e 6c 6f 61 64 69 6e 67 53 74 61 72 74 54 69 6d 65 20 3d 20 44 61 74 65 2e 6e 6f 77 28 29 3b 0a 09 09 77 69 6e 64 6f 77 5b 27 61 64 72 75 6d 2d 73 74 61 72 74 2d 74 69 6d 65 27 5d 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 0a 09 09 77 69 6e 64 6f 77 2e 41 50 50 5f 44 59 4e 41 4d 49 43 53 20 3d 20 7b 0a 09 09 09 75 73 65 72 44 61 74 61 3a 20 7b 7d 2c 0a 09 09 09 75 73 65 72 44 61 74 61 4c 6f 6e 67 3a 20 7b 7d 2c 0a 09 09 09 75 73 65 72 44 61 74 61 44 6f 75 62 6c 65 3a Data Ascii: 8000<!doctype html><html lang="en"><head><script type="text/javascript">window.loadingStartTime = Date.now();window['adrum-start-time'] = new Date().getTime();window.APP_DYNAMICS = {userData: {},userDataLong: {},userDataDouble:
2023-10-05 12:50:35 UTC	12	IN	Data Raw: 55 59 4a 4b 6d 43 6a 6a 47 75 61 74 47 79 49 6d 2b 65 69 35 75 35 2f 4c 68 41 61 63 4c 4a 4e 4d 30 57 6e 54 6b 73 67 4d 6d 5a 53 34 4c 2b 4f 67 45 74 41 6b 6d 6f 34 77 57 35 37 4d 6e 68 68 4e 30 52 39 33 51 78 61 76 71 76 45 52 33 65 36 4a 61 78 4c 78 52 38 69 67 44 58 4f 65 44 54 54 76 55 67 67 30 35 58 77 61 49 55 47 44 41 71 6b 65 51 30 67 5a 6f 54 4a 35 38 49 41 41 68 2b 51 51 46 42 41 41 44 41 43 77 63 41 42 77 41 4f 51 41 39 41 41 41 48 2f 34 41 44 67 6f 4f 45 68 59 61 44 42 56 59 64 48 56 55 41 67 6f 73 6a 52 42 47 48 6c 4a 57 57 68 69 39 57 48 35 65 45 56 51 6d 63 6f 4a 5a 45 56 59 5a 53 56 36 63 6f 70 31 63 64 6d 34 51 6a 42 51 47 68 73 6b 53 74 41 31 52 57 45 51 4b 67 55 6f 36 43 48 30 53 79 6c 79 69 31 55 70 50 42 41 77 45 46 48 59 4e 56 4b 4d Data Ascii: UYJKmCjjGuatGyIm+ei5u5/LhAacLJNM0WnTksgMmZS4L+OgEtAkmo4wW57MnhhN0R93QxavqvER3e6JaxLxR8igDXOeDTTvUgg05XwaIUGDAqkeQ0gZoTJ58IAAh+QQFBAADACwcABwAOQA9AAAH/4ADgoOEhYaDBVYdHVUAgosjRBGHlJWWhi9WH5eEVQmcoJZEVYZSV6cop1cdm4QjBQGhskStA1RWEQKgUo6CH0Sylyi1UpPBAwEFHYNVKM
2023-10-05 12:50:35 UTC	19	IN	Data Raw: 41 61 52 34 37 6f 41 41 44 38 57 4a 44 5a 42 34 77 6b 72 63 6c 77 4e 44 4b 6c 75 6d 77 58 58 63 70 62 57 55 2b 6d 76 45 30 78 62 58 49 54 43 47 43 6a 7a 6d 47 33 45 50 36 30 78 6d 7a 4a 55 47 73 68 6a 30 4b 62 38 46 42 70 73 71 42 4f 68 32 31 71 47 52 58 54 4a 71 4e 56 53 37 45 41 67 44 55 72 4a 6c 74 64 76 56 71 79 70 55 2f 73 4f 6b 64 6d 7a 35 5a 4e 65 79 68 62 57 4c 61 45 68 61 62 43 50 51 52 31 62 71 47 6d 64 67 65 68 77 5a 74 58 41 4d 79 2b 67 2b 72 32 33 64 73 54 73 46 39 51 68 6d 6b 4b 37 59 73 54 5a 56 71 65 69 2f 4f 69 57 70 75 33 57 44 79 34 54 41 47 63 41 61 7a 77 4a 47 43 4a 6e 2f 6e 61 4a 57 63 76 4c 30 2b 52 33 42 4a 51 62 52 67 53 74 63 70 38 6c 38 4e 68 67 79 33 62 70 47 5a 77 4f 37 4e 4e 63 7a 78 73 6e 4c 48 59 41 61 57 78 35 4d 67 4f 6c Data Ascii: AaR47oAAD8WJDZB4wkrclwNDKlumwXXcpbWU+mvE0xbXITCGCjzmG3EP60xmzJUGshj0Kb8FBpsqBOh21qGRXTJqNVS7EAgDUrJltdvVqypU/sOkdmz5ZNeyhbWLaEhabCPQR1bqGmdgehwZtXAMy+g+r23dsTsF9QhmkK7YsTZVqei/OiWpu3WDy4TAGcAazwJGCJn/naJWcvL0+R3BJQbRgStcp8l8Nhgy3bpGZwO7NNczxsnLHYAaWx5MgOl
2023-10-05 12:50:35 UTC	26	IN	Data Raw: 70 73 3a 2f 2f 67 6c 6f 62 61 6c 2e 63 64 6e 2e 73 75 72 76 65 79 2e 6d 65 64 61 6c 6c 69 61 2e 63 6f 6d 2f 62 66 34 36 32 61 66 65 32 36 61 37 64 32 37 32 32 36 66 38 39 66 66 38 35 65 65 33 31 64 64 31 32 63 39 64 31 30 65 64 22 2c 22 72 65 6c 22 3a 22 73 74 79 6c 65 73 68 65 65 74 22 2c 22 74 79 70 65 22 3a 22 74 65 78 74 2f 63 73 73 22 7d 2c 7b 22 68 72 65 66 22 3a 22 68 74 74 70 73 3a 2f 2f 67 6c 6f 62 61 6c 2e 63 64 6e 2e 73 75 72 76 65 79 2e 6d 65 64 61 6c 6c 69 61 2e 63 6f 6d 2f 33 65 61 62 32 38 32 31 30 66 34 35 35 30 30 65 37 63 62 37 33 64 65 30 35 65 38 33 30 62 38 32 64 62 36 65 31 35 31 63 22 2c 22 72 65 6c 22 3a 22 73 74 79 6c 65 73 68 65 65 74 22 2c 22 74 79 70 65 22 3a 22 74 65 78 74 2f 63 73 73 22 7d 5d 2c 22 61 63 74 69 6f 6e 22 3a 22 Data Ascii: ps://global.cdn.survey.medallia.com/bf462afe26a7d27226f89ff85ee31dd12c9d10ed","rel":"stylesheet","type":"text/css"},{"href":"https://global.cdn.survey.medallia.com/3eab28210f45500e7cb73de05e830b82db6e151c","rel":"stylesheet","type":"text/css"}],"action":"
2023-10-05 12:50:35 UTC	33	IN	Data Raw: 2c 22 41 43 5f 44 41 54 45 5f 46 49 45 4c 44 22 3a 22 54 68 65 20 72 65 71 75 69 72 65 64 20 64 61 74 65 20 66 6f 72 6d 61 74 20 69 73 20 4d 6f 6e 74 68 20 4d 6f 6e 74 68 2c 20 66 6f 72 77 61 72 64 20 73 6c 61 73 68 2c 20 44 61 79 20 44 61 79 2c 20 66 6f 72 77 61 72 64 20 73 6c 61 73 68 2c 20 59 65 61 72 20 59 65 61 72 20 59 65 61 72 20 59 65 61 72 2e 22 2c 22 41 43 5f 4d 55 4c 54 49 50 4c 45 5f 43 48 4f 49 43 45 22 3a 22 54 68 69 73 20 69 73 20 61 20 6d 75 6c 74 69 70 6c 65 20 63 68 6f 69 63 65 20 71 75 65 73 74 69 6f 6e 20 74 68 61 74 20 6d 61 79 20 61 6c 6c 6f 77 20 79 6f 75 20 74 6f 20 73 65 6c 65 63 74 20 6f 6e 65 20 6f 72 20 6d 6f 72 65 20 61 6e 73 77 65 72 73 2e 22 2c 22 41 43 5f 50 52 4f 47 52 45 53 53 5f 4d 45 53 53 41 47 45 22 3a 22 54 68 69 73 Data Ascii: ,"AC_DATE_FIELD":"The required date format is Month Month, forward slash, Day Day, forward slash, Year Year Year Year.","AC_MULTIPLE_CHOICE":"This is a multiple choice question that may allow you to select one or more answers.","AC_PROGRESS_MESSAGE":"This
2023-10-05 12:50:35 UTC	40	IN	Data Raw: 61 73 65 20 72 61 6e 6b 20 61 6c 6c 20 6f 66 20 74 68 65 20 6f 70 74 69 6f 6e 73 2e 22 2c 22 73 75 72 76 65 79 2e 76 61 6c 69 64 61 74 69 6f 6e 73 2e 52 41 4e 4b 5f 43 4f 4e 53 45 43 55 54 49 56 45 5f 56 41 4c 49 44 41 54 49 4f 4e 22 3a 22 52 61 6e 6b 69 6e 67 20 6d 75 73 74 20 62 65 20 63 6f 6e 73 65 63 75 74 69 76 65 2c 20 73 74 61 72 74 69 6e 67 20 66 72 6f 6d 20 31 22 2c 22 73 75 72 76 65 79 2e 76 61 6c 69 64 61 74 69 6f 6e 73 2e 46 49 4c 45 5f 55 50 4c 4f 41 44 5f 55 50 4c 4f 41 44 5f 46 49 4c 45 5f 45 52 52 4f 52 5f 53 49 5a 45 22 3a 22 25 73 20 65 78 63 65 65 64 65 64 20 74 68 65 20 66 69 6c 65 20 73 69 7a 65 20 6c 69 6d 69 74 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 22 73 75 72 76 65 79 2e 76 61 6c 69 64 61 74 69 6f 6e 73 2e Data Ascii: ase rank all of the options.","survey.validations.RANK_CONSECUTIVE_VALIDATION":"Ranking must be consecutive, starting from 1","survey.validations.FILE_UPLOAD_UPLOAD_FILE_ERROR_SIZE":"%s exceeded the file size limit. Please try again.","survey.validations.

