Edit tour

Windows Analysis Report
https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178

Overview

General Information

Sample URL:	https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178
Analysis ID:	1446922
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5692 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2580 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2000,i,948018042709324076,2356385525770831721,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4616 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 23 May 2024 23:24:19 GMTContent-Type: text/htmlContent-Length: 1245Connection: closeSet-Cookie: AWSALB=W4+R7pTuGnnCvXPP7NTk4YwcH30PWCok+zrjI6hb4nlSlaPWgGVAcfLa9vvDd3wAlDTizj0snqbUZJqQ0cToY8NvfzD8rmMScrTiSTN7BkbkExrF4t9WLyFoYyU6; Expires=Thu, 30 May 2024 23:24:19 GMT; Path=/Set-Cookie: AWSALBCORS=W4+R7pTuGnnCvXPP7NTk4YwcH30PWCok+zrjI6hb4nlSlaPWgGVAcfLa9vvDd3wAlDTizj0snqbUZJqQ0cToY8NvfzD8rmMScrTiSTN7BkbkExrF4t9WLyFoYyU6; Expires=Thu, 30 May 2024 23:24:19 GMT; Path=/; SameSite=None; SecureServer: Microsoft-IIS/10.0X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffStrict-Transport-Security: max-age=31536000; includeSubDomains

Source: chromecache_133.2.dr	String found in binary or memory: http://jqueryui.com/about)
Source: chromecache_133.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Verdana
Source: chromecache_138.2.dr	String found in binary or memory: http://survey.vovici.com/oh/2AD3ADAC691BBD2308DC7A75D80BDEE178
Source: chromecache_140.2.dr, chromecache_152.2.dr	String found in binary or memory: http://www.telerik.com/kendo-ui)
Source: chromecache_140.2.dr, chromecache_152.2.dr	String found in binary or memory: http://www.telerik.com/purchase/license-agreement/kendo-ui-complete
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.net
Source: sets.json.0.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.0.dr	String found in binary or memory: https://cookreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.0.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.0.dr	String found in binary or memory: https://dewarmsteweek.be
Source: sets.json.0.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.0.dr	String found in binary or memory: https://een.be
Source: sets.json.0.dr	String found in binary or memory: https://efront.com
Source: sets.json.0.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.0.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.0.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.0.dr	String found in binary or memory: https://ella.sv
Source: sets.json.0.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://elpais.uy
Source: sets.json.0.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.0.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.0.dr	String found in binary or memory: https://finn.no
Source: sets.json.0.dr	String found in binary or memory: https://firstlook.biz
Source: sets.json.0.dr	String found in binary or memory: https://gallito.com.uy
Source: chromecache_147.2.dr, chromecache_150.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: sets.json.0.dr	String found in binary or memory: https://gettalkdesk.com
Source: chromecache_131.2.dr	String found in binary or memory: https://github.com/gjunge/rateit.js
Source: chromecache_150.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: sets.json.0.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.0.dr	String found in binary or memory: https://grid.id
Source: sets.json.0.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.0.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.0.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.0.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://hapara.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.global
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.0.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.0.dr	String found in binary or memory: https://hearty.app
Source: sets.json.0.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.0.dr	String found in binary or memory: https://hearty.me
Source: sets.json.0.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.0.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.0.dr	String found in binary or memory: https://hj.rs
Source: sets.json.0.dr	String found in binary or memory: https://hjck.com
Source: sets.json.0.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.0.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.0.dr	String found in binary or memory: https://iolam.it
Source: sets.json.0.dr	String found in binary or memory: https://ishares.com
Source: sets.json.0.dr	String found in binary or memory: https://jagran.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.0.dr	String found in binary or memory: https://kompas.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.0.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.0.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.0.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.0.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.0.dr	String found in binary or memory: https://libero.it
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.0.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.0.dr	String found in binary or memory: https://livemint.com
Source: sets.json.0.dr	String found in binary or memory: https://max.auto
Source: sets.json.0.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.0.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.0.dr	String found in binary or memory: https://money.pl
Source: sets.json.0.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://nacion.com
Source: sets.json.0.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.co
Source: sets.json.0.dr	String found in binary or memory: https://nien.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.org
Source: sets.json.0.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.0.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.0.dr	String found in binary or memory: https://o2.pl
Source: sets.json.0.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.0.dr	String found in binary or memory: https://onet.pl
Source: sets.json.0.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.0.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.0.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.0.dr	String found in binary or memory: https://player.pl
Source: sets.json.0.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.0.dr	String found in binary or memory: https://poalim.site
Source: sets.json.0.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.0.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.0.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.0.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.0.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://radio1.be
Source: sets.json.0.dr	String found in binary or memory: https://radio2.be
Source: sets.json.0.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://repid.org
Source: sets.json.0.dr	String found in binary or memory: https://reshim.org
Source: sets.json.0.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.0.dr	String found in binary or memory: https://samayam.com
Source: sets.json.0.dr	String found in binary or memory: https://shock.co
Source: sets.json.0.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.0.dr	String found in binary or memory: https://songshare.com
Source: sets.json.0.dr	String found in binary or memory: https://songstats.com
Source: sets.json.0.dr	String found in binary or memory: https://sporza.be
Source: sets.json.0.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.0.dr	String found in binary or memory: https://stripe.com
Source: sets.json.0.dr	String found in binary or memory: https://stripe.network
Source: sets.json.0.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.0.dr	String found in binary or memory: https://supereva.it
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.0.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.0.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.0.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.0.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.0.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://tvid.in
Source: sets.json.0.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.0.dr	String found in binary or memory: https://unotv.com
Source: sets.json.0.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.0.dr	String found in binary or memory: https://vrt.be
Source: sets.json.0.dr	String found in binary or memory: https://vwo.com
Source: sets.json.0.dr	String found in binary or memory: https://welt.de
Source: sets.json.0.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.0.dr	String found in binary or memory: https://wildix.com
Source: sets.json.0.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.0.dr	String found in binary or memory: https://wingify.com
Source: sets.json.0.dr	String found in binary or memory: https://wordle.at
Source: sets.json.0.dr	String found in binary or memory: https://wp.pl
Source: sets.json.0.dr	String found in binary or memory: https://wpext.pl
Source: sets.json.0.dr	String found in binary or memory: https://www.asadcdn.com
Source: sets.json.0.dr	String found in binary or memory: https://ya.ru
Source: sets.json.0.dr	String found in binary or memory: https://zalo.me
Source: sets.json.0.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://zingmp3.vn

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55942
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62953
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 55940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 62953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 55942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.97.153:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.97.153:443 -> 192.168.2.6:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:55940 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:55941 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:55942 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:62954 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:62955 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5692_1763505986	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5692_1763505986\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5692_1763505986\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5692_1763505986\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5692_1763505986\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5692_1763505986\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5692_1763505986\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_5692_1107154480

Jump to behavior

Source: classification engine

Classification label: clean2.win@24/46@8/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2000,i,948018042709324076,2356385525770831721,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2000,i,948018042709324076,2356385525770831721,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://reshim.org	0%	Avira URL Cloud	safe
https://mercadoshops.com.co	0%	Avira URL Cloud	safe
https://nourishingpursuits.com	0%	Avira URL Cloud	safe
https://medonet.pl	0%	Avira URL Cloud	safe
https://survey.vovici.com/static/bootstrap.min.css?000022CB	0%	Avira URL Cloud	safe
https://poalim.xyz	0%	Avira URL Cloud	safe
https://wieistmeineip.de	0%	Avira URL Cloud	safe
https://mercadolivre.com	0%	Avira URL Cloud	safe
https://gliadomain.com	0%	Avira URL Cloud	safe
https://survey.vovici.com/static/support.js?000022CB	0%	Avira URL Cloud	safe
https://unotv.com	0%	Avira URL Cloud	safe
https://mercadoshops.com.br	0%	Avira URL Cloud	safe
https://zdrowietvn.pl	0%	Avira URL Cloud	safe
https://joyreactor.cc	0%	Avira URL Cloud	safe
https://songstats.com	0%	Avira URL Cloud	safe
http://jqueryui.com/themeroller/?ffDefault=Verdana	0%	Avira URL Cloud	safe
https://supereva.it	0%	Avira URL Cloud	safe
https://baomoi.com	0%	Avira URL Cloud	safe
https://bolasport.com	0%	Avira URL Cloud	safe
https://elfinancierocr.com	0%	Avira URL Cloud	safe
https://desimartini.com	0%	Avira URL Cloud	safe
https://rws1nvtvt.com	0%	Avira URL Cloud	safe
https://hearty.app	0%	Avira URL Cloud	safe
https://heartymail.com	0%	Avira URL Cloud	safe
https://radio2.be	0%	Avira URL Cloud	safe
https://hearty.gift	0%	Avira URL Cloud	safe
https://kompas.tv	0%	Avira URL Cloud	safe
https://finn.no	0%	Avira URL Cloud	safe
https://mercadoshops.com	0%	Avira URL Cloud	safe
https://mystudentdashboard.com	0%	Avira URL Cloud	safe
https://hc1.com	0%	Avira URL Cloud	safe
https://songshare.com	0%	Avira URL Cloud	safe
https://mercadopago.com.mx	0%	Avira URL Cloud	safe
https://mercadopago.com.pe	0%	Avira URL Cloud	safe
https://cookreactor.com	0%	Avira URL Cloud	safe
https://talkdeskqaid.com	0%	Avira URL Cloud	safe
https://cardsayings.net	0%	Avira URL Cloud	safe
https://mightytext.net	0%	Avira URL Cloud	safe
https://pudelek.pl	0%	Avira URL Cloud	safe
https://joyreactor.com	0%	Avira URL Cloud	safe
https://wildixin.com	0%	Avira URL Cloud	safe
https://eworkbookcloud.com	0%	Avira URL Cloud	safe
https://survey.vovici.com/static/images/lightbox/close.png	0%	Avira URL Cloud	safe
https://chennien.com	0%	Avira URL Cloud	safe
https://mercadopago.cl	0%	Avira URL Cloud	safe
https://nacion.com	0%	Avira URL Cloud	safe
https://survey.vovici.com/static/images/lightbox/next.png	0%	Avira URL Cloud	safe
https://bonvivir.com	0%	Avira URL Cloud	safe
https://talkdeskstgid.com	0%	Avira URL Cloud	safe
https://salemovetravel.com	0%	Avira URL Cloud	safe
https://carcostadvisor.be	0%	Avira URL Cloud	safe
https://wpext.pl	0%	Avira URL Cloud	safe
https://poalim.site	0%	Avira URL Cloud	safe
https://welt.de	0%	Avira URL Cloud	safe
https://blackrockadvisorelite.it	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Avira URL Cloud	safe
https://mercadoshops.com.ar	0%	Avira URL Cloud	safe
http://www.telerik.com/kendo-ui)	0%	Avira URL Cloud	safe
https://survey.vovici.com/static/bootstrap.min.js?000022CB	0%	Avira URL Cloud	safe
https://elpais.uy	0%	Avira URL Cloud	safe
https://cafemedia.com	0%	Avira URL Cloud	safe
https://landyrev.com	0%	Avira URL Cloud	safe
https://commentcamarche.com	0%	Avira URL Cloud	safe
https://tucarro.com.ve	0%	Avira URL Cloud	safe
https://rws3nvtvt.com	0%	Avira URL Cloud	safe
https://mercadolivre.com.br	0%	Avira URL Cloud	safe
https://eleconomista.net	0%	Avira URL Cloud	safe
https://survey.vovici.com/surveys/718515628/691bbd23/theme.css?9B9CBA5500000965	0%	Avira URL Cloud	safe
https://clmbtech.com	0%	Avira URL Cloud	safe
https://salemovefinancial.com	0%	Avira URL Cloud	safe
https://standardsandpraiserepurpose.com	0%	Avira URL Cloud	safe
https://mercadopago.com.br	0%	Avira URL Cloud	safe
https://survey.vovici.com/static/images/lightbox/prev.png	0%	Avira URL Cloud	safe
https://etfacademy.it	0%	Avira URL Cloud	safe
https://commentcamarche.net	0%	Avira URL Cloud	safe
https://mighty-app.appspot.com	0%	Avira URL Cloud	safe
https://hearty.me	0%	Avira URL Cloud	safe
https://hj.rs	0%	Avira URL Cloud	safe
https://mercadolibre.com.gt	0%	Avira URL Cloud	safe
https://idbs-staging.com	0%	Avira URL Cloud	safe
https://timesinternet.in	0%	Avira URL Cloud	safe
https://idbs-eworkbook.com	0%	Avira URL Cloud	safe
https://blackrock.com	0%	Avira URL Cloud	safe
https://mercadolibre.co.cr	0%	Avira URL Cloud	safe
https://hjck.com	0%	Avira URL Cloud	safe
https://prisjakt.no	0%	Avira URL Cloud	safe
https://vrt.be	0%	Avira URL Cloud	safe
https://kompas.com	0%	Avira URL Cloud	safe
https://player.pl	0%	Avira URL Cloud	safe
https://mercadolibre.com.hn	0%	Avira URL Cloud	safe
https://wingify.com	0%	Avira URL Cloud	safe
https://idbs-dev.com	0%	Avira URL Cloud	safe
https://mercadopago.com.ar	0%	Avira URL Cloud	safe
https://mercadolibre.cl	0%	Avira URL Cloud	safe
https://linternaute.com	0%	Avira URL Cloud	safe
https://tucarro.com.co	0%	Avira URL Cloud	safe
https://landyrev.ru	0%	Avira URL Cloud	safe
https://een.be	0%	Avira URL Cloud	safe
https://clarosports.com	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.google.com	216.58.206.36	true	false	unknown
survey.vovici.com	35.160.201.168	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://survey.vovici.com/static/support.js?000022CB	false	Avira URL Cloud: safe	unknown
https://survey.vovici.com/static/bootstrap.min.css?000022CB	false	Avira URL Cloud: safe	unknown
https://survey.vovici.com/static/images/lightbox/close.png	false	Avira URL Cloud: safe	unknown
https://survey.vovici.com/static/images/lightbox/next.png	false	Avira URL Cloud: safe	unknown
https://survey.vovici.com/static/bootstrap.min.js?000022CB	false	Avira URL Cloud: safe	unknown
https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178	false		unknown
https://survey.vovici.com/surveys/718515628/691bbd23/theme.css?9B9CBA5500000965	false	Avira URL Cloud: safe	unknown
https://survey.vovici.com/static/images/lightbox/prev.png	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://wieistmeineip.de	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadoshops.com.co	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://gliadomain.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://poalim.xyz	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadolivre.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://reshim.org	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://nourishingpursuits.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://medonet.pl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://unotv.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadoshops.com.br	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://joyreactor.cc	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
http://jqueryui.com/themeroller/?ffDefault=Verdana	chromecache_133.2.dr	false	Avira URL Cloud: safe	unknown
https://zdrowietvn.pl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://songstats.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://baomoi.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://supereva.it	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://elfinancierocr.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://bolasport.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://rws1nvtvt.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://desimartini.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://hearty.app	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://hearty.gift	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadoshops.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://heartymail.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://radio2.be	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://finn.no	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://hc1.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://kompas.tv	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mystudentdashboard.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://songshare.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadopago.com.mx	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://talkdeskqaid.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadopago.com.pe	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://cardsayings.net	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mightytext.net	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://pudelek.pl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://joyreactor.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://cookreactor.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://wildixin.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://eworkbookcloud.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://nacion.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://chennien.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadopago.cl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://talkdeskstgid.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://bonvivir.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://carcostadvisor.be	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://salemovetravel.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://wpext.pl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://welt.de	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://poalim.site	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_150.2.dr	false	Avira URL Cloud: safe	unknown
https://blackrockadvisorelite.it	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://cafemedia.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadoshops.com.ar	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
http://www.telerik.com/kendo-ui)	chromecache_140.2.dr, chromecache_152.2.dr	false	Avira URL Cloud: safe	unknown
https://elpais.uy	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://landyrev.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://commentcamarche.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://tucarro.com.ve	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://rws3nvtvt.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://eleconomista.net	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadolivre.com.br	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://clmbtech.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://standardsandpraiserepurpose.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://salemovefinancial.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadopago.com.br	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://commentcamarche.net	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://etfacademy.it	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mighty-app.appspot.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://hj.rs	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://hearty.me	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadolibre.com.gt	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://timesinternet.in	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://idbs-staging.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://blackrock.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://idbs-eworkbook.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadolibre.co.cr	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://hjck.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://vrt.be	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://prisjakt.no	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://kompas.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://idbs-dev.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://wingify.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadolibre.cl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://player.pl	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadopago.com.ar	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadolibre.com.hn	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://linternaute.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://tucarro.com.co	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://landyrev.ru	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://clarosports.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://een.be	sets.json.0.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
54.148.105.250	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.160.201.168	survey.vovici.com	United States	16509	AMAZON-02US	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1446922
Start date and time:	2024-05-24 01:23:13 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@24/46@8/6
Cookbook Comments:	Browse: http://survey.vovici.com/oh/2AD3ADAC691BBD2308DC7A75D80BDEE178

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.227, 74.125.71.84, 142.250.184.206, 34.104.35.123, 40.127.169.103, 192.229.221.95, 13.95.31.18, 93.184.221.240, 142.250.186.67
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178

Input	Output
URL: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password were found in the text.", "No submit button or link was found in the text." ] }
MSC I BUILT TO MAKE YOU BETTER' To unsubscribe trom all tuture surveys, please click here. @2020 MSC cc: 75 Road: Melville, NY 11747 All rights
URL: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178 Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to localization settings for the Kendo UI library, specifically for the 'en-US' culture. It defines date and number formats, including patterns for dates, times, and currencies. There are no indications of malicious behavior such as data exfiltration, credential harvesting, or unauthorized access attempts." }
!function(e,define){define([],e)}(function(){return function(e){var t=e.kendo\|\|(e.kendo={cultures:{}});t.cultures["en-US"]={name:"en-US",numberFormat:{pattern:["-n"],decimals:2,",":",",".":".",groupSize:[3],percent:{pattern:["-n %","n %"],decimals:2,",":",",".":".",groupSize:[3],symbol:"%"},currency:{pattern:["($n)","$n"],decimals:2,",":",",".":".",groupSize:[3],symbol:"$"}},calendars:{standard:{days:{names:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],namesAbbr:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],namesShort:["Su","Mo","Tu","We","Th","Fr","Sa"]},months:{names:["January","February","March","April","May","June","July","August","September","October","November","December",""],namesAbbr:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec",""]},AM:["AM","am","AM"],PM:["PM","pm","PM"],patterns:{d:"MM/dd/yyyy",D:"dddd, MMMM dd, yyyy",F:"dddd, MMMM dd, yyyy h:mm:ss tt",g:"M/d/yyyy h:mm tt",G:"M/d/yyyy h:mm:ss tt",m:"MMMM dd",M:"MMMM dd",s:"yyyy'-'MM'-'dd'T'HH':'mm':'ss",t:"h:mm tt",T:"h:mm:ss tt",u:"yyyy'-'MM'-'dd HH':'mm':'ss'Z'",y:"MMMM, yyyy",Y:"MMMM, yyyy"},"/":"/",":":":",firstDay:0}}}}(this),window.kendo},"function"==typeof define&&define.amd?define:function(e,t){t()});
URL: https://survey.vovici.com/oh/2AD3ADAC691BBD2308DC7A75D80BDEE178 Model: gpt-4o	```json { "phishing_score": 2, "brands": "MSC Industrial Direct Co.", "phishing": false, "suspicious_domain": false, "has_loginform": false, "has_captcha": false, "setechniques": false, "reasons": "The URL 'survey.vovici.com' appears to be a legitimate domain used for surveys. The page does not contain any login, password, or email fields, which are common in phishing sites. The branding matches MSC Industrial Direct Co., and there are no apparent social usering techniques used on this page. Therefore, it is likely a legitimate site." }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5692_1763505986\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.99136283355077
Encrypted:	false
SSDEEP:	48:p/hUI1uLIrAdIi17akd8+vZvZAALRQkNKaLDekpvW:RnNQI+7amlBvZAKRQi3ekdW
MD5:	884209DC825F17BCF6433F2DD3C7E6FD
SHA1:	A38A1A859C781FD6F7BD52CFD62CE685CA5A910D
SHA-256:	B62C892D3B126AD917D30310BD400C333029727C88140E9C9E6420AE3E26DEED
SHA-512:	BC1F8D656C7D617D7C9C289DD6E49AC19301BE9597B89DBC41DEC6CA6CC719C6ECA7F28B3F992A6ADBF587202C3C04CE0835C5459407F888EFB1281FF77F8201
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"FyhsZV91g2fM48fWCbRoIt5Z4L9u9uKeVBrevEE_fcaxnHu2YKCITYZCsfuIiRaQ0ioSrONndIR3o_NRLn94EeCjW9mx09YGbtIDuaJKHalmPzYIKcJvpnfGWUQ4tFVwkVRvmC2Tczv3CxqyCojE9cr4qr4Oo19wV9CcABBCXyiAlY3UDUkteh0C6JBtQ9JS4V_PmMD4xZ0-W7Ly1irhspj4QWnVLZoOBO121sn4rC8vsNNLR8K2rXS

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5692_1763505986\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.7748418475126835
Encrypted:	false
SSDEEP:	3:S8g+WBDTZy0suxRSA1er1Cl:SD0Oxm5Cl
MD5:	12E4B45B481A49CB9793C4EB9EEB686D
SHA1:	8A1C3CD932D7441ACA1FDA1B077BFFAC53067E6A
SHA-256:	0B26105D6FCD078FC074E3F43012735C3C9D62E20B3C4DB205DEA4A8841ACE18
SHA-512:	026B9E240002166064E91BA063A2867F2A76F25FD0017661F082C877FE5F6067BDDCCB59DE187BD7AC31147DA054EB63969AF63EAD01F8F4469DD9168EF85BBC
Malicious:	false
Reputation:	low
Preview:	1.a0d36633da5e9660efefde44a0762f678cb7a0e47eca24d0f3e479b6ae303673

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5692_1763505986\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.462192586591686
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1gLIJY:F6VlM8aRWpqS1gL2Y
MD5:	96644BF9C61D98F0ABBCB29D385C4DF2
SHA1:	83F15025C8B68D609DC3653517B224C8AED08602
SHA-256:	2D6F188933F762A98D6F5796438D63D1415F3661D04522C32900984440297F80
SHA-512:	F185B72778A001005A73052AB108EFE53A0C70A4A6B274D5B0F33160998A32FFA5CFFE730005258E3398041DE28452907B38A7AE2E632C6EB095BE700337D704
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.5.14.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5692_1763505986\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7793
Entropy (8bit):	4.61890378232256
Encrypted:	false
SSDEEP:	96:Mon4mdqX1gs1/BNKLcxbdmf5688PTGXvcxKuP+8qJq:v7qljBkIVRPTGXvcx1sq
MD5:	94679DFD3B9168DAA5214E36B8E12730
SHA1:	DE6965B81658AD978483F3A809641C66C2A92D12
SHA-256:	83D4ABA459DB56533A15A34889D633A5EB0AE6CFB90483D5BC60FC6CA72AC7D3
SHA-512:	156D83BFB12C4C3424BDF7929CC8977D8025A08301B942F5B7474D61EC7421DE0EADF6923619EED4B4EC66CC742ACF1201C3438E1947B05F14C8F172194F5D6E
Malicious:	false
Reputation:	low
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://elpais.com.uy","associatedSites":["https://clubelpais.com.uy","https://paula.com.uy","https://gallito.com.uy"],"ccTLDs":{"https://elpais.com.uy":["https://elpais.uy"]}}.{"primary":"https:/

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4413)
Category:	downloaded
Size (bytes):	139535
Entropy (8bit):	5.497026373314818
Encrypted:	false
SSDEEP:	1536:BWt5OWCKCMrFrHs5Srtrrp+F2jDQBUitNg20Sekb0n/Wu/ZuexL1ITmwtiJnApo4:vKir0i7g2e40neu8wiqUMz+
MD5:	F5FF8B5621A6F9E45A8DEB5BF80F5F27
SHA1:	3161C5A9F7348A48F6A7DB9C100B969AC992E968
SHA-256:	ED2E1F01FF033DD49DDC9612BAD7C3C4EB9BA03C274274BE8530F77F89758D08
SHA-512:	41E5F0273996BBDFEAE29E3472BD2758AF448BBADE67BED92594B148D24A0CC408B9F830533D5EDFFC5D580CB3D2F495E19987C41148CF36D37F610328CC35E8
Malicious:	false
Reputation:	low
URL:	https://survey.vovici.com/static/support.js?000022CB
Preview:	/. RateIt \| v1.1.0 / 10/20/2016. https://github.com/gjunge/rateit.js \| Twitter: @gjunge. jQuery Taggd. A helpful plugin that helps you adding 'tags' on images... License: MIT./.var $jscomp=$jscomp\|\|{};$jscomp.scope={};$jscomp.findInternal=function(a,c,b){a instanceof String&&(a=String(a));for(var d=a.length,e=0;e<d;e++){var g=a[e];if(c.call(b,g,e,a))return{i:e,v:g}}return{i:-1,v:void 0}};$jscomp.ASSUME_ES5=!1;$jscomp.ASSUME_NO_NATIVE_MAP=!1;$jscomp.ASSUME_NO_NATIVE_SET=!1;$jscomp.SIMPLE_FROUND_POLYFILL=!1;$jscomp.ISOLATE_POLYFILLS=!1;$jscomp.FORCE_POLYFILL_PROMISE=!1;$jscomp.FORCE_POLYFILL_PROMISE_WHEN_NO_UNHANDLED_REJECTION=!1;.$jscomp.defineProperty=$jscomp.ASSUME_ES5\|\|"function"==typeof Object.defineProperties?Object.defineProperty:function(a,c,b){if(a==Array.prototype\|\|a==Object.prototype)return a;a[c]=b.value;return a};$jscomp.getGlobal=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&gl

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37864), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	261573
Entropy (8bit):	5.055330767671814
Encrypted:	false
SSDEEP:	6144:5OlMYBw7kKhyMdF4ZYxg+GuRv8kJdCL/UvuO0Mo2HPMFU8e3BwV:8ldMhxGk8kXCCHo2HPMFU8e3BwV
MD5:	D5FC1CFD93CD8304C9DC3E4A1299E13A
SHA1:	4C7B86C8CFB04B1A376C781B80CAF5DD32FDDF68
SHA-256:	5EFEACE9847E559F33A11639E9DAB26685688071751ECC5C2A65D54E7BC4F985
SHA-512:	D35EB46F9CDF7AE511AA4AB62662EA0555459FBAFB691ACB8EF14D1CF88E7CD147AE34560C445ADAF891D04C99E4A72576FCFE753C3E6D0687C1DDCDE56C89C8
Malicious:	false
Reputation:	low
URL:	https://survey.vovici.com/static/kendo/js/kendo.all.min.js?000022CB
Preview:	!function (e, define) { define("kendo.core.min", ["jquery"], e) }(function () {.. return function (e, t, n) {.. function r() { } function o(e, t) { if (t) return "'" + e.split("'").join("\\'").split('\\"').join('\\\\\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t") + "'"; var n = e.charAt(0), r = e.substring(1); return "=" === n ? "+(" + r + ")+" : ":" === n ? "+$kendoHtmlEncode(" + r + ")+" : ";" + e + ";$kendoOutput+=" } function i(e, t, n) { return e += "", t = t \|\| 2, n = t - e.length, n ? B[t].substring(0, n) + e : e } function a(e) { var t = e.css(be.support.transitions.css + "box-shadow") \|\| e.css("box-shadow"), n = t ? t.match(Ae) \|\| [0, 0, 0, 0, 0] : [0, 0, 0, 0, 0], r = Te.max(+n[3], +(n[4] \|\| 0)); return { left: -n[1] + r, right: +n[1] + r, bottom: +n[2] + r } } function s(n, r) { var o, i, a, s, l, c, d = ze.browser, f = be._outerWidth, p = be._outerHeight, m = n.parent(), h = f(t); return m.removeClass("k-animation-container-sm"), m.hasClass

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (1398), with CRLF line terminators
Category:	downloaded
Size (bytes):	106368
Entropy (8bit):	5.204294195133941
Encrypted:	false
SSDEEP:	768:3Yo+pAJ+0bSbBebQVYQdKBrTJ/TJ6L8g8A8X66ODVUjqBqTgSc+j+l9gtwcf11oi:+plIIT2aKoC
MD5:	59EA8549C7E94F7CEDB64E12F95AFAA9
SHA1:	AD429623AD27D56BE0A316C7676CF28B7C6B0526
SHA-256:	BC2D26386FEB4D69DCAC5A3247D263BBA32356E73BFB51E400E36655E1E747A6
SHA-512:	4A37462C022BC6FE684F2CB2B7D89569D85B2C0F1555F92FF57F8922E17B9C31994CE521A7EA681E7B9DBEB02D1CCFC274C5F6D1DD76214EBCEF6FFF64EF900F
Malicious:	false
Reputation:	low
URL:	https://survey.vovici.com/static/structure.css?9B9CBA55
Preview:	@charset "utf-8";..../.. jQuery UI CSS Framework..* Copyright (c) 2009 AUTHORS.txt (http://jqueryui.com/about)..* Dual licensed under the MIT (MIT-LICENSE.txt) and GPL (GPL-LICENSE.txt) licenses...* To view and modify this theme, visit http://jqueryui.com/themeroller/?ffDefault=Verdana,Arial,sans-serif&fwDefault=normal&fsDefault=1.1em&cornerRadius=4px&bgColorHeader=cccccc&bgTextureHeader=03_highlight_soft.png&bgImgOpacityHeader=75&borderColorHeader=aaaaaa&fcHeader=222222&iconColorHeader=222222&bgColorContent=ffffff&bgTextureContent=01_flat.png&bgImgOpacityContent=75&borderColorContent=aaaaaa&fcContent=222222&iconColorContent=222222&bgColorDefault=e6e6e6&bgTextureDefault=02_glass.png&bgImgOpacityDefault=75&borderColorDefault=d3d3d3&fcDefault=555555&iconColorDefault=888888&bgColorHover=dadada&bgTextureHover=02_glass.png&bgImgOpacityHover=75&borderColorHover=999999&fcHover=212121&iconColorHover=454545&bgColorActive=ffffff&bgTextureActive=02_glass.png&bgImgOpacityActive=65&borderColorAct

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3191), with CRLF line terminators
Category:	downloaded
Size (bytes):	3293
Entropy (8bit):	5.171713363044848
Encrypted:	false
SSDEEP:	48:psSHoWvytRIXDBS9j8nPIHluojfgIf27MO0bvu384pcv2It4h85uDwJzAmiPxO2i:qqvkiSj8PiYfMO0vevW0DwJJui7
MD5:	C42E8B86D474FF4CB0BB1C2099863FC5
SHA1:	DA340F9F849D72153CD596E62FFCF949C425A511
SHA-256:	0EE6F5D783689225FE25889D210EC31DC398E6E2F75450DB5ED0D97A9C148627
SHA-512:	38C71E51B8774308FDFDC8FB17919F841595F22185F1E8B1D30DA1C82D00135ECCEDC2A9A0D891439A131EC4384B7B5F4C258A2137D958C40CA60FBDDFC003A8
Malicious:	false
Reputation:	low
URL:	https://survey.vovici.com/static/jquery.placeholder.js?000022CB
Preview:	/* HTML5 Placeholder jQuery Plugin - v2.3.1.. * Copyright (c)2015 Mathias Bynens.. * 2015-12-16.. */..!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof module&&module.exports?require("jquery"):jQuery)}(function(a){function b(b){var c={},d=/^jQuery\d+$/;return a.each(b.attributes,function(a,b){b.specified&&!d.test(b.name)&&(c[b.name]=b.value)}),c}function c(b,c){var d=this,f=a(this);if(d.value===f.attr(h?"placeholder-x":"placeholder")&&f.hasClass(n.customClass))if(d.value="",f.removeClass(n.customClass),f.data("placeholder-password")){if(f=f.hide().nextAll('input[type="password"]:first').show().attr("id",f.removeAttr("id").data("placeholder-id")),b===!0)return f[0].value=c,c;f.focus()}else d==e()&&d.select()}function d(d){var e,f=this,g=a(this),i=f.id;if(!d\|\|"blur"!==d.type\|\|!g.hasClass(n.customClass))if(""===f.value){if("password"===f.type){if(!g.data("placeholder-textinput")){try{e=g.clone().prop({type:"text"})}catch(j){e=a("<input>").attr(a.ex

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1242), with CRLF line terminators
Category:	downloaded
Size (bytes):	4648
Entropy (8bit):	5.543221247555808
Encrypted:	false
SSDEEP:	96:b/KdO/KdX/KdN/K51vBUM0C3RDGmqp/sGm4B6fBx:b/Ko/KJ/Kf/K516e3FGmtGmc8x
MD5:	7616818599123E2C17B6859C5FBF8EEC
SHA1:	FC7EA55BB04B8E05449E4996CAEDAD75762AA39F
SHA-256:	4435B6F982C894F426FEE00F88D9506BC919CC6BA8A8DBC14E153FFB5FC97D93
SHA-512:	B7821AC221263E717AB164B1D67AED2DE784F21659BA11435C7559C405637AE8944547A47AC6E353459D103037AAC688DDACD2A2406992399B98F01AB704BD23
Malicious:	false
Reputation:	low
URL:	https://survey.vovici.com/oh/2AD3ADAC691BBD2308DC7A75D80BDEE178
Preview:	<!DOCTYPE HTML>.. [if lt IE 8]><html class="ie7 vt-adaptive vt-lang-ltr" lang="en-US" dir="ltr"><![endif]-->.. [if IE 8]><html class="ie8 vt-adaptive vt-lang-ltr" lang="en-US" dir="ltr"><![endif]-->.. [if IE 9]><html class="modern ie9 vt-adaptive vt-lang-ltr" lang="en-US" dir="ltr"><![endif]-->.. [if (gt IE 9)\|!(IE)]> ><html class="modern vt-adaptive vt-lang-ltr" lang="en-US" dir="ltr"> <![endif]--><head>...<title>....Opt Out Confirmation...</title><meta charset="utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0" /><style>....html.js .nojs { display: none; }...</style><link rel="stylesheet" type="text/css" href="/static/bootstrap.min.css?000022CB" /><link rel="stylesheet" type="text/css" href="/static/kendo/css/kendo.common.min.css?000022CB" /><link rel="stylesheet" type="text/css" href="/static/kendo/css/kendo.bootstrap.min.css?000022CB" /> [if (gt IE 7)\|!(IE)]> ><link rel="stylesheet" type="text/css" href="/static/structure.css?9B9C

