Edit tour

Windows Analysis Report
https://survey2.lamresearch.com/k/SsQRQWURsRUSsPsPsPsWTRTXRWWP

Overview

General Information

Sample URL:	https://survey2.lamresearch.com/k/SsQRQWURsRUSsPsPsPsWTRTXRWWP
Analysis ID:	1633566
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

Suricata IDS alerts for network traffic

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6932 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6204 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1880,i,11868907250734405168,722095431324631732,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2788 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://survey2.lamresearch.com/k/SsQRQWURsRUSsPsPsPsWTRTXRWWP" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Suricata Signatures

ETPRO MALWARE Sefnit CnC Beacon 2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-10T12:36:20.330869+0100	2812307	1	Malware Command and Control Activity Detected	192.168.2.16	49759	20.120.76.149	443	TCP
2025-03-10T12:36:20.506745+0100	2812307	1	Malware Command and Control Activity Detected	192.168.2.16	49761	20.120.76.149	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: https://cdnsurvey.sogolytics.com/survey/main.e6566a6add498115.js

HTTP Parser: (self.webpackchunkparticipation=self.webpackchunkparticipation||[]).push([[179],{997:(rt,kt,je)=>{"use strict";function tt(i){return(tt=object.setprototypeof?object.getprototypeof.bind():function(e){return e.__proto__||object.getprototypeof(e)})(i)}function we(i,s){for(;!object.prototype.hasownproperty.call(i,s)&&null!==(i=tt(i)););return i}function it(){return it="undefined"!=typeof reflect&&reflect.get?reflect.get.bind():function(s,e,t){var n=we(s,e);if(n){var r=object.getownpropertydescriptor(n,e);return r.get?r.get.call(arguments.length<3?s:t):r.value}},it.apply(this,arguments)}function ut(i,s){for(var e=0;e<s.length;e++){var t=s[e];t.enumerable=t.enumerable||!1,t.configurable=!0,"value"in t&&(t.writable=!0),object.defineproperty(i,t.key,t)}}function ce(i,s,e){return s&&ut(i.prototype,s),e&&ut(i,e),object.defineproperty(i,"prototype",{writable:!1}),i}function ve(i,s){if(!(i instanceof s))throw new typeerror("cannot call a class as a function")}function lt(i,s){return(lt=object.setprototypeof?object.setpro...

Source: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data=

HTTP Parser: No favicon

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2812307 - Severity 1 - ETPRO MALWARE Sefnit CnC Beacon 2 : 192.168.2.16:49759 -> 20.120.76.149:443
Source: Network traffic	Suricata IDS: 2812307 - Severity 1 - ETPRO MALWARE Sefnit CnC Beacon 2 : 192.168.2.16:49761 -> 20.120.76.149:443

Source: global traffic

TCP traffic: 192.168.2.16:56426 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.16.195
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.16.195
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.136
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.245
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.136
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.245
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /k/SsQRQWURsRUSsPsPsPsWTRTXRWWP HTTP/1.1Host: survey2.lamresearch.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data= HTTP/1.1Host: survey2.lamresearch.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87On\|Z87On
Source: global traffic	HTTP traffic detected: GET /survey/assets/css/jquery-ui.min.css?key=11.05.17-04-2024 HTTP/1.1Host: survey2.lamresearch.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data=Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oo\|Z87On
Source: global traffic	HTTP traffic detected: GET /survey/assets/css/pm/PreviewMode.css HTTP/1.1Host: survey2.lamresearch.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data=Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oo\|Z87On
Source: global traffic	HTTP traffic detected: GET /survey/assets/js/Anuglar_Survey_jquery.min.js?v=30052022 HTTP/1.1Host: survey2.lamresearch.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data=Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oo\|Z87On
Source: global traffic	HTTP traffic detected: GET /survey/assets/js/jquery-ui.min.js?ver=13.0 HTTP/1.1Host: survey2.lamresearch.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data=Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oo\|Z87On
Source: global traffic	HTTP traffic detected: GET /survey/assets/js/Survey_jquery.ui.touch-punch.min.js?ver=13.0 HTTP/1.1Host: survey2.lamresearch.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data=Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oo\|Z87On
Source: global traffic	HTTP traffic detected: GET /survey/assets/js/common-footer-load.js HTTP/1.1Host: survey2.lamresearch.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data=Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oo\|Z87On
Source: global traffic	HTTP traffic detected: GET /survey/runtime.dd6dfe5156a9cc96.js HTTP/1.1Host: cdnsurvey.sogolytics.comConnection: keep-aliveOrigin: https://survey2.lamresearch.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://survey2.lamresearch.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /survey/polyfills.4fd5dd0566825918.js HTTP/1.1Host: cdnsurvey.sogolytics.comConnection: keep-aliveOrigin: https://survey2.lamresearch.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://survey2.lamresearch.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /survey/main.e6566a6add498115.js HTTP/1.1Host: cdnsurvey.sogolytics.comConnection: keep-aliveOrigin: https://survey2.lamresearch.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://survey2.lamresearch.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /survey/scripts.4ab290eebe328bc2.js HTTP/1.1Host: cdnsurvey.sogolytics.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://survey2.lamresearch.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /survey/styles.69500f27b321906b.css HTTP/1.1Host: survey2.lamresearch.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data=Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oo\|Z87On
Source: global traffic	HTTP traffic detected: GET /survey/styles.69500f27b321906b.css HTTP/1.1Host: survey2.lamresearch.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data=Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oq\|Z87On
Source: global traffic	HTTP traffic detected: GET /survey/assets/AcceptCookiesCountry.json HTTP/1.1Host: survey2.lamresearch.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/plain, /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data=Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oq\|Z87On
Source: global traffic	HTTP traffic detected: GET /survey/styles.f238f456d9e78657.css HTTP/1.1Host: survey2.lamresearch.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data=Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oq\|Z87On
Source: global traffic	HTTP traffic detected: GET /survey/assets/AcceptCookiesCountry.json HTTP/1.1Host: survey2.lamresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oq\|Z87On
Source: global traffic	HTTP traffic detected: GET /apipmx/GetSurveyProperties HTTP/1.1Host: survey2.lamresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Or\|Z87On
Source: global traffic	HTTP traffic detected: GET /apipmx/GetSurveyData HTTP/1.1Host: survey2.lamresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Or\|Z87On
Source: global traffic	HTTP traffic detected: GET /clients/lamresearch/104.png?no=804411596 HTTP/1.1Host: cdnstatic.sogolytics.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://survey2.lamresearch.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clients/lamresearch/escalation_qimg_22228359_1.jpg?no=804411596 HTTP/1.1Host: cdnstatic.sogolytics.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://survey2.lamresearch.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clients/lamresearch/scorecard.img_qimg_22228361_1.jpg?no=804411596 HTTP/1.1Host: cdnstatic.sogolytics.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://survey2.lamresearch.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clients/lamresearch/104.png?no=463706920 HTTP/1.1Host: static.sogolytics.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://survey2.lamresearch.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clients/LamResearch/escalation_qimg_22228359_1.jpg?no=902194920 HTTP/1.1Host: static.sogolytics.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://survey2.lamresearch.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clients/LamResearch/scorecard.img_qimg_22228361_1.jpg?no=902194920 HTTP/1.1Host: static.sogolytics.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://survey2.lamresearch.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clients/LamResearch/104.png?no=463706920 HTTP/1.1Host: static.sogolytics.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://survey2.lamresearch.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clients/LamResearch/escalation_qimg_22228359_1.jpg?no=902194920 HTTP/1.1Host: static.sogolytics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /survey/assets/css/PM/fonts/pm_icon_font.ttf?j1b9ob HTTP/1.1Host: survey2.lamresearch.comConnection: keep-aliveOrigin: https://survey2.lamresearch.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://survey2.lamresearch.com/survey/styles.f238f456d9e78657.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: Enabled=true; _ultcsr=icvm02iiifwtaoibazh3jejk; PublicCorpNo121752=121752; PublicSurveyNo253=253; PublicRecNo1217522533=106347433; SERVERpart=part-1\|Z87Os\|Z87On
Source: global traffic	HTTP traffic detected: GET /clients/LamResearch/scorecard.img_qimg_22228361_1.jpg?no=902194920 HTTP/1.1Host: static.sogolytics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clients/LamResearch/104.png?no=463706920 HTTP/1.1Host: static.sogolytics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /survey/faviconempty.ico HTTP/1.1Host: survey2.lamresearch.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: Enabled=true; _ultcsr=icvm02iiifwtaoibazh3jejk; PublicCorpNo121752=121752; PublicSurveyNo253=253; PublicRecNo1217522533=106347433; SERVERpart=part-1\|Z87Ot\|Z87On; _ga=GA1.3.1919806549.1741606580; _gid=GA1.3.301968857.1741606580; _gat_UA-72488792-1=1; _ga_0KPBD0RSS4=GS1.1.1741606580.1.0.1741606580.0.0.0; _ga=GA1.1.1919806549.1741606580
Source: global traffic	HTTP traffic detected: GET /survey/faviconempty.ico HTTP/1.1Host: survey2.lamresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: Enabled=true; _ultcsr=icvm02iiifwtaoibazh3jejk; PublicCorpNo121752=121752; PublicSurveyNo253=253; PublicRecNo1217522533=106347433; _ga=GA1.3.1919806549.1741606580; _gid=GA1.3.301968857.1741606580; _gat_UA-72488792-1=1; _ga_0KPBD0RSS4=GS1.1.1741606580.1.0.1741606580.0.0.0; _ga=GA1.1.1919806549.1741606580; SERVERpart=part-1\|Z87Ou\|Z87On

Source: chromecache_100.1.dr, chromecache_101.1.dr, chromecache_88.1.dr

String found in binary or memory: return f}rG.K="internal.enableAutoEventOnTimer";var cc=wa(["data-gtm-yt-inspected-"]),tG=["www.youtube.com","www.youtube-nocookie.com"],uG,vG=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: survey2.lamresearch.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdnsurvey.sogolytics.com
Source: global traffic	DNS traffic detected: DNS query: cdnstatic.sogolytics.com
Source: global traffic	DNS traffic detected: DNS query: static.sogolytics.com

Source: unknown

HTTP traffic detected: POST /apipmx/GetSurveyProperties HTTP/1.1Host: survey2.lamresearch.comConnection: keep-aliveContent-Length: 514sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/plain, */*sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/jsonsec-ch-ua-mobile: ?0Origin: https://survey2.lamresearch.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data=Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1|Z87Oq|Z87On

Source: chromecache_105.1.dr, chromecache_107.1.dr, chromecache_79.1.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_107.1.dr, chromecache_79.1.dr	String found in binary or memory: http://jqueryui.com/themeroller/?bgShadowXPos=&bgOverlayXPos=&bgErrorXPos=&bgHighlightXPos=&bgConten
Source: chromecache_101.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_80.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_100.1.dr, chromecache_101.1.dr, chromecache_88.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_96.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/adventpro/v28/V8mqoQfxVT4Dvddr_yOwrzaFxV7JtdQgFqXdUAQrGp_zgX5sWCpLQyN_RZ
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/adventpro/v28/V8mqoQfxVT4Dvddr_yOwrzaFxV7JtdQgFqXdUAQrGp_zgX5sWCpLQyN_Rp
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/adventpro/v28/V8mqoQfxVT4Dvddr_yOwrzaFxV7JtdQgFqXdUAQrGp_zgX5sWCpLQyN_S5
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/adventpro/v28/V8mqoQfxVT4Dvddr_yOwrzaFxV7JtdQgFqXdUAQrGp_zgX5sWCpLQyN_SJ
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/adventpro/v28/V8mqoQfxVT4Dvddr_yOwrzaFxV7JtdQgFqXdUAQrGp_zgX5sWCpLQyN_T5
Source: chromecache_106.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/allison/v11/X7nl4b88AP2nkbvZCC-a4fTg.woff2)
Source: chromecache_106.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/allison/v11/X7nl4b88AP2nkbvZCC6a4fTg.woff2)
Source: chromecache_106.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/allison/v11/X7nl4b88AP2nkbvZCCGa4Q.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/allura/v21/9oRPNYsQpS4zjuA_hAgWDto.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/allura/v21/9oRPNYsQpS4zjuA_hQgWDto.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/allura/v21/9oRPNYsQpS4zjuA_iwgW.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/arimamadurai/v15/t5tmIRoeKYORG0WNMgnC3seB3SjPr6OH.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/arimamadurai/v15/t5tmIRoeKYORG0WNMgnC3seB3T7Prw.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/arimamadurai/v15/t5tmIRoeKYORG0WNMgnC3seB3TDPr6OH.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/arimamadurai/v15/t5tmIRoeKYORG0WNMgnC3seB3THPr6OH.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/arvo/v22/tDbD2oWUg0MKqScQ7Q.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/averiaseriflibre/v18/neIWzD2ms4wxr6GvjeD0X88SHPyX2xYOoguP.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/badscript/v17/6NUT8F6PJgbFWQn47_x7pO8kzO1A.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/badscript/v17/6NUT8F6PJgbFWQn47_x7pOQkzO1A.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/badscript/v17/6NUT8F6PJgbFWQn47_x7pOUkzO1A.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/badscript/v17/6NUT8F6PJgbFWQn47_x7pOYkzO1A.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/badscript/v17/6NUT8F6PJgbFWQn47_x7pOskzA.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/charmonman/v18/MjQAmiR3vP_nuxDv47jiYC2HqKxA9dhm.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/charmonman/v18/MjQAmiR3vP_nuxDv47jiYC2HqLZA9dhm.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/charmonman/v18/MjQAmiR3vP_nuxDv47jiYC2HqLdA9dhm.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/charmonman/v18/MjQAmiR3vP_nuxDv47jiYC2HqLhA9Q.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/charmonman/v18/MjQDmiR3vP_nuxDv47jiaIKivYdh.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/charmonman/v18/MjQDmiR3vP_nuxDv47jiaJaivQ.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/charmonman/v18/MjQDmiR3vP_nuxDv47jiaJiivYdh.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/charmonman/v18/MjQDmiR3vP_nuxDv47jiaJmivYdh.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/convergence/v15/rax5HiePvdgXPmmMHcIPYShTu0_g8A.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/convergence/v15/rax5HiePvdgXPmmMHcIPYShdu08.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/cormorantgaramond/v19/co3umX5slCNuHLi8bLeY9MK7whWMhyjypVO7abI26QOD_v86Kn
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dancingscript/v25/If2cXTr6YS-zF4S-kcSWSVi_sxjsohD9F50Ruu7B1i03ROp8ltA.wo
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dancingscript/v25/If2cXTr6YS-zF4S-kcSWSVi_sxjsohD9F50Ruu7B1i03Rep8ltA.wo
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dancingscript/v25/If2cXTr6YS-zF4S-kcSWSVi_sxjsohD9F50Ruu7B1i03Sup8.woff2
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dawningofanewday/v20/t5t_IQMbOp2SEwuncwLRjMfIg1yYit_nAw8cj2M.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dosis/v32/HhyJU5sn9vOmLxNkIwRSjTVNWLEJN7Ml1BMEfq4.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dosis/v32/HhyJU5sn9vOmLxNkIwRSjTVNWLEJN7Ml1RMEfq4.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dosis/v32/HhyJU5sn9vOmLxNkIwRSjTVNWLEJN7Ml2xME.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/droidsans/v18/SlGVmQWMvZQIdix7AFxXkHNSbQ.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/exo2/v24/7cH1v4okm5zmbvwkAx_sfcEuiD8jvvKsN9C_nps.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/exo2/v24/7cH1v4okm5zmbvwkAx_sfcEuiD8jvvKsNNC_nps.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/exo2/v24/7cH1v4okm5zmbvwkAx_sfcEuiD8jvvKsNtC_nps.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/exo2/v24/7cH1v4okm5zmbvwkAx_sfcEuiD8jvvKsOdC_.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/exo2/v24/7cH1v4okm5zmbvwkAx_sfcEuiD8jvvKsPdC_nps.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/firasans/v17/va9E4kDNxMZdWfMOD5Vvk4jLeTY.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/firasans/v17/va9E4kDNxMZdWfMOD5Vvl4jL.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/firasans/v17/va9E4kDNxMZdWfMOD5VvlIjLeTY.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/firasans/v17/va9E4kDNxMZdWfMOD5Vvm4jLeTY.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/firasans/v17/va9E4kDNxMZdWfMOD5VvmIjLeTY.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/firasans/v17/va9E4kDNxMZdWfMOD5VvmYjLeTY.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/firasans/v17/va9E4kDNxMZdWfMOD5VvmojLeTY.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/fuggles/v12/k3kQo8UEJOlD1hpOfdboLnnA.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/fuggles/v12/k3kQo8UEJOlD1hpOfdfoLnnA.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/fuggles/v12/k3kQo8UEJOlD1hpOfdnoLg.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/heebo/v26/NGSpv5_NC0k9P_v6ZUCbLRAHxK1EiSysCUmm_00.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/heebo/v26/NGSpv5_NC0k9P_v6ZUCbLRAHxK1EiSysG0mm_00.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/heebo/v26/NGSpv5_NC0k9P_v6ZUCbLRAHxK1EiSysd0mm_00.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/heebo/v26/NGSpv5_NC0k9P_v6ZUCbLRAHxK1EiSysdUmm.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/heebo/v26/NGSpv5_NC0k9P_v6ZUCbLRAHxK1EiSyse0mm_00.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/homemadeapple/v22/Qw3EZQFXECDrI2q789EKQZJob0x6XHg.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/indieflower/v22/m8JVjfNVeKWVnh3QMuKkFcZVZ0uH5dI.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/indieflower/v22/m8JVjfNVeKWVnh3QMuKkFcZVaUuH.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/jimnightshade/v20/PlIkFlu9Pb08Q8HLM1PxmB0g-NS_XXs.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/jimnightshade/v20/PlIkFlu9Pb08Q8HLM1PxmB0g-NSxXXu6aA.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/josefinsans/v32/Qw3PZQNVED7rKGKxtqIqX5E-AVSJrOCfjY46_DjQbMZhLw.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/josefinsans/v32/Qw3PZQNVED7rKGKxtqIqX5E-AVSJrOCfjY46_DjQbMhhLzTs.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/josefinsans/v32/Qw3PZQNVED7rKGKxtqIqX5E-AVSJrOCfjY46_DjQbMlhLzTs.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/josefinslab/v27/lW-swjwOK3Ps5GSJlNNkMalNpiZe_ldbOR4W71msR349Kg.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/kristi/v21/uK_y4ricdeU6zwdhDRcS.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNXaxMICA.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/librebaskerville/v14/kmKnZrc3Hgbbcjq75U4uslyuy4kn0qNZaxM.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/merriweather/v31/u-4D0qyriQwlOrhSvowK_l5UcA6zuSYEqOzpPe3HOZJ5eX1WtLaQwmY
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw0aXpsog.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw2aXpsog.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw3aXpsog.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw9aXpsog.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/mrssaintdelafield/v13/v6-IGZDIOVXH9xtmTZfRagunqBw5WC62QKcnL_ub.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/mrssaintdelafield/v13/v6-IGZDIOVXH9xtmTZfRagunqBw5WC62QKknLw.woff2)
Source: chromecache_106.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/nothingyoucoulddo/v19/oY1B8fbBpaP5OX3DtrRYf_Q2BPB1SnfZb3OOnVs.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4iaVI
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4jaVI
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVI
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVI
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVI
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVI
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4vaVI
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5OaVI
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5caVI
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUJiZTaR.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUhiZTaR.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUliZTaR.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUtiZTaR.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oxygen/v15/2sDfZG1Wl4LcnbuKgE0mV0Q.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oxygen/v15/2sDfZG1Wl4LcnbuKjk0m.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDTbtPY
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDYbtPY
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/playfairdisplay/v37/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDZbtPY
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsansnarrow/v18/BngRUXNadjH0qYEzV7ab-oWlsbCCwR26eg.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsansnarrow/v18/BngRUXNadjH0qYEzV7ab-oWlsbCGwR0.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsansnarrow/v18/BngRUXNadjH0qYEzV7ab-oWlsbCIwR26eg.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ptsansnarrow/v18/BngRUXNadjH0qYEzV7ab-oWlsbCLwR26eg.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVs9pbCFPrEHJA.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVs9pbCGPrEHJA.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVs9pbCHPrEHJA.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVs9pbCIPrE.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVs9pbCMPrEHJA.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/revalia/v22/WwkexPimBE2-4ZPESV3kNQ.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/revalia/v22/WwkexPimBE2-4ZPESVPkNbgJ.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmQiArmlw.wo
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmXiArmlw.wo
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmYiArmlw.wo
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmZiArmlw.wo
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmaiArmlw.wo
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmbiArmlw.wo
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVn6iArmlw.wo
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVnoiArmlw.wo
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/rokkitt/v36/qFdb35qfgYFjGy5hukqqhw5XeRgdi1ryd6DCGb-3vA.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/rokkitt/v36/qFdb35qfgYFjGy5hukqqhw5XeRgdi1ryd6DDGb-3vA.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/rokkitt/v36/qFdb35qfgYFjGy5hukqqhw5XeRgdi1ryd6DMGb8.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/rufina/v15/Yq6V-LyURyLy-aKCpB5l.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/rufina/v15/Yq6V-LyURyLy-aKCqh5lhOc.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/shadowsintolighttwo/v17/4iC86LVlZsRSjQhpWGedwyOoW-0A6_kpsyNmpALHGYNn.wof
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/shadowsintolighttwo/v17/4iC86LVlZsRSjQhpWGedwyOoW-0A6_kpsyNmpAzHGQ.woff2
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKcQ72j00.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKcg72j00.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKcw72j00.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKew72j00.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfA72j00.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/ubuntu/v20/4iCs6KVjbNBYlgoKfw72.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/windsong/v11/KR1RBsyu-P-GFEW57oeNNMW1nyw.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/windsong/v11/KR1RBsyu-P-GFEW57oeNNMW6nyzOjQ.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/windsong/v11/KR1RBsyu-P-GFEW57oeNNMW7nyzOjQ.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/windsong/v11/KR1WBsyu-P-GFEW57o9-F9A.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/windsong/v11/KR1WBsyu-P-GFEW57o9wF9CKvg.woff2)
Source: chromecache_108.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/windsong/v11/KR1WBsyu-P-GFEW57o9xF9CKvg.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y9I6aknfjLm_3lMKjiMgmUUYBs04aUXNxt9gW2LIfto9tWZC2G
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y9I6aknfjLm_3lMKjiMgmUUYBs04aUXNxt9gW2LIfto9tWZGWG
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y9I6aknfjLm_3lMKjiMgmUUYBs04aUXNxt9gW2LIfto9tWZc2G
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y9I6aknfjLm_3lMKjiMgmUUYBs04aUXNxt9gW2LIfto9tWZd2G
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y9I6aknfjLm_3lMKjiMgmUUYBs04aUXNxt9gW2LIfto9tWZeGG
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y9I6aknfjLm_3lMKjiMgmUUYBs04aUXNxt9gW2LIfto9tWZeWG
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/yanonekaffeesatz/v30/3y9I6aknfjLm_3lMKjiMgmUUYBs04aUXNxt9gW2LIfto9tWZemG
Source: chromecache_106.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/zeyada/v20/11hAGpPTxVPUbgZzM2ys.woff2)
Source: chromecache_106.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/zeyada/v20/11hAGpPTxVPUbgZzPWysaKY.woff2)
Source: chromecache_101.1.dr, chromecache_88.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_100.1.dr, chromecache_101.1.dr, chromecache_88.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_100.1.dr, chromecache_101.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_100.1.dr, chromecache_101.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_80.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_80.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_100.1.dr, chromecache_101.1.dr, chromecache_88.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_88.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_80.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_80.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_80.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_101.1.dr, chromecache_88.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_80.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_100.1.dr, chromecache_101.1.dr, chromecache_88.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_88.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_100.1.dr, chromecache_101.1.dr, chromecache_88.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_80.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_100.1.dr, chromecache_101.1.dr, chromecache_88.1.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_100.1.dr, chromecache_101.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49686
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6932_1924177999

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6932_1924177999

Jump to behavior

Source: classification engine

Classification label: mal48.win@21/65@16/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1880,i,11868907250734405168,722095431324631732,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://survey2.lamresearch.com/k/SsQRQWURsRUSsPsPsPsWTRTXRWWP"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1880,i,11868907250734405168,722095431324631732,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	12 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://survey2.lamresearch.com/k/SsQRQWURsRUSsPsPsPsWTRTXRWWP	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://cdnsurvey.sogolytics.com/survey/runtime.dd6dfe5156a9cc96.js	0%	Avira URL Cloud	safe
https://survey2.lamresearch.com/survey/assets/css/pm/PreviewMode.css	0%	Avira URL Cloud	safe
https://cdnstatic.sogolytics.com/clients/lamresearch/escalation_qimg_22228359_1.jpg?no=804411596	0%	Avira URL Cloud	safe
https://survey2.lamresearch.com/survey/assets/js/common-footer-load.js	0%	Avira URL Cloud	safe
https://static.sogolytics.com/clients/LamResearch/escalation_qimg_22228359_1.jpg?no=902194920	0%	Avira URL Cloud	safe
https://survey2.lamresearch.com/survey/styles.f238f456d9e78657.css	0%	Avira URL Cloud	safe
https://survey2.lamresearch.com/survey/faviconempty.ico	0%	Avira URL Cloud	safe
https://static.sogolytics.com/clients/LamResearch/scorecard.img_qimg_22228361_1.jpg?no=902194920	0%	Avira URL Cloud	safe
https://survey2.lamresearch.com/survey/assets/js/Survey_jquery.ui.touch-punch.min.js?ver=13.0	0%	Avira URL Cloud	safe
https://survey2.lamresearch.com/survey/assets/css/PM/fonts/pm_icon_font.ttf?j1b9ob	0%	Avira URL Cloud	safe
https://cdnsurvey.sogolytics.com/survey/main.e6566a6add498115.js	0%	Avira URL Cloud	safe
https://survey2.lamresearch.com/apipmx/GetSurveyData	0%	Avira URL Cloud	safe
https://survey2.lamresearch.com/survey/assets/css/jquery-ui.min.css?key=11.05.17-04-2024	0%	Avira URL Cloud	safe
https://survey2.lamresearch.com/survey/assets/js/jquery-ui.min.js?ver=13.0	0%	Avira URL Cloud	safe
https://cdnsurvey.sogolytics.com/survey/scripts.4ab290eebe328bc2.js	0%	Avira URL Cloud	safe
https://cdnstatic.sogolytics.com/clients/lamresearch/104.png?no=804411596	0%	Avira URL Cloud	safe
https://cdnsurvey.sogolytics.com/survey/polyfills.4fd5dd0566825918.js	0%	Avira URL Cloud	safe
https://cdnstatic.sogolytics.com/clients/lamresearch/scorecard.img_qimg_22228361_1.jpg?no=804411596	0%	Avira URL Cloud	safe
https://survey2.lamresearch.com/survey/styles.69500f27b321906b.css	0%	Avira URL Cloud	safe
https://static.sogolytics.com/clients/LamResearch/104.png?no=463706920	0%	Avira URL Cloud	safe
https://survey2.lamresearch.com/survey/assets/js/Anuglar_Survey_jquery.min.js?v=30052022	0%	Avira URL Cloud	safe
https://survey2.lamresearch.com/survey/assets/AcceptCookiesCountry.json	0%	Avira URL Cloud	safe
https://survey2.lamresearch.com/apipmx/GetSurveyProperties	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
survey.sogosurvey.com	20.120.76.149	true	true	unknown
231648407.r.cdnsun.net	51.195.65.78	true	false	unknown
636016205.r.cdnsun.net	51.195.65.78	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
www.google.com	142.250.185.68	true	false	high
static.sogolytics.com	20.120.76.149	true	false	high
cdnsurvey.sogolytics.com	unknown	unknown	false	unknown
survey2.lamresearch.com	unknown	unknown	false	unknown
cdnstatic.sogolytics.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdnsurvey.sogolytics.com/survey/runtime.dd6dfe5156a9cc96.js	false	Avira URL Cloud: safe	unknown
https://survey2.lamresearch.com/survey/faviconempty.ico	true	Avira URL Cloud: safe	unknown
https://survey2.lamresearch.com/survey/assets/js/common-footer-load.js	true	Avira URL Cloud: safe	unknown
https://survey2.lamresearch.com/survey/assets/css/pm/PreviewMode.css	true	Avira URL Cloud: safe	unknown
https://survey2.lamresearch.com/k/SsQRQWURsRUSsPsPsPsWTRTXRWWP	true		unknown
https://survey2.lamresearch.com/survey/assets/css/PM/fonts/pm_icon_font.ttf?j1b9ob	true	Avira URL Cloud: safe	unknown
https://survey2.lamresearch.com/survey/styles.f238f456d9e78657.css	true	Avira URL Cloud: safe	unknown
https://survey2.lamresearch.com/survey/assets/js/Survey_jquery.ui.touch-punch.min.js?ver=13.0	true	Avira URL Cloud: safe	unknown
https://static.sogolytics.com/clients/LamResearch/escalation_qimg_22228359_1.jpg?no=902194920	true	Avira URL Cloud: safe	unknown
https://static.sogolytics.com/clients/LamResearch/scorecard.img_qimg_22228361_1.jpg?no=902194920	true	Avira URL Cloud: safe	unknown
https://cdnstatic.sogolytics.com/clients/lamresearch/escalation_qimg_22228359_1.jpg?no=804411596	false	Avira URL Cloud: safe	unknown
https://survey2.lamresearch.com/survey/assets/js/jquery-ui.min.js?ver=13.0	true	Avira URL Cloud: safe	unknown
https://survey2.lamresearch.com/apipmx/GetSurveyData	true	Avira URL Cloud: safe	unknown
https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0	false		unknown
https://cdnsurvey.sogolytics.com/survey/main.e6566a6add498115.js	false	Avira URL Cloud: safe	unknown
https://cdnsurvey.sogolytics.com/survey/polyfills.4fd5dd0566825918.js	false	Avira URL Cloud: safe	unknown
https://cdnstatic.sogolytics.com/clients/lamresearch/104.png?no=804411596	false	Avira URL Cloud: safe	unknown
https://cdnsurvey.sogolytics.com/survey/scripts.4ab290eebe328bc2.js	false	Avira URL Cloud: safe	unknown
https://cdnstatic.sogolytics.com/clients/lamresearch/scorecard.img_qimg_22228361_1.jpg?no=804411596	false	Avira URL Cloud: safe	unknown
https://survey2.lamresearch.com/survey/assets/css/jquery-ui.min.css?key=11.05.17-04-2024	true	Avira URL Cloud: safe	unknown
https://survey2.lamresearch.com/survey/styles.69500f27b321906b.css	true	Avira URL Cloud: safe	unknown
https://static.sogolytics.com/clients/LamResearch/104.png?no=463706920	true	Avira URL Cloud: safe	unknown
https://survey2.lamresearch.com/survey/assets/js/Anuglar_Survey_jquery.min.js?v=30052022	true	Avira URL Cloud: safe	unknown
https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data=	false		unknown
https://survey2.lamresearch.com/survey/assets/AcceptCookiesCountry.json	true	Avira URL Cloud: safe	unknown
https://static.sogolytics.com/clients/lamresearch/104.png?no=463706920	true		unknown
https://survey2.lamresearch.com/apipmx/GetSurveyProperties	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_100.1.dr, chromecache_101.1.dr	false	high
http://jqueryui.com	chromecache_105.1.dr, chromecache_107.1.dr, chromecache_79.1.dr	false	high
https://tagassistant.google.com/	chromecache_80.1.dr	false	high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_80.1.dr	false	high
https://cct.google/taggy/agent.js	chromecache_100.1.dr, chromecache_101.1.dr, chromecache_88.1.dr	false	high
https://www.google.com	chromecache_101.1.dr, chromecache_88.1.dr	false	high
https://www.google.com/ads/ga-audiences	chromecache_80.1.dr	false	high
https://www.google.%/ads/ga-audiences	chromecache_80.1.dr	false	high
https://td.doubleclick.net	chromecache_100.1.dr, chromecache_101.1.dr, chromecache_88.1.dr	false	high
https://www.merchant-center-analytics.goog	chromecache_100.1.dr, chromecache_101.1.dr	false	high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_100.1.dr, chromecache_101.1.dr	false	high
https://stats.g.doubleclick.net/j/collect	chromecache_80.1.dr	false	high
https://adservice.google.com/pagead/regclk?	chromecache_101.1.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
51.195.65.78	231648407.r.cdnsun.net	France	16276	OVHFR	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
20.120.76.149	survey.sogosurvey.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1633566
Start date and time:	2025-03-10 12:35:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 52s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://survey2.lamresearch.com/k/SsQRQWURsRUSsPsPsPsWTRTXRWWP
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@21/65@16/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 66.102.1.84, 142.250.186.174, 216.58.212.131, 142.250.186.46, 142.250.185.206, 142.250.185.78, 142.250.185.110, 142.250.185.163, 172.217.23.106, 142.250.185.174, 142.250.186.40, 142.250.186.170, 142.250.185.202, 142.250.186.74, 142.250.181.234, 142.250.185.234, 142.250.184.234, 172.217.16.202, 216.58.206.74, 216.58.206.42, 142.250.186.106, 142.250.184.202, 142.250.186.42, 142.250.186.138, 142.250.185.170, 172.217.16.138, 172.217.18.106, 172.217.23.110, 142.250.184.206, 172.217.16.206, 142.250.186.78, 216.58.206.78, 142.250.186.142, 142.250.185.67, 142.250.185.99, 216.58.206.46, 142.250.176.206, 74.125.7.136, 142.250.181.238, 172.217.142.167, 199.232.210.172, 20.109.210.53, 23.199.214.10, 20.190.160.67, 2.19.96.66
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, r3---sn-hp57yns7.gvt1.com, fe3cr.delivery.mp.microsoft.com, r2.sn-5uaeznld.gvt1.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, r3.sn-hp57yns7.gvt1.com, login.live.com, www.googletagmanager.com, update.googleapis.com, clients.l.google.com, r2---sn-5uaeznld.gvt1.com, www.google-analytics.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://survey2.lamresearch.com/k/SsQRQWURsRUSsPsPsPsWTRTXRWWP

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5960)
Category:	downloaded
Size (bytes):	313723
Entropy (8bit):	5.609413549753512
Encrypted:	false
SSDEEP:	6144:elYomWxk7y8e5DcBfSyPnV1oDYXRRev3H:Mdmtu8HhPj8X
MD5:	85F327A42AAF6D325A470DE1E4ED7F7A
SHA1:	368405BC013864C1F6745C7EA4EA1FAF14F17DF6
SHA-256:	A00FABBE88F3090124DD77CB95670CEA5D06B790663A61E402C867C2FC201021
SHA-512:	0FA58062229FC9214871AB8A985C3FE902CF66E1EDB9284F8C9DE3E06131168FBDF6BC0388F75672FA0E6EB01ED337DFF06042A9E92EBB5B54978A1EBCAC071A
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-0KPBD0RSS4&l=dataLayer&cx=c&gtm=45He5362v9127044029za200&tag_exp=102067808~102482433~102539968~102587591~102640600~102717422~102788824~102791784~102825837
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":6,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":6,"vtp_includeConditions":["list","sogosurvey\\.com"],"tag_id":12},{"function":"__ogt_session_timeout","priority":6,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECT

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5960)
Category:	downloaded
Size (bytes):	317945
Entropy (8bit):	5.611082317904806
Encrypted:	false
SSDEEP:	6144:elYomWxk7yyv5DcBfSyPnV1oDYXwRev3H:Mdmtuy+hPO8X
MD5:	89F62C8A0BB74ED290DB9E1802CA3F8A
SHA1:	16AE3F0F9CDCB7A004B770A93B0D565C55BC2692
SHA-256:	8A1411496313CAC2F9CC8B1E2921B2A1135A0D4579D28DC50629828E17113E26
SHA-512:	322815155BA5B3D25BC8704C8887579ED4A47CB07C088B857B2D3604CB565CFA4EFD63BA33A1C814B40D2589544DDFDA6F755E1D0779885B16107A2695263B27
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-0KPBD0RSS4&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":6,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":6,"vtp_includeConditions":["list","sogosurvey\\.com"],"tag_id":12},{"function":"__ogt_session_timeout","priority":6,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECT