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	147.75.243.92	443	192.168.2.6	49731	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:51 UTC	1904	IN	HTTP/1.1 200 OK Pragma: no-cache token Expires: Mon, 03 Jul 2001 09:00:00 GMT Cache-Control: private, no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Content-Type: text/html;charset=utf-8 Vary: Accept-Language Vary: Accept-Encoding, User-Agent Transfer-Encoding: chunked Server: Jetty(9.3.25.v20180904)
2023-10-05 12:50:51 UTC	1905	IN	Data Raw: 38 30 30 30 0d 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 77 69 6e 64 6f 77 2e 6c 6f 61 64 69 6e 67 53 74 61 72 74 54 69 6d 65 20 3d 20 44 61 74 65 2e 6e 6f 77 28 29 3b 0a 09 09 77 69 6e 64 6f 77 5b 27 61 64 72 75 6d 2d 73 74 61 72 74 2d 74 69 6d 65 27 5d 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 0a 09 09 77 69 6e 64 6f 77 2e 41 50 50 5f 44 59 4e 41 4d 49 43 53 20 3d 20 7b 0a 09 09 09 75 73 65 72 44 61 74 61 3a 20 7b 7d 2c 0a 09 09 09 75 73 65 72 44 61 74 61 4c 6f 6e 67 3a 20 7b 7d 2c 0a 09 09 09 75 73 65 72 44 61 74 61 44 6f 75 62 6c 65 3a Data Ascii: 8000<!doctype html><html lang="en"><head><script type="text/javascript">window.loadingStartTime = Date.now();window['adrum-start-time'] = new Date().getTime();window.APP_DYNAMICS = {userData: {},userDataLong: {},userDataDouble:
2023-10-05 12:50:51 UTC	1912	IN	Data Raw: 43 77 63 41 42 77 41 4f 51 41 39 41 41 41 48 2f 34 41 44 67 6f 4f 45 68 59 61 44 42 56 59 64 48 56 55 41 67 6f 73 6a 52 42 47 48 6c 4a 57 57 68 69 39 57 48 35 65 45 56 51 6d 63 6f 4a 5a 45 56 59 5a 53 56 36 63 6f 70 31 63 64 6d 34 51 6a 42 51 47 68 73 6b 53 74 41 31 52 57 45 51 4b 67 55 6f 36 43 48 30 53 79 6c 79 69 31 55 70 50 42 41 77 45 46 48 59 4e 56 4b 4d 65 47 56 6f 4e 53 7a 35 6a 52 67 69 50 55 41 79 39 54 6a 79 2f 5a 6c 78 38 46 78 37 53 43 31 74 2b 55 43 5a 73 41 34 71 47 66 74 75 65 63 42 77 76 77 39 4a 55 42 38 36 44 73 39 63 66 72 6c 51 57 4f 2b 50 61 42 57 67 41 41 67 4c 64 44 6d 78 62 45 45 67 67 71 77 41 63 41 55 78 61 36 73 6e 57 41 6f 61 77 49 42 63 30 56 63 6d 63 78 6c 43 59 41 78 67 53 52 36 6e 6a 73 48 67 41 4f 67 36 36 51 70 50 62 43 Data Ascii: CwcABwAOQA9AAAH/4ADgoOEhYaDBVYdHVUAgosjRBGHlJWWhi9WH5eEVQmcoJZEVYZSV6cop1cdm4QjBQGhskStA1RWEQKgUo6CH0Sylyi1UpPBAwEFHYNVKMeGVoNSz5jRgiPUAy9Tjy/Zlx8Fx7SC1t+UCZsA4qGftuecBwvw9JUB86Ds9cfrlQWO+PaBWgAAgLdDmxbEEggqwAcAUxa6snWAoawIBc0VcmcxlCYAxgSR6njsHgAOg66QpPbC
2023-10-05 12:50:51 UTC	1919	IN	Data Raw: 62 71 47 6d 64 67 65 68 77 5a 74 58 41 4d 79 2b 67 2b 72 32 33 64 73 54 73 46 39 51 68 6d 6b 4b 37 59 73 54 5a 56 71 65 69 2f 4f 69 57 70 75 33 57 44 79 34 54 41 47 63 41 61 7a 77 4a 47 43 4a 6e 2f 6e 61 4a 57 63 76 4c 30 2b 52 33 42 4a 51 62 52 67 53 74 63 70 38 6c 38 4e 68 67 79 33 62 70 47 5a 77 4f 37 4e 4e 63 7a 78 73 6e 4c 48 59 41 61 57 78 35 4d 67 4f 6c 43 54 65 79 68 4c 59 42 68 55 5a 35 4b 39 6d 71 6c 71 35 6f 74 65 73 74 4d 31 6c 7a 7a 2b 6c 30 68 56 56 78 6f 30 42 6b 49 52 48 47 67 42 38 57 43 41 41 49 66 6b 45 42 51 51 41 42 41 41 73 49 67 41 63 41 44 63 41 50 51 41 41 42 2f 2b 41 41 6f 4b 44 68 49 57 43 42 7a 63 78 52 57 70 71 49 51 41 41 6a 44 45 33 46 67 47 47 6c 70 65 59 6c 68 5a 46 6a 6f 2b 65 6e 36 41 6d 52 51 65 5a 70 61 55 78 4b 61 46 Data Ascii: bqGmdgehwZtXAMy+g+r23dsTsF9QhmkK7YsTZVqei/OiWpu3WDy4TAGcAazwJGCJn/naJWcvL0+R3BJQbRgStcp8l8Nhgy3bpGZwO7NNczxsnLHYAaWx5MgOlCTeyhLYBhUZ5K9mqlq5otestM1lzz+l0hVVxo0BkIRHGgB8WCAAIfkEBQQABAAsIgAcADcAPQAAB/+AAoKDhIWCBzcxRWpqIQAAjDE3FgGGlpeYlhZFjo+en6AmRQeZpaUxKaF
2023-10-05 12:50:51 UTC	1920	IN	Data Raw: 4d 6b 2f 66 66 46 79 64 4f 69 4a 42 67 51 49 74 59 6a 6d 43 31 77 68 59 49 41 43 48 35 42 41 55 45 41 41 51 41 4c 42 77 41 48 41 41 39 41 44 30 41 41 41 66 2f 67 41 53 43 67 34 53 46 68 6f 4d 43 69 51 4d 68 68 41 39 49 42 69 6f 2b 68 35 4f 55 6c 5a 57 4a 6d 41 49 44 6c 53 45 73 4a 35 61 67 6f 59 57 5a 69 52 47 43 6d 77 51 59 52 34 79 45 44 4a 47 69 73 4a 53 5a 6c 67 47 70 44 49 4d 66 42 72 57 78 76 4c 32 43 41 68 46 49 75 42 43 2b 78 62 77 2b 47 49 4d 73 78 73 79 69 45 36 77 4d 70 73 33 54 6b 77 4c 55 31 35 59 52 43 4e 6a 63 68 71 7a 64 34 4b 77 46 34 4e 7a 66 35 4e 69 4d 74 2b 66 63 77 75 76 75 37 37 7a 6d 38 4d 33 4c 38 38 58 4c 48 2f 62 46 6b 67 54 6a 2b 72 31 48 43 4d 6a 37 46 34 6f 59 67 51 6b 45 34 36 56 4b 47 47 74 5a 51 49 61 69 2f 45 47 63 75 45 Data Ascii: Mk/ffFydOiJBgQItYjmC1whYIACH5BAUEAAQALBwAHAA9AD0AAAf/gASCg4SFhoMCiQMhhA9IBio+h5OUlZWJmAIDlSEsJ5agoYWZiRGCmwQYR4yEDJGisJSZlgGpDIMfBrWxvL2CAhFIuBC+xbw+GIMsxsyiE6wMps3TkwLU15YRCNjchqzd4KwF4Nzf5NiMt+fcwuvu77zm8M3L88XLH/bFkgTj+r1HCMj7F4oYgQkE46VKGGtZQIai/EGcuE
2023-10-05 12:50:51 UTC	1928	IN	Data Raw: 44 45 5f 54 4f 4f 4c 54 49 50 22 3a 22 45 72 72 6f 72 3a 20 54 68 69 73 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 61 63 63 65 73 73 20 63 6f 64 65 2e 22 2c 22 4c 41 4e 44 49 4e 47 5f 50 41 47 45 5f 48 45 41 44 45 52 22 3a 22 57 65 6c 63 6f 6d 65 20 61 6e 64 20 74 68 61 6e 6b 20 79 6f 75 20 66 6f 72 20 74 61 6b 69 6e 67 20 74 68 69 73 20 73 75 72 76 65 79 20 6f 6e 6c 69 6e 65 2e 22 2c 22 4c 41 4e 44 49 4e 47 5f 50 41 47 45 5f 54 45 58 54 22 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 20 69 6e 20 74 68 65 20 62 6f 78 20 62 65 6c 6f 77 2e 22 2c 22 4c 41 4e 44 49 4e 47 5f 50 41 47 45 5f 49 4e 56 49 54 41 54 49 4f 4e 5f 45 52 52 4f 52 22 3a 22 49 66 20 79 6f 75 20 64 69 64 20 6e 6f 74 20 73 74 61 79 20 61 74 20 43 Data Ascii: DE_TOOLTIP":"Error: This is not a valid access code.","LANDING_PAGE_HEADER":"Welcome and thank you for taking this survey online.","LANDING_PAGE_TEXT":"Please enter your password in the box below.","LANDING_PAGE_INVITATION_ERROR":"If you did not stay at C
2023-10-05 12:50:51 UTC	1935	IN	Data Raw: 4f 5f 4c 41 42 45 4c 22 3a 22 53 6f 6c 6f 22 2c 22 54 41 5f 53 45 52 56 49 43 45 5f 4c 41 42 45 4c 22 3a 22 53 65 72 76 69 63 65 22 2c 22 54 41 5f 56 41 4c 55 45 5f 4c 41 42 45 4c 22 3a 22 56 61 6c 75 65 22 2c 22 54 41 5f 53 4c 45 45 50 5f 51 55 41 4c 49 54 59 5f 4c 41 42 45 4c 22 3a 22 53 6c 65 65 70 20 51 75 61 6c 69 74 79 22 2c 22 54 41 5f 43 4c 45 41 4e 4c 49 4e 45 53 53 5f 4c 41 42 45 4c 22 3a 22 43 6c 65 61 6e 6c 69 6e 65 73 73 22 2c 22 54 41 5f 4c 4f 43 41 54 49 4f 4e 5f 4c 41 42 45 4c 22 3a 22 4c 6f 63 61 74 69 6f 6e 22 2c 22 54 41 5f 52 4f 4f 4d 53 5f 4c 41 42 45 4c 22 3a 22 52 6f 6f 6d 73 22 2c 22 54 41 5f 4c 45 47 41 4c 22 3a 22 49 20 63 6f 6e 66 69 72 6d 20 74 68 61 74 20 49 20 68 61 76 65 20 72 65 61 64 20 61 6e 64 20 61 67 72 65 65 20 74 6f Data Ascii: O_LABEL":"Solo","TA_SERVICE_LABEL":"Service","TA_VALUE_LABEL":"Value","TA_SLEEP_QUALITY_LABEL":"Sleep Quality","TA_CLEANLINESS_LABEL":"Cleanliness","TA_LOCATION_LABEL":"Location","TA_ROOMS_LABEL":"Rooms","TA_LEGAL":"I confirm that I have read and agree to
2023-10-05 12:50:51 UTC	1936	IN	Data Raw: 65 61 73 65 20 66 69 78 2e 22 2c 22 54 41 5f 45 52 52 4f 52 5f 48 41 4c 46 5f 43 41 50 53 22 3a 22 50 6c 65 61 73 65 20 72 65 76 69 65 77 20 79 6f 75 72 20 75 73 65 20 6f 66 20 41 4c 4c 20 43 41 50 53 20 69 6e 20 79 6f 75 72 20 63 6f 6d 6d 65 6e 74 2e 22 2c 22 54 41 5f 45 52 52 4f 52 5f 52 45 50 45 41 54 45 44 5f 43 48 41 52 53 22 3a 22 59 6f 75 27 76 65 20 61 63 63 69 64 65 6e 74 61 6c 6c 79 20 72 65 70 65 61 74 65 64 20 73 6f 6d 65 20 6c 65 74 74 65 72 73 2f 63 68 61 72 61 63 74 65 72 73 2e 20 50 6c 65 61 73 65 20 64 65 6c 65 74 65 20 74 68 65 6d 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 22 54 41 5f 50 52 4f 4d 4f 54 45 5f 4c 45 47 45 4e 44 5f 31 22 3a 22 22 2c 22 54 41 5f 50 52 4f 4d 4f 54 45 5f 4c 45 47 45 4e 44 5f 32 22 3a 22 22 2c 22 54 41 Data Ascii: ease fix.","TA_ERROR_HALF_CAPS":"Please review your use of ALL CAPS in your comment.","TA_ERROR_REPEATED_CHARS":"You've accidentally repeated some letters/characters. Please delete them and try again.","TA_PROMOTE_LEGEND_1":"","TA_PROMOTE_LEGEND_2":"","TA
2023-10-05 12:50:51 UTC	1937	IN	Data Raw: 0d 0a 31 39 41 43 0d 0a 56 4f 49 43 45 5f 53 55 42 4d 49 54 5f 53 55 52 56 45 59 22 3a 22 61 6e 64 20 73 75 62 6d 69 74 20 73 75 72 76 65 79 22 2c 22 42 41 5a 41 41 52 5f 56 4f 49 43 45 5f 4e 45 58 54 22 3a 22 61 6e 64 20 63 6f 6e 74 69 6e 75 65 22 2c 22 42 41 5a 41 41 52 5f 56 4f 49 43 45 5f 53 4b 49 50 5f 53 54 45 50 22 3a 22 53 6b 69 70 20 54 68 69 73 20 53 74 65 70 22 2c 22 45 4d 41 49 4c 5f 49 53 5f 49 4e 56 41 4c 49 44 22 3a 22 49 6e 76 61 6c 69 64 20 45 6d 61 69 6c 22 2c 22 49 4e 54 45 47 45 52 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 46 41 49 4c 45 44 22 3a 22 54 68 65 20 69 6e 70 75 74 20 6d 75 73 74 20 62 65 20 61 6e 20 69 6e 74 65 67 65 72 20 76 61 6c 75 65 22 2c 22 46 49 4e 44 5f 4f 54 48 45 52 5f 4c 4f 43 41 54 49 4f 4e 53 22 3a 22 46 69 6e 64 20 Data Ascii: 19ACVOICE_SUBMIT_SURVEY":"and submit survey","BAZAAR_VOICE_NEXT":"and continue","BAZAAR_VOICE_SKIP_STEP":"Skip This Step","EMAIL_IS_INVALID":"Invalid Email","INTEGER_VALIDATION_FAILED":"The input must be an integer value","FIND_OTHER_LOCATIONS":"Find
2023-10-05 12:50:51 UTC	1943	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.2.6	49742	20.99.186.246	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:52 UTC	1943	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=88000045&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20231005T125050Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=ae3e20766c984bcfbc2497ae7c7431d6&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=392&metered=false&nettype=ethernet&npid=sc-88000045&oemName=lfbati%2C%20Inc.&oemid=Public&ossku=Professional&scmid=Public&smBiosDm=lfbati20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=392&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=2 HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: q+PFIOArkUCVNW6i.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2023-10-05 12:50:52 UTC	1954	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 3232 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"DcoPlusDebug":"Status: Ok"},{"RADIDS":"1,P425116216-T700333447-C128000000001627409+B+P10+S1"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: OnyDE+rqWbP8G6R/jSBcYYiHhggE7oRsse3IeT0QJ8mTOwtDcY0fFFzI+UOcJ78K/kHKbCCMErizFJQcdB+a9CRKVln1QqBJKW9woel1giqoDe7MJ2o4t5WqhkdlN19xrE4yJlIPRvTx3cL9hoYLfGZz1CUCRvqVV5nEw3N6PMSrhBlcTU1+hl7iHgTXAivSaXtAbfgvRsaydSGzfuAk6dZqbzPwIdKds9aeSRSaxTDZJxjaeQQNA6uJlUnnciEEyWmzZAag2ctntSQ2tuzoWl9iP6LQOzm+TwpmogA8CVcMFfQMs6VnETu9IA6ekV7EiQiOOhTFGk8v7PnAXqtwjA== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Thu, 05 Oct 2023 12:50:51 GMT Connection: close
2023-10-05 12:50:52 UTC	1955	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6e 6f 4f 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 61 63 74 69 6f 6e 5c 22 7d 7d 2c 5c 22 69 74 65 6d 73 5c 22 3a 5b 7b 5c 22 70 72 6f 70 65 72 74 69 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"noOp\":{\"type\":\"action\"}},\"items\":[{\"properti

