Edit tour

Windows Analysis Report
https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button

Overview

General Information

Sample URL:	https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button
Analysis ID:	1428448
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2616 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6604 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2032,i,3868403765034609967,554055059277287798,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2748 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button

HTTP Parser: No favicon

Source: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button

HTTP Parser: No <meta name="author".. found

Source: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button

HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49738 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.5:49727 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49738 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/bootstrap.min.css?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/css/font-awesome/css/font-awesome.min.css?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/css/ionicons/css/ionicons.min.css?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/css/adminlte.css?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /frontend/assets/css/style.css?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/css/skin-blue.css?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /frontend/assets/cache/1c9ce001/jquery.min.js HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /frontend/assets/cache/1c9ce001/jquery-migrate.min.js HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/js/bootstrap.min.js?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/js/knockout.min.js?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/js/notify.js?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/js/adminlte.js?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /assets/js/cookie.js?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/js/app.js?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /frontend/assets/js/app.js?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: newexra.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B

Source: unknown

DNS traffic detected: queries for: newexra.com

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713477543003&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: chromecache_74.2.dr	String found in binary or memory: http://almsaeedstudio.com
Source: chromecache_73.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by/4.0/
Source: chromecache_82.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_82.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_89.2.dr, chromecache_75.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_73.2.dr	String found in binary or memory: http://ionicons.com/
Source: chromecache_87.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_79.2.dr, chromecache_74.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_79.2.dr	String found in binary or memory: http://www.almsaeedstudio.com
Source: chromecache_87.2.dr	String found in binary or memory: http://www.json.org/json2.js
Source: chromecache_87.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_73.2.dr	String found in binary or memory: https://github.com/driftyco/ionicons
Source: chromecache_73.2.dr	String found in binary or memory: https://github.com/google/material-design-icons
Source: chromecache_76.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_74.2.dr	String found in binary or memory: https://github.com/lipis/bootstrap-social
Source: chromecache_89.2.dr, chromecache_75.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_73.2.dr	String found in binary or memory: https://twitter.com/benjsperry
Source: chromecache_73.2.dr	String found in binary or memory: https://twitter.com/ionicframework
Source: chromecache_84.2.dr, chromecache_85.2.dr, chromecache_88.2.dr	String found in binary or memory: https://www.mailwizz.com)
Source: chromecache_84.2.dr, chromecache_85.2.dr, chromecache_88.2.dr	String found in binary or memory: https://www.mailwizz.com/
Source: chromecache_84.2.dr, chromecache_85.2.dr, chromecache_88.2.dr	String found in binary or memory: https://www.mailwizz.com/license/

Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703

Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.5:49727 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@16/41@6/4