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	6923
Entropy (8bit):	5.032607876820927
Encrypted:	false
SSDEEP:	96:s5yowS/GK5jQOsqYzwQOCRSOOcqh828LlMYhD:i/GKZQOsqYzwQOCRSOOcqh826lLhD
MD5:	7C9A54DE0978D73703F11B391408C7EF
SHA1:	BB5A5FE75E9D1CC2069D167454B027B514B98F30
SHA-256:	017B383E00F452F778EF486FDF245140510AB7BF85701037F236F68283A9C86B
SHA-512:	00625E0AA41E3928E71410ED637B62297C58BF105D1403563FA4FC3FC8917DCAAF0C9ED3D1E9603FD278FA6CA4FB21C79F6CCBB9C685282C435539A959D1F937
Malicious:	false
Reputation:	low
URL:	https://survey2.lamresearch.com/survey/assets/js/common-footer-load.js
Preview:	.let qStripColor = "";.let langID;.langID = langID;..function setPreviewWindow() {. $(".PreviewBGimage").removeClass("PreviewBGimage");. $(".PreviewBGWhite").removeClass("PreviewBGWhite");. let pgprev = "";. if (pgprev == "True") {. $(".warncont").css("display", "block");. } else {. if ($("#hdnPrevToastcheck").val() == 0) {. $(".warncont").css("display", "block");. }. }.}.function alertclose() {. $("#hdnPrevToastcheck").val(1);. $(".warncont").fadeOut();.}..function closeWarnCont() {. setTimeout(function () {. alertclose();. });.}..function exitsurvey() {. parent.window.close();.}.function SetMatrix() {. if (IsMatrix === "True") {. for (let obj of objectMatrix) {. if (typeof bodyOnloadHandler !== "undefined") {. bodyOnloadHandler(. obj.zTable,. obj.IsNewUiTemplate,. obj.IsMatrix,. obj.blnRtl,. obj.qpos,. obj.IsMobile,. obj.isSystemCustomDisplay,. obj.isCustomWidth,.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	5074
Entropy (8bit):	4.4397748874223755
Encrypted:	false
SSDEEP:	96:xdG5v4PMVkxyM9SLUT7Kf+9/aclLxaal9r6IHHc8+h:x8WUAJnt9n7HPC
MD5:	594C7FA31E788C18FD6BAC62D2824BAC
SHA1:	C719615E4352507E1345EF95716163A7FB015A9C
SHA-256:	4BDEB4E61FFE7D31F1F2413CF6FE0D416B93182110245D01F541AF30560088EF
SHA-512:	655861BB9BDDD277E5A6F3D1553539B5FD900C9EDE5C9D53AA7202D947A307C02804428D55A6D60E7166C75D74AF872D17D3C4CCC1ABA59E87C87C358C7F00DE
Malicious:	false
Reputation:	low
URL:	https://survey2.lamresearch.com/survey/assets/js/Survey_jquery.ui.touch-punch.min.js?ver=13.0
Preview:	/!. jQuery UI Touch Punch 0.2.3. . Copyright 2011.2014, Dave Furfero. * Dual licensed under the MIT or GPL Version 2 licenses.. . Depends:. * jquery.ui.widget.js. * jquery.ui.mouse.js. /.(function ($) {.. // Detect touch support. $.support.touch = 'ontouchend' in document;.. // Ignore browsers without touch support. if (!$.support.touch) {. return;. }.. var mouseProto = $.ui.mouse.prototype,. _mouseInit = mouseProto._mouseInit,. _mouseDestroy = mouseProto._mouseDestroy,. touchHandled;.. /. Simulate a mouse event based on a corresponding touch event. * @param {Object} event A touch event. * @param {String} simulatedType The corresponding mouse event. */. function simulateMouseEvent (event, simulatedType) {.. // Ignore multi-touch events. if (event.originalEvent.touches.length > 1) {. return;. }.. event.preventDefault();.. var touch = event.originalEvent.changedTouches[0],. simulatedEvent = document.createEven

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	6600
Entropy (8bit):	7.965248727657284
Encrypted:	false
SSDEEP:	96:Pvyt19aIdpLqIFH+sooA2fGjC6Brr/zBaKngH9SCBqqeejWukbylmIO84mezg61e:Pvq3FFH+Seb1n3nzqeejA868ag68b
MD5:	228DF65731D566BCB483BED883C41261
SHA1:	A32FBD47C2C2D40CE731C605181E1B8D376CBF91
SHA-256:	50B7E14AF676DACB29A0A2AE1FB998CD9B711126999617288FDFCA65B08FB524
SHA-512:	CA8E490E3E1C8A858D9B48CDB5ACE085C1EB76D9060409A0406F325A450CDE8577F699DAF0D28BCB74EA6FA10BD6056B3A7A5433805F58CD6BF2401210286BEC
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/font-awesome/4.6.3/css/font-awesome.min.css
Preview:	..qDT.z..!......../o..c<.;.M..(@Ti....vu..._..h.U%...8..;..n.t......J3S(............E\|EBa.p.qL.K....n..U]7~.X....../2....o...Y}.....O_...i...W].........f....W..8A...f.v..)qU......~u/...)`..m.S..\...U....._.........^.......?.3..?~...SO3........r...\....K.p..?......J.7....U7.....<^?~...o..=....q.X....x....U..?~\.]..)._b..........U.{oT.2rK.O.Y.6.pB.E.....?.....K.~.......o.. [.nI\.NY].l.o.Ov%...^z..0\|...S.`.(T.+....@.#51.,.:..+V%....).j.?...I`..2.o..<..z....n....^.u......u.....\.=otX....}._sH.......?.j7.\|8..`.....HH.F~....I..aO.......%.A.K.i2.._dz{_...(J#...B..O.EJt..+..Zg..L.n..._o7Qnv.c...~.F....aYm...jc.X^`~..s...l.XV."b..0..F.n,.;..9..o...-...b..^..wx.$..YL...M.;......m..M.DR....H.!R.....7.o...P1r....+..).2U.y.Dn....~?t..?.?..n.....7\fVzn_....>.p.....K..+(~.F.>..5~....v...._......6....\.o.t.(+...&<Q.....\`..F?}.L.'m~........F\.n?~...W/Y...n...z..yq....L....)0..'...zW....)....R.f...Z..g.^..a..2.g........6....!}....wd.%v.2.l......q...y....;.Wn.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64399)
Category:	downloaded
Size (bytes):	255079
Entropy (8bit):	5.160171787176292
Encrypted:	false
SSDEEP:	3072:MDa8LPLGI9fB8NnODpEujVHUc9koNRppuzGvStCAvuBFak8J3:2Ljv9u4VxvLo1
MD5:	9B821F9C9F34B841254F93EC14224D5A
SHA1:	A806047DEFC23B700BB6B4ED025ADEAC14C2FA5E
SHA-256:	C60AE9CBA792FECB1BC89713CE2EF28C0252BB5D37ADBEBDB2D4CF1CDE83E534
SHA-512:	D12E9386FA253991CA74B660B62128B8CD891C46B6878F35979793E74EB12CC465E27C3E42D2AAC455DA90CB29D7A9AEECFF56ABC7EB2C6C7F0AAFD10732BF52
Malicious:	false
Reputation:	low
URL:	https://survey2.lamresearch.com/survey/assets/js/jquery-ui.min.js?ver=13.0
Preview:	/! jQuery UI - v1.13.2 - 2022-07-16. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/draggable.js, widgets/droppable.js, widgets/resizable.js, widgets/selectable.js, widgets/sortable.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/selectmenu.js, widgets/slider.js, widgets/spinner.js, widgets/tabs.js, widgets/tooltip.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effe

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2506
Entropy (8bit):	5.349792056435354
Encrypted:	false
SSDEEP:	48:c3OEabupOEabwJc+uTOEabZN0xjOEa3YmN0xROEaZGJc+upOEaZNcN0xD:c3OEabqOEabwJc+uTOEabZNCOEaImNw3
MD5:	49C3326BF6CD181AA3DB78AAF2E50781
SHA1:	7772D05A86A1C817303D6BAAB8E6B560277F91DF
SHA-256:	6243FC7D83576CBBBC5318E36C7AA1F146F0857006F19B4C2E9FF3315CFEEC48
SHA-512:	E64F4B7064D389FFD8816832394EC977676CD703B90C9A4573B07BD91D926F5D36F04C62722C3C1516D29E6A3E390AF9BF2FDBB02018CBF6EA8D94853C517CCA
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Allison&family=Nothing+You+Could+Do&family=Zeyada&display=swap
Preview:	/* vietnamese /.@font-face {. font-family: 'Allison';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/allison/v11/X7nl4b88AP2nkbvZCC6a4fTg.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Allison';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/allison/v11/X7nl4b88AP2nkbvZCC-a4fTg.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Allison';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/allison/v11/X7nl4b8

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29191)
Category:	downloaded
Size (bytes):	32130
Entropy (8bit):	5.25459911913771
Encrypted:	false
SSDEEP:	384:ICwiEt79cR8lOXHc11exBMzymUz8YC6G/zDMSc7nfZBhVU:/lEtiXHceBMznUvC6G/zDMBhG
MD5:	637F462476D4D838F45ACD6E3C88998C
SHA1:	E07E1D01DCE0B8746B59688632D2B8CABEAB76C8
SHA-256:	A2DD9F032E9162AA26A988621D9A07BB8EF1B1136D7A1A7EFA4AF779025B13FC
SHA-512:	EE68283B5EC33E2670F34AD8EB3B39328A6DE8E12D3E84D6CDDFF27C6D690EDFDC3164B7310EFF8B8BF5440D3E36796A1043FA51FC16A0FC758B32ACFF70D69E
Malicious:	false
Reputation:	low
URL:	https://survey2.lamresearch.com/survey/assets/css/jquery-ui.min.css?key=11.05.17-04-2024
Preview:	/! jQuery UI - v1.13.1 - 2022-01-20. http://jqueryui.com.* Includes: core.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, draggable.css, resizable.css, progressbar.css, selectable.css, selectmenu.css, slider.css, sortable.css, spinner.css, tabs.css, tooltip.css, theme.css.* To view and modify this theme, visit http://jqueryui.com/themeroller/?bgShadowXPos=&bgOverlayXPos=&bgErrorXPos=&bgHighlightXPos=&bgContentXPos=&bgHeaderXPos=&bgActiveXPos=&bgHoverXPos=&bgDefaultXPos=&bgShadowYPos=&bgOverlayYPos=&bgErrorYPos=&bgHighlightYPos=&bgContentYPos=&bgHeaderYPos=&bgActiveYPos=&bgHoverYPos=&bgDefaultYPos=&bgShadowRepeat=&bgOverlayRepeat=&bgErrorRepeat=&bgHighlightRepeat=&bgContentRepeat=&bgHeaderRepeat=&bgActiveRepeat=&bgHoverRepeat=&bgDefaultRepeat=&iconsHover=url(%22images%2Fui-icons_555555_256x240.png%22)&iconsHighlight=url(%22images%2Fui-icons_777620_256x240.png%22)&iconsHeader=url(%22images%2Fui-icons_444444_25

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9357
Entropy (8bit):	5.395619880453061
Encrypted:	false
SSDEEP:	192:cDyDuqxQYMdG4JI9USxht1tIKt51zLvpNisoIdR6:cAI0VBhi
MD5:	909B6B4412D41CDA65C61852C289E5D5
SHA1:	7A5AD8EAD5C0EA471712DEF088691488E7597157
SHA-256:	D00045225FD979583BAD5843055AA27112965CACEDDCBE0538D4A894DCF030E7
SHA-512:	CE43741C2A51227E5E58292FFF6DFFC6CCEFA790FB828E2E955D6E41974D4D05C855BE58BF900FCD494B219E97B0E0259B56B9CA8B24E8EC81EF47DD0DD3CEFF
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Allura&family=Charmonman:wght@400;700&family=Dawning+of+a+New+Day&family=Fuggles&family=Homemade+Apple&family=Kristi&family=WindSong:wght@400;500&display=swap
Preview:	/* vietnamese /.@font-face {. font-family: 'Allura';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/allura/v21/9oRPNYsQpS4zjuA_hAgWDto.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext /.@font-face {. font-family: 'Allura';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/allura/v21/9oRPNYsQpS4zjuA_hQgWDto.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Allura';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/allura/v21/9oRPNYsQpS4zjuA

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://survey2.lamresearch.com/survey/assets/js/Anuglar_Survey_jquery.min.js?v=30052022
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	58177
Entropy (8bit):	5.49645613108788
Encrypted:	false
SSDEEP:	768:hyz6lQ1CO3s34373uyui7EGf5iHysGkGvGd0v9:U261NWK
MD5:	93866DD3CA72FFF62BDD28963B2818FF
SHA1:	487E4BB3359B5B4087BB25951DE4BED638191C13
SHA-256:	68EB9849429FF75E30F39F4B8697B85EDE58E3F6F44B75DC0A60202E45AD3B5E
SHA-512:	0B7508DB69AA6DC43BE002B14CA721F554D1F515D4C610A0679AEC7965F05FB24F64FE6629B425F7005692824A52285B8AA7288A71C346C8B8E190D0F3372B82
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Open+Sans\|Advent+Pro\|Arima+Madurai\|Arvo\|Averia+Serif+Libre\|Bad+Script\|Convergence\|Cormorant+Garamond\|Dancing+Script:700\|Dosis\|Droid+Sans\|Exo+2\|Fira+Sans\|Heebo\|Indie+Flower\|Jim+Nightshade\|Josefin+Sans\|Josefin+Slab\|Lato\|Libre+Baskerville\|Merriweather\|Montserrat\|Oswald\|Oxygen\|PT+Sans+Narrow\|Playfair+Display\|Raleway:700\|Revalia\|Roboto\|Rokkitt\|Rufina\|Shadows+Into+Light+Two\|Ubuntu\|Yanone+Kaffeesatz
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Advent Pro';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/adventpro/v28/V8mqoQfxVT4Dvddr_yOwrzaFxV7JtdQgFqXdUAQrGp_zgX5sWCpLQyN_RpAprw0.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Advent Pro';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/adventpro/v28/V8mqoQfxVT4Dvddr_yOwrzaFxV7JtdQgFqXdUAQrGp_zgX5sWCpLQyN_T5Aprw0.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek */.@font-face {. font-family: 'Advent Pro';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/adventpro/v28/V8mqoQfxVT4Dvddr_yOwrzaFxV7JtdQgFqXdUAQrGp_zgX5sWCpLQyN_SJAprw0.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+03

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 144x144, segment length 16, comment: "LEADTOOLS v22.0", baseline, precision 8, 793x126, components 3
Category:	downloaded
Size (bytes):	17438
Entropy (8bit):	7.400596759702833
Encrypted:	false
SSDEEP:	384:9vLyGNfgF5khTxJCEJJJJJJJJJJJH+4mq9+juXapXcf:9jygIFShTxJCEJJJJJJJJJJJvmq/XalK
MD5:	45F44A177C129A2898CAAD00FF248D57
SHA1:	B4B3BF1CF59BB062253299C5DA8F910684525EB1
SHA-256:	1C7C38081E302BA2E4D8B2F05531E7CD125429544E00ECDD93F91E54481BD684
SHA-512:	3CBB275941816F19FFE85BD974F64175B975DC5D84EFAA3E01E2F59590014449D28229A8A6D37F3A180DB6EF3CC76E2527B56416DCC9B9BDD2A2FA0E6640DBFD
Malicious:	false
Reputation:	low
URL:	https://static.sogolytics.com/clients/LamResearch/escalation_qimg_22228359_1.jpg?no=902194920
Preview:	......JFIF..............LEADTOOLS v22.0.....................................................................................................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.........................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................~........................?...I.t.......Y...s.1..^N.Y.....<..J...)_.......J...+..%(....W.._.)@..R......J.?....W.JP......B..R..............+..P......)_.......J...+..%(....W.._.)@..R......J.?....W.JP......B..R..............+..P......)_.......J...+..%(....W.._.)@..R......J.?....W.JP......B..R..............+..P......)_.......J...+..%(....W.._.)@..R......J.?....W.JP......B..R..............+..P..

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 144x144, segment length 16, comment: "LEADTOOLS v22.0", baseline, precision 8, 791x148, components 3
Category:	dropped
Size (bytes):	26296
Entropy (8bit):	7.614627079754238
Encrypted:	false
SSDEEP:	384:9ummmmmmmmmmm65rGgYINj7AU+eJx5nPPsXF6ZpZnXGP5UnBmHqQvkW6Za:9GogZj7xFnXyFCpxXGJPcH4
MD5:	8DEE4411943BA8C182086B0ADD10B15E
SHA1:	8478E6B2CDB6D9AA1844A5F0E5487251B4EEE5FD
SHA-256:	3515A8EF12F3957A78B5D2931B7E5C46B3A433C7D941406288CB7BB464850C72
SHA-512:	35D96C9C9269527623239231FCA55450901B6D1D7F58E178E61658BC5316387ABB03D2DF4491092F3D8A8C957EB30C3F981AC007AC10654471F62FEB7BD65AEA
Malicious:	false
Reputation:	low
Preview:	......JFIF..............LEADTOOLS v22.0.....................................................................................................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.........................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................................................................................?.........g...."....U~.l.....,...$..@...m..w......@.........:....(.........^...E...6........H..........{......`..~......."....o.....u...$P...m..........?.m..w......@.........:....(.........^...E...6........H..........{......`..~......."....o.....u...$P...m..........?.m..w......@.........:....(.........^...E...6........H..........{......`..~......."....o.....u...$P.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon
Category:	downloaded
Size (bytes):	2548
Entropy (8bit):	5.5627888919768935
Encrypted:	false
SSDEEP:	48:zvmZjO6XKWwzLZUT06dPR99A0dGvbmoF4avezWPbp2Dil:zuZjOcKWwZ16dPR99A0dGbmoFxlPV2DG
MD5:	2109F58FFDA9D9C6D3202C0811BAB8D2
SHA1:	5BFAAFF51A77D495F6EC368991D9340959C84E22
SHA-256:	83D70CB035D06528124902318B8387B0ADFDCFA7CD452AFB177B4C2FB95A977E
SHA-512:	6CB610E0F605F57EF56A6A4CF5E4F2451C25D92138134FE65BC5BC7182C862F34A357914D0B5D773F3175D987130A6EDBF8C43DEFE4D53D65C179EF4C559EEFD
Malicious:	false
Reputation:	low
URL:	https://survey2.lamresearch.com/survey/assets/css/PM/fonts/pm_icon_font.ttf?j1b9ob
Preview:	...........0OS/2...........`cmap.V........Tgasp.......p....glyf.6.....x... head..@S.......6hhea...........$hmtx...........$loca.j. ........maxp.......,... name.J.....L....post........... ...........................3...................................@.........@...@............... .................................8............. ........... ................................................79..................79..................79...............".7.E.Z._......3...3!267.3267..'!5..'!....!..........#"&'.<.5463:.1....#"&'.467......#".#"&5<.5.>.32...!.!5...h........g.............................................................P..............9.....g......g.....................................................YY.........k.....#.+.3...3'.%3'.".......%..30232>.54..#.'#.#.3.7'#.#73...k65.&6..j..P..$1.U..a3..j..PP..j@#. S.T.}.M.)L)Q.....I..An.UOG=....@o.TU.nA..YY...x.-,...............>...!754&5'"...'4&#."....!.......!........326?....;.726=.'!2675..#...............................................

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	748675
Entropy (8bit):	5.1439970787993925
Encrypted:	false
SSDEEP:	3072:xzeoCwD1MqZIeMRoTNNzLavepQao7FySTTZp:xzeoC/qGeMRoTNNzLa5aoo+Zp
MD5:	E83E9F62FDEFE25AE8675D8EE13BC9AC
SHA1:	8DA5B5D64BEDA16D1C4F71DF7EA520E07C21CE94
SHA-256:	D37279908E861E270EEFBC5BC4769159C067AD3E98A0CF3731D15B71D9BD163D
SHA-512:	1322FA1B7E66511EC08D90F75E9B63A5090D0AAF44E5249D26A9E18042BE2BD956CADEDD8681CFD05573466733C972670930BCE217B08510800401A1937958A8
Malicious:	false
Reputation:	low
URL:	https://survey2.lamresearch.com/survey/styles.f238f456d9e78657.css
Preview:	@import"https://fonts.googleapis.com/css?family=Open+Sans\|Advent+Pro\|Arima+Madurai\|Arvo\|Averia+Serif+Libre\|Bad+Script\|Convergence\|Cormorant+Garamond\|Dancing+Script:700\|Dosis\|Droid+Sans\|Exo+2\|Fira+Sans\|Heebo\|Indie+Flower\|Jim+Nightshade\|Josefin+Sans\|Josefin+Slab\|Lato\|Libre+Baskerville\|Merriweather\|Montserrat\|Oswald\|Oxygen\|PT+Sans+Narrow\|Playfair+Display\|Raleway:700\|Revalia\|Roboto\|Rokkitt\|Rufina\|Shadows+Into+Light+Two\|Ubuntu\|Yanone+Kaffeesatz";@import"https://fonts.googleapis.com/css2?family=Allura&family=Charmonman:wght@400;700&family=Dawning+of+a+New+Day&family=Fuggles&family=Homemade+Apple&family=Kristi&family=WindSong:wght@400;500&display=swap";@import"https://fonts.googleapis.com/css2?family=Allison&family=Nothing+You+Could+Do&family=Zeyada&display=swap";@import"https://fonts.googleapis.com/css2?family=Mrs+Saint+Delafield&display=swap";@font-face{font-family:SetOf11AllIcons;src:url(assets/Fonts/RatingScaleFonts/SetOf11AllIcons.eot?zamjdt);src:url(assets/Fonts/RatingScaleFonts/SetOf11

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	2233870
Entropy (8bit):	5.44624340311874
Encrypted:	false
SSDEEP:	12288:Sd86K/8NRETrXpPX+hXCJZP+ciaqCzC7GopRXvV1vSHB6e2tgVqD+f/iFydk+nZM:Sd8z/8NG9ZP3cOB2diiFOXnlTTg89U
MD5:	CBC8208A95BCB6DD186092E3653C23D5
SHA1:	931770DD4D8D775CA20CAAE5D8E756D2A8A8CA2F
SHA-256:	D2D381EF957E5AC38552FB80746A46337543B09668EE4BE9BA934C4CC0D0DC22
SHA-512:	2B5BC9D56A36880E0EB22271D00FADFAF23AE9C7F0BF9AA38C2669CA40264D7C179A8AC8E5FD623BD1194DE547B3602388852678BAFE30E5CDAC19255DFF3A65
Malicious:	false
Reputation:	low
URL:	https://cdnsurvey.sogolytics.com/survey/main.e6566a6add498115.js
Preview:	(self.webpackChunkParticipation=self.webpackChunkParticipation\|\|[]).push([[179],{997:(rt,kt,Je)=>{"use strict";function tt(i){return(tt=Object.setPrototypeOf?Object.getPrototypeOf.bind():function(e){return e.__proto__\|\|Object.getPrototypeOf(e)})(i)}function We(i,s){for(;!Object.prototype.hasOwnProperty.call(i,s)&&null!==(i=tt(i)););return i}function it(){return it="undefined"!=typeof Reflect&&Reflect.get?Reflect.get.bind():function(s,e,t){var n=We(s,e);if(n){var r=Object.getOwnPropertyDescriptor(n,e);return r.get?r.get.call(arguments.length<3?s:t):r.value}},it.apply(this,arguments)}function ut(i,s){for(var e=0;e<s.length;e++){var t=s[e];t.enumerable=t.enumerable\|\|!1,t.configurable=!0,"value"in t&&(t.writable=!0),Object.defineProperty(i,t.key,t)}}function Ce(i,s,e){return s&&ut(i.prototype,s),e&&ut(i,e),Object.defineProperty(i,"prototype",{writable:!1}),i}function ve(i,s){if(!(i instanceof s))throw new TypeError("Cannot call a class as a function")}function lt(i,s){return(lt=Object.setP

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2223
Entropy (8bit):	3.934447801997332
Encrypted:	false
SSDEEP:	24:FK5KX/IHMvj3nHvPQ1VJUpyMKnKYPwCf0HwdIiPIBHQUDUMtXnMKrw+noi6uOd8w:/XD8XL0yiM/uWvz
MD5:	2B12BA632A81B9029B0EF67A70E64C5D
SHA1:	EA576A463CFB747B75A9F8C4CAD0D37B99F257AA
SHA-256:	A830E90FF45213184F493CE842DDE908FD6D660D8D45AB5B02B605723558C78E
SHA-512:	48B02C0A52B1994762EEBFA937F0C9CB1B2B3BD0B4C550A1522B19376A8950F38924A7915E5441A586333BED231F1D2F16A946F68E4DB648F6ED14EAF249785A
Malicious:	false
Reputation:	low
URL:	https://survey2.lamresearch.com/survey/assets/AcceptCookiesCountry.json
Preview:	{. "AcceptCookiesCountryData": [. {. "Country": "Austria",. "CountryCode": "43". },. {. "Country": "Belgium",. "CountryCode": "32". },. {. "Country": "Bulgaria",. "CountryCode": "359". },. {. "Country": "Croatia",. "CountryCode": "385". },. {. "Country": "Cyprus",. "CountryCode": "357". },. {. "Country": "Czech Republic",. "CountryCode": "420". },. {. "Country": "Denmark",. "CountryCode": "45". },. {. "Country": "Estonia",. "CountryCode": "372". },. {. "Country": "Finland",. "CountryCode": "358". },. {. "Country": "France",. "CountryCode": "33". },. {. "Country": "Germany",. "CountryCode": "49". },. {. "Country": "Greece",. "CountryCode": "30". },. {. "Country": "Hungary",. "CountryCode": "36". },. {. "Country": "Ireland",. "CountryCode": "353". },. {. "Cou

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 554 x 554, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	10101
Entropy (8bit):	7.812265393301738
Encrypted:	false
SSDEEP:	192:mPBUrn2HeAZTJIwUlJKHJvrTymHx3+sR8BsJD4kyQe:m2qHeofcJKHJ5BvkwkRQe
MD5:	A1BDAC2D1886603BE695CB43D42179ED
SHA1:	498DFF967FAB9B8F8A7D6F4197CCB0B8D55CCF56
SHA-256:	76FCAAEBF88CA048698DB0C77EB459EA055BA082BD8C592867E9A5C59FA4C2AC
SHA-512:	9356FB928545C2D255125CAB3F0B88A7DA9BE6430DE0C5BA186190511AE4EA347D4F655649A8ABFBF7CC34EB61241BA176E7E4046D142564FFF9B489714DA210
Malicious:	false
Reputation:	low
URL:	https://static.sogolytics.com/clients/LamResearch/104.png?no=463706920
Preview:	.PNG........IHDR...........=.....PLTE...._..X..\..Z..V.....U.f..]...S....r.....d.X...P....s..K...n.B~.......$q.w.....L................J.........}..B..O..x....`.....m......i..@....9w.E.......J..R.........n..d..r...I... .IDATx..{..:..%.Q..-....[.2...v.9..k....n..>..... .C....J...................................................................................................................................................................................................................................................................?..V..\|u+...'\.kv..=.!....y..<..Y._.o....?&......C......2..-...6..YpM.>.....y.Z(1....~x3...5.Q.>.:C....-...9...7..../.u.s1g..0..".....u..g]OKj...........?+....{..Rp..................]T..j..l.x....O......#!.']..0Y).L....h..S.,.r-{........f.[>c.0.S...."..H...O...x\.(..sQp.V.)R...S.;R...S......T..S...p..,...N.'.....3..4%.<aR..K"..Z..g\x(....z...Y....F.%.*}H.c.X.T.O..)Ri... ..If.f?.a.T.(.~vB..<..T.(....._.R...5s.\....T. .

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.603275495278885
Encrypted:	false
SSDEEP:	3:xPVPHhrsKSrSAnZomnDOwY:xPZh4DGKWmu
MD5:	FF2CEC644407B0183A5BB685636765A3
SHA1:	F17FB29D9BE6176621AC66C123E724CF918B33A4
SHA-256:	41A6BBFD28E5C310E94AB5AC81F3D7F6841E927637150B0A305851F4536B0087
SHA-512:	65DA0EEE594AAFC30B27866157632B684CB4433BE4E92E8D6B656E3E136C8FC3E7E1C3D06622F7C8CAAFDAE1B31980B7AFE9CF04022CFBE5C3EC48D6707E7F86
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhI8CdGPNBSSh2LaEgUNFdwOpxIFDVz3MiISBQ1ebcQBEgUN-f_JFBIFDdQYz8kSBQ1jtH-tIbgB_ooFHQYH?alt=proto
Preview:	CjYKBw0V3A6nGgAKBw1c9zIiGgAKBw1ebcQBGgAKBw35/8kUGgAKBw3UGM/JGgAKBw1jtH+tGgA=

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1091)
Category:	downloaded
Size (bytes):	1144
Entropy (8bit):	5.272040128751874
Encrypted:	false
SSDEEP:	24:9EKxQ0BztgyJldTrT8Zj4yztAprE6FGMVXtJ+BG8MAM8ELNIF8:qKddNrTNE6gMVXt8c8l/zq
MD5:	F3B24CCF4F8A200F91C5EFC7F75B1DC6
SHA1:	E1718DE9A75F8EAA751DEB62183AD21507D70F5E
SHA-256:	1ABF8CFF08278FCB6EC62E043EEE2FF120C801E07F3060610CDE64521E36123C
SHA-512:	961EAC504BE4D00BFD6E02F1257BE6C2D662EA1A50C2D7F4FE21632E7B3576E94C4438C7CA32B2809B76A9E44CCAA276EE1038E8F9D4CB5DA77AF61383D1E536
Malicious:	false
Reputation:	low
URL:	https://cdnsurvey.sogolytics.com/survey/runtime.dd6dfe5156a9cc96.js
Preview:	(()=>{"use strict";var e,v={},p={};function n(e){var a=p[e];if(void 0!==a)return a.exports;var r=p[e]={exports:{}};return v[e].call(r.exports,r,r.exports,n),r.exports}n.m=v,e=[],n.O=(a,r,c,f)=>{if(!r){var u=1/0;for(t=0;t<e.length;t++){for(var[r,c,f]=e[t],s=!0,l=0;l<r.length;l++)(!1&f\|\|u>=f)&&Object.keys(n.O).every(d=>n.O[d](r[l]))?r.splice(l--,1):(s=!1,f<u&&(u=f));if(s){e.splice(t--,1);var o=c();void 0!==o&&(a=o)}}return a}f=f\|\|0;for(var t=e.length;t>0&&e[t-1][2]>f;t--)e[t]=e[t-1];e[t]=[r,c,f]},n.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return n.d(a,{a}),a},n.d=(e,a)=>{for(var r in a)n.o(a,r)&&!n.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:a[r]})},n.o=(e,a)=>Object.prototype.hasOwnProperty.call(e,a),(()=>{var e={666:0};n.O.j=c=>0===e[c];var a=(c,f)=>{var l,o,[t,u,s]=f,i=0;if(t.some(b=>0!==e[b])){for(l in u)n.o(u,l)&&(n.m[l]=u[l]);if(s)var _=s(n)}for(c&&c(f);i<t.length;i++)n.o(e,o=t[i])&&e[o]&&e[o][0](),e[o]=0;return n.O(_)},r=self.webpackChunkParticipation=self.webpackC

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18792, version 1.0
Category:	downloaded
Size (bytes):	18792
Entropy (8bit):	7.988318493447156
Encrypted:	false
SSDEEP:	384:1uQgDgNORqqmht5Yr+okuF7o3xkCwlBia3cqnBWnJRr6t7MN52rJ+F1WyQJ:k38NWqqmht27OFcBvlW3OM/Dg
MD5:	74795056A2358804684C7E9D0479F484
SHA1:	7030F4F33183B8DE843E82EEDB9CB6A6CDD107C3
SHA-256:	1C9C85D0B73B7321EB8ED22E0B6BCD577478DD5F99D1379A5D4CEA10884033AC
SHA-512:	0716739470EC0E3CE8A2AF369AD76DB7EE61AB7E3EFB4B342B2F2AEAC2CCEA47E875E4F8EC057683B3F0D21847C4A9B30F93BA5ABF961CC4CAA985CD764DD4C1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2
Preview:	wOF2......Ih..........H...........................:......$.`?STATH..L.\|........,.......6.$.... ..~..3..(.a...M'......2.z#...-...H.......S..1x...4].!2--}V. ..W.VX......~.f-z.......>)2P.j..RyM..s}.ewU...u.v.. ....n{\;.Ah2t...8.........F^.A._..{"_.x...]B.$....W..q.......E`..G....=..=I...._....y..5p.T)......Y...!..L..N.Ji)...&}.l....$...B..4i.....K..k..i?.R..?..k...^...6.f"..p\|Y..P.kE)P......=b.@!.Y..:+$....FcQ:....4.5.6.....:..$...).9.3r.M...[U..u.g...Eu..V.b.l.LF..$$. ...fi......q...).83....16.\|.. S.(S.........s.....$.....&..H.......:.k...2T....I..LP..00....r..J...^q....c.d.[ A<...I.k.pY5...:.............T.~.{u.wg.!..s...^...9q....0u..).nc..g..72.\Q.O@...7.2......3....v.v........3....ot...D......]C..;.F5.:v.1..9v.....8..3...&.u...eJB.F.....LIz.H..bU.P.T......h....r...$)....;....<B...QV..i.../.....rffj....8......2L3...P5..l.U.b...`.d.9.:..R.w..G.o.}.R..H."!.. ADJ..z .w.....k={..zY..z...e,..SL.:`......."....0.....l.!..(I.T..j.........9.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2223
Entropy (8bit):	3.934447801997332
Encrypted:	false
SSDEEP:	24:FK5KX/IHMvj3nHvPQ1VJUpyMKnKYPwCf0HwdIiPIBHQUDUMtXnMKrw+noi6uOd8w:/XD8XL0yiM/uWvz
MD5:	2B12BA632A81B9029B0EF67A70E64C5D
SHA1:	EA576A463CFB747B75A9F8C4CAD0D37B99F257AA
SHA-256:	A830E90FF45213184F493CE842DDE908FD6D660D8D45AB5B02B605723558C78E
SHA-512:	48B02C0A52B1994762EEBFA937F0C9CB1B2B3BD0B4C550A1522B19376A8950F38924A7915E5441A586333BED231F1D2F16A946F68E4DB648F6ED14EAF249785A
Malicious:	false
Reputation:	low
Preview:	{. "AcceptCookiesCountryData": [. {. "Country": "Austria",. "CountryCode": "43". },. {. "Country": "Belgium",. "CountryCode": "32". },. {. "Country": "Bulgaria",. "CountryCode": "359". },. {. "Country": "Croatia",. "CountryCode": "385". },. {. "Country": "Cyprus",. "CountryCode": "357". },. {. "Country": "Czech Republic",. "CountryCode": "420". },. {. "Country": "Denmark",. "CountryCode": "45". },. {. "Country": "Estonia",. "CountryCode": "372". },. {. "Country": "Finland",. "CountryCode": "358". },. {. "Country": "France",. "CountryCode": "33". },. {. "Country": "Germany",. "CountryCode": "49". },. {. "Country": "Greece",. "CountryCode": "30". },. {. "Country": "Hungary",. "CountryCode": "36". },. {. "Country": "Ireland",. "CountryCode": "353". },. {. "Cou

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2562)
Category:	downloaded
Size (bytes):	265892
Entropy (8bit):	5.565714493413595
Encrypted:	false
SSDEEP:	3072:tpv1S1JY7R4xGzfTnSxYTw0ApWr54FcLatyTiGxy1UHV1oDYXjDZblc4gzImVJL:PomWxGyo5Ddxy1OV1oDYXd/K
MD5:	E7EF4FEE208C5A0BB762F3DD52F1904C
SHA1:	255F6397ECFD728213A3734BC4B6D4C596AA5109
SHA-256:	6A5FBA128AB054A8F5C370CF3DD73439CB39292B81F2B087D53CB2CFA00E48B7
SHA-512:	4CE4EBC060FE11D62075052021AFC840FCCAABA678AAE60CF3C3DFF1AC8F0581A9C87F0C7954BECFEE0802125E34E1F0F32708A4D65EDF6F2F5B887DC6563C97
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-K2K9P2J
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[{"function":"__ua","metadata":["map"],"once_per_event":true,"vtp_overrideGaSettings":true,"vtp_trackType":"TRACK_PAGEVIEW","vtp_trackingId":"UA-72488792-1","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableFirebaseCampaignData":true,"vtp_enableGA4Schema":true,"tag_id":3},{"function":"__googtag","metadata":["map"],"once_per_event":true,"vtp_tagId":"G-0KPBD0RSS4","vtp_configSettin

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	194441
Entropy (8bit):	5.532599675220313
Encrypted:	false
SSDEEP:	3072:gMNShdgymnv9XpN9Suh66Rq4eiubputbybaL51B:hJ9hh24eUbjL5n
MD5:	C68739FBD87E36F4D7E1D12C03F307EF
SHA1:	503745497A333654219BE5CE539743C1062A7CFF
SHA-256:	3561163FE293B2859E660D7BB0D515AC380A95E05CFB0001BA0DF209667E94B4
SHA-512:	48F481972ED36006D11A6559AD0C428075C27864AC3F0610CDA39A910480A7187AC29925BC2C9340D01E2FBBBE622E2D574650F4E23DC8B771510AF26BEFFDD8
Malicious:	false
Reputation:	low
URL:	https://cdnsurvey.sogolytics.com/survey/polyfills.4fd5dd0566825918.js
Preview:	(self.webpackChunkParticipation=self.webpackChunkParticipation\|\|[]).push([[429],{7435:(d,P,n)=>{"use strict";n(6588),n(499),n(7398),n(4592),n(7543),n(7500),n(7030),n(1858),n(2522),n(7959),n(5484),n(7794),n(1418),n(9590),n(4100),n(6946),n(9564),n(3484),window.__zone_symbol__BLACK_LISTED_EVENTS=["mousemove"],window.disableWebkitEnterFullscreen=function(){console.log("disableWebkitEnterFullscreen is not defined. Using fallback.")},window._AutofillCallbackHandler=window._AutofillCallbackHandler\|\|function(){console.warn("_AutofillCallbackHandler is not defined. Using fallback.")},window.OpenSurveySupport=window.OpenSurveySupport\|\|function(){console.warn("_OpenSurveySupport is not defined. Using fallback.")}},9564:()=>{"document"in self&&(!("classList"in document.createElement("_"))\|\|document.createElementNS&&!("classList"in document.createElementNS("http://www.w3.org/2000/svg","g"))?function(d){"use strict";if("Element"in d){var P="classList",n="prototype",f=d.Element[n],h=Object,y=String[n

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 144x144, segment length 16, comment: "LEADTOOLS v22.0", baseline, precision 8, 793x126, components 3
Category:	dropped
Size (bytes):	17438
Entropy (8bit):	7.400596759702833
Encrypted:	false
SSDEEP:	384:9vLyGNfgF5khTxJCEJJJJJJJJJJJH+4mq9+juXapXcf:9jygIFShTxJCEJJJJJJJJJJJvmq/XalK
MD5:	45F44A177C129A2898CAAD00FF248D57
SHA1:	B4B3BF1CF59BB062253299C5DA8F910684525EB1
SHA-256:	1C7C38081E302BA2E4D8B2F05531E7CD125429544E00ECDD93F91E54481BD684
SHA-512:	3CBB275941816F19FFE85BD974F64175B975DC5D84EFAA3E01E2F59590014449D28229A8A6D37F3A180DB6EF3CC76E2527B56416DCC9B9BDD2A2FA0E6640DBFD
Malicious:	false
Reputation:	low
Preview:	......JFIF..............LEADTOOLS v22.0.....................................................................................................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.........................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................~........................?...I.t.......Y...s.1..^N.Y.....<..J...)_.......J...+..%(....W.._.)@..R......J.?....W.JP......B..R..............+..P......)_.......J...+..%(....W.._.)@..R......J.?....W.JP......B..R..............+..P......)_.......J...+..%(....W.._.)@..R......J.?....W.JP......B..R..............+..P......)_.......J...+..%(....W.._.)@..R......J.?....W.JP......B..R..............+..P..