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.2.6	49739	20.99.186.246	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:52 UTC	1946	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=353694&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20231005T125050Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=241e399ec1cf4b0e8e3d3b0420df9b75&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=392&metered=false&nettype=ethernet&npid=sc-353694&oemName=lfbati%2C%20Inc.&oemid=Public&ossku=Professional&scmid=Public&smBiosDm=lfbati20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=392&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=2 HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: pod=5&chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: q+PFIOArkUCVNW6i.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2023-10-05 12:50:52 UTC	1953	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 167 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"DcoPlusDebug":"Status: Ok"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: G3gpPdgTKGyLBluXoStsXCHF2cUtCqfQwfctdARjrEMq5OnlmD2ZFyl01GDQA53QfeTC14KNn++bNUtNyT/AeYSxc1GGxtXvjv3XgmzYEpgo5PNkFyTNBfuLbqgwRta0eo+RSt4jLIEm4zrdmvHXqXOv6Lt/U3xUdVgDrWB0bWDn08bbQA+vagLw2E3T3h0+tJGsb3tjLAGWZH2K6lF2lEtAfIEGgmHggX2yfwGWGMtBmwC+rWlFwgY5uG+quUS6VSAKvUW7rEz7swYYVReNAYyjF1zVjume5TzdMp60EG4lBJBPZ0N7UESTH7UVuC3Rg+A+xP9QMxtr6A//zUG4IA== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Thu, 05 Oct 2023 12:50:52 GMT Connection: close
2023-10-05 12:50:52 UTC	1954	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 32 30 34 30 2c 22 6d 73 67 22 3a 22 44 65 6d 61 6e 64 20 73 6f 75 72 63 65 20 72 65 74 75 72 6e 73 20 65 72 72 6f 72 20 28 4e 61 6d 65 3a 20 47 4e 5f 70 73 2c 20 45 72 72 6f 72 3a 20 4e 6f 20 65 6c 69 67 69 62 6c 65 20 63 6f 6e 74 65 6e 74 2e 29 2e 22 7d 5d 2c 22 72 65 66 72 65 73 68 74 69 6d 65 22 3a 22 32 30 32 33 2d 31 30 2d 30 35 54 31 36 3a 35 30 3a 35 32 22 7d 7d Data Ascii: {"batchrsp":{"ver":"1.0","errors":[{"code":2040,"msg":"Demand source returns error (Name: GN_ps, Error: No eligible content.)."}],"refreshtime":"2023-10-05T16:50:52"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.2.6	49741	20.99.186.246	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:52 UTC	1948	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338388&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20231005T125050Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=9b028615a96e40839bee1502a0e350b3&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=392&metered=false&nettype=ethernet&npid=sc-338388&oemName=lfbati%2C%20Inc.&oemid=Public&ossku=Professional&rver=2&scmid=Public&smBiosDm=lfbati20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=392&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=2 HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: q+PFIOArkUCVNW6i.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2023-10-05 12:50:52 UTC	1963	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 3686 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [] X-ARC-SIG: FYe+vS+ZoppA0lhnL95aVVWfcoxZNlfcGM5hY7LcVIIWk3w6ijBaAWbvsv4kuo2ET+zea/lcLCuuFnRYsSLqlCzYW5zzGzwO0K1L19ekWZxVbiav9/6ZbokUaJp5cdJczQzBGgvGia+Vv/Bz0p5W52RszYlfwu2xYTnCsFkPOaxvUAmrmn0qxzd99JkAcu5S/YJ82JHdeeZXZKZD8++/WETUVZGg/7B3t7UGgmULJRKBEhwdNHPaTZMV6599inJrdcor34jsOnreUuMc83lBO5w1jomFxCLMCCQDOquoHRjG4GMPfjf3yvw0DxCzCaD+NBbAWekbPBP7a2qC0Owr2g== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Thu, 05 Oct 2023 12:50:51 GMT Connection: close
2023-10-05 12:50:52 UTC	1963	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 53 75 67 67 65 73 74 69 6f 6e 73 4f 6e 53 74 61 72 74 5c 22 2c 5c 22 70 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 7d 2c 5c 22 70 72 6f 70 65 72 74 69 65 73 5c 22 3a 7b 7d 2c 5c 22 74 72 61 63 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"name\":\"SuggestionsOnStart\",\"propertyManifest\":{},\"properties\":{},\"trac

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.2.6	49740	20.99.186.246	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:52 UTC	1951	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=353698&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20231005T125050Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=089dd322a9184aefbdc246e7567212df&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&currsel=137271744000000000&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=392&metered=false&nettype=ethernet&npid=sc-353698&oemName=lfbati%2C%20Inc.&oemid=Public&ossku=Professional&scmid=Public&smBiosDm=lfbati20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=392&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=2 HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: cid=128000000001627409&chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=EwDYAppeBAAU3UbneMRE5bLY1G/PiHS+AMlEaf4AAazgV+ugFJg1TcOpwYrNjs+KJ5KTKloVZg0aUKGlvsFSwStPgwi4aR8Z/EvbuQZ+0B16Z19IWWYnEcRmWhLbnEdOSWS7PNaEJjwBiXd5AprAB6uEv5/AUQYQNR9FaREVyJpssYEqiz0m4LvEDEb8/KfHltAoZZEpdzZ02BTQjip0Jrfwh2holJdty+bIHO8yEwevqwYqgKyhCPnIzpx/fN18r1LFYVQaLurKKbMBHdogho0pSv+8OO+JR20Top4lFjApxsQgYWMk2jy9pK9GChWdovKR0qt4Cy+Twz3y7TW7+VwT7Qk2OxLsb9ffcdZW7vfqcODYBOdw7muCCx9NCWYDZgAACIa2AvI60E7JqAEnvx2uxAJ1D1+zRHcbQnAtDfu87Rx5z5waF2IkJlNDHxY4JTDvWrpXnKULX28v/fo9nj5rAgg5sfP9DsQBCxv393WF5KlYLOTvrb4v/fznjphd6dWahjAtFcVMGOsnN/SLwUwmYK/UogM/ygaCM7dw2IYFU/pXvacMx79lhVIea4o8x359cK7gB7d6d3rF3kG8VgsX7G3k+gP5X6g8wh4Yr9ZVVu+ycDLASnuzJb6i20cEngsX+58GBG1lAceIX961dEyppsI79xYJE+XGo+p3b6hozWZvQOVRvoTzu1bcGvaEZ6mPwQ39ZcKFu5quWF5qCTtNj/9pqHSXHYzDOZhZDeJ7uDanNEi2gQIsnS25EK3BInrIUfriUGhjKZ51fptTiae3qmU6wHnLB9FvXm1ECsMye1Pk5HvztUROgDQslh0yuhQ3xvQEQOvgcGhthLa/WnCKaaSF1RLWYobL0UGydnTq0kohgy3RCu1SuyWtEiJmAVSm0KYHKesaL3nyy19LpQIQdubtPSRokV87jI3A018udAiREYXpM7bQK1i9voxAPA7bAkM12wE=&p= Cache-Control: no-cache MS-CV: q+PFIOArkUCVNW6i.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2023-10-05 12:50:52 UTC	1958	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 3284 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"DcoPlusDebug":"Status: Ok"},{"RADIDS":"1,P425116215-T700333445-C128000000001627409+B+P10+S1"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: smmVtlFIUqxA2H72jBk+zBmy8lzb685h6T6iyLRNVMKiVDstZ883RycFDhNo4EFXThvS49HyXbCL/r3jJ193+/fRAk9o/MLIpP4dSEJYFsBp45wk/TV3EGSl3MI+vg3eHV/GgG3+Yfoee1Kt7XjB1YD7eR58Jai9zM+czxzAnrAyES+eOm61ej5bd0O9E6FOOi/D5W+aMnei0NByhLtrtEYzlM1nPLh6VYQqu+dA26rqhgKba4XJZtNGXNkqDSKghlggJ+blIqkpqNdvb6X5LzVHWXj4DUxKJC9Ngvj9ffbYw7dxileWbGev8PbNu7R9VbFvaBF9YUjdw2qJ31xtgA== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Thu, 05 Oct 2023 12:50:51 GMT Connection: close
2023-10-05 12:50:52 UTC	1959	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6e 6f 4f 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 61 63 74 69 6f 6e 5c 22 7d 7d 2c 5c 22 69 74 65 6d 73 5c 22 3a 5b 7b 5c 22 70 72 6f 70 65 72 74 69 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"noOp\":{\"type\":\"action\"}},\"items\":[{\"properti

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.2.6	49743	44.239.32.243	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:53 UTC	1967	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-AAF-GTM/adrum HTTP/1.1 Host: col.eum-appdynamics.com Connection: keep-alive Content-Length: 2550 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://survey3.medallia.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://survey3.medallia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-10-05 12:50:53 UTC	1968	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 33 2e 33 2e 30 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 30 22 2c 22 65 74 22 3a 30 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 3f 32 22 2c 22 74 73 22 3a 31 36 39 36 35 31 30 32 35 30 30 33 30 2c 22 75 64 22 3a 7b 22 56 65 72 73 69 6f 6e 22 3a 22 56 37 22 2c 22 56 37 56 65 72 73 69 6f 6e 22 3a 22 36 2e 32 31 2e 31 33 22 2c 22 56 37 4d 69 6c 65 73 74 6f 6e 65 22 3a 22 6c 65 67 61 63 79 22 2c 22 53 75 72 76 65 79 49 64 22 3a 22 65 68 6e 6d 37 64 37 37 36 34 7a 72 72 66 72 73 66 79 62 39 22 2c 22 53 70 65 63 49 64 22 3a 22 31 35 36 31 2d 66 69 73 2d 33 31 31 39 22 2c 22 43 6c 69 65 6e 74 49 64 22 3a 22 31 35 36 31 2d 35 33 22 2c 22 43 6f 6d 70 61 6e 79 4e 61 6d 65 22 3a 22 69 73 Data Ascii: {"vr":"4.3.3.0","dt":"R","rg":"0","es":[{"eg":"0","et":0,"eu":"0://1/?2","ts":1696510250030,"ud":{"Version":"V7","V7Version":"6.21.13","V7Milestone":"legacy","SurveyId":"ehnm7d7764zrrfrsfyb9","SpecId":"1561-fis-3119","ClientId":"1561-53","CompanyName":"is

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	44.239.32.243	443	192.168.2.6	49743	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:53 UTC	1970	IN	HTTP/1.1 200 OK Date: Thu, 05 Oct 2023 12:50:53 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:29\|g:dc92f56f-5ed0-4984-850e-2081d249535c; Path=/; Expires=Thu, 05-Oct-2023 12:51:23 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:29\|g:dc92f56f-5ed0-4984-850e-2081d249535c\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 05-Oct-2023 12:51:23 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 05-Oct-2023 12:51:23 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:29\|i:559461; Path=/; Expires=Thu, 05-Oct-2023 12:51:23 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:29\|i:559461\|e:11; Path=/; Expires=Thu, 05-Oct-2023 12:51:23 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2023-10-05 12:50:53 UTC	1971	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
57	192.168.2.6	49744	52.39.244.39	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:53 UTC	1971	OUT	GET /eumcollector/beacons/browser/v1/AD-AAB-AAF-GTM/adrum HTTP/1.1 Host: col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:64b34f14-9cf5-49c3-82ad-f5521345a324\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:4

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
58	52.39.244.39	443	192.168.2.6	49744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:54 UTC	1972	IN	HTTP/1.1 200 OK Date: Thu, 05 Oct 2023 12:50:54 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:64b34f14-9cf5-49c3-82ad-f5521345a324\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:4; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:80b2d527-383d-45f5-9fe6-f97e1af85a5e; Path=/; Expires=Thu, 05-Oct-2023 12:51:24 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:80b2d527-383d-45f5-9fe6-f97e1af85a5e\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 05-Oct-2023 12:51:24 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 05-Oct-2023 12:51:24 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:559461; Path=/; Expires=Thu, 05-Oct-2023 12:51:24 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:4; Path=/; Expires=Thu, 05-Oct-2023 12:51:24 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2023-10-05 12:50:54 UTC	1973	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
59	192.168.2.6	49745	173.222.162.50	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:54 UTC	1973	OUT	GET /th?id=OADD2.10239351464292_1JPZ65R3NZ7M76CGN&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Connection: Keep-Alive
2023-10-05 12:50:54 UTC	1973	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Type: image/png Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Content-Length: 986 Date: Thu, 05 Oct 2023 12:50:54 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.32a6dc17.1696510254.1daa3101
2023-10-05 12:50:54 UTC	1974	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 6f 49 44 41 54 48 4b 8d 96 4d 48 94 51 14 86 47 fb a7 82 20 6c 5a 4c 0d 38 53 ea 8c 33 2a f4 43 8b 8a fe 56 15 61 11 11 41 51 8b 6a 51 14 6d 5a d5 22 22 c8 b2 08 5a 04 41 10 08 86 50 8b a2 55 16 44 2d 84 8c 6c 6b a1 fd 61 98 25 11 81 39 e3 68 cf 7b 3b f7 e3 1b 1d cd 03 c7 7b ee 3d ef 79 cf b9 e7 de 3b 9f 91 c9 24 91 48 2c ab ad ad 3d 92 c9 64 ee a3 6f d0 3e f4 67 36 9b fd 81 be c3 7e 81 bf 89 71 43 3c 1e 9f 6b 61 d3 93 ca ca ca 25 04 5e 42 3b 20 1b ac af af 1f 43 0b d8 85 ba ba ba 42 43 43 c3 28 e3 08 Data Ascii: PNGIHDRw=sRGBgAMAapHYs~oIDATHKMHQG lZL8S3*CVaAQjQmZ""ZAPUD-lka%9h{;{=y;$H,=do>g6~qC<ka%^B; CBCC(

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.6	49716	146.75.93.230	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:35 UTC	44	OUT	GET /bf462afe26a7d27226f89ff85ee31dd12c9d10ed HTTP/1.1 Host: global.cdn.survey.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://survey3.medallia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
60	192.168.2.6	49735	147.75.243.92	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:51:00 UTC	1975	OUT	GET /?ehnm7d7764zrrfrsfyb9&reject=cancel HTTP/1.1 Host: survey3.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_tvswfz3.nfebmmjb.dpn=14b5a3d946c40ade39f765eb549522cee1cb1b6a69b13dc600a8f7ff2dc131b31f1bf447