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2032,i,3868403765034609967,554055059277287798,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2032,i,3868403765034609967,554055059277287798,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
newexra.com	91.202.233.192	true	false	unknown
www.google.com	64.233.185.99	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://newexra.com/assets/css/ionicons/css/ionicons.min.css?av=1262687b	false	unknown
https://newexra.com/assets/js/bootstrap.min.js?av=1262687b	false	unknown
https://newexra.com/assets/css/skin-blue.css?av=1262687b	false	unknown
https://newexra.com/assets/css/bootstrap.min.css?av=1262687b	false	unknown
https://newexra.com/frontend/assets/cache/1c9ce001/jquery-migrate.min.js	false	unknown
https://newexra.com/frontend/assets/js/app.js?av=1262687b	false	unknown
https://newexra.com/assets/js/knockout.min.js?av=1262687b	false	unknown
https://newexra.com/frontend/assets/css/style.css?av=1262687b	false	unknown
https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button	false	unknown
https://newexra.com/favicon.ico	false	unknown
https://newexra.com/assets/js/cookie.js?av=1262687b	false	unknown
https://newexra.com/assets/css/font-awesome/css/font-awesome.min.css?av=1262687b	false	unknown
https://newexra.com/assets/js/adminlte.js?av=1262687b	false	unknown
https://newexra.com/assets/css/adminlte.css?av=1262687b	false	unknown
https://newexra.com/assets/js/notify.js?av=1262687b	false	unknown
https://newexra.com/frontend/assets/cache/1c9ce001/jquery.min.js	false	unknown
https://newexra.com/assets/js/app.js?av=1262687b	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://github.com/lipis/bootstrap-social	chromecache_74.2.dr	false	high
http://fontawesome.io	chromecache_82.2.dr	false	high
https://github.com/google/material-design-icons	chromecache_73.2.dr	false	high
https://www.mailwizz.com/	chromecache_84.2.dr, chromecache_85.2.dr, chromecache_88.2.dr	false	high
https://www.mailwizz.com/license/	chromecache_84.2.dr, chromecache_85.2.dr, chromecache_88.2.dr	false	high
https://twitter.com/benjsperry	chromecache_73.2.dr	false	high
https://www.mailwizz.com)	chromecache_84.2.dr, chromecache_85.2.dr, chromecache_88.2.dr	false	low
http://knockoutjs.com/	chromecache_87.2.dr	false	high
http://opensource.org/licenses/MIT	chromecache_79.2.dr, chromecache_74.2.dr	false	high
http://ionicons.com/	chromecache_73.2.dr	false	high
http://www.json.org/json2.js	chromecache_87.2.dr	false	high
https://github.com/driftyco/ionicons	chromecache_73.2.dr	false	high
https://twitter.com/ionicframework	chromecache_73.2.dr	false	high
http://fontawesome.io/license	chromecache_82.2.dr	false	high
http://www.opensource.org/licenses/mit-license.php)	chromecache_87.2.dr	false	high
http://getbootstrap.com)	chromecache_89.2.dr, chromecache_75.2.dr	false	low
http://www.almsaeedstudio.com	chromecache_79.2.dr	false	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_89.2.dr, chromecache_75.2.dr	false	high
https://github.com/js-cookie/js-cookie	chromecache_76.2.dr	false	high
http://creativecommons.org/licenses/by/4.0/	chromecache_73.2.dr	false	high
http://almsaeedstudio.com	chromecache_74.2.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
91.202.233.192	newexra.com	Russian Federation	9009	M247GB	false
64.233.185.99	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428448
Start date and time:	2024-04-18 23:58:28 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@16/41@6/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.253.124.94, 172.217.215.139, 172.217.215.113, 172.217.215.138, 172.217.215.101, 172.217.215.102, 172.217.215.100, 64.233.185.84, 34.104.35.123, 173.194.219.95, 74.125.138.95, 142.250.105.95, 74.125.136.95, 64.233.176.95, 64.233.177.95, 172.253.124.95, 172.217.215.95, 108.177.122.95, 142.251.15.95, 64.233.185.95, 142.250.9.95, 20.114.59.183, 72.21.81.240, 23.40.205.81, 23.40.205.26, 192.229.211.108, 13.95.31.18, 142.250.105.94
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, update.googleapis.com, hlb.apr-52dd2-0.edgecastdns.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 20:59:20 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9795263179523426
Encrypted:	false
SSDEEP:	48:8IdWTS+KHgidAKZdA19ehwiZUklqehRdy+3:8Jvhwdy
MD5:	8B833EA7857B2DEF6161551A6D4C4B05
SHA1:	C42EAE8C3C8CA85A4C6AC15B9F1E40D6FCCEF778
SHA-256:	1473AA9827AD78D229F6941811977A596851BC4E0CBE38C0B271BAA6B7700294
SHA-512:	B691F0ABD953B08E031416DA5C8F6C8251E9D342831531E5B34FF8966B1AF21EB27F4E9279A1EF753F669B43EE260135276CCD300A9615B3A7E8F844AF5A2D8F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......Q....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Xh.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xh.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xh.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xh............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Xj............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........b.B......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 20:59:20 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.991119844487911
Encrypted:	false
SSDEEP:	48:8OdWTS+KHgidAKZdA1weh/iZUkAQkqehgdy+2:8vvT9Q/dy
MD5:	098B5CAD706DC2305DEEF4F46FEE15DD
SHA1:	2CDB242241D506DE2667A5E67E689522D6BE93B8
SHA-256:	BDA1F1918FA6C1AC8F7E4F560FD0144DEA8DB6879BA8B24F00CAA33CBDACE389
SHA-512:	02F0398A84282CDCF2F99661EC6708F6FAE9ECC0ADE988150249DC07323EAFB309D412029EE9DE0346BAF37A6ADAFAEDA13F7377022A6EE887C40EFB395C9D96