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 45, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1350
Entropy (8bit):	7.795826172553452
Encrypted:	false
SSDEEP:	24:OgMSVQogiW6rN55Wfj2byDoY6nn1SoPthAOy79jQC7tVcaKE028k:ZBCiWYNvGjWyDop1SoPMr9ECxUk
MD5:	31F15875975AAB69085470AABBFEC802
SHA1:	777E92C050F600B4519299C3D786B8F2F459FEA4
SHA-256:	15B869B02C6FBAA8C6C26445A2DD2D9BAD80FD27B1409F8179E5DD89DC89D90A
SHA-512:	EDC920DCD2F5AC9A6E08098C6A59F888A9CB135FF4EF3DC2183931E065B6531E00E2C8ACD3C329A3D90EB939EA3DB318A9B677B5AA78A227815373D7008D40AA
Malicious:	false
Reputation:	low
URL:	https://survey.vovici.com/static/images/lightbox/next.png
Preview:	.PNG........IHDR...2...-......8.....IDATx..KL\U..3w.+0.b.gp.-a.Z.U.....Rjj.-.Z.va.i.....@.........HA...F.#a..C.M0. @x#e.O.\|....9.'..2.Y..}..{y.4...@'..F<........%..I?I....X.......#....=.".... .xA.8I..c ....r..J..D...u=j.....~......T1],.N$.<.N.B...wvww..................7p...a.>.r.Ngdaaa6nZSSS..\|...S..e2N.Q...H..C+......................eTWD.)..H....z.bMOO....>..R&..LS-..TWW.....Z.......z?..2&#..r....).-,,..2.........\|.#....t../..h4....a%3666....e..p..h.Dl ...............d0.."3.........k.M2gAEiii......F.].L.d..@..F2Nj3?.\(...X]]]....9...u....<.&...6.(((hA....,.v...i.....3s.d..........J..@..Ef.T..0..Q.M+....y.......,.Z6........p.......Q..f... [...>.+ph.b....c. ..d.p..f.4.....!..&...S ..}.@.-.e..x.\.D"_....2..2.....ZLW%...A..y....4.:..Y.3333.#W.....7'........}.\|600.W\....;..G...TD.:...tN......~.........\|.....4."...!.c ...k...?.*...9.}...v...;U..A...rMM.."....Q.J.9 .$I.a..........".....d.@"..O.W.9.$..D.T655....[[[o.l.J.-..q.M...Kd.L\nll..Ittt..}UL".$

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32078), with CRLF line terminators
Category:	downloaded
Size (bytes):	97271
Entropy (8bit):	5.373763268106863
Encrypted:	false
SSDEEP:	1536:5YE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJZFk/zkZ4HjL5o8srOaS9TwDlb7/Jp9o:s4J+U3jL5TCOauTwDlFdnCVQN5a98Hrs
MD5:	E100AB2F93ADDCAC69392713CC4BF614
SHA1:	383BEE318DCB55D38896EF02E0DB9773186B14D7
SHA-256:	AB9225081BF7B22478768A7B80A741833128CBBA94ACC524CB8989CD90490CAF
SHA-512:	2875E75FFD8309E2674E34792C008AFE62049FA3A6E8405CE6871C04237827EB52F12A0D606C1DAA92207813D1574ED433E86F4DA3D46237ADE6885B16AFF3E7
Malicious:	false
Reputation:	low
URL:	https://survey.vovici.com/static/jquery.min.js?000022CB
Preview:	!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="1.12.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushStack(e.apply(this,a

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1242), with CRLF line terminators
Category:	downloaded
Size (bytes):	4654
Entropy (8bit):	5.563574898990737
Encrypted:	false
SSDEEP:	96:b/KdO/KdX/KdN/KY1vBUM0C3RDGmqpMGmR4galfBx:b/Ko/KJ/Kf/KY16e3FGm/GmR+7x
MD5:	766D07ACE0500B88B17C743DF0B0BB65
SHA1:	189375E2D40136978389B856698E31F2D9FD253A
SHA-256:	DAAEE6DB720F1F7302FE2D6996557E0482835CDB4B9CB29AC23AD8FC99CA4808
SHA-512:	6AFFC538296562A87F4999E8C60839768C7790A6989AB3B96FE4585696D41340D512BAC2D3B13E4CFF3964ED7D91AE604D3C86F1E835E992B524E84D6FBE4034
Malicious:	false
Reputation:	low
URL:	https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178
Preview:	<!DOCTYPE HTML>.. [if lt IE 8]><html class="ie7 vt-adaptive vt-lang-ltr" lang="en-US" dir="ltr"><![endif]-->.. [if IE 8]><html class="ie8 vt-adaptive vt-lang-ltr" lang="en-US" dir="ltr"><![endif]-->.. [if IE 9]><html class="modern ie9 vt-adaptive vt-lang-ltr" lang="en-US" dir="ltr"><![endif]-->.. [if (gt IE 9)\|!(IE)]> ><html class="modern vt-adaptive vt-lang-ltr" lang="en-US" dir="ltr"> <![endif]--><head>...<title>....Opt Out...</title><meta charset="utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0" /><style>....html.js .nojs { display: none; }...</style><link rel="stylesheet" type="text/css" href="/static/bootstrap.min.css?000022CB" /><link rel="stylesheet" type="text/css" href="/static/kendo/css/kendo.common.min.css?000022CB" /><link rel="stylesheet" type="text/css" href="/static/kendo/css/kendo.bootstrap.min.css?000022CB" /> [if (gt IE 7)\|!(IE)]> ><link rel="stylesheet" type="text/css" href="/static/structure.css?9B9CBA55" /> <

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	20829
Entropy (8bit):	5.156202487133049
Encrypted:	false
SSDEEP:	192:6RYMVpMvSECMIaqccgXWwQ6g+R87/P8unTncwPWOiShDch5K/XCBIr:6RY9vpYd7/P8unTncwPBL2rB0
MD5:	AA767B60BF9F3BCCA0A0F56E5F3AE88C
SHA1:	387C565F042150664BA94F47B9F44FC1B09EFCE9
SHA-256:	D07E8CD15BF84A22601D1A1294DF3754154385D526DA80DEEAEAB5D61A6462FA
SHA-512:	3E33CD6BF3E57088281BA8C31A2283594C42896F28DCE3AD61A8F9EF53F16BE277C09603A7C473726EB4AA3BB9ACED35B42AA76674FC5CCFF4E795561126A2D8
Malicious:	false
Reputation:	low
URL:	https://survey.vovici.com/surveys/718515628/691bbd23/theme.css?9B9CBA5500000965
Preview:	body {..background-color: #999999;..margin: 0;.}..page-content {..padding-top: 20px;.}.@media all and (min-width: 768px) {...page-content {...padding: 8.333333333333332%;..}.}.@media all and (min-width: 992px) {...page-content {...padding: 8.333333333333332% 15px;..}.}./* Correction for standard rendering /..vt-standard .page-content {..padding-left: 8.333333333333332%;..padding-right: 8.333333333333332%;.}../ Larger screens have padding and frames /.@media all and (min-width: 768px) {...body {...padding: 2em;..}...page-content {...-webkit-border-radius: 10px;...-moz-border-radius: 10px;...border-radius: 10px;....-moz-box-shadow: 0 0 20px #444;...-webkit-box-shadow: 0 0 20px #444;...box-shadow: 0 0 20px #444;...-ms-filter: "progid:DXImageTransform.Microsoft.Shadow(Strength=10, Direction=90, Color='#444444')";...filter: progid:DXImageTransform.Microsoft.Shadow(Strength=10, Direction=90, Color='#444444');..}..}./ End min-width: 768px */.section-heading {...font-family: Arial, 'Helvet

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (996)
Category:	downloaded
Size (bytes):	88867
Entropy (8bit):	4.636636874953399
Encrypted:	false
SSDEEP:	1536:xfWQnTN3GZ6mUmwRhlTGjtOkXrJVOOo3g70bOd5JXPi+ZZkHGKRDVHgpkCS:oV6mFMTaOWVOOXig6
MD5:	43203858B498DDDAF9FEFD1AB1ADD486
SHA1:	F00040E6407621E54B3B79C4776B6210E2773E91
SHA-256:	BA394FBDFAA9ABDE603C7915E8BB3326F25013A50E30D25364E958B27595B751
SHA-512:	8C44C0423894B86B9AEBF284C32C612BA491399998CAEAB2238B7A1A04641F0768042F607B4087274C53F661C0F93EAEFD53A07C4274EE338F6B96888981FD37
Malicious:	false
Reputation:	low
URL:	https://survey.vovici.com/static/kendo/css/kendo.bootstrap.min.css?000022CB
Preview:	/** . * Kendo UI v2020.2.617 (http://www.telerik.com/kendo-ui) . * Copyright 2020 Progress Software Corporation and/or one of its subsidiaries or affiliates. All rights reserved. . * . * Kendo UI commercial licenses may be obtained at . * http://www.telerik.com/purchase/license-agreement/kendo-ui-complete

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	downloaded
Size (bytes):	8476
Entropy (8bit):	7.521581779536469
Encrypted:	false
SSDEEP:	192:e8mZU0o1P1rUssaXA6RJiqlrcDUpTQ+ZSIWl7QBhr5z:iZc1PvA6RJiqYUq/l7Md5z
MD5:	2299AD0B3F63413F026DFEC20C205B8F
SHA1:	CF720B50CF8DDE0E1A84CE1C6A77788BFC5882D5
SHA-256:	225AA88B6AB02C06222EC9468D62E15FA188E39CDB9431D1F55401AD380753ED
SHA-512:	DC299EE8DE6D5BB9D3A95A0FC200EA380C6DBAEB72FBFF74E1E8BB260EE3DEEC6C981D9CFC05BF2409B8760613EF1C02BD7396456BEC618F287CA56A7A93957D
Malicious:	false
Reputation:	low
URL:	https://survey.vovici.com/static/images/lightbox/loading.gif
Preview:	GIF89a . ...........................................................................................................................................................................................!..NETSCAPE2.0.....!.......,.... . .@..@.pH....PdCl:].d.....Xla[..@$.,..T..G!.c>..#..p..0.yzk................#). ..........k..rwv&... ./$/..._.B..}}..O\..(.O....'.O....e..N....'..0.,....n..` #.(.#.........&&.....tu..QH.P......-R1..+..\,...".....@+".. 9 .8.W..$...`L!I....H...f#S~h.Z"==.XP.....Z`.......@B7..K.4Y`.NCP'.&,. @..Y.yR%!..J.Q....!.....3.,...... ......pH..D.M$......Pqx=..l........r-gc..P.y.He.R.Q.8/7i.....!!yn.........^ ......#j^......^.....(.^...P.Q......R(....%.Q.....D.....C...i.B.....3...................3..."..#........".'....,@...{.T .P'....=8......=...@..5.4H.....#...0.....2....$..%.tya.L2H(8&..Bg.1.Ji.b...-`.`....".HP...=3...Q.<....!.......,...... ....@.pH..D....... .T...H..c.......PmB..v..FL..Ta8......6.RD%...!w$k.\|]1.D....!......!.E.I...

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1245
Entropy (8bit):	5.462849750105637
Encrypted:	false
SSDEEP:	24:hM0mIAvy4Wvsqs1Ra7JZRGNeHX+AYcvP2wk1RjdEF3qpMk5:lmIAq1UqsziJZ+eHX+AdP2TvpMk5
MD5:	5343C1A8B203C162A3BF3870D9F50FD4
SHA1:	04B5B886C20D88B57EEA6D8FF882624A4AC1E51D
SHA-256:	DC1D54DAB6EC8C00F70137927504E4F222C8395F10760B6BEECFCFA94E08249F
SHA-512:	E0F50ACB6061744E825A4051765CEBF23E8C489B55B190739409D8A79BB08DAC8F919247A4E5F65A015EA9C57D326BBEF7EA045163915129E01F316C4958D949
Malicious:	false
Reputation:	low
URL:	https://survey.vovici.com/favicon.ico
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>404 - File or directory not found.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="co

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1685 x 246, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	28614
Entropy (8bit):	7.934393379531682
Encrypted:	false
SSDEEP:	384:OXE059++xeHr3ETYvgCbCDyIXfKDRoUR3tcAKsF5d06zNUfPIYRJ3lA2rHATO5:E359+cTYYknIPKDCULcAKa/ENJ3e2rN
MD5:	4423E0DF8337FE3A2B4AA659A904E0EF
SHA1:	546374A861EA501D5B9E7E0FB0495057A765C3CF
SHA-256:	79D1FD028E5A5A5B814D42096FABCA5EB5819E5EF818D0A184ABF683C29B79D8
SHA-512:	ABA86589BAA57A2B43FEB6021C6FF3995422840A98F969816A928285322D5D2F80DD4CC8662EA248FADF819722A2642F910D466A6735BEA524C7CD6823137FD7
Malicious:	false
Reputation:	low
URL:	https://survey.vovici.com/surveys/718515628/691bbd23/MSC_R_tagline_RGB.png
Preview:	.PNG........IHDR.............7w......pHYs.........g..R...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 27 x 27, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	280
Entropy (8bit):	6.264381543729851
Encrypted:	false
SSDEEP:	6:6v/lhPZmllQ9SoBcolgs4zHt7xDivIRQ6HarMKvuup:6v/7Rm/Q9Zpg7zHRxOQW6HarLvuc
MD5:	D9D2D0B1308CB694AA8116915592E2A9
SHA1:	3CA48361CFE0E41163023D03C26296F375BB3EAC
SHA-256:	5D62E6C90005BFB71F6ABB440F9E4753681CB23BBD5E60477AB6F442D2F0E69C
SHA-512:	AE70339EC05F19D698A319CC265DA583814711ACBEFD81DDCB7D6D5E59934B78B289E5A55C666AF62216A8F9CE5DE60AFD6F41C54EF7E4EA569D5458CEF78AF5
Malicious:	false
Reputation:	low
URL:	https://survey.vovici.com/static/images/lightbox/close.png
Preview:	.PNG........IHDR................g...<PLTE........................KKK...............JJJHHH.............n......tRNS.J.....K.............\|...xIDATx^}.I.. .DQ..Q...w....j...0T....W.~Y....hC,..W$....r.$.9....$".H"..;.. .x7{@b..(.).G.O&..H....}Q=..\|.. ..H.......IEND.B`.

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 27 x 27, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	280
Entropy (8bit):	6.264381543729851
Encrypted:	false
SSDEEP:	6:6v/lhPZmllQ9SoBcolgs4zHt7xDivIRQ6HarMKvuup:6v/7Rm/Q9Zpg7zHRxOQW6HarLvuc
MD5:	D9D2D0B1308CB694AA8116915592E2A9
SHA1:	3CA48361CFE0E41163023D03C26296F375BB3EAC
SHA-256:	5D62E6C90005BFB71F6ABB440F9E4753681CB23BBD5E60477AB6F442D2F0E69C
SHA-512:	AE70339EC05F19D698A319CC265DA583814711ACBEFD81DDCB7D6D5E59934B78B289E5A55C666AF62216A8F9CE5DE60AFD6F41C54EF7E4EA569D5458CEF78AF5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................g...<PLTE........................KKK...............JJJHHH.............n......tRNS.J.....K.............\|...xIDATx^}.I.. .DQ..Q...w....j...0T....W.~Y....hC,..W$....r.$.9....$".H"..;.. .x7{@b..(.).G.O&..H....}Q=..\|.. ..H.......IEND.B`.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 45, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1360
Entropy (8bit):	7.759688532707318
Encrypted:	false
SSDEEP:	24:GHSkQz3cCPNyzYiMy4T+awnPjXsjECJNuMCnyEiMn/k4GWkfAdU9:6SkO5YzfRCJ07Tn0W8
MD5:	84B76DEE6B27B795E89E3649078A11C2
SHA1:	6640A3432F7BA7AEA6129CDF7A5D3EABD47C295C
SHA-256:	7FD9273F20FDB1229C224341271A119020A5EEE74CCF6B4605730917C864CAF2
SHA-512:	F7128971CD4B6442EBAC344CAD93186E1FCC976470E2F5A4E758F3439C7B07421FB99A927450414B86B4BBFC0F2CC605B0E63C217057E094F9D866D9906960F5
Malicious:	false
Reputation:	low
URL:	https://survey.vovici.com/static/images/lightbox/prev.png
Preview:	.PNG........IHDR...2...-......8.....IDATx..[L\U..=3g.S.p+...A......30.Z...Z.Z..!.i..Gn..;1.`.#.bD.....F....:LM4......).?...d....=..\|..V.~...s..P$..O....0..0.5.xpN.....+}%../...h..R..".$..X...&...... ...<I..t.H.J.."......$P....].... .=.\$s...I.a...l..(...1333............]..s.d.!i."..5F.........._".Y^^.Y...j...l...a.. .x@.......1gww..c....@:...D.n..D....paa......H5e(...:...IT.........X__....@m...&Q..6u"''.P(.@b.......A!......N.D!.@......I...n.....^...;H.u.Q.q....m..W=......&q.8h[%..."\|..D0...X].......^.V...g-A.I"++.6nvKz.....~.....H.I.d%..@...$.......`..JJJ:.....I. .....8...8..F...<I.q..1@D'........{.N. .Q......2a.....`G.IWbsss...uR'.).,.&.c...`..a.F'.`Gov.,.l;q.6LD.fp.d......'...v.I... ...4R.P.L..N..'.......>C..p....0Z.=.....<.....?.I...Ml./P..T..p.h\....Z,....poDpFFF~G...]P.>(..m.hY@..(y......./..D.......~D.{."(.g)c*Pd..c......c..466~..:... .d(#.D.@:.......M.d......PJ2...3..G....{.....I.LKK..j..2.3$c.......%&.....s....ikk.Dm....$2.CE8.D..d....

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39553)
Category:	downloaded
Size (bytes):	39680
Entropy (8bit):	5.134609532741171
Encrypted:	false
SSDEEP:	768:up/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:NorXfURXiUrmq5YW
MD5:	2F34B630FFE30BA2FF2B91E3F3C322A1
SHA1:	B16FD8226BD6BFB08E568F1B1D0A21D60247CEFB
SHA-256:	9EE2FCFF6709E4D0D24B09CA0FC56AADE12B4961ED9C43FD13B03248BFB57AFE
SHA-512:	A014E9ACC78D10A0A7A9FBAA29DEAC6EF17398542D9574B77B40BF446155D210FA43384757E3837DA41B025998EBFAB4B9B6F094033F9C226392B800DF068BCE
Malicious:	false
Reputation:	low
URL:	https://survey.vovici.com/static/bootstrap.min.js?000022CB
Preview:	/!. Bootstrap v3.4.1 (https://getbootstrap.com/). * Copyright 2011-2019 Twitter, Inc.. * Licensed under the MIT license. */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");!function(t){"use strict";var e=jQuery.fn.jquery.split(" ")[0].split(".");if(e[0]<2&&e[1]<9\|\|1==e[0]&&9==e[1]&&e[2]<1\|\|3<e[0])throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 4")}(),function(n){"use strict";n.fn.emulateTransitionEnd=function(t){var e=!1,i=this;n(this).one("bsTransitionEnd",function(){e=!0});return setTimeout(function(){e\|\|n(i).trigger(n.support.transition.end)},t),this},n(function(){n.support.transition=function o(){var t=document.createElement("bootstrap"),e={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var i in e)if(t.style[i]!==undefined)return{end:e[i]};return!1}(),n.support.transition&&(n.event.specia

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1685 x 246, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	28614
Entropy (8bit):	7.934393379531682
Encrypted:	false
SSDEEP:	384:OXE059++xeHr3ETYvgCbCDyIXfKDRoUR3tcAKsF5d06zNUfPIYRJ3lA2rHATO5:E359+cTYYknIPKDCULcAKa/ENJ3e2rN
MD5:	4423E0DF8337FE3A2B4AA659A904E0EF
SHA1:	546374A861EA501D5B9E7E0FB0495057A765C3CF
SHA-256:	79D1FD028E5A5A5B814D42096FABCA5EB5819E5EF818D0A184ABF683C29B79D8
SHA-512:	ABA86589BAA57A2B43FEB6021C6FF3995422840A98F969816A928285322D5D2F80DD4CC8662EA248FADF819722A2642F910D466A6735BEA524C7CD6823137FD7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............7w......pHYs.........g..R...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	dropped
Size (bytes):	8476
Entropy (8bit):	7.521581779536469
Encrypted:	false
SSDEEP:	192:e8mZU0o1P1rUssaXA6RJiqlrcDUpTQ+ZSIWl7QBhr5z:iZc1PvA6RJiqYUq/l7Md5z
MD5:	2299AD0B3F63413F026DFEC20C205B8F
SHA1:	CF720B50CF8DDE0E1A84CE1C6A77788BFC5882D5
SHA-256:	225AA88B6AB02C06222EC9468D62E15FA188E39CDB9431D1F55401AD380753ED
SHA-512:	DC299EE8DE6D5BB9D3A95A0FC200EA380C6DBAEB72FBFF74E1E8BB260EE3DEEC6C981D9CFC05BF2409B8760613EF1C02BD7396456BEC618F287CA56A7A93957D
Malicious:	false
Reputation:	low
Preview:	GIF89a . ...........................................................................................................................................................................................!..NETSCAPE2.0.....!.......,.... . .@..@.pH....PdCl:].d.....Xla[..@$.,..T..G!.c>..#..p..0.yzk................#). ..........k..rwv&... ./$/..._.B..}}..O\..(.O....'.O....e..N....'..0.,....n..` #.(.#.........&&.....tu..QH.P......-R1..+..\,...".....@+".. 9 .8.W..$...`L!I....H...f#S~h.Z"==.XP.....Z`.......@B7..K.4Y`.NCP'.&,. @..Y.yR%!..J.Q....!.....3.,...... ......pH..D.M$......Pqx=..l........r-gc..P.y.He.R.Q.8/7i.....!!yn.........^ ......#j^......^.....(.^...P.Q......R(....%.Q.....D.....C...i.B.....3...................3..."..#........".'....,@...{.T .P'....=8......=...@..5.4H.....#...0.....2....$..%.tya.L2H(8&..Bg.1.Ji.b...-`.`....".HP...=3...Q.<....!.......,...... ....@.pH..D....... .T...H..c.......PmB..v..FL..Ta8......6.RD%...!w$k.\|]1.D....!......!.E.I...

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65369)
Category:	downloaded
Size (bytes):	121450
Entropy (8bit):	5.096596605959593
Encrypted:	false
SSDEEP:	768:rfRGxw/Tc/hWWlJ+UtVIuiHlqAmQI4X8OAdXFxbv8KIf2BdU+JdOMx1iVvH1FS:2w/YqGIuiHlqAmO8l1bNXdOqT
MD5:	E73DDC09923BBD3F932F7E164596D595
SHA1:	C99656670033632B8EC6A80E3C4F0241EA61B096
SHA-256:	E31FD62BFD6AC97FF9022755D22B8F6F0355CB40D806391784922108A05125DB
SHA-512:	28CA560875733EB57401B7245FAB54130305AC6C2EE30EFB149F8536F0C5522EE02B25A3993E8649B19AC9F65F4EEB99C08D762C4100F7A89E93100158593EF6
Malicious:	false
Reputation:	low
URL:	https://survey.vovici.com/static/bootstrap.min.css?000022CB
Preview:	/!. Bootstrap v3.4.1 (https://getbootstrap.com/). * Copyright 2011-2019 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:none;text-decoration:underline;-webkit-text-decoration:underline dotted;-moz-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 45, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1360
Entropy (8bit):	7.759688532707318
Encrypted:	false
SSDEEP:	24:GHSkQz3cCPNyzYiMy4T+awnPjXsjECJNuMCnyEiMn/k4GWkfAdU9:6SkO5YzfRCJ07Tn0W8
MD5:	84B76DEE6B27B795E89E3649078A11C2
SHA1:	6640A3432F7BA7AEA6129CDF7A5D3EABD47C295C
SHA-256:	7FD9273F20FDB1229C224341271A119020A5EEE74CCF6B4605730917C864CAF2
SHA-512:	F7128971CD4B6442EBAC344CAD93186E1FCC976470E2F5A4E758F3439C7B07421FB99A927450414B86B4BBFC0F2CC605B0E63C217057E094F9D866D9906960F5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...-......8.....IDATx..[L\U..=3g.S.p+...A......30.Z...Z.Z..!.i..Gn..;1.`.#.bD.....F....:LM4......).?...d....=..\|..V.~...s..P$..O....0..0.5.xpN.....+}%../...h..R..".$..X...&...... ...<I..t.H.J.."......$P....].... .=.\$s...I.a...l..(...1333............]..s.d.!i."..5F.........._".Y^^.Y...j...l...a.. .x@.......1gww..c....@:...D.n..D....paa......H5e(...:...IT.........X__....@m...&Q..6u"''.P(.@b.......A!......N.D!.@......I...n.....^...;H.u.Q.q....m..W=......&q.8h[%..."\|..D0...X].......^.V...g-A.I"++.6nvKz.....~.....H.I.d%..@...$.......`..JJJ:.....I. .....8...8..F...<I.q..1@D'........{.N. .Q......2a.....`G.IWbsss...uR'.).,.&.c...`..a.F'.`Gov.,.l;q.6LD.fp.d......'...v.I... ...4R.P.L..N..'.......>C..p....0Z.=.....<.....?.I...Ml./P..T..p.h\....Z,....poDpFFF~G...]P.>(..m.hY@..(y......./..D.......~D.{."(.g)c*Pd..c......c..466~..:... .d(#.D.@:.......M.d......PJ2...3..G....{.....I.LKK..j..2.3$c.......%&.....s....ikk.Dm....$2.CE8.D..d....

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (962)
Category:	downloaded
Size (bytes):	408843
Entropy (8bit):	4.674575519731781
Encrypted:	false
SSDEEP:	6144:7lEgt1PLHNWwBoHAUtYY2AU4IxVqEAuD7iwkkHOk67:7lFjPLHNWemAUtYY2AU4IziwkkHOD
MD5:	F9A77D4942BCD2C6E412D003F1FCC046
SHA1:	076923019E7CB61C48F797CB4E4EDB705E7EE3C6
SHA-256:	9F01979CD5BCE0646F2A30ADE6E9129103BCBAB84889D9A514BEE54F61E65541
SHA-512:	A2DF3DFBE22B28DF1EFA4A9B89E6DD367875607F5E3BDBCC244344ABCFFF7D11358DFC4F6A81E8F0D66485AE987D5E330710C2C24C2B5429BDB220DF9E7E2EEA
Malicious:	false
Reputation:	low
URL:	https://survey.vovici.com/static/kendo/css/kendo.common.min.css?000022CB
Preview:	/** . * Kendo UI v2020.2.617 (http://www.telerik.com/kendo-ui) . * Copyright 2020 Progress Software Corporation and/or one of its subsidiaries or affiliates. All rights reserved. . * . * Kendo UI commercial licenses may be obtained at . * http://www.telerik.com/purchase/license-agreement/kendo-ui-complete

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 45, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1350
Entropy (8bit):	7.795826172553452
Encrypted:	false
SSDEEP:	24:OgMSVQogiW6rN55Wfj2byDoY6nn1SoPthAOy79jQC7tVcaKE028k:ZBCiWYNvGjWyDop1SoPMr9ECxUk
MD5:	31F15875975AAB69085470AABBFEC802
SHA1:	777E92C050F600B4519299C3D786B8F2F459FEA4
SHA-256:	15B869B02C6FBAA8C6C26445A2DD2D9BAD80FD27B1409F8179E5DD89DC89D90A
SHA-512:	EDC920DCD2F5AC9A6E08098C6A59F888A9CB135FF4EF3DC2183931E065B6531E00E2C8ACD3C329A3D90EB939EA3DB318A9B677B5AA78A227815373D7008D40AA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...-......8.....IDATx..KL\U..3w.+0.b.gp.-a.Z.U.....Rjj.-.Z.va.i.....@.........HA...F.#a..C.M0. @x#e.O.\|....9.'..2.Y..}..{y.4...@'..F<........%..I?I....X.......#....=.".... .xA.8I..c ....r..J..D...u=j.....~......T1],.N$.<.N.B...wvww..................7p...a.>.r.Ngdaaa6nZSSS..\|...S..e2N.Q...H..C+......................eTWD.)..H....z.bMOO....>..R&..LS-..TWW.....Z.......z?..2&#..r....).-,,..2.........\|.#....t../..h4....a%3666....e..p..h.Dl ...............d0.."3.........k.M2gAEiii......F.].L.d..@..F2Nj3?.\(...X]]]....9...u....<.&...6.(((hA....,.v...i.....3s.d..........J..@..Ef.T..0..Q.M+....y.......,.Z6........p.......Q..f... [...>.+ph.b....c. ..d.p..f.4.....!..&...S ..}.@.-.e..x.\.D"_....2..2.....ZLW%...A..y....4.:..Y.3333.#W.....7'........}.\|600.W\....;..G...TD.:...tN......~.........\|.....4."...!.c ...k...?.*...9.}...v...;U..A...rMM.."....Q.J.9 .$I.a..........".....d.@"..O.W.9.$..D.T655....[[[o.l.J.-..q.M...Kd.L\nll..Ittt..}UL".$