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
61	147.75.243.92	443	192.168.2.6	49735	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:51:01 UTC	1976	IN	HTTP/1.1 200 OK Pragma: no-cache token Expires: Mon, 03 Jul 2001 09:00:00 GMT Cache-Control: private, no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Content-Type: text/html;charset=utf-8 Vary: Accept-Language Vary: Accept-Encoding, User-Agent Transfer-Encoding: chunked Server: Jetty(9.3.25.v20180904)
2023-10-05 12:51:01 UTC	1976	IN	Data Raw: 38 30 30 30 0d 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 77 69 6e 64 6f 77 2e 6c 6f 61 64 69 6e 67 53 74 61 72 74 54 69 6d 65 20 3d 20 44 61 74 65 2e 6e 6f 77 28 29 3b 0a 09 09 77 69 6e 64 6f 77 5b 27 61 64 72 75 6d 2d 73 74 61 72 74 2d 74 69 6d 65 27 5d 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 0a 09 09 77 69 6e 64 6f 77 2e 41 50 50 5f 44 59 4e 41 4d 49 43 53 20 3d 20 7b 0a 09 09 09 75 73 65 72 44 61 74 61 3a 20 7b 7d 2c 0a 09 09 09 75 73 65 72 44 61 74 61 4c 6f 6e 67 3a 20 7b 7d 2c 0a 09 09 09 75 73 65 72 44 61 74 61 44 6f 75 62 6c 65 3a Data Ascii: 8000<!doctype html><html lang="en"><head><script type="text/javascript">window.loadingStartTime = Date.now();window['adrum-start-time'] = new Date().getTime();window.APP_DYNAMICS = {userData: {},userDataLong: {},userDataDouble:
2023-10-05 12:51:01 UTC	1983	IN	Data Raw: 43 77 63 41 42 77 41 4f 51 41 39 41 41 41 48 2f 34 41 44 67 6f 4f 45 68 59 61 44 42 56 59 64 48 56 55 41 67 6f 73 6a 52 42 47 48 6c 4a 57 57 68 69 39 57 48 35 65 45 56 51 6d 63 6f 4a 5a 45 56 59 5a 53 56 36 63 6f 70 31 63 64 6d 34 51 6a 42 51 47 68 73 6b 53 74 41 31 52 57 45 51 4b 67 55 6f 36 43 48 30 53 79 6c 79 69 31 55 70 50 42 41 77 45 46 48 59 4e 56 4b 4d 65 47 56 6f 4e 53 7a 35 6a 52 67 69 50 55 41 79 39 54 6a 79 2f 5a 6c 78 38 46 78 37 53 43 31 74 2b 55 43 5a 73 41 34 71 47 66 74 75 65 63 42 77 76 77 39 4a 55 42 38 36 44 73 39 63 66 72 6c 51 57 4f 2b 50 61 42 57 67 41 41 67 4c 64 44 6d 78 62 45 45 67 67 71 77 41 63 41 55 78 61 36 73 6e 57 41 6f 61 77 49 42 63 30 56 63 6d 63 78 6c 43 59 41 78 67 53 52 36 6e 6a 73 48 67 41 4f 67 36 36 51 70 50 62 43 Data Ascii: CwcABwAOQA9AAAH/4ADgoOEhYaDBVYdHVUAgosjRBGHlJWWhi9WH5eEVQmcoJZEVYZSV6cop1cdm4QjBQGhskStA1RWEQKgUo6CH0Sylyi1UpPBAwEFHYNVKMeGVoNSz5jRgiPUAy9Tjy/Zlx8Fx7SC1t+UCZsA4qGftuecBwvw9JUB86Ds9cfrlQWO+PaBWgAAgLdDmxbEEggqwAcAUxa6snWAoawIBc0VcmcxlCYAxgSR6njsHgAOg66QpPbC
2023-10-05 12:51:01 UTC	1990	IN	Data Raw: 62 71 47 6d 64 67 65 68 77 5a 74 58 41 4d 79 2b 67 2b 72 32 33 64 73 54 73 46 39 51 68 6d 6b 4b 37 59 73 54 5a 56 71 65 69 2f 4f 69 57 70 75 33 57 44 79 34 54 41 47 63 41 61 7a 77 4a 47 43 4a 6e 2f 6e 61 4a 57 63 76 4c 30 2b 52 33 42 4a 51 62 52 67 53 74 63 70 38 6c 38 4e 68 67 79 33 62 70 47 5a 77 4f 37 4e 4e 63 7a 78 73 6e 4c 48 59 41 61 57 78 35 4d 67 4f 6c 43 54 65 79 68 4c 59 42 68 55 5a 35 4b 39 6d 71 6c 71 35 6f 74 65 73 74 4d 31 6c 7a 7a 2b 6c 30 68 56 56 78 6f 30 42 6b 49 52 48 47 67 42 38 57 43 41 41 49 66 6b 45 42 51 51 41 42 41 41 73 49 67 41 63 41 44 63 41 50 51 41 41 42 2f 2b 41 41 6f 4b 44 68 49 57 43 42 7a 63 78 52 57 70 71 49 51 41 41 6a 44 45 33 46 67 47 47 6c 70 65 59 6c 68 5a 46 6a 6f 2b 65 6e 36 41 6d 52 51 65 5a 70 61 55 78 4b 61 46 Data Ascii: bqGmdgehwZtXAMy+g+r23dsTsF9QhmkK7YsTZVqei/OiWpu3WDy4TAGcAazwJGCJn/naJWcvL0+R3BJQbRgStcp8l8Nhgy3bpGZwO7NNczxsnLHYAaWx5MgOlCTeyhLYBhUZ5K9mqlq5otestM1lzz+l0hVVxo0BkIRHGgB8WCAAIfkEBQQABAAsIgAcADcAPQAAB/+AAoKDhIWCBzcxRWpqIQAAjDE3FgGGlpeYlhZFjo+en6AmRQeZpaUxKaF
2023-10-05 12:51:02 UTC	1992	IN	Data Raw: 4d 6b 2f 66 66 46 79 64 4f 69 4a 42 67 51 49 74 59 6a 6d 43 31 77 68 59 49 41 43 48 35 42 41 55 45 41 41 51 41 4c 42 77 41 48 41 41 39 41 44 30 41 41 41 66 2f 67 41 53 43 67 34 53 46 68 6f 4d 43 69 51 4d 68 68 41 39 49 42 69 6f 2b 68 35 4f 55 6c 5a 57 4a 6d 41 49 44 6c 53 45 73 4a 35 61 67 6f 59 57 5a 69 52 47 43 6d 77 51 59 52 34 79 45 44 4a 47 69 73 4a 53 5a 6c 67 47 70 44 49 4d 66 42 72 57 78 76 4c 32 43 41 68 46 49 75 42 43 2b 78 62 77 2b 47 49 4d 73 78 73 79 69 45 36 77 4d 70 73 33 54 6b 77 4c 55 31 35 59 52 43 4e 6a 63 68 71 7a 64 34 4b 77 46 34 4e 7a 66 35 4e 69 4d 74 2b 66 63 77 75 76 75 37 37 7a 6d 38 4d 33 4c 38 38 58 4c 48 2f 62 46 6b 67 54 6a 2b 72 31 48 43 4d 6a 37 46 34 6f 59 67 51 6b 45 34 36 56 4b 47 47 74 5a 51 49 61 69 2f 45 47 63 75 45 Data Ascii: Mk/ffFydOiJBgQItYjmC1whYIACH5BAUEAAQALBwAHAA9AD0AAAf/gASCg4SFhoMCiQMhhA9IBio+h5OUlZWJmAIDlSEsJ5agoYWZiRGCmwQYR4yEDJGisJSZlgGpDIMfBrWxvL2CAhFIuBC+xbw+GIMsxsyiE6wMps3TkwLU15YRCNjchqzd4KwF4Nzf5NiMt+fcwuvu77zm8M3L88XLH/bFkgTj+r1HCMj7F4oYgQkE46VKGGtZQIai/EGcuE
2023-10-05 12:51:02 UTC	1999	IN	Data Raw: 20 54 68 69 73 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 61 63 63 65 73 73 20 63 6f 64 65 2e 22 2c 22 4c 41 4e 44 49 4e 47 5f 50 41 47 45 5f 48 45 41 44 45 52 22 3a 22 57 65 6c 63 6f 6d 65 20 61 6e 64 20 74 68 61 6e 6b 20 79 6f 75 20 66 6f 72 20 74 61 6b 69 6e 67 20 74 68 69 73 20 73 75 72 76 65 79 20 6f 6e 6c 69 6e 65 2e 22 2c 22 4c 41 4e 44 49 4e 47 5f 50 41 47 45 5f 54 45 58 54 22 3a 22 50 6c 65 61 73 65 20 65 6e 74 65 72 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 20 69 6e 20 74 68 65 20 62 6f 78 20 62 65 6c 6f 77 2e 22 2c 22 4c 41 4e 44 49 4e 47 5f 50 41 47 45 5f 49 4e 56 49 54 41 54 49 4f 4e 5f 45 52 52 4f 52 22 3a 22 49 66 20 79 6f 75 20 64 69 64 20 6e 6f 74 20 73 74 61 79 20 61 74 20 43 69 6e 64 79 20 4b 69 65 66 61 74 20 6f 72 20 72 65 63 65 Data Ascii: This is not a valid access code.","LANDING_PAGE_HEADER":"Welcome and thank you for taking this survey online.","LANDING_PAGE_TEXT":"Please enter your password in the box below.","LANDING_PAGE_INVITATION_ERROR":"If you did not stay at Cindy Kiefat or rece
2023-10-05 12:51:02 UTC	2006	IN	Data Raw: 5f 53 45 52 56 49 43 45 5f 4c 41 42 45 4c 22 3a 22 53 65 72 76 69 63 65 22 2c 22 54 41 5f 56 41 4c 55 45 5f 4c 41 42 45 4c 22 3a 22 56 61 6c 75 65 22 2c 22 54 41 5f 53 4c 45 45 50 5f 51 55 41 4c 49 54 59 5f 4c 41 42 45 4c 22 3a 22 53 6c 65 65 70 20 51 75 61 6c 69 74 79 22 2c 22 54 41 5f 43 4c 45 41 4e 4c 49 4e 45 53 53 5f 4c 41 42 45 4c 22 3a 22 43 6c 65 61 6e 6c 69 6e 65 73 73 22 2c 22 54 41 5f 4c 4f 43 41 54 49 4f 4e 5f 4c 41 42 45 4c 22 3a 22 4c 6f 63 61 74 69 6f 6e 22 2c 22 54 41 5f 52 4f 4f 4d 53 5f 4c 41 42 45 4c 22 3a 22 52 6f 6f 6d 73 22 2c 22 54 41 5f 4c 45 47 41 4c 22 3a 22 49 20 63 6f 6e 66 69 72 6d 20 74 68 61 74 20 49 20 68 61 76 65 20 72 65 61 64 20 61 6e 64 20 61 67 72 65 65 20 74 6f 20 74 68 65 20 50 72 69 76 61 63 79 20 61 6e 64 20 49 6e Data Ascii: _SERVICE_LABEL":"Service","TA_VALUE_LABEL":"Value","TA_SLEEP_QUALITY_LABEL":"Sleep Quality","TA_CLEANLINESS_LABEL":"Cleanliness","TA_LOCATION_LABEL":"Location","TA_ROOMS_LABEL":"Rooms","TA_LEGAL":"I confirm that I have read and agree to the Privacy and In
2023-10-05 12:51:02 UTC	2008	IN	Data Raw: 52 5f 48 41 4c 46 5f 43 41 50 53 22 3a 22 50 6c 65 61 73 65 20 72 65 76 69 65 77 20 79 6f 75 72 20 75 73 65 20 6f 66 20 41 4c 4c 20 43 41 50 53 20 69 6e 20 79 6f 75 72 20 63 6f 6d 6d 65 6e 74 2e 22 2c 22 54 41 5f 45 52 52 4f 52 5f 52 45 50 45 41 54 45 44 5f 43 48 41 52 53 22 3a 22 59 6f 75 27 76 65 20 61 63 63 69 64 65 6e 74 61 6c 6c 79 20 72 65 70 65 61 74 65 64 20 73 6f 6d 65 20 6c 65 74 74 65 72 73 2f 63 68 61 72 61 63 74 65 72 73 2e 20 50 6c 65 61 73 65 20 64 65 6c 65 74 65 20 74 68 65 6d 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 22 54 41 5f 50 52 4f 4d 4f 54 45 5f 4c 45 47 45 4e 44 5f 31 22 3a 22 22 2c 22 54 41 5f 50 52 4f 4d 4f 54 45 5f 4c 45 47 45 4e 44 5f 32 22 3a 22 22 2c 22 54 41 5f 50 52 4f 4d 4f 54 45 5f 4c 45 47 45 4e 44 5f 33 22 3a Data Ascii: R_HALF_CAPS":"Please review your use of ALL CAPS in your comment.","TA_ERROR_REPEATED_CHARS":"You've accidentally repeated some letters/characters. Please delete them and try again.","TA_PROMOTE_LEGEND_1":"","TA_PROMOTE_LEGEND_2":"","TA_PROMOTE_LEGEND_3":
2023-10-05 12:51:02 UTC	2008	IN	Data Raw: 0d 0a 31 39 39 39 0d 0a 22 3a 22 61 6e 64 20 73 75 62 6d 69 74 20 73 75 72 76 65 79 22 2c 22 42 41 5a 41 41 52 5f 56 4f 49 43 45 5f 4e 45 58 54 22 3a 22 61 6e 64 20 63 6f 6e 74 69 6e 75 65 22 2c 22 42 41 5a 41 41 52 5f 56 4f 49 43 45 5f 53 4b 49 50 5f 53 54 45 50 22 3a 22 53 6b 69 70 20 54 68 69 73 20 53 74 65 70 22 2c 22 45 4d 41 49 4c 5f 49 53 5f 49 4e 56 41 4c 49 44 22 3a 22 49 6e 76 61 6c 69 64 20 45 6d 61 69 6c 22 2c 22 49 4e 54 45 47 45 52 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 46 41 49 4c 45 44 22 3a 22 54 68 65 20 69 6e 70 75 74 20 6d 75 73 74 20 62 65 20 61 6e 20 69 6e 74 65 67 65 72 20 76 61 6c 75 65 22 2c 22 46 49 4e 44 5f 4f 54 48 45 52 5f 4c 4f 43 41 54 49 4f 4e 53 22 3a 22 46 69 6e 64 20 6f 74 68 65 72 20 6c 6f 63 61 74 69 6f 6e 73 22 2c 22 41 Data Ascii: 1999":"and submit survey","BAZAAR_VOICE_NEXT":"and continue","BAZAAR_VOICE_SKIP_STEP":"Skip This Step","EMAIL_IS_INVALID":"Invalid Email","INTEGER_VALIDATION_FAILED":"The input must be an integer value","FIND_OTHER_LOCATIONS":"Find other locations","A
2023-10-05 12:51:02 UTC	2014	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
62	192.168.2.6	49747	44.239.32.243	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:51:04 UTC	2014	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-AAF-GTM/adrum HTTP/1.1 Host: col.eum-appdynamics.com Connection: keep-alive Content-Length: 2562 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://survey3.medallia.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://survey3.medallia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-10-05 12:51:04 UTC	2015	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 33 2e 33 2e 30 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 30 22 2c 22 65 74 22 3a 30 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 3f 32 22 2c 22 74 73 22 3a 31 36 39 36 35 31 30 32 36 30 30 38 33 2c 22 75 64 22 3a 7b 22 56 65 72 73 69 6f 6e 22 3a 22 56 37 22 2c 22 56 37 56 65 72 73 69 6f 6e 22 3a 22 36 2e 32 31 2e 31 33 22 2c 22 56 37 4d 69 6c 65 73 74 6f 6e 65 22 3a 22 6c 65 67 61 63 79 22 2c 22 53 75 72 76 65 79 49 64 22 3a 22 65 68 6e 6d 37 64 37 37 36 34 7a 72 72 66 72 73 66 79 62 39 22 2c 22 53 70 65 63 49 64 22 3a 22 31 35 36 31 2d 66 69 73 2d 33 31 31 39 22 2c 22 43 6c 69 65 6e 74 49 64 22 3a 22 31 35 36 31 2d 35 33 22 2c 22 43 6f 6d 70 61 6e 79 4e 61 6d 65 22 3a 22 69 73 Data Ascii: {"vr":"4.3.3.0","dt":"R","rg":"0","es":[{"eg":"0","et":0,"eu":"0://1/?2","ts":1696510260083,"ud":{"Version":"V7","V7Version":"6.21.13","V7Milestone":"legacy","SurveyId":"ehnm7d7764zrrfrsfyb9","SpecId":"1561-fis-3119","ClientId":"1561-53","CompanyName":"is