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 144x144, segment length 16, comment: "LEADTOOLS v22.0", baseline, precision 8, 791x148, components 3
Category:	downloaded
Size (bytes):	26296
Entropy (8bit):	7.614627079754238
Encrypted:	false
SSDEEP:	384:9ummmmmmmmmmm65rGgYINj7AU+eJx5nPPsXF6ZpZnXGP5UnBmHqQvkW6Za:9GogZj7xFnXyFCpxXGJPcH4
MD5:	8DEE4411943BA8C182086B0ADD10B15E
SHA1:	8478E6B2CDB6D9AA1844A5F0E5487251B4EEE5FD
SHA-256:	3515A8EF12F3957A78B5D2931B7E5C46B3A433C7D941406288CB7BB464850C72
SHA-512:	35D96C9C9269527623239231FCA55450901B6D1D7F58E178E61658BC5316387ABB03D2DF4491092F3D8A8C957EB30C3F981AC007AC10654471F62FEB7BD65AEA
Malicious:	false
Reputation:	low
URL:	https://static.sogolytics.com/clients/LamResearch/scorecard.img_qimg_22228361_1.jpg?no=902194920
Preview:	......JFIF..............LEADTOOLS v22.0.....................................................................................................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.........................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.......................................................................................................?.........g...."....U~.l.....,...$..@...m..w......@.........:....(.........^...E...6........H..........{......`..~......."....o.....u...$P...m..........?.m..w......@.........:....(.........^...E...6........H..........{......`..~......."....o.....u...$P...m..........?.m..w......@.........:....(.........^...E...6........H..........{......`..~......."....o.....u...$P.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	0.353869417677362
Encrypted:	false
SSDEEP:	3:k1llvlNl/kr/L/555555555555555n:DD555555555555555n
MD5:	2EFDAA01275F6C59DF686EC2994693B0
SHA1:	C8758EDAD4917AD09E34637D96FF39250931F4BA
SHA-256:	8367824BBDAEC70982A8A1AF867B3BCE7CF7A9DD45A2137B4CBD58626BCA6578
SHA-512:	A283674DE10AE649668BEB92BF06DF1FC52C7ECEC4AE29149CB422C4A31F6789FF747DCBCC0903FAEF174A20648A7C84E301CAEEA91B05B74DBCA1AEB0B2F006
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20612, version 1.0
Category:	downloaded
Size (bytes):	20612
Entropy (8bit):	7.987601598791172
Encrypted:	false
SSDEEP:	384:k5Eu+yl5Y9RpwjjmD/8Qu+POP9w+oB7rezldH9W4EMs8qCr9WvS80M8T4PTEXPFw:YEu+/Jw3FF+WP9DC/ez79jcCrb8BK4Eq
MD5:	B07DA7AA3E4F363C5CDBC11312239E8C
SHA1:	47BF5B2F24EA4A4CAAFCCC89B9D2A6677EF9E3B8
SHA-256:	E44C11F4834BDD4D6B6DA7B8EE5EAEBC8ACB41250CD6BCE5CC82EA8262140EAA
SHA-512:	420729406B315D8AF34B62B78F39E763F5CF33CBF94467457B393FDE0573DD7FFC6A23F25680988F9B82A4A3B719876FF76F3E1DB047CE82615F544FC3A82532
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v47/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2
Preview:	wOF2......P........P..P..............................6..t.`?STAT^..B..~........`..i..X..6.$..,. ..x. ..N.F.%...q.6...@n.%.....BYG......7...G.....8...l'D&.0..9.....%.d.p..f-.2JE."I...N.`.....M.R.....9...6iO.^.....<.3.>.....qQ9..f...+4.L...2z..i......6..m....Qs.%.l....7.I:&..$b..4R.5....h..Y5.<...........,..X....q.6...7b.8GTO F.Eb.....].!@.:.4..$...5.Fu.2R.i.0w.....6m.c...NTd...-.@.......FMs.&...6.]..1.k]...n.......`.\|..(fO.hKE$/s!...~....e..UM..Zr....r.C..&J......S@..../.rH..a..h..<..?...1.v....y..+d1.:1...U....$...Vd....L......:.=...l.U.y..M..)..A.J.x/O.q....t...[{..Y.=.D...WU.P.j.2I.d........o.._-yZ^..ul-z.0H.....g.A.......R.e..dyA..${H.8.....9".=.e<`....BN9Nv7;. .....P5...4..-cL.1-.&..Z.h..W-`.w...eG....X.X..Xju...\.BV....jNU....<\|-...r.!Y.d....O....2..ovP....B2H....N(.>t...:IJ.;..r....p'...!..{dt,.8..J.._.;.[.....L...P..B.,F....k._c......(qg.....c.Gq........\|Z.V.5.=....X.....2\|.>...7D&..+...bH.<H.\|H.BH..H.rH.jH.zH...!Ga......(&."K5......`c

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	404709
Entropy (8bit):	5.28182900445026
Encrypted:	false
SSDEEP:	3072:VvtL/oq/CWd9XUwtrQ3xQW2iIe0xqcgT46YD+WrUqlDb3iadzKc/7ESteQLl+NJt:roEzXm3FD8Uq9iMDV7Ll+z/rR
MD5:	0422A00C251220481815AE09577CAF45
SHA1:	01F898624D4C0561C980C55F383676F09974D374
SHA-256:	D1671B4D16F122AEA85FFD96BE7F0FC240183BD25E29D79226D811D62DD5DEBF
SHA-512:	7393C3F745C4AAA090713B5639046CB3E334B7C52F3318D5F4C707817FA07B3A86FBD44AA12BA465FE4A307AD4A37B8A56E4D946D2FA866C4D851C44C6E840F8
Malicious:	false
Reputation:	low
URL:	https://cdnsurvey.sogolytics.com/survey/scripts.4ab290eebe328bc2.js
Preview:	!function(n,ht){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=n.document?ht(n,!0):function(Be){if(!Be.document)throw new Error("jQuery requires a window with a document");return ht(Be)}:ht(n)}("undefined"!=typeof window?window:this,function(n,ht){"use strict";var Be=[],_i=Object.getPrototypeOf,Ke=Be.slice,wt=Be.flat?function(o){return Be.flat.call(o)}:function(o){return Be.concat.apply([],o)},K=Be.push,Z=Be.indexOf,ae={},Ie=ae.toString,At=ae.hasOwnProperty,yi=At.toString,Wt=yi.call(Object),ue={},me=function(o){return"function"==typeof o&&"number"!=typeof o.nodeType&&"function"!=typeof o.item},Te=function(o){return null!=o&&o===o.window},Q=n.document,Si={type:!0,src:!0,nonce:!0,noModule:!0};function ai(o,l,c){var u,p,m=(c=c\|\|Q).createElement("script");if(m.text=o,l)for(u in Si)(p=l[u]\|\|l.getAttribute&&l.getAttribute(u))&&m.setAttribute(u,p);c.head.appendChild(m).parentNode.removeChild(m)}function Bt(o){return null==o?o+"":"object"==typeof o\|\|"funct

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	914
Entropy (8bit):	5.442480499140089
Encrypted:	false
SSDEEP:	24:37mOY7aU6tJc+u/r7mOY7aULkwy96cGSSf7:rmOEaUMJc+u/mOEaULkN0xD
MD5:	B25D33DDFDC66C4D4C1593547F14B45E
SHA1:	4F9B80163BA9625D5562F5FFE3F7F1D4E0A4D6E3
SHA-256:	31087317DB63A0422534CC75063E5A5A807983F4A5338E35D4F2C421B4F03E63
SHA-512:	83B385B41506368779CB4CDDED920EFD16E4E4B8A5F94BA1D75AD87906E974795103B6B262B4E3D7E9A8CDDCD760E9AB2A822DCD35BC8012442E3CB274EBC200
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Mrs+Saint+Delafield&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Mrs Saint Delafield';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/mrssaintdelafield/v13/v6-IGZDIOVXH9xtmTZfRagunqBw5WC62QKcnL_ub.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin */.@font-face {. font-family: 'Mrs Saint Delafield';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/mrssaintdelafield/v13/v6-IGZDIOVXH9xtmTZfRagunqBw5WC62QKknLw.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (451)
Category:	downloaded
Size (bytes):	26064
Entropy (8bit):	5.051280203865009
Encrypted:	false
SSDEEP:	768:FwFGFnucDNFmPtq5AFkFiFOpFiYMCWK17:SFGnJ8Ptq5A+keoK17
MD5:	7A14042A3527BAA76B6E6A638171DB45
SHA1:	76FEC66C657D7E3AC09B815B32FA0B0F1DFDD7A9
SHA-256:	5C273E6E8926F5483CBC84E026A1B10339B845499E424DE3A5845E452E92D295
SHA-512:	FAE18B944CAD6E596E838BB06EA77685B739495B10D7BB7C9D74B85E4E680B269817C92330E09E44CBB733472EA64C067800BE133D2C195E7B1B05B83A370869
Malicious:	false
Reputation:	low
URL:	https://survey2.lamresearch.com/survey/assets/css/pm/PreviewMode.css
Preview:	@import url("https://fonts.googleapis.com/css?family=Open+Sans\|Advent+Pro\|Arima+Madurai\|Arvo\|Averia+Serif+Libre\|Bad+Script\|Convergence\|Cormorant+Garamond\|Dancing+Script:700\|Dosis\|Droid+Sans\|Exo+2\|Fira+Sans\|Heebo\|Indie+Flower\|Jim+Nightshade\|Josefin+Sans\|Josefin+Slab\|Lato\|Libre+Baskerville\|Merriweather\|Montserrat\|Oswald\|Oxygen\|PT+Sans+Narrow\|Playfair+Display\|Raleway:700\|Revalia\|Roboto\|Rokkitt\|Rufina\|Shadows+Into+Light+Two\|Ubuntu\|Yanone+Kaffeesatz");..@font-face {. font-family: "info-icon";. src: url("fonts/info-icon.eot?vcdy7z");. src:. url("fonts/info-icon.eot?vcdy7z#iefix") format("embedded-opentype"),. url("fonts/info-icon.ttf?vcdy7z") format("truetype"),. url("fonts/info-icon.woff?vcdy7z") format("woff"),. url("fonts/info-icon.svg?vcdy7z#mobile_fonts") format("svg");. font-weight: normal;. font-style: normal;.}..@font-face {. font-family: "Proxima N W01 Reg";. src: url("../fonts/ProximaNova-Regular.eot");. src:. url("../fonts/ProximaNova-Regular.eot") format("e

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 554 x 554, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	10101
Entropy (8bit):	7.812265393301738
Encrypted:	false
SSDEEP:	192:mPBUrn2HeAZTJIwUlJKHJvrTymHx3+sR8BsJD4kyQe:m2qHeofcJKHJ5BvkwkRQe
MD5:	A1BDAC2D1886603BE695CB43D42179ED
SHA1:	498DFF967FAB9B8F8A7D6F4197CCB0B8D55CCF56
SHA-256:	76FCAAEBF88CA048698DB0C77EB459EA055BA082BD8C592867E9A5C59FA4C2AC
SHA-512:	9356FB928545C2D255125CAB3F0B88A7DA9BE6430DE0C5BA186190511AE4EA347D4F655649A8ABFBF7CC34EB61241BA176E7E4046D142564FFF9B489714DA210
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...........=.....PLTE...._..X..\..Z..V.....U.f..]...S....r.....d.X...P....s..K...n.B~.......$q.w.....L................J.........}..B..O..x....`.....m......i..@....9w.E.......J..R.........n..d..r...I... .IDATx..{..:..%.Q..-....[.2...v.9..k....n..>..... .C....J...................................................................................................................................................................................................................................................................?..V..\|u+...'\.kv..=.!....y..<..Y._.o....?&......C......2..-...6..YpM.>.....y.Z(1....~x3...5.Q.>.:C....-...9...7..../.u.s1g..0..".....u..g]OKj...........?+....{..Rp..................]T..j..l.x....O......#!.']..0Y).L....h..S.,.r-{........f.[>c.0.S...."..H...O...x\.(..sQp.V.)R...S.;R...S......T..S...p..,...N.'.....3..4%.<aR..K"..Z..g\x(....z...Y....F.%.*}H.c.X.T.O..)Ri... ..If.f?.a.T.(.~vB..<..T.(....._.R...5s.\....T. .

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18668, version 1.0
Category:	downloaded
Size (bytes):	18668
Entropy (8bit):	7.988119248989337
Encrypted:	false
SSDEEP:	384:1stcBfAVaR8i6XzMsb4fcjakBudFyBqrgeU0hipgwfqj09nOt/a:1k0F6Xz1bFjaPbyBqr9hIgkM3Fa
MD5:	8655D20BBCC8CDBFAB17B6BE6CF55DF3
SHA1:	90EDBFA9A7DABB185487B4774076F82EB6412270
SHA-256:	E7AF9D60D875EB1C1B1037BBBFDEC41FCB096D0EBCF98A48717AD8B07906CED6
SHA-512:	47308DE25BD7E4CA27F59A2AE681BA64393FE4070E730C1F00C4053BAC956A9B4F7C0763C04145BC50A5F91C12A0BF80BDD4B03EECC2036CD56B2DB31494CBAF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
Preview:	wOF2......H...........H..........................\|.....h.`?STAT^..0..\|...........+..2..6.$..`. ..x........z'o..w;....6.E....6....E...'$H.#.....n1X..JU/.d.O..JC.'J".v.v.l.h.....u.S...SY.....B.hz.o.}......W......%m6...A..=....\..m. .]..~.[..........]...I..h.=.....6.xt..F....Lt...Qs-.7..{...~BI.".F.Q......F...P..dMw..#I2........Rq.Q&.0@.;..;...3VG..:c.nki..-Q..2##e.u...8n....\?....T..b....^..#...../.J\|OM..St....e.S.}!.....>..i.T/a.ES%.W.P3..`..a.R.A.....!~g..74.np8o.....d[6?.P.4)P.....AG.3.......;#0.y....M..O/2.@.4..N.vA$.:M&H,.AT".........@..a.~..L->...0@h...~.._..N"......t......C./g7..............2E.N.J...TW.F..."A.B...n.......i.?.{\.L.!.B..x...S..!........?.\,... .@.....y"xw.A8.w..!E..-^P O..+.T.r.R.zz..K..].E.....Ri.)g.P...j..w..c.M.F.v../........Q....'...(....X..;.K.!BZ3.........f.....N.A(....cA`.b'...`.~sa^.....?..../.L.S......t..`@h..C.....>N.W...;>..._h.+~=\|......uOGA{.7.....h....q.d.4$.x<.....^0\|...@....@Q[RC.0....b....'...RID