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 24, 2024 01:24:02.793860912 CEST	443	49711	40.113.110.67	192.168.2.6
May 24, 2024 01:24:02.794083118 CEST	49711	443	192.168.2.6	40.113.110.67
May 24, 2024 01:24:02.799340963 CEST	49711	443	192.168.2.6	40.113.110.67
May 24, 2024 01:24:02.799391031 CEST	443	49711	40.113.110.67	192.168.2.6
May 24, 2024 01:24:02.799637079 CEST	443	49711	40.113.110.67	192.168.2.6
May 24, 2024 01:24:02.800885916 CEST	49711	443	192.168.2.6	40.113.110.67
May 24, 2024 01:24:02.800940037 CEST	49711	443	192.168.2.6	40.113.110.67
May 24, 2024 01:24:02.800952911 CEST	443	49711	40.113.110.67	192.168.2.6
May 24, 2024 01:24:02.801029921 CEST	49711	443	192.168.2.6	40.113.110.67
May 24, 2024 01:24:02.842506886 CEST	443	49711	40.113.110.67	192.168.2.6
May 24, 2024 01:24:03.029102087 CEST	443	49711	40.113.110.67	192.168.2.6
May 24, 2024 01:24:03.029705048 CEST	49711	443	192.168.2.6	40.113.110.67
May 24, 2024 01:24:03.029735088 CEST	443	49711	40.113.110.67	192.168.2.6
May 24, 2024 01:24:03.029759884 CEST	49711	443	192.168.2.6	40.113.110.67
May 24, 2024 01:24:03.029804945 CEST	49711	443	192.168.2.6	40.113.110.67
May 24, 2024 01:24:05.912558079 CEST	49673	443	192.168.2.6	173.222.162.64
May 24, 2024 01:24:05.928184986 CEST	49674	443	192.168.2.6	173.222.162.64
May 24, 2024 01:24:06.209451914 CEST	49672	443	192.168.2.6	173.222.162.64
May 24, 2024 01:24:09.667129993 CEST	49712	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:09.667171001 CEST	443	49712	40.115.3.253	192.168.2.6
May 24, 2024 01:24:09.667234898 CEST	49712	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:09.668745995 CEST	49712	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:09.668788910 CEST	443	49712	40.115.3.253	192.168.2.6
May 24, 2024 01:24:10.499000072 CEST	443	49712	40.115.3.253	192.168.2.6
May 24, 2024 01:24:10.499085903 CEST	49712	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:10.504086018 CEST	49712	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:10.504118919 CEST	443	49712	40.115.3.253	192.168.2.6
May 24, 2024 01:24:10.504703999 CEST	443	49712	40.115.3.253	192.168.2.6
May 24, 2024 01:24:10.666043997 CEST	49712	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:10.931751013 CEST	49712	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:10.931876898 CEST	49712	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:10.931888103 CEST	443	49712	40.115.3.253	192.168.2.6
May 24, 2024 01:24:10.931998014 CEST	49712	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:10.974517107 CEST	443	49712	40.115.3.253	192.168.2.6
May 24, 2024 01:24:11.117086887 CEST	443	49712	40.115.3.253	192.168.2.6
May 24, 2024 01:24:11.117887020 CEST	49712	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:11.117887020 CEST	49712	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:11.117909908 CEST	443	49712	40.115.3.253	192.168.2.6
May 24, 2024 01:24:11.118189096 CEST	49712	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:12.501710892 CEST	49718	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:12.501740932 CEST	443	49718	40.115.3.253	192.168.2.6
May 24, 2024 01:24:12.501806021 CEST	49718	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:12.502415895 CEST	49718	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:12.502430916 CEST	443	49718	40.115.3.253	192.168.2.6
May 24, 2024 01:24:13.086076975 CEST	49719	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:13.086133957 CEST	443	49719	35.160.201.168	192.168.2.6
May 24, 2024 01:24:13.086208105 CEST	49719	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:13.086816072 CEST	49719	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:13.086836100 CEST	443	49719	35.160.201.168	192.168.2.6
May 24, 2024 01:24:13.086855888 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:13.086873055 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:13.086983919 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:13.087080002 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:13.087095022 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:13.328532934 CEST	443	49718	40.115.3.253	192.168.2.6
May 24, 2024 01:24:13.328614950 CEST	49718	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:13.330571890 CEST	49718	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:13.330578089 CEST	443	49718	40.115.3.253	192.168.2.6
May 24, 2024 01:24:13.330822945 CEST	443	49718	40.115.3.253	192.168.2.6
May 24, 2024 01:24:13.332509041 CEST	49718	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:13.332580090 CEST	49718	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:13.332585096 CEST	443	49718	40.115.3.253	192.168.2.6
May 24, 2024 01:24:13.332715034 CEST	49718	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:13.378496885 CEST	443	49718	40.115.3.253	192.168.2.6
May 24, 2024 01:24:13.526256084 CEST	443	49718	40.115.3.253	192.168.2.6
May 24, 2024 01:24:13.526336908 CEST	443	49718	40.115.3.253	192.168.2.6
May 24, 2024 01:24:13.526390076 CEST	49718	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:13.526952982 CEST	49718	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:13.526962996 CEST	443	49718	40.115.3.253	192.168.2.6
May 24, 2024 01:24:13.978262901 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:13.987023115 CEST	443	49719	35.160.201.168	192.168.2.6
May 24, 2024 01:24:13.996306896 CEST	49719	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:13.996325016 CEST	443	49719	35.160.201.168	192.168.2.6
May 24, 2024 01:24:13.996454954 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:13.996463060 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:13.997695923 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:13.997857094 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:13.998739004 CEST	443	49719	35.160.201.168	192.168.2.6
May 24, 2024 01:24:13.998802900 CEST	49719	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.001058102 CEST	49719	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.001133919 CEST	443	49719	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.001230955 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.001332045 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.001420021 CEST	49719	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.001431942 CEST	443	49719	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.054166079 CEST	49719	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.054230928 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.054238081 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.100476027 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.538001060 CEST	443	49719	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.538026094 CEST	443	49719	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.538049936 CEST	443	49719	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.538091898 CEST	443	49719	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.538093090 CEST	49719	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.538120985 CEST	49719	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.538156986 CEST	49719	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.543044090 CEST	49719	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.543059111 CEST	443	49719	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.575736046 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.592905998 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.592926025 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.593169928 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.593961000 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.593988895 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.594950914 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.594973087 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.595026970 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.595329046 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.595344067 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.595851898 CEST	49725	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.595859051 CEST	443	49725	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.595915079 CEST	49725	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.596127987 CEST	49725	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.596139908 CEST	443	49725	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.597093105 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.597098112 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.597151995 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.597508907 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.597521067 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.598931074 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.598937035 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.598984957 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.599723101 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.599733114 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.622494936 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.770668983 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.770694971 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.770701885 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.770725012 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.770735025 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.770750046 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.770760059 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.770829916 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.843283892 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.843296051 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.843322039 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.843331099 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.843342066 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.843350887 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.843368053 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.843410015 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.843456984 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.857018948 CEST	49728	443	192.168.2.6	216.58.206.36
May 24, 2024 01:24:14.857042074 CEST	443	49728	216.58.206.36	192.168.2.6
May 24, 2024 01:24:14.857117891 CEST	49728	443	192.168.2.6	216.58.206.36
May 24, 2024 01:24:14.857441902 CEST	49728	443	192.168.2.6	216.58.206.36
May 24, 2024 01:24:14.857460022 CEST	443	49728	216.58.206.36	192.168.2.6
May 24, 2024 01:24:14.862473965 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.862507105 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.862548113 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.862555027 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.862611055 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.862611055 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.924714088 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.924743891 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.924787045 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.924792051 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.924861908 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.936023951 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.936053038 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.936117887 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.936125994 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.936172962 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.947535992 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.947561026 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.947791100 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.947798014 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.947940111 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.990719080 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.990746975 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.990828037 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:14.990834951 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:14.990880013 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.012840986 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.012887955 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.012927055 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.012933016 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.012950897 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.012960911 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.012978077 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.013035059 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.013500929 CEST	49720	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.013513088 CEST	443	49720	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.014564037 CEST	49729	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.014589071 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.014647961 CEST	49729	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.016628027 CEST	49729	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.016638994 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.197906017 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.198424101 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.198448896 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.199588060 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.199672937 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.200539112 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.200606108 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.201106071 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.201113939 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.204179049 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.204466105 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.204477072 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.204852104 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.205254078 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.205317974 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.205383062 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.225548029 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.226068974 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.226087093 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.226433039 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.227112055 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.227184057 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.227839947 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.231461048 CEST	443	49725	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.231750011 CEST	49725	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.231761932 CEST	443	49725	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.232841969 CEST	443	49725	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.232918978 CEST	49725	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.233715057 CEST	49725	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.233778954 CEST	443	49725	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.233983040 CEST	49725	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.233992100 CEST	443	49725	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.239574909 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.242428064 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.246005058 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.246036053 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.247210979 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.247289896 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.247847080 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.247916937 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.247996092 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.248009920 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.250497103 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.270493031 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.287105083 CEST	49725	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.302479982 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.497163057 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.497186899 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.497385025 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.497396946 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.501666069 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.501693010 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.501701117 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.501760960 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.501777887 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.501964092 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.520987034 CEST	49673	443	192.168.2.6	173.222.162.64
May 24, 2024 01:24:15.535614967 CEST	49674	443	192.168.2.6	173.222.162.64
May 24, 2024 01:24:15.552442074 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.571820974 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.571846008 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.571852922 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.571882963 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.571914911 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.571929932 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.571945906 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.571974993 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.571994066 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.578238964 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.578262091 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.578299046 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.578332901 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.578344107 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.578378916 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.579750061 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.579766035 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.579850912 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.579859972 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.579907894 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.584212065 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.584232092 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.584280014 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.584290028 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.584337950 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.589853048 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.589883089 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.589906931 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.589920044 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.589936018 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.590024948 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.590032101 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.590162992 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.594417095 CEST	443	49728	216.58.206.36	192.168.2.6
May 24, 2024 01:24:15.594567060 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.594585896 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.594638109 CEST	49728	443	192.168.2.6	216.58.206.36
May 24, 2024 01:24:15.594646931 CEST	443	49728	216.58.206.36	192.168.2.6
May 24, 2024 01:24:15.594700098 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.594707966 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.594820023 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.595916033 CEST	443	49728	216.58.206.36	192.168.2.6
May 24, 2024 01:24:15.595974922 CEST	49728	443	192.168.2.6	216.58.206.36
May 24, 2024 01:24:15.596728086 CEST	443	49725	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.596751928 CEST	443	49725	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.596759081 CEST	443	49725	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.596776962 CEST	443	49725	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.596786976 CEST	443	49725	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.596797943 CEST	443	49725	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.596798897 CEST	49725	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.596815109 CEST	443	49725	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.596838951 CEST	49725	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.596863985 CEST	49725	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.597678900 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.597688913 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.597735882 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.597747087 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.597788095 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.597799063 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.597810984 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.597810984 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.597816944 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.597842932 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.597851992 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.598501921 CEST	443	49725	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.598561049 CEST	443	49725	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.598587990 CEST	49725	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.598620892 CEST	49725	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.598805904 CEST	49725	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.598819017 CEST	443	49725	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.599236965 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.599261999 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.599328041 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.599746943 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.599756956 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.604171991 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.604190111 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.604247093 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.604258060 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.604361057 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.629348993 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.660345078 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.660367012 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.660444021 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.660464048 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.660517931 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.662117004 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.662139893 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.662208080 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.662214994 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.662239075 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.662254095 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.664674044 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.664674044 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.664690971 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.664691925 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.664762974 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.664772987 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.664803982 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.664814949 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.664829016 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.664853096 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.664863110 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.667476892 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.667712927 CEST	49729	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.667721987 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.668521881 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.668549061 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.668593884 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.668601990 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.668647051 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.669023991 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.669118881 CEST	49729	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.669651031 CEST	49729	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.669715881 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.670052052 CEST	49729	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.670068026 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.671031952 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.671092987 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.671097040 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.671145916 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.671695948 CEST	49724	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.671710968 CEST	443	49724	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.672862053 CEST	49731	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.672888041 CEST	443	49731	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.672950029 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.672966957 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.673017979 CEST	49731	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.673026085 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.673033953 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.673065901 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.673085928 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.673418045 CEST	49731	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.673439026 CEST	443	49731	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.680447102 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.680466890 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.680584908 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.680584908 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.680593967 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.681140900 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.682375908 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.682391882 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.682503939 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.682512045 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.683203936 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.685189009 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.685204983 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.685272932 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.685281038 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.685395956 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.691672087 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.691699028 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.691766977 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.691776991 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.691819906 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.694251060 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.694272995 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.694320917 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.694329023 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.694356918 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.694382906 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.698668957 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.698685884 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.698750019 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.698757887 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.698834896 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.725053072 CEST	49729	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.748997927 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.749022961 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.749098063 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.749114037 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.749169111 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.750235081 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.750252008 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.750312090 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.750319004 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.750375986 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.752105951 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.752129078 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.752191067 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.752197981 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.752240896 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.753935099 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.753952026 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.754014015 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.754020929 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.754091024 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.777209997 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.777255058 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.777292013 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.777299881 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.777327061 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.777406931 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.777406931 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.777723074 CEST	49723	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.777734995 CEST	443	49723	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.778129101 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.778152943 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.778465033 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.778742075 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.778755903 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.786787987 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.786860943 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.786870003 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.786926031 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.787338018 CEST	49726	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.787345886 CEST	443	49726	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.821736097 CEST	49672	443	192.168.2.6	173.222.162.64
May 24, 2024 01:24:15.862307072 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.862329006 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.862396002 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.862406969 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.862452030 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.900955915 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.900990963 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.901025057 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.901092052 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.901097059 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.901160955 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.940680981 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.940699100 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.940763950 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.940777063 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.940866947 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.963061094 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.963079929 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.963135958 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.963148117 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.963179111 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.963198900 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.987550020 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.987571955 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.987633944 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.987642050 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:15.987673998 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:15.987710953 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.006627083 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.006647110 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.006726980 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.006735086 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.006812096 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.007853031 CEST	49728	443	192.168.2.6	216.58.206.36
May 24, 2024 01:24:16.008013964 CEST	443	49728	216.58.206.36	192.168.2.6
May 24, 2024 01:24:16.022321939 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.022341967 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.022389889 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.022397041 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.022440910 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.039367914 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.039391994 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.039429903 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.039480925 CEST	49729	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.039522886 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.039582014 CEST	49729	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.045738935 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.045759916 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.045872927 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.045880079 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.045941114 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.047780991 CEST	49728	443	192.168.2.6	216.58.206.36
May 24, 2024 01:24:16.047786951 CEST	443	49728	216.58.206.36	192.168.2.6
May 24, 2024 01:24:16.057018995 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.057035923 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.057115078 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.057122946 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.057202101 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.065269947 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.065288067 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.065346956 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.065356016 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.065396070 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.072545052 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.072563887 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.072611094 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.072618008 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.072649956 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.072670937 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.079441071 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.079457045 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.079524994 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.079533100 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.079577923 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.085165024 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.085182905 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.085223913 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.085231066 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.085267067 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.085284948 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.085417032 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.087285042 CEST	49729	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.090310097 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.090328932 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.090368986 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.090374947 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.090416908 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.095295906 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.095308065 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.095334053 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.095347881 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.095347881 CEST	49729	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.095364094 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.095371008 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.095395088 CEST	49729	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.095426083 CEST	49729	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.097121954 CEST	49728	443	192.168.2.6	216.58.206.36
May 24, 2024 01:24:16.099440098 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.099457026 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.099523067 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.099529982 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.099575043 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.103373051 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.103406906 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.103441000 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.103449106 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.103461027 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.103477955 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.103501081 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.105190039 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.105199099 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.105222940 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.105247021 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.105268002 CEST	49729	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.105276108 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.105309963 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.105324030 CEST	49729	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.105355024 CEST	49729	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.207079887 CEST	49733	443	192.168.2.6	2.18.97.153
May 24, 2024 01:24:16.207115889 CEST	443	49733	2.18.97.153	192.168.2.6
May 24, 2024 01:24:16.207181931 CEST	49733	443	192.168.2.6	2.18.97.153
May 24, 2024 01:24:16.277741909 CEST	49733	443	192.168.2.6	2.18.97.153
May 24, 2024 01:24:16.277759075 CEST	443	49733	2.18.97.153	192.168.2.6
May 24, 2024 01:24:16.281857014 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.284066916 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.284081936 CEST	443	49731	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.289302111 CEST	49731	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.289315939 CEST	443	49731	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.289719105 CEST	443	49731	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.289947987 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.289956093 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.290308952 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.298389912 CEST	49731	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.298470020 CEST	443	49731	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.300889015 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.300962925 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.302766085 CEST	49731	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.303352118 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.304833889 CEST	49727	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.304851055 CEST	443	49727	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.346501112 CEST	443	49731	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.346518040 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.417110920 CEST	49729	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.417134047 CEST	443	49729	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.421722889 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.421947956 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.421969891 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.422297001 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.437702894 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.437813997 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.438436031 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.478524923 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.534523010 CEST	443	49731	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.534542084 CEST	443	49731	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.534599066 CEST	49731	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.534605980 CEST	443	49731	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.534651041 CEST	49731	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.542685032 CEST	49731	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.542701006 CEST	443	49731	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.546471119 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.546559095 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.546626091 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.546637058 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.546700954 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.641405106 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.641438007 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.641489029 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.641499996 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.641518116 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.641558886 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.641568899 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.641608953 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.656888008 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.656935930 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.657020092 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.657020092 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.657028913 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.657074928 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.737024069 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.737071991 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.737121105 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.737131119 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.737175941 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.747011900 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.747060061 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.747096062 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.747102976 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.747148037 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.747168064 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.769735098 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.769802094 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.769846916 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.769880056 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.769949913 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.769990921 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.770013094 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.770355940 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.770411015 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.778738976 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.778791904 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.778850079 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.778872013 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:16.778907061 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:16.778938055 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.043984890 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.044056892 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.044081926 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.044094086 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.044172049 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.050163031 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.050205946 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.050235987 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.050241947 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.050283909 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.056601048 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.056638956 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.056684971 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.056687117 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.056736946 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.056749105 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.056761980 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.056792974 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.061382055 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.061430931 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.061460018 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.061469078 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.061508894 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.074269056 CEST	443	49733	2.18.97.153	192.168.2.6
May 24, 2024 01:24:17.074332952 CEST	49733	443	192.168.2.6	2.18.97.153
May 24, 2024 01:24:17.078260899 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.078327894 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.078351021 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.078357935 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.078447104 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.081286907 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.081335068 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.081355095 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.081361055 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.081417084 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.082024097 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.082070112 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.082077980 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.082082987 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.082106113 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.082143068 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.082155943 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.082169056 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.082180023 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.082195044 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.082231998 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.084913015 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.084938049 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.084971905 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.084980011 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.085019112 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.087686062 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.087702990 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.087739944 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.087747097 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.087788105 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.087805033 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.090254068 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.090274096 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.090338945 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.090348005 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.090375900 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.092067957 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.093853951 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.093903065 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.093929052 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.093936920 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.093972921 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.096317053 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.096359968 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.096379995 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.096388102 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.096430063 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.099015951 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.099061966 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.099087000 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.099093914 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.099159002 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.101882935 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.101933002 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.101953983 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.101963043 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.102001905 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.108019114 CEST	49733	443	192.168.2.6	2.18.97.153
May 24, 2024 01:24:17.108047962 CEST	443	49733	2.18.97.153	192.168.2.6
May 24, 2024 01:24:17.108414888 CEST	443	49733	2.18.97.153	192.168.2.6
May 24, 2024 01:24:17.127973080 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.128030062 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.128056049 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.128071070 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.128106117 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.128122091 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.130597115 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.130645037 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.130665064 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.130672932 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.130717993 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.132678986 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.132725000 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.132747889 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.132754087 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.132797956 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.134423018 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.134496927 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.134502888 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.134553909 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.134622097 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.134669065 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.143883944 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.162214994 CEST	49733	443	192.168.2.6	2.18.97.153
May 24, 2024 01:24:17.206075907 CEST	49730	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.206096888 CEST	443	49730	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.251126051 CEST	49732	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.251156092 CEST	443	49732	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.381805897 CEST	49734	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.381848097 CEST	443	49734	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.381908894 CEST	49734	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.382328033 CEST	49735	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.382335901 CEST	443	49735	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.382595062 CEST	49736	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.382613897 CEST	49735	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.382628918 CEST	443	49736	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.382721901 CEST	49736	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.382981062 CEST	49737	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.382989883 CEST	443	49737	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.383348942 CEST	49737	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.383694887 CEST	49738	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.383702040 CEST	443	49738	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.383768082 CEST	49738	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.383943081 CEST	49737	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.383960962 CEST	443	49737	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.384295940 CEST	49736	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.384310961 CEST	443	49736	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.384422064 CEST	49735	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.384438038 CEST	443	49735	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.384663105 CEST	49734	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.384675980 CEST	443	49734	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.384848118 CEST	49738	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:17.384861946 CEST	443	49738	35.160.201.168	192.168.2.6
May 24, 2024 01:24:17.406394958 CEST	49733	443	192.168.2.6	2.18.97.153
May 24, 2024 01:24:17.446521044 CEST	443	49733	2.18.97.153	192.168.2.6
May 24, 2024 01:24:17.558289051 CEST	443	49704	173.222.162.64	192.168.2.6
May 24, 2024 01:24:17.558403969 CEST	49704	443	192.168.2.6	173.222.162.64
May 24, 2024 01:24:17.618788958 CEST	443	49733	2.18.97.153	192.168.2.6
May 24, 2024 01:24:17.618994951 CEST	49733	443	192.168.2.6	2.18.97.153
May 24, 2024 01:24:17.618994951 CEST	49733	443	192.168.2.6	2.18.97.153
May 24, 2024 01:24:17.619016886 CEST	443	49733	2.18.97.153	192.168.2.6
May 24, 2024 01:24:17.619170904 CEST	443	49733	2.18.97.153	192.168.2.6
May 24, 2024 01:24:17.619204044 CEST	443	49733	2.18.97.153	192.168.2.6
May 24, 2024 01:24:17.619550943 CEST	49733	443	192.168.2.6	2.18.97.153
May 24, 2024 01:24:17.653475046 CEST	49739	443	192.168.2.6	2.18.97.153
May 24, 2024 01:24:17.653501034 CEST	443	49739	2.18.97.153	192.168.2.6
May 24, 2024 01:24:17.653661966 CEST	49739	443	192.168.2.6	2.18.97.153
May 24, 2024 01:24:17.654052973 CEST	49739	443	192.168.2.6	2.18.97.153
May 24, 2024 01:24:17.654067993 CEST	443	49739	2.18.97.153	192.168.2.6
May 24, 2024 01:24:18.028875113 CEST	443	49737	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.030390024 CEST	49737	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.030401945 CEST	443	49737	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.030795097 CEST	443	49737	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.033724070 CEST	49737	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.033792019 CEST	443	49737	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.033960104 CEST	49737	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.051966906 CEST	443	49735	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.074501991 CEST	443	49737	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.093841076 CEST	443	49738	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.094655037 CEST	443	49734	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.097923994 CEST	49735	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.115902901 CEST	443	49736	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.135468960 CEST	49738	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.135499001 CEST	49734	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.161828995 CEST	49736	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.164194107 CEST	49735	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.164206028 CEST	443	49735	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.165378094 CEST	443	49735	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.165451050 CEST	49735	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.165493011 CEST	49734	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.165497065 CEST	443	49734	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.168157101 CEST	49738	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.168169022 CEST	443	49738	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.169064045 CEST	49736	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.169069052 CEST	443	49736	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.169303894 CEST	443	49738	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.169363022 CEST	443	49734	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.169372082 CEST	49738	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.169451952 CEST	49734	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.169650078 CEST	443	49736	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.174108982 CEST	49735	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.174179077 CEST	443	49735	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.177679062 CEST	49734	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.177880049 CEST	443	49734	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.179141998 CEST	49738	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.179218054 CEST	443	49738	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.181077003 CEST	49736	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.181230068 CEST	443	49736	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.183031082 CEST	49735	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.183046103 CEST	443	49735	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.183202028 CEST	49734	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.183209896 CEST	443	49734	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.183473110 CEST	49738	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.183480978 CEST	443	49738	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.183646917 CEST	49736	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.223653078 CEST	49735	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.223653078 CEST	49734	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.223803997 CEST	49738	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.230499029 CEST	443	49736	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.389588118 CEST	443	49739	2.18.97.153	192.168.2.6
May 24, 2024 01:24:18.389699936 CEST	49739	443	192.168.2.6	2.18.97.153
May 24, 2024 01:24:18.398540020 CEST	443	49737	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.398567915 CEST	443	49737	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.398582935 CEST	443	49737	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.398684025 CEST	49737	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.398715019 CEST	443	49737	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.398768902 CEST	49737	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.411313057 CEST	443	49737	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.411356926 CEST	443	49737	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.411392927 CEST	49737	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.411400080 CEST	443	49737	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.411463022 CEST	49737	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.437217951 CEST	443	49735	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.437293053 CEST	443	49735	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.437355995 CEST	49735	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.439909935 CEST	443	49734	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.440120935 CEST	443	49734	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.440181971 CEST	49734	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.446012974 CEST	443	49738	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.446046114 CEST	443	49738	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.446053028 CEST	443	49738	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.446074963 CEST	443	49738	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.446118116 CEST	49738	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.446132898 CEST	443	49738	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.446146965 CEST	443	49738	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.446170092 CEST	49738	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.446209908 CEST	49738	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.450910091 CEST	443	49736	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.450977087 CEST	443	49736	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.451035976 CEST	49736	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.652565956 CEST	49739	443	192.168.2.6	2.18.97.153
May 24, 2024 01:24:18.652611017 CEST	443	49739	2.18.97.153	192.168.2.6
May 24, 2024 01:24:18.653136969 CEST	443	49739	2.18.97.153	192.168.2.6
May 24, 2024 01:24:18.657228947 CEST	49739	443	192.168.2.6	2.18.97.153
May 24, 2024 01:24:18.684520006 CEST	49736	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.684551954 CEST	443	49736	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.686288118 CEST	49734	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.686320066 CEST	443	49734	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.687007904 CEST	49735	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.687012911 CEST	443	49735	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.702497959 CEST	443	49739	2.18.97.153	192.168.2.6
May 24, 2024 01:24:18.743733883 CEST	49738	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.743752956 CEST	443	49738	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.746676922 CEST	49737	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.746682882 CEST	443	49737	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.773994923 CEST	49740	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.774044991 CEST	443	49740	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.774142981 CEST	49740	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.774434090 CEST	49740	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.774458885 CEST	443	49740	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.887516022 CEST	443	49739	2.18.97.153	192.168.2.6
May 24, 2024 01:24:18.887587070 CEST	443	49739	2.18.97.153	192.168.2.6
May 24, 2024 01:24:18.887669086 CEST	49739	443	192.168.2.6	2.18.97.153
May 24, 2024 01:24:18.888467073 CEST	49741	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.888490915 CEST	443	49741	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.888561964 CEST	49741	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.888834953 CEST	49742	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.888855934 CEST	443	49742	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.888902903 CEST	49742	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.889262915 CEST	49743	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.889281988 CEST	443	49743	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.889379025 CEST	49743	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.889673948 CEST	49744	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.889760017 CEST	443	49744	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.889801025 CEST	49745	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.889826059 CEST	443	49745	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.889849901 CEST	49744	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.889910936 CEST	49745	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.890542030 CEST	49741	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.890554905 CEST	443	49741	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.890809059 CEST	49745	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.890847921 CEST	443	49745	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.891042948 CEST	49744	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.891069889 CEST	443	49744	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.891257048 CEST	49743	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.891271114 CEST	443	49743	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.891721964 CEST	49742	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:18.891736031 CEST	443	49742	35.160.201.168	192.168.2.6
May 24, 2024 01:24:18.893282890 CEST	49739	443	192.168.2.6	2.18.97.153
May 24, 2024 01:24:18.893328905 CEST	443	49739	2.18.97.153	192.168.2.6
May 24, 2024 01:24:18.893361092 CEST	49739	443	192.168.2.6	2.18.97.153
May 24, 2024 01:24:18.893378019 CEST	443	49739	2.18.97.153	192.168.2.6
May 24, 2024 01:24:19.397443056 CEST	443	49740	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.397820950 CEST	49740	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.397835970 CEST	443	49740	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.398993015 CEST	443	49740	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.399537086 CEST	49740	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.399705887 CEST	443	49740	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.399736881 CEST	49740	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.442506075 CEST	49740	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.442518950 CEST	443	49740	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.606259108 CEST	443	49745	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.606597900 CEST	49745	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.606664896 CEST	443	49745	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.607713938 CEST	443	49745	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.607796907 CEST	49745	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.608289957 CEST	49745	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.608361959 CEST	443	49745	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.608465910 CEST	49745	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.608485937 CEST	443	49745	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.614140034 CEST	443	49743	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.614388943 CEST	49743	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.614414930 CEST	443	49743	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.618036032 CEST	443	49743	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.618163109 CEST	49743	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.618525028 CEST	49743	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.618680954 CEST	49743	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.618693113 CEST	443	49743	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.618726969 CEST	443	49743	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.622920990 CEST	443	49742	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.622977018 CEST	443	49741	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.622989893 CEST	443	49744	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.623193979 CEST	49742	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.623203993 CEST	443	49742	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.623426914 CEST	49741	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.623450041 CEST	443	49741	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.623445034 CEST	49744	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.623507977 CEST	443	49744	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.624268055 CEST	443	49742	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.624485016 CEST	443	49741	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.624552011 CEST	49742	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.624552011 CEST	49741	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.624557972 CEST	443	49744	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.624629974 CEST	49744	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.624942064 CEST	49742	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.625005960 CEST	443	49742	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.625381947 CEST	49741	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.625447989 CEST	443	49741	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.625602961 CEST	49744	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.625678062 CEST	443	49744	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.626064062 CEST	49742	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.626085997 CEST	443	49742	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.626152039 CEST	49741	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.626159906 CEST	443	49741	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.626192093 CEST	49744	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.626211882 CEST	443	49744	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.661084890 CEST	49743	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.661099911 CEST	443	49743	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.661103010 CEST	49745	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.676625967 CEST	49744	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.676644087 CEST	49741	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.677467108 CEST	49742	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.697941065 CEST	443	49740	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.698070049 CEST	443	49740	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.698163986 CEST	49740	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.700948000 CEST	49740	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.700974941 CEST	443	49740	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.707860947 CEST	49743	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.860150099 CEST	443	49745	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.860223055 CEST	443	49745	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.860424995 CEST	49745	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.861280918 CEST	49745	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.861321926 CEST	443	49745	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.871206045 CEST	443	49743	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.871362925 CEST	443	49743	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.871471882 CEST	49743	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.873289108 CEST	49743	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.873312950 CEST	443	49743	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.889923096 CEST	443	49741	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.889945030 CEST	443	49741	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.889952898 CEST	443	49741	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.890007973 CEST	49741	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.890024900 CEST	443	49741	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.890142918 CEST	49741	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.892426014 CEST	49741	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.892443895 CEST	443	49741	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.894798040 CEST	443	49742	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.894871950 CEST	443	49742	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.895651102 CEST	49742	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.896275043 CEST	49742	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.896290064 CEST	443	49742	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.977965117 CEST	443	49744	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.978004932 CEST	443	49744	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.978018045 CEST	443	49744	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.978077888 CEST	49744	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.978116989 CEST	443	49744	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.978137016 CEST	443	49744	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.978188038 CEST	49744	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.994034052 CEST	443	49744	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.994106054 CEST	443	49744	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.994153976 CEST	443	49744	35.160.201.168	192.168.2.6
May 24, 2024 01:24:19.994227886 CEST	49744	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.994229078 CEST	49744	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:19.994229078 CEST	49744	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:20.019325972 CEST	49744	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:20.019391060 CEST	443	49744	35.160.201.168	192.168.2.6
May 24, 2024 01:24:20.423907042 CEST	49747	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:20.423943996 CEST	443	49747	40.115.3.253	192.168.2.6
May 24, 2024 01:24:20.424015999 CEST	49747	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:20.424699068 CEST	49747	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:20.424714088 CEST	443	49747	40.115.3.253	192.168.2.6
May 24, 2024 01:24:21.229742050 CEST	443	49747	40.115.3.253	192.168.2.6
May 24, 2024 01:24:21.229815006 CEST	49747	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:21.233961105 CEST	49747	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:21.233972073 CEST	443	49747	40.115.3.253	192.168.2.6
May 24, 2024 01:24:21.234381914 CEST	443	49747	40.115.3.253	192.168.2.6
May 24, 2024 01:24:21.236493111 CEST	49747	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:21.236546993 CEST	49747	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:21.236551046 CEST	443	49747	40.115.3.253	192.168.2.6
May 24, 2024 01:24:21.236706972 CEST	49747	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:21.282491922 CEST	443	49747	40.115.3.253	192.168.2.6
May 24, 2024 01:24:21.418497086 CEST	443	49747	40.115.3.253	192.168.2.6
May 24, 2024 01:24:21.419256926 CEST	49747	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:21.419291973 CEST	443	49747	40.115.3.253	192.168.2.6
May 24, 2024 01:24:21.419320107 CEST	49747	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:21.419347048 CEST	49747	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:21.571000099 CEST	49748	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:21.571059942 CEST	443	49748	40.115.3.253	192.168.2.6
May 24, 2024 01:24:21.571157932 CEST	49748	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:21.571904898 CEST	49748	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:21.571923018 CEST	443	49748	40.115.3.253	192.168.2.6
May 24, 2024 01:24:22.410362959 CEST	443	49748	40.115.3.253	192.168.2.6
May 24, 2024 01:24:22.410540104 CEST	49748	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:22.428426981 CEST	49748	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:22.428457975 CEST	443	49748	40.115.3.253	192.168.2.6
May 24, 2024 01:24:22.429224968 CEST	443	49748	40.115.3.253	192.168.2.6
May 24, 2024 01:24:22.431052923 CEST	49748	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:22.440797091 CEST	49748	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:22.440804958 CEST	443	49748	40.115.3.253	192.168.2.6
May 24, 2024 01:24:22.441024065 CEST	49748	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:22.486490965 CEST	443	49748	40.115.3.253	192.168.2.6
May 24, 2024 01:24:22.643851042 CEST	443	49748	40.115.3.253	192.168.2.6
May 24, 2024 01:24:22.644088984 CEST	443	49748	40.115.3.253	192.168.2.6
May 24, 2024 01:24:22.644160032 CEST	49748	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:22.644289970 CEST	49748	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:22.644306898 CEST	443	49748	40.115.3.253	192.168.2.6
May 24, 2024 01:24:25.514669895 CEST	443	49728	216.58.206.36	192.168.2.6
May 24, 2024 01:24:25.514738083 CEST	443	49728	216.58.206.36	192.168.2.6
May 24, 2024 01:24:25.514790058 CEST	49728	443	192.168.2.6	216.58.206.36
May 24, 2024 01:24:25.535604954 CEST	49728	443	192.168.2.6	216.58.206.36
May 24, 2024 01:24:25.535633087 CEST	443	49728	216.58.206.36	192.168.2.6
May 24, 2024 01:24:25.671504974 CEST	49749	80	192.168.2.6	54.148.105.250
May 24, 2024 01:24:25.672153950 CEST	49750	80	192.168.2.6	54.148.105.250
May 24, 2024 01:24:25.679152966 CEST	80	49749	54.148.105.250	192.168.2.6
May 24, 2024 01:24:25.679260015 CEST	49749	80	192.168.2.6	54.148.105.250
May 24, 2024 01:24:25.679752111 CEST	49749	80	192.168.2.6	54.148.105.250
May 24, 2024 01:24:25.683922052 CEST	80	49750	54.148.105.250	192.168.2.6
May 24, 2024 01:24:25.684029102 CEST	49750	80	192.168.2.6	54.148.105.250
May 24, 2024 01:24:25.688762903 CEST	80	49749	54.148.105.250	192.168.2.6
May 24, 2024 01:24:26.279999018 CEST	80	49749	54.148.105.250	192.168.2.6
May 24, 2024 01:24:26.283747911 CEST	49751	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:26.283812046 CEST	443	49751	35.160.201.168	192.168.2.6
May 24, 2024 01:24:26.283885002 CEST	49751	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:26.284481049 CEST	49751	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:26.284501076 CEST	443	49751	35.160.201.168	192.168.2.6
May 24, 2024 01:24:26.321155071 CEST	49749	80	192.168.2.6	54.148.105.250
May 24, 2024 01:24:26.886672020 CEST	443	49751	35.160.201.168	192.168.2.6
May 24, 2024 01:24:26.887459040 CEST	49751	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:26.887523890 CEST	443	49751	35.160.201.168	192.168.2.6
May 24, 2024 01:24:26.888025999 CEST	443	49751	35.160.201.168	192.168.2.6
May 24, 2024 01:24:26.890168905 CEST	49751	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:26.890260935 CEST	443	49751	35.160.201.168	192.168.2.6
May 24, 2024 01:24:26.890983105 CEST	49751	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:26.934498072 CEST	443	49751	35.160.201.168	192.168.2.6
May 24, 2024 01:24:27.159845114 CEST	443	49751	35.160.201.168	192.168.2.6
May 24, 2024 01:24:27.159913063 CEST	443	49751	35.160.201.168	192.168.2.6
May 24, 2024 01:24:27.160001040 CEST	49751	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:27.160043001 CEST	443	49751	35.160.201.168	192.168.2.6
May 24, 2024 01:24:27.160099983 CEST	443	49751	35.160.201.168	192.168.2.6
May 24, 2024 01:24:27.160180092 CEST	49751	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:27.161521912 CEST	49751	443	192.168.2.6	35.160.201.168
May 24, 2024 01:24:27.161566019 CEST	443	49751	35.160.201.168	192.168.2.6
May 24, 2024 01:24:30.027848005 CEST	49704	443	192.168.2.6	173.222.162.64
May 24, 2024 01:24:30.029968023 CEST	49704	443	192.168.2.6	173.222.162.64
May 24, 2024 01:24:30.030960083 CEST	49759	443	192.168.2.6	173.222.162.64
May 24, 2024 01:24:30.030982018 CEST	443	49759	173.222.162.64	192.168.2.6
May 24, 2024 01:24:30.031160116 CEST	49759	443	192.168.2.6	173.222.162.64
May 24, 2024 01:24:30.031656981 CEST	49759	443	192.168.2.6	173.222.162.64
May 24, 2024 01:24:30.031671047 CEST	443	49759	173.222.162.64	192.168.2.6
May 24, 2024 01:24:30.033041954 CEST	443	49704	173.222.162.64	192.168.2.6
May 24, 2024 01:24:30.037906885 CEST	443	49704	173.222.162.64	192.168.2.6
May 24, 2024 01:24:30.712348938 CEST	443	49759	173.222.162.64	192.168.2.6
May 24, 2024 01:24:30.712554932 CEST	49759	443	192.168.2.6	173.222.162.64
May 24, 2024 01:24:32.562452078 CEST	49760	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:32.562573910 CEST	443	49760	40.115.3.253	192.168.2.6
May 24, 2024 01:24:32.562674999 CEST	49760	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:32.563299894 CEST	49760	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:32.563338041 CEST	443	49760	40.115.3.253	192.168.2.6
May 24, 2024 01:24:33.425766945 CEST	443	49760	40.115.3.253	192.168.2.6
May 24, 2024 01:24:33.425901890 CEST	49760	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:33.431436062 CEST	49760	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:33.431457996 CEST	443	49760	40.115.3.253	192.168.2.6
May 24, 2024 01:24:33.431762934 CEST	443	49760	40.115.3.253	192.168.2.6
May 24, 2024 01:24:33.436496973 CEST	49760	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:33.436568975 CEST	49760	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:33.436578035 CEST	443	49760	40.115.3.253	192.168.2.6
May 24, 2024 01:24:33.436706066 CEST	49760	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:33.478512049 CEST	443	49760	40.115.3.253	192.168.2.6
May 24, 2024 01:24:33.631567001 CEST	443	49760	40.115.3.253	192.168.2.6
May 24, 2024 01:24:33.631695032 CEST	443	49760	40.115.3.253	192.168.2.6
May 24, 2024 01:24:33.631851912 CEST	49760	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:33.632011890 CEST	49760	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:33.632031918 CEST	443	49760	40.115.3.253	192.168.2.6
May 24, 2024 01:24:34.405971050 CEST	55938	53	192.168.2.6	1.1.1.1
May 24, 2024 01:24:34.410881996 CEST	53	55938	1.1.1.1	192.168.2.6
May 24, 2024 01:24:34.410969973 CEST	55938	53	192.168.2.6	1.1.1.1
May 24, 2024 01:24:34.411190033 CEST	55938	53	192.168.2.6	1.1.1.1
May 24, 2024 01:24:34.422905922 CEST	53	55938	1.1.1.1	192.168.2.6
May 24, 2024 01:24:34.859613895 CEST	53	55938	1.1.1.1	192.168.2.6
May 24, 2024 01:24:34.860584974 CEST	55938	53	192.168.2.6	1.1.1.1
May 24, 2024 01:24:34.866034031 CEST	53	55938	1.1.1.1	192.168.2.6
May 24, 2024 01:24:34.866271973 CEST	55938	53	192.168.2.6	1.1.1.1
May 24, 2024 01:24:38.826891899 CEST	55940	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:38.826946974 CEST	443	55940	40.115.3.253	192.168.2.6
May 24, 2024 01:24:38.827013016 CEST	55940	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:38.827861071 CEST	55940	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:38.827874899 CEST	443	55940	40.115.3.253	192.168.2.6
May 24, 2024 01:24:39.658960104 CEST	443	55940	40.115.3.253	192.168.2.6
May 24, 2024 01:24:39.659063101 CEST	55940	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:39.660914898 CEST	55940	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:39.660924911 CEST	443	55940	40.115.3.253	192.168.2.6
May 24, 2024 01:24:39.661722898 CEST	443	55940	40.115.3.253	192.168.2.6
May 24, 2024 01:24:39.663579941 CEST	55940	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:39.663641930 CEST	55940	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:39.663659096 CEST	443	55940	40.115.3.253	192.168.2.6
May 24, 2024 01:24:39.663748980 CEST	55940	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:39.710510969 CEST	443	55940	40.115.3.253	192.168.2.6
May 24, 2024 01:24:39.886337042 CEST	443	55940	40.115.3.253	192.168.2.6
May 24, 2024 01:24:39.886992931 CEST	55940	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:39.886992931 CEST	55940	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:39.887063980 CEST	443	55940	40.115.3.253	192.168.2.6
May 24, 2024 01:24:39.887135983 CEST	55940	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:49.929963112 CEST	443	49759	173.222.162.64	192.168.2.6
May 24, 2024 01:24:49.930114031 CEST	49759	443	192.168.2.6	173.222.162.64
May 24, 2024 01:24:51.264277935 CEST	55941	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:51.264374971 CEST	443	55941	40.115.3.253	192.168.2.6
May 24, 2024 01:24:51.264472961 CEST	55941	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:51.265074015 CEST	55941	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:51.265113115 CEST	443	55941	40.115.3.253	192.168.2.6
May 24, 2024 01:24:52.109098911 CEST	443	55941	40.115.3.253	192.168.2.6
May 24, 2024 01:24:52.109214067 CEST	55941	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:52.112065077 CEST	55941	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:52.112103939 CEST	443	55941	40.115.3.253	192.168.2.6
May 24, 2024 01:24:52.112329960 CEST	443	55941	40.115.3.253	192.168.2.6
May 24, 2024 01:24:52.119803905 CEST	55941	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:52.119955063 CEST	55941	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:52.119976044 CEST	443	55941	40.115.3.253	192.168.2.6
May 24, 2024 01:24:52.120450974 CEST	55941	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:52.162542105 CEST	443	55941	40.115.3.253	192.168.2.6
May 24, 2024 01:24:52.331630945 CEST	443	55941	40.115.3.253	192.168.2.6
May 24, 2024 01:24:52.332525015 CEST	55941	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:52.332604885 CEST	443	55941	40.115.3.253	192.168.2.6
May 24, 2024 01:24:52.332837105 CEST	443	55941	40.115.3.253	192.168.2.6
May 24, 2024 01:24:52.332887888 CEST	55941	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:52.332933903 CEST	55941	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:58.493669987 CEST	55942	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:58.493769884 CEST	443	55942	40.115.3.253	192.168.2.6
May 24, 2024 01:24:58.493948936 CEST	55942	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:58.494844913 CEST	55942	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:58.494879961 CEST	443	55942	40.115.3.253	192.168.2.6
May 24, 2024 01:24:59.351536036 CEST	443	55942	40.115.3.253	192.168.2.6
May 24, 2024 01:24:59.351655006 CEST	55942	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:59.353621960 CEST	55942	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:59.353655100 CEST	443	55942	40.115.3.253	192.168.2.6
May 24, 2024 01:24:59.353888988 CEST	443	55942	40.115.3.253	192.168.2.6
May 24, 2024 01:24:59.355216026 CEST	55942	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:59.355320930 CEST	55942	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:59.355321884 CEST	55942	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:59.355339050 CEST	443	55942	40.115.3.253	192.168.2.6
May 24, 2024 01:24:59.402491093 CEST	443	55942	40.115.3.253	192.168.2.6
May 24, 2024 01:24:59.579869032 CEST	443	55942	40.115.3.253	192.168.2.6
May 24, 2024 01:24:59.580332994 CEST	55942	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:59.580379009 CEST	443	55942	40.115.3.253	192.168.2.6
May 24, 2024 01:24:59.580429077 CEST	55942	443	192.168.2.6	40.115.3.253
May 24, 2024 01:24:59.580455065 CEST	55942	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:10.692853928 CEST	49750	80	192.168.2.6	54.148.105.250
May 24, 2024 01:25:10.698097944 CEST	80	49750	54.148.105.250	192.168.2.6
May 24, 2024 01:25:11.286623955 CEST	49749	80	192.168.2.6	54.148.105.250
May 24, 2024 01:25:11.291821003 CEST	80	49749	54.148.105.250	192.168.2.6
May 24, 2024 01:25:12.653539896 CEST	62951	53	192.168.2.6	1.1.1.1
May 24, 2024 01:25:12.658559084 CEST	53	62951	1.1.1.1	192.168.2.6
May 24, 2024 01:25:12.658642054 CEST	62951	53	192.168.2.6	1.1.1.1
May 24, 2024 01:25:12.658675909 CEST	62951	53	192.168.2.6	1.1.1.1
May 24, 2024 01:25:12.711103916 CEST	53	62951	1.1.1.1	192.168.2.6
May 24, 2024 01:25:13.155468941 CEST	53	62951	1.1.1.1	192.168.2.6
May 24, 2024 01:25:13.155803919 CEST	62951	53	192.168.2.6	1.1.1.1
May 24, 2024 01:25:13.169742107 CEST	53	62951	1.1.1.1	192.168.2.6
May 24, 2024 01:25:13.175271034 CEST	62951	53	192.168.2.6	1.1.1.1
May 24, 2024 01:25:14.884558916 CEST	62953	443	192.168.2.6	216.58.206.36
May 24, 2024 01:25:14.884589911 CEST	443	62953	216.58.206.36	192.168.2.6
May 24, 2024 01:25:14.884656906 CEST	62953	443	192.168.2.6	216.58.206.36
May 24, 2024 01:25:14.885585070 CEST	62953	443	192.168.2.6	216.58.206.36
May 24, 2024 01:25:14.885597944 CEST	443	62953	216.58.206.36	192.168.2.6
May 24, 2024 01:25:15.156635046 CEST	62954	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:15.156660080 CEST	443	62954	40.115.3.253	192.168.2.6
May 24, 2024 01:25:15.156732082 CEST	62954	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:15.157685995 CEST	62954	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:15.157699108 CEST	443	62954	40.115.3.253	192.168.2.6
May 24, 2024 01:25:15.540921926 CEST	443	62953	216.58.206.36	192.168.2.6
May 24, 2024 01:25:15.541366100 CEST	62953	443	192.168.2.6	216.58.206.36
May 24, 2024 01:25:15.541382074 CEST	443	62953	216.58.206.36	192.168.2.6
May 24, 2024 01:25:15.542074919 CEST	443	62953	216.58.206.36	192.168.2.6
May 24, 2024 01:25:15.542510986 CEST	62953	443	192.168.2.6	216.58.206.36
May 24, 2024 01:25:15.542598963 CEST	443	62953	216.58.206.36	192.168.2.6
May 24, 2024 01:25:15.583673954 CEST	62953	443	192.168.2.6	216.58.206.36
May 24, 2024 01:25:16.001066923 CEST	443	62954	40.115.3.253	192.168.2.6
May 24, 2024 01:25:16.001230001 CEST	62954	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:16.003541946 CEST	62954	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:16.003552914 CEST	443	62954	40.115.3.253	192.168.2.6
May 24, 2024 01:25:16.003878117 CEST	443	62954	40.115.3.253	192.168.2.6
May 24, 2024 01:25:16.006340027 CEST	62954	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:16.006426096 CEST	62954	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:16.006432056 CEST	443	62954	40.115.3.253	192.168.2.6
May 24, 2024 01:25:16.006612062 CEST	62954	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:16.054534912 CEST	443	62954	40.115.3.253	192.168.2.6
May 24, 2024 01:25:16.233056068 CEST	443	62954	40.115.3.253	192.168.2.6
May 24, 2024 01:25:16.233834028 CEST	62954	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:16.233848095 CEST	443	62954	40.115.3.253	192.168.2.6
May 24, 2024 01:25:16.233870029 CEST	62954	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:16.233913898 CEST	62954	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:20.606880903 CEST	62955	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:20.606934071 CEST	443	62955	40.115.3.253	192.168.2.6
May 24, 2024 01:25:20.606998920 CEST	62955	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:20.608258009 CEST	62955	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:20.608273029 CEST	443	62955	40.115.3.253	192.168.2.6
May 24, 2024 01:25:21.470441103 CEST	443	62955	40.115.3.253	192.168.2.6
May 24, 2024 01:25:21.470619917 CEST	62955	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:21.474081993 CEST	62955	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:21.474102020 CEST	443	62955	40.115.3.253	192.168.2.6
May 24, 2024 01:25:21.474462986 CEST	443	62955	40.115.3.253	192.168.2.6
May 24, 2024 01:25:21.476604939 CEST	62955	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:21.476604939 CEST	62955	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:21.476636887 CEST	443	62955	40.115.3.253	192.168.2.6
May 24, 2024 01:25:21.476716995 CEST	62955	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:21.522494078 CEST	443	62955	40.115.3.253	192.168.2.6
May 24, 2024 01:25:21.710299969 CEST	443	62955	40.115.3.253	192.168.2.6
May 24, 2024 01:25:21.711179018 CEST	62955	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:21.711210012 CEST	443	62955	40.115.3.253	192.168.2.6
May 24, 2024 01:25:21.711374998 CEST	62955	443	192.168.2.6	40.115.3.253
May 24, 2024 01:25:25.448920965 CEST	443	62953	216.58.206.36	192.168.2.6
May 24, 2024 01:25:25.449009895 CEST	443	62953	216.58.206.36	192.168.2.6
May 24, 2024 01:25:25.450510979 CEST	62953	443	192.168.2.6	216.58.206.36
May 24, 2024 01:25:25.524199963 CEST	62953	443	192.168.2.6	216.58.206.36
May 24, 2024 01:25:25.524210930 CEST	443	62953	216.58.206.36	192.168.2.6
May 24, 2024 01:25:27.857127905 CEST	49750	80	192.168.2.6	54.148.105.250
May 24, 2024 01:25:27.863109112 CEST	80	49750	54.148.105.250	192.168.2.6
May 24, 2024 01:25:27.863167048 CEST	49750	80	192.168.2.6	54.148.105.250