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
63	192.168.2.6	49746	147.75.243.92	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:51:04 UTC	2018	OUT	GET /?ehnm7d7764zrrfrsfyb9&reject=confirm HTTP/1.1 Host: survey3.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NSC_tvswfz3.nfebmmjb.dpn=14b5a3d946c40ade39f765eb549522cee1cb1b6a69b13dc600a8f7ff2dc131b31f1bf447

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
64	44.239.32.243	443	192.168.2.6	49747	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:51:04 UTC	2018	IN	HTTP/1.1 200 OK Date: Thu, 05 Oct 2023 12:51:04 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:29\|g:758d961a-23bf-4c19-9552-538ed0321f55; Path=/; Expires=Thu, 05-Oct-2023 12:51:34 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:29\|g:758d961a-23bf-4c19-9552-538ed0321f55\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 05-Oct-2023 12:51:34 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 05-Oct-2023 12:51:34 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:29\|i:559461; Path=/; Expires=Thu, 05-Oct-2023 12:51:34 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:29\|i:559461\|e:8; Path=/; Expires=Thu, 05-Oct-2023 12:51:34 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2023-10-05 12:51:04 UTC	2019	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
65	147.75.243.92	443	192.168.2.6	49746	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:51:05 UTC	2019	IN	HTTP/1.1 200 OK Pragma: no-cache token Expires: Mon, 03 Jul 2001 09:00:00 GMT Cache-Control: private, no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Content-Type: text/html;charset=utf-8 Vary: Accept-Language Vary: Accept-Encoding, User-Agent Transfer-Encoding: chunked Server: Jetty(9.3.25.v20180904)
2023-10-05 12:51:05 UTC	2020	IN	Data Raw: 38 30 30 30 0d 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 77 69 6e 64 6f 77 2e 6c 6f 61 64 69 6e 67 53 74 61 72 74 54 69 6d 65 20 3d 20 44 61 74 65 2e 6e 6f 77 28 29 3b 0a 09 09 77 69 6e 64 6f 77 5b 27 61 64 72 75 6d 2d 73 74 61 72 74 2d 74 69 6d 65 27 5d 20 3d 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 0a 09 09 77 69 6e 64 6f 77 2e 41 50 50 5f 44 59 4e 41 4d 49 43 53 20 3d 20 7b 0a 09 09 09 75 73 65 72 44 61 74 61 3a 20 7b 7d 2c 0a 09 09 09 75 73 65 72 44 61 74 61 4c 6f 6e 67 3a 20 7b 7d 2c 0a 09 09 09 75 73 65 72 44 61 74 61 44 6f 75 62 6c 65 3a Data Ascii: 8000<!doctype html><html lang="en"><head><script type="text/javascript">window.loadingStartTime = Date.now();window['adrum-start-time'] = new Date().getTime();window.APP_DYNAMICS = {userData: {},userDataLong: {},userDataDouble:
2023-10-05 12:51:05 UTC	2027	IN	Data Raw: 43 77 63 41 42 77 41 4f 51 41 39 41 41 41 48 2f 34 41 44 67 6f 4f 45 68 59 61 44 42 56 59 64 48 56 55 41 67 6f 73 6a 52 42 47 48 6c 4a 57 57 68 69 39 57 48 35 65 45 56 51 6d 63 6f 4a 5a 45 56 59 5a 53 56 36 63 6f 70 31 63 64 6d 34 51 6a 42 51 47 68 73 6b 53 74 41 31 52 57 45 51 4b 67 55 6f 36 43 48 30 53 79 6c 79 69 31 55 70 50 42 41 77 45 46 48 59 4e 56 4b 4d 65 47 56 6f 4e 53 7a 35 6a 52 67 69 50 55 41 79 39 54 6a 79 2f 5a 6c 78 38 46 78 37 53 43 31 74 2b 55 43 5a 73 41 34 71 47 66 74 75 65 63 42 77 76 77 39 4a 55 42 38 36 44 73 39 63 66 72 6c 51 57 4f 2b 50 61 42 57 67 41 41 67 4c 64 44 6d 78 62 45 45 67 67 71 77 41 63 41 55 78 61 36 73 6e 57 41 6f 61 77 49 42 63 30 56 63 6d 63 78 6c 43 59 41 78 67 53 52 36 6e 6a 73 48 67 41 4f 67 36 36 51 70 50 62 43 Data Ascii: CwcABwAOQA9AAAH/4ADgoOEhYaDBVYdHVUAgosjRBGHlJWWhi9WH5eEVQmcoJZEVYZSV6cop1cdm4QjBQGhskStA1RWEQKgUo6CH0Sylyi1UpPBAwEFHYNVKMeGVoNSz5jRgiPUAy9Tjy/Zlx8Fx7SC1t+UCZsA4qGftuecBwvw9JUB86Ds9cfrlQWO+PaBWgAAgLdDmxbEEggqwAcAUxa6snWAoawIBc0VcmcxlCYAxgSR6njsHgAOg66QpPbC
2023-10-05 12:51:05 UTC	2034	IN	Data Raw: 62 71 47 6d 64 67 65 68 77 5a 74 58 41 4d 79 2b 67 2b 72 32 33 64 73 54 73 46 39 51 68 6d 6b 4b 37 59 73 54 5a 56 71 65 69 2f 4f 69 57 70 75 33 57 44 79 34 54 41 47 63 41 61 7a 77 4a 47 43 4a 6e 2f 6e 61 4a 57 63 76 4c 30 2b 52 33 42 4a 51 62 52 67 53 74 63 70 38 6c 38 4e 68 67 79 33 62 70 47 5a 77 4f 37 4e 4e 63 7a 78 73 6e 4c 48 59 41 61 57 78 35 4d 67 4f 6c 43 54 65 79 68 4c 59 42 68 55 5a 35 4b 39 6d 71 6c 71 35 6f 74 65 73 74 4d 31 6c 7a 7a 2b 6c 30 68 56 56 78 6f 30 42 6b 49 52 48 47 67 42 38 57 43 41 41 49 66 6b 45 42 51 51 41 42 41 41 73 49 67 41 63 41 44 63 41 50 51 41 41 42 2f 2b 41 41 6f 4b 44 68 49 57 43 42 7a 63 78 52 57 70 71 49 51 41 41 6a 44 45 33 46 67 47 47 6c 70 65 59 6c 68 5a 46 6a 6f 2b 65 6e 36 41 6d 52 51 65 5a 70 61 55 78 4b 61 46 Data Ascii: bqGmdgehwZtXAMy+g+r23dsTsF9QhmkK7YsTZVqei/OiWpu3WDy4TAGcAazwJGCJn/naJWcvL0+R3BJQbRgStcp8l8Nhgy3bpGZwO7NNczxsnLHYAaWx5MgOlCTeyhLYBhUZ5K9mqlq5otestM1lzz+l0hVVxo0BkIRHGgB8WCAAIfkEBQQABAAsIgAcADcAPQAAB/+AAoKDhIWCBzcxRWpqIQAAjDE3FgGGlpeYlhZFjo+en6AmRQeZpaUxKaF
2023-10-05 12:51:05 UTC	2041	IN	Data Raw: 6c 6f 62 61 6c 2e 63 64 6e 2e 73 75 72 76 65 79 2e 6d 65 64 61 6c 6c 69 61 2e 63 6f 6d 2f 33 65 61 62 32 38 32 31 30 66 34 35 35 30 30 65 37 63 62 37 33 64 65 30 35 65 38 33 30 62 38 32 64 62 36 65 31 35 31 63 22 2c 22 72 65 6c 22 3a 22 73 74 79 6c 65 73 68 65 65 74 22 2c 22 74 79 70 65 22 3a 22 74 65 78 74 2f 63 73 73 22 7d 5d 2c 22 61 63 74 69 6f 6e 22 3a 22 2f 3f 65 68 6e 6d 37 64 37 37 36 34 7a 72 72 66 72 73 66 79 62 39 22 2c 22 6c 61 6e 67 75 61 67 65 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 45 6e 67 6c 69 73 68 22 2c 22 61 63 74 69 76 65 22 3a 74 72 75 65 2c 22 6b 65 79 22 3a 22 65 6e 22 7d 5d 2c 22 6e 61 74 69 76 65 5f 6c 61 6e 67 5f 65 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 69 73 4d 6f 62 69 6c 65 22 3a 66 61 6c 73 65 2c 22 62 6f 64 79 22 3a Data Ascii: lobal.cdn.survey.medallia.com/3eab28210f45500e7cb73de05e830b82db6e151c","rel":"stylesheet","type":"text/css"}],"action":"/?ehnm7d7764zrrfrsfyb9","languages":[{"name":"English","active":true,"key":"en"}],"native_lang_enabled":false,"isMobile":false,"body":
2023-10-05 12:51:05 UTC	2049	IN	Data Raw: 69 73 6f 72 2e 5c 22 20 57 65 e2 80 99 6c 6c 20 74 61 6b 65 20 63 61 72 65 20 6f 66 20 74 68 65 20 72 65 73 74 21 5c 6e 3c 62 72 2f 3e 3c 62 72 2f 3e 3c 73 74 72 6f 6e 67 3e 48 6f 77 20 64 6f 65 73 20 69 74 20 77 6f 72 6b 3f 3c 2f 73 74 72 6f 6e 67 3e 3c 62 72 2f 3e 55 73 69 6e 67 20 79 6f 75 72 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2c 20 54 72 69 70 41 64 76 69 73 6f 72 20 77 69 6c 6c 20 73 65 65 20 69 66 20 79 6f 75 20 61 6c 72 65 61 64 79 20 68 61 76 65 20 61 20 6d 65 6d 62 65 72 20 61 63 63 6f 75 6e 74 20 77 69 74 68 20 74 68 65 6d 2e 20 49 66 20 6e 6f 74 2c 20 54 72 69 70 41 64 76 69 73 6f 72 20 77 69 6c 6c 20 63 72 65 61 74 65 20 61 20 6e 65 77 20 6d 65 6d 62 65 72 20 49 44 20 66 6f 72 20 79 6f 75 2c 20 75 73 69 6e 67 20 79 6f 75 72 20 66 69 72 Data Ascii: isor.\" Well take care of the rest!\n<br/><br/><strong>How does it work?</strong><br/>Using your email address, TripAdvisor will see if you already have a member account with them. If not, TripAdvisor will create a new member ID for you, using your fir
2023-10-05 12:51:05 UTC	2052	IN	Data Raw: 0d 0a 31 39 41 43 0d 0a 56 4f 49 43 45 5f 53 55 42 4d 49 54 5f 53 55 52 56 45 59 22 3a 22 61 6e 64 20 73 75 62 6d 69 74 20 73 75 72 76 65 79 22 2c 22 42 41 5a 41 41 52 5f 56 4f 49 43 45 5f 4e 45 58 54 22 3a 22 61 6e 64 20 63 6f 6e 74 69 6e 75 65 22 2c 22 42 41 5a 41 41 52 5f 56 4f 49 43 45 5f 53 4b 49 50 5f 53 54 45 50 22 3a 22 53 6b 69 70 20 54 68 69 73 20 53 74 65 70 22 2c 22 45 4d 41 49 4c 5f 49 53 5f 49 4e 56 41 4c 49 44 22 3a 22 49 6e 76 61 6c 69 64 20 45 6d 61 69 6c 22 2c 22 49 4e 54 45 47 45 52 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 46 41 49 4c 45 44 22 3a 22 54 68 65 20 69 6e 70 75 74 20 6d 75 73 74 20 62 65 20 61 6e 20 69 6e 74 65 67 65 72 20 76 61 6c 75 65 22 2c 22 46 49 4e 44 5f 4f 54 48 45 52 5f 4c 4f 43 41 54 49 4f 4e 53 22 3a 22 46 69 6e 64 20 Data Ascii: 19ACVOICE_SUBMIT_SURVEY":"and submit survey","BAZAAR_VOICE_NEXT":"and continue","BAZAAR_VOICE_SKIP_STEP":"Skip This Step","EMAIL_IS_INVALID":"Invalid Email","INTEGER_VALIDATION_FAILED":"The input must be an integer value","FIND_OTHER_LOCATIONS":"Find
2023-10-05 12:51:05 UTC	2059	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
66	192.168.2.6	49749	52.39.244.39	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:51:05 UTC	2027	OUT	GET /eumcollector/beacons/browser/v1/AD-AAB-AAF-GTM/adrum HTTP/1.1 Host: col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:80b2d527-383d-45f5-9fe6-f97e1af85a5e\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:4