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	0.353869417677362
Encrypted:	false
SSDEEP:	3:k1llvlNl/kr/L/555555555555555n:DD555555555555555n
MD5:	2EFDAA01275F6C59DF686EC2994693B0
SHA1:	C8758EDAD4917AD09E34637D96FF39250931F4BA
SHA-256:	8367824BBDAEC70982A8A1AF867B3BCE7CF7A9DD45A2137B4CBD58626BCA6578
SHA-512:	A283674DE10AE649668BEB92BF06DF1FC52C7ECEC4AE29149CB422C4A31F6789FF747DCBCC0903FAEF174A20648A7C84E301CAEEA91B05B74DBCA1AEB0B2F006
Malicious:	false
Reputation:	low
URL:	https://survey2.lamresearch.com/survey/faviconempty.ico
Preview:	............ .h.......(....... ..... ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-03-10T12:36:20.330869+0100	2812307	ETPRO MALWARE Sefnit CnC Beacon 2	1	192.168.2.16	49759	20.120.76.149	443	TCP
2025-03-10T12:36:20.506745+0100	2812307	ETPRO MALWARE Sefnit CnC Beacon 2	1	192.168.2.16	49761	20.120.76.149	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 10, 2025 12:35:51.836277962 CET	49706	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:51.836348057 CET	443	49706	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:51.836527109 CET	49707	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:51.836569071 CET	443	49707	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:51.836590052 CET	49706	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:51.836623907 CET	49707	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:51.836971998 CET	49706	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:51.836986065 CET	443	49706	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:51.837325096 CET	49707	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:51.837340117 CET	443	49707	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:52.584347963 CET	49671	443	192.168.2.16	204.79.197.203
Mar 10, 2025 12:35:52.886907101 CET	49671	443	192.168.2.16	204.79.197.203
Mar 10, 2025 12:35:53.489892006 CET	49671	443	192.168.2.16	204.79.197.203
Mar 10, 2025 12:35:53.703340054 CET	443	49706	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:53.703664064 CET	49706	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:53.703680992 CET	443	49706	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:53.704817057 CET	443	49706	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:53.704876900 CET	49706	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:53.704932928 CET	443	49707	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:53.705568075 CET	49707	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:53.705581903 CET	443	49707	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:53.706047058 CET	49706	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:53.706120014 CET	443	49706	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:53.706367016 CET	49706	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:53.706377029 CET	443	49706	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:53.706917048 CET	443	49707	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:53.706981897 CET	49707	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:53.707889080 CET	49707	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:53.708005905 CET	443	49707	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:53.760854959 CET	49706	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:53.760922909 CET	49707	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:53.760937929 CET	443	49707	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:53.809871912 CET	49707	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:54.703959942 CET	49671	443	192.168.2.16	204.79.197.203
Mar 10, 2025 12:35:55.161819935 CET	443	49706	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:55.161839962 CET	443	49706	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:55.162218094 CET	443	49706	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:55.162329912 CET	49706	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:55.162329912 CET	49706	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:55.164180040 CET	49706	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:55.164199114 CET	443	49706	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:55.168853998 CET	49707	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:55.168965101 CET	443	49707	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:55.169194937 CET	49707	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:55.174864054 CET	49709	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:55.174897909 CET	443	49709	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:55.175343990 CET	49709	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:55.175343990 CET	49709	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:55.175379038 CET	443	49709	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:55.527475119 CET	49712	443	192.168.2.16	142.250.185.68
Mar 10, 2025 12:35:55.527518988 CET	443	49712	142.250.185.68	192.168.2.16
Mar 10, 2025 12:35:55.527573109 CET	49712	443	192.168.2.16	142.250.185.68
Mar 10, 2025 12:35:55.528587103 CET	49712	443	192.168.2.16	142.250.185.68
Mar 10, 2025 12:35:55.528599024 CET	443	49712	142.250.185.68	192.168.2.16
Mar 10, 2025 12:35:56.977097034 CET	443	49709	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:56.977379084 CET	49709	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:56.977391958 CET	443	49709	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:56.978432894 CET	443	49709	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:56.978497028 CET	49709	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:56.979590893 CET	49709	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:56.979660988 CET	443	49709	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:56.979832888 CET	49709	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:56.979840040 CET	443	49709	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.022996902 CET	49709	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.118944883 CET	49671	443	192.168.2.16	204.79.197.203
Mar 10, 2025 12:35:57.487649918 CET	443	49709	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.487682104 CET	443	49709	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.487692118 CET	443	49709	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.487711906 CET	443	49709	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.487742901 CET	443	49709	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.487838984 CET	49709	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.487838984 CET	49709	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.487858057 CET	443	49709	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.488868952 CET	49709	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.495233059 CET	443	49712	142.250.185.68	192.168.2.16
Mar 10, 2025 12:35:57.495522022 CET	49712	443	192.168.2.16	142.250.185.68
Mar 10, 2025 12:35:57.495538950 CET	443	49712	142.250.185.68	192.168.2.16
Mar 10, 2025 12:35:57.496620893 CET	443	49712	142.250.185.68	192.168.2.16
Mar 10, 2025 12:35:57.496705055 CET	49712	443	192.168.2.16	142.250.185.68
Mar 10, 2025 12:35:57.502798080 CET	49715	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.502851963 CET	443	49715	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.502937078 CET	49715	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.503298044 CET	49715	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.503315926 CET	443	49715	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.524738073 CET	49712	443	192.168.2.16	142.250.185.68
Mar 10, 2025 12:35:57.524960995 CET	443	49712	142.250.185.68	192.168.2.16
Mar 10, 2025 12:35:57.527045012 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.527096033 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.527180910 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.527323008 CET	49717	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.527375937 CET	443	49717	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.527429104 CET	49717	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.528008938 CET	49718	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.528048992 CET	443	49718	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.528090000 CET	49718	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.528229952 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.528269053 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.528321028 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.528995991 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.529010057 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.529262066 CET	49717	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.529284954 CET	443	49717	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.529517889 CET	49718	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.529539108 CET	443	49718	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.529820919 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.529841900 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.537128925 CET	49721	443	192.168.2.16	104.18.11.207
Mar 10, 2025 12:35:57.537157059 CET	443	49721	104.18.11.207	192.168.2.16
Mar 10, 2025 12:35:57.537496090 CET	49721	443	192.168.2.16	104.18.11.207
Mar 10, 2025 12:35:57.537527084 CET	49721	443	192.168.2.16	104.18.11.207
Mar 10, 2025 12:35:57.537543058 CET	443	49721	104.18.11.207	192.168.2.16
Mar 10, 2025 12:35:57.545994043 CET	443	49709	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.546005964 CET	443	49709	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.546039104 CET	443	49709	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.546098948 CET	49709	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.546109915 CET	443	49709	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.546298027 CET	49709	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.546298027 CET	49709	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.548264980 CET	49722	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.548301935 CET	443	49722	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.548367977 CET	49722	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.550049067 CET	49722	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.550060987 CET	443	49722	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:57.566890955 CET	49712	443	192.168.2.16	142.250.185.68
Mar 10, 2025 12:35:57.566931009 CET	443	49712	142.250.185.68	192.168.2.16
Mar 10, 2025 12:35:57.599309921 CET	49724	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:57.599342108 CET	443	49724	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:57.599421024 CET	49724	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:57.600374937 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:57.600435019 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:57.600524902 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:57.600622892 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:57.600658894 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:57.600711107 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:57.601115942 CET	49724	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:57.601129055 CET	443	49724	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:57.601551056 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:57.601568937 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:57.601963043 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:57.601975918 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:57.614919901 CET	49712	443	192.168.2.16	142.250.185.68
Mar 10, 2025 12:35:57.854001045 CET	49709	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:57.854031086 CET	443	49709	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.259804010 CET	443	49715	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.260169983 CET	49715	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.260196924 CET	443	49715	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.260554075 CET	443	49715	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.260957956 CET	49715	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.261013985 CET	443	49715	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.261073112 CET	49715	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.308332920 CET	443	49715	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.339957952 CET	443	49717	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.340286016 CET	49717	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.340321064 CET	443	49717	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.341414928 CET	443	49717	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.341506958 CET	49717	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.341895103 CET	49717	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.341962099 CET	443	49717	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.342052937 CET	49717	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.342066050 CET	443	49717	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.364713907 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.365011930 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.365031004 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.366106033 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.366183996 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.366879940 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.366950035 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.367188931 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.367196083 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.394918919 CET	49717	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.396565914 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.396851063 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.396867990 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.397224903 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.397563934 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.397623062 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.397754908 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.410906076 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.431222916 CET	443	49722	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.431899071 CET	49722	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.431920052 CET	443	49722	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.433007956 CET	443	49722	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.433089018 CET	49722	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.433557034 CET	49722	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.433624029 CET	443	49722	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.433840990 CET	49722	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.444366932 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.449862003 CET	443	49718	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.450342894 CET	49718	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.450370073 CET	443	49718	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.451567888 CET	443	49718	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.451641083 CET	49718	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.452131033 CET	49718	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.452215910 CET	443	49718	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.452337980 CET	49718	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.452343941 CET	443	49718	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.474944115 CET	49722	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.474961042 CET	443	49722	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.506932020 CET	49718	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.522952080 CET	49722	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.672195911 CET	443	49724	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:59.672482014 CET	49724	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:59.672501087 CET	443	49724	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:59.673789978 CET	443	49724	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:59.673904896 CET	49724	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:59.674854040 CET	49724	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:59.674983025 CET	443	49724	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:59.675241947 CET	49724	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:59.675251007 CET	443	49724	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:59.728964090 CET	49724	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:59.765762091 CET	443	49715	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.765791893 CET	443	49715	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.765809059 CET	443	49715	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.765937090 CET	49715	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.765952110 CET	443	49715	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.766004086 CET	49715	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.766971111 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:59.767250061 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:59.767257929 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:59.767867088 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:59.768188953 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:59.768199921 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:59.768342018 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:59.768428087 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:59.768877983 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:59.768924952 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:59.769067049 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:59.769073009 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:59.769237041 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:59.769299030 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:59.772878885 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:59.772878885 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:59.772931099 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:59.809041023 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:59.824881077 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:59.824892998 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:35:59.841460943 CET	443	49715	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.841521025 CET	443	49715	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.841558933 CET	443	49715	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.841597080 CET	49715	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.841651917 CET	49715	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.842405081 CET	49715	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.842422009 CET	443	49715	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.850590944 CET	443	49717	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.850615978 CET	443	49717	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.850622892 CET	443	49717	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.850635052 CET	443	49717	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.850656986 CET	443	49717	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.850663900 CET	443	49717	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.850703001 CET	49717	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.850739956 CET	443	49717	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.850760937 CET	49717	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.850790977 CET	49717	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.870932102 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:35:59.881664991 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.881691933 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.881700993 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.881714106 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.881752968 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.881778955 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.881792068 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.881815910 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.881835938 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.913785934 CET	443	49717	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.913820982 CET	443	49717	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.913887024 CET	443	49717	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.913923025 CET	49717	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.913960934 CET	49717	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.914366961 CET	49717	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.914388895 CET	443	49717	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.957263947 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.957289934 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.957305908 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.957395077 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.957412958 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.957482100 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.958245039 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.958264112 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.958343029 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.958363056 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.958406925 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.985213041 CET	443	49722	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.985239029 CET	443	49722	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.985265970 CET	443	49722	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.985287905 CET	49722	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.985306025 CET	443	49722	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.985323906 CET	443	49722	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.985327005 CET	49722	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.985368967 CET	49722	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.986229897 CET	49722	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.986244917 CET	443	49722	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.988632917 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.988651991 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.988725901 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:35:59.988739014 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:35:59.988780022 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.000786066 CET	443	49718	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.000809908 CET	443	49718	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.000817060 CET	443	49718	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.000883102 CET	443	49718	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.000916004 CET	49718	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.000945091 CET	49718	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.001981974 CET	49718	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.002002001 CET	443	49718	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.020925999 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.020958900 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.021080017 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.021107912 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.021262884 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.043880939 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.043916941 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.044013977 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.044027090 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.044187069 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.061140060 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.061166048 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.061331987 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.061347008 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.061394930 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.067677975 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.067697048 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.067780972 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.067790031 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.067842960 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.075686932 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.075766087 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.075777054 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.075812101 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.075961113 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.075977087 CET	443	49719	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.075989962 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.076020956 CET	49719	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.099359035 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.099387884 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.099433899 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.099450111 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.099487066 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.099505901 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.120512962 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.120531082 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.120580912 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.120596886 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.120621920 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.120641947 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.140913963 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.140930891 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.141120911 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.141139030 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.141181946 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.161377907 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.161396980 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.161485910 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.161505938 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.161555052 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.191406965 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.191436052 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.191543102 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.191562891 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.191708088 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.197654963 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.197674990 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.197757959 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.197773933 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.197818041 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.208751917 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.208775043 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.208858967 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.208877087 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.208950043 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.220701933 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.220722914 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.220818043 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.220844030 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.220906973 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.230700016 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.230726004 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.230771065 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.230782032 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.230849028 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.230871916 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.241561890 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.241581917 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.241694927 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.241708040 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.241751909 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.251821041 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.251837969 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.251939058 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.251950979 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.251991987 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.259833097 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.259852886 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.259922028 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.259938955 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.259979963 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.265866041 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.265902042 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.265930891 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.265938044 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.265949011 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.266010046 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.266010046 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.266259909 CET	49716	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:00.266274929 CET	443	49716	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:00.359574080 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.359599113 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.359606981 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.359621048 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.359647989 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.359709024 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.359709024 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.359719992 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.359919071 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.359949112 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.359956980 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.359966993 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.359981060 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.359992981 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.359997988 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.360027075 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.360061884 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.360061884 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.360061884 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.360879898 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.438941956 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.438970089 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.439064026 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.439064026 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.439079046 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.439785004 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.439815998 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.439925909 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.439925909 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.439948082 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.440890074 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.440891981 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.479202986 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.479228020 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.479320049 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.479329109 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.479367971 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.480420113 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.480442047 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.480503082 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.480513096 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.480560064 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.504858971 CET	443	49724	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.504966021 CET	443	49724	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.505173922 CET	49724	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.505688906 CET	49724	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.505708933 CET	443	49724	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.527271986 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.527287960 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.527348995 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.527363062 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.527399063 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.527414083 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.527806997 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.527829885 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.527904034 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.527916908 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.527976990 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.527987003 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.547816038 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.547842979 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.547929049 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.547955036 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.548024893 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.548191071 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.548213005 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.548254013 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.548260927 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.548295975 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.548315048 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.568674088 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.568706036 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.568778038 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.568799019 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.568842888 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.568871975 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.572606087 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.572633028 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.572683096 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.572693110 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.572730064 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.572743893 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.645886898 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.645912886 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.646006107 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.646015882 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.646245003 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.650489092 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.650521994 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.650587082 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.650604010 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.650620937 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.650648117 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.759569883 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.759592056 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.759656906 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.759670019 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.759732962 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.802865982 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.802891970 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.802953005 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:00.802963972 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:00.803015947 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.019308090 CET	49679	443	192.168.2.16	52.182.143.211
Mar 10, 2025 12:36:01.079879045 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.079894066 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.079953909 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.079998970 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.080010891 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.080080032 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.238405943 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.238420963 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.238464117 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.238507986 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.238533020 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.238581896 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.238603115 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.333899975 CET	49679	443	192.168.2.16	52.182.143.211
Mar 10, 2025 12:36:01.455002069 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.455013037 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.455060959 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.455100060 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.455110073 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.455158949 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.455171108 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.468040943 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.468056917 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.468094110 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.468147039 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.468164921 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.468193054 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.468209982 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.480592966 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.480616093 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.480693102 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.480705023 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.480772972 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.486463070 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.486494064 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.486587048 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.486605883 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.486706972 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.492677927 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.492731094 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.492768049 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.492775917 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.492867947 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.493294954 CET	49725	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.493309975 CET	443	49725	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.506932974 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.506957054 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.507013083 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.507028103 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.507055998 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.507081985 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.526026011 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.526046991 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.526148081 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.526164055 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.526781082 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.541426897 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.541448116 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.541532993 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.541548014 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.543806076 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.554435968 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.554456949 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.554519892 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.554534912 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.554580927 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.554598093 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.571413994 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.571443081 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.571511030 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.571521997 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.571547031 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.571568966 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.592655897 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.592675924 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.592736959 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.592756033 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.592797041 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.602332115 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.602349997 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.602463007 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.602478027 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.602560043 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.619565010 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.619585991 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.619698048 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.619710922 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.620954037 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.641948938 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.641971111 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.642067909 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.642087936 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.644979954 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.649655104 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.649678946 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.649764061 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.649775982 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.650554895 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.690305948 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.690335989 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.690396070 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.690409899 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.690439939 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.690460920 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.690771103 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.690793991 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.690840960 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.690846920 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.690885067 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.690901041 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.702603102 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.702625036 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.702850103 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.702850103 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.702864885 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.702928066 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.708199024 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.708214045 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.708283901 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.708296061 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.708997965 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.732249975 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.732270002 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.732362032 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.732378006 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.732954979 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.740055084 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.740072012 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.740144968 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.740159035 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.740932941 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.771781921 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.771805048 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.771898985 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.771914959 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.772952080 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.776149988 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.776165962 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.776251078 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.776262999 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.776963949 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.783668995 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.783685923 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.783759117 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.783770084 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.784944057 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.786185980 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.786201954 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.786329031 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.786336899 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.789015055 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.819729090 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.819753885 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.819829941 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.819847107 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.820938110 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.824913979 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.824929953 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.824995995 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.825009108 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.828927994 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.829502106 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.829519987 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.829607964 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.829617023 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.830976009 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.834884882 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.834901094 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.834964991 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.834979057 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.835087061 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.864744902 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.864770889 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.864840984 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.864856005 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.864901066 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.868386030 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.868413925 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.868477106 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.868489981 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.868973017 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.877415895 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.877439022 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.877499104 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.877511024 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.877558947 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.877579927 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.879859924 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.879878998 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.879967928 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.879977942 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.880316973 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.912611008 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.912646055 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.912791967 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.912806034 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.912930965 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.917092085 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.917131901 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.917243004 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.917253971 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.917292118 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.921493053 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.921519041 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.921600103 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.921610117 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.921941042 CET	49671	443	192.168.2.16	204.79.197.203
Mar 10, 2025 12:36:01.921966076 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.926853895 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.926877975 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.926995039 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.927006960 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.927051067 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.937993050 CET	49679	443	192.168.2.16	52.182.143.211
Mar 10, 2025 12:36:01.956070900 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.956095934 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.956233025 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.956243992 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.956326962 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.962086916 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.962109089 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.962198019 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.962208033 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.962245941 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.967660904 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.967685938 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.967767954 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.967780113 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.968951941 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.973714113 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.973733902 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.973819971 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:01.973829985 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:01.974379063 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.006702900 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.006728888 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.006860971 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.006874084 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.006927967 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.010695934 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.010719061 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.010773897 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.010786057 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.011435032 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.015122890 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.015141964 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.015204906 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.015216112 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.016966105 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.020522118 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.020543098 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.020622015 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.020632982 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.020920038 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.049968004 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.049993992 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.050106049 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.050118923 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.052944899 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.055660009 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.055676937 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.055737019 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.055747032 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.056261063 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.061522961 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.061539888 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.061614990 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.061625957 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.062088966 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.065572023 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.065588951 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.065660000 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.065670967 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.067977905 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.073402882 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.073421955 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.073636055 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.073647022 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.073702097 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.104408026 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.104430914 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.104614019 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.104628086 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.104676962 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.109026909 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.109045982 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.109113932 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.109126091 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.109162092 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.114445925 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.114463091 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.114548922 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.114561081 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.114593029 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.143740892 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.143764019 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.143827915 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.143841028 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.143892050 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.143913031 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.149470091 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.149487972 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.149586916 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.149600983 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.150263071 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.155026913 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.155045033 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.155132055 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.155145884 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.155678034 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.159260035 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.159279108 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.159356117 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.159364939 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.159928083 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.167249918 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.167269945 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.167365074 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.167375088 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.167946100 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.198292971 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.198319912 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.198422909 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.198438883 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.199023008 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.202728987 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.202747107 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.202809095 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.202821016 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.203305960 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.208225965 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.208246946 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.208322048 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.208333015 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.208813906 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.237736940 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.237756014 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.237894058 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.237909079 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.238449097 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.243396997 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.243418932 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.243469954 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.243484020 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.243525028 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.243577957 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.248801947 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.248820066 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.248912096 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.248925924 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.249044895 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.253091097 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.253108978 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.253168106 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.253180027 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.253204107 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.253218889 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.261060953 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.261081934 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.261140108 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.261152029 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.261221886 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.292018890 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.292041063 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.292110920 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.292125940 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.292172909 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.304725885 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.304744005 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.304805040 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.304816961 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.304852962 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.306890011 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.306905985 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.306984901 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.306993008 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.307121992 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.331600904 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.331623077 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.331687927 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.331700087 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.331738949 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.337147951 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.337165117 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.337260008 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.337272882 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.337423086 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.342653036 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.342673063 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.342755079 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.342767000 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.342835903 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.353084087 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.353104115 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.353158951 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.353214025 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.353223085 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.353260994 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.356456041 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.356472969 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.356592894 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.356602907 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.356652021 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.390079021 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.390108109 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.390172958 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.390189886 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.390228033 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.398475885 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.398536921 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.398576975 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.398591995 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.398621082 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.398641109 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.407656908 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.407712936 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.407741070 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.407788992 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.407795906 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.407841921 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.425380945 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.425431967 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.425471067 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.425482988 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.425513029 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.425533056 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.430898905 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.430918932 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.430949926 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.430984020 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.430989981 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.431058884 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.436337948 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.436359882 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.436425924 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.436434984 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.436542988 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.446758986 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.446780920 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.446830988 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.446841955 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.447066069 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.450220108 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.450239897 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.450306892 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.450315952 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.450347900 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.450376034 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.477766037 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.477787971 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.477852106 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.477865934 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.477932930 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.488893986 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.488912106 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.488976002 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.488986969 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.489027977 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.501597881 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.501621008 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.501687050 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.501697063 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.501741886 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.502013922 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.502028942 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.502080917 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.502085924 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.502130985 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.521183014 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.521222115 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.521265984 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.521279097 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.521323919 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.524971962 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.525002003 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.525054932 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.525064945 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.525106907 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.545789003 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.545814991 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.545902967 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.545917988 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.545979023 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.549514055 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.549539089 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.549598932 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.549611092 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.549654961 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.550307035 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.550327063 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.550384998 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.550390959 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.550455093 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.582705975 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.582736015 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.582787991 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.582798004 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.582865000 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.594890118 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.594923973 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.594974041 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.594986916 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.595037937 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.595662117 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.595693111 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.595729113 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.595733881 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.595786095 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.614890099 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.614917040 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.614979029 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.614995003 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.615040064 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.618990898 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.619008064 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.619080067 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.619091034 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.619127035 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.639659882 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.639694929 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.639755011 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.639769077 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.639841080 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.639841080 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.643434048 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.643474102 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.643513918 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.643521070 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.643557072 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.643575907 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.644162893 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.644196987 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.644244909 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.644249916 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.644284010 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.644309998 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.688632965 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.688663960 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.688713074 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.688720942 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.688769102 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.690236092 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.690259933 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.690332890 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.690337896 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.690386057 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.690768957 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.690787077 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.690850973 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.690856934 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.690912962 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.709573984 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.709604979 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.709661961 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.709667921 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.709733009 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.712721109 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.712743998 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.712786913 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.712791920 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.712858915 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.733478069 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.733501911 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.733546972 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.733552933 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.733606100 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.737198114 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.737224102 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.737271070 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.737276077 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.737323999 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.737977982 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.738010883 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.738059044 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.738070011 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.738104105 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.738126040 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.782455921 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.782485008 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.782535076 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.782541990 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.782613039 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.784148932 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.784173012 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.784223080 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.784226894 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.784284115 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.784554005 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.784573078 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.784636021 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.784641027 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.784713030 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.803388119 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.803409100 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.803476095 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.803482056 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.803524017 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.806709051 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.806730986 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.806791067 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.806796074 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.806843996 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.827270031 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.827287912 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.827389002 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.827397108 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.827454090 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.830960035 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.830981016 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.831033945 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.831038952 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.831091881 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.831763983 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.831809044 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.831839085 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.831845045 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.831914902 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.876076937 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.876096010 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.876168966 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.876176119 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.876219034 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.877976894 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.877994061 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.878043890 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.878047943 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.878098965 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.878731012 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.878748894 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.878818035 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.878824949 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.878871918 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.903984070 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.904011011 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.904079914 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.904089928 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.904138088 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.914804935 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.914824963 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.914901972 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.914910078 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.914956093 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.935404062 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.935432911 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.935489893 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.935497046 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.935551882 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.936130047 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.936146975 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.936238050 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.936244011 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.936284065 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.936871052 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.936886072 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.936948061 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.936954021 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.936996937 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.969868898 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.969892025 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.969943047 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.969949007 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.970000029 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.971787930 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.971805096 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.971867085 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.971872091 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.971932888 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.972534895 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.972551107 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.972603083 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.972606897 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.972644091 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.997971058 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.997997046 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.998043060 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:02.998049021 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:02.998086929 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:03.008644104 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:03.008661032 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:03.008729935 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:03.008737087 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:03.008779049 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:03.030102015 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:03.030122042 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:03.030225039 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:03.030235052 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:03.030277014 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:03.030831099 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:03.030847073 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:03.030927896 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:03.030934095 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:03.030972958 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:03.031200886 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:03.031253099 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:03.031261921 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:03.031277895 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:03.031306028 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:03.031378031 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:03.031394005 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:03.031409979 CET	443	49726	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:03.031444073 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:03.032433987 CET	49726	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:03.040474892 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:03.040522099 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:03.040983915 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:03.040983915 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:03.041018963 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:03.149003983 CET	49679	443	192.168.2.16	52.182.143.211
Mar 10, 2025 12:36:03.500379086 CET	443	49721	104.18.11.207	192.168.2.16
Mar 10, 2025 12:36:03.506453991 CET	443	49721	104.18.11.207	192.168.2.16
Mar 10, 2025 12:36:03.506562948 CET	49721	443	192.168.2.16	104.18.11.207
Mar 10, 2025 12:36:03.506581068 CET	443	49721	104.18.11.207	192.168.2.16
Mar 10, 2025 12:36:03.509133101 CET	49721	443	192.168.2.16	104.18.11.207
Mar 10, 2025 12:36:03.509133101 CET	49721	443	192.168.2.16	104.18.11.207
Mar 10, 2025 12:36:03.509146929 CET	443	49721	104.18.11.207	192.168.2.16
Mar 10, 2025 12:36:03.509155989 CET	443	49721	104.18.11.207	192.168.2.16
Mar 10, 2025 12:36:03.512898922 CET	49721	443	192.168.2.16	104.18.11.207
Mar 10, 2025 12:36:03.512907028 CET	443	49721	104.18.11.207	192.168.2.16
Mar 10, 2025 12:36:03.854109049 CET	443	49721	104.18.11.207	192.168.2.16
Mar 10, 2025 12:36:03.856913090 CET	49721	443	192.168.2.16	104.18.11.207
Mar 10, 2025 12:36:03.856933117 CET	443	49721	104.18.11.207	192.168.2.16
Mar 10, 2025 12:36:03.969671011 CET	443	49721	104.18.11.207	192.168.2.16
Mar 10, 2025 12:36:03.969767094 CET	49721	443	192.168.2.16	104.18.11.207
Mar 10, 2025 12:36:03.969779968 CET	443	49721	104.18.11.207	192.168.2.16
Mar 10, 2025 12:36:03.973098040 CET	443	49721	104.18.11.207	192.168.2.16
Mar 10, 2025 12:36:03.973117113 CET	443	49721	104.18.11.207	192.168.2.16
Mar 10, 2025 12:36:03.973157883 CET	49721	443	192.168.2.16	104.18.11.207
Mar 10, 2025 12:36:03.973166943 CET	443	49721	104.18.11.207	192.168.2.16
Mar 10, 2025 12:36:03.973980904 CET	49721	443	192.168.2.16	104.18.11.207
Mar 10, 2025 12:36:04.061736107 CET	443	49721	104.18.11.207	192.168.2.16
Mar 10, 2025 12:36:04.066214085 CET	49731	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:04.066255093 CET	443	49731	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:04.066345930 CET	49731	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:04.066749096 CET	49731	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:04.066760063 CET	443	49731	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:04.101952076 CET	49721	443	192.168.2.16	104.18.11.207
Mar 10, 2025 12:36:05.158102989 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.158859015 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.158900023 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.160011053 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.160685062 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.160685062 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.160685062 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.160752058 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.203352928 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.203377962 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.250989914 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.554702044 CET	49679	443	192.168.2.16	52.182.143.211
Mar 10, 2025 12:36:05.765867949 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.765907049 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.765917063 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.765983105 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.766031027 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.766031981 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.766057968 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.766092062 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.766107082 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.766128063 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.766141891 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.823882103 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.823916912 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.823972940 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.823988914 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.824054956 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.824074030 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.864343882 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.864373922 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.864486933 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.864506006 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.864964962 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.872061968 CET	443	49731	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:05.872523069 CET	49731	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:05.872541904 CET	443	49731	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:05.872947931 CET	443	49731	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:05.875452042 CET	49731	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:05.875581026 CET	443	49731	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:05.875633955 CET	49731	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:05.905688047 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.905751944 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.905800104 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.905819893 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.905853987 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.905875921 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.920341969 CET	443	49731	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:05.924140930 CET	49731	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:05.931487083 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.931512117 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.931621075 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.931638002 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.937009096 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.952653885 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.952678919 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.952735901 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.952753067 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.952792883 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.952805042 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.976088047 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.976123095 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.976239920 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.976269007 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.976983070 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.999594927 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.999625921 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:05.999739885 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:05.999763012 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.000335932 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.012407064 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.012449026 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.012528896 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.012556076 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.012612104 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.012625933 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.023509026 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.023550034 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.023627996 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.023650885 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.023699045 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.023839951 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.034379959 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.034414053 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.034517050 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.034535885 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.034563065 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.034584999 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.046767950 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.046816111 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.046854973 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.046870947 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.046996117 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.058474064 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.058511972 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.058557034 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.058576107 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.058626890 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.069802999 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.069845915 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.069895983 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.069910049 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.069956064 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.069983006 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.092596054 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.092628002 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.092701912 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.092720032 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.092768908 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.092778921 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.094319105 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.094342947 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.094407082 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.094415903 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.096415997 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.106173038 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.106204033 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.106314898 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.106342077 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.106849909 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.115101099 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.115143061 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.115226030 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.115245104 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.115778923 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.128098965 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.128122091 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.128200054 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.128211021 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.128794909 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.139946938 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.139981031 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.140080929 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.140094042 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.140990019 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.152188063 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.152215004 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.152316093 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.152331114 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.152967930 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.163547039 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.163577080 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.163687944 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.163707018 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.164254904 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.185528040 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.185550928 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.185623884 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.185642958 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.185691118 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.185709953 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.186511993 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.186528921 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.186594009 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.186603069 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.187969923 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.190203905 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.190243006 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.190275908 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.190284014 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.190299988 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.190306902 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.190346956 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.190599918 CET	49730	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:06.190623045 CET	443	49730	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:06.378453016 CET	443	49731	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:06.378503084 CET	443	49731	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:06.378515005 CET	443	49731	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:06.378525019 CET	443	49731	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:06.378559113 CET	443	49731	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:06.378583908 CET	49731	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:06.378609896 CET	443	49731	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:06.378639936 CET	49731	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:06.378660917 CET	49731	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:06.444137096 CET	443	49731	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:06.444175005 CET	443	49731	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:06.444248915 CET	49731	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:06.444259882 CET	443	49731	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:06.444303036 CET	49731	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:06.444442034 CET	49731	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:06.444462061 CET	443	49731	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:06.447289944 CET	49737	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:06.447334051 CET	443	49737	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:06.447424889 CET	49737	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:06.447773933 CET	49737	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:06.447788954 CET	443	49737	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:06.612001896 CET	49738	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:06.612051964 CET	443	49738	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:06.612143993 CET	49738	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:06.612487078 CET	49738	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:06.612504959 CET	443	49738	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:06.904659986 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:06.904740095 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:06.904846907 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:06.906351089 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:06.906388044 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:06.911123991 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:06.911173105 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:06.911324978 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:06.911721945 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:06.911732912 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:07.160275936 CET	443	49712	142.250.185.68	192.168.2.16
Mar 10, 2025 12:36:07.160396099 CET	443	49712	142.250.185.68	192.168.2.16
Mar 10, 2025 12:36:07.160468102 CET	49712	443	192.168.2.16	142.250.185.68
Mar 10, 2025 12:36:08.277303934 CET	443	49737	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.277632952 CET	49737	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.277662039 CET	443	49737	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.278036118 CET	443	49737	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.279722929 CET	49737	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.279799938 CET	443	49737	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.280194044 CET	49737	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.324323893 CET	443	49737	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.444119930 CET	443	49738	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.445041895 CET	49738	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.445061922 CET	443	49738	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.445420980 CET	443	49738	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.449029922 CET	49738	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.449129105 CET	443	49738	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.449274063 CET	49738	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.492319107 CET	443	49738	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.763386965 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.763768911 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.763797045 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.764848948 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.764991999 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.765285969 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.765342951 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.765454054 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.780246019 CET	443	49737	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.780337095 CET	443	49737	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.780383110 CET	443	49737	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.780432940 CET	49737	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.780471087 CET	443	49737	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.780489922 CET	49737	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.780518055 CET	49737	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.808334112 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.817040920 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.817089081 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.848900080 CET	443	49737	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.848963976 CET	443	49737	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.849042892 CET	49737	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.849073887 CET	443	49737	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.849113941 CET	443	49737	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.849133015 CET	49737	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.849165916 CET	49737	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.849674940 CET	49737	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.849692106 CET	443	49737	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.852047920 CET	49712	443	192.168.2.16	142.250.185.68
Mar 10, 2025 12:36:08.852073908 CET	443	49712	142.250.185.68	192.168.2.16
Mar 10, 2025 12:36:08.865099907 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.899044037 CET	443	49738	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.899069071 CET	443	49738	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.899137020 CET	49738	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.899139881 CET	443	49738	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.899203062 CET	49738	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.899868011 CET	49738	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.899892092 CET	443	49738	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.923013926 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.923309088 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.923333883 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.924448013 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.924532890 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.924873114 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.924947977 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.925034046 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.925043106 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.936414957 CET	49741	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.936482906 CET	443	49741	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.936593056 CET	49741	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.936893940 CET	49741	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:08.936908007 CET	443	49741	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:08.977018118 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.346210003 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.346709967 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.346719980 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.346757889 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.346770048 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.346782923 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.346787930 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.346808910 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.346827030 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.346841097 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.346865892 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.388072014 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.406364918 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.406375885 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.406430006 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.406450033 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.406465054 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.406480074 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.406497002 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.406533003 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.426264048 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.426301003 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.426310062 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.426341057 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.426357985 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.426382065 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.426423073 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.426493883 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.426537991 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.426563978 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.454765081 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.454797029 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.456007957 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.456037045 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.456927061 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.465143919 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.465244055 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.465272903 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.465290070 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.465344906 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.465378046 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.465420961 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.465437889 CET	443	49740	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.465454102 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.465481043 CET	49740	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.468348026 CET	49743	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.468399048 CET	443	49743	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.468489885 CET	49743	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.468889952 CET	49743	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.468904972 CET	443	49743	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.481683969 CET	49744	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.481738091 CET	443	49744	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.482352972 CET	49744	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.482352972 CET	49744	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.482393026 CET	443	49744	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.509423018 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.509454012 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.509567976 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.509594917 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.509654045 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.539259911 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.539288044 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.539462090 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.539489985 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.539544106 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.580631971 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.580658913 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.580749989 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.580777884 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.580831051 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.606278896 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.606312037 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.606393099 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.606404066 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.606580019 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.606580019 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.630064011 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.630090952 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.630172968 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.630183935 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.630230904 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.648745060 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.648770094 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.648868084 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.648880005 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.648969889 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.691066980 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.691097021 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.691190004 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.691226006 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.691281080 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.693247080 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.693269014 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.693351984 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.693381071 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.693434954 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.698935986 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.698961020 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.699048042 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.699069023 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.699116945 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.711812973 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.711837053 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.711927891 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.711947918 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.711997032 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.722255945 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.722282887 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.722404957 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.722439051 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.722502947 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.733903885 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.733935118 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.734035015 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.734055996 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.734119892 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.744683027 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.744707108 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.744827986 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.744898081 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.744975090 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.753185034 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.753212929 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.753310919 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.753338099 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.753391027 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.764612913 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.764642954 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.764744997 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.764775038 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.764868021 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.776635885 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.776662111 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.776772022 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.776799917 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.776854992 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.788815975 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.788842916 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.789004087 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.789058924 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.789119959 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.801811934 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.801835060 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.801999092 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.802027941 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.802082062 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.814460993 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.814486980 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.814575911 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.814594030 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.814662933 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.824194908 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.824220896 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.824340105 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.824399948 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.824460983 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.835052013 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.835077047 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.835170984 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.835199118 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.835290909 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.843525887 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.843545914 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.843641996 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.843662977 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.843722105 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.856344938 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.856367111 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.856467009 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.856518030 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.856584072 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.865995884 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.866023064 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.866101027 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.866147995 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.866214991 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.880850077 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.880875111 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.880995035 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.881022930 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.881187916 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.894501925 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.894526005 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.894634962 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.894663095 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.894737005 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.913110018 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.913134098 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.913250923 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.913278103 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.913352013 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.916265965 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.916289091 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.916362047 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.916384935 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.916435003 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.927257061 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.927284002 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.927350044 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.927385092 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.927398920 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.927431107 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.935761929 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.935790062 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.935894012 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.935920954 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.935965061 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.948472023 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.948496103 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.948628902 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.948662996 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.948771954 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.958303928 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.958333015 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.958406925 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.958435059 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.958487988 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.973074913 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.973104000 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.973227024 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.973251104 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.973323107 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.987159967 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.987185955 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.987272978 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:09.987298965 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:09.987345934 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.011504889 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.011531115 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.011646032 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.011686087 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.011759996 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.012298107 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.012387037 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.012391090 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.012401104 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.012479067 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.019457102 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.019478083 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.019584894 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.019601107 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.019650936 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.027843952 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.027872086 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.027977943 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.027992964 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.028036118 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.040647030 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.040673018 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.040750980 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.040766954 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.040826082 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.050419092 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.050445080 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.050530910 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.050549030 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.050607920 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.065196991 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.065222025 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.065326929 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.065344095 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.065397024 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.079271078 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.079298019 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.079389095 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.079405069 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.079474926 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.103656054 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.103683949 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.103765011 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.103780031 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.103821039 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.104474068 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.104495049 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.104557991 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.104566097 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.104604959 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.107531071 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.107589006 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.107620001 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.107628107 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.107644081 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.107667923 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.107876062 CET	49739	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.107896090 CET	443	49739	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.357513905 CET	49679	443	192.168.2.16	52.182.143.211
Mar 10, 2025 12:36:10.755815983 CET	443	49741	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.757718086 CET	49741	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.757745981 CET	443	49741	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.758814096 CET	443	49741	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.758898973 CET	49741	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.759485006 CET	49741	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.759548903 CET	443	49741	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.759856939 CET	49741	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:10.759865999 CET	443	49741	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:10.801033020 CET	49741	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:11.207317114 CET	443	49741	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.207343102 CET	443	49741	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.207417965 CET	443	49741	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.207431078 CET	49741	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:11.207479954 CET	49741	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:11.208292961 CET	49741	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:11.208314896 CET	443	49741	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.289737940 CET	443	49744	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.290044069 CET	49744	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:11.290060997 CET	443	49744	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.290957928 CET	443	49744	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.291301012 CET	49744	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:11.291449070 CET	443	49744	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.291506052 CET	49744	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:11.291548014 CET	49744	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:11.291568041 CET	443	49744	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.297230005 CET	443	49743	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.297631025 CET	49743	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:11.297652006 CET	443	49743	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.298683882 CET	443	49743	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.298760891 CET	49743	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:11.299221039 CET	49743	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:11.299278975 CET	443	49743	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.299421072 CET	49743	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:11.299429893 CET	443	49743	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.343017101 CET	49743	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:11.535021067 CET	49671	443	192.168.2.16	204.79.197.203
Mar 10, 2025 12:36:11.782327890 CET	443	49743	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.782403946 CET	443	49743	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.782484055 CET	49743	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:11.783159018 CET	49743	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:11.783185005 CET	443	49743	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.947557926 CET	443	49744	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.947591066 CET	443	49744	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.947614908 CET	443	49744	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.947859049 CET	49744	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:11.947880983 CET	443	49744	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:11.948019028 CET	49744	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:12.021435976 CET	443	49744	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:12.021478891 CET	443	49744	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:12.023272038 CET	49744	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:12.023293972 CET	443	49744	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:12.023906946 CET	49744	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:12.041857004 CET	443	49744	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:12.041912079 CET	443	49744	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:12.041999102 CET	443	49744	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:12.042047024 CET	49744	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:12.042047024 CET	49744	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:12.044934034 CET	49746	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:12.044939041 CET	49744	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:12.044962883 CET	443	49744	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:12.044989109 CET	443	49746	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:12.045103073 CET	49746	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:12.045591116 CET	49746	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:12.045610905 CET	443	49746	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:12.231628895 CET	49750	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:12.231668949 CET	443	49750	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:12.231714964 CET	49751	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:12.231750011 CET	443	49751	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:12.231790066 CET	49751	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:12.231838942 CET	49750	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:12.231867075 CET	49752	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:12.231895924 CET	443	49752	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:12.231940031 CET	49752	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:12.232372999 CET	49750	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:12.232388973 CET	443	49750	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:12.232631922 CET	49751	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:12.232649088 CET	443	49751	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:12.232881069 CET	49752	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:12.232896090 CET	443	49752	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:13.853984118 CET	443	49746	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:13.854388952 CET	49746	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:13.854408979 CET	443	49746	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:13.854760885 CET	443	49746	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:13.855140924 CET	49746	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:13.855206966 CET	443	49746	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:13.855305910 CET	49746	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:13.900325060 CET	443	49746	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:14.203102112 CET	443	49751	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.203334093 CET	49751	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.203345060 CET	443	49751	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.204390049 CET	443	49751	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.204452991 CET	49751	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.205233097 CET	49751	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.205296993 CET	443	49751	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.205368996 CET	49751	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.205375910 CET	443	49751	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.224526882 CET	443	49750	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.225100994 CET	49750	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.225115061 CET	443	49750	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.226917028 CET	443	49750	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.227030039 CET	49750	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.227479935 CET	49750	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.227623940 CET	49750	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.227705956 CET	443	49750	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.233078003 CET	443	49752	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.233283043 CET	49752	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.233299971 CET	443	49752	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.234335899 CET	443	49752	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.234405041 CET	49752	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.234715939 CET	49752	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.234769106 CET	443	49752	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.234813929 CET	49752	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.257040977 CET	49751	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.273138046 CET	49750	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.273160934 CET	443	49750	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.276324034 CET	443	49752	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.289007902 CET	49752	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.289022923 CET	443	49752	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.321044922 CET	49750	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.337083101 CET	49752	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.349803925 CET	443	49746	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:14.349891901 CET	443	49746	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:14.349955082 CET	49746	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:14.350617886 CET	49746	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:14.350635052 CET	443	49746	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:14.755072117 CET	443	49751	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.755161047 CET	443	49751	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.755222082 CET	49751	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.755439997 CET	49751	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.755439997 CET	49751	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.755456924 CET	443	49751	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.755508900 CET	49751	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.772954941 CET	49753	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:14.772989035 CET	443	49753	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:14.773092031 CET	49753	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:14.773386955 CET	49753	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:14.773396969 CET	443	49753	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:14.788578033 CET	443	49750	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.788666964 CET	443	49750	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.788736105 CET	49750	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.789041042 CET	49750	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.789060116 CET	443	49750	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.789074898 CET	49750	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.789107084 CET	49750	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.790360928 CET	49754	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:14.790384054 CET	443	49754	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:14.790448904 CET	49754	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:14.790760994 CET	49754	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:14.790771008 CET	443	49754	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:14.797440052 CET	443	49752	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.797507048 CET	443	49752	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.797573090 CET	49752	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.797838926 CET	49752	443	192.168.2.16	51.195.65.78
Mar 10, 2025 12:36:14.797847033 CET	443	49752	51.195.65.78	192.168.2.16
Mar 10, 2025 12:36:14.798834085 CET	49755	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:14.798872948 CET	443	49755	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:14.798945904 CET	49755	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:14.799201012 CET	49755	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:14.799211025 CET	443	49755	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:16.566059113 CET	443	49753	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:16.566389084 CET	49753	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:16.566417933 CET	443	49753	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:16.567454100 CET	443	49753	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:16.568430901 CET	49753	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:16.568430901 CET	49753	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:16.568495989 CET	443	49753	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:16.568608999 CET	49753	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:16.568617105 CET	443	49753	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:16.600887060 CET	443	49754	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:16.601170063 CET	49754	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:16.601197004 CET	443	49754	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:16.602245092 CET	443	49754	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:16.602320910 CET	49754	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:16.602644920 CET	49754	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:16.602710009 CET	443	49754	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:16.602787018 CET	49754	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:16.602794886 CET	443	49754	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:16.618505955 CET	49753	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:16.650060892 CET	49754	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:16.691364050 CET	443	49755	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:16.691660881 CET	49755	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:16.691670895 CET	443	49755	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:16.692967892 CET	443	49755	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:16.693053961 CET	49755	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:16.693351030 CET	49755	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:16.693531990 CET	49755	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:16.693747044 CET	443	49755	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:16.746085882 CET	49755	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:16.746109009 CET	443	49755	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:16.794091940 CET	49755	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:17.728092909 CET	443	49753	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:17.728255987 CET	443	49753	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:17.728332043 CET	49753	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:17.728769064 CET	49753	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:17.728792906 CET	443	49753	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:17.732920885 CET	49756	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:17.732971907 CET	443	49756	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:17.733064890 CET	49756	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:17.733510971 CET	49756	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:17.733521938 CET	443	49756	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:17.907418966 CET	443	49754	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:17.907450914 CET	443	49754	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:17.907459021 CET	443	49754	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:17.907507896 CET	443	49754	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:17.907536030 CET	49754	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:17.907572031 CET	443	49754	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:17.907589912 CET	443	49754	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:17.907599926 CET	49754	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:17.907634974 CET	49754	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:17.909629107 CET	443	49754	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:17.909707069 CET	443	49754	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:17.909712076 CET	49754	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:17.909759998 CET	49754	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:17.909879923 CET	49754	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:17.909898043 CET	443	49754	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:17.909930944 CET	49754	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:17.909949064 CET	49754	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:17.928384066 CET	49759	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:17.928428888 CET	443	49759	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:17.928508997 CET	49759	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:17.928788900 CET	49759	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:17.928802013 CET	443	49759	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:18.024039984 CET	443	49755	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:18.024070024 CET	443	49755	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:18.024077892 CET	443	49755	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:18.024089098 CET	443	49755	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:18.024111032 CET	443	49755	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:18.024122000 CET	443	49755	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:18.024138927 CET	49755	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:18.024146080 CET	443	49755	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:18.024214029 CET	49755	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:18.090811968 CET	443	49755	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:18.090831041 CET	443	49755	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:18.090856075 CET	443	49755	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:18.090910912 CET	49755	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:18.090919971 CET	443	49755	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:18.090962887 CET	49755	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:18.090971947 CET	443	49755	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:18.091022015 CET	49755	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:18.091238022 CET	49755	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:18.091249943 CET	443	49755	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:18.094084978 CET	49760	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:18.094113111 CET	443	49760	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:18.094180107 CET	49760	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:18.094655037 CET	49760	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:18.094664097 CET	443	49760	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:18.094932079 CET	49761	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:18.094985008 CET	443	49761	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:18.095051050 CET	49761	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:18.095295906 CET	49761	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:18.095307112 CET	443	49761	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:19.694343090 CET	443	49756	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:19.694668055 CET	49756	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:19.694695950 CET	443	49756	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:19.695106030 CET	443	49756	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:19.695437908 CET	49756	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:19.695529938 CET	443	49756	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:19.695635080 CET	49756	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:19.740329981 CET	443	49756	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:19.817003012 CET	443	49759	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:19.817306995 CET	49759	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:19.817325115 CET	443	49759	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:19.818372011 CET	443	49759	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:19.818442106 CET	49759	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:19.819046974 CET	49759	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:19.819132090 CET	443	49759	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:19.819279909 CET	49759	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:19.819287062 CET	443	49759	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:19.866074085 CET	49759	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:19.944197893 CET	443	49760	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:19.944581985 CET	49760	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:19.944597006 CET	443	49760	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:19.944981098 CET	443	49760	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:19.945915937 CET	49760	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:19.946018934 CET	443	49760	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:19.946100950 CET	49760	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:19.964695930 CET	49679	443	192.168.2.16	52.182.143.211
Mar 10, 2025 12:36:19.992316008 CET	443	49760	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:19.997848034 CET	443	49761	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:19.998162031 CET	49761	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:19.998198032 CET	443	49761	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:19.999264002 CET	443	49761	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:19.999344110 CET	49761	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:19.999792099 CET	49761	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:19.999855042 CET	443	49761	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:19.999964952 CET	49761	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:19.999977112 CET	443	49761	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.041243076 CET	49761	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.177385092 CET	443	49756	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.177413940 CET	443	49756	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.177442074 CET	443	49756	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.177522898 CET	443	49756	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.177608967 CET	49756	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.177608967 CET	49756	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.207463980 CET	49756	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.207499027 CET	443	49756	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.212179899 CET	49762	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.212225914 CET	443	49762	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.212301970 CET	49762	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.212630033 CET	49762	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.212641001 CET	443	49762	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.330877066 CET	443	49759	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.331021070 CET	443	49759	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.331028938 CET	443	49759	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.331042051 CET	443	49759	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.331069946 CET	49759	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.331084967 CET	443	49759	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.331110954 CET	443	49759	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.331125975 CET	49759	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.331132889 CET	49759	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.331156015 CET	49759	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.337497950 CET	443	49759	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.337555885 CET	49759	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.337573051 CET	443	49759	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.337590933 CET	443	49759	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.337639093 CET	49759	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.337768078 CET	49759	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.337786913 CET	443	49759	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.408498049 CET	443	49760	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.408524036 CET	443	49760	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.408572912 CET	49760	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.408588886 CET	443	49760	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.408601999 CET	443	49760	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.408643007 CET	49760	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.409488916 CET	49760	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.409503937 CET	443	49760	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.506759882 CET	443	49761	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.506787062 CET	443	49761	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.506795883 CET	443	49761	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.506809950 CET	443	49761	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.506854057 CET	443	49761	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.506855965 CET	49761	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.506881952 CET	443	49761	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.506915092 CET	49761	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.506938934 CET	49761	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.564822912 CET	443	49761	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.564908028 CET	49761	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.564933062 CET	443	49761	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.564953089 CET	443	49761	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:20.564980984 CET	49761	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.565021038 CET	49761	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.565222979 CET	49761	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:20.565242052 CET	443	49761	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:21.174170017 CET	49765	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:21.174179077 CET	443	49765	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:21.174269915 CET	49765	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:21.174581051 CET	49765	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:21.174593925 CET	443	49765	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:22.099793911 CET	443	49762	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:22.100296021 CET	49762	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:22.100321054 CET	443	49762	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:22.100735903 CET	443	49762	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:22.101109028 CET	49762	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:22.101186037 CET	443	49762	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:22.101262093 CET	49762	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:22.144329071 CET	443	49762	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:22.588284016 CET	443	49762	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:22.588481903 CET	443	49762	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:22.588534117 CET	443	49762	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:22.588567019 CET	49762	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:22.588579893 CET	443	49762	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:22.588599920 CET	443	49762	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:22.588684082 CET	49762	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:22.588787079 CET	49762	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:22.589598894 CET	49762	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:22.589617968 CET	443	49762	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:23.090365887 CET	443	49765	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:23.090784073 CET	49765	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:23.090802908 CET	443	49765	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:23.091151953 CET	443	49765	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:23.091496944 CET	49765	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:23.091555119 CET	443	49765	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:23.091679096 CET	49765	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:23.132323980 CET	443	49765	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:23.565067053 CET	443	49765	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:23.572150946 CET	443	49765	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:23.572232008 CET	49765	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:23.572501898 CET	49765	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:23.572524071 CET	443	49765	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:23.575647116 CET	49768	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:23.575684071 CET	443	49768	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:23.575766087 CET	49768	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:23.576095104 CET	49768	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:23.576107025 CET	443	49768	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:25.425014019 CET	443	49768	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:25.425385952 CET	49768	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:25.425405979 CET	443	49768	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:25.425764084 CET	443	49768	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:25.426095009 CET	49768	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:25.426173925 CET	443	49768	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:25.426260948 CET	49768	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:25.468333006 CET	443	49768	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:25.885206938 CET	443	49768	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:25.885304928 CET	443	49768	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:25.885391951 CET	49768	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:25.886209011 CET	49768	443	192.168.2.16	20.120.76.149
Mar 10, 2025 12:36:25.886234999 CET	443	49768	20.120.76.149	192.168.2.16
Mar 10, 2025 12:36:33.112359047 CET	49692	80	192.168.2.16	172.217.16.195
Mar 10, 2025 12:36:33.117677927 CET	80	49692	172.217.16.195	192.168.2.16
Mar 10, 2025 12:36:33.117757082 CET	49692	80	192.168.2.16	172.217.16.195
Mar 10, 2025 12:36:49.062319040 CET	49721	443	192.168.2.16	104.18.11.207
Mar 10, 2025 12:36:49.062345028 CET	443	49721	104.18.11.207	192.168.2.16
Mar 10, 2025 12:36:55.584337950 CET	49774	443	192.168.2.16	142.250.185.68
Mar 10, 2025 12:36:55.584383011 CET	443	49774	142.250.185.68	192.168.2.16
Mar 10, 2025 12:36:55.584470034 CET	49774	443	192.168.2.16	142.250.185.68
Mar 10, 2025 12:36:55.584830046 CET	49774	443	192.168.2.16	142.250.185.68
Mar 10, 2025 12:36:55.584844112 CET	443	49774	142.250.185.68	192.168.2.16
Mar 10, 2025 12:36:57.544759035 CET	56426	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:36:57.549829006 CET	53	56426	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:57.549947977 CET	56426	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:36:57.549974918 CET	56426	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:36:57.554980040 CET	53	56426	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:57.712883949 CET	443	49774	142.250.185.68	192.168.2.16
Mar 10, 2025 12:36:57.713372946 CET	49774	443	192.168.2.16	142.250.185.68
Mar 10, 2025 12:36:57.713404894 CET	443	49774	142.250.185.68	192.168.2.16
Mar 10, 2025 12:36:57.713774920 CET	443	49774	142.250.185.68	192.168.2.16
Mar 10, 2025 12:36:57.714329958 CET	49774	443	192.168.2.16	142.250.185.68
Mar 10, 2025 12:36:57.714395046 CET	443	49774	142.250.185.68	192.168.2.16
Mar 10, 2025 12:36:57.758203030 CET	49774	443	192.168.2.16	142.250.185.68
Mar 10, 2025 12:36:58.023350954 CET	53	56426	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:58.024259090 CET	56426	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:36:58.030544996 CET	53	56426	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:58.030632973 CET	56426	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:37:07.376229048 CET	443	49774	142.250.185.68	192.168.2.16
Mar 10, 2025 12:37:07.376301050 CET	443	49774	142.250.185.68	192.168.2.16
Mar 10, 2025 12:37:07.376451969 CET	49774	443	192.168.2.16	142.250.185.68
Mar 10, 2025 12:37:08.172825098 CET	49774	443	192.168.2.16	142.250.185.68
Mar 10, 2025 12:37:08.172859907 CET	443	49774	142.250.185.68	192.168.2.16
Mar 10, 2025 12:37:24.553694963 CET	49694	443	192.168.2.16	40.126.32.136
Mar 10, 2025 12:37:24.553730011 CET	49695	80	192.168.2.16	184.30.131.245
Mar 10, 2025 12:37:24.559003115 CET	443	49694	40.126.32.136	192.168.2.16
Mar 10, 2025 12:37:24.559084892 CET	49694	443	192.168.2.16	40.126.32.136
Mar 10, 2025 12:37:24.559369087 CET	80	49695	184.30.131.245	192.168.2.16
Mar 10, 2025 12:37:24.559420109 CET	49695	80	192.168.2.16	184.30.131.245
Mar 10, 2025 12:37:28.113265038 CET	443	49686	2.23.227.208	192.168.2.16
Mar 10, 2025 12:37:28.113349915 CET	443	49686	2.23.227.208	192.168.2.16
Mar 10, 2025 12:37:28.113442898 CET	49686	443	192.168.2.16	2.23.227.208
Mar 10, 2025 12:37:28.113442898 CET	49686	443	192.168.2.16	2.23.227.208
Mar 10, 2025 12:37:34.063746929 CET	49721	443	192.168.2.16	104.18.11.207
Mar 10, 2025 12:37:34.063780069 CET	443	49721	104.18.11.207	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 10, 2025 12:35:50.872509956 CET	53	62656	1.1.1.1	192.168.2.16
Mar 10, 2025 12:35:50.872955084 CET	53	64315	1.1.1.1	192.168.2.16
Mar 10, 2025 12:35:51.814097881 CET	63234	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:35:51.814358950 CET	60092	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:35:51.833537102 CET	53	63234	1.1.1.1	192.168.2.16
Mar 10, 2025 12:35:51.835477114 CET	53	60092	1.1.1.1	192.168.2.16
Mar 10, 2025 12:35:55.166115999 CET	53	55585	1.1.1.1	192.168.2.16
Mar 10, 2025 12:35:55.174962997 CET	53	61803	1.1.1.1	192.168.2.16
Mar 10, 2025 12:35:55.177840948 CET	53	61746	1.1.1.1	192.168.2.16
Mar 10, 2025 12:35:55.519110918 CET	61745	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:35:55.519263029 CET	56168	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:35:55.526271105 CET	53	56168	1.1.1.1	192.168.2.16
Mar 10, 2025 12:35:55.526597977 CET	53	61745	1.1.1.1	192.168.2.16
Mar 10, 2025 12:35:57.528495073 CET	56206	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:35:57.528609991 CET	50896	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:35:57.535974026 CET	53	56206	1.1.1.1	192.168.2.16
Mar 10, 2025 12:35:57.536094904 CET	53	50896	1.1.1.1	192.168.2.16
Mar 10, 2025 12:35:57.549556971 CET	55868	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:35:57.549698114 CET	64696	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:35:57.556504965 CET	53	58171	1.1.1.1	192.168.2.16
Mar 10, 2025 12:35:57.588980913 CET	53	55868	1.1.1.1	192.168.2.16
Mar 10, 2025 12:35:57.600173950 CET	53	64696	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:08.902745962 CET	53029	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:36:08.903081894 CET	52969	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:36:08.935529947 CET	53	53029	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:08.935942888 CET	53	52969	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:09.485493898 CET	53	52062	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:12.193381071 CET	55695	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:36:12.193696022 CET	51211	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:36:12.208576918 CET	53	62260	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:12.214386940 CET	53	58547	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:12.223124981 CET	53	55695	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:12.234628916 CET	53	51211	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:14.756917000 CET	62864	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:36:14.757215977 CET	51937	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:36:14.767204046 CET	53	62864	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:14.771773100 CET	53	51937	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:17.914341927 CET	59167	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:36:17.914458036 CET	54140	53	192.168.2.16	1.1.1.1
Mar 10, 2025 12:36:17.921699047 CET	53	62803	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:17.925090075 CET	53	54140	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:17.927934885 CET	53	59167	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:23.428531885 CET	53	53698	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:31.284166098 CET	53	55068	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:50.720711946 CET	53	56560	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:53.481158972 CET	53	64365	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:56.296416044 CET	53	50343	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:57.544225931 CET	53	64583	1.1.1.1	192.168.2.16
Mar 10, 2025 12:36:58.627757072 CET	138	138	192.168.2.16	192.168.2.255
Mar 10, 2025 12:37:02.820589066 CET	53	57702	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 10, 2025 12:35:55.175379992 CET	192.168.2.16	1.1.1.1	c22e	(Port unreachable)	Destination Unreachable
Mar 10, 2025 12:35:57.600250006 CET	192.168.2.16	1.1.1.1	c256	(Port unreachable)	Destination Unreachable
Mar 10, 2025 12:36:12.234698057 CET	192.168.2.16	1.1.1.1	c256	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 10, 2025 12:35:51.814097881 CET	192.168.2.16	1.1.1.1	0x6b63	Standard query (0)	survey2.lamresearch.com	A (IP address)	IN (0x0001)	false
Mar 10, 2025 12:35:51.814358950 CET	192.168.2.16	1.1.1.1	0xa905	Standard query (0)	survey2.lamresearch.com	65	IN (0x0001)	false
Mar 10, 2025 12:35:55.519110918 CET	192.168.2.16	1.1.1.1	0x9a2b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 10, 2025 12:35:55.519263029 CET	192.168.2.16	1.1.1.1	0xef7f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 10, 2025 12:35:57.528495073 CET	192.168.2.16	1.1.1.1	0xbc41	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Mar 10, 2025 12:35:57.528609991 CET	192.168.2.16	1.1.1.1	0x1531	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Mar 10, 2025 12:35:57.549556971 CET	192.168.2.16	1.1.1.1	0xb85e	Standard query (0)	cdnsurvey.sogolytics.com	A (IP address)	IN (0x0001)	false
Mar 10, 2025 12:35:57.549698114 CET	192.168.2.16	1.1.1.1	0x840	Standard query (0)	cdnsurvey.sogolytics.com	65	IN (0x0001)	false
Mar 10, 2025 12:36:08.902745962 CET	192.168.2.16	1.1.1.1	0x320	Standard query (0)	survey2.lamresearch.com	A (IP address)	IN (0x0001)	false
Mar 10, 2025 12:36:08.903081894 CET	192.168.2.16	1.1.1.1	0xae43	Standard query (0)	survey2.lamresearch.com	65	IN (0x0001)	false
Mar 10, 2025 12:36:12.193381071 CET	192.168.2.16	1.1.1.1	0xf036	Standard query (0)	cdnstatic.sogolytics.com	A (IP address)	IN (0x0001)	false
Mar 10, 2025 12:36:12.193696022 CET	192.168.2.16	1.1.1.1	0x4244	Standard query (0)	cdnstatic.sogolytics.com	65	IN (0x0001)	false
Mar 10, 2025 12:36:14.756917000 CET	192.168.2.16	1.1.1.1	0x177b	Standard query (0)	static.sogolytics.com	A (IP address)	IN (0x0001)	false
Mar 10, 2025 12:36:14.757215977 CET	192.168.2.16	1.1.1.1	0xb606	Standard query (0)	static.sogolytics.com	65	IN (0x0001)	false
Mar 10, 2025 12:36:17.914341927 CET	192.168.2.16	1.1.1.1	0x1fba	Standard query (0)	static.sogolytics.com	A (IP address)	IN (0x0001)	false
Mar 10, 2025 12:36:17.914458036 CET	192.168.2.16	1.1.1.1	0x2a2e	Standard query (0)	static.sogolytics.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 10, 2025 12:35:51.833537102 CET	1.1.1.1	192.168.2.16	0x6b63	No error (0)	survey2.lamresearch.com	survey.sogosurvey.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 10, 2025 12:35:51.833537102 CET	1.1.1.1	192.168.2.16	0x6b63	No error (0)	survey.sogosurvey.com		20.120.76.149	A (IP address)	IN (0x0001)	false
Mar 10, 2025 12:35:51.835477114 CET	1.1.1.1	192.168.2.16	0xa905	No error (0)	survey2.lamresearch.com	survey.sogosurvey.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 10, 2025 12:35:55.526271105 CET	1.1.1.1	192.168.2.16	0xef7f	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 10, 2025 12:35:55.526597977 CET	1.1.1.1	192.168.2.16	0x9a2b	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Mar 10, 2025 12:35:57.535974026 CET	1.1.1.1	192.168.2.16	0xbc41	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Mar 10, 2025 12:35:57.535974026 CET	1.1.1.1	192.168.2.16	0xbc41	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Mar 10, 2025 12:35:57.536094904 CET	1.1.1.1	192.168.2.16	0x1531	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Mar 10, 2025 12:35:57.588980913 CET	1.1.1.1	192.168.2.16	0xb85e	No error (0)	cdnsurvey.sogolytics.com	636016205.r.cdnsun.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 10, 2025 12:35:57.588980913 CET	1.1.1.1	192.168.2.16	0xb85e	No error (0)	636016205.r.cdnsun.net		51.195.65.78	A (IP address)	IN (0x0001)	false
Mar 10, 2025 12:35:57.600173950 CET	1.1.1.1	192.168.2.16	0x840	No error (0)	cdnsurvey.sogolytics.com	636016205.r.cdnsun.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 10, 2025 12:36:08.935529947 CET	1.1.1.1	192.168.2.16	0x320	No error (0)	survey2.lamresearch.com	survey.sogosurvey.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 10, 2025 12:36:08.935529947 CET	1.1.1.1	192.168.2.16	0x320	No error (0)	survey.sogosurvey.com		20.120.76.149	A (IP address)	IN (0x0001)	false
Mar 10, 2025 12:36:08.935942888 CET	1.1.1.1	192.168.2.16	0xae43	No error (0)	survey2.lamresearch.com	survey.sogosurvey.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 10, 2025 12:36:12.223124981 CET	1.1.1.1	192.168.2.16	0xf036	No error (0)	cdnstatic.sogolytics.com	231648407.r.cdnsun.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 10, 2025 12:36:12.223124981 CET	1.1.1.1	192.168.2.16	0xf036	No error (0)	231648407.r.cdnsun.net		51.195.65.78	A (IP address)	IN (0x0001)	false
Mar 10, 2025 12:36:12.234628916 CET	1.1.1.1	192.168.2.16	0x4244	No error (0)	cdnstatic.sogolytics.com	231648407.r.cdnsun.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 10, 2025 12:36:14.767204046 CET	1.1.1.1	192.168.2.16	0x177b	No error (0)	static.sogolytics.com		20.120.76.149	A (IP address)	IN (0x0001)	false
Mar 10, 2025 12:36:17.927934885 CET	1.1.1.1	192.168.2.16	0x1fba	No error (0)	static.sogolytics.com		20.120.76.149	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