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 24, 2024 01:24:11.199055910 CEST	53	56877	1.1.1.1	192.168.2.6
May 24, 2024 01:24:11.208734035 CEST	53	62954	1.1.1.1	192.168.2.6
May 24, 2024 01:24:12.310605049 CEST	53	49679	1.1.1.1	192.168.2.6
May 24, 2024 01:24:13.026669025 CEST	59652	53	192.168.2.6	1.1.1.1
May 24, 2024 01:24:13.027035952 CEST	60785	53	192.168.2.6	1.1.1.1
May 24, 2024 01:24:13.067574978 CEST	53	59652	1.1.1.1	192.168.2.6
May 24, 2024 01:24:13.087302923 CEST	53	60785	1.1.1.1	192.168.2.6
May 24, 2024 01:24:14.825367928 CEST	53292	53	192.168.2.6	1.1.1.1
May 24, 2024 01:24:14.825917006 CEST	60448	53	192.168.2.6	1.1.1.1
May 24, 2024 01:24:14.846658945 CEST	53	60448	1.1.1.1	192.168.2.6
May 24, 2024 01:24:14.855715036 CEST	53	53292	1.1.1.1	192.168.2.6
May 24, 2024 01:24:18.783233881 CEST	58264	53	192.168.2.6	1.1.1.1
May 24, 2024 01:24:18.785187960 CEST	49262	53	192.168.2.6	1.1.1.1
May 24, 2024 01:24:18.887315035 CEST	53	49262	1.1.1.1	192.168.2.6
May 24, 2024 01:24:18.887330055 CEST	53	58264	1.1.1.1	192.168.2.6
May 24, 2024 01:24:25.571679115 CEST	51311	53	192.168.2.6	1.1.1.1
May 24, 2024 01:24:25.572391033 CEST	60331	53	192.168.2.6	1.1.1.1
May 24, 2024 01:24:25.614358902 CEST	53	60331	1.1.1.1	192.168.2.6
May 24, 2024 01:24:25.614378929 CEST	53	51311	1.1.1.1	192.168.2.6
May 24, 2024 01:24:29.351557970 CEST	53	53722	1.1.1.1	192.168.2.6
May 24, 2024 01:24:34.405106068 CEST	53	56966	1.1.1.1	192.168.2.6
May 24, 2024 01:25:10.417834997 CEST	53	62678	1.1.1.1	192.168.2.6
May 24, 2024 01:25:12.653100014 CEST	53	63125	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
May 24, 2024 01:24:13.087369919 CEST	192.168.2.6	1.1.1.1	c23a	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 24, 2024 01:24:13.026669025 CEST	192.168.2.6	1.1.1.1	0xa509	Standard query (0)	survey.vovici.com	A (IP address)	IN (0x0001)	false
May 24, 2024 01:24:13.027035952 CEST	192.168.2.6	1.1.1.1	0xea0	Standard query (0)	survey.vovici.com	65	IN (0x0001)	false
May 24, 2024 01:24:14.825367928 CEST	192.168.2.6	1.1.1.1	0x241	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 24, 2024 01:24:14.825917006 CEST	192.168.2.6	1.1.1.1	0x141e	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 24, 2024 01:24:18.783233881 CEST	192.168.2.6	1.1.1.1	0x441c	Standard query (0)	survey.vovici.com	A (IP address)	IN (0x0001)	false
May 24, 2024 01:24:18.785187960 CEST	192.168.2.6	1.1.1.1	0x5bd1	Standard query (0)	survey.vovici.com	65	IN (0x0001)	false
May 24, 2024 01:24:25.571679115 CEST	192.168.2.6	1.1.1.1	0xa6f1	Standard query (0)	survey.vovici.com	A (IP address)	IN (0x0001)	false
May 24, 2024 01:24:25.572391033 CEST	192.168.2.6	1.1.1.1	0x77bf	Standard query (0)	survey.vovici.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 24, 2024 01:24:13.067574978 CEST	1.1.1.1	192.168.2.6	0xa509	No error (0)	survey.vovici.com		35.160.201.168	A (IP address)	IN (0x0001)	false
May 24, 2024 01:24:13.067574978 CEST	1.1.1.1	192.168.2.6	0xa509	No error (0)	survey.vovici.com		54.148.105.250	A (IP address)	IN (0x0001)	false
May 24, 2024 01:24:14.846658945 CEST	1.1.1.1	192.168.2.6	0x141e	No error (0)	www.google.com			65	IN (0x0001)	false
May 24, 2024 01:24:14.855715036 CEST	1.1.1.1	192.168.2.6	0x241	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
May 24, 2024 01:24:18.887330055 CEST	1.1.1.1	192.168.2.6	0x441c	No error (0)	survey.vovici.com		35.160.201.168	A (IP address)	IN (0x0001)	false
May 24, 2024 01:24:18.887330055 CEST	1.1.1.1	192.168.2.6	0x441c	No error (0)	survey.vovici.com		54.148.105.250	A (IP address)	IN (0x0001)	false
May 24, 2024 01:24:25.614378929 CEST	1.1.1.1	192.168.2.6	0xa6f1	No error (0)	survey.vovici.com		54.148.105.250	A (IP address)	IN (0x0001)	false
May 24, 2024 01:24:25.614378929 CEST	1.1.1.1	192.168.2.6	0xa6f1	No error (0)	survey.vovici.com		35.160.201.168	A (IP address)	IN (0x0001)	false
May 24, 2024 01:24:26.660689116 CEST	1.1.1.1	192.168.2.6	0xbd30	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 01:24:26.660689116 CEST	1.1.1.1	192.168.2.6	0xbd30	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

survey.vovici.com

https:

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49749	54.148.105.250	80	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 24, 2024 01:24:25.679752111 CEST	610	OUT	GET /oh/2AD3ADAC691BBD2308DC7A75D80BDEE178 HTTP/1.1 Host: survey.vovici.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=exP3iQa0YCZjqyxwz1NTzgMlqxp7lI0yh15H41N1FRwkbt6Wo3/uZPQ0hgmtoWOhPFp8snq6qM371o1+WWqMM5gjAYg5wxRd5FEGEbGV4TJuKljxf7X4NACmASMP
May 24, 2024 01:24:26.279999018 CEST	914	IN	HTTP/1.1 307 Moved Temporarily Date: Thu, 23 May 2024 23:24:26 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 186 Connection: keep-alive Set-Cookie: AWSALB=WlkJ85Jofj81b01rKSr4Q9tM+d2mo2hxpfXB4wO99m3a2y404SKcqOhip0g9Z0I8YS4aPhnc+SvA3xPMeeHkJ/8DO4bSswXKvh54Ke+zTBlefBd2c5b3fv77YtAB; Expires=Thu, 30 May 2024 23:24:26 GMT; Path=/ Set-Cookie: AWSALBCORS=WlkJ85Jofj81b01rKSr4Q9tM+d2mo2hxpfXB4wO99m3a2y404SKcqOhip0g9Z0I8YS4aPhnc+SvA3xPMeeHkJ/8DO4bSswXKvh54Ke+zTBlefBd2c5b3fv77YtAB; Expires=Thu, 30 May 2024 23:24:26 GMT; Path=/; SameSite=None Location: https://survey.vovici.com/oh/2AD3ADAC691BBD2308DC7A75D80BDEE178 Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Data Raw: 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 4d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 31 3e 4f 62 6a 65 63 74 20 4d 6f 76 65 64 3c 2f 68 31 3e 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 3c 61 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 75 72 76 65 79 2e 76 6f 76 69 63 69 2e 63 6f 6d 2f 6f 68 2f 32 41 44 33 41 44 41 43 36 39 31 42 42 44 32 33 30 38 44 43 37 41 37 35 44 38 30 42 44 45 45 31 37 38 22 3e 68 65 72 65 3c 2f 61 3e 3c 2f 62 6f 64 79 3e Data Ascii: <head><title>Document Moved</title></head><body><h1>Object Moved</h1>This document may be found <a HREF="https://survey.vovici.com/oh/2AD3ADAC691BBD2308DC7A75D80BDEE178">here</a></body>
May 24, 2024 01:25:11.286623955 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49750	54.148.105.250	80	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 24, 2024 01:25:10.692853928 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49711	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:02 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 74 63 69 65 48 6d 63 42 4e 6b 2b 38 31 72 53 56 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 66 64 37 65 34 64 31 30 64 31 30 61 39 30 34 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: tcieHmcBNk+81rSV.1Context: ffd7e4d10d10a904
2024-05-23 23:24:02 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-23 23:24:02 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 74 63 69 65 48 6d 63 42 4e 6b 2b 38 31 72 53 56 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 66 64 37 65 34 64 31 30 64 31 30 61 39 30 34 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 4b 4d 36 36 69 74 7a 4f 2f 52 41 4c 47 66 65 48 6b 6d 51 2f 53 4d 44 6b 61 34 76 66 66 76 54 6d 6d 35 73 37 49 67 36 7a 35 72 50 6e 38 4e 31 74 52 69 59 30 6f 47 75 31 2f 6e 4f 75 70 4d 45 6c 38 6d 45 52 54 6c 56 50 72 39 6e 64 43 66 66 55 31 4b 4f 32 43 4e 30 32 45 30 4f 78 75 44 59 7a 73 5a 30 47 32 2f 4d 45 4f 6f 53 76 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: tcieHmcBNk+81rSV.2Context: ffd7e4d10d10a904<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfKM66itzO/RALGfeHkmQ/SMDka4vffvTmm5s7Ig6z5rPn8N1tRiY0oGu1/nOupMEl8mERTlVPr9ndCffU1KO2CN02E0OxuDYzsZ0G2/MEOoSv
2024-05-23 23:24:02 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 74 63 69 65 48 6d 63 42 4e 6b 2b 38 31 72 53 56 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 66 64 37 65 34 64 31 30 64 31 30 61 39 30 34 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: tcieHmcBNk+81rSV.3Context: ffd7e4d10d10a904
2024-05-23 23:24:03 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-23 23:24:03 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 7a 70 30 53 71 75 57 6d 64 6b 75 4c 6a 65 58 57 51 66 4e 62 72 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: zp0SquWmdkuLjeXWQfNbrw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49712	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:10 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4d 4c 53 2b 79 4c 31 68 52 6b 75 2b 41 6f 65 39 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 34 36 31 61 34 34 34 30 66 30 63 39 63 33 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: MLS+yL1hRku+Aoe9.1Context: 4461a4440f0c9c3d
2024-05-23 23:24:10 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-23 23:24:10 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 4d 4c 53 2b 79 4c 31 68 52 6b 75 2b 41 6f 65 39 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 34 36 31 61 34 34 34 30 66 30 63 39 63 33 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 4b 4d 36 36 69 74 7a 4f 2f 52 41 4c 47 66 65 48 6b 6d 51 2f 53 4d 44 6b 61 34 76 66 66 76 54 6d 6d 35 73 37 49 67 36 7a 35 72 50 6e 38 4e 31 74 52 69 59 30 6f 47 75 31 2f 6e 4f 75 70 4d 45 6c 38 6d 45 52 54 6c 56 50 72 39 6e 64 43 66 66 55 31 4b 4f 32 43 4e 30 32 45 30 4f 78 75 44 59 7a 73 5a 30 47 32 2f 4d 45 4f 6f 53 76 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: MLS+yL1hRku+Aoe9.2Context: 4461a4440f0c9c3d<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfKM66itzO/RALGfeHkmQ/SMDka4vffvTmm5s7Ig6z5rPn8N1tRiY0oGu1/nOupMEl8mERTlVPr9ndCffU1KO2CN02E0OxuDYzsZ0G2/MEOoSv
2024-05-23 23:24:10 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 4d 4c 53 2b 79 4c 31 68 52 6b 75 2b 41 6f 65 39 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 34 36 31 61 34 34 34 30 66 30 63 39 63 33 64 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: MLS+yL1hRku+Aoe9.3Context: 4461a4440f0c9c3d
2024-05-23 23:24:11 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-23 23:24:11 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6d 30 77 64 37 77 2f 59 72 45 47 35 33 55 34 4f 65 57 37 75 46 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: m0wd7w/YrEG53U4OeW7uFw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49718	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:13 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 33 6e 6e 66 76 4b 55 55 63 6b 47 79 4f 42 2b 66 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 64 34 31 63 39 31 66 38 36 37 65 39 37 37 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 3nnfvKUUckGyOB+f.1Context: ed41c91f867e9773
2024-05-23 23:24:13 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-23 23:24:13 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 33 6e 6e 66 76 4b 55 55 63 6b 47 79 4f 42 2b 66 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 64 34 31 63 39 31 66 38 36 37 65 39 37 37 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 4b 4d 36 36 69 74 7a 4f 2f 52 41 4c 47 66 65 48 6b 6d 51 2f 53 4d 44 6b 61 34 76 66 66 76 54 6d 6d 35 73 37 49 67 36 7a 35 72 50 6e 38 4e 31 74 52 69 59 30 6f 47 75 31 2f 6e 4f 75 70 4d 45 6c 38 6d 45 52 54 6c 56 50 72 39 6e 64 43 66 66 55 31 4b 4f 32 43 4e 30 32 45 30 4f 78 75 44 59 7a 73 5a 30 47 32 2f 4d 45 4f 6f 53 76 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: 3nnfvKUUckGyOB+f.2Context: ed41c91f867e9773<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfKM66itzO/RALGfeHkmQ/SMDka4vffvTmm5s7Ig6z5rPn8N1tRiY0oGu1/nOupMEl8mERTlVPr9ndCffU1KO2CN02E0OxuDYzsZ0G2/MEOoSv
2024-05-23 23:24:13 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 33 6e 6e 66 76 4b 55 55 63 6b 47 79 4f 42 2b 66 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 64 34 31 63 39 31 66 38 36 37 65 39 37 37 33 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 3nnfvKUUckGyOB+f.3Context: ed41c91f867e9773<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-05-23 23:24:13 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-23 23:24:13 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 7a 66 6b 73 4b 4f 48 30 56 30 2b 32 69 65 68 32 49 78 5a 31 58 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: zfksKOH0V0+2ieh2IxZ1XQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49719	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:13 UTC	698	OUT	GET /och/2AD3ADAC691BBD2308DC7A75D80BDEE178 HTTP/1.1 Host: survey.vovici.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 23:24:14 UTC	866	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:14 GMT Content-Type: text/html; charset=utf-8 Content-Length: 4654 Connection: close Set-Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; Expires=Thu, 30 May 2024 23:24:14 GMT; Path=/ Set-Cookie: AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; Expires=Thu, 30 May 2024 23:24:14 GMT; Path=/; SameSite=None; Secure Cache-Control: private Server: Microsoft-IIS/10.0 X-UA-Compatible: IE=8,IE=9,IE=10,IE=11 Set-Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; path=/; secure; HttpOnly; SameSite=Lax X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:14 UTC	4654	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 37 20 76 74 2d 61 64 61 70 74 69 76 65 20 76 74 2d 6c 61 6e 67 2d 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 38 20 76 74 2d 61 64 61 70 74 69 76 65 20 76 74 2d 6c 61 6e 67 2d 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6d 6f 64 65 72 6e 20 69 65 39 20 76 74 2d 61 64 61 70 74 69 76 65 Data Ascii: <!DOCTYPE HTML>...[if lt IE 8]><html class="ie7 vt-adaptive vt-lang-ltr" lang="en-US" dir="ltr"><![endif]-->...[if IE 8]><html class="ie8 vt-adaptive vt-lang-ltr" lang="en-US" dir="ltr"><![endif]-->...[if IE 9]><html class="modern ie9 vt-adaptive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49720	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:14 UTC	926	OUT	GET /static/bootstrap.min.css?000022CB HTTP/1.1 Host: survey.vovici.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; ASP.NET_SessionId=4l4mj1quseszulhcael1nayc
2024-05-23 23:24:14 UTC	786	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:14 GMT Content-Type: text/css Content-Length: 121450 Connection: close Set-Cookie: AWSALB=EfV4driAQjp5jHPQbL0qzwbmbtlzRla4u+ppvDL2H5BNS5EHZbWFRgElH1whZPgyLS1hBq0rRzYY5Ft1tLITfn7Q7oHrlxXsyYofSjdk1ETC4Hkz5SndUDfc4Dux; Expires=Thu, 30 May 2024 23:24:14 GMT; Path=/ Set-Cookie: AWSALBCORS=EfV4driAQjp5jHPQbL0qzwbmbtlzRla4u+ppvDL2H5BNS5EHZbWFRgElH1whZPgyLS1hBq0rRzYY5Ft1tLITfn7Q7oHrlxXsyYofSjdk1ETC4Hkz5SndUDfc4Dux; Expires=Thu, 30 May 2024 23:24:14 GMT; Path=/; SameSite=None; Secure Last-Modified: Tue, 30 Jan 2024 16:22:24 GMT Accept-Ranges: bytes ETag: "020e1819853da1:0" Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:14 UTC	9780	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 34 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b 66 6f 6e 74 Data Ascii: /! Bootstrap v3.4.1 (https://getbootstrap.com/) * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font
2024-05-23 23:24:14 UTC	16384	IN	Data Raw: 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 69 72 63 6c 65 2d 61 72 72 6f 77 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 67 6c 6f 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 77 72 65 6e 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 61 73 6b 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 69 6c 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 72 69 65 66 63 61 73 65 Data Ascii: fore{content:"\e133"}.glyphicon-circle-arrow-down:before{content:"\e134"}.glyphicon-globe:before{content:"\e135"}.glyphicon-wrench:before{content:"\e136"}.glyphicon-tasks:before{content:"\e137"}.glyphicon-filter:before{content:"\e138"}.glyphicon-briefcase
2024-05-23 23:24:14 UTC	16384	IN	Data Raw: 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 63 6f 6c 2d 6d 64 2d 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e Data Ascii: ol-sm-offset-3{margin-left:25%}.col-sm-offset-2{margin-left:16.66666667%}.col-sm-offset-1{margin-left:8.33333333%}.col-sm-offset-0{margin-left:0}}@media (min-width:992px){.col-md-1,.col-md-10,.col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.
2024-05-23 23:24:14 UTC	16384	IN	Data Raw: 6f 78 2c 2e 68 61 73 2d 77 61 72 6e 69 6e 67 20 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 6c 69 6e 65 2c 2e 68 61 73 2d 77 61 72 6e 69 6e 67 20 2e 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 2c 2e 68 61 73 2d 77 61 72 6e 69 6e 67 20 2e 68 65 6c 70 2d 62 6c 6f 63 6b 2c 2e 68 61 73 2d 77 61 72 6e 69 6e 67 20 2e 72 61 64 69 6f 2c 2e 68 61 73 2d 77 61 72 6e 69 6e 67 20 2e 72 61 64 69 6f 2d 69 6e 6c 69 6e 65 2c 2e 68 61 73 2d 77 61 72 6e 69 6e 67 2e 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 2c 2e 68 61 73 2d 77 61 72 6e 69 6e 67 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 6c 69 6e 65 20 6c 61 62 65 6c 2c 2e 68 61 73 2d 77 61 72 6e 69 6e 67 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 68 61 73 2d 77 61 72 6e 69 6e 67 2e 72 61 64 69 6f 2d 69 6e 6c 69 6e 65 20 6c 61 62 65 6c 7b 63 6f Data Ascii: ox,.has-warning .checkbox-inline,.has-warning .control-label,.has-warning .help-block,.has-warning .radio,.has-warning .radio-inline,.has-warning.checkbox label,.has-warning.checkbox-inline label,.has-warning.radio label,.has-warning.radio-inline label{co
2024-05-23 23:24:14 UTC	16384	IN	Data Raw: 74 6e 2d 6c 67 2b 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 32 70 78 7d 2e 62 74 6e 2d 67 72 6f 75 70 2e 6f 70 65 6e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 70 78 20 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 70 78 20 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 35 29 7d 2e 62 74 6e 2d 67 72 6f 75 70 2e 6f 70 65 6e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 6c 69 6e 6b 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b Data Ascii: tn-lg+.dropdown-toggle{padding-right:12px;padding-left:12px}.btn-group.open .dropdown-toggle{-webkit-box-shadow:inset 0 3px 5px rgba(0,0,0,.125);box-shadow:inset 0 3px 5px rgba(0,0,0,.125)}.btn-group.open .dropdown-toggle.btn-link{-webkit-box-shadow:none;
2024-05-23 23:24:14 UTC	16384	IN	Data Raw: 62 74 6e 2d 6c 69 6e 6b 5b 64 69 73 61 62 6c 65 64 5d 3a 68 6f 76 65 72 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 62 74 6e 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 62 74 6e 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 63 63 63 7d 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 32 32 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 38 30 38 30 38 7d 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 62 72 61 6e 64 7b 63 6f 6c 6f 72 3a 23 39 64 39 64 39 64 7d 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 Data Ascii: btn-link[disabled]:hover,fieldset[disabled] .navbar-default .btn-link:focus,fieldset[disabled] .navbar-default .btn-link:hover{color:#ccc}.navbar-inverse{background-color:#222;border-color:#080808}.navbar-inverse .navbar-brand{color:#9d9d9d}.navbar-invers
2024-05-23 23:24:14 UTC	16384	IN	Data Raw: 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 73 75 63 63 65 73 73 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 73 75 63 63 65 73 73 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 63 37 36 33 64 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 63 37 36 33 64 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 7b 63 6f 6c 6f 72 3a 23 33 31 37 30 38 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 39 65 64 66 37 7d 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 2c 62 75 74 74 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 7b 63 6f Data Ascii: on.list-group-item-success.active:focus,button.list-group-item-success.active:hover{color:#fff;background-color:#3c763d;border-color:#3c763d}.list-group-item-info{color:#31708f;background-color:#d9edf7}a.list-group-item-info,button.list-group-item-info{co
2024-05-23 23:24:15 UTC	13366	IN	Data Raw: 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 6d 6f 64 61 6c 2d 6c 67 7b 77 69 64 74 68 3a 39 30 30 70 78 7d 7d 2e 74 6f 6f 6c 74 69 70 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 31 30 37 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 35 37 31 34 33 3b 6c 69 6e 65 2d 62 72 65 61 6b 3a 61 75 74 6f 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 74 65 78 74 Data Ascii: px}}@media (min-width:992px){.modal-lg{width:900px}}.tooltip{position:absolute;z-index:1070;display:block;font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-style:normal;font-weight:400;line-height:1.42857143;line-break:auto;text-align:left;text