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
67	52.39.244.39	443	192.168.2.6	49749	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:51:05 UTC	2059	IN	HTTP/1.1 200 OK Date: Thu, 05 Oct 2023 12:51:05 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:80b2d527-383d-45f5-9fe6-f97e1af85a5e\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:4; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:972c73e2-cf06-4d03-aac5-0a2ce5a285b8; Path=/; Expires=Thu, 05-Oct-2023 12:51:35 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:972c73e2-cf06-4d03-aac5-0a2ce5a285b8\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 05-Oct-2023 12:51:35 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 05-Oct-2023 12:51:35 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:559461; Path=/; Expires=Thu, 05-Oct-2023 12:51:35 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:5; Path=/; Expires=Thu, 05-Oct-2023 12:51:35 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2023-10-05 12:51:05 UTC	2060	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
68	192.168.2.6	49750	44.239.32.243	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:51:07 UTC	2060	OUT	POST /eumcollector/beacons/browser/v1/AD-AAB-AAF-GTM/adrum HTTP/1.1 Host: col.eum-appdynamics.com Connection: keep-alive Content-Length: 2557 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: text/plain Accept: / Origin: https://survey3.medallia.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://survey3.medallia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-10-05 12:51:07 UTC	2061	OUT	Data Raw: 7b 22 76 72 22 3a 22 34 2e 33 2e 33 2e 30 22 2c 22 64 74 22 3a 22 52 22 2c 22 72 67 22 3a 22 30 22 2c 22 65 73 22 3a 5b 7b 22 65 67 22 3a 22 30 22 2c 22 65 74 22 3a 30 2c 22 65 75 22 3a 22 30 3a 2f 2f 31 2f 3f 32 22 2c 22 74 73 22 3a 31 36 39 36 35 31 30 32 36 34 30 32 35 2c 22 75 64 22 3a 7b 22 56 65 72 73 69 6f 6e 22 3a 22 56 37 22 2c 22 56 37 56 65 72 73 69 6f 6e 22 3a 22 36 2e 32 31 2e 31 33 22 2c 22 56 37 4d 69 6c 65 73 74 6f 6e 65 22 3a 22 6c 65 67 61 63 79 22 2c 22 53 75 72 76 65 79 49 64 22 3a 22 65 68 6e 6d 37 64 37 37 36 34 7a 72 72 66 72 73 66 79 62 39 22 2c 22 53 70 65 63 49 64 22 3a 22 31 35 36 31 2d 66 69 73 2d 33 31 31 39 22 2c 22 43 6c 69 65 6e 74 49 64 22 3a 22 31 35 36 31 2d 35 33 22 2c 22 43 6f 6d 70 61 6e 79 4e 61 6d 65 22 3a 22 69 73 Data Ascii: {"vr":"4.3.3.0","dt":"R","rg":"0","es":[{"eg":"0","et":0,"eu":"0://1/?2","ts":1696510264025,"ud":{"Version":"V7","V7Version":"6.21.13","V7Milestone":"legacy","SurveyId":"ehnm7d7764zrrfrsfyb9","SpecId":"1561-fis-3119","ClientId":"1561-53","CompanyName":"is

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
69	44.239.32.243	443	192.168.2.6	49750	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:51:07 UTC	2063	IN	HTTP/1.1 200 OK Date: Thu, 05 Oct 2023 12:51:07 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:29\|g:5ecae9bd-ef92-4e69-9ef1-f3eb7cd7f6b9; Path=/; Expires=Thu, 05-Oct-2023 12:51:37 GMT; Max-Age=30 expires: 0 set-cookie: ADRUM_BTa=R:29\|g:5ecae9bd-ef92-4e69-9ef1-f3eb7cd7f6b9\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 05-Oct-2023 12:51:37 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 05-Oct-2023 12:51:37 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:29\|i:559461; Path=/; Expires=Thu, 05-Oct-2023 12:51:37 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:29\|i:559461\|e:5; Path=/; Expires=Thu, 05-Oct-2023 12:51:37 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2023-10-05 12:51:07 UTC	2064	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.6	49713	18.154.206.79	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:35 UTC	45	OUT	GET /react-surveys/6.21.7/main.css HTTP/1.1 Host: cdn.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://survey3.medallia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
70	192.168.2.6	49751	52.39.244.39	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:51:08 UTC	2064	OUT	GET /eumcollector/beacons/browser/v1/AD-AAB-AAF-GTM/adrum HTTP/1.1 Host: col.eum-appdynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SameSite=None; ADRUM_BTa=R:0\|g:972c73e2-cf06-4d03-aac5-0a2ce5a285b8\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:5

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
71	52.39.244.39	443	192.168.2.6	49751	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:51:08 UTC	2065	IN	HTTP/1.1 200 OK Date: Thu, 05 Oct 2023 12:51:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close set-cookie: ADRUM_BTa=R:0\|g:972c73e2-cf06-4d03-aac5-0a2ce5a285b8\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 expires: 0 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:5; Path=/; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0 set-cookie: ADRUM_BTa=R:0\|g:48974ac2-edc2-4dcd-b778-a32329c6617a; Path=/; Expires=Thu, 05-Oct-2023 12:51:38 GMT; Max-Age=30 set-cookie: ADRUM_BTa=R:0\|g:48974ac2-edc2-4dcd-b778-a32329c6617a\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; Path=/; Expires=Thu, 05-Oct-2023 12:51:38 GMT; Max-Age=30 set-cookie: SameSite=None; Path=/; Expires=Thu, 05-Oct-2023 12:51:38 GMT; Max-Age=30; Secure set-cookie: ADRUM_BT1=R:0\|i:559461; Path=/; Expires=Thu, 05-Oct-2023 12:51:38 GMT; Max-Age=30 set-cookie: ADRUM_BT1=R:0\|i:559461\|e:2; Path=/; Expires=Thu, 05-Oct-2023 12:51:38 GMT; Max-Age=30 cache-control: private, no-cache, no-store, must-revalidate, max-age=0, proxy-revalidate, s-maxage=0 pragma: no-cache vary: * x-content-type-options: nosniff strict-transport-security: max-age=31536010; includeSubDomains access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept x-envoy-upstream-service-time: 0 server: envoy
2023-10-05 12:51:08 UTC	2066	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
72	192.168.2.6	49755	20.99.185.48	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:51:27 UTC	2066	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=88000163&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20231005T125125Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=3a5f4860328c453686ea7848b9d7fdbe&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&currsel=137271744000000000&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=393&metered=false&nettype=ethernet&npid=sc-88000163&oemName=lfbati%2C%20Inc.&oemid=Public&ossku=Professional&sc-msa=7&scmid=Public&smBiosDm=lfbati20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=393&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=2 HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: cid=128000000001627409&chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: KShD8LsC1U6GXWP2.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2023-10-05 12:51:27 UTC	2078	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 3299 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"DcoPlusDebug":"Status: Ok"},{"RADIDS":"1,P425115820-T700333385-C128000000001627409+B+P20+S1"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: DE1WW158Ye2TO/0h555Ee8CYckurMO7gcAAWhUZr748kIGX1MZshOdXC9Z53I0DaXZcEUXdcLl3dKIx+rHQOCvxtAaSDcqEXcIQ1ZhdD4AkXj41TJL9zZqYmpP0h3exg9CiEn5YzGnmXW18ICHd65aSBF1+PMslnNG8NEEuutFcoUorlIKs3zU5LdXZiSKxOzyeg+8Ou2iHdAZLgKh5W6h3HZ1h3UuGYJnIvPzZ/67D4hrBg4N0QsiTelMBR6hUHaYtW7P7cbPFtUNsLRQl1mw/iVrmn2MEFr5Y4e3bB3va3dLJ2YkIUqWArMwZWjUjr/eaNUBL6yHDTd98f7mASwA== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Thu, 05 Oct 2023 12:51:26 GMT Connection: close
2023-10-05 12:51:27 UTC	2078	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6e 6f 4f 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 61 63 74 69 6f 6e 5c 22 7d 7d 2c 5c 22 69 74 65 6d 73 5c 22 3a 5b 7b 5c 22 70 72 6f 70 65 72 74 69 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"noOp\":{\"type\":\"action\"}},\"items\":[{\"properti

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
73	192.168.2.6	49756	20.99.185.48	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:51:27 UTC	2069	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=88000161&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20231005T125125Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=6c13354a03e74b458e09a863b75d488f&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&currsel=137271744000000000&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=393&metered=false&nettype=ethernet&npid=sc-88000161&oemName=lfbati%2C%20Inc.&oemid=Public&ossku=Professional&sc-msa=7&scmid=Public&smBiosDm=lfbati20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=393&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=2 HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: cid=128000000001627409&chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=EwDYAppeBAAU3UbneMRE5bLY1G/PiHS+AMlEaf4AAazgV+ugFJg1TcOpwYrNjs+KJ5KTKloVZg0aUKGlvsFSwStPgwi4aR8Z/EvbuQZ+0B16Z19IWWYnEcRmWhLbnEdOSWS7PNaEJjwBiXd5AprAB6uEv5/AUQYQNR9FaREVyJpssYEqiz0m4LvEDEb8/KfHltAoZZEpdzZ02BTQjip0Jrfwh2holJdty+bIHO8yEwevqwYqgKyhCPnIzpx/fN18r1LFYVQaLurKKbMBHdogho0pSv+8OO+JR20Top4lFjApxsQgYWMk2jy9pK9GChWdovKR0qt4Cy+Twz3y7TW7+VwT7Qk2OxLsb9ffcdZW7vfqcODYBOdw7muCCx9NCWYDZgAACIa2AvI60E7JqAEnvx2uxAJ1D1+zRHcbQnAtDfu87Rx5z5waF2IkJlNDHxY4JTDvWrpXnKULX28v/fo9nj5rAgg5sfP9DsQBCxv393WF5KlYLOTvrb4v/fznjphd6dWahjAtFcVMGOsnN/SLwUwmYK/UogM/ygaCM7dw2IYFU/pXvacMx79lhVIea4o8x359cK7gB7d6d3rF3kG8VgsX7G3k+gP5X6g8wh4Yr9ZVVu+ycDLASnuzJb6i20cEngsX+58GBG1lAceIX961dEyppsI79xYJE+XGo+p3b6hozWZvQOVRvoTzu1bcGvaEZ6mPwQ39ZcKFu5quWF5qCTtNj/9pqHSXHYzDOZhZDeJ7uDanNEi2gQIsnS25EK3BInrIUfriUGhjKZ51fptTiae3qmU6wHnLB9FvXm1ECsMye1Pk5HvztUROgDQslh0yuhQ3xvQEQOvgcGhthLa/WnCKaaSF1RLWYobL0UGydnTq0kohgy3RCu1SuyWtEiJmAVSm0KYHKesaL3nyy19LpQIQdubtPSRokV87jI3A018udAiREYXpM7bQK1i9voxAPA7bAkM12wE=&p= Cache-Control: no-cache MS-CV: KShD8LsC1U6GXWP2.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2023-10-05 12:51:27 UTC	2076	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 167 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"DcoPlusDebug":"Status: Ok"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: QVmElUx3wdSWp0bZy2Z2EHB0AZNTM86izxbRZA7Rz+WwUqhvgYf3piN4XPM/9Q484Ogq1ySaSFCalw7cRWybuWsXvVWzIuPkikvyq1/jmPo8qpQXrCocGGUVvt1R09j57GFQ/TwgBiTCj8Sh8oGlPxcRJjJZG1BtvP7cLp0FWOIEqGBDK6bUiwHctGZYFmxiZwrH6snDda30cRyF7UdjKbPaSgWe/O0IqB6oDOYR0p+NTg8ggsUxo56O7UBDtCAo49hIuT8AxCEz5idJk7DWI+SkMG9LHWdrrWMRucLv97dci7cAnC38SZNaX6w2eczJZMzESZN5+gdXzD/ojGBG+w== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Thu, 05 Oct 2023 12:51:27 GMT Connection: close
2023-10-05 12:51:27 UTC	2077	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 65 72 72 6f 72 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 32 30 34 30 2c 22 6d 73 67 22 3a 22 44 65 6d 61 6e 64 20 73 6f 75 72 63 65 20 72 65 74 75 72 6e 73 20 65 72 72 6f 72 20 28 4e 61 6d 65 3a 20 47 4e 5f 70 73 2c 20 45 72 72 6f 72 3a 20 4e 6f 20 65 6c 69 67 69 62 6c 65 20 63 6f 6e 74 65 6e 74 2e 29 2e 22 7d 5d 2c 22 72 65 66 72 65 73 68 74 69 6d 65 22 3a 22 32 30 32 33 2d 31 30 2d 30 35 54 31 36 3a 35 31 3a 32 37 22 7d 7d Data Ascii: {"batchrsp":{"ver":"1.0","errors":[{"code":2040,"msg":"Demand source returns error (Name: GN_ps, Error: No eligible content.)."}],"refreshtime":"2023-10-05T16:51:27"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
74	192.168.2.6	49754	20.99.185.48	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:51:27 UTC	2071	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=280810&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20231005T125125Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=f6698fbdf78b454b92b4d3be658ec98f&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&currsel=137271744000000000&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=393&metered=false&nettype=ethernet&npid=sc-280810&oemName=lfbati%2C%20Inc.&oemid=Public&ossku=Professional&sc-msa=7&scmid=Public&smBiosDm=lfbati20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=393&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=2 HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: cid=128000000001627409&chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=EwDYAppeBAAU3UbneMRE5bLY1G/PiHS+AMlEaf4AAazgV+ugFJg1TcOpwYrNjs+KJ5KTKloVZg0aUKGlvsFSwStPgwi4aR8Z/EvbuQZ+0B16Z19IWWYnEcRmWhLbnEdOSWS7PNaEJjwBiXd5AprAB6uEv5/AUQYQNR9FaREVyJpssYEqiz0m4LvEDEb8/KfHltAoZZEpdzZ02BTQjip0Jrfwh2holJdty+bIHO8yEwevqwYqgKyhCPnIzpx/fN18r1LFYVQaLurKKbMBHdogho0pSv+8OO+JR20Top4lFjApxsQgYWMk2jy9pK9GChWdovKR0qt4Cy+Twz3y7TW7+VwT7Qk2OxLsb9ffcdZW7vfqcODYBOdw7muCCx9NCWYDZgAACIa2AvI60E7JqAEnvx2uxAJ1D1+zRHcbQnAtDfu87Rx5z5waF2IkJlNDHxY4JTDvWrpXnKULX28v/fo9nj5rAgg5sfP9DsQBCxv393WF5KlYLOTvrb4v/fznjphd6dWahjAtFcVMGOsnN/SLwUwmYK/UogM/ygaCM7dw2IYFU/pXvacMx79lhVIea4o8x359cK7gB7d6d3rF3kG8VgsX7G3k+gP5X6g8wh4Yr9ZVVu+ycDLASnuzJb6i20cEngsX+58GBG1lAceIX961dEyppsI79xYJE+XGo+p3b6hozWZvQOVRvoTzu1bcGvaEZ6mPwQ39ZcKFu5quWF5qCTtNj/9pqHSXHYzDOZhZDeJ7uDanNEi2gQIsnS25EK3BInrIUfriUGhjKZ51fptTiae3qmU6wHnLB9FvXm1ECsMye1Pk5HvztUROgDQslh0yuhQ3xvQEQOvgcGhthLa/WnCKaaSF1RLWYobL0UGydnTq0kohgy3RCu1SuyWtEiJmAVSm0KYHKesaL3nyy19LpQIQdubtPSRokV87jI3A018udAiREYXpM7bQK1i9voxAPA7bAkM12wE=&p= Cache-Control: no-cache MS-CV: KShD8LsC1U6GXWP2.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2023-10-05 12:51:27 UTC	2082	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 3293 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"DcoPlusDebug":"Status: Ok"},{"RADIDS":"1,P425116121-T700333389-C128000000001627409+B+P20+S1"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: LFnrzDEE8soheYIGEjQBe33M19V8yRU1kGZx2I3ZXYRThUutjQjLtmn9eqQ3EA5aSPttPiAHJoeN4ViSaGNBcssVqRpLoXCL58xBGkiATEPWuqPdG2YnAwErpio8eODf40CTWOFpRxoFBRTJ4s06M+sY0WYanD7VXyNhIBMgBnol7tYmQuB4EXeVRxXPNdBvVTxCWkL0qXXpr7cy3ZL+fbLghQunMzyhjzohhHlBxkFwzwfQVp7rqoQ2iSEc5O3tfSkpMOvnY2+WLGog5cpnuytf9W6xv25PJ2TKNHIkJNa1xyYtMZ1Z0Hah4DRIHgTn8m4nBdIL/GUrwaB76kixOA== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Thu, 05 Oct 2023 12:51:26 GMT Connection: close
2023-10-05 12:51:27 UTC	2083	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6e 6f 4f 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 61 63 74 69 6f 6e 5c 22 7d 7d 2c 5c 22 69 74 65 6d 73 5c 22 3a 5b 7b 5c 22 70 72 6f 70 65 72 74 69 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"noOp\":{\"type\":\"action\"}},\"items\":[{\"properti