survey2.lamresearch.com

cdnsurvey.sogolytics.com

cdnstatic.sogolytics.com

static.sogolytics.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49706	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:35:53 UTC	703	OUT	GET /k/SsQRQWURsRUSsPsPsPsWTRTXRWWP HTTP/1.1 Host: survey2.lamresearch.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 11:35:55 UTC	444	IN	HTTP/1.1 302 Found Date: Mon, 10 Mar 2025 11:35:53 GMT Content-Type: text/html; charset=utf-8 Content-Length: 4152 Connection: close cache-control: private location: http://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data= set-cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; path=/; secure; HttpOnly; SameSite=Lax strict-transport-security: max-age=31536000 set-cookie: SERVERpart=part-1\|Z87On\|Z87On; path=/
2025-03-10 11:35:55 UTC	4152	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 73 75 72 76 65 79 32 2e 6c 61 6d 72 65 73 65 61 72 63 68 2e 63 6f 6d 2f 73 75 72 76 65 79 2f 66 6f 72 6d 3f 6b 3d 53 73 51 52 51 57 55 52 73 52 55 53 73 50 73 50 73 50 73 57 54 52 54 58 52 57 57 50 26 61 6d 70 3b 6c 61 6e 67 3d 30 26 61 6d 70 3b 64 61 74 61 3d 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="http://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data=">here</a>.</h2></body></html><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49709	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:35:56 UTC	801	OUT	GET /survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data= HTTP/1.1 Host: survey2.lamresearch.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87On\|Z87On
2025-03-10 11:35:57 UTC	443	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:35:57 GMT Content-Type: text/html; charset=utf-8 Content-Length: 26354 Connection: close cache-control: private,no-cache, no-store, must-revalidate expires: -1 access-control-allow-origin: * access-control-allow-methods: GET,POST,OPTIONS access-control-allow-headers: Content-Type, soapaction strict-transport-security: max-age=31536000 set-cookie: SERVERpart=part-1\|Z87Oo\|Z87On; path=/
2025-03-10 11:35:57 UTC	15941	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 53 75 72 76 65 79 20 50 61 72 74 69 63 69 70 61 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 73 75 72 76 65 79 2f 22 3e 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 61 73 73 65 74 73 2f 6a 73 2f 41 6e 75 67 6c 61 72 5f 53 75 72 76 65 79 5f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 3f 76 3d 33 30 Data Ascii: <!DOCTYPE html><html lang="en"><head><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin=""> <meta charset="utf-8"> <title>Survey Participation</title> <base href="/survey/"> <script src="assets/js/Anuglar_Survey_jquery.min.js?v=30
2025-03-10 11:35:57 UTC	10413	IN	Data Raw: 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 4d 61 74 65 72 69 61 6c 20 49 63 6f 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 6d 61 74 65 72 69 61 6c 69 63 6f 6e 73 2f 76 31 34 33 2f 66 6c 55 68 52 71 36 74 7a 5a 63 6c 51 45 4a 2d 56 64 67 2d 49 75 69 61 44 73 4e 63 49 68 51 38 74 51 2e 77 6f 66 66 Data Ascii: 122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}</style> <style type="text/css">@font-face{font-family:'Material Icons';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/materialicons/v143/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.woff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49715	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:35:59 UTC	736	OUT	GET /survey/assets/css/jquery-ui.min.css?key=11.05.17-04-2024 HTTP/1.1 Host: survey2.lamresearch.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data= Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oo\|Z87On
2025-03-10 11:35:59 UTC	397	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:35:59 GMT Content-Type: text/css Content-Length: 32130 Connection: close last-modified: Thu, 06 Mar 2025 13:16:26 GMT accept-ranges: bytes etag: "031d7f6998edb1:0" access-control-allow-origin: * access-control-allow-methods: GET,POST,OPTIONS access-control-allow-headers: Content-Type, soapaction strict-transport-security: max-age=31536000
2025-03-10 11:35:59 UTC	15987	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 31 20 2d 20 32 30 32 32 2d 30 31 2d 32 30 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 63 73 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 63 73 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 63 73 73 2c 20 6d 65 6e 75 2e 63 73 73 2c 20 62 75 74 74 6f 6e 2e 63 73 73 2c 20 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2e 63 73 73 2c 20 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2e 63 73 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 63 73 73 2c 20 64 69 61 6c 6f 67 2e 63 73 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 63 73 73 2c 20 72 65 73 69 7a 61 62 6c 65 2e 63 73 73 2c 20 70 72 6f 67 72 65 73 73 62 61 72 2e 63 73 73 2c 20 73 65 6c 65 63 74 61 Data Ascii: /! jQuery UI - v1.13.1 - 2022-01-20 http://jqueryui.com* Includes: core.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, draggable.css, resizable.css, progressbar.css, selecta
2025-03-10 11:35:59 UTC	16143	IN	Data Raw: 2d 73 6c 69 64 65 72 20 2e 75 69 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 32 3b 77 69 64 74 68 3a 31 2e 32 65 6d 3b 68 65 69 67 68 74 3a 31 2e 32 65 6d 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 75 69 2d 73 6c 69 64 65 72 20 2e 75 69 2d 73 6c 69 64 65 72 2d 72 61 6e 67 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 31 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 65 6d 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 72 64 65 72 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 7d 2e 75 69 Data Ascii: -slider .ui-slider-handle{position:absolute;z-index:2;width:1.2em;height:1.2em;cursor:pointer;-ms-touch-action:none;touch-action:none}.ui-slider .ui-slider-range{position:absolute;z-index:1;font-size:.7em;display:block;border:0;background-position:0 0}.ui

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49717	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:35:59 UTC	716	OUT	GET /survey/assets/css/pm/PreviewMode.css HTTP/1.1 Host: survey2.lamresearch.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data= Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oo\|Z87On
2025-03-10 11:35:59 UTC	397	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:35:59 GMT Content-Type: text/css Content-Length: 26064 Connection: close last-modified: Thu, 06 Mar 2025 13:16:26 GMT accept-ranges: bytes etag: "031d7f6998edb1:0" access-control-allow-origin: * access-control-allow-methods: GET,POST,OPTIONS access-control-allow-headers: Content-Type, soapaction strict-transport-security: max-age=31536000
2025-03-10 11:35:59 UTC	15987	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 7c 41 64 76 65 6e 74 2b 50 72 6f 7c 41 72 69 6d 61 2b 4d 61 64 75 72 61 69 7c 41 72 76 6f 7c 41 76 65 72 69 61 2b 53 65 72 69 66 2b 4c 69 62 72 65 7c 42 61 64 2b 53 63 72 69 70 74 7c 43 6f 6e 76 65 72 67 65 6e 63 65 7c 43 6f 72 6d 6f 72 61 6e 74 2b 47 61 72 61 6d 6f 6e 64 7c 44 61 6e 63 69 6e 67 2b 53 63 72 69 70 74 3a 37 30 30 7c 44 6f 73 69 73 7c 44 72 6f 69 64 2b 53 61 6e 73 7c 45 78 6f 2b 32 7c 46 69 72 61 2b 53 61 6e 73 7c 48 65 65 62 6f 7c 49 6e 64 69 65 2b 46 6c 6f 77 65 72 7c 4a 69 6d 2b 4e 69 67 68 74 73 68 61 64 65 7c 4a 6f 73 65 66 69 6e 2b 53 61 6e 73 7c 4a 6f Data Ascii: @import url("https://fonts.googleapis.com/css?family=Open+Sans\|Advent+Pro\|Arima+Madurai\|Arvo\|Averia+Serif+Libre\|Bad+Script\|Convergence\|Cormorant+Garamond\|Dancing+Script:700\|Dosis\|Droid+Sans\|Exo+2\|Fira+Sans\|Heebo\|Indie+Flower\|Jim+Nightshade\|Josefin+Sans\|Jo
2025-03-10 11:35:59 UTC	10077	IN	Data Raw: 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 70 72 65 76 69 65 77 2d 6d 73 67 2d 74 6f 6f 6c 74 69 70 3a 3a 61 66 74 65 72 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 31 30 30 25 3b 0a 20 20 2f 2a 20 41 74 20 74 68 65 20 74 6f 70 20 6f 66 20 74 68 65 20 74 6f 6f 6c 74 69 70 20 2a 2f 0a 20 20 72 69 67 68 74 3a 20 31 32 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 35 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 Data Ascii: cursor: pointer; background-repeat: no-repeat; background-position: center;}.preview-msg-tooltip::after { content: " "; position: absolute; bottom: 100%; /* At the top of the tooltip */ right: 12px; margin-left: -5px; border-width:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49719	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:35:59 UTC	722	OUT	GET /survey/assets/js/Anuglar_Survey_jquery.min.js?v=30052022 HTTP/1.1 Host: survey2.lamresearch.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data= Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oo\|Z87On
2025-03-10 11:35:59 UTC	404	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:35:59 GMT Content-Type: text/javascript Content-Length: 89501 Connection: close last-modified: Thu, 06 Mar 2025 13:16:26 GMT accept-ranges: bytes etag: "031d7f6998edb1:0" access-control-allow-origin: * access-control-allow-methods: GET,POST,OPTIONS access-control-allow-headers: Content-Type, soapaction strict-transport-security: max-age=31536000
2025-03-10 11:35:59 UTC	15980	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-10 11:35:59 UTC	16384	IN	Data Raw: 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 66 28 75 3d 5b 6d 3f 63 2e 66 69 72 73 74 43 68 69 6c 64 3a 63 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 6d 26 26 70 29 7b 64 3d 28 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 63 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: .toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&"nextSibling"}return!0}if(u=[m?c.firstChild:c.lastChild],m&&p){d=(s=(r=(i=(o=(a=c)[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-03-10 11:35:59 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 24 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 6d 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 3f 28 74 2e 63 61 6c 6c 28 65 2c 72 29 2c 74 3d 6e 75 6c 6c 29 3a 28 6c 3d 74 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 53 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b 2b 29 74 28 65 5b 73 5d 2c 6e 2c 61 3f 72 3a 72 2e 63 61 6c 6c 28 65 5b 73 5d Data Ascii: (e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,m(r)\|\|(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(S(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s]
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 3d 65 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 2c 66 3d 69 65 28 65 29 3b 69 66 28 21 28 79 2e 6e 6f 43 6c 6f 6e 65 43 68 65 63 6b 65 64 7c 7c 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 29 29 66 6f 72 28 61 3d 76 65 28 63 29 2c 72 3d 30 2c 69 3d 28 6f 3d 76 65 28 65 29 29 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 73 3d 6f 5b 72 5d 2c 75 3d 61 5b 72 5d 2c 76 6f 69 64 20 30 2c 22 69 6e 70 75 74 22 3d 3d 3d 28 6c 3d 75 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 70 65 2e 74 65 73 74 28 73 2e 74 79 70 65 29 3f 75 Data Ascii: ne:function(e,t,n){var r,i,o,a,s,u,l,c=e.cloneNode(!0),f=ie(e);if(!(y.noCloneChecked\|\|1!==e.nodeType&&11!==e.nodeType\|\|S.isXMLDoc(e)))for(a=ve(c),r=0,i=(o=ve(e)).length;r<i;r++)s=o[r],u=a[r],void 0,"input"===(l=u.nodeName.toLowerCase())&&pe.test(s.type)?u
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 6e 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 2c 74 74 2e 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2c 79 2e 63 68 65 63 6b 4f 6e 3d 22 22 21 3d 3d 74 74 2e 76 61 6c 75 65 2c 79 2e 6f 70 74 53 65 6c 65 63 74 65 64 3d 6e 74 2e 73 65 6c 65 63 74 65 64 2c 28 74 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 76 61 6c 75 65 3d 22 74 22 2c 74 74 2e 74 79 70 65 3d 22 72 61 64 69 6f 22 2c 79 2e 72 61 64 69 6f 56 61 6c 75 65 3d 22 74 22 3d 3d 3d 74 74 2e 76 61 6c 75 65 3b 76 61 72 20 63 74 2c 66 74 3d 53 2e 65 78 70 72 2e 61 74 74 72 48 61 6e 64 6c 65 3b 53 2e 66 6e 2e 65 Data Ascii: nt=E.createElement("select").appendChild(E.createElement("option")),tt.type="checkbox",y.checkOn=""!==tt.value,y.optSelected=nt.selected,(tt=E.createElement("input")).value="t",tt.type="radio",y.radioValue="t"===tt.value;var ct,ft=S.expr.attrHandle;S.fn.e
2025-03-10 11:36:00 UTC	7985	IN	Data Raw: 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 28 65 29 7d 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 65 29 7b 7d 7d 3b 76 61 72 20 42 74 3d 7b 30 3a 32 30 30 2c 31 32 32 33 3a 32 30 34 7d 2c 24 74 3d Data Ascii: dden=function(e){return!S.expr.pseudos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpRequest}catch(e){}};var Bt={0:200,1223:204},$t=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49716	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:35:59 UTC	708	OUT	GET /survey/assets/js/jquery-ui.min.js?ver=13.0 HTTP/1.1 Host: survey2.lamresearch.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data= Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oo\|Z87On
2025-03-10 11:35:59 UTC	405	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:35:59 GMT Content-Type: text/javascript Content-Length: 255079 Connection: close last-modified: Thu, 06 Mar 2025 13:16:26 GMT accept-ranges: bytes etag: "031d7f6998edb1:0" access-control-allow-origin: * access-control-allow-methods: GET,POST,OPTIONS access-control-allow-headers: Content-Type, soapaction strict-transport-security: max-age=31536000
2025-03-10 11:35:59 UTC	15979	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 32 2d 30 37 2d 31 36 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 66 6f 63 75 73 61 62 6c 65 2e 6a 73 2c 20 66 6f 72 6d 2d 72 65 73 65 74 2d 6d 69 78 69 6e 2e 6a 73 2c 20 6a 71 75 65 72 79 2d 70 61 74 63 68 2e 6a 73 2c 20 6b 65 79 63 6f 64 65 2e 6a 73 2c 20 6c 61 62 65 6c 73 2e 6a 73 2c 20 73 63 72 6f 6c 6c 2d 70 61 72 65 6e 74 2e 6a 73 2c 20 74 61 62 62 61 62 6c 65 2e 6a 73 2c 20 75 6e 69 71 75 65 2d 69 64 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 64 Data Ascii: /! jQuery UI - v1.13.2 - 2022-07-16 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/d
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 62 69 6c 69 74 79 22 29 3b 72 65 74 75 72 6e 22 76 69 73 69 62 6c 65 22 3d 3d 3d 65 7d 28 56 28 74 29 29 29 7d 2c 56 2e 65 78 74 65 6e 64 28 56 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2c 7b 66 6f 63 75 73 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 56 2e 75 69 2e 66 6f 63 75 73 61 62 6c 65 28 74 2c 6e 75 6c 6c 21 3d 56 2e 61 74 74 72 28 74 2c 22 74 61 62 69 6e 64 65 78 22 29 29 7d 7d 29 3b 76 61 72 20 65 2c 64 3b 56 2e 75 69 2e 66 6f 63 75 73 61 62 6c 65 2c 56 2e 66 6e 2e 5f 66 6f 72 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 5b 30 5d 2e 66 6f 72 6d 3f 74 68 69 73 2e 63 6c 6f 73 65 73 74 28 22 66 6f 72 6d 22 29 3a 56 28 74 68 69 73 5b 30 5d 2e 66 6f 72 Data Ascii: bility");return"visible"===e}(V(t)))},V.extend(V.expr.pseudos,{focusable:function(t){return V.ui.focusable(t,null!=V.attr(t,"tabindex"))}});var e,d;V.ui.focusable,V.fn._form=function(){return"string"==typeof this[0].form?this.closest("form"):V(this[0].for
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2e 6c 65 66 74 3e 3d 69 5b 30 5d 3f 74 2d 73 2e 67 72 69 64 5b 30 5d 3a 74 2b 73 2e 67 72 69 64 5b 30 5d 29 2c 22 79 22 3d 3d 3d 73 2e 61 78 69 73 26 26 28 6f 3d 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 50 61 67 65 58 29 2c 22 78 22 3d 3d 3d 73 2e 61 78 69 73 26 26 28 61 3d 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 50 61 67 65 59 29 29 2c 7b 74 6f 70 3a 61 2d 74 68 69 73 2e 6f 66 66 73 65 74 2e 63 6c 69 63 6b 2e 74 6f 70 2d 74 68 69 73 2e 6f 66 66 73 65 74 2e 72 65 6c 61 74 69 76 65 2e 74 6f 70 2d 74 68 69 73 2e 6f 66 66 73 65 74 2e 70 61 72 65 6e 74 2e 74 6f 70 2b 28 22 66 69 78 65 64 22 3d 3d 3d 74 68 69 73 2e 63 73 73 50 6f 73 69 74 69 6f 6e 3f 2d 74 68 69 73 2e 6f 66 66 73 65 74 2e 73 63 72 6f 6c 6c 2e 74 Data Ascii: this.offset.click.left>=i[0]?t-s.grid[0]:t+s.grid[0]),"y"===s.axis&&(o=this.originalPageX),"x"===s.axis&&(a=this.originalPageY)),{top:a-this.offset.click.top-this.offset.relative.top-this.offset.parent.top+("fixed"===this.cssPosition?-this.offset.scroll.t
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 72 65 73 69 7a 69 6e 67 7c 7c 28 69 2e 5f 61 64 64 43 6c 61 73 73 28 22 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 61 75 74 6f 68 69 64 65 22 29 2c 69 2e 5f 68 61 6e 64 6c 65 73 2e 68 69 64 65 28 29 29 7d 29 2c 74 68 69 73 2e 5f 6d 6f 75 73 65 49 6e 69 74 28 29 7d 2c 5f 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 6d 6f 75 73 65 44 65 73 74 72 6f 79 28 29 2c 74 68 69 73 2e 5f 61 64 64 65 64 48 61 6e 64 6c 65 73 2e 72 65 6d 6f 76 65 28 29 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 56 28 74 29 2e 72 65 6d 6f 76 65 44 61 74 61 28 22 72 65 73 69 7a 61 62 6c 65 22 29 2e 72 65 6d 6f 76 65 44 61 74 61 28 22 75 69 2d 72 65 73 69 7a 61 62 6c 65 22 29 2e 6f 66 66 28 22 2e 72 65 73 69 7a 61 62 6c 65 22 29 7d 76 61 72 20 65 3b 72 65 74 75 Data Ascii: resizing\|\|(i._addClass("ui-resizable-autohide"),i._handles.hide())}),this._mouseInit()},_destroy:function(){this._mouseDestroy(),this._addedHandles.remove();function t(t){V(t).removeData("resizable").removeData("ui-resizable").off(".resizable")}var e;retu
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 67 3a 6e 75 6c 6c 2c 73 74 61 72 74 3a 6e 75 6c 6c 2c 73 74 6f 70 3a 6e 75 6c 6c 2c 75 6e 73 65 6c 65 63 74 65 64 3a 6e 75 6c 6c 2c 75 6e 73 65 6c 65 63 74 69 6e 67 3a 6e 75 6c 6c 7d 2c 5f 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 22 75 69 2d 73 65 6c 65 63 74 61 62 6c 65 22 29 2c 74 68 69 73 2e 64 72 61 67 67 65 64 3d 21 31 2c 74 68 69 73 2e 72 65 66 72 65 73 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 65 6c 65 6d 65 6e 74 50 6f 73 3d 56 28 69 2e 65 6c 65 6d 65 6e 74 5b 30 5d 29 2e 6f 66 66 73 65 74 28 29 2c 69 2e 73 65 6c 65 63 74 65 65 73 3d 56 28 69 2e 6f 70 74 69 6f 6e 73 2e 66 69 6c 74 65 72 2c 69 2e 65 6c 65 6d 65 6e 74 5b 30 5d 29 2c 69 2e 5f 61 64 64 43 6c Data Ascii: g:null,start:null,stop:null,unselected:null,unselecting:null},_create:function(){var i=this;this._addClass("ui-selectable"),this.dragged=!1,this.refresh=function(){i.elementPos=V(i.element[0]).offset(),i.selectees=V(i.options.filter,i.element[0]),i._addCl
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 3c 3d 73 3b 73 2d 2d 29 65 3d 74 68 69 73 2e 69 74 65 6d 73 5b 73 5d 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 43 6f 6e 74 61 69 6e 65 72 26 26 65 2e 69 6e 73 74 61 6e 63 65 21 3d 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 43 6f 6e 74 61 69 6e 65 72 26 26 65 2e 69 74 65 6d 5b 30 5d 21 3d 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 49 74 65 6d 5b 30 5d 7c 7c 28 69 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 6f 6c 65 72 61 6e 63 65 45 6c 65 6d 65 6e 74 3f 56 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 6f 6c 65 72 61 6e 63 65 45 6c 65 6d 65 6e 74 2c 65 2e 69 74 65 6d 29 3a 65 2e 69 74 65 6d 2c 74 7c 7c 28 65 2e 77 69 64 74 68 3d 69 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 65 2e 68 65 69 67 68 74 3d 69 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 29 2c 69 3d 69 2e 6f 66 Data Ascii: <=s;s--)e=this.items[s],this.currentContainer&&e.instance!==this.currentContainer&&e.item[0]!==this.currentItem[0]\|\|(i=this.options.toleranceElement?V(this.options.toleranceElement,e.item):e.item,t\|\|(e.width=i.outerWidth(),e.height=i.outerHeight()),i=i.of
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 6f 70 74 69 6f 6e 73 2e 68 65 61 64 65 72 29 2c 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 68 65 61 64 65 72 73 2c 22 75 69 2d 61 63 63 6f 72 64 69 6f 6e 2d 68 65 61 64 65 72 20 75 69 2d 61 63 63 6f 72 64 69 6f 6e 2d 68 65 61 64 65 72 2d 63 6f 6c 6c 61 70 73 65 64 22 2c 22 75 69 2d 73 74 61 74 65 2d 64 65 66 61 75 6c 74 22 29 2c 74 68 69 73 2e 70 61 6e 65 6c 73 3d 74 68 69 73 2e 68 65 61 64 65 72 73 2e 6e 65 78 74 28 29 2e 66 69 6c 74 65 72 28 22 3a 6e 6f 74 28 2e 75 69 2d 61 63 63 6f 72 64 69 6f 6e 2d 63 6f 6e 74 65 6e 74 2d 61 63 74 69 76 65 29 22 29 2e 68 69 64 65 28 29 2c 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 70 61 6e 65 6c 73 2c 22 75 69 2d 61 63 63 6f 72 64 69 6f 6e 2d 63 6f 6e 74 65 6e 74 22 2c 22 75 69 2d 68 Data Ascii: options.header),this._addClass(this.headers,"ui-accordion-header ui-accordion-header-collapsed","ui-state-default"),this.panels=this.headers.next().filter(":not(.ui-accordion-content-active)").hide(),this._addClass(this.panels,"ui-accordion-content","ui-h
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 6e 28 29 7b 74 68 69 73 2e 73 65 6c 65 63 74 65 64 49 74 65 6d 3d 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 3d 74 68 69 73 2e 5f 76 61 6c 75 65 28 29 7d 2c 62 6c 75 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 73 65 61 72 63 68 69 6e 67 29 2c 74 68 69 73 2e 63 6c 6f 73 65 28 74 29 2c 74 68 69 73 2e 5f 63 68 61 6e 67 65 28 74 29 7d 7d 29 2c 74 68 69 73 2e 5f 69 6e 69 74 53 6f 75 72 63 65 28 29 2c 74 68 69 73 2e 6d 65 6e 75 3d 56 28 22 3c 75 6c 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 74 68 69 73 2e 5f 61 70 70 65 6e 64 54 6f 28 29 29 2e 6d 65 6e 75 28 7b 72 6f 6c 65 3a 6e 75 6c 6c 7d 29 2e 68 69 64 65 28 29 2e 61 74 74 72 28 7b 75 6e 73 65 6c 65 63 74 61 62 6c 65 3a 22 6f 6e 22 7d 29 2e 6d 65 6e Data Ascii: n(){this.selectedItem=null,this.previous=this._value()},blur:function(t){clearTimeout(this.searching),this.close(t),this._change(t)}}),this._initSource(),this.menu=V("<ul>").appendTo(this._appendTo()).menu({role:null}).hide().attr({unselectable:"on"}).men
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 69 73 2e 69 63 6f 6e 2c 6e 75 6c 6c 2c 22 75 69 2d 77 69 64 67 65 74 2d 69 63 6f 6e 2d 62 6c 6f 63 6b 22 29 2c 74 68 69 73 2e 69 63 6f 6e 53 70 61 63 65 26 26 74 68 69 73 2e 69 63 6f 6e 53 70 61 63 65 2e 72 65 6d 6f 76 65 28 29 29 3a 28 74 68 69 73 2e 69 63 6f 6e 53 70 61 63 65 7c 7c 28 74 68 69 73 2e 69 63 6f 6e 53 70 61 63 65 3d 56 28 22 3c 73 70 61 6e 3e 20 3c 2f 73 70 61 6e 3e 22 29 2c 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 69 63 6f 6e 53 70 61 63 65 2c 22 75 69 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 73 70 61 63 65 22 29 29 2c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 69 63 6f 6e 2c 6e 75 6c 6c 2c 22 75 69 2d 77 69 67 65 74 2d 69 63 6f 6e 2d 62 6c 6f 63 6b 22 29 2c 74 68 69 73 2e 5f 61 74 74 61 63 68 49 Data Ascii: is.icon,null,"ui-widget-icon-block"),this.iconSpace&&this.iconSpace.remove()):(this.iconSpace\|\|(this.iconSpace=V("<span> </span>"),this._addClass(this.iconSpace,"ui-button-icon-space")),this._removeClass(this.icon,null,"ui-wiget-icon-block"),this._attachI
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 76 61 6c 28 29 3a 6e 75 6c 6c 2c 56 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 67 65 74 46 6f 72 6d 61 74 43 6f 6e 66 69 67 28 74 29 29 26 26 28 56 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 73 65 74 44 61 74 65 46 72 6f 6d 46 69 65 6c 64 28 74 29 2c 56 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 75 70 64 61 74 65 41 6c 74 65 72 6e 61 74 65 28 74 29 2c 56 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 75 70 64 61 74 65 44 61 74 65 70 69 63 6b 65 72 28 74 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 21 30 7d 2c 5f 73 68 6f 77 44 61 74 65 70 69 63 6b 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 2c 73 2c 6e 3b 22 69 6e 70 75 74 22 21 3d 3d 28 74 3d 74 2e 74 61 72 67 65 74 7c 7c 74 29 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 Data Ascii: val():null,V.datepicker._getFormatConfig(t))&&(V.datepicker._setDateFromField(t),V.datepicker._updateAlternate(t),V.datepicker._updateDatepicker(t))}catch(t){}return!0},_showDatepicker:function(t){var e,i,s,n;"input"!==(t=t.target\|\|t).nodeName.toLowerCase

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49722	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:35:59 UTC	727	OUT	GET /survey/assets/js/Survey_jquery.ui.touch-punch.min.js?ver=13.0 HTTP/1.1 Host: survey2.lamresearch.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data= Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oo\|Z87On
2025-03-10 11:35:59 UTC	403	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:35:59 GMT Content-Type: text/javascript Content-Length: 5074 Connection: close last-modified: Thu, 06 Mar 2025 13:16:26 GMT accept-ranges: bytes etag: "031d7f6998edb1:0" access-control-allow-origin: * access-control-allow-methods: GET,POST,OPTIONS access-control-allow-headers: Content-Type, soapaction strict-transport-security: max-age=31536000
2025-03-10 11:35:59 UTC	5074	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 54 6f 75 63 68 20 50 75 6e 63 68 20 30 2e 32 2e 33 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 e2 80 93 32 30 31 34 2c 20 44 61 76 65 20 46 75 72 66 65 72 6f 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6f 72 20 47 50 4c 20 56 65 72 73 69 6f 6e 20 32 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 0a 20 2a 20 44 65 70 65 6e 64 73 3a 0a 20 2a 20 20 6a 71 75 65 72 79 2e 75 69 2e 77 69 64 67 65 74 2e 6a 73 0a 20 2a 20 20 6a 71 75 65 72 79 2e 75 69 2e 6d 6f 75 73 65 2e 6a 73 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0a 0a 20 20 2f 2f 20 44 65 74 65 63 74 20 74 6f 75 63 68 20 73 75 70 70 6f 72 74 0a 20 20 24 2e 73 75 70 70 6f 72 74 Data Ascii: /! jQuery UI Touch Punch 0.2.3 * * Copyright 20112014, Dave Furfero * Dual licensed under the MIT or GPL Version 2 licenses. * * Depends: * jquery.ui.widget.js * jquery.ui.mouse.js */(function ($) { // Detect touch support $.support