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49727	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:15 UTC	939	OUT	GET /static/kendo/css/kendo.common.min.css?000022CB HTTP/1.1 Host: survey.vovici.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; ASP.NET_SessionId=4l4mj1quseszulhcael1nayc
2024-05-23 23:24:15 UTC	786	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:15 GMT Content-Type: text/css Content-Length: 408843 Connection: close Set-Cookie: AWSALB=iH5Oh8anWNzXmfNON2/0fIPqr5dq9xBCoQx4vh/iBQgC/arI1rYSFXKS2BnNQACE5P9M2ySEFrjBnEC+wHzrgDm8npq6j63TjqAHMQFlNW3NpDl0xyKcAiIJPq+8; Expires=Thu, 30 May 2024 23:24:15 GMT; Path=/ Set-Cookie: AWSALBCORS=iH5Oh8anWNzXmfNON2/0fIPqr5dq9xBCoQx4vh/iBQgC/arI1rYSFXKS2BnNQACE5P9M2ySEFrjBnEC+wHzrgDm8npq6j63TjqAHMQFlNW3NpDl0xyKcAiIJPq+8; Expires=Thu, 30 May 2024 23:24:15 GMT; Path=/; SameSite=None; Secure Last-Modified: Tue, 30 Jan 2024 16:22:24 GMT Accept-Ranges: bytes ETag: "020e1819853da1:0" Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:15 UTC	15598	IN	Data Raw: 2f 2a 2a 20 0a 20 2a 20 4b 65 6e 64 6f 20 55 49 20 76 32 30 32 30 2e 32 2e 36 31 37 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 74 65 6c 65 72 69 6b 2e 63 6f 6d 2f 6b 65 6e 64 6f 2d 75 69 29 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 30 20 50 72 6f 67 72 65 73 73 20 53 6f 66 74 77 61 72 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 20 61 Data Ascii: /** * Kendo UI v2020.2.617 (http://www.telerik.com/kendo-ui) * Copyright 2020 Progress Software Corporation a
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 6c 65 64 20 2e 6b 2d 75 70 6c 6f 61 64 2d 62 75 74 74 6f 6e 20 69 6e 70 75 74 20 7b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 0a 7d 0a 0a 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 2e 37 0a 7d 0a 0a 20 20 20 20 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 20 3e 20 2e 6b 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 0a 20 20 20 20 7d 0a 0a 40 6d 65 64 69 61 20 70 72 69 6e 74 20 7b 0a 20 20 20 20 2e 6b 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 2c 20 2e 6b 2d 73 74 61 74 65 2d 64 69 Data Ascii: led .k-upload-button input { cursor: default !important; pointer-events: none; outline: 0}.k-state-disabled { opacity: .7} .k-state-disabled > .k-button { opacity: 1 }@media print { .k-state-disabled, .k-state-di
2024-05-23 23:24:15 UTC	430	IN	Data Raw: 63 68 3b 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 73 74 72 65 74 63 68 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 6c 69 6e 65 2d 70 61 63 6b 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 0a 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6b 2d 74 6f 6f 6c 62 61 72 20 3e 20 2a 20 3e 20 6c 61 62 65 6c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 34 70 78 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 2e 6b 2d 74 6f 6f 6c 62 61 72 20 3e 20 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 Data Ascii: ch; align-items: stretch; -ms-flex-line-pack: center; align-content: center; vertical-align: middle } .k-toolbar > * > label { margin-right: 4px } .k-toolbar > :last-child { mar
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 74 6f 6f 6c 62 61 72 20 6c 61 62 65 6c 20 7b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 69 74 65 6d 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 73 65 6c 66 3a 20 63 65 6e 74 65 72 0a 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 6b 2d 74 6f 6f 6c 62 61 72 20 2e 6b 2d 73 70 6c 69 74 2d 62 75 74 74 6f 6e 20 3e 20 2e 6b 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 69 74 65 6d 2d 61 6c 69 67 6e 3a 20 73 74 72 65 74 63 68 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 73 65 6c 66 3a 20 73 74 72 65 74 63 68 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 2e 6b 2d 74 6f 6f 6c 62 61 72 20 2e 6b 2d 6f 76 65 72 66 6c 6f 77 2d 61 6e 63 68 6f 72 20 Data Ascii: toolbar label { -ms-flex-item-align: center; align-self: center } .k-toolbar .k-split-button > .k-button { -ms-flex-item-align: stretch; align-self: stretch } .k-toolbar .k-overflow-anchor
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 72 2d 77 72 61 70 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 36 30 2d 72 69 67 68 74 2c 20 5b 64 69 72 3d 72 74 6c 5d 20 2e 6b 2d 70 61 67 65 72 2d 77 72 61 70 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 65 2c 20 5b 64 69 72 3d 72 74 6c 5d 20 2e 6b 2d 70 61 67 65 72 2d 77 72 61 70 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 65 6e 64 2d 6c 65 66 74 2c 20 5b 64 69 72 3d 72 74 6c 5d 20 2e 6b 2d 70 61 67 65 72 2d 77 72 61 70 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 65 6e 64 2d 72 69 67 68 74 2c 20 5b 64 69 72 3d 72 74 6c 5d 20 2e 6b 2d 70 61 67 65 72 2d 77 72 61 70 20 2e 6b 2d 69 2d 61 72 72 6f 77 2d 77 2c 20 5b 64 69 72 3d 72 74 6c 5d 20 2e 6b 2d 70 61 67 65 72 2d 77 72 61 70 20 2e 6b 2d 69 2d 73 65 65 6b 2d 65 2c 20 5b 64 69 72 3d 72 74 6c 5d 20 2e 6b 2d 70 61 67 65 72 2d 77 72 61 70 Data Ascii: r-wrap .k-i-arrow-60-right, [dir=rtl] .k-pager-wrap .k-i-arrow-e, [dir=rtl] .k-pager-wrap .k-i-arrow-end-left, [dir=rtl] .k-pager-wrap .k-i-arrow-end-right, [dir=rtl] .k-pager-wrap .k-i-arrow-w, [dir=rtl] .k-pager-wrap .k-i-seek-e, [dir=rtl] .k-pager-wrap
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 67 3a 20 2e 32 38 65 6d 20 2e 39 65 6d 20 2e 33 38 65 6d 20 31 2e 38 65 6d 0a 7d 0a 0a 2e 6b 2d 63 6f 6e 74 65 78 74 2d 6d 65 6e 75 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 0a 7d 0a 0a 2e 6b 2d 6c 69 73 74 76 69 65 77 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 30 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 Data Ascii: g: .28em .9em .38em 1.8em}.k-context-menu { border: 0; -webkit-user-select: none; -ms-user-select: none; user-select: none}.k-listview { padding: 0; margin: 0; border-width: 0; border-style: solid; box-sizing: bor
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 72 69 64 20 2e 6b 2d 67 72 6f 75 70 69 6e 67 2d 72 6f 77 20 2b 20 74 72 20 74 64 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 20 31 70 78 0a 7d 0a 0a 20 20 20 20 2e 6b 2d 67 72 69 64 20 2e 6b 2d 67 72 6f 75 70 69 6e 67 2d 72 6f 77 20 2b 20 74 72 20 74 64 2e 6b 2d 67 72 6f 75 70 2d 63 65 6c 6c 20 7b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 20 30 0a 20 20 20 20 7d 0a 0a 2e 6b 2d 67 72 69 64 20 2e 6b 2d 67 72 6f 75 70 2d 63 65 6c 6c 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 20 30 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 20 30 0a 7d 0a 0a 2e 6b 2d 67 72 69 64 2d 68 65 61 64 65 72 20 2e 6b 2d 69 2d 73 6f 72 74 2d 61 73 63 2d 73 6d Data Ascii: rid .k-grouping-row + tr td { border-top-width: 1px} .k-grid .k-grouping-row + tr td.k-group-cell { border-top-width: 0 }.k-grid .k-group-cell { border-bottom-width: 0; border-top-width: 0}.k-grid-header .k-i-sort-asc-sm
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 72 73 20 3e 20 2e 6b 2d 67 72 69 64 20 7b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 0a 7d 0a 0a 2e 6b 2d 70 69 76 6f 74 2d 74 61 62 6c 65 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 20 31 70 78 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 0a 7d 0a 0a 20 20 20 20 2e 6b 2d 70 69 76 6f 74 2d 74 61 62 6c 65 20 2e 6b 2d 67 72 69 64 2d 68 65 61 64 65 72 2d 77 72 61 70 20 3e 20 74 61 62 6c 65 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 0a 20 20 20 20 7d 0a 0a 2e 6b 2d 70 69 76 6f 74 20 2e 6b 2d 67 72 69 64 2d 68 65 61 64 65 72 20 2e 6b 2d 68 65 61 64 65 72 20 7b 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 0a 7d 0a Data Ascii: rs > .k-grid { overflow: hidden}.k-pivot-table { border-left-width: 1px; border-left-style: solid} .k-pivot-table .k-grid-header-wrap > table { height: 100% }.k-pivot .k-grid-header .k-header { vertical-align: top}
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 74 69 6d 65 2d 70 6f 70 75 70 20 2e 6b 2d 69 74 65 6d 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 70 78 20 33 70 78 0a 7d 0a 0a 2e 6b 2d 64 61 74 65 74 69 6d 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6b 2d 64 61 74 65 74 69 6d 65 2d 77 72 61 70 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 31 65 6d 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 0a 7d 0a 0a 2e 6b 2d 64 61 74 65 74 69 6d 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6b 2d 64 61 74 65 74 69 6d 65 2d 62 75 74 74 6f 6e 67 72 6f 75 70 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 38 70 78 0a 7d 0a 0a 2e 6b 2d 64 61 74 65 74 69 6d 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6b 2d 64 61 74 65 74 69 6d 65 2d 73 65 6c 65 63 74 6f 72 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d Data Ascii: time-popup .k-item { padding: 1px 3px}.k-datetime-container .k-datetime-wrap { width: 21em; overflow: hidden}.k-datetime-container .k-datetime-buttongroup { padding: 8px}.k-datetime-container .k-datetime-selector { display: -m
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 2d 39 2e 33 37 35 25 29 20 73 63 61 6c 65 28 2e 37 35 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 2e 35 37 31 65 6d 2c 2d 2e 31 33 33 39 32 38 35 37 32 35 65 6d 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 31 70 78 2c 2d 31 2e 32 33 37 35 65 6d 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 31 32 2e 35 25 2c 2d 39 2e 33 37 35 25 29 20 73 63 61 6c 65 28 2e 37 35 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 2e 35 37 31 65 6d 2c 2d 2e 31 33 33 39 32 38 35 37 32 35 65 6d 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 31 70 78 2c 2d 31 2e 32 33 37 35 65 6d 29 20 74 72 61 6e 73 6c 61 74 65 28 2d 31 32 2e 35 25 2c 2d 39 2e 33 37 35 25 29 20 Data Ascii: -9.375%) scale(.75); -ms-transform: translate(-.571em,-.1339285725em) translate(-1px,-1.2375em) translate(-12.5%,-9.375%) scale(.75); transform: translate(-.571em,-.1339285725em) translate(-1px,-1.2375em) translate(-12.5%,-9.375%)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49724	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:15 UTC	942	OUT	GET /static/kendo/css/kendo.bootstrap.min.css?000022CB HTTP/1.1 Host: survey.vovici.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; ASP.NET_SessionId=4l4mj1quseszulhcael1nayc
2024-05-23 23:24:15 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:15 GMT Content-Type: text/css Content-Length: 88867 Connection: close Set-Cookie: AWSALB=Pj5/9fLjGx7gkDtIWtLQVOgx3LvoTk5VxV2AAI7WLb2iH02bsQ/BPbQZaSBLCSKx/P6cYSkQ7a/SnwLkO6C+hqoKoe5eymOlQCKmKI/qTunWZEimKwbMNaoBEV7j; Expires=Thu, 30 May 2024 23:24:15 GMT; Path=/ Set-Cookie: AWSALBCORS=Pj5/9fLjGx7gkDtIWtLQVOgx3LvoTk5VxV2AAI7WLb2iH02bsQ/BPbQZaSBLCSKx/P6cYSkQ7a/SnwLkO6C+hqoKoe5eymOlQCKmKI/qTunWZEimKwbMNaoBEV7j; Expires=Thu, 30 May 2024 23:24:15 GMT; Path=/; SameSite=None; Secure Last-Modified: Tue, 30 Jan 2024 16:22:24 GMT Accept-Ranges: bytes ETag: "020e1819853da1:0" Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:15 UTC	14125	IN	Data Raw: 2f 2a 2a 20 0a 20 2a 20 4b 65 6e 64 6f 20 55 49 20 76 32 30 32 30 2e 32 2e 36 31 37 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 74 65 6c 65 72 69 6b 2e 63 6f 6d 2f 6b 65 6e 64 6f 2d 75 69 29 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 30 20 50 72 6f 67 72 65 73 73 20 53 6f 66 74 77 61 72 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 20 61 Data Ascii: /** * Kendo UI v2020.2.617 (http://www.telerik.com/kendo-ui) * Copyright 2020 Progress Software Corporation a
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 6c 6f 72 3a 20 23 66 66 66 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 2e 6b 2d 63 61 6c 65 6e 64 61 72 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 63 63 63 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 0a 7d 0a 0a 20 20 20 20 2e 6b 2d 63 61 6c 65 6e 64 61 72 20 3e 20 2e 6b 2d 68 65 61 64 65 72 20 7b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 63 63 63 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 35 66 35 66 35 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6e 6f 6e 65 0a Data Ascii: lor: #fff }.k-calendar { border-color: #ccc; color: #333; background-color: #fff} .k-calendar > .k-header { border-color: #ccc; color: #333; background-color: #f5f5f5; background-image: none
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 38 29 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 6b 2d 62 72 65 61 64 63 72 75 6d 62 20 2e 6b 2d 62 72 65 61 64 63 72 75 6d 62 2d 72 6f 6f 74 2d 6c 69 6e 6b 2e 6b 2d 73 74 61 74 65 2d 66 6f 63 75 73 65 64 2c 20 2e 6b 2d 62 72 65 61 64 63 72 75 6d 62 20 2e 6b 2d 62 72 65 61 64 63 72 75 6d 62 2d 72 6f 6f 74 2d 6c 69 6e 6b 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d Data Ascii: lse; background-color: rgba(0,0,0,.08) } .k-breadcrumb .k-breadcrumb-root-link.k-state-focused, .k-breadcrumb .k-breadcrumb-root-link:focus { border-color: false; color: false; background-color: false; box-
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 6e 3a 20 30 20 30 3b 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 32 70 78 20 23 33 33 33 0a 7d 0a 0a 2e 6b 2d 65 76 65 6e 74 20 2e 6b 2d 72 65 73 69 7a 65 2d 68 61 6e 64 6c 65 3a 61 66 74 65 72 2c 20 2e 6b 2d 74 61 73 6b 2d 73 69 6e 67 6c 65 20 2e 6b 2d 72 65 73 69 7a 65 2d 68 61 6e 64 6c 65 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 0a 7d 0a 0a 2e 6b 2d 73 63 68 65 64 75 6c 65 72 2d 6d 61 72 71 75 65 65 3a 61 66 74 65 72 2c 20 2e 6b 2d 73 63 68 65 64 75 6c 65 72 2d 6d 61 72 71 75 65 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 34 32 38 62 63 61 0a 7d 0a 0a 2e 6b 2d 70 61 6e 65 6c 62 61 72 20 2e 6b 2d 63 6f 6e 74 65 6e 74 2c Data Ascii: n: 0 0; box-shadow: 0 0 0 2px #333}.k-event .k-resize-handle:after, .k-task-single .k-resize-handle:after { background-color: #fff}.k-scheduler-marquee:after, .k-scheduler-marquee:before { border-color: #428bca}.k-panelbar .k-content,
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 70 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 62 65 62 65 62 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 35 30 25 20 35 30 25 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 61 65 61 65 61 65 0a 20 20 20 20 7d 0a 0a 2e 6b 2d 6d 75 6c 74 69 73 65 6c 65 63 74 2d 77 72 61 70 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 63 63 63 0a 7d 0a 0a 20 20 20 20 2e 6b 2d 6d 75 6c 74 69 73 65 6c 65 63 74 2d 77 72 61 70 2e 6b 2d 73 74 61 74 65 2d 68 6f 76 65 72 2c 20 2e 6b 2d 73 74 61 74 65 Data Ascii: p.k-state-hover { background-color: #ebebeb; background-image: none; background-position: 50% 50%; border-color: #aeaeae }.k-multiselect-wrap { border-color: #ccc} .k-multiselect-wrap.k-state-hover, .k-state
2024-05-23 23:24:15 UTC	9206	IN	Data Raw: 68 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 35 29 0a 7d 0a 0a 2e 6b 2d 73 70 72 65 61 64 73 68 65 65 74 20 2e 6b 2d 73 69 6e 67 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6b 2d 64 69 6d 2d 61 75 74 6f 2d 66 69 6c 6c 2d 68 61 6e 64 6c 65 3a 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 36 36 2c 31 33 39 2c 32 30 32 2c 2e 35 29 0a 7d 0a 0a 2e 6b 2d 73 70 72 65 61 64 73 68 65 65 74 20 2e 6b 2d 73 70 72 65 61 64 73 68 65 65 74 2d 63 65 6c 6c 2d 63 6f 6d 6d 65 6e 74 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 20 20 20 Data Ascii: h { background-color: rgba(255,255,255,.5)}.k-spreadsheet .k-single-selection.k-dim-auto-fill-handle::after { background-color: rgba(66,139,202,.5)}.k-spreadsheet .k-spreadsheet-cell-comment { color: #fff; background-color: #000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49723	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:15 UTC	922	OUT	GET /static/structure.css?9B9CBA55 HTTP/1.1 Host: survey.vovici.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; ASP.NET_SessionId=4l4mj1quseszulhcael1nayc
2024-05-23 23:24:15 UTC	786	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:15 GMT Content-Type: text/css Content-Length: 106368 Connection: close Set-Cookie: AWSALB=LAJHMMcYcYeozMO6v6Xeo4N3ADh+BYcDZPA+WvjFaqapxkWN32ZFUVwEb/IQV6nE/W78XIB+2fM4j7mZt+JtD0fx/dcPUclcBUtBuR00vYnrecAGWfp56ZhGJ03V; Expires=Thu, 30 May 2024 23:24:15 GMT; Path=/ Set-Cookie: AWSALBCORS=LAJHMMcYcYeozMO6v6Xeo4N3ADh+BYcDZPA+WvjFaqapxkWN32ZFUVwEb/IQV6nE/W78XIB+2fM4j7mZt+JtD0fx/dcPUclcBUtBuR00vYnrecAGWfp56ZhGJ03V; Expires=Thu, 30 May 2024 23:24:15 GMT; Path=/; SameSite=None; Secure Last-Modified: Thu, 29 Feb 2024 10:34:20 GMT Accept-Ranges: bytes ETag: "01e70dafa6ada1:0" Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:15 UTC	8332	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0d 0a 0d 0a 2f 2a 0d 0a 2a 20 6a 51 75 65 72 79 20 55 49 20 43 53 53 20 46 72 61 6d 65 77 6f 72 6b 0d 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 39 20 41 55 54 48 4f 52 53 2e 74 78 74 20 28 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 2f 61 62 6f 75 74 29 0d 0a 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 28 4d 49 54 2d 4c 49 43 45 4e 53 45 2e 74 78 74 29 20 61 6e 64 20 47 50 4c 20 28 47 50 4c 2d 4c 49 43 45 4e 53 45 2e 74 78 74 29 20 6c 69 63 65 6e 73 65 73 2e 0d 0a 2a 20 54 6f 20 76 69 65 77 20 61 6e 64 20 6d 6f 64 69 66 79 20 74 68 69 73 20 74 68 65 6d 65 2c 20 76 69 73 69 74 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 Data Ascii: @charset "utf-8";/** jQuery UI CSS Framework* Copyright (c) 2009 AUTHORS.txt (http://jqueryui.com/about)* Dual licensed under the MIT (MIT-LICENSE.txt) and GPL (GPL-LICENSE.txt) licenses.* To view and modify this theme, visit http://jqueryui.c
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 65 64 3d 27 74 72 75 65 27 2c 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 23 43 43 43 43 43 43 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 23 45 45 45 45 45 45 29 3b 0d 0a 7d 0d 0a 0d 0a 09 64 69 76 2e 63 68 6f 69 63 65 2d 62 6f 78 3a 68 6f 76 65 72 2c 20 64 69 76 2e 63 68 6f 69 63 65 2d 62 6f 78 2e 68 6f 76 65 72 20 7b 0d 0a 09 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 2d 37 35 70 78 20 2d 36 30 70 78 20 31 38 30 70 78 20 2d 38 30 70 78 20 23 62 62 62 62 62 62 3b 0d 0a 09 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 41 42 41 42 41 42 3b 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 44 44 44 44 44 44 3b 0d 0a 09 09 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d Data Ascii: ed='true',startColorstr=#CCCCCC, endColorstr=#EEEEEE);}div.choice-box:hover, div.choice-box.hover {box-shadow: inset -75px -60px 180px -80px #bbbbbb;border: 2px solid #ABABAB;background-color: #DDDDDD;filter: progid:DXImageTransform
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 74 61 69 6e 65 72 2d 73 74 61 72 20 74 61 62 6c 65 20 74 72 2e 66 69 72 73 74 20 74 68 2c 20 2e 73 74 61 72 2d 63 6f 6e 74 61 69 6e 65 72 20 74 61 62 6c 65 20 74 72 2e 66 69 72 73 74 20 74 68 20 7b 0d 0a 09 09 77 6f 72 64 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0d 0a 09 09 6d 61 78 2d 77 69 64 74 68 3a 20 34 35 65 6d 3b 0d 0a 09 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 09 7d 0d 0a 0d 0a 09 2e 73 6c 69 64 65 72 73 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 74 61 72 20 74 61 62 6c 65 20 74 64 2c 20 2e 73 74 61 72 2d 63 6f 6e 74 61 69 6e 65 72 20 74 61 62 6c 65 20 74 64 20 7b 0d 0a 09 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0d 0a 09 7d 0d 0a 0d 0a 64 69 76 2e 73 6c 69 64 65 72 73 2d 63 6f 6e 74 Data Ascii: tainer-star table tr.first th, .star-container table tr.first th {word-wrap: break-word;max-width: 45em;text-align: center;}.sliders-container-star table td, .star-container table td {vertical-align: middle;}div.sliders-cont
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 6c 61 6e 67 2d 6c 74 72 20 2e 71 75 65 73 74 69 6f 6e 2e 66 69 6c 6c 69 6e 20 2e 6c 65 66 74 2d 61 6c 69 67 6e 20 2e 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 20 7b 0d 0a 09 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 09 7d 0d 0a 09 2f 2a 46 6f 72 20 6d 6f 62 69 6c 65 20 64 65 76 69 63 65 73 20 74 65 78 74 20 73 68 6f 75 6c 64 20 62 65 20 61 6c 77 61 79 73 20 6c 65 66 74 2d 61 6c 69 67 6e 65 64 20 61 73 20 69 74 20 69 73 20 74 6f 70 20 61 6c 69 67 6e 65 64 20 62 79 20 64 65 66 61 75 6c 74 2a 2f 0d 0a 09 2e 76 74 2d 6c 61 6e 67 2d 6c 74 72 20 2e 71 75 65 73 74 69 6f 6e 2e 66 69 6c 6c 69 6e 20 2e 72 69 67 68 74 2d 61 6c 69 67 6e 20 2e 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 20 7b 0d 0a 09 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d Data Ascii: lang-ltr .question.fillin .left-align .control-label {text-align: left;}/For mobile devices text should be always left-aligned as it is top aligned by default/.vt-lang-ltr .question.fillin .right-align .control-label {text-align: left;
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 62 6c 65 2e 62 6f 72 64 65 72 2e 62 6f 72 64 65 72 2d 61 6c 6c 20 3e 20 74 68 65 61 64 20 7b 0d 0a 09 09 09 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2e 76 74 2d 61 64 61 70 74 69 76 65 20 2e 6d 61 74 72 69 78 20 2e 74 61 62 6c 65 2e 62 6f 72 64 65 72 2e 62 6f 72 64 65 72 2d 67 72 6f 75 70 73 20 3e 20 74 68 65 61 64 2c 0d 0a 09 09 2e 76 74 2d 61 64 61 70 74 69 76 65 20 2e 6d 61 74 72 69 78 20 2e 74 61 62 6c 65 2e 62 6f 72 64 65 72 2e 62 6f 72 64 65 72 2d 67 72 6f 75 70 73 20 3e 20 74 68 65 61 64 20 3e 20 74 72 2c 0d 0a 09 09 2e 76 74 2d 61 64 61 70 74 69 76 65 20 2e 6d 61 74 72 69 78 20 2e 74 61 62 6c 65 2e 62 6f 72 64 65 72 2e 62 6f 72 64 65 72 2d 67 72 6f 75 70 73 20 3e 20 74 62 6f 64 79 2c 0d 0a 09 09 Data Ascii: ble.border.border-all > thead {border-style: solid;}.vt-adaptive .matrix .table.border.border-groups > thead,.vt-adaptive .matrix .table.border.border-groups > thead > tr,.vt-adaptive .matrix .table.border.border-groups > tbody,
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 31 30 30 29 3b 0d 0a 09 09 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 09 7d 0d 0a 0d 0a 2e 6c 62 2d 6e 61 76 20 61 2e 6c 62 2d 6e 65 78 74 20 7b 0d 0a 09 77 69 64 74 68 3a 20 36 34 25 3b 0d 0a 09 72 69 67 68 74 3a 20 30 3b 0d 0a 09 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 69 6d 61 67 65 73 2f 6c 69 67 68 74 62 6f 78 2f 6e 65 78 74 2e 70 6e 67 29 20 72 69 67 68 74 20 34 38 25 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 09 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 30 29 3b 0d 0a 09 6f Data Ascii: eTransform.Microsoft.Alpha(Opacity=100);opacity: 1;}.lb-nav a.lb-next {width: 64%;right: 0;float: right;background: url(images/lightbox/next.png) right 48% no-repeat;filter: progid:DXImageTransform.Microsoft.Alpha(Opacity=0);o
2024-05-23 23:24:15 UTC	16116	IN	Data Raw: 3b 0d 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 6c 69 64 65 72 2d 63 6f 6e 74 72 6f 6c 2d 77 72 61 70 70 65 72 20 2e 73 6c 69 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 6c 69 64 65 72 2d 63 6f 6e 74 72 6f 6c 2d 77 72 61 70 70 65 72 20 2e 73 6c 69 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2c 20 2e 73 6c 69 64 65 72 2d 63 6f 6e 74 72 6f 6c 2d 77 72 61 70 70 65 72 20 2e 73 6c 69 64 65 72 2d 69 6e 70 75 74 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 6c 69 64 65 72 2d 63 6f 6e 74 72 6f 6c 2d 77 72 61 70 70 65 72 Data Ascii: ;box-shadow: none;}.slider-control-wrapper .slider-container {position: relative;margin-top: 3px;}.slider-control-wrapper .slider-container, .slider-control-wrapper .slider-input-container {padding: 0;}.slider-control-wrapper