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
75	192.168.2.6	49753	20.99.185.48	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:51:27 UTC	2074	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=88000165&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20231005T125125Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=94a9b851d82d4903be330395133a0a7e&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&currsel=137271744000000000&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=393&metered=false&nettype=ethernet&npid=sc-88000165&oemName=lfbati%2C%20Inc.&oemid=Public&ossku=Professional&sc-msa=7&scmid=Public&smBiosDm=lfbati20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=393&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=2 HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: cid=128000000001627409&chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: KShD8LsC1U6GXWP2.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2023-10-05 12:51:27 UTC	2086	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 3299 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"DcoPlusDebug":"Status: Ok"},{"RADIDS":"1,P425116119-T700333391-C128000000001627409+B+P10+S1"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: AacC9OJBrnVeAIREi5SqW+d2C0bOv/eNrhIJy+JFkhZ0wukqhSFfEi8dZTJJSXuiJu1mqXjZ4WlzhB+36UJtULG783OmIWyV0qn5cnchMz5aMx0tTQTpUDAYBtZZIEZ7hFFd+17OFZDO59ZICmZgovmU/AY9SXvu9V2OJfnIKy2+7j/ec+Zn6Ib5yRBVD6mURzXAZgOioui3h5nun3J9NnoPVDjl+zAiog2hF0d4eF6J/qAugXNA6DP7jG9pHG6Tjoq2+hSg0MXKuoPan0UvjktGX+Zv30vXRIeRNAzki5xHP8nm0Cr+iIMXVnjbTk5SjnonTjOkYoA30xbSYrXcqQ== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Thu, 05 Oct 2023 12:51:27 GMT Connection: close
2023-10-05 12:51:27 UTC	2087	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6e 6f 4f 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 61 63 74 69 6f 6e 5c 22 7d 7d 2c 5c 22 69 74 65 6d 73 5c 22 3a 5b 7b 5c 22 70 72 6f 70 65 72 74 69 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"noOp\":{\"type\":\"action\"}},\"items\":[{\"properti

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
76	192.168.2.6	49757	13.107.21.200	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:51:28 UTC	2090	OUT	GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8uWGj9jcjogMKd2lkITar3jVUCUxS2wC8s-RSsvJ6O1nwm0KAeCnmG3HeqYeItlBjaz-Zbdg2hPqtBS-Im2FOFbBis81cI-tqKc1cnWgpjjHr7a8xdWYffNGudCdL6V7s3y8IDjgpTwMMI6V9cDrXEgGx98os1HFY2Vxi9VBvxQH2h5jA%26u%3DbXN4Ym94JTNhJTJmJTJmZ2FtZSUyZiUzZnByb2R1Y3RJRCUzZDlQTEtWU1dSMjk5RiUyNm9jaWQlM2RpbnBfcm1jX3hib19zdGFydF9wcmVpbnN0YWxsX2VuZ2FnZV9ib29zdA%26rlid%3D504d04393cbb1540e7fc61278d975d76&TIME=20231005T125125Z&CID=530628298&EID=530628298&tids=15000&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=1C68EF3770756D0BEE156834FFFFFFFF HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: g.bing.com Connection: Keep-Alive
2023-10-05 12:51:29 UTC	2091	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Set-Cookie: MUID=11F1293143EB6FAA36CF3A9042056E06; domain=.bing.com; expires=Tue, 29-Oct-2024 12:51:28 GMT; path=/; SameSite=None; Secure; Priority=High; Set-Cookie: MR=0; domain=g.bing.com; expires=Thu, 12-Oct-2023 12:51:28 GMT; path=/; SameSite=None; Secure; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 94A5DB395E294FC0AE3F47F08974430A Ref B: LAX311000112045 Ref C: 2023-10-05T12:51:28Z Date: Thu, 05 Oct 2023 12:51:28 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
77	192.168.2.6	49758	204.79.197.200	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:51:29 UTC	2092	OUT	GET /aes/c.gif?type=mv&reqver=1.0&rg=1ef1eaafcb974507ab33bd5ad445e4af&tids=15000&med=10&pubId=251978541&TIME=20231005T125125Z&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=1C68EF3770756D0BEE156834FFFFFFFF HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: www.bing.com Connection: Keep-Alive Cookie: MUID=11F1293143EB6FAA36CF3A9042056E06
2023-10-05 12:51:29 UTC	2092	IN	HTTP/1.1 200 OK Cache-Control: private,no-store Pragma: no-cache Vary: Origin P3P: CP=BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 6FBFACD356BE4DB09A3DD00A966CFAE2 Ref B: LAX311000113051 Ref C: 2023-10-05T12:51:29Z Set-Cookie: _EDGE_S=SID=2397D5003E1968673E11C6A13FF7699B; path=/; httponly; domain=bing.com Set-Cookie: MUIDB=11F1293143EB6FAA36CF3A9042056E06; path=/; httponly; expires=Tue, 29-Oct-2024 12:51:29 GMT Date: Thu, 05 Oct 2023 12:51:29 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
78	192.168.2.6	49759	13.107.21.200	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:51:30 UTC	2093	OUT	GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8uWGj9jcjogMKd2lkITar3jVUCUxS2wC8s-RSsvJ6O1nwm0KAeCnmG3HeqYeItlBjaz-Zbdg2hPqtBS-Im2FOFbBis81cI-tqKc1cnWgpjjHr7a8xdWYffNGudCdL6V7s3y8IDjgpTwMMI6V9cDrXEgGx98os1HFY2Vxi9VBvxQH2h5jA%26u%3DbXN4Ym94JTNhJTJmJTJmZ2FtZSUyZiUzZnByb2R1Y3RJRCUzZDlQTEtWU1dSMjk5RiUyNm9jaWQlM2RpbnBfcm1jX3hib19zdGFydF9wcmVpbnN0YWxsX2VuZ2FnZV9ib29zdA%26rlid%3D504d04393cbb1540e7fc61278d975d76&TIME=20231005T125125Z&CID=530628298&EID=&tids=15000&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=1C68EF3770756D0BEE156834FFFFFFFF HTTP/1.1 Accept-Encoding: gzip, deflate User-Agent: WindowsShellClient/9.0.40929.0 (Windows) Host: g.bing.com Connection: Keep-Alive Cookie: MUID=11F1293143EB6FAA36CF3A9042056E06; _EDGE_S=SID=2397D5003E1968673E11C6A13FF7699B; MR=0
2023-10-05 12:51:30 UTC	2094	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: E9B818519B0E42EFBB91F8BCCA237170 Ref B: LAX311000111051 Ref C: 2023-10-05T12:51:30Z Date: Thu, 05 Oct 2023 12:51:29 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
79	192.168.2.6	49765	20.99.186.246	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:52:02 UTC	2094	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=280811&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20231005T125200Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=43450346efac4a3682285b5190bbc070&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&currsel=137271744000000000&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=394&metered=false&nettype=ethernet&npid=sc-280811&oemName=VMware%2C%20Inc.&oemid=Public&ossku=Professional&sc-msa=7&scmid=Public&smBiosDm=VMware20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=394&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=2 HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: cid=128000000001627409&chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: Pl+SVmzxVEK1LAh+.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0 Host: arc.msn.com Connection: Keep-Alive
2023-10-05 12:52:02 UTC	2097	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 3293 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"DcoPlusDebug":"Status: Ok"},{"RADIDS":"1,P425116120-T700333386-C128000000001627409+B+P20+S1"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: dsgs/8xEh4b6Uwu9xIeVQIXg6sTzZAh6pW9y0W4sD2fCULoVDwpIO/XDyF2Z4FVuVh1z3NcnrU/1+rqIl9PxG5zFxnmceL4abvGOjvXfJhjAbu4RzpHxg33ItHoWT7ijR8HQoOkohgHVT9u+TyDySGpUh6ira/Fb3M920s8N+oVR4VwitPEksW6qQIvtj+dOGkDpu5VSAFwfkpVM34lbYKW39guVlJvDrqyPf4wbbeNUDlpX51m4e2rF7pD9myhlNp6UY4BxEtpCYWJOoG0BPFo4zKCT/Xda7vi8yQVRWSod4I4IGSo8ouoBcr9vlB5XsCsdDDUxjIJx11BZNzhT3Q== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Thu, 05 Oct 2023 12:52:01 GMT Connection: close
2023-10-05 12:52:02 UTC	2098	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6e 6f 4f 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 61 63 74 69 6f 6e 5c 22 7d 7d 2c 5c 22 69 74 65 6d 73 5c 22 3a 5b 7b 5c 22 70 72 6f 70 65 72 74 69 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"noOp\":{\"type\":\"action\"}},\"items\":[{\"properti

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.6	49711	18.154.206.79	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:35 UTC	45	OUT	GET /react-surveys/6.21.7/jquery-1.7.1.min.js HTTP/1.1 Host: cdn.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://survey3.medallia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.6	49714	18.154.206.79	443	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	kBytes transferred	Direction	Data
2023-10-05 12:50:35 UTC	46	OUT	GET /react-surveys/6.21.7/main.js HTTP/1.1 Host: cdn.medallia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://survey3.medallia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