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49718	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:35:59 UTC	704	OUT	GET /survey/assets/js/common-footer-load.js HTTP/1.1 Host: survey2.lamresearch.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data= Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oo\|Z87On
2025-03-10 11:35:59 UTC	403	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:35:59 GMT Content-Type: text/javascript Content-Length: 6923 Connection: close last-modified: Thu, 06 Mar 2025 13:16:26 GMT accept-ranges: bytes etag: "031d7f6998edb1:0" access-control-allow-origin: * access-control-allow-methods: GET,POST,OPTIONS access-control-allow-headers: Content-Type, soapaction strict-transport-security: max-age=31536000
2025-03-10 11:35:59 UTC	6923	IN	Data Raw: ef bb bf 6c 65 74 20 71 53 74 72 69 70 43 6f 6c 6f 72 20 3d 20 22 22 3b 0a 6c 65 74 20 6c 61 6e 67 49 44 3b 0a 6c 61 6e 67 49 44 20 3d 20 6c 61 6e 67 49 44 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 73 65 74 50 72 65 76 69 65 77 57 69 6e 64 6f 77 28 29 20 7b 0a 20 20 24 28 22 2e 50 72 65 76 69 65 77 42 47 69 6d 61 67 65 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 50 72 65 76 69 65 77 42 47 69 6d 61 67 65 22 29 3b 0a 20 20 24 28 22 2e 50 72 65 76 69 65 77 42 47 57 68 69 74 65 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 50 72 65 76 69 65 77 42 47 57 68 69 74 65 22 29 3b 0a 20 20 6c 65 74 20 70 67 70 72 65 76 20 3d 20 22 22 3b 0a 20 20 69 66 20 28 70 67 70 72 65 76 20 3d 3d 20 22 54 72 75 65 22 29 20 7b 0a 20 20 20 20 24 28 22 2e 77 61 72 6e 63 6f 6e 74 22 Data Ascii: let qStripColor = "";let langID;langID = langID;function setPreviewWindow() { $(".PreviewBGimage").removeClass("PreviewBGimage"); $(".PreviewBGWhite").removeClass("PreviewBGWhite"); let pgprev = ""; if (pgprev == "True") { $(".warncont"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49724	51.195.65.78	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:35:59 UTC	610	OUT	GET /survey/runtime.dd6dfe5156a9cc96.js HTTP/1.1 Host: cdnsurvey.sogolytics.com Connection: keep-alive Origin: https://survey2.lamresearch.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://survey2.lamresearch.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 11:36:00 UTC	662	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 10 Mar 2025 11:36:00 GMT Content-Type: text/javascript Content-Length: 1144 Connection: close last-modified: Thu, 06 Mar 2025 13:16:22 GMT etag: "0d774f4998edb1:0" access-control-allow-origin: * access-control-allow-methods: GET,POST,OPTIONS access-control-allow-headers: Content-Type, soapaction set-cookie: ;SameSite=None; secure strict-transport-security: max-age=31536000 set-cookie: SERVERpart=parts-1\|Z87Oo\|Z87Oo; path=/; HttpOnly; Secure cache-control: private X-Age: 443448 X-Cache: MISS X-Storage: 809596973:8001 Accept-Ranges: bytes X-Edge-IP: 51.195.65.78 X-Edge-Location: Frankfurt, DE
2025-03-10 11:36:00 UTC	1144	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 76 3d 7b 7d 2c 70 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 61 3d 70 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 29 72 65 74 75 72 6e 20 61 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 70 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 76 5b 65 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 72 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 76 2c 65 3d 5b 5d 2c 6e 2e 4f 3d 28 61 2c 72 2c 63 2c 66 29 3d 3e 7b 69 66 28 21 72 29 7b 76 61 72 20 75 3d 31 2f 30 3b 66 6f 72 28 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 66 6f 72 28 76 61 72 5b 72 2c 63 2c 66 5d 3d 65 5b 74 5d 2c Data Ascii: (()=>{"use strict";var e,v={},p={};function n(e){var a=p[e];if(void 0!==a)return a.exports;var r=p[e]={exports:{}};return v[e].call(r.exports,r,r.exports,n),r.exports}n.m=v,e=[],n.O=(a,r,c,f)=>{if(!r){var u=1/0;for(t=0;t<e.length;t++){for(var[r,c,f]=e[t],

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49725	51.195.65.78	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:35:59 UTC	612	OUT	GET /survey/polyfills.4fd5dd0566825918.js HTTP/1.1 Host: cdnsurvey.sogolytics.com Connection: keep-alive Origin: https://survey2.lamresearch.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://survey2.lamresearch.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 11:36:00 UTC	568	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 10 Mar 2025 11:36:00 GMT Content-Type: text/javascript Content-Length: 194441 Connection: close last-modified: Thu, 06 Mar 2025 13:16:22 GMT etag: "0d774f4998edb1:0" access-control-allow-origin: * access-control-allow-methods: GET,POST,OPTIONS access-control-allow-headers: Content-Type, soapaction set-cookie: ;SameSite=None; secure strict-transport-security: max-age=31536000 X-Age: 97969 X-Cache: HIT X-Storage: 809596973:8001 Accept-Ranges: bytes X-Edge-IP: 51.195.65.78 X-Edge-Location: Frankfurt, DE
2025-03-10 11:36:00 UTC	15816	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 50 61 72 74 69 63 69 70 61 74 69 6f 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 50 61 72 74 69 63 69 70 61 74 69 6f 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 32 39 5d 2c 7b 37 34 33 35 3a 28 64 2c 50 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 28 36 35 38 38 29 2c 6e 28 34 39 39 29 2c 6e 28 37 33 39 38 29 2c 6e 28 34 35 39 32 29 2c 6e 28 37 35 34 33 29 2c 6e 28 37 35 30 30 29 2c 6e 28 37 30 33 30 29 2c 6e 28 31 38 35 38 29 2c 6e 28 32 35 32 32 29 2c 6e 28 37 39 35 39 29 2c 6e 28 35 34 38 34 29 2c 6e 28 37 37 39 34 29 2c 6e 28 31 34 31 38 29 2c 6e 28 39 35 39 30 29 2c 6e 28 34 31 30 30 29 2c 6e 28 36 39 34 36 29 2c 6e 28 39 35 36 34 29 2c 6e 28 33 34 38 34 29 2c 77 69 6e Data Ascii: (self.webpackChunkParticipation=self.webpackChunkParticipation\|\|[]).push([[429],{7435:(d,P,n)=>{"use strict";n(6588),n(499),n(7398),n(4592),n(7543),n(7500),n(7030),n(1858),n(2522),n(7959),n(5484),n(7794),n(1418),n(9590),n(4100),n(6946),n(9564),n(3484),win
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 65 2c 44 3d 21 28 22 6e 77 22 69 6e 20 53 29 26 26 76 6f 69 64 20 30 21 3d 3d 53 2e 70 72 6f 63 65 73 73 26 26 22 5b 6f 62 6a 65 63 74 20 70 72 6f 63 65 73 73 5d 22 3d 3d 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 53 2e 70 72 6f 63 65 73 73 29 2c 6a 3d 21 44 26 26 21 4e 26 26 21 28 21 4f 7c 7c 21 45 2e 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 2c 46 3d 76 6f 69 64 20 30 21 3d 3d 53 2e 70 72 6f 63 65 73 73 26 26 22 5b 6f 62 6a 65 63 74 20 70 72 6f 63 65 73 73 5d 22 3d 3d 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 53 2e 70 72 6f 63 65 73 73 29 26 26 21 4e 26 26 21 28 21 4f 7c 7c 21 45 2e 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 2c 42 3d 7b 7d 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 41 29 7b 69 66 28 41 3d 41 7c 7c 53 2e 65 76 65 6e 74 29 7b 76 61 72 Data Ascii: e,D=!("nw"in S)&&void 0!==S.process&&"[object process]"==={}.toString.call(S.process),j=!D&&!N&&!(!O\|\|!E.HTMLElement),F=void 0!==S.process&&"[object process]"==={}.toString.call(S.process)&&!N&&!(!O\|\|!E.HTMLElement),B={},G=function(A){if(A=A\|\|S.event){var
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 5d 29 7b 76 61 72 20 6b 3d 41 5b 7a 5d 3d 41 5b 57 5d 3b 41 5b 57 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 74 2c 45 74 2c 70 74 29 7b 72 65 74 75 72 6e 20 45 74 26 26 45 74 2e 70 72 6f 74 6f 74 79 70 65 26 26 56 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 76 74 29 7b 76 61 72 20 78 74 3d 22 22 2e 63 6f 6e 63 61 74 28 24 2c 22 2e 22 29 2e 63 6f 6e 63 61 74 28 57 2c 22 3a 3a 22 29 2b 76 74 2c 4f 74 3d 45 74 2e 70 72 6f 74 6f 74 79 70 65 3b 74 72 79 7b 69 66 28 4f 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 76 74 29 29 7b 76 61 72 20 42 74 3d 54 2e 4f 62 6a 65 63 74 47 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 4f 74 2c 76 74 29 3b 42 74 26 26 42 74 2e 76 61 6c 75 65 3f 28 42 74 2e 76 61 6c 75 65 3d 54 2e 77 72 61 70 Data Ascii: ]){var k=A[z]=A[W];A[W]=function(nt,Et,pt){return Et&&Et.prototype&&V.forEach(function(vt){var xt="".concat($,".").concat(W,"::")+vt,Ot=Et.prototype;try{if(Ot.hasOwnProperty(vt)){var Bt=T.ObjectGetOwnPropertyDescriptor(Ot,vt);Bt&&Bt.value?(Bt.value=T.wrap
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 44 74 5b 6b 5d 2c 69 73 50 65 72 69 6f 64 69 63 3a 21 31 2c 61 72 67 73 3a 41 74 2c 61 62 6f 72 74 65 64 3a 21 31 7d 2c 66 72 3d 70 28 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2e 73 65 6e 64 22 2c 62 2c 55 74 2c 68 74 2c 50 74 29 3b 44 74 26 26 21 30 3d 3d 3d 44 74 5b 6e 74 5d 26 26 21 55 74 2e 61 62 6f 72 74 65 64 26 26 66 72 2e 73 74 61 74 65 3d 3d 3d 4a 26 26 66 72 2e 69 6e 76 6f 6b 65 28 29 7d 7d 29 2c 46 74 3d 67 74 28 78 74 2c 22 61 62 6f 72 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 44 74 2c 41 74 29 7b 76 61 72 20 55 74 3d 66 75 6e 63 74 69 6f 6e 20 4f 74 28 44 74 29 7b 72 65 74 75 72 6e 20 44 74 5b 24 5d 7d 28 44 74 29 3b 69 66 28 55 74 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 55 Data Ascii: Dt[k],isPeriodic:!1,args:At,aborted:!1},fr=p("XMLHttpRequest.send",b,Ut,ht,Pt);Dt&&!0===Dt[nt]&&!Ut.aborted&&fr.state===J&&fr.invoke()}}),Ft=gt(xt,"abort",function(){return function(Dt,At){var Ut=function Ot(Dt){return Dt[$]}(Dt);if(Ut&&"string"==typeof U
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 3d 74 28 35 29 28 22 73 70 65 63 69 65 73 22 29 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 76 61 72 20 6c 3d 72 5b 73 5d 3b 69 26 26 6c 26 26 21 6c 5b 65 5d 26 26 6f 2e 66 28 6c 2c 65 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 75 29 7b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6f 2c 69 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 72 29 7c 7c 69 21 3d 3d 76 26 26 69 20 69 6e 20 74 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 6f 2b 22 3a 20 69 6e 63 6f 72 72 65 63 74 20 69 6e 76 6f 63 61 74 69 6f 6e 21 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 Data Ascii: =t(5)("species");a.exports=function(s){var l=r[s];i&&l&&!l[e]&&o.f(l,e,{configurable:!0,get:function(){return this}})}},function(a,u){a.exports=function(t,r,o,i){if(!(t instanceof r)\|\|i!==v&&i in t)throw TypeError(o+": incorrect invocation!");return t}},f
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 28 51 29 7b 76 61 72 20 64 74 3d 61 72 28 74 68 69 73 2c 32 2c 51 2c 61 72 67 75 6d 65 6e 74 73 5b 31 5d 29 3b 72 65 74 75 72 6e 28 64 74 5b 31 5d 3c 3c 38 7c 64 74 5b 30 5d 29 3c 3c 31 36 3e 3e 31 36 7d 2c 67 65 74 55 69 6e 74 31 36 3a 66 75 6e 63 74 69 6f 6e 28 51 29 7b 76 61 72 20 64 74 3d 61 72 28 74 68 69 73 2c 32 2c 51 2c 61 72 67 75 6d 65 6e 74 73 5b 31 5d 29 3b 72 65 74 75 72 6e 20 64 74 5b 31 5d 3c 3c 38 7c 64 74 5b 30 5d 7d 2c 67 65 74 49 6e 74 33 32 3a 66 75 6e 63 74 69 6f 6e 28 51 29 7b 72 65 74 75 72 6e 20 7a 74 28 61 72 28 74 68 69 73 2c 34 2c 51 2c 61 72 67 75 6d 65 6e 74 73 5b 31 5d 29 29 7d 2c 67 65 74 55 69 6e 74 33 32 3a 66 75 6e 63 74 69 6f 6e 28 51 29 7b 72 65 74 75 72 6e 20 7a 74 28 61 72 28 74 68 69 73 2c 34 2c 51 2c 61 72 67 75 6d Data Ascii: (Q){var dt=ar(this,2,Q,arguments[1]);return(dt[1]<<8\|dt[0])<<16>>16},getUint16:function(Q){var dt=ar(this,2,Q,arguments[1]);return dt[1]<<8\|dt[0]},getInt32:function(Q){return zt(ar(this,4,Q,arguments[1]))},getUint32:function(Q){return zt(ar(this,4,Q,argum
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 20 69 26 26 72 28 73 29 3f 69 28 6f 28 73 29 29 3a 73 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 75 2c 74 29 7b 76 61 72 20 72 3d 74 28 34 29 3b 74 28 32 34 29 28 22 69 73 46 72 6f 7a 65 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 72 28 65 29 7c 7c 21 21 6f 26 26 6f 28 65 29 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 75 2c 74 29 7b 76 61 72 20 72 3d 74 28 34 29 3b 74 28 32 34 29 28 22 69 73 53 65 61 6c 65 64 22 2c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 72 28 65 29 7c 7c 21 21 6f 26 26 6f 28 65 29 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c Data Ascii: unction(s){return i&&r(s)?i(o(s)):s}})},function(a,u,t){var r=t(4);t(24)("isFrozen",function(o){return function(e){return!r(e)\|\|!!o&&o(e)}})},function(a,u,t){var r=t(4);t(24)("isSealed",function(o){return function(e){return!r(e)\|\|!!o&&o(e)}})},function(a,
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 73 6c 69 63 65 28 47 29 3b 63 61 73 65 22 3c 22 3a 67 74 3d 46 5b 6f 74 2e 73 6c 69 63 65 28 31 2c 2d 31 29 5d 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 76 61 72 20 49 74 3d 2b 6f 74 3b 69 66 28 30 3d 3d 3d 49 74 29 72 65 74 75 72 6e 20 5f 3b 69 66 28 49 74 3e 4b 29 7b 76 61 72 20 66 74 3d 67 28 49 74 2f 31 30 29 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 66 74 3f 5f 3a 66 74 3c 3d 4b 3f 6a 5b 66 74 2d 31 5d 3d 3d 3d 76 3f 6f 74 2e 63 68 61 72 41 74 28 31 29 3a 6a 5b 66 74 2d 31 5d 2b 6f 74 2e 63 68 61 72 41 74 28 31 29 3a 5f 7d 67 74 3d 6a 5b 49 74 2d 31 5d 7d 72 65 74 75 72 6e 20 67 74 3d 3d 3d 76 3f 22 22 3a 67 74 7d 29 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 75 2c 74 29 7b 76 61 72 20 72 3d 74 28 31 29 2c 6f 3d 74 28 39 39 29 2c 69 3d 74 28 35 38 Data Ascii: slice(G);case"<":gt=F[ot.slice(1,-1)];break;default:var It=+ot;if(0===It)return _;if(It>K){var ft=g(It/10);return 0===ft?_:ft<=K?j[ft-1]===v?ot.charAt(1):j[ft-1]+ot.charAt(1):_}gt=j[It-1]}return gt===v?"":gt})}})},function(a,u,t){var r=t(1),o=t(99),i=t(58
2025-03-10 11:36:01 UTC	16384	IN	Data Raw: 29 7b 76 61 72 20 72 3d 74 28 30 29 2c 6f 3d 4d 61 74 68 2e 50 49 2f 31 38 30 3b 72 28 72 2e 53 2c 22 4d 61 74 68 22 2c 7b 72 61 64 69 61 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2a 6f 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 75 2c 74 29 7b 76 61 72 20 72 3d 74 28 30 29 3b 72 28 72 2e 53 2c 22 4d 61 74 68 22 2c 7b 73 63 61 6c 65 3a 74 28 31 32 38 29 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 75 2c 74 29 7b 76 61 72 20 72 3d 74 28 30 29 3b 72 28 72 2e 53 2c 22 4d 61 74 68 22 2c 7b 75 6d 75 6c 68 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 65 29 7b 76 61 72 20 73 3d 36 35 35 33 35 2c 6c 3d 2b 69 2c 63 3d 2b 65 2c 6d 3d 6c 26 73 2c 67 3d 63 26 73 2c 70 3d 6c 3e 3e 3e 31 36 2c 78 3d 63 3e 3e 3e 31 36 2c 4f 3d 28 70 2a 67 3e 3e 3e Data Ascii: ){var r=t(0),o=Math.PI/180;r(r.S,"Math",{radians:function(e){return eo}})},function(a,u,t){var r=t(0);r(r.S,"Math",{scale:t(128)})},function(a,u,t){var r=t(0);r(r.S,"Math",{umulh:function(i,e){var s=65535,l=+i,c=+e,m=l&s,g=c&s,p=l>>>16,x=c>>>16,O=(pg>>>
2025-03-10 11:36:01 UTC	16384	IN	Data Raw: 28 33 34 39 34 29 2c 79 3d 6e 28 34 31 34 33 29 3b 64 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 76 29 7b 76 61 72 20 61 3d 66 28 76 29 2c 75 3d 68 2e 66 3b 69 66 28 75 29 66 6f 72 28 76 61 72 20 69 2c 74 3d 75 28 76 29 2c 72 3d 79 2e 66 2c 6f 3d 30 3b 74 2e 6c 65 6e 67 74 68 3e 6f 3b 29 72 2e 63 61 6c 6c 28 76 2c 69 3d 74 5b 6f 2b 2b 5d 29 26 26 61 2e 70 75 73 68 28 69 29 3b 72 65 74 75 72 6e 20 61 7d 7d 2c 31 39 39 32 3a 28 64 2c 50 2c 6e 29 3d 3e 7b 76 61 72 20 66 3d 6e 28 36 38 36 34 29 2c 68 3d 6e 28 34 39 30 33 29 2c 79 3d 6e 28 36 34 35 34 29 2c 76 3d 6e 28 34 37 30 29 2c 61 3d 6e 28 39 35 32 32 29 2c 75 3d 22 70 72 6f 74 6f 74 79 70 65 22 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 2c 69 29 7b 76 61 72 20 4f 2c 45 2c 53 2c 49 2c 65 3d Data Ascii: (3494),y=n(4143);d.exports=function(v){var a=f(v),u=h.f;if(u)for(var i,t=u(v),r=y.f,o=0;t.length>o;)r.call(v,i=t[o++])&&a.push(i);return a}},1992:(d,P,n)=>{var f=n(6864),h=n(4903),y=n(6454),v=n(470),a=n(9522),u="prototype",t=function(r,o,i){var O,E,S,I,e=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49726	51.195.65.78	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:35:59 UTC	607	OUT	GET /survey/main.e6566a6add498115.js HTTP/1.1 Host: cdnsurvey.sogolytics.com Connection: keep-alive Origin: https://survey2.lamresearch.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://survey2.lamresearch.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 11:36:00 UTC	570	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 10 Mar 2025 11:36:00 GMT Content-Type: text/javascript Content-Length: 2233870 Connection: close last-modified: Thu, 06 Mar 2025 11:37:08 GMT etag: "98d7cd178c8edb1:0" access-control-allow-origin: * access-control-allow-methods: GET,POST,OPTIONS access-control-allow-headers: Content-Type, soapaction set-cookie: ;SameSite=None; secure strict-transport-security: max-age=31536000 X-Age: 97969 X-Cache: HIT X-Storage: 809596973:8001 Accept-Ranges: bytes X-Edge-IP: 51.195.65.78 X-Edge-Location: Frankfurt, DE
2025-03-10 11:36:00 UTC	15814	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 50 61 72 74 69 63 69 70 61 74 69 6f 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 50 61 72 74 69 63 69 70 61 74 69 6f 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 39 39 37 3a 28 72 74 2c 6b 74 2c 4a 65 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 74 28 69 29 7b 72 65 74 75 72 6e 28 74 74 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 7d 29 28 69 29 7d 66 75 6e 63 74 69 Data Ascii: (self.webpackChunkParticipation=self.webpackChunkParticipation\|\|[]).push([[179],{997:(rt,kt,Je)=>{"use strict";function tt(i){return(tt=Object.setPrototypeOf?Object.getPrototypeOf.bind():function(e){return e.__proto__\|\|Object.getPrototypeOf(e)})(i)}functi
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 3d 3d 3d 71 6e 29 7b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 62 72 29 74 68 72 6f 77 20 41 77 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 66 6f 72 28 50 69 2e 6d 65 74 68 6f 64 3d 62 72 2c 50 69 2e 61 72 67 3d 41 77 3b 3b 29 7b 76 61 72 20 54 77 3d 50 69 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 54 77 29 7b 76 61 72 20 4d 76 3d 65 74 28 54 77 2c 50 69 29 3b 69 66 28 4d 76 29 7b 69 66 28 4d 76 3d 3d 3d 67 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 4d 76 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 50 69 2e 6d 65 74 68 6f 64 29 50 69 2e 73 65 6e 74 3d 50 69 2e 5f 73 65 6e 74 3d 50 69 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 50 69 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 Data Ascii: ===qn){if("throw"===br)throw Aw;return{value:void 0,done:!0}}for(Pi.method=br,Pi.arg=Aw;;){var Tw=Pi.delegate;if(Tw){var Mv=et(Tw,Pi);if(Mv){if(Mv===g)continue;return Mv}}if("next"===Pi.method)Pi.sent=Pi._sent=Pi.arg;else if("throw"===Pi.method){if("suspe
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 7d 28 29 2c 5a 61 3d 7b 7d 2c 49 69 3d 5b 5d 2c 24 75 3d 42 69 28 7b 5c 75 30 32 37 35 63 6d 70 3a 42 69 7d 29 2c 72 70 3d 42 69 28 7b 5c 75 30 32 37 35 64 69 72 3a 42 69 7d 29 2c 61 70 3d 42 69 28 7b 5c 75 30 32 37 35 70 69 70 65 3a 42 69 7d 29 2c 4e 76 3d 42 69 28 7b 5c 75 30 32 37 35 6d 6f 64 3a 42 69 7d 29 2c 53 72 3d 42 69 28 7b 5c 75 30 32 37 35 66 61 63 3a 42 69 7d Data Ascii: "!=typeof window&&window\|\|"undefined"!=typeof self&&"undefined"!=typeof WorkerGlobalScope&&self instanceof WorkerGlobalScope&&self}(),Za={},Ii=[],$u=Bi({\u0275cmp:Bi}),rp=Bi({\u0275dir:Bi}),ap=Bi({\u0275pipe:Bi}),Nv=Bi({\u0275mod:Bi}),Sr=Bi({\u0275fac:Bi}
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 20 22 29 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 29 7b 76 61 72 20 72 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 73 29 69 66 28 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 29 7b 76 61 72 20 6f 3d 73 5b 61 5d 3b 72 2e 70 75 73 68 28 61 2b 22 3a 22 2b 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6f 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6f 29 3a 24 69 28 6f 29 29 29 7d 6e 3d 22 7b 22 2e 63 6f 6e 63 61 74 28 72 2e 6a 6f 69 6e 28 22 2c 20 22 29 2c 22 7d 22 29 7d 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 65 29 2e 63 6f 6e 63 61 74 28 74 3f 22 28 22 2b 74 2b 22 29 22 3a 22 22 2c 22 5b 22 29 2e 63 6f 6e 63 61 74 28 6e 2c 22 5d 3a 20 22 29 2e 63 6f 6e 63 61 74 28 69 2e 72 65 70 Data Ascii: ");else if("object"==typeof s){var r=[];for(var a in s)if(s.hasOwnProperty(a)){var o=s[a];r.push(a+":"+("string"==typeof o?JSON.stringify(o):$i(o)))}n="{".concat(r.join(", "),"}")}return"".concat(e).concat(t?"("+t+")":"","[").concat(n,"]: ").concat(i.rep
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 67 65 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 44 6c 2c 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 75 69 2e 44 65 66 61 75 6c 74 3b 74 68 69 73 2e 61 73 73 65 72 74 4e 6f 74 44 65 73 74 72 6f 79 65 64 28 29 3b 76 61 72 20 6f 3d 67 6f 28 74 68 69 73 29 2c 6c 3d 41 73 28 76 6f 69 64 20 30 29 3b 74 72 79 7b 69 66 28 21 28 61 26 75 69 2e 53 6b 69 70 53 65 6c 66 29 29 7b 76 61 72 20 70 3d 74 68 69 73 2e 72 65 63 6f 72 64 73 2e 67 65 Data Ascii: get",value:function(n){var r=arguments.length>1&&void 0!==arguments[1]?arguments[1]:Dl,a=arguments.length>2&&void 0!==arguments[2]?arguments[2]:ui.Default;this.assertNotDestroyed();var o=go(this),l=As(void 0);try{if(!(a&ui.SkipSelf)){var p=this.records.ge
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 72 6e 20 65 2e 6d 65 72 67 65 64 41 74 74 72 73 3d 5a 75 28 65 2e 6d 65 72 67 65 64 41 74 74 72 73 2c 65 2e 61 74 74 72 73 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 68 30 28 69 2c 73 2c 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 61 3d 72 2e 68 6f 73 74 42 69 6e 64 69 6e 67 73 3b 69 66 28 61 29 7b 76 61 72 20 6f 3d 69 2e 68 6f 73 74 42 69 6e 64 69 6e 67 4f 70 43 6f 64 65 73 3b 6e 75 6c 6c 3d 3d 3d 6f 26 26 28 6f 3d 69 2e 68 6f 73 74 42 69 6e 64 69 6e 67 4f 70 43 6f 64 65 73 3d 5b 5d 29 3b 76 61 72 20 6c 3d 7e 73 2e 69 6e 64 65 78 3b 28 66 75 6e 63 74 69 6f 6e 20 4b 54 28 69 29 7b 66 6f 72 28 76 61 72 20 73 3d 69 2e 6c 65 6e 67 74 68 3b 73 3e 30 3b 29 7b 76 61 72 20 65 3d 69 5b 2d 2d 73 5d 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 Data Ascii: rn e.mergedAttrs=Zu(e.mergedAttrs,e.attrs),n}function h0(i,s,e,t,n,r){var a=r.hostBindings;if(a){var o=i.hostBindingOpCodes;null===o&&(o=i.hostBindingOpCodes=[]);var l=~s.index;(function KT(i){for(var s=i.length;s>0;){var e=i[--s];if("number"==typeof e&&e
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 72 43 6f 64 65 41 74 28 73 29 3e 33 32 3b 29 73 2b 2b 3b 72 65 74 75 72 6e 20 73 7d 28 69 2c 54 6e 2e 6b 65 79 3d 73 2c 65 29 2c 52 6f 28 69 2c 73 2c 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 52 6f 28 69 2c 73 2c 65 29 7b 66 6f 72 28 3b 73 3c 65 26 26 69 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 3c 3d 33 32 3b 29 73 2b 2b 3b 72 65 74 75 72 6e 20 73 7d 66 75 6e 63 74 69 6f 6e 20 61 69 28 69 2c 73 2c 65 29 7b 72 65 74 75 72 6e 20 7a 73 28 69 2c 73 2c 65 2c 21 31 29 2c 61 69 7d 66 75 6e 63 74 69 6f 6e 20 6b 63 28 69 2c 73 29 7b 72 65 74 75 72 6e 20 7a 73 28 69 2c 73 2c 6e 75 6c 6c 2c 21 30 29 2c 6b 63 7d 66 75 6e 63 74 69 6f 6e 20 7a 68 28 69 29 7b 59 73 28 6d 73 2c 76 72 2c 69 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 76 72 28 69 2c 73 29 7b 66 6f 72 28 76 61 Data Ascii: rCodeAt(s)>32;)s++;return s}(i,Tn.key=s,e),Ro(i,s,e))}function Ro(i,s,e){for(;s<e&&i.charCodeAt(s)<=32;)s++;return s}function ai(i,s,e){return zs(i,s,e,!1),ai}function kc(i,s){return zs(i,s,null,!0),kc}function zh(i){Ys(ms,vr,i,!0)}function vr(i,s){for(va
2025-03-10 11:36:00 UTC	16384	IN	Data Raw: 73 28 29 7b 76 65 28 74 68 69 73 2c 73 29 7d 29 3b 72 65 74 75 72 6e 20 69 2e 5f 5f 4e 47 5f 45 4c 45 4d 45 4e 54 5f 49 44 5f 5f 3d 46 50 2c 69 7d 28 29 2c 51 50 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 4c 65 28 65 2c 69 29 3b 76 61 72 20 73 3d 46 65 28 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 72 29 7b 76 61 72 20 61 3b 72 65 74 75 72 6e 20 76 65 28 74 68 69 73 2c 65 29 2c 28 61 3d 73 2e 63 61 6c 6c 28 74 68 69 73 29 29 2e 5f 64 65 63 6c 61 72 61 74 69 6f 6e 4c 56 69 65 77 3d 74 2c 61 2e 5f 64 65 63 6c 61 72 61 74 69 6f 6e 54 43 6f 6e 74 61 69 6e 65 72 3d 6e 2c 61 2e 65 6c 65 6d 65 6e 74 52 65 66 3d 72 2c 61 7d 72 65 74 75 72 6e 20 43 65 28 65 2c 5b 7b 6b 65 79 3a 22 63 72 65 61 74 65 45 6d 62 65 64 64 65 64 56 69 65 77 22 2c 76 61 6c 75 65 3a Data Ascii: s(){ve(this,s)});return i.__NG_ELEMENT_ID__=FP,i}(),QP=function(i){Le(e,i);var s=Fe(e);function e(t,n,r){var a;return ve(this,e),(a=s.call(this))._declarationLView=t,a._declarationTContainer=n,a.elementRef=r,a}return Ce(e,[{key:"createEmbeddedView",value:
2025-03-10 11:36:01 UTC	16384	IN	Data Raw: 53 74 61 62 6c 65 2e 73 75 62 73 63 72 69 62 65 28 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 6e 2e 61 73 73 65 72 74 4e 6f 74 49 6e 41 6e 67 75 6c 61 72 5a 6f 6e 65 28 29 2c 6d 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 5f 69 73 5a 6f 6e 65 53 74 61 62 6c 65 3d 21 30 2c 74 2e 5f 72 75 6e 43 61 6c 6c 62 61 63 6b 73 49 66 52 65 61 64 79 28 29 7d 29 7d 7d 29 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 69 6e 63 72 65 61 73 65 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 43 6f 75 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 70 65 6e 64 69 6e 67 43 6f 75 6e 74 2b 3d 31 2c 74 68 69 73 2e 5f 64 69 64 57 6f 72 6b 3d 21 30 2c 74 68 69 73 2e 5f 70 65 6e 64 69 6e 67 43 6f 75 6e 74 7d 7d 2c 7b 6b 65 79 3a 22 64 Data Ascii: Stable.subscribe({next:function(){Ln.assertNotInAngularZone(),mf(function(){t._isZoneStable=!0,t._runCallbacksIfReady()})}})})}},{key:"increasePendingRequestCount",value:function(){return this._pendingCount+=1,this._didWork=!0,this._pendingCount}},{key:"d
2025-03-10 11:36:01 UTC	16384	IN	Data Raw: 6c 6c 3d 3d 3d 72 3f 74 68 69 73 2e 5f 69 74 54 61 69 6c 3d 65 3a 72 2e 5f 70 72 65 76 3d 65 2c 6e 75 6c 6c 3d 3d 3d 74 3f 74 68 69 73 2e 5f 69 74 48 65 61 64 3d 65 3a 74 2e 5f 6e 65 78 74 3d 65 2c 6e 75 6c 6c 3d 3d 3d 74 68 69 73 2e 5f 6c 69 6e 6b 65 64 52 65 63 6f 72 64 73 26 26 28 74 68 69 73 2e 5f 6c 69 6e 6b 65 64 52 65 63 6f 72 64 73 3d 6e 65 77 20 69 78 29 2c 74 68 69 73 2e 5f 6c 69 6e 6b 65 64 52 65 63 6f 72 64 73 2e 70 75 74 28 65 29 2c 65 2e 63 75 72 72 65 6e 74 49 6e 64 65 78 3d 6e 2c 65 7d 7d 2c 7b 6b 65 79 3a 22 5f 72 65 6d 6f 76 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 64 64 54 6f 52 65 6d 6f 76 61 6c 73 28 74 68 69 73 2e 5f 75 6e 6c 69 6e 6b 28 65 29 29 7d 7d 2c 7b 6b 65 79 3a Data Ascii: ll===r?this._itTail=e:r._prev=e,null===t?this._itHead=e:t._next=e,null===this._linkedRecords&&(this._linkedRecords=new ix),this._linkedRecords.put(e),e.currentIndex=n,e}},{key:"_remove",value:function(e){return this._addToRemovals(this._unlink(e))}},{key:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49730	51.195.65.78	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:05 UTC	606	OUT	GET /survey/scripts.4ab290eebe328bc2.js HTTP/1.1 Host: cdnsurvey.sogolytics.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://survey2.lamresearch.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 11:36:05 UTC	568	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 10 Mar 2025 11:36:05 GMT Content-Type: text/javascript Content-Length: 404709 Connection: close last-modified: Thu, 06 Mar 2025 13:16:22 GMT etag: "0d774f4998edb1:0" access-control-allow-origin: * access-control-allow-methods: GET,POST,OPTIONS access-control-allow-headers: Content-Type, soapaction set-cookie: ;SameSite=None; secure strict-transport-security: max-age=31536000 X-Age: 82416 X-Cache: HIT X-Storage: 809596973:8001 Accept-Ranges: bytes X-Edge-IP: 51.195.65.78 X-Edge-Location: Frankfurt, DE
2025-03-10 11:36:05 UTC	15816	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 68 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 64 6f 63 75 6d 65 6e 74 3f 68 74 28 6e 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 42 65 29 7b 69 66 28 21 42 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 68 74 28 42 65 29 7d 3a 68 74 28 6e 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e Data Ascii: !function(n,ht){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=n.document?ht(n,!0):function(Be){if(!Be.document)throw new Error("jQuery requires a window with a document");return ht(Be)}:ht(n)}("undefined"!=typeof win
2025-03-10 11:36:05 UTC	16384	IN	Data Raw: 2c 64 69 73 61 62 6c 65 64 3a 4a 69 28 21 30 29 2c 63 68 65 63 6b 65 64 3a 66 75 6e 63 74 69 6f 6e 28 77 29 7b 72 65 74 75 72 6e 20 7a 65 28 77 2c 22 69 6e 70 75 74 22 29 26 26 21 21 77 2e 63 68 65 63 6b 65 64 7c 7c 7a 65 28 77 2c 22 6f 70 74 69 6f 6e 22 29 26 26 21 21 77 2e 73 65 6c 65 63 74 65 64 7d 2c 73 65 6c 65 63 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 77 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 77 2e 73 65 6c 65 63 74 65 64 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 77 29 7b 66 6f 72 28 77 3d 77 2e 66 69 72 73 74 43 68 69 6c 64 3b 77 3b 77 3d 77 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 77 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 77 29 7b Data Ascii: ,disabled:Ji(!0),checked:function(w){return ze(w,"input")&&!!w.checked\|\|ze(w,"option")&&!!w.selected},selected:function(w){return!0===w.selected},empty:function(w){for(w=w.firstChild;w;w=w.nextSibling)if(w.nodeType<6)return!1;return!0},parent:function(w){
2025-03-10 11:36:05 UTC	16384	IN	Data Raw: 7b 47 2e 73 65 74 28 74 68 69 73 2c 6f 29 7d 29 3a 50 74 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 44 29 7b 76 61 72 20 54 3b 69 66 28 6d 26 26 76 6f 69 64 20 30 3d 3d 3d 44 29 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 28 54 3d 47 2e 67 65 74 28 6d 2c 6f 29 29 7c 7c 76 6f 69 64 20 30 21 3d 3d 28 54 3d 74 74 28 6d 2c 6f 29 29 3f 54 3a 76 6f 69 64 20 30 3b 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 47 2e 73 65 74 28 74 68 69 73 2c 6f 2c 44 29 7d 29 7d 2c 6e 75 6c 6c 2c 6c 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 75 6c 6c 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 47 2e 72 65 6d 6f Data Ascii: {G.set(this,o)}):Pt(this,function(D){var T;if(m&&void 0===D)return void 0!==(T=G.get(m,o))\|\|void 0!==(T=tt(m,o))?T:void 0;this.each(function(){G.set(this,o,D)})},null,l,1<arguments.length,null,!0)},removeData:function(o){return this.each(function(){G.remo
2025-03-10 11:36:05 UTC	16384	IN	Data Raw: 2c 6c 3d 30 3b 6e 75 6c 6c 21 3d 28 6f 3d 74 68 69 73 5b 6c 5d 29 3b 6c 2b 2b 29 31 3d 3d 3d 6f 2e 6e 6f 64 65 54 79 70 65 26 26 28 66 2e 63 6c 65 61 6e 44 61 74 61 28 6a 65 28 6f 2c 21 31 29 29 2c 6f 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 6f 2c 6c 29 7b 72 65 74 75 72 6e 20 6f 3d 6e 75 6c 6c 21 3d 6f 26 26 6f 2c 6c 3d 6e 75 6c 6c 3d 3d 6c 3f 6f 3a 6c 2c 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 2e 63 6c 6f 6e 65 28 74 68 69 73 2c 6f 2c 6c 29 7d 29 7d 2c 68 74 6d 6c 3a 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 50 74 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 63 3d 74 68 69 73 5b 30 Data Ascii: ,l=0;null!=(o=this[l]);l++)1===o.nodeType&&(f.cleanData(je(o,!1)),o.textContent="");return this},clone:function(o,l){return o=null!=o&&o,l=null==l?o:l,this.map(function(){return f.clone(this,o,l)})},html:function(o){return Pt(this,function(l){var c=this[0
2025-03-10 11:36:05 UTC	16384	IN	Data Raw: 69 6f 6e 20 54 74 28 6f 29 7b 72 65 74 75 72 6e 28 6f 2e 6d 61 74 63 68 28 6d 74 29 7c 7c 5b 5d 29 2e 6a 6f 69 6e 28 22 20 22 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 6f 29 7b 72 65 74 75 72 6e 20 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 7d 66 75 6e 63 74 69 6f 6e 20 42 69 28 6f 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6f 29 3f 6f 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6f 26 26 6f 2e 6d 61 74 63 68 28 6d 74 29 7c 7c 5b 5d 7d 66 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 70 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 6f 2c 6c 29 7b 72 65 74 75 72 6e 20 50 74 28 74 68 69 73 2c 66 2e 70 72 6f 70 2c 6f 2c 6c 2c 31 3c 61 72 67 75 6d 65 6e 74 Data Ascii: ion Tt(o){return(o.match(mt)\|\|[]).join(" ")}function vt(o){return o.getAttribute&&o.getAttribute("class")\|\|""}function Bi(o){return Array.isArray(o)?o:"string"==typeof o&&o.match(mt)\|\|[]}f.fn.extend({prop:function(o,l){return Pt(this,f.prop,o,l,1<argument
2025-03-10 11:36:05 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 28 6f 29 7b 76 6f 69 64 20 30 3d 3d 3d 6f 2e 63 61 63 68 65 26 26 28 6f 2e 63 61 63 68 65 3d 21 31 29 2c 6f 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 26 26 28 6f 2e 74 79 70 65 3d 22 47 45 54 22 29 7d 29 2c 66 2e 61 6a 61 78 54 72 61 6e 73 70 6f 72 74 28 22 73 63 72 69 70 74 22 2c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 76 61 72 20 6c 2c 63 3b 69 66 28 6f 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 6f 2e 73 63 72 69 70 74 41 74 74 72 73 29 72 65 74 75 72 6e 7b 73 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 75 2c 70 29 7b 6c 3d 66 28 22 3c 73 63 72 69 70 74 3e 22 29 2e 61 74 74 72 28 6f 2e 73 63 72 69 70 74 41 74 74 72 73 7c 7c 7b 7d 29 2e 70 72 6f 70 28 7b 63 68 61 72 73 65 74 3a 6f 2e 73 63 72 69 70 74 43 68 61 72 73 65 74 2c 73 72 63 3a 6f 2e 75 72 6c 7d Data Ascii: ction(o){void 0===o.cache&&(o.cache=!1),o.crossDomain&&(o.type="GET")}),f.ajaxTransport("script",function(o){var l,c;if(o.crossDomain\|\|o.scriptAttrs)return{send:function(u,p){l=f("<script>").attr(o.scriptAttrs\|\|{}).prop({charset:o.scriptCharset,src:o.url}
2025-03-10 11:36:05 UTC	16384	IN	Data Raw: 72 6e 20 76 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 50 2c 71 2c 56 2c 4a 2c 74 65 2c 66 65 2c 5f 65 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 28 53 3d 6e 2e 65 78 74 65 6e 64 28 7b 7d 2c 53 29 29 2e 6f 66 3f 6e 28 64 6f 63 75 6d 65 6e 74 29 2e 66 69 6e 64 28 53 2e 6f 66 29 3a 6e 28 53 2e 6f 66 29 2c 62 65 3d 6e 2e 70 6f 73 69 74 69 6f 6e 2e 67 65 74 57 69 74 68 69 6e 49 6e 66 6f 28 53 2e 77 69 74 68 69 6e 29 2c 57 65 3d 6e 2e 70 6f 73 69 74 69 6f 6e 2e 67 65 74 53 63 72 6f 6c 6c 49 6e 66 6f 28 62 65 29 2c 78 65 3d 28 53 2e 63 6f 6c 6c 69 73 69 6f 6e 7c 7c 22 66 6c 69 70 22 29 2e 73 70 6c 69 74 28 22 20 22 29 2c 41 65 3d 7b 7d 3b 72 65 74 75 72 6e 20 66 65 3d 46 28 5f 65 29 2c 5f 65 5b 30 5d 2e 70 72 65 76 Data Ascii: rn v.apply(this,arguments);var P,q,V,J,te,fe,_e="string"==typeof(S=n.extend({},S)).of?n(document).find(S.of):n(S.of),be=n.position.getWithinInfo(S.within),We=n.position.getScrollInfo(be),xe=(S.collision\|\|"flip").split(" "),Ae={};return fe=F(_e),_e[0].prev
2025-03-10 11:36:05 UTC	16384	IN	Data Raw: 66 66 65 63 74 73 2e 65 66 66 65 63 74 5b 72 5d 3d 68 2c 6e 2e 65 66 66 65 63 74 73 2e 65 66 66 65 63 74 5b 72 5d 2e 6d 6f 64 65 3d 61 2c 68 7d 2c 73 63 61 6c 65 64 44 69 6d 65 6e 73 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 61 2c 68 29 7b 69 66 28 30 3d 3d 3d 61 29 72 65 74 75 72 6e 7b 68 65 69 67 68 74 3a 30 2c 77 69 64 74 68 3a 30 2c 6f 75 74 65 72 48 65 69 67 68 74 3a 30 2c 6f 75 74 65 72 57 69 64 74 68 3a 30 7d 3b 76 61 72 20 64 3d 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 21 3d 3d 68 3f 28 61 7c 7c 31 30 30 29 2f 31 30 30 3a 31 2c 67 3d 22 76 65 72 74 69 63 61 6c 22 21 3d 3d 68 3f 28 61 7c 7c 31 30 30 29 2f 31 30 30 3a 31 3b 72 65 74 75 72 6e 7b 68 65 69 67 68 74 3a 72 2e 68 65 69 67 68 74 28 29 2a 67 2c 77 69 64 74 68 3a 72 2e 77 69 64 74 68 28 29 Data Ascii: ffects.effect[r]=h,n.effects.effect[r].mode=a,h},scaledDimensions:function(r,a,h){if(0===a)return{height:0,width:0,outerHeight:0,outerWidth:0};var d="horizontal"!==h?(a\|\|100)/100:1,g="vertical"!==h?(a\|\|100)/100:1;return{height:r.height()*g,width:r.width()
2025-03-10 11:36:06 UTC	16384	IN	Data Raw: 62 6c 65 28 65 2c 73 29 7d 7d 29 2c 6e 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 75 6e 69 71 75 65 49 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 64 7c 7c 28 74 68 69 73 2e 69 64 3d 22 75 69 2d 69 64 2d 22 2b 20 2b 2b 65 29 7d 29 7d 7d 28 29 2c 72 65 6d 6f 76 65 55 6e 69 71 75 65 49 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 5e 75 69 2d 69 64 2d 5c 64 2b 24 2f 2e 74 65 73 74 28 74 68 69 73 2e 69 64 29 26 26 6e 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 69 64 22 29 7d 29 7d 7d 29 2c 6e 2e 77 69 Data Ascii: ble(e,s)}}),n.fn.extend({uniqueId:function(){var e=0;return function(){return this.each(function(){this.id\|\|(this.id="ui-id-"+ ++e)})}}(),removeUniqueId:function(){return this.each(function(){/^ui-id-\d+$/.test(this.id)&&n(this).removeAttr("id")})}}),n.wi
2025-03-10 11:36:06 UTC	16384	IN	Data Raw: 6e 75 2d 69 74 65 6d 22 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 74 26 26 74 2e 6c 65 6e 67 74 68 26 26 28 74 68 69 73 2e 5f 63 6c 6f 73 65 28 29 2c 74 68 69 73 2e 66 6f 63 75 73 28 65 2c 74 29 29 7d 2c 65 78 70 61 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 61 63 74 69 76 65 26 26 74 68 69 73 2e 5f 6d 65 6e 75 49 74 65 6d 73 28 74 68 69 73 2e 61 63 74 69 76 65 2e 63 68 69 6c 64 72 65 6e 28 22 2e 75 69 2d 6d 65 6e 75 22 29 29 2e 66 69 72 73 74 28 29 3b 74 26 26 74 2e 6c 65 6e 67 74 68 26 26 28 74 68 69 73 2e 5f 6f 70 65 6e 28 74 2e 70 61 72 65 6e 74 28 29 29 2c 74 68 69 73 2e 5f 64 65 6c 61 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 66 6f 63 75 73 28 65 2c 74 29 7d 29 29 7d 2c 6e 65 78 74 3a 66 75 6e 63 74 Data Ascii: nu-item",this.element);t&&t.length&&(this._close(),this.focus(e,t))},expand:function(e){var t=this.active&&this._menuItems(this.active.children(".ui-menu")).first();t&&t.length&&(this._open(t.parent()),this._delay(function(){this.focus(e,t)}))},next:funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49731	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:05 UTC	714	OUT	GET /survey/styles.69500f27b321906b.css HTTP/1.1 Host: survey2.lamresearch.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data= Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oo\|Z87On
2025-03-10 11:36:06 UTC	443	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:36:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 26354 Connection: close cache-control: private,no-cache, no-store, must-revalidate expires: -1 access-control-allow-origin: * access-control-allow-methods: GET,POST,OPTIONS access-control-allow-headers: Content-Type, soapaction strict-transport-security: max-age=31536000 set-cookie: SERVERpart=part-1\|Z87Oq\|Z87On; path=/
2025-03-10 11:36:06 UTC	15941	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 53 75 72 76 65 79 20 50 61 72 74 69 63 69 70 61 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 73 75 72 76 65 79 2f 22 3e 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 61 73 73 65 74 73 2f 6a 73 2f 41 6e 75 67 6c 61 72 5f 53 75 72 76 65 79 5f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 3f 76 3d 33 30 Data Ascii: <!DOCTYPE html><html lang="en"><head><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin=""> <meta charset="utf-8"> <title>Survey Participation</title> <base href="/survey/"> <script src="assets/js/Anuglar_Survey_jquery.min.js?v=30
2025-03-10 11:36:06 UTC	10413	IN	Data Raw: 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 4d 61 74 65 72 69 61 6c 20 49 63 6f 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 6d 61 74 65 72 69 61 6c 69 63 6f 6e 73 2f 76 31 34 33 2f 66 6c 55 68 52 71 36 74 7a 5a 63 6c 51 45 4a 2d 56 64 67 2d 49 75 69 61 44 73 4e 63 49 68 51 38 74 51 2e 77 6f 66 66 Data Ascii: 122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}</style> <style type="text/css">@font-face{font-family:'Material Icons';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/materialicons/v143/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.woff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49737	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:08 UTC	714	OUT	GET /survey/styles.69500f27b321906b.css HTTP/1.1 Host: survey2.lamresearch.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data= Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oq\|Z87On
2025-03-10 11:36:08 UTC	392	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:36:08 GMT Content-Type: text/html; charset=utf-8 Content-Length: 26354 Connection: close cache-control: private,no-cache, no-store, must-revalidate expires: -1 access-control-allow-origin: * access-control-allow-methods: GET,POST,OPTIONS access-control-allow-headers: Content-Type, soapaction strict-transport-security: max-age=31536000
2025-03-10 11:36:08 UTC	15992	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 22 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 53 75 72 76 65 79 20 50 61 72 74 69 63 69 70 61 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 73 75 72 76 65 79 2f 22 3e 0a 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 61 73 73 65 74 73 2f 6a 73 2f 41 6e 75 67 6c 61 72 5f 53 75 72 76 65 79 5f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 3f 76 3d 33 30 Data Ascii: <!DOCTYPE html><html lang="en"><head><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin=""> <meta charset="utf-8"> <title>Survey Participation</title> <base href="/survey/"> <script src="assets/js/Anuglar_Survey_jquery.min.js?v=30
2025-03-10 11:36:08 UTC	10362	IN	Data Raw: 3b 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 4d 61 74 65 72 69 61 6c 20 49 63 6f 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 6d 61 74 65 72 69 61 6c 69 63 6f 6e 73 2f 76 31 34 33 2f 66 6c 55 68 52 71 36 74 7a 5a 63 6c 51 45 4a 2d 56 64 67 2d 49 75 69 61 44 73 4e 63 49 68 51 38 74 51 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 7d 2e 6d 61 74 65 72 69 61 6c 2d 69 63 6f 6e 73 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 4d 61 Data Ascii: ;}</style> <style type="text/css">@font-face{font-family:'Material Icons';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/materialicons/v143/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.woff2) format('woff2');}.material-icons{font-family:'Ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49738	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:08 UTC	731	OUT	GET /survey/assets/AcceptCookiesCountry.json HTTP/1.1 Host: survey2.lamresearch.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data= Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oq\|Z87On
2025-03-10 11:36:08 UTC	404	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:36:08 GMT Content-Type: application/json Content-Length: 2223 Connection: close last-modified: Thu, 06 Mar 2025 13:16:26 GMT accept-ranges: bytes etag: "031d7f6998edb1:0" access-control-allow-origin: * access-control-allow-methods: GET,POST,OPTIONS access-control-allow-headers: Content-Type, soapaction strict-transport-security: max-age=31536000
2025-03-10 11:36:08 UTC	2223	IN	Data Raw: 7b 0a 20 20 22 41 63 63 65 70 74 43 6f 6f 6b 69 65 73 43 6f 75 6e 74 72 79 44 61 74 61 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 43 6f 75 6e 74 72 79 22 3a 20 22 41 75 73 74 72 69 61 22 2c 0a 20 20 20 20 20 20 22 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 20 22 34 33 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 43 6f 75 6e 74 72 79 22 3a 20 22 42 65 6c 67 69 75 6d 22 2c 0a 20 20 20 20 20 20 22 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 20 22 33 32 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 43 6f 75 6e 74 72 79 22 3a 20 22 42 75 6c 67 61 72 69 61 22 2c 0a 20 20 20 20 20 20 22 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 20 22 33 35 39 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 43 6f 75 6e 74 Data Ascii: { "AcceptCookiesCountryData": [ { "Country": "Austria", "CountryCode": "43" }, { "Country": "Belgium", "CountryCode": "32" }, { "Country": "Bulgaria", "CountryCode": "359" }, { "Count