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49725	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:15 UTC	946	OUT	GET /surveys/718515628/691bbd23/theme.css?9B9CBA5500000965 HTTP/1.1 Host: survey.vovici.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; ASP.NET_SessionId=4l4mj1quseszulhcael1nayc
2024-05-23 23:24:15 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:15 GMT Content-Type: text/css Content-Length: 20829 Connection: close Set-Cookie: AWSALB=opevQP7X/+Wp/rQDoXsXBaVaEwsr4ozWrxk8rhNvZ3EeqbP049HJoFEa3/Q5H/EZcoDzukB1kVmzwXj+jo/DWgDEhHH9Uk7xVyoSg4w1Jya8ZlhALhLbwnqBMJ+u; Expires=Thu, 30 May 2024 23:24:15 GMT; Path=/ Set-Cookie: AWSALBCORS=opevQP7X/+Wp/rQDoXsXBaVaEwsr4ozWrxk8rhNvZ3EeqbP049HJoFEa3/Q5H/EZcoDzukB1kVmzwXj+jo/DWgDEhHH9Uk7xVyoSg4w1Jya8ZlhALhLbwnqBMJ+u; Expires=Thu, 30 May 2024 23:24:15 GMT; Path=/; SameSite=None; Secure Last-Modified: Sat, 11 May 2024 04:31:08 GMT Accept-Ranges: bytes ETag: "bc9b26b5ca3da1:0" Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:15 UTC	14125	IN	Data Raw: 62 6f 64 79 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 39 39 39 39 39 39 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 2e 70 61 67 65 2d 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 30 70 78 3b 0a 7d 0a 40 6d 65 64 69 61 20 61 6c 6c 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 09 2e 70 61 67 65 2d 63 6f 6e 74 65 6e 74 20 7b 0a 09 09 70 61 64 64 69 6e 67 3a 20 38 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 33 32 25 3b 0a 09 7d 0a 7d 0a 40 6d 65 64 69 61 20 61 6c 6c 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 20 7b 0a 09 2e 70 61 67 65 2d 63 6f 6e 74 65 6e 74 20 7b 0a 09 09 70 61 64 64 69 6e 67 3a 20 38 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: body {background-color: #999999;margin: 0;}.page-content {padding-top: 20px;}@media all and (min-width: 768px) {.page-content {padding: 8.333333333333332%;}}@media all and (min-width: 992px) {.page-content {padding: 8.3333333333333
2024-05-23 23:24:15 UTC	6704	IN	Data Raw: 72 3a 20 23 41 45 43 41 45 39 3b 0d 0a 7d 0d 0a 2e 74 61 62 6c 65 2d 6c 69 76 65 2d 72 65 73 75 6c 74 73 20 74 61 62 6c 65 20 2e 4c 69 76 65 52 65 73 75 6c 74 73 50 65 72 63 65 6e 74 61 67 65 43 65 6c 6c 43 6f 6c 6f 72 2d 33 33 20 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 41 42 43 38 45 38 3b 0d 0a 7d 0d 0a 2e 74 61 62 6c 65 2d 6c 69 76 65 2d 72 65 73 75 6c 74 73 20 74 61 62 6c 65 20 2e 4c 69 76 65 52 65 73 75 6c 74 73 50 65 72 63 65 6e 74 61 67 65 43 65 6c 6c 43 6f 6c 6f 72 2d 33 34 20 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 41 39 43 36 45 37 3b 0d 0a 7d 0d 0a 2e 74 61 62 6c 65 2d 6c 69 76 65 2d 72 65 73 75 6c 74 73 20 74 61 62 6c 65 20 2e 4c 69 76 65 52 65 73 75 6c 74 73 50 65 72 63 65 6e 74 Data Ascii: r: #AECAE9;}.table-live-results table .LiveResultsPercentageCellColor-33 {background-color: #ABC8E8;}.table-live-results table .LiveResultsPercentageCellColor-34 {background-color: #A9C6E7;}.table-live-results table .LiveResultsPercent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49726	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:15 UTC	908	OUT	GET /static/jquery.min.js?000022CB HTTP/1.1 Host: survey.vovici.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; ASP.NET_SessionId=4l4mj1quseszulhcael1nayc
2024-05-23 23:24:15 UTC	792	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:15 GMT Content-Type: text/javascript Content-Length: 97271 Connection: close Set-Cookie: AWSALB=78zn8LlcNci4SNTOPkAjNShOU3vulJTB1Ghz/U682QEIqEdw110pZaNhJU35EygjfLFDnBqh+lw0B4zOxEefrjR7aR2FcCTNI2CRjyb1n9eSQzDyCEz2w3l3dOfV; Expires=Thu, 30 May 2024 23:24:15 GMT; Path=/ Set-Cookie: AWSALBCORS=78zn8LlcNci4SNTOPkAjNShOU3vulJTB1Ghz/U682QEIqEdw110pZaNhJU35EygjfLFDnBqh+lw0B4zOxEefrjR7aR2FcCTNI2CRjyb1n9eSQzDyCEz2w3l3dOfV; Expires=Thu, 30 May 2024 23:24:15 GMT; Path=/; SameSite=None; Secure Last-Modified: Tue, 30 Jan 2024 16:22:24 GMT Accept-Ranges: bytes ETag: "020e1819853da1:0" Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:15 UTC	6878	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 62 28 61 29 7d 3a 62 28 61 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 74 68 69 73 2c 66 75 6e 63 Data Ascii: !function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,func
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 78 29 77 3d 62 2c 73 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 61 61 2c 22 5c 5c 24 26 22 29 3a 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 6b 3d 75 29 2c 72 3d 67 28 61 29 2c 68 3d 72 2e 6c 65 6e 67 74 68 2c 6c 3d 56 2e 74 65 73 74 28 6b 29 3f 22 23 22 2b Data Ascii: eturn H.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==x)w=b,s=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(aa,"\\$&"):b.setAttribute("id",k=u),r=g(a),h=r.length,l=V.test(k)?"#"+
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 61 29 7d 72 65 74 75 72 6e 20 64 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 3b 61 3b 61 3d 61 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 61 21 3d 3d 62 26 26 63 2e 70 75 73 68 28 61 29 3b 72 65 74 75 72 6e 20 63 7d 2c 77 3d 6e 2e 65 78 70 72 2e 6d 61 74 63 68 2e 6e 65 65 64 73 43 6f 6e 74 65 78 74 2c 78 3d 2f 5e 3c 28 5b 5c 77 2d 5d 2b 29 5c 73 2a 5c 2f 3f 3e 28 3f 3a 3c 5c 2f 5c 31 3e 7c 29 24 2f 2c 79 3d 2f 5e 2e 5b 5e 3a 23 5c 5b 5c 2e 2c 5d 2a 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 61 2c 62 2c 63 29 7b 69 66 28 6e 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 29 29 72 65 74 75 72 6e 20 6e 2e 67 72 65 70 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 72 65 74 75 Data Ascii: a)}return d},v=function(a,b){for(var c=[];a;a=a.nextSibling)1===a.nodeType&&a!==b&&c.push(a);return c},w=n.expr.match.needsContext,x=/^<([\w-]+)\s\/?>(?:<\/\1>\|)$/,y=/^.[^:#\[\.,]$/;function z(a,b,c){if(n.isFunction(b))return n.grep(a,function(a,d){retu
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 68 69 6c 64 4e 6f 64 65 73 29 2c 69 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 22 3b 77 68 69 6c 65 28 69 2e 66 69 72 73 74 43 68 69 6c 64 29 69 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 69 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 69 3d 70 2e 6c 61 73 74 43 68 69 6c 64 7d 65 6c 73 65 20 71 2e 70 75 73 68 28 62 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 67 29 29 3b 69 26 26 70 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 69 29 2c 6c 2e 61 70 70 65 6e 64 43 68 65 63 6b 65 64 7c 7c 6e 2e 67 72 65 70 28 65 61 28 71 2c 22 69 6e 70 75 74 22 29 2c 69 61 29 2c 72 3d 30 3b 77 68 69 6c 65 28 67 3d 71 5b 72 2b 2b 5d 29 69 66 28 64 26 26 6e 2e 69 6e 41 72 72 61 79 28 67 2c 64 29 3e 2d 31 29 65 26 26 65 2e 70 75 73 68 28 67 29 3b 65 6c 73 65 20 69 66 28 68 3d 6e 2e 63 6f 6e Data Ascii: hildNodes),i.textContent="";while(i.firstChild)i.removeChild(i.firstChild);i=p.lastChild}else q.push(b.createTextNode(g));i&&p.removeChild(i),l.appendChecked\|\|n.grep(ea(q,"input"),ia),r=0;while(g=q[r++])if(d&&n.inArray(g,d)>-1)e&&e.push(g);else if(h=n.con
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 28 6e 2e 63 6c 65 61 6e 44 61 74 61 28 65 61 28 62 2c 21 31 29 29 2c 62 2e 69 6e 6e 65 72 48 54 4d 4c 3d 61 29 3b 62 3d 30 7d 63 61 74 63 68 28 65 29 7b 7d 7d 62 26 26 74 68 69 73 2e 65 6d 70 74 79 28 29 2e 61 70 70 65 6e 64 28 61 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 70 6c 61 63 65 57 69 74 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5b 5d 3b 72 65 74 75 72 6e 20 48 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 6e 2e 69 6e 41 72 72 61 79 28 74 68 69 73 2c 61 29 3c 30 26 26 28 6e 2e 63 6c 65 61 6e 44 61 74 61 28 65 61 28 74 68 69 73 29 29 2c 63 26 26 63 2e 72 65 70 6c 61 63 65 43 68 Data Ascii: (n.cleanData(ea(b,!1)),b.innerHTML=a);b=0}catch(e){}}b&&this.empty().append(a)},null,a,arguments.length)},replaceWith:function(){var a=[];return Ha(this,arguments,function(b){var c=this.parentNode;n.inArray(this,a)<0&&(n.cleanData(ea(this)),c&&c.replaceCh
2024-05-23 23:24:15 UTC	16384	IN	Data Raw: 71 75 65 75 65 28 63 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 3d 61 2e 73 65 74 54 69 6d 65 6f 75 74 28 63 2c 62 29 3b 64 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 29 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 63 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 65 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2c 66 3d 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 3b 63 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 63 2e 73 65 Data Ascii: queue(c,function(c,d){var e=a.setTimeout(c,b);d.stop=function(){a.clearTimeout(e)}})},function(){var a,b=d.createElement("input"),c=d.createElement("div"),e=d.createElement("select"),f=e.appendChild(d.createElement("option"));c=d.createElement("div"),c.se
2024-05-23 23:24:15 UTC	8473	IN	Data Raw: 65 6e 29 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 64 63 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3b 69 66 28 6e 2e 69 73 41 72 72 61 79 28 62 29 29 6e 2e 65 61 63 68 28 62 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 65 29 7b 63 7c 7c 5f 62 2e 74 65 73 74 28 61 29 3f 64 28 61 2c 65 29 3a 64 63 28 61 2b 22 5b 22 2b 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 65 3f 62 3a 22 22 29 2b 22 5d 22 2c 65 2c 63 2c 64 29 7d 29 3b 65 6c 73 65 20 69 66 28 63 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 6e 2e 74 79 70 65 28 62 29 29 64 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 65 20 69 6e 20 62 29 64 63 28 61 2b 22 5b 22 2b 65 2b 22 5d 22 2c 62 5b 65 5d 2c 63 2c 64 29 7d 6e 2e 70 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 Data Ascii: en)/i;function dc(a,b,c,d){var e;if(n.isArray(b))n.each(b,function(b,e){c\|\|_b.test(a)?d(a,e):dc(a+"["+("object"==typeof e&&null!=e?b:"")+"]",e,c,d)});else if(c\|\|"object"!==n.type(b))d(a,b);else for(e in b)dc(a+"["+e+"]",b[e],c,d)}n.param=function(a,b){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49729	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:15 UTC	911	OUT	GET /static/bootstrap.min.js?000022CB HTTP/1.1 Host: survey.vovici.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; ASP.NET_SessionId=4l4mj1quseszulhcael1nayc
2024-05-23 23:24:16 UTC	792	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:15 GMT Content-Type: text/javascript Content-Length: 39680 Connection: close Set-Cookie: AWSALB=6mZ3oeG5mhYbScITO+/sR4HYQTzSGfYAnVCMOsObDvRhygohGHLMClnAC+H3JZHjTP/kl1v1vF1+A4XOw8202xPJICUCyp6mbUWZDprh6dPNYuzMYIcchYg4n2sA; Expires=Thu, 30 May 2024 23:24:15 GMT; Path=/ Set-Cookie: AWSALBCORS=6mZ3oeG5mhYbScITO+/sR4HYQTzSGfYAnVCMOsObDvRhygohGHLMClnAC+H3JZHjTP/kl1v1vF1+A4XOw8202xPJICUCyp6mbUWZDprh6dPNYuzMYIcchYg4n2sA; Expires=Thu, 30 May 2024 23:24:15 GMT; Path=/; SameSite=None; Secure Last-Modified: Tue, 30 Jan 2024 16:22:24 GMT Accept-Ranges: bytes ETag: "020e1819853da1:0" Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:16 UTC	5430	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 34 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 6a 51 75 65 72 79 2e 66 Data Ascii: /! Bootstrap v3.4.1 (https://getbootstrap.com/) * Copyright 2011-2019 Twitter, Inc. * Licensed under the MIT license */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");!function(t){"use strict";var e=jQuery.f
2024-05-23 23:24:16 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 69 74 65 6d 73 3d 74 2e 70 61 72 65 6e 74 28 29 2e 63 68 69 6c 64 72 65 6e 28 22 2e 69 74 65 6d 22 29 2c 74 68 69 73 2e 24 69 74 65 6d 73 2e 69 6e 64 65 78 28 74 7c 7c 74 68 69 73 2e 24 61 63 74 69 76 65 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 49 74 65 6d 46 6f 72 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 67 65 74 49 74 65 6d 49 6e 64 65 78 28 65 29 3b 69 66 28 28 22 70 72 65 76 22 3d 3d 74 26 26 30 3d 3d 3d 69 7c 7c 22 6e 65 78 74 22 3d 3d 74 26 26 69 3d 3d 74 68 69 73 2e 24 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 29 26 26 21 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 77 72 61 70 29 72 65 74 75 72 6e 20 65 Data Ascii: function(t){return this.$items=t.parent().children(".item"),this.$items.index(t\|\|this.$active)},c.prototype.getItemForDirection=function(t,e){var i=this.getItemIndex(e);if(("prev"==t&&0===i\|\|"next"==t&&i==this.$items.length-1)&&!this.options.wrap)return e
2024-05-23 23:24:16 UTC	16384	IN	Data Raw: 20 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6c 29 7d 72 65 74 75 72 6e 20 6f 2e 62 6f 64 79 2e 69 6e 6e 65 72 48 54 4d 4c 7d 76 61 72 20 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 68 69 73 2e 74 79 70 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 65 6e 61 62 6c 65 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 68 6f 76 65 72 53 74 61 74 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 69 6e 53 74 61 74 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 69 6e 69 74 28 22 74 6f 6f 6c 74 69 70 22 2c 74 2c 65 29 7d 3b 6d 2e 56 45 52 53 49 4f 4e 3d 22 33 2e 34 2e 31 22 2c 6d 2e 54 52 41 4e 53 49 54 49 4f Data Ascii: l.parentNode.removeChild(l)}return o.body.innerHTML}var m=function(t,e){this.type=null,this.options=null,this.enabled=null,this.timeout=null,this.hoverState=null,this.$element=null,this.inState=null,this.init("tooltip",t,e)};m.VERSION="3.4.1",m.TRANSITIO
2024-05-23 23:24:16 UTC	1482	IN	Data Raw: 6e 20 6e 75 6c 6c 21 3d 69 26 26 6e 3c 3d 69 3f 22 74 6f 70 22 3a 6e 75 6c 6c 21 3d 6f 26 26 74 2d 6f 3c 3d 6c 2b 28 72 3f 61 3a 65 29 26 26 22 62 6f 74 74 6f 6d 22 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 69 6e 6e 65 64 4f 66 66 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 70 69 6e 6e 65 64 4f 66 66 73 65 74 29 72 65 74 75 72 6e 20 74 68 69 73 2e 70 69 6e 6e 65 64 4f 66 66 73 65 74 3b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 68 2e 52 45 53 45 54 29 2e 61 64 64 43 6c 61 73 73 28 22 61 66 66 69 78 22 29 3b 76 61 72 20 74 3d 74 68 69 73 2e 24 74 61 72 67 65 74 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2c 65 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 66 66 73 65 74 28 29 3b 72 65 74 75 Data Ascii: n null!=i&&n<=i?"top":null!=o&&t-o<=l+(r?a:e)&&"bottom"},h.prototype.getPinnedOffset=function(){if(this.pinnedOffset)return this.pinnedOffset;this.$element.removeClass(h.RESET).addClass("affix");var t=this.$target.scrollTop(),e=this.$element.offset();retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49731	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:16 UTC	916	OUT	GET /static/jquery.placeholder.js?000022CB HTTP/1.1 Host: survey.vovici.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; ASP.NET_SessionId=4l4mj1quseszulhcael1nayc
2024-05-23 23:24:16 UTC	791	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:16 GMT Content-Type: text/javascript Content-Length: 3293 Connection: close Set-Cookie: AWSALB=3UpaMwYcY9ppW3B2XHXJim8HJs6r1rLRCnvCDs0f6wFqToH2fFbxJpKhLLMw9lPeroU6Sg5lSv34/FKxWjIizolkKZ78FmLHe2G8PSo988tLXT9kVCScFcprBN16; Expires=Thu, 30 May 2024 23:24:16 GMT; Path=/ Set-Cookie: AWSALBCORS=3UpaMwYcY9ppW3B2XHXJim8HJs6r1rLRCnvCDs0f6wFqToH2fFbxJpKhLLMw9lPeroU6Sg5lSv34/FKxWjIizolkKZ78FmLHe2G8PSo988tLXT9kVCScFcprBN16; Expires=Thu, 30 May 2024 23:24:16 GMT; Path=/; SameSite=None; Secure Last-Modified: Tue, 30 Jan 2024 16:22:24 GMT Accept-Ranges: bytes ETag: "020e1819853da1:0" Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:16 UTC	3293	IN	Data Raw: 2f 2a 20 48 54 4d 4c 35 20 50 6c 61 63 65 68 6f 6c 64 65 72 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 20 2d 20 76 32 2e 33 2e 31 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 32 30 31 35 20 4d 61 74 68 69 61 73 20 42 79 6e 65 6e 73 0d 0a 20 2a 20 32 30 31 35 2d 31 32 2d 31 36 0d 0a 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 61 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 3a 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: /* HTML5 Placeholder jQuery Plugin - v2.3.1 * Copyright (c)2015 Mathias Bynens * 2015-12-16 */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof module&&module.exports?require("jquery"):jQuery)}(function(a){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49730	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:16 UTC	905	OUT	GET /static/support.js?000022CB HTTP/1.1 Host: survey.vovici.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; ASP.NET_SessionId=4l4mj1quseszulhcael1nayc
2024-05-23 23:24:16 UTC	793	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:16 GMT Content-Type: text/javascript Content-Length: 139535 Connection: close Set-Cookie: AWSALB=QiQHsv96QGTMHduCpIg12oOvpOAVb8bCXDVQeN2C0CEctxvw/uv8vyKdswuiQw2CUEXdIeDrTZbx0RyUgtScVjsUSTY/okGuErakipFaLt+mOwg8cE2rXfI52kSL; Expires=Thu, 30 May 2024 23:24:16 GMT; Path=/ Set-Cookie: AWSALBCORS=QiQHsv96QGTMHduCpIg12oOvpOAVb8bCXDVQeN2C0CEctxvw/uv8vyKdswuiQw2CUEXdIeDrTZbx0RyUgtScVjsUSTY/okGuErakipFaLt+mOwg8cE2rXfI52kSL; Expires=Thu, 30 May 2024 23:24:16 GMT; Path=/; SameSite=None; Secure Last-Modified: Tue, 21 May 2024 14:37:06 GMT Accept-Ranges: bytes ETag: "0d5525a8cabda1:0" Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:16 UTC	6877	IN	Data Raw: 2f 2a 0a 20 52 61 74 65 49 74 20 7c 20 76 31 2e 31 2e 30 20 2f 20 31 30 2f 32 30 2f 32 30 31 36 0a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 67 6a 75 6e 67 65 2f 72 61 74 65 69 74 2e 6a 73 20 7c 20 54 77 69 74 74 65 72 3a 20 40 67 6a 75 6e 67 65 0a 20 6a 51 75 65 72 79 20 54 61 67 67 64 0a 20 41 20 68 65 6c 70 66 75 6c 20 70 6c 75 67 69 6e 20 74 68 61 74 20 68 65 6c 70 73 20 79 6f 75 20 61 64 64 69 6e 67 20 27 74 61 67 73 27 20 6f 6e 20 69 6d 61 67 65 73 2e 0a 0a 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 0a 2a 2f 0a 76 61 72 20 24 6a 73 63 6f 6d 70 3d 24 6a 73 63 6f 6d 70 7c 7c 7b 7d 3b 24 6a 73 63 6f 6d 70 2e 73 63 6f 70 65 3d 7b 7d 3b 24 6a 73 63 6f 6d 70 2e 66 69 6e 64 49 6e 74 65 72 6e 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 62 Data Ascii: /* RateIt \| v1.1.0 / 10/20/2016 https://github.com/gjunge/rateit.js \| Twitter: @gjunge jQuery Taggd A helpful plugin that helps you adding 'tags' on images. License: MIT*/var $jscomp=$jscomp\|\|{};$jscomp.scope={};$jscomp.findInternal=function(a,c,b
2024-05-23 23:24:16 UTC	16384	IN	Data Raw: 22 29 3a 72 3d 3d 6c 2e 6c 65 6e 67 74 68 2d 31 3f 75 2e 61 64 64 43 6c 61 73 73 28 22 72 69 67 68 74 2d 6a 75 73 74 69 66 69 65 64 22 29 3a 75 2e 61 64 64 43 6c 61 73 73 28 22 63 65 6e 74 65 72 2d 6a 75 73 74 69 66 69 65 64 22 29 7d 29 7d 7d 72 65 74 75 72 6e 21 31 7d 76 61 72 20 68 3d 61 28 22 23 22 2b 62 2b 22 20 2e 72 65 73 70 6f 6e 73 65 2d 73 65 74 22 29 2e 77 69 64 74 68 28 29 3b 69 66 28 64 3d 61 28 22 23 22 2b 62 2b 22 20 2e 68 65 61 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 22 29 29 7b 69 66 28 64 2e 68 61 73 43 6c 61 73 73 28 22 72 6f 77 2d 6c 61 79 6f 75 74 22 29 29 7b 76 61 72 20 66 3d 30 2c 6b 3d 21 31 2c 6d 3d 61 28 22 23 22 2b 62 2b 22 20 2e 72 65 73 70 6f 6e 73 65 2d 61 72 65 61 20 6c 69 2e 72 65 73 70 6f 6e 73 65 22 29 3b 62 3d 28 62 3d 61 Data Ascii: "):r==l.length-1?u.addClass("right-justified"):u.addClass("center-justified")})}}return!1}var h=a("#"+b+" .response-set").width();if(d=a("#"+b+" .header-container")){if(d.hasClass("row-layout")){var f=0,k=!1,m=a("#"+b+" .response-area li.response");b=(b=a
2024-05-23 23:24:16 UTC	16384	IN	Data Raw: 74 79 70 65 6f 66 20 62 3f 0a 62 3a 21 30 29 3f 22 74 72 75 65 22 3a 22 66 61 6c 73 65 22 3b 24 28 22 23 22 2b 61 2b 22 5f 22 2b 63 29 2e 70 72 6f 70 28 22 63 68 65 63 6b 65 64 22 2c 62 29 3b 24 28 22 23 22 2b 61 2b 22 5f 22 2b 63 29 2e 70 72 6f 70 28 22 61 72 69 61 2d 63 68 65 63 6b 65 64 22 2c 64 29 3b 24 28 22 23 22 2b 61 2b 22 5f 53 4b 49 4e 5f 22 2b 63 29 2e 70 72 6f 70 28 22 63 68 65 63 6b 65 64 22 2c 62 29 3b 24 28 22 23 22 2b 61 2b 22 5f 53 4b 49 4e 5f 22 2b 63 29 2e 70 72 6f 70 28 22 61 72 69 61 2d 63 68 65 63 6b 65 64 22 2c 64 29 3b 62 3f 28 24 28 22 23 22 2b 61 2b 22 5f 53 4b 49 4e 5f 43 22 2b 63 2b 22 5f 41 22 29 2e 61 64 64 43 6c 61 73 73 28 22 63 68 65 63 6b 65 64 22 29 2c 24 28 22 23 22 2b 61 2b 22 5f 53 4b 49 4e 5f 43 22 2b 63 2b 22 5f 42 Data Ascii: typeof b?b:!0)?"true":"false";$("#"+a+"_"+c).prop("checked",b);$("#"+a+"_"+c).prop("aria-checked",d);$("#"+a+"_SKIN_"+c).prop("checked",b);$("#"+a+"_SKIN_"+c).prop("aria-checked",d);b?($("#"+a+"_SKIN_C"+c+"_A").addClass("checked"),$("#"+a+"_SKIN_C"+c+"_B
2024-05-23 23:24:16 UTC	16384	IN	Data Raw: 73 69 62 6c 65 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6c 2c 68 29 7b 6c 3d 24 28 68 29 2e 66 69 6e 64 28 22 64 69 76 2e 63 61 70 74 69 6f 6e 22 29 2e 68 65 69 67 68 74 28 29 3b 67 3e 6c 26 26 28 67 3d 6c 2b 36 29 7d 29 7d 29 7d 3b 0a 73 4d 61 74 72 69 78 55 70 64 61 74 65 46 6c 65 78 41 70 70 65 61 72 61 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 30 3d 3d 24 28 22 2e 56 69 65 77 4d 6f 64 65 22 29 2e 6c 65 6e 67 74 68 26 26 24 28 22 2e 73 65 6c 65 63 74 69 6f 6e 20 69 6d 67 22 2c 61 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 24 28 74 68 69 73 29 2e 61 74 74 72 28 22 73 72 63 22 29 3b 62 26 26 28 24 28 22 3c 69 6d 67 20 2f 3e 22 29 2e 61 74 74 72 28 22 73 72 63 22 2c 62 29 2c 24 28 74 68 69 73 29 2e 77 72 61 70 Data Ascii: sible").each(function(l,h){l=$(h).find("div.caption").height();g>l&&(g=l+6)})})};sMatrixUpdateFlexAppearance=function(a){0==$(".ViewMode").length&&$(".selection img",a).each(function(){var b=$(this).attr("src");b&&($("<img />").attr("src",b),$(this).wrap
2024-05-23 23:24:16 UTC	16384	IN	Data Raw: 24 28 75 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 76 2c 78 29 7b 24 28 78 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 68 65 63 6b 65 64 22 29 3b 0a 24 28 22 69 6e 70 75 74 22 2c 24 28 78 29 29 2e 61 74 74 72 28 22 63 68 65 63 6b 65 64 22 2c 21 31 29 2e 61 74 74 72 28 22 61 72 69 61 2d 63 68 65 63 6b 65 64 22 2c 21 31 29 7d 29 3b 6b 2e 76 61 6c 28 6e 29 3b 6b 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 3b 24 28 22 69 6e 70 75 74 2e 73 63 61 6c 65 2d 73 6c 69 64 65 72 22 2c 6b 29 2e 67 65 74 4b 65 6e 64 6f 53 6c 69 64 65 72 28 29 2e 76 61 6c 75 65 28 6e 29 3b 24 28 22 69 6e 70 75 74 23 22 2b 72 2b 22 5f 22 2b 66 2c 70 29 2e 63 6c 69 63 6b 28 29 3b 24 28 22 69 6e 70 75 74 23 22 2b 72 2b 22 5f 22 2b 66 2c 70 29 2e 61 74 74 72 28 22 63 68 Data Ascii: $(u).each(function(v,x){$(x).removeClass("checked");$("input",$(x)).attr("checked",!1).attr("aria-checked",!1)});k.val(n);k.trigger("change");$("input.scale-slider",k).getKendoSlider().value(n);$("input#"+r+"_"+f,p).click();$("input#"+r+"_"+f,p).attr("ch
2024-05-23 23:24:17 UTC	16384	IN	Data Raw: 69 64 74 68 28 29 2c 7a 2f 3d 62 5b 77 2e 61 74 74 72 28 22 69 64 22 29 5d 2e 65 6c 65 6d 65 6e 74 2e 68 65 69 67 68 74 28 29 2c 45 7c 7c 65 61 28 74 29 2c 65 61 28 77 29 2c 64 3f 59 28 77 29 3a 51 28 71 2e 74 61 72 67 65 74 2c 30 2c 77 29 2c 64 26 26 28 24 28 71 2e 74 61 72 67 65 74 29 2e 68 61 73 43 6c 61 73 73 28 22 62 74 6e 2d 61 64 64 2d 74 61 67 22 29 7c 7c 62 5b 77 2e 61 74 74 72 28 22 69 64 22 29 5d 2e 61 64 64 44 61 74 61 28 7b 78 3a 46 2c 79 3a 7a 2c 74 65 78 74 3a 22 22 7d 29 2c 54 28 46 2c 7a 2c 77 29 2e 61 64 64 43 6c 61 73 73 28 22 70 6f 69 6e 74 2d 61 63 74 69 76 65 22 29 2c 59 28 77 29 29 29 7d 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 71 2c 74 2c 77 29 7b 69 66 28 21 64 29 69 66 28 22 41 22 3d 3d 71 2e 74 61 67 4e 61 6d 65 7c 7c 22 49 4d 47 22 Data Ascii: idth(),z/=b[w.attr("id")].element.height(),E\|\|ea(t),ea(w),d?Y(w):Q(q.target,0,w),d&&($(q.target).hasClass("btn-add-tag")\|\|b[w.attr("id")].addData({x:F,y:z,text:""}),T(F,z,w).addClass("point-active"),Y(w)))},Q=function(q,t,w){if(!d)if("A"==q.tagName\|\|"IMG"
2024-05-23 23:24:17 UTC	16384	IN	Data Raw: 73 4e 61 4e 28 66 29 7c 7c 69 73 4e 61 4e 28 6b 29 7c 7c 69 73 4e 61 4e 28 68 29 7c 7c 31 3e 66 7c 7c 31 32 3c 66 7c 7c 31 3e 6b 7c 7c 33 31 3c 6b 7c 7c 28 34 3d 3d 66 7c 7c 36 3d 3d 66 7c 7c 39 3d 3d 66 7c 7c 31 31 3d 3d 66 29 26 26 33 31 3d 3d 6b 7c 7c 32 3d 3d 66 26 26 28 32 39 3c 6b 7c 7c 32 39 3d 3d 6b 26 26 28 30 21 3d 68 25 34 7c 7c 30 3d 3d 68 25 31 30 30 26 26 30 21 3d 68 25 34 30 30 29 29 7c 7c 30 3e 3d 68 7c 7c 34 21 3d 6d 2e 6c 65 6e 67 74 68 7c 7c 21 6c 28 6d 29 3f 21 31 3a 21 30 7d 2c 69 73 4d 69 6e 4c 65 6e 67 74 68 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 66 29 7b 72 65 74 75 72 6e 20 6e 75 6d 62 65 72 55 74 69 6c 73 2e 67 65 74 54 65 78 74 56 61 6c 75 65 28 68 29 2e 6c 65 6e 67 74 68 3c 0a 66 7d 2c 69 73 4d 61 78 4c 65 6e 67 74 68 3a 66 75 6e Data Ascii: sNaN(f)\|\|isNaN(k)\|\|isNaN(h)\|\|1>f\|\|12<f\|\|1>k\|\|31<k\|\|(4==f\|\|6==f\|\|9==f\|\|11==f)&&31==k\|\|2==f&&(29<k\|\|29==k&&(0!=h%4\|\|0==h%100&&0!=h%400))\|\|0>=h\|\|4!=m.length\|\|!l(m)?!1:!0},isMinLength:function(h,f){return numberUtils.getTextValue(h).length<f},isMaxLength:fun
2024-05-23 23:24:17 UTC	16384	IN	Data Raw: 22 29 3b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 50 61 64 64 69 6e 67 3d 7b 74 6f 70 3a 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 24 63 6f 6e 74 61 69 6e 65 72 2e 63 73 73 28 22 70 61 64 64 69 6e 67 2d 74 6f 70 22 29 2c 31 30 29 2c 72 69 67 68 74 3a 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 24 63 6f 6e 74 61 69 6e 65 72 2e 63 73 73 28 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 29 2c 31 30 29 2c 62 6f 74 74 6f 6d 3a 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 24 63 6f 6e 74 61 69 6e 65 72 2e 63 73 73 28 22 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 22 29 2c 31 30 29 2c 6c 65 66 74 3a 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 24 63 6f 6e 74 61 69 6e 65 72 2e 63 73 73 28 22 70 61 64 64 69 6e 67 2d 6c 65 66 74 22 29 2c 0a 31 30 29 7d 3b 74 68 69 73 2e 69 6d Data Ascii: ");this.containerPadding={top:parseInt(this.$container.css("padding-top"),10),right:parseInt(this.$container.css("padding-right"),10),bottom:parseInt(this.$container.css("padding-bottom"),10),left:parseInt(this.$container.css("padding-left"),10)};this.im
2024-05-23 23:24:17 UTC	16384	IN	Data Raw: 72 69 65 6e 74 61 74 69 6f 6e 22 2c 32 37 37 3a 22 53 61 6d 70 6c 65 73 50 65 72 50 69 78 65 6c 22 2c 32 38 34 3a 22 50 6c 61 6e 61 72 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 2c 0a 35 33 30 3a 22 59 43 62 43 72 53 75 62 53 61 6d 70 6c 69 6e 67 22 2c 35 33 31 3a 22 59 43 62 43 72 50 6f 73 69 74 69 6f 6e 69 6e 67 22 2c 32 38 32 3a 22 58 52 65 73 6f 6c 75 74 69 6f 6e 22 2c 32 38 33 3a 22 59 52 65 73 6f 6c 75 74 69 6f 6e 22 2c 32 39 36 3a 22 52 65 73 6f 6c 75 74 69 6f 6e 55 6e 69 74 22 2c 32 37 33 3a 22 53 74 72 69 70 4f 66 66 73 65 74 73 22 2c 32 37 38 3a 22 52 6f 77 73 50 65 72 53 74 72 69 70 22 2c 32 37 39 3a 22 53 74 72 69 70 42 79 74 65 43 6f 75 6e 74 73 22 2c 35 31 33 3a 22 4a 50 45 47 49 6e 74 65 72 63 68 61 6e 67 65 46 6f 72 6d 61 74 22 2c 35 31 34 Data Ascii: rientation",277:"SamplesPerPixel",284:"PlanarConfiguration",530:"YCbCrSubSampling",531:"YCbCrPositioning",282:"XResolution",283:"YResolution",296:"ResolutionUnit",273:"StripOffsets",278:"RowsPerStrip",279:"StripByteCounts",513:"JPEGInterchangeFormat",514
2024-05-23 23:24:17 UTC	1586	IN	Data Raw: 30 22 29 2c 62 2e 6c 65 6e 67 74 68 26 26 28 24 28 22 2e 74 68 65 6d 65 2d 77 61 76 65 2d 33 20 23 63 6f 6e 74 65 6e 74 2d 61 72 65 61 22 29 2e 63 73 73 28 7b 22 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 22 3a 22 35 70 78 22 2c 22 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 22 3a 22 35 70 78 22 2c 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 22 3a 22 2d 31 70 78 22 7d 29 2c 62 2e 63 73 73 28 7b 22 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 22 3a 22 34 70 78 22 2c 22 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 22 3a 22 34 70 78 22 7d 29 29 29 3b 67 3f 28 65 2e 70 61 72 65 6e 74 28 29 2e 61 64 64 43 6c 61 73 73 28 22 61 63 63 65 6e 74 31 22 29 2c 0a 62 2e 61 64 64 Data Ascii: 0"),b.length&&($(".theme-wave-3 #content-area").css({"border-top-left-radius":"5px","border-top-right-radius":"5px","margin-bottom":"-1px"}),b.css({"border-top-left-radius":"4px","border-top-right-radius":"4px"})));g?(e.parent().addClass("accent1"),b.add