Target ID:	0
Start time:	14:50:28
Start date:	05/10/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	14:50:31
Start date:	05/10/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 --field-trial-handle=2252,i,14294954126216412549,11794851394833694828,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:50:33
Start date:	05/10/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://survey3.medallia.com/?ehnm7d7764zrrfrsfyb9&reject=begin
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.134&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.134Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ehnm7d7764zrrfrsfyb9&reject=begin HTTP/1.1Host: survey3.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bf462afe26a7d27226f89ff85ee31dd12c9d10ed HTTP/1.1Host: global.cdn.survey.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://survey3.medallia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /react-surveys/6.21.7/main.css HTTP/1.1Host: cdn.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://survey3.medallia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /react-surveys/6.21.7/jquery-1.7.1.min.js HTTP/1.1Host: cdn.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://survey3.medallia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /react-surveys/6.21.7/main.js HTTP/1.1Host: cdn.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://survey3.medallia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /react-surveys/6.21.7/vendor.js HTTP/1.1Host: cdn.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://survey3.medallia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3eab28210f45500e7cb73de05e830b82db6e151c HTTP/1.1Host: global.cdn.survey.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://survey3.medallia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1Host: sea1.cdn.survey.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://survey3.medallia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /react-surveys/6.21.7/vendorPolyfill.js HTTP/1.1Host: cdn.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://survey3.medallia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9ed43e593744b02426d9306ce6f2df3ea9048253 HTTP/1.1Host: sea1.cdn.survey.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://survey3.medallia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/appdynamics/adrum/adrum.js HTTP/1.1Host: cdn.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://survey3.medallia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /15de41a42ce4f647a5d1c5e8ea29f1913d26d6b5 HTTP/1.1Host: global.cdn.survey.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://global.cdn.survey.medallia.com/3eab28210f45500e7cb73de05e830b82db6e151cAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/appdynamics/adrum-ext.2aed9d091ef08efa95822e864b4554d2.js HTTP/1.1Host: cdn.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://survey3.medallia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a938a40fb1e58749cdb6a74ad5e2a74452ead2f7 HTTP/1.1Host: sea1.cdn.survey.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://survey3.medallia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /15de41a42ce4f647a5d1c5e8ea29f1913d26d6b5 HTTP/1.1Host: global.cdn.survey.medallia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/appdynamics/adrum-xd.2aed9d091ef08efa95822e864b4554d2.html HTTP/1.1Host: cdn.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://survey3.medallia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a938a40fb1e58749cdb6a74ad5e2a74452ead2f7 HTTP/1.1Host: sea1.cdn.survey.medallia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/AD-AAB-AAF-GTM/adrum HTTP/1.1Host: col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ehnm7d7764zrrfrsfyb9&reject=cancel HTTP/1.1Host: survey3.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_tvswfz3.nfebmmjb.dpn=14b5a3d946c40ade39f765eb549522cee1cb1b6a69b13dc600a8f7ff2dc131b31f1bf447
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/AD-AAB-AAF-GTM/adrum HTTP/1.1Host: col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ADRUM_BTa=R:0\|g:12872c5b-f82d-4d3e-882d-10af5d61b313\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; SameSite=None; ADRUM_BT1=R:0\|i:559461\|e:4
Source: global traffic	HTTP traffic detected: GET /?ehnm7d7764zrrfrsfyb9&reject=confirm HTTP/1.1Host: survey3.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_tvswfz3.nfebmmjb.dpn=14b5a3d946c40ade39f765eb549522cee1cb1b6a69b13dc600a8f7ff2dc131b31f1bf447
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=88000045&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20231005T125050Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=ae3e20766c984bcfbc2497ae7c7431d6&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=392&metered=false&nettype=ethernet&npid=sc-88000045&oemName=lfbati%2C%20Inc.&oemid=Public&ossku=Professional&scmid=Public&smBiosDm=lfbati20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=392&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=2 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: q+PFIOArkUCVNW6i.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=353694&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20231005T125050Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=241e399ec1cf4b0e8e3d3b0420df9b75&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=392&metered=false&nettype=ethernet&npid=sc-353694&oemName=lfbati%2C%20Inc.&oemid=Public&ossku=Professional&scmid=Public&smBiosDm=lfbati20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=392&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=2 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: pod=5&chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: q+PFIOArkUCVNW6i.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338388&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20231005T125050Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=9b028615a96e40839bee1502a0e350b3&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=392&metered=false&nettype=ethernet&npid=sc-338388&oemName=lfbati%2C%20Inc.&oemid=Public&ossku=Professional&rver=2&scmid=Public&smBiosDm=lfbati20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=392&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=2 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=EwDYAppeBAAU3UbneMRE5bLY1G/PiHS+AMlEaf4AAazgV+ugFJg1TcOpwYrNjs+KJ5KTKloVZg0aUKGlvsFSwStPgwi4aR8Z/EvbuQZ+0B16Z19IWWYnEcRmWhLbnEdOSWS7PNaEJjwBiXd5AprAB6uEv5/AUQYQNR9FaREVyJpssYEqiz0m4LvEDEb8/KfHltAoZZEpdzZ02BTQjip0Jrfwh2holJdty+bIHO8yEwevqwYqgKyhCPnIzpx/fN18r1LFYVQaLurKKbMBHdogho0pSv+8OO+JR20Top4lFjApxsQgYWMk2jy9pK9GChWdovKR0qt4Cy+Twz3y7TW7+VwT7Qk2OxLsb9ffcdZW7vfqcODYBOdw7muCCx9NCWYDZgAACIa2AvI60E7JqAEnvx2uxAJ1D1+zRHcbQnAtDfu87Rx5z5waF2IkJlNDHxY4JTDvWrpXnKULX28v/fo9nj5rAgg5sfP9DsQBCxv393WF5KlYLOTvrb4v/fznjphd6dWahjAtFcVMGOsnN/SLwUwmYK/UogM/ygaCM7dw2IYFU/pXvacMx79lhVIea4o8x359cK7gB7d6d3rF3kG8VgsX7G3k+gP5X6g8wh4Yr9ZVVu+ycDLASnuzJb6i20cEngsX+58GBG1lAceIX961dEyppsI79xYJE+XGo+p3b6hozWZvQOVRvoTzu1bcGvaEZ6mPwQ39ZcKFu5quWF5qCTtNj/9pqHSXHYzDOZhZDeJ7uDanNEi2gQIsnS25EK3BInrIUfriUGhjKZ51fptTiae3qmU6wHnLB9FvXm1ECsMye1Pk5HvztUROgDQslh0yuhQ3xvQEQOvgcGhthLa/WnCKaaSF1RLWYobL0UGydnTq0kohgy3RCu1SuyWtEiJmAVSm0KYHKesaL3nyy19LpQIQdubtPSRokV87jI3A018udAiREYXpM7bQK1i9voxAPA7bAkM12wE=&p=Cache-Control: no-cacheMS-CV: q+PFIOArkUCVNW6i.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=353698&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20231005T125050Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=089dd322a9184aefbdc246e7567212df&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&currsel=137271744000000000&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=392&metered=false&nettype=ethernet&npid=sc-353698&oemName=lfbati%2C%20Inc.&oemid=Public&ossku=Professional&scmid=Public&smBiosDm=lfbati20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=392&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=2 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: cid=128000000001627409&chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: q+PFIOArkUCVNW6i.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/AD-AAB-AAF-GTM/adrum HTTP/1.1Host: col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:64b34f14-9cf5-49c3-82ad-f5521345a324\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:4
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239351464292_1JPZ65R3NZ7M76CGN&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /?ehnm7d7764zrrfrsfyb9&reject=cancel HTTP/1.1Host: survey3.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_tvswfz3.nfebmmjb.dpn=14b5a3d946c40ade39f765eb549522cee1cb1b6a69b13dc600a8f7ff2dc131b31f1bf447
Source: global traffic	HTTP traffic detected: GET /?ehnm7d7764zrrfrsfyb9&reject=confirm HTTP/1.1Host: survey3.medallia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NSC_tvswfz3.nfebmmjb.dpn=14b5a3d946c40ade39f765eb549522cee1cb1b6a69b13dc600a8f7ff2dc131b31f1bf447
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/AD-AAB-AAF-GTM/adrum HTTP/1.1Host: col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:80b2d527-383d-45f5-9fe6-f97e1af85a5e\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:4
Source: global traffic	HTTP traffic detected: GET /eumcollector/beacons/browser/v1/AD-AAB-AAF-GTM/adrum HTTP/1.1Host: col.eum-appdynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SameSite=None; ADRUM_BTa=R:0\|g:972c73e2-cf06-4d03-aac5-0a2ce5a285b8\|n:appdynamics_eee1d4f8-67a2-498e-a725-47e29803822e; ADRUM_BT1=R:0\|i:559461\|e:5
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=88000163&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20231005T125125Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=3a5f4860328c453686ea7848b9d7fdbe&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&currsel=137271744000000000&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=393&metered=false&nettype=ethernet&npid=sc-88000163&oemName=lfbati%2C%20Inc.&oemid=Public&ossku=Professional&sc-msa=7&scmid=Public&smBiosDm=lfbati20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=393&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=2 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: cid=128000000001627409&chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: KShD8LsC1U6GXWP2.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=88000161&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20231005T125125Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=6c13354a03e74b458e09a863b75d488f&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&currsel=137271744000000000&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=393&metered=false&nettype=ethernet&npid=sc-88000161&oemName=lfbati%2C%20Inc.&oemid=Public&ossku=Professional&sc-msa=7&scmid=Public&smBiosDm=lfbati20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=393&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=2 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: cid=128000000001627409&chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: KShD8LsC1U6GXWP2.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=280810&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20231005T125125Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=f6698fbdf78b454b92b4d3be658ec98f&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&currsel=137271744000000000&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=393&metered=false&nettype=ethernet&npid=sc-280810&oemName=lfbati%2C%20Inc.&oemid=Public&ossku=Professional&sc-msa=7&scmid=Public&smBiosDm=lfbati20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=393&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=2 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: cid=128000000001627409&chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=EwDYAppeBAAU3UbneMRE5bLY1G/PiHS+AMlEaf4AAazgV+ugFJg1TcOpwYrNjs+KJ5KTKloVZg0aUKGlvsFSwStPgwi4aR8Z/EvbuQZ+0B16Z19IWWYnEcRmWhLbnEdOSWS7PNaEJjwBiXd5AprAB6uEv5/AUQYQNR9FaREVyJpssYEqiz0m4LvEDEb8/KfHltAoZZEpdzZ02BTQjip0Jrfwh2holJdty+bIHO8yEwevqwYqgKyhCPnIzpx/fN18r1LFYVQaLurKKbMBHdogho0pSv+8OO+JR20Top4lFjApxsQgYWMk2jy9pK9GChWdovKR0qt4Cy+Twz3y7TW7+VwT7Qk2OxLsb9ffcdZW7vfqcODYBOdw7muCCx9NCWYDZgAACIa2AvI60E7JqAEnvx2uxAJ1D1+zRHcbQnAtDfu87Rx5z5waF2IkJlNDHxY4JTDvWrpXnKULX28v/fo9nj5rAgg5sfP9DsQBCxv393WF5KlYLOTvrb4v/fznjphd6dWahjAtFcVMGOsnN/SLwUwmYK/UogM/ygaCM7dw2IYFU/pXvacMx79lhVIea4o8x359cK7gB7d6d3rF3kG8VgsX7G3k+gP5X6g8wh4Yr9ZVVu+ycDLASnuzJb6i20cEngsX+58GBG1lAceIX961dEyppsI79xYJE+XGo+p3b6hozWZvQOVRvoTzu1bcGvaEZ6mPwQ39ZcKFu5quWF5qCTtNj/9pqHSXHYzDOZhZDeJ7uDanNEi2gQIsnS25EK3BInrIUfriUGhjKZ51fptTiae3qmU6wHnLB9FvXm1ECsMye1Pk5HvztUROgDQslh0yuhQ3xvQEQOvgcGhthLa/WnCKaaSF1RLWYobL0UGydnTq0kohgy3RCu1SuyWtEiJmAVSm0KYHKesaL3nyy19LpQIQdubtPSRokV87jI3A018udAiREYXpM7bQK1i9voxAPA7bAkM12wE=&p=Cache-Control: no-cacheMS-CV: KShD8LsC1U6GXWP2.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=88000165&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20231005T125125Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=94a9b851d82d4903be330395133a0a7e&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&currsel=137271744000000000&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=393&metered=false&nettype=ethernet&npid=sc-88000165&oemName=lfbati%2C%20Inc.&oemid=Public&ossku=Professional&sc-msa=7&scmid=Public&smBiosDm=lfbati20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=393&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=2 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: cid=128000000001627409&chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: KShD8LsC1U6GXWP2.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8uWGj9jcjogMKd2lkITar3jVUCUxS2wC8s-RSsvJ6O1nwm0KAeCnmG3HeqYeItlBjaz-Zbdg2hPqtBS-Im2FOFbBis81cI-tqKc1cnWgpjjHr7a8xdWYffNGudCdL6V7s3y8IDjgpTwMMI6V9cDrXEgGx98os1HFY2Vxi9VBvxQH2h5jA%26u%3DbXN4Ym94JTNhJTJmJTJmZ2FtZSUyZiUzZnByb2R1Y3RJRCUzZDlQTEtWU1dSMjk5RiUyNm9jaWQlM2RpbnBfcm1jX3hib19zdGFydF9wcmVpbnN0YWxsX2VuZ2FnZV9ib29zdA%26rlid%3D504d04393cbb1540e7fc61278d975d76&TIME=20231005T125125Z&CID=530628298&EID=530628298&tids=15000&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=1C68EF3770756D0BEE156834FFFFFFFF HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: g.bing.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /aes/c.gif?type=mv&reqver=1.0&rg=1ef1eaafcb974507ab33bd5ad445e4af&tids=15000&med=10&pubId=251978541&TIME=20231005T125125Z&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=1C68EF3770756D0BEE156834FFFFFFFF HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: www.bing.comConnection: Keep-AliveCookie: MUID=11F1293143EB6FAA36CF3A9042056E06
Source: global traffic	HTTP traffic detected: GET /neg/0?action=impression&rlink=https%3A%2F%2Fwww.bing.com%2Faclick%3Fld%3De8uWGj9jcjogMKd2lkITar3jVUCUxS2wC8s-RSsvJ6O1nwm0KAeCnmG3HeqYeItlBjaz-Zbdg2hPqtBS-Im2FOFbBis81cI-tqKc1cnWgpjjHr7a8xdWYffNGudCdL6V7s3y8IDjgpTwMMI6V9cDrXEgGx98os1HFY2Vxi9VBvxQH2h5jA%26u%3DbXN4Ym94JTNhJTJmJTJmZ2FtZSUyZiUzZnByb2R1Y3RJRCUzZDlQTEtWU1dSMjk5RiUyNm9jaWQlM2RpbnBfcm1jX3hib19zdGFydF9wcmVpbnN0YWxsX2VuZ2FnZV9ib29zdA%26rlid%3D504d04393cbb1540e7fc61278d975d76&TIME=20231005T125125Z&CID=530628298&EID=&tids=15000&adUnitId=11730597&localId=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&deviceId=6966555320912735&anid=1C68EF3770756D0BEE156834FFFFFFFF HTTP/1.1Accept-Encoding: gzip, deflateUser-Agent: WindowsShellClient/9.0.40929.0 (Windows)Host: g.bing.comConnection: Keep-AliveCookie: MUID=11F1293143EB6FAA36CF3A9042056E06; _EDGE_S=SID=2397D5003E1968673E11C6A13FF7699B; MR=0
Source: global traffic	HTTP traffic detected: GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=280811&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:068D482D-8F3B-78AE-DAA0-0C08B8FF2AE6&ctry=CH&time=20231005T125200Z&lc=en-CH&pl=en-CH,en-GB&idtp=mid&uid=d215e385-cdc6-4502-a974-fb4c5f95db96&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=43450346efac4a3682285b5190bbc070&ctmode=MultiSession&arch=x64&betaedgever=0.0.0.0&canedgever=0.0.0.0&cdm=1&cdmver=10.0.19041.1023&currsel=137271744000000000&devedgever=0.0.0.0&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.19045.2006&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=394&metered=false&nettype=ethernet&npid=sc-280811&oemName=VMware%2C%20Inc.&oemid=Public&ossku=Professional&sc-msa=7&scmid=Public&smBiosDm=VMware20%2C1&stabedgever=117.0.2045.55&svcmpt=Red&svgtng=2&svtmexp=1699747200&svtmupd=1696486876&tl=2&tsu=394&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing=&svoffered=2 HTTP/1.1Accept-Encoding: gzip, deflateX-SDK-CACHE: cid=128000000001627409&chs=0&imp=0&chf=0&ds=50543&fs=23594&sc=6X-SDK-HW-TOKEN: t=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&p=Cache-Control: no-cacheMS-CV: Pl+SVmzxVEK1LAh+.0User-Agent: WindowsShellClient/9.0.40929.0 (Windows)X-SDK-HWF: arm0,arm640,ble0,cmb0,cmf0,cmr0,dcb1,dcc1,dx91,dxa1,dxb1,gyr0,hce0,hdc0,hov0,hsa0,hss1,kbd1,m041,m060,m080,m120,m160,m200,m301,m751,mA01,mct0,mgn0,mic0,mrc0,mse1,mT01,nfc0,rs10,rs20,rs30,rs40,rs50,rs60,tch0,tel0,v010,v020,v040,x641,x860,x86a640,xbd0,xbo0,xbs0,xbx0,xgp0Host: arc.msn.comConnection: Keep-Alive

Source: chromecache_121.1.dr	String found in binary or memory: http://cdn.appdynamics.com
Source: chromecache_123.1.dr	String found in binary or memory: http://code.google.com/p/episodes/
Source: chromecache_121.1.dr	String found in binary or memory: http://col.eum-appdynamics.com
Source: chromecache_123.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_121.1.dr	String found in binary or memory: https://cdn.appdynamics.com
Source: chromecache_121.1.dr	String found in binary or memory: https://col.eum-appdynamics.com
Source: chromecache_122.1.dr	String found in binary or memory: https://global.cdn.survey.medallia.com/15de41a42ce4f647a5d1c5e8ea29f1913d26d6b5)
Source: chromecache_122.1.dr	String found in binary or memory: https://global.cdn.survey.medallia.com/3df43562644fab8a88fb366b0843bc8a8612e42a)

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://survey3.medallia.com/?ehnm7d7764zrrfrsfyb9&reject=begin

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 6864, Parent PID: 6116

Windows Analysis Report
https://survey3.medallia.com/?ehnm7d7764zrrfrsfyb9&reject=begin