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49740	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:08 UTC	813	OUT	POST /apipmx/GetSurveyProperties HTTP/1.1 Host: survey2.lamresearch.com Connection: keep-alive Content-Length: 514 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Origin: https://survey2.lamresearch.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data= Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oq\|Z87On
2025-03-10 11:36:08 UTC	514	OUT	Data Raw: 22 61 44 45 59 59 37 69 68 36 59 75 61 57 6b 66 68 52 70 43 49 68 38 61 59 66 70 6f 34 46 37 43 4c 71 41 4e 2f 74 51 61 70 4e 7a 6b 54 4f 59 2b 48 4b 76 35 77 46 54 4f 47 79 59 6b 4b 52 58 4b 62 56 68 52 62 7a 41 72 54 53 4d 38 48 79 75 76 64 51 41 6b 59 6f 6e 48 6e 6a 53 2b 78 7a 72 51 67 72 42 41 72 6e 59 52 2b 66 65 43 6d 6f 78 30 45 67 6c 6a 4e 73 48 30 6b 55 34 57 43 78 4e 44 45 32 76 69 64 70 63 6a 75 79 78 4b 53 55 6c 74 52 6b 46 56 41 30 77 33 6b 4b 6b 63 6c 6d 4a 56 36 37 31 4b 44 72 4b 62 42 7a 6b 76 6e 42 34 71 74 79 53 49 6f 61 75 42 53 73 54 73 4e 4a 78 53 30 59 62 64 6c 74 67 55 43 79 68 2b 72 7a 66 34 2f 48 75 35 66 41 79 62 72 41 64 37 31 61 44 66 4f 47 67 43 66 32 43 4a 64 63 68 43 4a 36 47 6a 4e 50 41 4a 6d 4a 49 31 4a 70 72 67 7a 41 56 Data Ascii: "aDEYY7ih6YuaWkfhRpCIh8aYfpo4F7CLqAN/tQapNzkTOY+HKv5wFTOGyYkKRXKbVhRbzArTSM8HyuvdQAkYonHnjS+xzrQgrBArnYR+feCmox0EgljNsH0kU4WCxNDE2vidpcjuyxKSUltRkFVA0w3kKkclmJV671KDrKbBzkvnB4qtySIoauBSsTsNJxS0YbdltgUCyh+rzf4/Hu5fAybrAd71aDfOGgCf2CJdchCJ6GjNPAJmJI1JprgzAV
2025-03-10 11:36:09 UTC	278	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:36:09 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * strict-transport-security: max-age=31536000 set-cookie: SERVERpart=part-1\|Z87Or\|Z87On; path=/
2025-03-10 11:36:09 UTC	16106	IN	Data Raw: 33 33 36 63 0d 0a 22 69 68 46 4d 31 59 48 69 77 36 39 43 58 33 56 73 45 64 50 4c 4d 35 6f 6b 64 4a 45 56 54 76 68 37 56 38 73 74 31 52 73 66 52 54 75 7a 2f 32 48 4a 55 44 4c 41 55 57 37 58 6a 2f 7a 43 64 36 71 67 34 2f 77 37 4c 74 78 64 45 6b 46 42 6a 71 47 34 6e 52 75 30 38 66 76 57 76 42 65 73 32 41 72 47 49 39 74 34 38 52 4a 71 30 4b 59 52 4a 6e 79 63 48 59 63 4c 67 45 4d 7a 61 32 69 56 2f 6b 6d 4b 4f 30 47 69 39 7a 63 71 79 36 55 5a 6f 44 46 42 61 69 57 4a 52 31 58 33 65 54 78 2b 66 67 76 51 6a 6f 4a 57 50 79 59 44 6d 79 2f 51 42 30 76 58 31 52 41 4c 6b 73 31 47 47 6d 6a 64 41 73 67 72 7a 76 41 45 48 2f 39 4c 53 6f 79 39 53 6f 39 76 4e 62 65 6e 77 78 75 4d 6f 33 41 35 46 63 33 43 5a 45 55 42 57 66 6c 63 30 77 73 2f 6b 34 42 6d 74 4f 4d 57 76 61 37 48 Data Ascii: 336c"ihFM1YHiw69CX3VsEdPLM5okdJEVTvh7V8st1RsfRTuz/2HJUDLAUW7Xj/zCd6qg4/w7LtxdEkFBjqG4nRu08fvWvBes2ArGI9t48RJq0KYRJnycHYcLgEMza2iV/kmKO0Gi9zcqy6UZoDFBaiWJR1X3eTx+fgvQjoJWPyYDmy/QB0vX1RALks1GGmjdAsgrzvAEH/9LSoy9So9vNbenwxuMo3A5Fc3CZEUBWflc0ws/k4BmtOMWva7H
2025-03-10 11:36:09 UTC	16384	IN	Data Raw: 53 38 7a 56 6f 6a 51 30 35 79 4e 55 44 51 2b 36 4f 49 48 6c 62 6e 36 46 74 4a 46 59 41 65 4b 74 46 2b 48 6f 79 54 76 57 66 4b 6d 4e 77 52 4e 2b 2f 62 6f 59 50 74 4c 67 31 79 68 70 46 70 51 45 2f 31 61 78 68 32 48 38 53 6e 2b 57 61 45 48 2f 72 6d 41 56 6a 4c 30 41 76 42 41 2f 34 67 4e 64 67 70 72 6a 63 65 39 45 4e 30 6e 6d 76 75 73 2b 6c 52 72 4c 7a 6e 32 55 54 77 42 4b 43 48 45 30 6d 64 61 68 65 68 69 66 41 38 4a 4f 79 56 55 4c 2b 32 49 4c 38 4e 6a 35 54 6e 5a 73 49 74 73 6e 32 4c 36 31 50 35 66 31 6e 43 6d 47 71 39 36 50 64 52 68 7a 4e 70 42 79 6a 2b 36 64 70 6e 72 36 36 73 36 71 55 78 43 72 6f 5a 48 38 78 59 72 52 6e 50 64 53 30 76 4e 39 69 34 44 42 2f 63 44 41 6d 71 75 7a 34 62 31 51 74 66 57 6d 38 48 34 66 44 63 70 34 64 70 45 72 56 30 4a 4e 31 30 46 Data Ascii: S8zVojQ05yNUDQ+6OIHlbn6FtJFYAeKtF+HoyTvWfKmNwRN+/boYPtLg1yhpFpQE/1axh2H8Sn+WaEH/rmAVjL0AvBA/4gNdgprjce9EN0nmvus+lRrLzn2UTwBKCHE0mdahehifA8JOyVUL+2IL8Nj5TnZsItsn2L61P5f1nCmGq96PdRhzNpByj+6dpnr66s6qUxCroZH8xYrRnPdS0vN9i4DB/cDAmquz4b1QtfWm8H4fDcp4dpErV0JN10F
2025-03-10 11:36:09 UTC	16384	IN	Data Raw: 72 79 6a 59 49 6e 6a 4d 77 42 6c 78 36 47 41 44 68 43 6c 64 73 71 4d 77 37 43 76 7a 6b 6c 47 4d 79 39 39 65 53 71 6c 6a 35 54 6c 61 4c 4c 33 41 35 61 37 64 36 2b 73 4f 57 52 55 76 6d 7a 4f 34 48 78 56 55 35 4e 4f 4c 7a 48 75 39 2b 39 69 5a 69 7a 4a 78 52 2f 65 30 62 72 78 5a 62 71 41 30 4f 36 69 57 77 41 35 61 68 6c 54 4a 67 48 73 62 4d 39 6e 63 2f 70 30 32 4f 2f 72 6a 4b 36 7a 38 4f 79 36 53 75 6f 31 34 78 41 48 43 34 49 77 53 50 30 63 55 2b 31 2f 4e 59 53 6b 6c 31 43 6f 44 44 31 6a 2b 58 72 35 47 52 4c 38 47 4e 7a 76 62 6c 42 49 69 49 31 77 4d 39 42 63 45 6c 48 62 64 4f 61 69 79 71 4a 76 4f 35 55 34 69 74 38 6a 6c 49 68 79 49 4b 73 30 72 39 37 4a 4d 39 73 76 51 4b 66 62 53 63 67 78 4f 42 34 53 73 67 6b 64 6d 32 4a 4e 4a 49 33 31 46 72 4d 31 50 38 2f 54 Data Ascii: ryjYInjMwBlx6GADhCldsqMw7CvzklGMy99eSqlj5TlaLL3A5a7d6+sOWRUvmzO4HxVU5NOLzHu9+9iZizJxR/e0brxZbqA0O6iWwA5ahlTJgHsbM9nc/p02O/rjK6z8Oy6Suo14xAHC4IwSP0cU+1/NYSkl1CoDD1j+Xr5GRL8GNzvblBIiI1wM9BcElHbdOaiyqJvO5U4it8jlIhyIKs0r97JM9svQKfbScgxOB4Ssgkdm2JNJI31FrM1P8/T
2025-03-10 11:36:09 UTC	7229	IN	Data Raw: 6b 74 58 55 52 6a 4f 4c 77 63 55 64 43 79 2f 77 69 61 47 55 34 6f 37 65 57 6c 6b 49 41 54 54 49 31 69 2f 64 71 59 72 45 74 63 73 63 78 4e 4f 2b 78 46 75 4a 68 44 67 52 67 42 5a 68 55 73 66 74 6a 55 4d 62 68 79 51 59 62 33 7a 67 55 4d 65 41 4f 65 4d 2b 49 6d 70 56 32 55 41 45 6f 33 38 63 51 34 75 4e 45 54 73 51 33 53 6f 74 77 6e 2b 53 48 6d 73 69 77 2b 7a 6f 4c 6b 58 4d 47 2b 42 36 68 5a 7a 4c 41 4b 52 53 2f 67 61 56 6c 49 6a 6b 78 63 44 4a 66 69 35 53 34 74 71 65 2f 72 47 2b 2f 62 46 56 75 72 31 4a 35 59 58 69 76 68 46 68 32 48 31 79 44 71 41 4e 61 72 74 62 33 37 6c 70 4b 51 2b 38 4a 58 36 58 55 43 35 4a 51 67 4a 4a 71 57 45 4e 6b 6b 69 35 56 59 4c 42 48 38 30 42 52 71 7a 52 57 4c 6b 35 76 35 32 38 31 32 55 65 55 52 2f 4c 71 35 37 2f 4d 45 46 4c 36 38 43 Data Ascii: ktXURjOLwcUdCy/wiaGU4o7eWlkIATTI1i/dqYrEtcscxNO+xFuJhDgRgBZhUsftjUMbhyQYb3zgUMeAOeM+ImpV2UAEo38cQ4uNETsQ3Sotwn+SHmsiw+zoLkXMG+B6hZzLAKRS/gaVlIjkxcDJfi5S4tqe/rG+/bFVur1J5YXivhFh2H1yDqANartb37lpKQ+8JX6XUC5JQgJJqWENkki5VYLBH80BRqzRWLk5v52812UeUR/Lq57/MEFL68C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49739	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:08 UTC	714	OUT	GET /survey/styles.f238f456d9e78657.css HTTP/1.1 Host: survey2.lamresearch.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data= Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oq\|Z87On
2025-03-10 11:36:09 UTC	473	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:36:09 GMT Content-Type: text/css Content-Length: 748675 Connection: close last-modified: Thu, 06 Mar 2025 13:16:22 GMT accept-ranges: bytes etag: "0d774f4998edb1:0" access-control-allow-origin: * access-control-allow-methods: GET,POST,OPTIONS access-control-allow-headers: Content-Type, soapaction strict-transport-security: max-age=31536000 set-cookie: SERVERpart=part-1\|Z87Or\|Z87On; path=/ cache-control: private
2025-03-10 11:36:09 UTC	15911	IN	Data Raw: 40 69 6d 70 6f 72 74 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 7c 41 64 76 65 6e 74 2b 50 72 6f 7c 41 72 69 6d 61 2b 4d 61 64 75 72 61 69 7c 41 72 76 6f 7c 41 76 65 72 69 61 2b 53 65 72 69 66 2b 4c 69 62 72 65 7c 42 61 64 2b 53 63 72 69 70 74 7c 43 6f 6e 76 65 72 67 65 6e 63 65 7c 43 6f 72 6d 6f 72 61 6e 74 2b 47 61 72 61 6d 6f 6e 64 7c 44 61 6e 63 69 6e 67 2b 53 63 72 69 70 74 3a 37 30 30 7c 44 6f 73 69 73 7c 44 72 6f 69 64 2b 53 61 6e 73 7c 45 78 6f 2b 32 7c 46 69 72 61 2b 53 61 6e 73 7c 48 65 65 62 6f 7c 49 6e 64 69 65 2b 46 6c 6f 77 65 72 7c 4a 69 6d 2b 4e 69 67 68 74 73 68 61 64 65 7c 4a 6f 73 65 66 69 6e 2b 53 61 6e 73 7c 4a 6f 73 65 66 69 6e Data Ascii: @import"https://fonts.googleapis.com/css?family=Open+Sans\|Advent+Pro\|Arima+Madurai\|Arvo\|Averia+Serif+Libre\|Bad+Script\|Convergence\|Cormorant+Garamond\|Dancing+Script:700\|Dosis\|Droid+Sans\|Exo+2\|Fira+Sans\|Heebo\|Indie+Flower\|Jim+Nightshade\|Josefin+Sans\|Josefin
2025-03-10 11:36:09 UTC	16384	IN	Data Raw: 64 65 72 2d 72 61 64 69 75 73 3a 32 30 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 30 70 78 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 30 70 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 75 6c 2e 64 72 70 2d 64 77 6e 2d 6d 65 6e 75 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 75 6c 2e 64 72 70 2d 64 77 6e 2d 6d 65 6e 75 20 6c 69 2e 6d 61 69 6e 2d 6f 70 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 Data Ascii: der-radius:20px;-webkit-border-radius:20px;-moz-border-radius:20px;-ms-flex-align:center;align-items:center}ul.drp-dwn-menu{text-align:left;display:inline-block;list-style:none;margin:0;font-size:12px}ul.drp-dwn-menu li.main-opt{display:inline-block;posit
2025-03-10 11:36:09 UTC	16384	IN	Data Raw: 6c 28 61 73 73 65 74 73 2f 49 6d 61 67 65 73 4e 65 77 2f 50 4d 2f 63 6c 6f 73 65 5f 68 6f 76 65 72 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 77 69 64 74 68 3a 32 30 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 38 70 78 7d 2e 62 6f 74 2d 70 61 64 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 7d 2e 6d 6f 64 61 6c 2d 62 6f 64 79 20 2e 62 6f 74 2d 70 61 64 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 66 71 2d 73 70 61 63 65 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 74 79 2d 62 6c 61 63 6b 2d 74 78 74 7b 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 79 2d 77 68 69 74 65 2d 74 78 74 7b 63 6f 6c 6f 72 3a 23 66 Data Ascii: l(assets/ImagesNew/PM/close_hover.png) no-repeat;width:20px;height:20px;margin-right:18px}.bot-padding{padding-bottom:15px}.modal-body .bot-padding{padding-bottom:10px}.fq-space{padding-bottom:12px}.ty-black-txt{color:#000!important}.ty-white-txt{color:#f
2025-03-10 11:36:09 UTC	16384	IN	Data Raw: 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 73 61 74 20 2e 73 6d 69 6c 65 79 3a 62 65 66 6f 72 65 2c 2e 63 65 73 20 2e 73 6d 69 6c 65 79 3a 62 65 66 6f 72 65 7b 68 65 69 67 68 74 3a 33 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6f 62 69 6c 65 2d 77 72 61 70 70 65 72 20 2e 73 6d 61 6c 6c 2d 73 75 72 76 65 79 2d 77 69 64 74 68 2e 73 75 72 76 65 79 57 69 64 74 68 7b 70 61 64 64 69 6e 67 3a 30 20 31 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6f 62 69 6c 65 2d 77 72 61 70 70 65 72 20 2e 66 69 65 6c 64 73 65 74 2d 77 72 61 70 70 65 72 20 2e 6d 61 74 72 69 78 2d 73 74 61 6e 64 61 6c 6f 6e 65 20 2e 66 69 65 6c 64 73 65 74 2d 77 72 61 70 70 65 72 2e 69 73 4d 61 6e 64 61 74 6f 72 79 3e 66 69 65 6c 64 73 65 74 3e 6c 65 67 65 6e 64 3a 62 65 66 6f 72 65 7b 6c Data Ascii: o!important}.csat .smiley:before,.ces .smiley:before{height:30px!important}.mobile-wrapper .small-survey-width.surveyWidth{padding:0 12px!important}.mobile-wrapper .fieldset-wrapper .matrix-standalone .fieldset-wrapper.isMandatory>fieldset>legend:before{l
2025-03-10 11:36:09 UTC	16384	IN	Data Raw: 73 77 65 72 2d 6f 70 74 69 6f 6e 2d 77 72 61 70 70 65 72 20 2e 64 65 6d 6f 67 72 61 70 68 69 63 73 2d 77 72 61 70 70 65 72 20 2e 71 75 65 73 74 69 6f 6e 2d 6f 70 74 69 6f 6e 2d 77 72 61 70 70 65 72 20 2e 71 75 65 73 74 69 6f 6e 2d 74 65 78 74 2e 6e 6f 2d 73 75 62 51 6e 6f 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 52 54 4c 44 69 72 20 2e 61 6e 73 77 65 72 2d 6f 70 74 69 6f 6e 2d 77 72 61 70 70 65 72 20 2e 64 65 6d 6f 67 72 61 70 68 69 63 73 2d 77 72 61 70 70 65 72 20 2e 69 73 4d 61 6e 64 61 74 6f 72 79 20 2e 71 75 65 73 74 69 6f 6e 2d 6f 70 74 69 6f 6e 2d 77 72 61 70 70 65 72 20 2e 71 75 65 73 74 69 6f 6e 2d 6e 6f 2b 2e 71 75 65 73 74 69 6f 6e 2d 74 65 78 74 2c 2e 52 54 4c 44 69 72 20 2e 61 6e 73 77 65 72 2d 6f 70 74 Data Ascii: swer-option-wrapper .demographics-wrapper .question-option-wrapper .question-text.no-subQno{padding-left:0!important}.RTLDir .answer-option-wrapper .demographics-wrapper .isMandatory .question-option-wrapper .question-no+.question-text,.RTLDir .answer-opt
2025-03-10 11:36:09 UTC	16384	IN	Data Raw: 62 6f 72 64 65 72 3a 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 64 64 2d 77 72 61 70 70 65 72 20 2e 66 69 65 6c 64 73 65 74 2d 77 72 61 70 70 65 72 2e 69 73 4d 61 6e 64 61 74 6f 72 79 20 2e 71 75 65 73 74 69 6f 6e 2d 6f 70 74 69 6f 6e 2d 77 72 61 70 70 65 72 3a 62 65 66 6f 72 65 7b 6c 65 66 74 3a 2d 31 30 70 78 3b 74 6f 70 3a 35 30 25 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 2c 2d 35 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 7d 2e 63 6f 6c 75 6d 6e 2d 73 74 72 75 63 74 2d 6d 64 64 20 2e 6d 64 64 2d 77 72 61 70 70 65 72 20 2e 61 6e 73 77 65 72 2d 6f 70 74 69 6f 6e 2d 77 72 61 70 70 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 61 75 74 6f Data Ascii: border:0px!important}.mdd-wrapper .fieldset-wrapper.isMandatory .question-option-wrapper:before{left:-10px;top:50%;-ms-transform:translate(0,-50%);transform:translateY(-50%)}.column-struct-mdd .mdd-wrapper .answer-option-wrapper{position:relative;top:auto
2025-03-10 11:36:09 UTC	16384	IN	Data Raw: 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 30 30 25 3b 6c 65 66 74 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 35 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 62 6c 61 63 6b 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 72 73 2d 6f 76 65 72 6c 61 79 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 39 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b Data Ascii: :absolute;top:100%;left:50%;margin-left:-5px;border-width:5px;border-style:solid;border-color:black transparent transparent transparent}.rs-overlay{pointer-events:none;position:fixed;top:0;left:0;height:100%;width:100%;z-index:9;background:rgba(0,0,0,.2);
2025-03-10 11:36:09 UTC	16384	IN	Data Raw: 6f 70 74 69 6f 6e 2d 77 72 61 70 70 65 72 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6f 62 69 6c 65 2d 77 72 61 70 70 65 72 20 2e 6d 64 64 2d 71 75 65 73 74 69 6f 6e 2d 64 61 74 61 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 37 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6f 62 69 6c 65 2d 77 72 61 70 70 65 72 20 2e 6d 61 74 72 69 78 2d 6d 6f 62 69 6c 65 2d 73 75 62 51 2d 63 6f 6e 74 20 2e 71 75 65 73 74 69 6f 6e 2d 6f 70 74 69 6f 6e 2d 77 72 61 70 70 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 52 54 4c 44 69 72 20 2e 6d 74 62 2d 77 72 61 70 70 65 72 3a 6e 6f 74 28 2e 6d 74 62 2d 6c 65 66 74 Data Ascii: option-wrapper{padding-top:0!important;padding-bottom:0!important}.mobile-wrapper .mdd-question-data{margin-top:17px!important}.mobile-wrapper .matrix-mobile-subQ-cont .question-option-wrapper{margin-bottom:3px!important}.RTLDir .mtb-wrapper:not(.mtb-left
2025-03-10 11:36:09 UTC	16384	IN	Data Raw: 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2b 6c 61 62 65 6c 2c 2e 6d 6f 62 69 6c 65 2d 77 72 61 70 70 65 72 20 2e 61 6e 73 77 65 72 2d 6f 70 74 69 6f 6e 2e 72 61 64 69 6f 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 2b 6c 61 62 65 6c 2c 2e 6d 6f 62 69 6c 65 2d 77 72 61 70 70 65 72 20 2e 61 6e 73 77 65 72 2d 6f 70 74 69 6f 6e 2e 63 68 65 63 6b 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2b 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 6d 61 74 72 69 78 2d 67 72 69 64 20 2e 61 6e 73 77 65 72 2d 6f 70 74 69 6f 6e 2e 72 61 64 69 6f 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 2b 6c 61 62 65 6c 2c 2e 6d 61 74 72 69 78 2d 67 72 69 64 20 2e 61 6e 73 77 65 72 2d 6f 70 74 69 6f 6e 2e 63 68 Data Ascii: input[type=checkbox]+label,.mobile-wrapper .answer-option.radio input[type=radio]+label,.mobile-wrapper .answer-option.check input[type=checkbox]+label{display:block}.matrix-grid .answer-option.radio input[type=radio]+label,.matrix-grid .answer-option.ch
2025-03-10 11:36:09 UTC	16384	IN	Data Raw: 70 70 65 72 20 2e 68 69 64 64 65 6e 2d 71 75 65 73 74 69 6f 6e 2d 74 6f 6f 6c 74 69 70 2d 69 63 6f 6e 2e 68 64 6e 2d 6d 64 64 7b 74 6f 70 3a 39 70 78 3b 6c 65 66 74 3a 2d 32 30 70 78 7d 2e 6d 6f 62 69 6c 65 2d 77 72 61 70 70 65 72 20 2e 68 69 64 64 65 6e 2d 71 75 65 73 74 69 6f 6e 2d 74 6f 6f 6c 74 69 70 2d 69 63 6f 6e 2e 68 64 6e 2d 64 65 6d 6f 7b 74 6f 70 3a 36 70 78 3b 6c 65 66 74 3a 2d 32 30 70 78 7d 2e 6d 6f 62 69 6c 65 2d 77 72 61 70 70 65 72 20 2e 52 54 4c 44 69 72 20 2e 68 69 64 64 65 6e 2d 71 75 65 73 74 69 6f 6e 2d 74 6f 6f 6c 74 69 70 2d 69 63 6f 6e 2e 68 64 6e 2d 64 65 6d 6f 2c 2e 6d 6f 62 69 6c 65 2d 77 72 61 70 70 65 72 20 2e 52 54 4c 44 69 72 20 2e 68 69 64 64 65 6e 2d 71 75 65 73 74 69 6f 6e 2d 74 6f 6f 6c 74 69 70 2d 69 63 6f 6e 2e 68 64 Data Ascii: pper .hidden-question-tooltip-icon.hdn-mdd{top:9px;left:-20px}.mobile-wrapper .hidden-question-tooltip-icon.hdn-demo{top:6px;left:-20px}.mobile-wrapper .RTLDir .hidden-question-tooltip-icon.hdn-demo,.mobile-wrapper .RTLDir .hidden-question-tooltip-icon.hd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49741	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:10 UTC	499	OUT	GET /survey/assets/AcceptCookiesCountry.json HTTP/1.1 Host: survey2.lamresearch.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Oq\|Z87On
2025-03-10 11:36:11 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:36:11 GMT Content-Type: application/json Content-Length: 2223 Connection: close last-modified: Thu, 06 Mar 2025 13:16:26 GMT accept-ranges: bytes etag: "031d7f6998edb1:0" access-control-allow-origin: * access-control-allow-methods: GET,POST,OPTIONS access-control-allow-headers: Content-Type, soapaction strict-transport-security: max-age=31536000 set-cookie: SERVERpart=part-1\|Z87Or\|Z87On; path=/ cache-control: private
2025-03-10 11:36:11 UTC	2223	IN	Data Raw: 7b 0a 20 20 22 41 63 63 65 70 74 43 6f 6f 6b 69 65 73 43 6f 75 6e 74 72 79 44 61 74 61 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 43 6f 75 6e 74 72 79 22 3a 20 22 41 75 73 74 72 69 61 22 2c 0a 20 20 20 20 20 20 22 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 20 22 34 33 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 43 6f 75 6e 74 72 79 22 3a 20 22 42 65 6c 67 69 75 6d 22 2c 0a 20 20 20 20 20 20 22 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 20 22 33 32 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 43 6f 75 6e 74 72 79 22 3a 20 22 42 75 6c 67 61 72 69 61 22 2c 0a 20 20 20 20 20 20 22 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 20 22 33 35 39 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 43 6f 75 6e 74 Data Ascii: { "AcceptCookiesCountryData": [ { "Country": "Austria", "CountryCode": "43" }, { "Country": "Belgium", "CountryCode": "32" }, { "Country": "Bulgaria", "CountryCode": "359" }, { "Count