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49732	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:16 UTC	920	OUT	GET /static/kendo/js/kendo.all.min.js?000022CB HTTP/1.1 Host: survey.vovici.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; ASP.NET_SessionId=4l4mj1quseszulhcael1nayc
2024-05-23 23:24:16 UTC	793	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:16 GMT Content-Type: text/javascript Content-Length: 261573 Connection: close Set-Cookie: AWSALB=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh; Expires=Thu, 30 May 2024 23:24:16 GMT; Path=/ Set-Cookie: AWSALBCORS=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh; Expires=Thu, 30 May 2024 23:24:16 GMT; Path=/; SameSite=None; Secure Last-Modified: Tue, 30 Jan 2024 16:22:24 GMT Accept-Ranges: bytes ETag: "020e1819853da1:0" Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:16 UTC	15591	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 64 65 66 69 6e 65 29 20 7b 20 64 65 66 69 6e 65 28 22 6b 65 6e 64 6f 2e 63 6f 72 65 2e 6d 69 6e 22 2c 20 5b 22 6a 71 75 65 72 79 22 5d 2c 20 65 29 20 7d 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 72 28 29 20 7b 20 7d 20 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 20 74 29 20 7b 20 69 66 20 28 74 29 20 72 65 74 75 72 6e 20 22 27 22 20 2b 20 65 2e 73 70 6c 69 74 28 22 27 22 29 2e 6a 6f 69 6e 28 22 5c 5c 27 22 29 2e 73 70 6c 69 74 28 27 5c 5c 22 27 29 2e 6a 6f 69 6e 28 27 5c 5c 5c 5c 5c 5c 22 27 29 2e 72 65 70 6c 61 63 65 28 2f 5c 6e 2f 67 2c 20 22 5c 5c 6e 22 29 2e 72 Data Ascii: !function (e, define) { define("kendo.core.min", ["jquery"], e) }(function () { return function (e, t, n) { function r() { } function o(e, t) { if (t) return "'" + e.split("'").join("\\'").split('\\"').join('\\\\\\"').replace(/\n/g, "\\n").r
2024-05-23 23:24:16 UTC	2870	IN	Data Raw: 6c 65 6e 67 74 68 2c 20 69 29 2c 20 44 20 26 26 20 28 5f 20 2b 3d 20 61 20 2b 20 44 29 2c 20 22 6e 22 20 3d 3d 3d 20 74 20 26 26 20 21 4f 29 20 72 65 74 75 72 6e 20 5f 3b 20 66 6f 72 20 28 65 20 3d 20 6d 2c 20 48 20 3d 20 30 2c 20 46 20 3d 20 63 2e 6c 65 6e 67 74 68 3b 20 48 20 3c 20 46 3b 20 48 2b 2b 29 4e 20 3d 20 63 2e 63 68 61 72 41 74 28 48 29 2c 20 65 20 2b 3d 20 22 6e 22 20 3d 3d 3d 20 4e 20 3f 20 5f 20 3a 20 22 24 22 20 3d 3d 3d 20 4e 20 7c 7c 20 22 25 22 20 3d 3d 3d 20 4e 20 3f 20 4d 20 3a 20 4e 3b 20 72 65 74 75 72 6e 20 65 20 7d 20 69 66 20 28 28 74 2e 69 6e 64 65 78 4f 66 28 22 27 22 29 20 3e 20 2d 31 20 7c 7c 20 74 2e 69 6e 64 65 78 4f 66 28 27 22 27 29 20 3e 20 2d 31 20 7c 7c 20 74 2e 69 6e 64 65 78 4f 66 28 22 5c 5c 22 29 20 3e 20 2d 31 29 Data Ascii: length, i), D && (_ += a + D), "n" === t && !O) return _; for (e = m, H = 0, F = c.length; H < F; H++)N = c.charAt(H), e += "n" === N ? _ : "$" === N \|\| "%" === N ? M : N; return e } if ((t.indexOf("'") > -1 \|\| t.indexOf('"') > -1 \|\| t.indexOf("\\") > -1)
2024-05-23 23:24:16 UTC	16384	IN	Data Raw: 65 72 6e 3a 20 5b 22 28 24 6e 29 22 2c 20 22 24 6e 22 5d 2c 20 64 65 63 69 6d 61 6c 73 3a 20 32 2c 20 22 2c 22 3a 20 22 2c 22 2c 20 22 2e 22 3a 20 22 2e 22 2c 20 67 72 6f 75 70 53 69 7a 65 3a 20 5b 33 5d 2c 20 73 79 6d 62 6f 6c 3a 20 22 24 22 20 7d 20 7d 2c 20 63 61 6c 65 6e 64 61 72 73 3a 20 7b 20 73 74 61 6e 64 61 72 64 3a 20 7b 20 64 61 79 73 3a 20 7b 20 6e 61 6d 65 73 3a 20 5b 22 53 75 6e 64 61 79 22 2c 20 22 4d 6f 6e 64 61 79 22 2c 20 22 54 75 65 73 64 61 79 22 2c 20 22 57 65 64 6e 65 73 64 61 79 22 2c 20 22 54 68 75 72 73 64 61 79 22 2c 20 22 46 72 69 64 61 79 22 2c 20 22 53 61 74 75 72 64 61 79 22 5d 2c 20 6e 61 6d 65 73 41 62 62 72 3a 20 5b 22 53 75 6e 22 2c 20 22 4d 6f 6e 22 2c 20 22 54 75 65 22 2c 20 22 57 65 64 22 2c 20 22 54 68 75 22 2c 20 22 Data Ascii: ern: ["($n)", "$n"], decimals: 2, ",": ",", ".": ".", groupSize: [3], symbol: "$" } }, calendars: { standard: { days: { names: ["Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday"], namesAbbr: ["Sun", "Mon", "Tue", "Wed", "Thu", "
2024-05-23 23:24:17 UTC	16384	IN	Data Raw: 72 6f 77 73 65 72 2e 6d 6f 7a 69 6c 6c 61 2c 20 68 20 3d 20 7a 65 2e 62 72 6f 77 73 65 72 2e 73 61 66 61 72 69 2c 20 7a 65 2e 6d 73 50 6f 69 6e 74 65 72 73 20 3d 20 21 66 20 26 26 20 74 2e 4d 53 50 6f 69 6e 74 65 72 45 76 65 6e 74 2c 20 7a 65 2e 70 6f 69 6e 74 65 72 73 20 3d 20 21 66 20 26 26 20 21 70 20 26 26 20 21 6d 20 26 26 20 21 68 20 26 26 20 74 2e 50 6f 69 6e 74 65 72 45 76 65 6e 74 2c 20 7a 65 2e 6b 69 6e 65 74 69 63 53 63 72 6f 6c 6c 4e 65 65 64 65 64 20 3d 20 75 20 26 26 20 28 7a 65 2e 74 6f 75 63 68 20 7c 7c 20 7a 65 2e 6d 73 50 6f 69 6e 74 65 72 73 20 7c 7c 20 7a 65 2e 70 6f 69 6e 74 65 72 73 29 20 7d 28 29 2c 20 59 20 3d 20 7b 20 6c 65 66 74 3a 20 7b 20 72 65 76 65 72 73 65 3a 20 22 72 69 67 68 74 22 20 7d 2c 20 72 69 67 68 74 3a 20 7b 20 72 Data Ascii: rowser.mozilla, h = ze.browser.safari, ze.msPointers = !f && t.MSPointerEvent, ze.pointers = !f && !p && !m && !h && t.PointerEvent, ze.kineticScrollNeeded = u && (ze.touch \|\| ze.msPointers \|\| ze.pointers) }(), Y = { left: { reverse: "right" }, right: { r
2024-05-23 23:24:17 UTC	16384	IN	Data Raw: 6b 65 6e 64 6f 4b 65 79 64 6f 77 6e 3b 20 69 66 20 28 21 6f 29 20 72 65 74 75 72 6e 20 21 30 3b 20 66 6f 72 20 28 6f 20 3d 20 6f 2e 73 6c 69 63 65 28 29 2c 20 65 2e 73 65 6e 64 65 72 20 3d 20 74 2c 20 65 2e 70 72 65 76 65 6e 74 4b 65 6e 64 6f 4b 65 79 64 6f 77 6e 20 3d 20 21 31 2c 20 6e 20 3d 20 30 2c 20 72 20 3d 20 6f 2e 6c 65 6e 67 74 68 3b 20 6e 20 3c 20 72 3b 20 6e 2b 2b 29 6f 5b 6e 5d 2e 63 61 6c 6c 28 74 2c 20 65 29 3b 20 72 65 74 75 72 6e 20 21 65 2e 70 72 65 76 65 6e 74 4b 65 6e 64 6f 4b 65 79 64 6f 77 6e 20 7d 2c 20 68 65 20 3d 20 65 2e 66 6e 2e 6f 6e 2c 20 24 65 28 21 30 2c 20 5f 2c 20 65 29 2c 20 5f 2e 66 6e 20 3d 20 5f 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 6e 65 77 20 65 2c 20 5f 2e 66 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 20 3d 20 5f 2c 20 Data Ascii: kendoKeydown; if (!o) return !0; for (o = o.slice(), e.sender = t, e.preventKendoKeydown = !1, n = 0, r = o.length; n < r; n++)o[n].call(t, e); return !e.preventKendoKeydown }, he = e.fn.on, $e(!0, _, e), _.fn = _.prototype = new e, _.fn.constructor = _,
2024-05-23 23:24:17 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 28 29 20 7b 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 20 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 20 74 29 20 7b 20 76 61 72 20 6e 20 3d 20 65 2e 78 2e 6c 6f 63 61 74 69 6f 6e 2c 20 69 20 3d 20 65 2e 79 2e 6c 6f 63 61 74 69 6f 6e 2c 20 6f 20 3d 20 74 2e 78 2e 6c 6f 63 61 74 69 6f 6e 2c 20 72 20 3d 20 74 2e 79 2e 6c 6f 63 61 74 69 6f 6e 2c 20 73 20 3d 20 6e 20 2d 20 6f 2c 20 61 20 3d 20 69 20 2d 20 72 3b 20 72 65 74 75 72 6e 20 7b 20 63 65 6e 74 65 72 3a 20 7b 20 78 3a 20 28 6e 20 2b 20 6f 29 20 2f 20 32 2c 20 79 3a 20 28 69 20 2b 20 72 29 20 2f 20 32 20 7d 2c 20 64 69 73 74 61 6e 63 65 3a 20 4d 61 74 68 2e 73 71 72 74 28 73 20 2a 20 73 20 2b 20 61 20 2a 20 61 29 20 7d 20 7d 20 66 75 6e 63 74 69 6f 6e 20 Data Ascii: nction () { return function (e, t) { function n(e, t) { var n = e.x.location, i = e.y.location, o = t.x.location, r = t.y.location, s = n - o, a = i - r; return { center: { x: (n + o) / 2, y: (i + r) / 2 }, distance: Math.sqrt(s * s + a * a) } } function
2024-05-23 23:24:17 UTC	16384	IN	Data Raw: 2c 20 65 20 3d 20 74 68 69 73 2c 20 6e 20 3d 20 65 2e 78 2c 20 72 20 3d 20 65 2e 79 3b 20 65 2e 72 6f 75 6e 64 20 26 26 20 28 6e 20 3d 20 4d 61 74 68 2e 72 6f 75 6e 64 28 6e 29 2c 20 72 20 3d 20 4d 61 74 68 2e 72 6f 75 6e 64 28 72 29 29 2c 20 74 20 3d 20 66 28 6e 2c 20 72 2c 20 65 2e 73 63 61 6c 65 29 2c 20 74 20 21 3d 20 65 2e 63 6f 6f 72 64 69 6e 61 74 65 73 20 26 26 20 28 5f 2e 73 75 70 70 6f 72 74 2e 62 72 6f 77 73 65 72 2e 6d 73 69 65 20 26 26 20 5f 2e 73 75 70 70 6f 72 74 2e 62 72 6f 77 73 65 72 2e 76 65 72 73 69 6f 6e 20 3c 20 31 30 20 3f 20 28 65 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 20 3d 20 22 61 62 73 6f 6c 75 74 65 22 2c 20 65 2e 65 6c 65 6d 65 6e 74 5b 30 5d 2e 73 74 79 6c 65 2e 6c 65 66 74 20 3d 20 65 Data Ascii: , e = this, n = e.x, r = e.y; e.round && (n = Math.round(n), r = Math.round(r)), t = f(n, r, e.scale), t != e.coordinates && (_.support.browser.msie && _.support.browser.version < 10 ? (e.element[0].style.position = "absolute", e.element[0].style.left = e
2024-05-23 23:24:17 UTC	16384	IN	Data Raw: 20 68 20 3d 20 22 69 6e 70 75 74 2c 61 2c 74 65 78 74 61 72 65 61 2c 2e 6b 2d 6d 75 6c 74 69 73 65 6c 65 63 74 2d 77 72 61 70 2c 73 65 6c 65 63 74 2c 62 75 74 74 6f 6e 2c 2e 6b 2d 62 75 74 74 6f 6e 3e 73 70 61 6e 2c 2e 6b 2d 62 75 74 74 6f 6e 3e 69 6d 67 2c 73 70 61 6e 2e 6b 2d 69 63 6f 6e 2e 6b 2d 69 2d 61 72 72 6f 77 2d 36 30 2d 64 6f 77 6e 2c 73 70 61 6e 2e 6b 2d 69 63 6f 6e 2e 6b 2d 69 2d 61 72 72 6f 77 2d 36 30 2d 75 70 2c 6c 61 62 65 6c 2e 6b 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 2e 6b 2d 6e 6f 2d 74 65 78 74 2c 2e 6b 2d 69 63 6f 6e 2e 6b 2d 69 2d 63 6f 6c 6c 61 70 73 65 2c 2e 6b 2d 69 63 6f 6e 2e 6b 2d 69 2d 65 78 70 61 6e 64 2c 73 70 61 6e 2e 6b 2d 6e 75 6d 65 72 69 63 2d 77 72 61 70 2c 2e 6b 2d 66 6f 63 75 73 61 62 6c 65 22 2c 20 5f 20 3d Data Ascii: h = "input,a,textarea,.k-multiselect-wrap,select,button,.k-button>span,.k-button>img,span.k-icon.k-i-arrow-60-down,span.k-icon.k-i-arrow-60-up,label.k-checkbox-label.k-no-text,.k-icon.k-i-collapse,.k-icon.k-i-expand,span.k-numeric-wrap,.k-focusable", _ =
2024-05-23 23:24:17 UTC	16384	IN	Data Raw: 2c 20 63 20 3d 20 72 2e 6d 61 78 2c 20 75 20 3d 20 6c 2e 5f 74 69 74 6c 65 2c 20 64 20 3d 20 6c 2e 5f 74 61 62 6c 65 2c 20 66 20 3d 20 6c 2e 5f 6f 6c 64 54 61 62 6c 65 2c 20 67 20 3d 20 6c 2e 5f 63 75 72 72 65 6e 74 2c 20 76 20 3d 20 61 20 26 26 20 2b 61 20 3e 20 2b 67 2c 20 5f 20 3d 20 6e 20 21 3d 3d 20 74 20 26 26 20 6e 20 21 3d 3d 20 6c 2e 5f 69 6e 64 65 78 2c 20 44 20 3d 20 6c 2e 65 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 28 22 2e 6b 2d 63 61 6c 65 6e 64 61 72 2d 76 69 65 77 22 29 2c 20 61 20 7c 7c 20 28 61 20 3d 20 67 29 2c 20 6c 2e 5f 63 75 72 72 65 6e 74 20 3d 20 61 20 3d 20 6e 65 77 20 4f 65 28 28 2b 69 28 61 2c 20 6f 2c 20 63 29 29 29 2c 20 6e 20 3d 3d 3d 20 74 20 3f 20 6e 20 3d 20 6c 2e 5f 69 6e 64 65 78 20 3a 20 6c 2e 5f 69 6e 64 65 78 20 Data Ascii: , c = r.max, u = l._title, d = l._table, f = l._oldTable, g = l._current, v = a && +a > +g, _ = n !== t && n !== l._index, D = l.element.children(".k-calendar-view"), a \|\| (a = g), l._current = a = new Oe((+i(a, o, c))), n === t ? n = l._index : l._index
2024-05-23 23:24:17 UTC	16384	IN	Data Raw: 65 74 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 28 29 29 3b 20 66 6f 72 20 28 6e 2e 73 65 74 46 75 6c 6c 59 65 61 72 28 65 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 29 3b 20 6e 2e 67 65 74 44 61 79 28 29 20 21 3d 20 61 3b 29 54 2e 73 65 74 54 69 6d 65 28 6e 2c 20 2d 31 20 2a 20 43 65 29 3b 20 72 65 74 75 72 6e 20 6e 20 7d 2c 20 73 65 74 54 69 6d 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 20 76 61 72 20 61 20 3d 20 65 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 2c 20 6e 20 3d 20 6e 65 77 20 4f 65 28 65 2e 67 65 74 54 69 6d 65 28 29 20 2b 20 74 29 2c 20 6c 20 3d 20 6e 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 20 2d 20 61 3b 20 65 2e 73 65 74 54 69 6d 65 28 6e 2e 67 65 74 54 69 6d 65 28 29 20 2b 20 6c 20 2a 20 53 Data Ascii: etMilliseconds()); for (n.setFullYear(e.getFullYear()); n.getDay() != a;)T.setTime(n, -1 * Ce); return n }, setTime: function (e, t) { var a = e.getTimezoneOffset(), n = new Oe(e.getTime() + t), l = n.getTimezoneOffset() - a; e.setTime(n.getTime() + l * S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49733	2.18.97.153	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:17 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-23 23:24:17 UTC	515	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=233135 Date: Thu, 23 May 2024 23:24:17 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49737	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:18 UTC	1002	OUT	GET /surveys/718515628/691bbd23/MSC_R_tagline_RGB.png HTTP/1.1 Host: survey.vovici.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://survey.vovici.com/surveys/718515628/691bbd23/theme.css?9B9CBA5500000965 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh; AWSALBCORS=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh
2024-05-23 23:24:18 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:18 GMT Content-Type: image/png Content-Length: 28614 Connection: close Set-Cookie: AWSALB=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX; Expires=Thu, 30 May 2024 23:24:18 GMT; Path=/ Set-Cookie: AWSALBCORS=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX; Expires=Thu, 30 May 2024 23:24:18 GMT; Path=/; SameSite=None; Secure Last-Modified: Tue, 24 Mar 2020 19:33:08 GMT Accept-Ranges: bytes ETag: "352260c132d61:0" Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:18 UTC	15599	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 95 00 00 00 f6 08 06 00 00 00 37 77 0f f8 00 00 00 09 70 48 59 73 00 00 17 12 00 00 17 12 01 67 9f d2 52 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR7wpHYsgROiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-05-23 23:24:18 UTC	13015	IN	Data Raw: 71 44 cd f2 a9 36 a5 6a aa e8 1b b9 6d 69 fe 9c 97 03 99 40 3c c4 91 24 b5 db e5 c0 f8 8c eb f8 38 70 35 b0 7a 49 c7 30 04 38 94 48 08 65 49 6e 5d 01 dc e7 29 01 c0 45 c0 13 29 96 db 87 98 f3 a6 93 76 38 bd e2 b1 d8 1b 58 b5 05 6d 5e e6 68 a5 b4 ae 04 f6 22 5b 07 cb a5 88 0e a6 cb fa b1 97 54 35 4d 7c 68 31 82 18 3d a1 3e 67 02 2f e4 bc 0d 93 4a ed f2 1c f9 96 98 dc 86 6a 95 aa 28 d3 0d e4 37 1a ac 28 bf 22 26 38 7d c2 e6 54 0d 2d 47 ff c9 9d f3 b6 83 21 e7 32 22 a1 2e 49 6a b7 e9 c0 89 5d 58 cf c6 c0 38 e0 c8 82 7f d3 df 4d 24 b4 4e e8 c2 bd cd f7 3c 1d fa 9d 17 bf 4e b1 dc 9e 74 56 ba fd 25 e0 dc 0a c7 a1 2d a3 94 66 a9 63 69 f5 b3 81 1f 64 5c c7 9a 44 22 75 51 3f fa 92 aa 64 78 03 8f e9 43 c0 8a 36 6d bf 0b ae 93 73 de c6 50 4c 2a b5 cd 41 e4 3b 81 ba Data Ascii: qD6jmi@<$8p5zI08HeIn])E)v8Xm^h"[T5M\|h1=>g/Jj(7("&8}T-G!2".Ij]X8M$N<NtV%-fcid\D"uQ?dxC6msPL*A;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49735	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:18 UTC	961	OUT	GET /static/images/lightbox/prev.png HTTP/1.1 Host: survey.vovici.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://survey.vovici.com/static/structure.css?9B9CBA55 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh; AWSALBCORS=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh
2024-05-23 23:24:18 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:18 GMT Content-Type: image/png Content-Length: 1360 Connection: close Set-Cookie: AWSALB=HK5KH89zWPZb6W5/btFysnfgT2gM7abELSvJgz9UonWJ5p6kRRMUlMTinpJMcvLMYDGqeTcRrqMIKts6G9th2wb/vN9u7t/89risnlEtr1+GNSjW+tkXI4JlzUUE; Expires=Thu, 30 May 2024 23:24:18 GMT; Path=/ Set-Cookie: AWSALBCORS=HK5KH89zWPZb6W5/btFysnfgT2gM7abELSvJgz9UonWJ5p6kRRMUlMTinpJMcvLMYDGqeTcRrqMIKts6G9th2wb/vN9u7t/89risnlEtr1+GNSjW+tkXI4JlzUUE; Expires=Thu, 30 May 2024 23:24:18 GMT; Path=/; SameSite=None; Secure Last-Modified: Tue, 30 Jan 2024 16:22:24 GMT Accept-Ranges: bytes ETag: "020e1819853da1:0" Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:18 UTC	1360	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 2d 08 06 00 00 00 ec bf 38 ff 00 00 05 17 49 44 41 54 78 01 cd 99 5b 4c 5c 55 14 86 3d 33 67 86 53 ca 70 2b 14 01 e7 82 86 41 15 c6 1b ad 0d 0c 33 30 03 5a a9 a9 8d 5a 0a 5a 1f ec 83 21 a6 69 d5 c4 47 6e 01 f4 81 3b 31 92 60 c2 23 f8 62 44 0a a0 0f 9a 98 46 02 90 f0 82 3a 4c 4d 34 c1 f8 06 01 c2 1d 29 e3 3f c9 da cd 64 87 b3 c7 18 3d 9b 9d 7c 81 1c 56 9a 7e ac f5 af 73 86 f3 50 24 12 f9 4f f8 1f 8e 89 30 03 95 30 d3 35 85 78 70 4e ba 08 93 b0 00 2b 7d 25 99 93 2f a2 00 15 68 c0 06 52 c1 19 22 0d 24 d1 cf 58 87 94 93 26 a2 00 13 b0 80 d3 20 03 d8 81 1b 3c 49 e4 d3 b5 74 90 48 b5 4a 14 d9 22 bc 84 0a 92 c0 c3 24 50 ac aa ea 8b 9a a6 5d 01 af e2 fb 20 ae 3d 0d 5c 24 73 8a 8d da 49 11 61 9d Data Ascii: PNGIHDR2-8IDATx[L\U=3gSp+A30ZZZ!iGn;1`#bDF:LM4)?d=\|V~sP$O005xpN+}%/hR"$X& <ItHJ"$P] =\$sIa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49734	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:18 UTC	961	OUT	GET /static/images/lightbox/next.png HTTP/1.1 Host: survey.vovici.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://survey.vovici.com/static/structure.css?9B9CBA55 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh; AWSALBCORS=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh
2024-05-23 23:24:18 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:18 GMT Content-Type: image/png Content-Length: 1350 Connection: close Set-Cookie: AWSALB=uOFvF7+6yXSq3WF1DjxWSn842+tygzye3yRXuvJC+WOrW/xR3wI4C0WYoxnvYOOQf9pLq8RvQEo7WOtT8zg+hwmdMDcLz4vtVPzlptBjREZM4iG77Zy/6hQl7f/7; Expires=Thu, 30 May 2024 23:24:18 GMT; Path=/ Set-Cookie: AWSALBCORS=uOFvF7+6yXSq3WF1DjxWSn842+tygzye3yRXuvJC+WOrW/xR3wI4C0WYoxnvYOOQf9pLq8RvQEo7WOtT8zg+hwmdMDcLz4vtVPzlptBjREZM4iG77Zy/6hQl7f/7; Expires=Thu, 30 May 2024 23:24:18 GMT; Path=/; SameSite=None; Secure Last-Modified: Tue, 30 Jan 2024 16:22:24 GMT Accept-Ranges: bytes ETag: "020e1819853da1:0" Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:18 UTC	1350	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 2d 08 06 00 00 00 ec bf 38 ff 00 00 05 0d 49 44 41 54 78 01 cd 99 4b 4c 5c 55 18 c7 bd 33 77 86 2b 30 d0 62 11 67 70 1e 2d 61 d0 5a a7 55 b1 1a a0 03 ce 80 52 6a 6a a3 2d b4 5a 17 76 61 88 69 ac 9a b8 e4 15 40 17 bc 89 91 04 13 96 e0 c6 88 48 41 17 9a 98 46 c2 23 61 83 0a 43 13 4d 30 ee 20 40 78 23 65 fc 4f f2 91 7c b9 f1 1e d2 a4 39 a7 27 f9 05 32 9c 59 fc f2 7d ff ef 9c 7b 79 c4 b4 34 c2 06 ec 40 27 ec c0 46 3c d0 15 8f c7 1f 08 e6 c5 25 1c c0 49 3f 49 e6 e1 17 d1 58 05 0c 90 0a 8e 82 c7 88 23 c0 05 0c da a3 3d 8c 22 1a e1 00 c9 20 03 78 41 2e 38 49 04 e9 b3 63 20 85 f6 da b8 90 72 11 d6 4a 8f 92 44 00 9c d6 75 3d 6a 18 c6 1b e0 12 7e 7f 15 9f e5 93 d0 13 54 31 5d 2c a3 4e 24 15 3c 09 Data Ascii: PNGIHDR2-8IDATxKL\U3w+0bgp-aZURjj-Zvai@HAF#aCM0 @x#eO\|9'2Y}{y4@'F<%I?IX#=" xA.8Ic rJDu=j~T1],N$<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49738	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:18 UTC	964	OUT	GET /static/images/lightbox/loading.gif HTTP/1.1 Host: survey.vovici.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://survey.vovici.com/static/structure.css?9B9CBA55 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh; AWSALBCORS=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh
2024-05-23 23:24:18 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:18 GMT Content-Type: image/gif Content-Length: 8476 Connection: close Set-Cookie: AWSALB=A4GwoKhnjxqEDY1c89AjVMF/TIZZ+uHjxTM1nhzPJy30+MEB/a8dcrY7OwNVXlNCQgo0O9uG7LMK+WNHDb6cC2NVfJdAvDfuYx/jag+nMzTiwrFrHiu6rRbU4GZx; Expires=Thu, 30 May 2024 23:24:18 GMT; Path=/ Set-Cookie: AWSALBCORS=A4GwoKhnjxqEDY1c89AjVMF/TIZZ+uHjxTM1nhzPJy30+MEB/a8dcrY7OwNVXlNCQgo0O9uG7LMK+WNHDb6cC2NVfJdAvDfuYx/jag+nMzTiwrFrHiu6rRbU4GZx; Expires=Thu, 30 May 2024 23:24:18 GMT; Path=/; SameSite=None; Secure Last-Modified: Tue, 30 Jan 2024 16:22:24 GMT Accept-Ranges: bytes ETag: "020e1819853da1:0" Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:18 UTC	8476	IN	Data Raw: 47 49 46 38 39 61 20 00 20 00 f5 2e 00 e8 e8 e8 dc dc dc cd cd cd bf bf bf b7 b7 b7 b1 b1 b1 b5 b5 b5 bb bb bb c5 c5 c5 d1 d1 d1 d8 d8 d8 c1 c1 c1 ad ad ad b9 b9 b9 c9 c9 c9 a4 a4 a4 a5 a5 a5 a1 a1 a1 e2 e2 e2 ea ea ea ee ee ee e6 e6 e6 f2 f2 f2 f6 f6 f6 f4 f4 f4 fa fa fa fd fd fd ac ac ac af af af b3 b3 b3 c7 c7 c7 db db db de de de a9 a9 a9 bd bd bd d3 d3 d3 a6 a6 a6 d5 d5 d5 a0 a0 a0 cb cb cb cf cf cf d7 d7 d7 c3 c3 c3 f8 f8 f8 ec ec ec e0 e0 e0 f0 f0 f0 a8 a8 a8 e4 e4 e4 9a 9a 9a 99 99 99 9c 9c 9c ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 07 00 2e 00 2c 00 00 00 00 20 00 20 00 40 06 ff 40 97 70 48 04 09 0e 9b 50 64 43 Data Ascii: GIF89a .!NETSCAPE2.0!., @@pHPdC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49736	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:18 UTC	962	OUT	GET /static/images/lightbox/close.png HTTP/1.1 Host: survey.vovici.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://survey.vovici.com/static/structure.css?9B9CBA55 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh; AWSALBCORS=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh
2024-05-23 23:24:18 UTC	784	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:18 GMT Content-Type: image/png Content-Length: 280 Connection: close Set-Cookie: AWSALB=qjab/eprffMibd0Zlhnb7YzdjQItp/6oACISDMzmEnUwu41mZcc8V/CdxdbliFMI1jhuMeW64qWVnYfPP8seLfUcWQ9f0E7JQisFxVcYOG0IYriigGP4sNh8DG06; Expires=Thu, 30 May 2024 23:24:18 GMT; Path=/ Set-Cookie: AWSALBCORS=qjab/eprffMibd0Zlhnb7YzdjQItp/6oACISDMzmEnUwu41mZcc8V/CdxdbliFMI1jhuMeW64qWVnYfPP8seLfUcWQ9f0E7JQisFxVcYOG0IYriigGP4sNh8DG06; Expires=Thu, 30 May 2024 23:24:18 GMT; Path=/; SameSite=None; Secure Last-Modified: Tue, 30 Jan 2024 16:22:24 GMT Accept-Ranges: bytes ETag: "020e1819853da1:0" Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:18 UTC	280	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1b 00 00 00 1b 08 03 00 00 00 ba 0a 04 67 00 00 00 3c 50 4c 54 45 ff ff ff 00 00 00 fd fd fd 82 82 82 80 80 80 00 00 00 00 00 00 00 00 00 4b 4b 4b 00 00 00 00 00 00 aa aa aa aa aa aa ba ba ba 4a 4a 4a 48 48 48 00 00 00 bb bb bb b9 b9 b9 ff ff ff f3 6e c3 1c 00 00 00 13 74 52 4e 53 00 4a fe ab ab 00 16 4b 96 0c 0b bf c0 c9 95 95 15 ca c9 09 86 8a 7c 00 00 00 78 49 44 41 54 78 5e 7d d2 49 0e 80 20 10 44 51 1a 15 51 9c fb fe 77 15 89 9b cf a2 6a 05 bc 90 30 54 98 ba 84 2e 57 e8 93 7e 59 ec b4 8e ec b0 b5 d1 bc c5 91 68 43 2c f3 87 b6 b9 57 24 b9 97 ba 92 72 f4 86 24 8f 39 b5 e1 8f a0 a1 ce 81 24 22 89 48 22 92 88 3b 88 e8 20 20 08 78 37 7b 40 62 1f 08 28 ce 29 ef 47 12 4f 26 9f 1a 48 02 ea 7f 17 7d 51 Data Ascii: PNGIHDRg<PLTEKKKJJJHHHntRNSJK\|xIDATx^}I DQQwj0T.W~YhC,W$r$9$"H"; x7{@b()GO&H}Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49739	2.18.97.153	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:18 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-23 23:24:18 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=233134 Date: Thu, 23 May 2024 23:24:18 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-23 23:24:18 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49740	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:19 UTC	950	OUT	GET /favicon.ico HTTP/1.1 Host: survey.vovici.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX; AWSALBCORS=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX
2024-05-23 23:24:19 UTC	698	IN	HTTP/1.1 404 Not Found Date: Thu, 23 May 2024 23:24:19 GMT Content-Type: text/html Content-Length: 1245 Connection: close Set-Cookie: AWSALB=W4+R7pTuGnnCvXPP7NTk4YwcH30PWCok+zrjI6hb4nlSlaPWgGVAcfLa9vvDd3wAlDTizj0snqbUZJqQ0cToY8NvfzD8rmMScrTiSTN7BkbkExrF4t9WLyFoYyU6; Expires=Thu, 30 May 2024 23:24:19 GMT; Path=/ Set-Cookie: AWSALBCORS=W4+R7pTuGnnCvXPP7NTk4YwcH30PWCok+zrjI6hb4nlSlaPWgGVAcfLa9vvDd3wAlDTizj0snqbUZJqQ0cToY8NvfzD8rmMScrTiSTN7BkbkExrF4t9WLyFoYyU6; Expires=Thu, 30 May 2024 23:24:19 GMT; Path=/; SameSite=None; Secure Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:19 UTC	1245	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 46 69 6c Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404 - Fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49745	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:19 UTC	695	OUT	GET /static/images/lightbox/close.png HTTP/1.1 Host: survey.vovici.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX; AWSALBCORS=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX
2024-05-23 23:24:19 UTC	784	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:19 GMT Content-Type: image/png Content-Length: 280 Connection: close Set-Cookie: AWSALB=qrmdcTiLQ6H+dvMiZZCaeExkJEt+b+1XvHe+kKNaDQxavaQxIidRNfHcDBvlt/tr1mFMP/sfsbwyTBojtGHYVpwO/IgRPLpDBsbhUC8ZQ/+FzZ19B80Gtq2NcRjI; Expires=Thu, 30 May 2024 23:24:19 GMT; Path=/ Set-Cookie: AWSALBCORS=qrmdcTiLQ6H+dvMiZZCaeExkJEt+b+1XvHe+kKNaDQxavaQxIidRNfHcDBvlt/tr1mFMP/sfsbwyTBojtGHYVpwO/IgRPLpDBsbhUC8ZQ/+FzZ19B80Gtq2NcRjI; Expires=Thu, 30 May 2024 23:24:19 GMT; Path=/; SameSite=None; Secure Last-Modified: Tue, 30 Jan 2024 16:22:24 GMT Accept-Ranges: bytes ETag: "020e1819853da1:0" Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:19 UTC	280	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1b 00 00 00 1b 08 03 00 00 00 ba 0a 04 67 00 00 00 3c 50 4c 54 45 ff ff ff 00 00 00 fd fd fd 82 82 82 80 80 80 00 00 00 00 00 00 00 00 00 4b 4b 4b 00 00 00 00 00 00 aa aa aa aa aa aa ba ba ba 4a 4a 4a 48 48 48 00 00 00 bb bb bb b9 b9 b9 ff ff ff f3 6e c3 1c 00 00 00 13 74 52 4e 53 00 4a fe ab ab 00 16 4b 96 0c 0b bf c0 c9 95 95 15 ca c9 09 86 8a 7c 00 00 00 78 49 44 41 54 78 5e 7d d2 49 0e 80 20 10 44 51 1a 15 51 9c fb fe 77 15 89 9b cf a2 6a 05 bc 90 30 54 98 ba 84 2e 57 e8 93 7e 59 ec b4 8e ec b0 b5 d1 bc c5 91 68 43 2c f3 87 b6 b9 57 24 b9 97 ba 92 72 f4 86 24 8f 39 b5 e1 8f a0 a1 ce 81 24 22 89 48 22 92 88 3b 88 e8 20 20 08 78 37 7b 40 62 1f 08 28 ce 29 ef 47 12 4f 26 9f 1a 48 02 ea 7f 17 7d 51 Data Ascii: PNGIHDRg<PLTEKKKJJJHHHntRNSJK\|xIDATx^}I DQQwj0T.W~YhC,W$r$9$"H"; x7{@b()GO&H}Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49743	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:19 UTC	694	OUT	GET /static/images/lightbox/next.png HTTP/1.1 Host: survey.vovici.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX; AWSALBCORS=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX
2024-05-23 23:24:19 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:19 GMT Content-Type: image/png Content-Length: 1350 Connection: close Set-Cookie: AWSALB=xhBSJIObRP9IdgXuLSOHemyghwlyJdArJLOclcQY3RVMpOEviuulJmRCpJj8PrHmP1nQh2B5PGc1jJY7hby5j3JrWlYyudHiE6ah9SVU84v88NmelQZ7ie3+Vgg/; Expires=Thu, 30 May 2024 23:24:19 GMT; Path=/ Set-Cookie: AWSALBCORS=xhBSJIObRP9IdgXuLSOHemyghwlyJdArJLOclcQY3RVMpOEviuulJmRCpJj8PrHmP1nQh2B5PGc1jJY7hby5j3JrWlYyudHiE6ah9SVU84v88NmelQZ7ie3+Vgg/; Expires=Thu, 30 May 2024 23:24:19 GMT; Path=/; SameSite=None; Secure Last-Modified: Tue, 30 Jan 2024 16:22:24 GMT Accept-Ranges: bytes ETag: "020e1819853da1:0" Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:19 UTC	1350	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 2d 08 06 00 00 00 ec bf 38 ff 00 00 05 0d 49 44 41 54 78 01 cd 99 4b 4c 5c 55 18 c7 bd 33 77 86 2b 30 d0 62 11 67 70 1e 2d 61 d0 5a a7 55 b1 1a a0 03 ce 80 52 6a 6a a3 2d b4 5a 17 76 61 88 69 ac 9a b8 e4 15 40 17 bc 89 91 04 13 96 e0 c6 88 48 41 17 9a 98 46 c2 23 61 83 0a 43 13 4d 30 ee 20 40 78 23 65 fc 4f f2 91 7c b9 f1 1e d2 a4 39 a7 27 f9 05 32 9c 59 fc f2 7d ff ef 9c 7b 79 c4 b4 34 c2 06 ec 40 27 ec c0 46 3c d0 15 8f c7 1f 08 e6 c5 25 1c c0 49 3f 49 e6 e1 17 d1 58 05 0c 90 0a 8e 82 c7 88 23 c0 05 0c da a3 3d 8c 22 1a e1 00 c9 20 03 78 41 2e 38 49 04 e9 b3 63 20 85 f6 da b8 90 72 11 d6 4a 8f 92 44 00 9c d6 75 3d 6a 18 c6 1b e0 12 7e 7f 15 9f e5 93 d0 13 54 31 5d 2c a3 4e 24 15 3c 09 Data Ascii: PNGIHDR2-8IDATxKL\U3w+0bgp-aZURjj-Zvai@HAF#aCM0 @x#eO\|9'2Y}{y4@'F<%I?IX#=" xA.8Ic rJDu=j~T1],N$<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49742	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:19 UTC	694	OUT	GET /static/images/lightbox/prev.png HTTP/1.1 Host: survey.vovici.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX; AWSALBCORS=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX
2024-05-23 23:24:19 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:19 GMT Content-Type: image/png Content-Length: 1360 Connection: close Set-Cookie: AWSALB=HYr6BEq12B6J+gQKvnBv1Hr0Hxu7xw6XDld11a2G5iA+8gF5yO3ZgEgpPT7Xg9BF5ycoaCTOPFaUMZ8uf4eI3f7xiTb94P/yP64gI09RkKKqgjanOj96fX+fApd0; Expires=Thu, 30 May 2024 23:24:19 GMT; Path=/ Set-Cookie: AWSALBCORS=HYr6BEq12B6J+gQKvnBv1Hr0Hxu7xw6XDld11a2G5iA+8gF5yO3ZgEgpPT7Xg9BF5ycoaCTOPFaUMZ8uf4eI3f7xiTb94P/yP64gI09RkKKqgjanOj96fX+fApd0; Expires=Thu, 30 May 2024 23:24:19 GMT; Path=/; SameSite=None; Secure Last-Modified: Tue, 30 Jan 2024 16:22:24 GMT Accept-Ranges: bytes ETag: "020e1819853da1:0" Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:19 UTC	1360	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 2d 08 06 00 00 00 ec bf 38 ff 00 00 05 17 49 44 41 54 78 01 cd 99 5b 4c 5c 55 14 86 3d 33 67 86 53 ca 70 2b 14 01 e7 82 86 41 15 c6 1b ad 0d 0c 33 30 03 5a a9 a9 8d 5a 0a 5a 1f ec 83 21 a6 69 d5 c4 47 6e 01 f4 81 3b 31 92 60 c2 23 f8 62 44 0a a0 0f 9a 98 46 02 90 f0 82 3a 4c 4d 34 c1 f8 06 01 c2 1d 29 e3 3f c9 da cd 64 87 b3 c7 18 3d 9b 9d 7c 81 1c 56 9a 7e ac f5 af 73 86 f3 50 24 12 f9 4f f8 1f 8e 89 30 03 95 30 d3 35 85 78 70 4e ba 08 93 b0 00 2b 7d 25 99 93 2f a2 00 15 68 c0 06 52 c1 19 22 0d 24 d1 cf 58 87 94 93 26 a2 00 13 b0 80 d3 20 03 d8 81 1b 3c 49 e4 d3 b5 74 90 48 b5 4a 14 d9 22 bc 84 0a 92 c0 c3 24 50 ac aa ea 8b 9a a6 5d 01 af e2 fb 20 ae 3d 0d 5c 24 73 8a 8d da 49 11 61 9d Data Ascii: PNGIHDR2-8IDATx[L\U=3gSp+A30ZZZ!iGn;1`#bDF:LM4)?d=\|V~sP$O005xpN+}%/hR"$X& <ItHJ"$P] =\$sIa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49741	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:19 UTC	697	OUT	GET /static/images/lightbox/loading.gif HTTP/1.1 Host: survey.vovici.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX; AWSALBCORS=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX
2024-05-23 23:24:19 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:19 GMT Content-Type: image/gif Content-Length: 8476 Connection: close Set-Cookie: AWSALB=jeFG4m1rHmnjVRvkC0LvVQB4kK7awL+n/lfCoC7n5M/+O2qt63NJ1FImJurINbX2su1xluSQnCCreFiFHOkwMkHZuX/qYWR7Vgev3izZMWGRiI/2E6xSgl9Feytn; Expires=Thu, 30 May 2024 23:24:19 GMT; Path=/ Set-Cookie: AWSALBCORS=jeFG4m1rHmnjVRvkC0LvVQB4kK7awL+n/lfCoC7n5M/+O2qt63NJ1FImJurINbX2su1xluSQnCCreFiFHOkwMkHZuX/qYWR7Vgev3izZMWGRiI/2E6xSgl9Feytn; Expires=Thu, 30 May 2024 23:24:19 GMT; Path=/; SameSite=None; Secure Last-Modified: Tue, 30 Jan 2024 16:22:24 GMT Accept-Ranges: bytes ETag: "020e1819853da1:0" Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:19 UTC	8476	IN	Data Raw: 47 49 46 38 39 61 20 00 20 00 f5 2e 00 e8 e8 e8 dc dc dc cd cd cd bf bf bf b7 b7 b7 b1 b1 b1 b5 b5 b5 bb bb bb c5 c5 c5 d1 d1 d1 d8 d8 d8 c1 c1 c1 ad ad ad b9 b9 b9 c9 c9 c9 a4 a4 a4 a5 a5 a5 a1 a1 a1 e2 e2 e2 ea ea ea ee ee ee e6 e6 e6 f2 f2 f2 f6 f6 f6 f4 f4 f4 fa fa fa fd fd fd ac ac ac af af af b3 b3 b3 c7 c7 c7 db db db de de de a9 a9 a9 bd bd bd d3 d3 d3 a6 a6 a6 d5 d5 d5 a0 a0 a0 cb cb cb cf cf cf d7 d7 d7 c3 c3 c3 f8 f8 f8 ec ec ec e0 e0 e0 f0 f0 f0 a8 a8 a8 e4 e4 e4 9a 9a 9a 99 99 99 9c 9c 9c ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 07 00 2e 00 2c 00 00 00 00 20 00 20 00 40 06 ff 40 97 70 48 04 09 0e 9b 50 64 43 Data Ascii: GIF89a .!NETSCAPE2.0!., @@pHPdC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49744	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:19 UTC	711	OUT	GET /surveys/718515628/691bbd23/MSC_R_tagline_RGB.png HTTP/1.1 Host: survey.vovici.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX; AWSALBCORS=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX
2024-05-23 23:24:19 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:19 GMT Content-Type: image/png Content-Length: 28614 Connection: close Set-Cookie: AWSALB=exP3iQa0YCZjqyxwz1NTzgMlqxp7lI0yh15H41N1FRwkbt6Wo3/uZPQ0hgmtoWOhPFp8snq6qM371o1+WWqMM5gjAYg5wxRd5FEGEbGV4TJuKljxf7X4NACmASMP; Expires=Thu, 30 May 2024 23:24:19 GMT; Path=/ Set-Cookie: AWSALBCORS=exP3iQa0YCZjqyxwz1NTzgMlqxp7lI0yh15H41N1FRwkbt6Wo3/uZPQ0hgmtoWOhPFp8snq6qM371o1+WWqMM5gjAYg5wxRd5FEGEbGV4TJuKljxf7X4NACmASMP; Expires=Thu, 30 May 2024 23:24:19 GMT; Path=/; SameSite=None; Secure Last-Modified: Tue, 24 Mar 2020 19:33:08 GMT Accept-Ranges: bytes ETag: "352260c132d61:0" Server: Microsoft-IIS/10.0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:19 UTC	15599	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 95 00 00 00 f6 08 06 00 00 00 37 77 0f f8 00 00 00 09 70 48 59 73 00 00 17 12 00 00 17 12 01 67 9f d2 52 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR7wpHYsgROiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-05-23 23:24:19 UTC	13015	IN	Data Raw: 71 44 cd f2 a9 36 a5 6a aa e8 1b b9 6d 69 fe 9c 97 03 99 40 3c c4 91 24 b5 db e5 c0 f8 8c eb f8 38 70 35 b0 7a 49 c7 30 04 38 94 48 08 65 49 6e 5d 01 dc e7 29 01 c0 45 c0 13 29 96 db 87 98 f3 a6 93 76 38 bd e2 b1 d8 1b 58 b5 05 6d 5e e6 68 a5 b4 ae 04 f6 22 5b 07 cb a5 88 0e a6 cb fa b1 97 54 35 4d 7c 68 31 82 18 3d a1 3e 67 02 2f e4 bc 0d 93 4a ed f2 1c f9 96 98 dc 86 6a 95 aa 28 d3 0d e4 37 1a ac 28 bf 22 26 38 7d c2 e6 54 0d 2d 47 ff c9 9d f3 b6 83 21 e7 32 22 a1 2e 49 6a b7 e9 c0 89 5d 58 cf c6 c0 38 e0 c8 82 7f d3 df 4d 24 b4 4e e8 c2 bd cd f7 3c 1d fa 9d 17 bf 4e b1 dc 9e 74 56 ba fd 25 e0 dc 0a c7 a1 2d a3 94 66 a9 63 69 f5 b3 81 1f 64 5c c7 9a 44 22 75 51 3f fa 92 aa 64 78 03 8f e9 43 c0 8a 36 6d bf 0b ae 93 73 de c6 50 4c 2a b5 cd 41 e4 3b 81 ba Data Ascii: qD6jmi@<$8p5zI08HeIn])E)v8Xm^h"[T5M\|h1=>g/Jj(7("&8}T-G!2".Ij]X8M$N<NtV%-fcid\D"uQ?dxC6msPL*A;