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49744	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:11 UTC	808	OUT	POST /apipmx/GetSurveyData HTTP/1.1 Host: survey2.lamresearch.com Connection: keep-alive Content-Length: 3886 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Origin: https://survey2.lamresearch.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0&data= Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Or\|Z87On
2025-03-10 11:36:11 UTC	3886	OUT	Data Raw: 22 61 44 45 59 59 37 69 68 36 59 75 61 57 6b 66 68 52 70 43 49 68 38 61 59 66 70 6f 34 46 37 43 4c 71 41 4e 2f 74 51 61 70 4e 7a 6b 54 4f 59 2b 48 4b 76 35 77 46 54 4f 47 79 59 6b 4b 52 58 4b 62 56 68 52 62 7a 41 72 54 53 4d 38 48 79 75 76 64 51 41 6b 59 6f 6e 48 6e 6a 53 2b 78 7a 72 51 67 72 42 41 72 6e 59 52 2b 66 65 43 6d 6f 78 30 45 67 6c 6a 4e 73 48 30 6b 55 34 57 43 78 4e 44 45 32 76 69 64 70 63 6a 75 79 78 4b 53 55 6c 74 52 6b 46 56 41 30 77 33 6b 4b 6b 63 6c 6d 4a 56 36 37 31 4b 44 72 4b 62 42 7a 6b 76 6e 42 34 71 74 79 53 49 6f 61 75 42 53 73 54 73 4e 4a 78 53 30 59 62 64 6c 74 67 55 43 79 68 2b 72 7a 66 34 2f 48 75 35 66 41 79 62 72 41 64 37 31 61 44 66 4f 47 67 43 66 32 43 4a 64 63 68 43 4a 36 47 6a 4e 50 41 4a 6d 4a 49 31 4a 70 72 67 7a 41 56 Data Ascii: "aDEYY7ih6YuaWkfhRpCIh8aYfpo4F7CLqAN/tQapNzkTOY+HKv5wFTOGyYkKRXKbVhRbzArTSM8HyuvdQAkYonHnjS+xzrQgrBArnYR+feCmox0EgljNsH0kU4WCxNDE2vidpcjuyxKSUltRkFVA0w3kKkclmJV671KDrKbBzkvnB4qtySIoauBSsTsNJxS0YbdltgUCyh+rzf4/Hu5fAybrAd71aDfOGgCf2CJdchCJ6GjNPAJmJI1JprgzAV
2025-03-10 11:36:11 UTC	227	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:36:11 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * strict-transport-security: max-age=31536000
2025-03-10 11:36:11 UTC	16157	IN	Data Raw: 33 33 39 66 0d 0a 22 69 4d 67 71 79 4e 4b 67 76 55 2b 67 68 6d 49 39 38 59 42 73 5a 45 77 64 74 55 57 46 6c 32 49 77 43 6c 61 70 54 66 36 61 41 42 36 74 5a 6c 4a 4a 4d 76 69 4c 58 6f 63 48 37 44 4a 58 34 32 4e 66 65 6c 64 62 62 77 71 54 47 34 5a 67 59 43 61 46 6b 71 72 6c 53 63 50 67 72 47 37 55 72 75 6b 56 4d 5a 35 58 34 30 67 67 6f 52 7a 51 50 5a 58 68 69 4d 36 6f 30 57 68 41 6a 51 54 79 75 57 67 59 51 4f 67 52 77 50 32 6b 47 44 63 62 4c 62 34 49 6f 74 77 36 55 39 38 70 56 61 46 79 37 57 63 71 63 63 46 33 55 42 2f 6c 64 55 43 53 6b 46 2b 52 71 4a 68 76 54 4d 6f 71 45 58 57 52 5a 56 78 55 4e 56 64 35 76 6e 31 45 2b 2f 50 7a 6c 6a 79 66 65 4a 31 67 5a 41 6e 41 59 51 30 5a 37 75 74 66 2b 5a 75 68 59 6d 42 77 70 30 69 44 71 4c 6e 6b 62 4c 67 72 39 76 45 53 Data Ascii: 339f"iMgqyNKgvU+ghmI98YBsZEwdtUWFl2IwClapTf6aAB6tZlJJMviLXocH7DJX42NfeldbbwqTG4ZgYCaFkqrlScPgrG7UrukVMZ5X40ggoRzQPZXhiM6o0WhAjQTyuWgYQOgRwP2kGDcbLb4Iotw6U98pVaFy7WcqccF3UB/ldUCSkF+RqJhvTMoqEXWRZVxUNVd5vn1E+/PzljyfeJ1gZAnAYQ0Z7utf+ZuhYmBwp0iDqLnkbLgr9vES
2025-03-10 11:36:12 UTC	16384	IN	Data Raw: 43 34 6c 41 56 6c 66 75 63 79 6a 33 65 2f 6f 5a 52 38 50 72 43 6c 6b 69 6d 6c 6d 34 53 4f 37 50 56 7a 4b 2b 48 50 33 43 78 32 55 58 47 67 4b 32 2f 49 67 69 6b 30 41 4f 6f 32 66 65 64 58 49 71 36 59 73 59 35 66 72 4b 68 79 47 49 78 39 72 69 59 4a 2f 71 6e 30 30 43 72 4f 35 77 41 51 6e 30 41 4a 70 47 4b 76 73 31 49 6f 4b 58 62 6f 44 53 35 49 79 4e 43 67 53 73 75 35 79 73 43 47 32 6e 66 64 30 65 46 38 72 4e 6c 34 36 66 36 38 75 44 47 79 38 77 69 71 78 31 32 7a 75 4e 56 38 4b 34 62 54 6f 6f 72 63 34 2f 4b 61 53 63 32 41 52 64 77 77 38 71 74 78 62 70 49 6d 65 41 46 65 58 70 55 47 56 61 6e 79 77 77 79 47 50 6d 58 6d 6b 6d 6f 52 41 75 64 64 51 66 6e 4e 6c 7a 6d 77 38 4f 70 37 77 62 2b 72 4e 41 55 63 78 68 41 67 76 67 4e 6f 2f 70 44 56 56 4c 44 32 39 58 4e 6c 4d Data Ascii: C4lAVlfucyj3e/oZR8PrClkimlm4SO7PVzK+HP3Cx2UXGgK2/Igik0AOo2fedXIq6YsY5frKhyGIx9riYJ/qn00CrO5wAQn0AJpGKvs1IoKXboDS5IyNCgSsu5ysCG2nfd0eF8rNl46f68uDGy8wiqx12zuNV8K4bToorc4/KaSc2ARdww8qtxbpImeAFeXpUGVanywwyGPmXmkmoRAuddQfnNlzmw8Op7wb+rNAUcxhAgvgNo/pDVVLD29XNlM
2025-03-10 11:36:12 UTC	9761	IN	Data Raw: 51 43 63 47 37 2b 57 75 47 4b 76 6c 46 74 59 66 6d 4c 53 4a 4d 32 63 6a 74 36 46 78 65 50 75 4f 49 6b 73 54 6f 58 79 78 66 43 76 57 51 50 6a 49 42 4b 4c 65 47 6f 31 51 68 32 66 4b 6f 33 53 56 31 72 4f 63 66 31 69 59 49 67 62 4a 42 4c 66 49 6e 43 30 63 58 42 34 53 6c 4a 46 59 6d 67 53 52 6b 65 53 56 47 50 79 4a 51 2f 35 62 31 50 42 5a 70 42 6c 72 4d 2f 54 56 73 4d 75 77 5a 68 32 76 49 47 77 2f 49 50 39 4e 4e 75 4f 76 4b 4c 46 67 49 71 42 30 6f 45 31 59 6a 54 6b 44 52 6d 33 54 4d 66 38 70 31 71 76 71 59 51 38 31 45 59 78 70 6c 6d 42 32 59 31 64 4b 62 6d 74 50 6d 39 78 35 61 51 48 35 6d 54 6f 49 61 32 71 6c 2b 42 42 64 45 63 58 69 53 76 36 76 31 6f 77 4e 57 45 50 69 30 2b 57 4f 4e 44 59 74 6e 64 42 4f 4f 72 6e 45 6d 49 57 79 68 6b 53 48 57 55 4c 63 52 37 43 Data Ascii: QCcG7+WuGKvlFtYfmLSJM2cjt6FxePuOIksToXyxfCvWQPjIBKLeGo1Qh2fKo3SV1rOcf1iYIgbJBLfInC0cXB4SlJFYmgSRkeSVGPyJQ/5b1PBZpBlrM/TVsMuwZh2vIGw/IP9NNuOvKLFgIqB0oE1YjTkDRm3TMf8p1qvqYQ81EYxplmB2Y1dKbmtPm9x5aQH5mToIa2ql+BBdEcXiSv6v1owNWEPi0+WONDYtndBOOrnEmIWyhkSHWULcR7C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49743	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:11 UTC	486	OUT	GET /apipmx/GetSurveyProperties HTTP/1.1 Host: survey2.lamresearch.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Or\|Z87On
2025-03-10 11:36:11 UTC	177	IN	HTTP/1.1 405 Method Not Allowed Date: Mon, 10 Mar 2025 11:36:11 GMT Transfer-Encoding: chunked Connection: close allow: POST strict-transport-security: max-age=31536000
2025-03-10 11:36:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49746	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:13 UTC	480	OUT	GET /apipmx/GetSurveyData HTTP/1.1 Host: survey2.lamresearch.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _ultcsr=icvm02iiifwtaoibazh3jejk; SERVERpart=part-1\|Z87Or\|Z87On
2025-03-10 11:36:14 UTC	228	IN	HTTP/1.1 405 Method Not Allowed Date: Mon, 10 Mar 2025 11:36:14 GMT Transfer-Encoding: chunked Connection: close allow: POST strict-transport-security: max-age=31536000 set-cookie: SERVERpart=part-1\|Z87Os\|Z87On; path=/
2025-03-10 11:36:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49751	51.195.65.78	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:14 UTC	672	OUT	GET /clients/lamresearch/104.png?no=804411596 HTTP/1.1 Host: cdnstatic.sogolytics.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://survey2.lamresearch.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 11:36:14 UTC	347	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 10 Mar 2025 11:36:14 GMT Content-Type: text/html Content-Length: 195 Connection: close Location: https://static.sogolytics.com/clients/lamresearch/104.png?no=463706920 X-Age: 1480709 X-Cache: HIT X-Storage: 809596973:8001 X-Edge-IP: 51.195.65.78 X-Edge-Location: Frankfurt, DE
2025-03-10 11:36:14 UTC	195	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 4d 69 63 72 6f 73 6f 66 74 2d 41 7a 75 72 65 2d 41 70 70 6c 69 63 61 74 69 6f 6e 2d 47 61 74 65 77 61 79 2f 76 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>Microsoft-Azure-Application-Gateway/v2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49750	51.195.65.78	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:14 UTC	695	OUT	GET /clients/lamresearch/escalation_qimg_22228359_1.jpg?no=804411596 HTTP/1.1 Host: cdnstatic.sogolytics.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://survey2.lamresearch.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 11:36:14 UTC	483	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 10 Mar 2025 11:36:14 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 389 Connection: close location: https://static.sogolytics.com/clients/LamResearch/escalation_qimg_22228359_1.jpg?no=902194920 strict-transport-security: max-age=31536000 set-cookie: SERVERrimg=rimg-1\|Z87E3\|Z87E3; path=/ X-Age: 2515 X-Cache: HIT X-Storage: 809596973:8001 X-Edge-IP: 51.195.65.78 X-Edge-Location: Frankfurt, DE
2025-03-10 11:36:14 UTC	389	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 73 6f 67 6f 6c 79 74 69 63 73 2e 63 6f 6d 2f 63 6c 69 65 6e 74 73 2f 4c 61 6d 52 65 73 65 61 72 63 68 2f 65 73 63 61 6c 61 74 69 6f 6e 5f 71 69 6d 67 5f 32 32 32 32 38 33 35 39 5f 31 2e 6a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://static.sogolytics.com/clients/LamResearch/escalation_qimg_22228359_1.j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49752	51.195.65.78	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:14 UTC	698	OUT	GET /clients/lamresearch/scorecard.img_qimg_22228361_1.jpg?no=804411596 HTTP/1.1 Host: cdnstatic.sogolytics.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://survey2.lamresearch.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 11:36:14 UTC	486	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 10 Mar 2025 11:36:14 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 392 Connection: close location: https://static.sogolytics.com/clients/LamResearch/scorecard.img_qimg_22228361_1.jpg?no=902194920 strict-transport-security: max-age=31536000 set-cookie: SERVERrimg=rimg-1\|Z87E3\|Z87E3; path=/ X-Age: 2515 X-Cache: HIT X-Storage: 809596973:8001 X-Edge-IP: 51.195.65.78 X-Edge-Location: Frankfurt, DE
2025-03-10 11:36:14 UTC	392	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 73 6f 67 6f 6c 79 74 69 63 73 2e 63 6f 6d 2f 63 6c 69 65 6e 74 73 2f 4c 61 6d 52 65 73 65 61 72 63 68 2f 73 63 6f 72 65 63 61 72 64 2e 69 6d 67 5f 71 69 6d 67 5f 32 32 32 32 38 33 36 31 5f Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://static.sogolytics.com/clients/LamResearch/scorecard.img_qimg_22228361_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49753	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:16 UTC	669	OUT	GET /clients/lamresearch/104.png?no=463706920 HTTP/1.1 Host: static.sogolytics.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://survey2.lamresearch.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 11:36:17 UTC	334	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 10 Mar 2025 11:36:16 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 366 Connection: close location: https://static.sogolytics.com/clients/LamResearch/104.png?no=463706920 strict-transport-security: max-age=31536000 set-cookie: SERVERrimg=rimg-1\|Z87Os\|Z87Os; path=/
2025-03-10 11:36:17 UTC	366	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 73 6f 67 6f 6c 79 74 69 63 73 2e 63 6f 6d 2f 63 6c 69 65 6e 74 73 2f 4c 61 6d 52 65 73 65 61 72 63 68 2f 31 30 34 2e 70 6e 67 3f 6e 6f 3d 34 36 33 37 30 36 39 32 30 22 3e 68 65 72 65 3c 2f Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://static.sogolytics.com/clients/LamResearch/104.png?no=463706920">here</

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49754	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:16 UTC	692	OUT	GET /clients/LamResearch/escalation_qimg_22228359_1.jpg?no=902194920 HTTP/1.1 Host: static.sogolytics.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://survey2.lamresearch.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 11:36:17 UTC	401	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:36:16 GMT Content-Type: image/jpeg Content-Length: 17438 Connection: close last-modified: Mon, 10 Mar 2025 06:57:20 GMT etag: "441e-62ff77bd0f5d3" accept-ranges: bytes x-frame-options: SAMEORIGIN access-control-allow-origin: * strict-transport-security: max-age=31536000 set-cookie: SERVERrimg=rimg-1\|Z87Os\|Z87Os; path=/ cache-control: private
2025-03-10 11:36:17 UTC	15983	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 90 00 90 00 00 ff fe 00 12 4c 45 41 44 54 4f 4f 4c 53 20 76 32 32 2e 30 00 ff db 00 84 00 05 05 05 08 05 08 0c 07 07 0c 0c 09 09 09 0c 0d 0c 0c 0c 0c 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 01 05 08 08 0a 07 0a 0c 07 07 0c 0d 0c 0a 0c 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 Data Ascii: JFIFLEADTOOLS v22.0}
2025-03-10 11:36:17 UTC	1455	IN	Data Raw: f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 Data Ascii: "Ps?"Ps?"Ps?"Ps?"Ps?"Ps?"Ps?"Ps?"Ps?"Ps?"Ps?"Ps?"Ps?"Ps?"Ps?"Ps?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49755	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:16 UTC	695	OUT	GET /clients/LamResearch/scorecard.img_qimg_22228361_1.jpg?no=902194920 HTTP/1.1 Host: static.sogolytics.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://survey2.lamresearch.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 11:36:18 UTC	401	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:36:17 GMT Content-Type: image/jpeg Content-Length: 26296 Connection: close last-modified: Mon, 10 Mar 2025 07:45:17 GMT etag: "66b8-62ff82741bcec" accept-ranges: bytes x-frame-options: SAMEORIGIN access-control-allow-origin: * strict-transport-security: max-age=31536000 set-cookie: SERVERrimg=rimg-1\|Z87Ot\|Z87Ot; path=/ cache-control: private
2025-03-10 11:36:18 UTC	15983	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 90 00 90 00 00 ff fe 00 12 4c 45 41 44 54 4f 4f 4c 53 20 76 32 32 2e 30 00 ff db 00 84 00 05 05 05 08 05 08 0c 07 07 0c 0c 09 09 09 0c 0d 0c 0c 0c 0c 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 01 05 08 08 0a 07 0a 0c 07 07 0c 0d 0c 0a 0c 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 Data Ascii: JFIFLEADTOOLS v22.0}
2025-03-10 11:36:18 UTC	10313	IN	Data Raw: 4d 3e 6a 7f df f7 ef ca 93 e6 6b e3 87 27 29 89 1d 92 6a 37 f3 a5 f6 a1 a7 58 eb 23 54 90 47 e6 d9 3b 6a ea 82 e7 36 cb 6b 31 bf 8d da d6 4b 6f 2d 57 ca b6 fb 39 85 e5 12 2b 9f 39 cf a0 ea ba 14 29 bc 3e 1b 13 5b 04 f0 b1 e6 e4 af 15 82 72 74 ad 55 d5 a7 f5 69 45 55 8d 5e 66 f9 ea fb 4e 78 c1 c5 a5 ec d2 ba cb 99 d5 8c a5 18 de ea 9b 92 bb 51 b2 f6 6e 93 e6 8f bc a4 93 e5 8e ae b7 3c 5a 93 93 4e 2f 13 3e 8b 26 97 ae 7f 6c 88 cf 88 43 6a 22 25 97 1f 6e 10 8d ff 00 63 fb 1e 0f 9f f6 31 6b e5 b4 9e 4f ee 36 fd a8 dc 65 4d c5 56 09 63 23 89 cb fe a2 e5 fd 9d 6c 37 3b 87 fb bf 3b e5 f6 fe de ff 00 bb f6 fe db 99 47 da 7e f2 fe c5 53 d7 d9 1d 0f 97 da d4 f6 bd 17 ee ef d6 0a 9f bb c9 d3 99 cf 9e f6 b4 bd a3 77 b3 b1 f4 2d 87 fc 7b 45 ff 00 5c 93 ff 00 41 15 f9 Data Ascii: M>jk')j7X#TG;j6k1Ko-W9+9)>[rtUiEU^fNxQn<ZN/>&lCj"%nc1kO6eMVc#l7;;G~Sw-{E\A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49756	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:19 UTC	669	OUT	GET /clients/LamResearch/104.png?no=463706920 HTTP/1.1 Host: static.sogolytics.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://survey2.lamresearch.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 11:36:20 UTC	400	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:36:19 GMT Content-Type: image/png Content-Length: 10101 Connection: close last-modified: Thu, 26 Mar 2020 07:34:38 GMT etag: "2775-5a1bd04625f80" accept-ranges: bytes x-frame-options: SAMEORIGIN access-control-allow-origin: * strict-transport-security: max-age=31536000 set-cookie: SERVERrimg=rimg-1\|Z87Ot\|Z87Ot; path=/ cache-control: private
2025-03-10 11:36:20 UTC	10101	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 2a 00 00 02 2a 08 03 00 00 00 3d ee 91 81 00 00 00 ba 50 4c 54 45 ff ff ff 00 5f 9c 00 58 98 00 5c 9a 00 5a 99 00 56 97 dd eb f2 00 55 97 66 9a c0 5d 91 b9 00 53 96 e4 ef f4 2a 72 a7 f4 f9 fb 00 64 9f 58 8f b8 00 50 94 a3 c3 d9 73 a1 c4 4b 83 b0 1d 6e a5 42 7e ae 88 b2 cf e1 ed f3 24 71 a7 2a 77 ac ef f5 f9 00 4c 92 f2 f8 fb d4 e4 ef cf de eb b6 d0 e2 c3 d8 e7 00 4a 92 98 bc d4 bb d3 e3 8d b3 ce a8 c5 da 7d a8 c8 42 83 b1 4f 8a b5 78 a5 c6 8d b1 ce 60 96 bc 9e bc d3 6d 9e c2 c6 db e9 16 69 a3 00 40 8d af c3 d4 39 77 a9 45 8c b8 a7 cb df a7 bf d7 4a 80 af 52 90 b8 95 be d5 86 a9 c9 96 b4 cc 6e 94 ba 64 9e c2 72 a7 c8 e3 a8 49 e4 00 00 20 00 49 44 41 54 78 9c ed 9d 7b 83 a2 3a b6 f6 25 17 51 10 c5 2a Data Ascii: PNGIHDR*=PLTE_X\ZVUf]SrdXPsKnB~$qwLJ}BOx`mi@9wEJRndrI IDATx{:%Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49759	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:19 UTC	448	OUT	GET /clients/LamResearch/escalation_qimg_22228359_1.jpg?no=902194920 HTTP/1.1 Host: static.sogolytics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 11:36:20 UTC	401	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:36:20 GMT Content-Type: image/jpeg Content-Length: 17438 Connection: close last-modified: Mon, 10 Mar 2025 06:57:20 GMT etag: "441e-62ff77bd0f5d3" accept-ranges: bytes x-frame-options: SAMEORIGIN access-control-allow-origin: * strict-transport-security: max-age=31536000 set-cookie: SERVERrimg=rimg-1\|Z87Ot\|Z87Ot; path=/ cache-control: private
2025-03-10 11:36:20 UTC	15983	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 90 00 90 00 00 ff fe 00 12 4c 45 41 44 54 4f 4f 4c 53 20 76 32 32 2e 30 00 ff db 00 84 00 05 05 05 08 05 08 0c 07 07 0c 0c 09 09 09 0c 0d 0c 0c 0c 0c 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 01 05 08 08 0a 07 0a 0c 07 07 0c 0d 0c 0a 0c 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 Data Ascii: JFIFLEADTOOLS v22.0}
2025-03-10 11:36:20 UTC	1455	IN	Data Raw: f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 7f f7 c5 97 ff 00 22 50 01 fd 97 73 ff 00 3f f7 Data Ascii: "Ps?"Ps?"Ps?"Ps?"Ps?"Ps?"Ps?"Ps?"Ps?"Ps?"Ps?"Ps?"Ps?"Ps?"Ps?"Ps?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49760	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:19 UTC	828	OUT	GET /survey/assets/css/PM/fonts/pm_icon_font.ttf?j1b9ob HTTP/1.1 Host: survey2.lamresearch.com Connection: keep-alive Origin: https://survey2.lamresearch.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://survey2.lamresearch.com/survey/styles.f238f456d9e78657.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: Enabled=true; _ultcsr=icvm02iiifwtaoibazh3jejk; PublicCorpNo121752=121752; PublicSurveyNo253=253; PublicRecNo1217522533=106347433; SERVERpart=part-1\|Z87Os\|Z87On
2025-03-10 11:36:20 UTC	487	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:36:20 GMT Content-Type: application/octet-stream Content-Length: 2548 Connection: close last-modified: Thu, 06 Mar 2025 13:16:26 GMT accept-ranges: bytes etag: "031d7f6998edb1:0" access-control-allow-origin: * access-control-allow-methods: GET,POST,OPTIONS access-control-allow-headers: Content-Type, soapaction strict-transport-security: max-age=31536000 set-cookie: SERVERpart=part-1\|Z87Ot\|Z87On; path=/ cache-control: private
2025-03-10 11:36:20 UTC	2548	IN	Data Raw: 00 01 00 00 00 0b 00 80 00 03 00 30 4f 53 2f 32 0f 12 05 d9 00 00 00 bc 00 00 00 60 63 6d 61 70 17 56 d2 8b 00 00 01 1c 00 00 00 54 67 61 73 70 00 00 00 10 00 00 01 70 00 00 00 08 67 6c 79 66 01 36 ee 1f 00 00 01 78 00 00 06 20 68 65 61 64 0c ea 40 53 00 00 07 98 00 00 00 36 68 68 65 61 07 c2 03 ca 00 00 07 d0 00 00 00 24 68 6d 74 78 1a 00 00 04 00 00 07 f4 00 00 00 24 6c 6f 63 61 03 6a 05 20 00 00 08 18 00 00 00 14 6d 61 78 70 00 13 00 cb 00 00 08 2c 00 00 00 20 6e 61 6d 65 99 4a 09 fb 00 00 08 4c 00 00 01 86 70 6f 73 74 00 03 00 00 00 00 09 d4 00 00 00 20 00 03 03 ab 01 90 00 05 00 00 02 99 02 cc 00 00 00 8f 02 99 02 cc 00 00 01 eb 00 33 01 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e9 Data Ascii: 0OS/2`cmapVTgasppglyf6x head@S6hhea$hmtx$locaj maxp, nameJLpost 3@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49761	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:19 UTC	451	OUT	GET /clients/LamResearch/scorecard.img_qimg_22228361_1.jpg?no=902194920 HTTP/1.1 Host: static.sogolytics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 11:36:20 UTC	401	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:36:20 GMT Content-Type: image/jpeg Content-Length: 26296 Connection: close last-modified: Mon, 10 Mar 2025 07:45:17 GMT etag: "66b8-62ff82741bcec" accept-ranges: bytes x-frame-options: SAMEORIGIN access-control-allow-origin: * strict-transport-security: max-age=31536000 set-cookie: SERVERrimg=rimg-1\|Z87Ot\|Z87Ot; path=/ cache-control: private
2025-03-10 11:36:20 UTC	15983	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 90 00 90 00 00 ff fe 00 12 4c 45 41 44 54 4f 4f 4c 53 20 76 32 32 2e 30 00 ff db 00 84 00 05 05 05 08 05 08 0c 07 07 0c 0c 09 09 09 0c 0d 0c 0c 0c 0c 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 01 05 08 08 0a 07 0a 0c 07 07 0c 0d 0c 0a 0c 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d ff c4 01 a2 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 Data Ascii: JFIFLEADTOOLS v22.0}
2025-03-10 11:36:20 UTC	10313	IN	Data Raw: 4d 3e 6a 7f df f7 ef ca 93 e6 6b e3 87 27 29 89 1d 92 6a 37 f3 a5 f6 a1 a7 58 eb 23 54 90 47 e6 d9 3b 6a ea 82 e7 36 cb 6b 31 bf 8d da d6 4b 6f 2d 57 ca b6 fb 39 85 e5 12 2b 9f 39 cf a0 ea ba 14 29 bc 3e 1b 13 5b 04 f0 b1 e6 e4 af 15 82 72 74 ad 55 d5 a7 f5 69 45 55 8d 5e 66 f9 ea fb 4e 78 c1 c5 a5 ec d2 ba cb 99 d5 8c a5 18 de ea 9b 92 bb 51 b2 f6 6e 93 e6 8f bc a4 93 e5 8e ae b7 3c 5a 93 93 4e 2f 13 3e 8b 26 97 ae 7f 6c 88 cf 88 43 6a 22 25 97 1f 6e 10 8d ff 00 63 fb 1e 0f 9f f6 31 6b e5 b4 9e 4f ee 36 fd a8 dc 65 4d c5 56 09 63 23 89 cb fe a2 e5 fd 9d 6c 37 3b 87 fb bf 3b e5 f6 fe de ff 00 bb f6 fe db 99 47 da 7e f2 fe c5 53 d7 d9 1d 0f 97 da d4 f6 bd 17 ee ef d6 0a 9f bb c9 d3 99 cf 9e f6 b4 bd a3 77 b3 b1 f4 2d 87 fc 7b 45 ff 00 5c 93 ff 00 41 15 f9 Data Ascii: M>jk')j7X#TG;j6k1Ko-W9+9)>[rtUiEU^fNxQn<ZN/>&lCj"%nc1kO6eMVc#l7;;G~Sw-{E\A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49762	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:22 UTC	425	OUT	GET /clients/LamResearch/104.png?no=463706920 HTTP/1.1 Host: static.sogolytics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-10 11:36:22 UTC	400	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:36:22 GMT Content-Type: image/png Content-Length: 10101 Connection: close last-modified: Thu, 26 Mar 2020 07:34:38 GMT etag: "2775-5a1bd04625f80" accept-ranges: bytes x-frame-options: SAMEORIGIN access-control-allow-origin: * strict-transport-security: max-age=31536000 set-cookie: SERVERrimg=rimg-1\|Z87Ou\|Z87Ou; path=/ cache-control: private
2025-03-10 11:36:22 UTC	10101	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 2a 00 00 02 2a 08 03 00 00 00 3d ee 91 81 00 00 00 ba 50 4c 54 45 ff ff ff 00 5f 9c 00 58 98 00 5c 9a 00 5a 99 00 56 97 dd eb f2 00 55 97 66 9a c0 5d 91 b9 00 53 96 e4 ef f4 2a 72 a7 f4 f9 fb 00 64 9f 58 8f b8 00 50 94 a3 c3 d9 73 a1 c4 4b 83 b0 1d 6e a5 42 7e ae 88 b2 cf e1 ed f3 24 71 a7 2a 77 ac ef f5 f9 00 4c 92 f2 f8 fb d4 e4 ef cf de eb b6 d0 e2 c3 d8 e7 00 4a 92 98 bc d4 bb d3 e3 8d b3 ce a8 c5 da 7d a8 c8 42 83 b1 4f 8a b5 78 a5 c6 8d b1 ce 60 96 bc 9e bc d3 6d 9e c2 c6 db e9 16 69 a3 00 40 8d af c3 d4 39 77 a9 45 8c b8 a7 cb df a7 bf d7 4a 80 af 52 90 b8 95 be d5 86 a9 c9 96 b4 cc 6e 94 ba 64 9e c2 72 a7 c8 e3 a8 49 e4 00 00 20 00 49 44 41 54 78 9c ed 9d 7b 83 a2 3a b6 f6 25 17 51 10 c5 2a Data Ascii: PNGIHDR*=PLTE_X\ZVUf]SrdXPsKnB~$qwLJ}BOx`mi@9wEJRndrI IDATx{:%Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49765	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:23 UTC	1015	OUT	GET /survey/faviconempty.ico HTTP/1.1 Host: survey2.lamresearch.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://survey2.lamresearch.com/survey/form?k=SsQRQWURsRUSsPsPsPsWTRTXRWWP&lang=0 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: Enabled=true; _ultcsr=icvm02iiifwtaoibazh3jejk; PublicCorpNo121752=121752; PublicSurveyNo253=253; PublicRecNo1217522533=106347433; SERVERpart=part-1\|Z87Ot\|Z87On; _ga=GA1.3.1919806549.1741606580; _gid=GA1.3.301968857.1741606580; _gat_UA-72488792-1=1; _ga_0KPBD0RSS4=GS1.1.1741606580.1.0.1741606580.0.0.0; _ga=GA1.1.1919806549.1741606580
2025-03-10 11:36:23 UTC	475	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:36:23 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close last-modified: Thu, 06 Mar 2025 13:16:26 GMT accept-ranges: bytes etag: "031d7f6998edb1:0" access-control-allow-origin: * access-control-allow-methods: GET,POST,OPTIONS access-control-allow-headers: Content-Type, soapaction strict-transport-security: max-age=31536000 set-cookie: SERVERpart=part-1\|Z87Ou\|Z87On; path=/ cache-control: private
2025-03-10 11:36:23 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: h(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49768	20.120.76.149	443	6204	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-10 11:36:25 UTC	755	OUT	GET /survey/faviconempty.ico HTTP/1.1 Host: survey2.lamresearch.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: Enabled=true; _ultcsr=icvm02iiifwtaoibazh3jejk; PublicCorpNo121752=121752; PublicSurveyNo253=253; PublicRecNo1217522533=106347433; _ga=GA1.3.1919806549.1741606580; _gid=GA1.3.301968857.1741606580; _gat_UA-72488792-1=1; _ga_0KPBD0RSS4=GS1.1.1741606580.1.0.1741606580.0.0.0; _ga=GA1.1.1919806549.1741606580; SERVERpart=part-1\|Z87Ou\|Z87On
2025-03-10 11:36:25 UTC	475	IN	HTTP/1.1 200 OK Date: Mon, 10 Mar 2025 11:36:25 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close last-modified: Thu, 06 Mar 2025 13:16:26 GMT accept-ranges: bytes etag: "031d7f6998edb1:0" access-control-allow-origin: * access-control-allow-methods: GET,POST,OPTIONS access-control-allow-headers: Content-Type, soapaction strict-transport-security: max-age=31536000 set-cookie: SERVERpart=part-1\|Z87Ov\|Z87On; path=/ cache-control: private
2025-03-10 11:36:25 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: h(

Target ID:	0
Start time:	07:35:49
Start date:	10/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff77eaf0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	07:35:49
Start date:	10/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1880,i,11868907250734405168,722095431324631732,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:3
Imagebase:	0x7ff77eaf0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	07:35:51
Start date:	10/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://survey2.lamresearch.com/k/SsQRQWURsRUSsPsPsPsWTRTXRWWP"
Imagebase:	0x7ff77eaf0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://survey2.lamresearch.com/k/SsQRQWURsRUSsPsPsPsWTRTXRWWP

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Windows Analysis Report
https://survey2.lamresearch.com/k/SsQRQWURsRUSsPsPsPsWTRTXRWWP