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49747	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:21 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 68 58 64 4d 6a 69 31 65 35 6b 71 72 6d 73 4c 59 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 30 39 63 31 39 37 30 32 33 34 30 66 36 30 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: hXdMji1e5kqrmsLY.1Context: 909c19702340f60f
2024-05-23 23:24:21 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-23 23:24:21 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 68 58 64 4d 6a 69 31 65 35 6b 71 72 6d 73 4c 59 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 30 39 63 31 39 37 30 32 33 34 30 66 36 30 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 4b 4d 36 36 69 74 7a 4f 2f 52 41 4c 47 66 65 48 6b 6d 51 2f 53 4d 44 6b 61 34 76 66 66 76 54 6d 6d 35 73 37 49 67 36 7a 35 72 50 6e 38 4e 31 74 52 69 59 30 6f 47 75 31 2f 6e 4f 75 70 4d 45 6c 38 6d 45 52 54 6c 56 50 72 39 6e 64 43 66 66 55 31 4b 4f 32 43 4e 30 32 45 30 4f 78 75 44 59 7a 73 5a 30 47 32 2f 4d 45 4f 6f 53 76 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: hXdMji1e5kqrmsLY.2Context: 909c19702340f60f<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfKM66itzO/RALGfeHkmQ/SMDka4vffvTmm5s7Ig6z5rPn8N1tRiY0oGu1/nOupMEl8mERTlVPr9ndCffU1KO2CN02E0OxuDYzsZ0G2/MEOoSv
2024-05-23 23:24:21 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 68 58 64 4d 6a 69 31 65 35 6b 71 72 6d 73 4c 59 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 30 39 63 31 39 37 30 32 33 34 30 66 36 30 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: hXdMji1e5kqrmsLY.3Context: 909c19702340f60f<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-05-23 23:24:21 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-23 23:24:21 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 73 38 52 4f 78 65 73 36 69 55 36 4b 39 37 66 4e 66 53 4e 70 37 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: s8ROxes6iU6K97fNfSNp7A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49748	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:22 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 34 0d 0a 4d 53 2d 43 56 3a 20 44 73 41 64 39 33 67 57 79 55 71 7a 41 35 36 5a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 65 36 32 36 36 61 37 62 38 32 61 35 39 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 304MS-CV: DsAd93gWyUqzA56Z.1Context: 2e6266a7b82a593
2024-05-23 23:24:22 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-23 23:24:22 UTC	1063	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 30 0d 0a 4d 53 2d 43 56 3a 20 44 73 41 64 39 33 67 57 79 55 71 7a 41 35 36 5a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 65 36 32 36 36 61 37 62 38 32 61 35 39 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 4b 4d 36 36 69 74 7a 4f 2f 52 41 4c 47 66 65 48 6b 6d 51 2f 53 4d 44 6b 61 34 76 66 66 76 54 6d 6d 35 73 37 49 67 36 7a 35 72 50 6e 38 4e 31 74 52 69 59 30 6f 47 75 31 2f 6e 4f 75 70 4d 45 6c 38 6d 45 52 54 6c 56 50 72 39 6e 64 43 66 66 55 31 4b 4f 32 43 4e 30 32 45 30 4f 78 75 44 59 7a 73 5a 30 47 32 2f 4d 45 4f 6f 53 76 50 Data Ascii: ATH 2 CON\DEVICE 1040MS-CV: DsAd93gWyUqzA56Z.2Context: 2e6266a7b82a593<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfKM66itzO/RALGfeHkmQ/SMDka4vffvTmm5s7Ig6z5rPn8N1tRiY0oGu1/nOupMEl8mERTlVPr9ndCffU1KO2CN02E0OxuDYzsZ0G2/MEOoSvP
2024-05-23 23:24:22 UTC	73	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 35 0d 0a 4d 53 2d 43 56 3a 20 44 73 41 64 39 33 67 57 79 55 71 7a 41 35 36 5a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 65 36 32 36 36 61 37 62 38 32 61 35 39 33 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 55MS-CV: DsAd93gWyUqzA56Z.3Context: 2e6266a7b82a593
2024-05-23 23:24:22 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-23 23:24:22 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 64 38 53 7a 59 6f 75 73 63 6b 71 31 6c 7a 62 4c 30 4c 69 6b 59 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: d8SzYousckq1lzbL0LikYQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49751	35.160.201.168	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:26 UTC	999	OUT	GET /oh/2AD3ADAC691BBD2308DC7A75D80BDEE178 HTTP/1.1 Host: survey.vovici.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALBCORS=exP3iQa0YCZjqyxwz1NTzgMlqxp7lI0yh15H41N1FRwkbt6Wo3/uZPQ0hgmtoWOhPFp8snq6qM371o1+WWqMM5gjAYg5wxRd5FEGEbGV4TJuKljxf7X4NACmASMP; AWSALB=WlkJ85Jofj81b01rKSr4Q9tM+d2mo2hxpfXB4wO99m3a2y404SKcqOhip0g9Z0I8YS4aPhnc+SvA3xPMeeHkJ/8DO4bSswXKvh54Ke+zTBlefBd2c5b3fv77YtAB
2024-05-23 23:24:27 UTC	770	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 23:24:27 GMT Content-Type: text/html; charset=utf-8 Content-Length: 4648 Connection: close Set-Cookie: AWSALB=PvjGVrOF6jo0ZWzgWv9IIUl9pCd3ZZ34U+JRDxWBN2qa0Ksmt5NDNTlZl3rvHXqcRq3yt4d8Mn2m09JZlUSw7Tlm/CgFYIJwc31pzO3XinYt1wRlUNeUE0UT7nmv; Expires=Thu, 30 May 2024 23:24:27 GMT; Path=/ Set-Cookie: AWSALBCORS=PvjGVrOF6jo0ZWzgWv9IIUl9pCd3ZZ34U+JRDxWBN2qa0Ksmt5NDNTlZl3rvHXqcRq3yt4d8Mn2m09JZlUSw7Tlm/CgFYIJwc31pzO3XinYt1wRlUNeUE0UT7nmv; Expires=Thu, 30 May 2024 23:24:27 GMT; Path=/; SameSite=None; Secure Cache-Control: private Server: Microsoft-IIS/10.0 X-UA-Compatible: IE=8,IE=9,IE=10,IE=11 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 23:24:27 UTC	4648	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 37 20 76 74 2d 61 64 61 70 74 69 76 65 20 76 74 2d 6c 61 6e 67 2d 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 38 20 76 74 2d 61 64 61 70 74 69 76 65 20 76 74 2d 6c 61 6e 67 2d 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6d 6f 64 65 72 6e 20 69 65 39 20 76 74 2d 61 64 61 70 74 69 76 65 Data Ascii: <!DOCTYPE HTML>...[if lt IE 8]><html class="ie7 vt-adaptive vt-lang-ltr" lang="en-US" dir="ltr"><![endif]-->...[if IE 8]><html class="ie8 vt-adaptive vt-lang-ltr" lang="en-US" dir="ltr"><![endif]-->...[if IE 9]><html class="modern ie9 vt-adaptive

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49760	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:33 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6f 4a 64 52 44 62 65 4d 4d 55 61 6a 45 79 69 2f 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 62 63 35 30 63 34 39 30 30 61 65 63 30 62 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: oJdRDbeMMUajEyi/.1Context: ebc50c4900aec0bd
2024-05-23 23:24:33 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-23 23:24:33 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 6f 4a 64 52 44 62 65 4d 4d 55 61 6a 45 79 69 2f 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 62 63 35 30 63 34 39 30 30 61 65 63 30 62 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 4b 4d 36 36 69 74 7a 4f 2f 52 41 4c 47 66 65 48 6b 6d 51 2f 53 4d 44 6b 61 34 76 66 66 76 54 6d 6d 35 73 37 49 67 36 7a 35 72 50 6e 38 4e 31 74 52 69 59 30 6f 47 75 31 2f 6e 4f 75 70 4d 45 6c 38 6d 45 52 54 6c 56 50 72 39 6e 64 43 66 66 55 31 4b 4f 32 43 4e 30 32 45 30 4f 78 75 44 59 7a 73 5a 30 47 32 2f 4d 45 4f 6f 53 76 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: oJdRDbeMMUajEyi/.2Context: ebc50c4900aec0bd<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfKM66itzO/RALGfeHkmQ/SMDka4vffvTmm5s7Ig6z5rPn8N1tRiY0oGu1/nOupMEl8mERTlVPr9ndCffU1KO2CN02E0OxuDYzsZ0G2/MEOoSv
2024-05-23 23:24:33 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6f 4a 64 52 44 62 65 4d 4d 55 61 6a 45 79 69 2f 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 65 62 63 35 30 63 34 39 30 30 61 65 63 30 62 64 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: oJdRDbeMMUajEyi/.3Context: ebc50c4900aec0bd<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-05-23 23:24:33 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-23 23:24:33 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 48 41 2f 45 2f 65 56 4b 6b 45 79 50 4e 49 65 71 62 73 45 7a 76 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: HA/E/eVKkEyPNIeqbsEzvw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	55940	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:39 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6e 34 2f 61 54 46 38 39 41 55 69 50 59 79 48 62 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 39 37 36 65 30 39 64 32 31 33 34 38 36 62 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: n4/aTF89AUiPYyHb.1Context: a976e09d213486b8
2024-05-23 23:24:39 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-23 23:24:39 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 6e 34 2f 61 54 46 38 39 41 55 69 50 59 79 48 62 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 39 37 36 65 30 39 64 32 31 33 34 38 36 62 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 4b 4d 36 36 69 74 7a 4f 2f 52 41 4c 47 66 65 48 6b 6d 51 2f 53 4d 44 6b 61 34 76 66 66 76 54 6d 6d 35 73 37 49 67 36 7a 35 72 50 6e 38 4e 31 74 52 69 59 30 6f 47 75 31 2f 6e 4f 75 70 4d 45 6c 38 6d 45 52 54 6c 56 50 72 39 6e 64 43 66 66 55 31 4b 4f 32 43 4e 30 32 45 30 4f 78 75 44 59 7a 73 5a 30 47 32 2f 4d 45 4f 6f 53 76 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: n4/aTF89AUiPYyHb.2Context: a976e09d213486b8<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfKM66itzO/RALGfeHkmQ/SMDka4vffvTmm5s7Ig6z5rPn8N1tRiY0oGu1/nOupMEl8mERTlVPr9ndCffU1KO2CN02E0OxuDYzsZ0G2/MEOoSv
2024-05-23 23:24:39 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 6e 34 2f 61 54 46 38 39 41 55 69 50 59 79 48 62 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 39 37 36 65 30 39 64 32 31 33 34 38 36 62 38 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: n4/aTF89AUiPYyHb.3Context: a976e09d213486b8
2024-05-23 23:24:39 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-23 23:24:39 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 30 79 77 31 48 2b 65 6d 67 45 32 57 59 32 32 44 38 62 69 62 68 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 0yw1H+emgE2WY22D8bibhw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	55941	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:52 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 74 50 43 78 66 62 71 51 37 55 6d 46 64 30 76 79 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 34 36 36 33 33 63 38 38 61 35 37 66 65 31 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: tPCxfbqQ7UmFd0vy.1Context: 446633c88a57fe1a
2024-05-23 23:24:52 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-23 23:24:52 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 74 50 43 78 66 62 71 51 37 55 6d 46 64 30 76 79 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 34 36 36 33 33 63 38 38 61 35 37 66 65 31 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 4b 4d 36 36 69 74 7a 4f 2f 52 41 4c 47 66 65 48 6b 6d 51 2f 53 4d 44 6b 61 34 76 66 66 76 54 6d 6d 35 73 37 49 67 36 7a 35 72 50 6e 38 4e 31 74 52 69 59 30 6f 47 75 31 2f 6e 4f 75 70 4d 45 6c 38 6d 45 52 54 6c 56 50 72 39 6e 64 43 66 66 55 31 4b 4f 32 43 4e 30 32 45 30 4f 78 75 44 59 7a 73 5a 30 47 32 2f 4d 45 4f 6f 53 76 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: tPCxfbqQ7UmFd0vy.2Context: 446633c88a57fe1a<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfKM66itzO/RALGfeHkmQ/SMDka4vffvTmm5s7Ig6z5rPn8N1tRiY0oGu1/nOupMEl8mERTlVPr9ndCffU1KO2CN02E0OxuDYzsZ0G2/MEOoSv
2024-05-23 23:24:52 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 74 50 43 78 66 62 71 51 37 55 6d 46 64 30 76 79 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 34 36 36 33 33 63 38 38 61 35 37 66 65 31 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: tPCxfbqQ7UmFd0vy.3Context: 446633c88a57fe1a<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-05-23 23:24:52 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-23 23:24:52 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 76 6b 64 4c 72 58 38 37 72 30 61 4b 50 6b 65 6a 31 43 4b 76 56 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: vkdLrX87r0aKPkej1CKvVQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	55942	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:24:59 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 34 0d 0a 4d 53 2d 43 56 3a 20 73 54 78 4d 70 79 66 2f 74 6b 2b 48 37 75 63 41 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 36 30 65 63 38 66 31 64 38 61 63 65 34 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 304MS-CV: sTxMpyf/tk+H7ucA.1Context: a60ec8f1d8ace42
2024-05-23 23:24:59 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-23 23:24:59 UTC	1063	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 30 0d 0a 4d 53 2d 43 56 3a 20 73 54 78 4d 70 79 66 2f 74 6b 2b 48 37 75 63 41 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 36 30 65 63 38 66 31 64 38 61 63 65 34 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 4b 4d 36 36 69 74 7a 4f 2f 52 41 4c 47 66 65 48 6b 6d 51 2f 53 4d 44 6b 61 34 76 66 66 76 54 6d 6d 35 73 37 49 67 36 7a 35 72 50 6e 38 4e 31 74 52 69 59 30 6f 47 75 31 2f 6e 4f 75 70 4d 45 6c 38 6d 45 52 54 6c 56 50 72 39 6e 64 43 66 66 55 31 4b 4f 32 43 4e 30 32 45 30 4f 78 75 44 59 7a 73 5a 30 47 32 2f 4d 45 4f 6f 53 76 50 Data Ascii: ATH 2 CON\DEVICE 1040MS-CV: sTxMpyf/tk+H7ucA.2Context: a60ec8f1d8ace42<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfKM66itzO/RALGfeHkmQ/SMDka4vffvTmm5s7Ig6z5rPn8N1tRiY0oGu1/nOupMEl8mERTlVPr9ndCffU1KO2CN02E0OxuDYzsZ0G2/MEOoSvP
2024-05-23 23:24:59 UTC	73	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 35 0d 0a 4d 53 2d 43 56 3a 20 73 54 78 4d 70 79 66 2f 74 6b 2b 48 37 75 63 41 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 36 30 65 63 38 66 31 64 38 61 63 65 34 32 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 55MS-CV: sTxMpyf/tk+H7ucA.3Context: a60ec8f1d8ace42
2024-05-23 23:24:59 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-23 23:24:59 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4a 43 4a 79 36 69 56 6e 38 30 4f 6f 2f 30 6f 71 64 6b 2b 4d 56 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: JCJy6iVn80Oo/0oqdk+MVw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	62954	40.115.3.253	443	2580	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:25:16 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 50 33 50 75 2b 64 44 4d 4b 55 2b 50 4b 6f 65 61 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 32 39 62 33 31 38 66 34 33 37 36 37 33 36 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: P3Pu+dDMKU+PKoea.1Context: a29b318f43767360
2024-05-23 23:25:16 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-23 23:25:16 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 50 33 50 75 2b 64 44 4d 4b 55 2b 50 4b 6f 65 61 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 32 39 62 33 31 38 66 34 33 37 36 37 33 36 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 4b 4d 36 36 69 74 7a 4f 2f 52 41 4c 47 66 65 48 6b 6d 51 2f 53 4d 44 6b 61 34 76 66 66 76 54 6d 6d 35 73 37 49 67 36 7a 35 72 50 6e 38 4e 31 74 52 69 59 30 6f 47 75 31 2f 6e 4f 75 70 4d 45 6c 38 6d 45 52 54 6c 56 50 72 39 6e 64 43 66 66 55 31 4b 4f 32 43 4e 30 32 45 30 4f 78 75 44 59 7a 73 5a 30 47 32 2f 4d 45 4f 6f 53 76 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: P3Pu+dDMKU+PKoea.2Context: a29b318f43767360<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfKM66itzO/RALGfeHkmQ/SMDka4vffvTmm5s7Ig6z5rPn8N1tRiY0oGu1/nOupMEl8mERTlVPr9ndCffU1KO2CN02E0OxuDYzsZ0G2/MEOoSv
2024-05-23 23:25:16 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 50 33 50 75 2b 64 44 4d 4b 55 2b 50 4b 6f 65 61 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 32 39 62 33 31 38 66 34 33 37 36 37 33 36 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: P3Pu+dDMKU+PKoea.3Context: a29b318f43767360<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-05-23 23:25:16 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-23 23:25:16 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 49 68 46 78 6c 6d 6b 78 47 55 79 74 57 4c 44 70 36 59 6c 61 47 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: IhFxlmkxGUytWLDp6YlaGg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	62955	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 23:25:21 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4d 65 42 67 67 6d 43 4f 35 55 71 67 78 6f 5a 4c 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 62 34 33 35 65 35 66 32 66 61 33 34 30 32 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: MeBggmCO5UqgxoZL.1Context: 3b435e5f2fa34022
2024-05-23 23:25:21 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-05-23 23:25:21 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 4d 65 42 67 67 6d 43 4f 35 55 71 67 78 6f 5a 4c 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 62 34 33 35 65 35 66 32 66 61 33 34 30 32 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 66 4b 4d 36 36 69 74 7a 4f 2f 52 41 4c 47 66 65 48 6b 6d 51 2f 53 4d 44 6b 61 34 76 66 66 76 54 6d 6d 35 73 37 49 67 36 7a 35 72 50 6e 38 4e 31 74 52 69 59 30 6f 47 75 31 2f 6e 4f 75 70 4d 45 6c 38 6d 45 52 54 6c 56 50 72 39 6e 64 43 66 66 55 31 4b 4f 32 43 4e 30 32 45 30 4f 78 75 44 59 7a 73 5a 30 47 32 2f 4d 45 4f 6f 53 76 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: MeBggmCO5UqgxoZL.2Context: 3b435e5f2fa34022<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAfKM66itzO/RALGfeHkmQ/SMDka4vffvTmm5s7Ig6z5rPn8N1tRiY0oGu1/nOupMEl8mERTlVPr9ndCffU1KO2CN02E0OxuDYzsZ0G2/MEOoSv
2024-05-23 23:25:21 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 4d 65 42 67 67 6d 43 4f 35 55 71 67 78 6f 5a 4c 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 62 34 33 35 65 35 66 32 66 61 33 34 30 32 32 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: MeBggmCO5UqgxoZL.3Context: 3b435e5f2fa34022
2024-05-23 23:25:21 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-05-23 23:25:21 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 64 4e 4e 42 6b 64 33 4a 53 45 57 4e 2f 53 30 54 48 41 75 75 74 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: dNNBkd3JSEWN/S0THAuutw.0Payload parsing failed.

Target ID:	0
Start time:	19:24:06
Start date:	23/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	19:24:08
Start date:	23/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2000,i,948018042709324076,2356385525770831721,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	19:24:11
Start date:	23/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178	HTTP Parser: No favicon
Source: https://survey.vovici.com/oh/2AD3ADAC691BBD2308DC7A75D80BDEE178	HTTP Parser: No favicon

Source: global traffic	TCP traffic: 192.168.2.6:62951 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:55938 -> 1.1.1.1:53

Source: global traffic	HTTP traffic detected: GET /och/2AD3ADAC691BBD2308DC7A75D80BDEE178 HTTP/1.1Host: survey.vovici.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/bootstrap.min.css?000022CB HTTP/1.1Host: survey.vovici.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; ASP.NET_SessionId=4l4mj1quseszulhcael1nayc
Source: global traffic	HTTP traffic detected: GET /static/kendo/css/kendo.common.min.css?000022CB HTTP/1.1Host: survey.vovici.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; ASP.NET_SessionId=4l4mj1quseszulhcael1nayc
Source: global traffic	HTTP traffic detected: GET /static/kendo/css/kendo.bootstrap.min.css?000022CB HTTP/1.1Host: survey.vovici.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; ASP.NET_SessionId=4l4mj1quseszulhcael1nayc
Source: global traffic	HTTP traffic detected: GET /static/structure.css?9B9CBA55 HTTP/1.1Host: survey.vovici.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; ASP.NET_SessionId=4l4mj1quseszulhcael1nayc
Source: global traffic	HTTP traffic detected: GET /surveys/718515628/691bbd23/theme.css?9B9CBA5500000965 HTTP/1.1Host: survey.vovici.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; ASP.NET_SessionId=4l4mj1quseszulhcael1nayc
Source: global traffic	HTTP traffic detected: GET /static/jquery.min.js?000022CB HTTP/1.1Host: survey.vovici.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; ASP.NET_SessionId=4l4mj1quseszulhcael1nayc
Source: global traffic	HTTP traffic detected: GET /static/bootstrap.min.js?000022CB HTTP/1.1Host: survey.vovici.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; ASP.NET_SessionId=4l4mj1quseszulhcael1nayc
Source: global traffic	HTTP traffic detected: GET /static/jquery.placeholder.js?000022CB HTTP/1.1Host: survey.vovici.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; ASP.NET_SessionId=4l4mj1quseszulhcael1nayc
Source: global traffic	HTTP traffic detected: GET /static/support.js?000022CB HTTP/1.1Host: survey.vovici.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; ASP.NET_SessionId=4l4mj1quseszulhcael1nayc
Source: global traffic	HTTP traffic detected: GET /static/kendo/js/kendo.all.min.js?000022CB HTTP/1.1Host: survey.vovici.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; AWSALBCORS=rCXDoin34k8k+Ygq6kJFjwoZvXsmX9dYKsb6ay+styL8WaOJTkBrpDh5nDvqr4OzcSkKsu7Twj/DZeH+DeM2VPvOw8PJf+us6DamriDSUdbpiyXZLmKQJYCqiyjU; ASP.NET_SessionId=4l4mj1quseszulhcael1nayc
Source: global traffic	HTTP traffic detected: GET /surveys/718515628/691bbd23/MSC_R_tagline_RGB.png HTTP/1.1Host: survey.vovici.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://survey.vovici.com/surveys/718515628/691bbd23/theme.css?9B9CBA5500000965Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh; AWSALBCORS=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh
Source: global traffic	HTTP traffic detected: GET /static/images/lightbox/prev.png HTTP/1.1Host: survey.vovici.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://survey.vovici.com/static/structure.css?9B9CBA55Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh; AWSALBCORS=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh
Source: global traffic	HTTP traffic detected: GET /static/images/lightbox/next.png HTTP/1.1Host: survey.vovici.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://survey.vovici.com/static/structure.css?9B9CBA55Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh; AWSALBCORS=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh
Source: global traffic	HTTP traffic detected: GET /static/images/lightbox/loading.gif HTTP/1.1Host: survey.vovici.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://survey.vovici.com/static/structure.css?9B9CBA55Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh; AWSALBCORS=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh
Source: global traffic	HTTP traffic detected: GET /static/images/lightbox/close.png HTTP/1.1Host: survey.vovici.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://survey.vovici.com/static/structure.css?9B9CBA55Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh; AWSALBCORS=ZJxH1KT97ri1s4ykzUBTCRoytVse1f0bQBCuWfbCN2HUH7bCRWLEazhImUMM9Hba/IpydiNz7tq1MpfHM2Jfilr00cu3QvTuLqsisp3Y9w4uMyMAD3Z8HuxD0tsh
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: survey.vovici.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX; AWSALBCORS=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX
Source: global traffic	HTTP traffic detected: GET /static/images/lightbox/close.png HTTP/1.1Host: survey.vovici.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX; AWSALBCORS=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX
Source: global traffic	HTTP traffic detected: GET /static/images/lightbox/next.png HTTP/1.1Host: survey.vovici.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX; AWSALBCORS=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX
Source: global traffic	HTTP traffic detected: GET /static/images/lightbox/prev.png HTTP/1.1Host: survey.vovici.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX; AWSALBCORS=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX
Source: global traffic	HTTP traffic detected: GET /static/images/lightbox/loading.gif HTTP/1.1Host: survey.vovici.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX; AWSALBCORS=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX
Source: global traffic	HTTP traffic detected: GET /surveys/718515628/691bbd23/MSC_R_tagline_RGB.png HTTP/1.1Host: survey.vovici.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALB=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX; AWSALBCORS=hWNbVXrUV+CHPAT1x7wGDCGQotM8s4v7veIsBy2PwtS8GH5GKt8Skr7mDcJNY2nkNgZbGmI7YGZPE0tCucMLq0nTLdYTK4VAyUj1wmXko+SC+LE0KVKTyaoPEtlX
Source: global traffic	HTTP traffic detected: GET /oh/2AD3ADAC691BBD2308DC7A75D80BDEE178 HTTP/1.1Host: survey.vovici.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=4l4mj1quseszulhcael1nayc; AWSALBCORS=exP3iQa0YCZjqyxwz1NTzgMlqxp7lI0yh15H41N1FRwkbt6Wo3/uZPQ0hgmtoWOhPFp8snq6qM371o1+WWqMM5gjAYg5wxRd5FEGEbGV4TJuKljxf7X4NACmASMP; AWSALB=WlkJ85Jofj81b01rKSr4Q9tM+d2mo2hxpfXB4wO99m3a2y404SKcqOhip0g9Z0I8YS4aPhnc+SvA3xPMeeHkJ/8DO4bSswXKvh54Ke+zTBlefBd2c5b3fv77YtAB
Source: global traffic	HTTP traffic detected: GET /oh/2AD3ADAC691BBD2308DC7A75D80BDEE178 HTTP/1.1Host: survey.vovici.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: AWSALB=exP3iQa0YCZjqyxwz1NTzgMlqxp7lI0yh15H41N1FRwkbt6Wo3/uZPQ0hgmtoWOhPFp8snq6qM371o1+WWqMM5gjAYg5wxRd5FEGEbGV4TJuKljxf7X4NACmASMP

Source: global traffic	DNS traffic detected: DNS query: survey.vovici.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.97.153
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5692_1763505986\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5692_1763505986\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5692_1763505986\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5692_1763505986\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping5692_1763505986\sets.json

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Windows Analysis Report
https://survey.vovici.com/och/2AD3ADAC691BBD2308DC7A75D80BDEE178