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....G:....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Xh.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xh.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xh.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xh............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Xj............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........b.B......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.001717289358877
Encrypted:	false
SSDEEP:	48:8xPdWTS+sHgidAKZdA14tseh7sFiZUkmgqeh7sGdy+BX:8xYvBncdy
MD5:	45E852F4F8624057B21451A05C980EB1
SHA1:	B403C1831832472B328E24A66FBEB89082FC7E07
SHA-256:	DAFC1F426B86E93D0D9C68F6D8DE3F5F587DDA2C9D1591D0CF5E743282C65786
SHA-512:	819BC54FC10D71A87C51345AF0DDAE6A5C23E0D683E03A0331E26F33CFF9BF623ECB38A116A4F38C6F7C201B5C3388CA1A12E63417F980F5BC78398367622C27
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Xh.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xh.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xh.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xh............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........b.B......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 20:59:20 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.990241970864703
Encrypted:	false
SSDEEP:	48:8pdWTS+KHgidAKZdA1vehDiZUkwqehEdy+R:8KvQudy
MD5:	6C48A11DCDFC3A806E63E79CF6DB1801
SHA1:	24453E51507147A7B32B7F4AB8EEF30DCA239074
SHA-256:	67198CC7E3955FEA4655337DB5E37D248AB253EE75F77EB913B836B7CAAE1530
SHA-512:	104EAED53297FD63BBAC562C06D86531869E2A61B9BE497500A5D5337C1FE4EF1B2C76C03E33D562B4FD988F13FAFEA706F656F3F23B96C097CDFDE5B9994C6F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......0....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Xh.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xh.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xh.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xh............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Xj............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........b.B......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 20:59:20 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9796460778637255
Encrypted:	false
SSDEEP:	48:8cdWTS+KHgidAKZdA1hehBiZUk1W1qehCdy+C:8lvQ9idy
MD5:	7C423FC462A564EE2F433577D275C16C
SHA1:	C3615E24ED5A5FA91039316281F726EA8FA33134
SHA-256:	DEB3520D5D509201B328E428659489BCA5877AB8D24131DEE7960E8BEC7878EE
SHA-512:	0579546C890E8A24612D29151A757A5E40CCD08DA37421B1196F654C9C7F4BB32AA8296C08DEB4EDB51729AC2468C8205876917A47F5EFB6A42ED3A6DA8D3E2B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....:I....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Xh.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xh.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xh.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xh............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Xj............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........b.B......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 20:59:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.994591227620801
Encrypted:	false
SSDEEP:	48:8ldWTS+KHgidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbcdy+yT+:8OveT/TbxWOvTbcdy7T
MD5:	0850353A14DC541C2A93307E9F29FAA8
SHA1:	CB370190352A0D6F8A7D318F0890199524BF6ED1
SHA-256:	7BC24450460961337E216BCCE8C4312CDC95582FA0FF4B02BDA5E8233E6A1E71
SHA-512:	FD342B22516ECEE61661F58A592BB330DC4AAC217BC790A99404147AB338E7C9C19D32FFE61DEA2E069C7A0EBDE06A03F2BE182ADC582C89486027C8ECEF9DB4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......$....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Xh.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xh.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xh.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xh............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Xj............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........b.B......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50806)
Category:	downloaded
Size (bytes):	51284
Entropy (8bit):	4.573984507129134
Encrypted:	false
SSDEEP:	384:048l+hhJhjRqFdtYRjJIjsjaHnNfc2C4741mf5HRzL:04DhhjQFduRjJ7uHFcu7Smf5xzL
MD5:	0D6763B67616CB9183F3931313D42971
SHA1:	F0459300E39155DF7AA5E94B3BDB8C8594F49A60
SHA-256:	DE2BBD8E0B32F53A53C1729BEDB350CEA59E9115FBA4F2BED8E2E3DD1F76D9FA
SHA-512:	240A635919DFA2715E18163BB78CAAF125ABD40EB155810980EFD430860E371691DC2F461132948342E16AB6C99DC133245E4D9A2BFE3EBE5036E96BF352E319
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/css/ionicons/css/ionicons.min.css?av=1262687b
Preview:	@charset "UTF-8";/!. Ionicons, v2.0.0. Created by Ben Sperry for the Ionic Framework, http://ionicons.com/. https://twitter.com/benjsperry https://twitter.com/ionicframework. MIT License: https://github.com/driftyco/ionicons.. Android-style icons originally built by Google.s. Material Design Icons: https://github.com/google/material-design-icons. used under CC BY http://creativecommons.org/licenses/by/4.0/. Modified icons to fit ionicon.s grid from original../@font-face{font-family:"Ionicons";src:url("../fonts/ionicons.eot?v=2.0.0");src:url("../fonts/ionicons.eot?v=2.0.0#iefix") format("embedded-opentype"),url("../fonts/ionicons.ttf?v=2.0.0") format("truetype"),url("../fonts/ionicons.woff?v=2.0.0") format("woff"),url("../fonts/ionicons.svg?v=2.0.0#Ionicons") format("svg");font-weight:normal;font-style:normal}.ion,.ionicons,.ion-alert:before,.ion-alert-circled:before,.ion-android-add:before,.ion-android-add-circle:before,.ion-android-alarm-clock:before,.ion-android-alert:

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	230596
Entropy (8bit):	5.026328281726413
Encrypted:	false
SSDEEP:	6144:tDd8jCdBCPExnNr15VeZai31/UpWtF3UtKaGRVElCDqohubj0eF9Fud1gq557aPK:tDd8jCdBCPExnNr15VvWtF3aKaGRVElA
MD5:	315A0BDC202C9B2FE19CFC42EA04D764
SHA1:	D04F2D715A73CA562CAA2544EA885A932F20E185
SHA-256:	7E794BC4608F3355CA991E021119E82FB87DFEA7057A6ACFC88DCBB2E9642082
SHA-512:	A59D555F8B395A345CB2BB9987BB1AF30792804B2CC4BB4A89764C9183AD38E074F71A267ACA8BF61287941F87C8F9929DDDEFA163B254A26AF81282C11806FB
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/css/adminlte.css?av=1262687b
Preview:	./!. AdminLTE v2.3.6. * Author: Almsaeed Studio. * Website: Almsaeed Studio <http://almsaeedstudio.com>. * License: Open source - MIT. * Please visit http://opensource.org/licenses/MIT for more information.!/./. * Core: General Layout Style. * -------------------------. /.html,.body {. min-height: 100%;. height: 100%;.}..layout-boxed html,..layout-boxed body {. height: 100%;.}.body {. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. font-family: sans-serif;. font-weight: 400;. overflow-x: hidden;. overflow-y: auto;.}./ Layout /..wrapper {. min-height: 100%;. position: relative;. overflow: hidden;.}..wrapper:before,..wrapper:after {. content: " ";. display: table;.}..wrapper:after {. clear: both;.}..layout-boxed .wrapper {. max-width: 1250px;. margin: 0 auto;. min-height: 100%;. box-shadow: 0 0 8px rgba(0, 0, 0, 0.5);. position: relative;.}..layout-boxed {. background: url('../img/boxed-bg.jpg') repeat fixed;.}./.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28941)
Category:	downloaded
Size (bytes):	29110
Entropy (8bit):	5.098131946780992
Encrypted:	false
SSDEEP:	768:jryxMjJYkskKzykVtCb+9C8agZMdyKHfivbOCtFKH:3HbjZC7w
MD5:	BA847811448EF90D98D272AECCEF2A95
SHA1:	5814E91BB6276F4DE8B7951C965F2F190A03978D
SHA-256:	898D05A17F2CFC5120DDCDBA47A885C378C0B466F30F0700E502757E24B403A1
SHA-512:	BCED99D9331614757643273441A2B8921103382949AB0E510F386C453EC2A2359DA39680D8A169E6BCBE7531844EAF5F598560F0D133D3FA3A9F6C7502B148DF
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/js/bootstrap.min.js?av=1262687b
Preview:	/!. Bootstrap v3.1.1 (http://getbootstrap.com). * Copyright 2011-2014 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one(a.support.transition.end,function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b()})}(jQuery),+function(a){"use strict";var b='[data-dismiss="alert"]',c=function(c){a(c).on("click",b,this.close)};c.prototype.close=function(b){function c(){f.trigger("closed.bs.alert").remove()}var d=a(this),e=d.attr("

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4938
Entropy (8bit):	4.0610177180520655
Encrypted:	false
SSDEEP:	96:cIBtgSBvwbu1D+2y2O5tMENRk4QUFNNmHJ1sltgRVK1:cIBqSBYq1a2y2itMEf/QS2UIi1
MD5:	449DD3907404CEAD5D8BA6203B3550DC
SHA1:	C9BB690411C3F46145F8EA137E6783929D8C27AA
SHA-256:	3585A42757908BA2ACE27F41B01256F6CF4FFB9679F7AC0FF8957817D5CCFDE1
SHA-512:	AF975D70F9BB4F5C9E10CA9A3F3DA7C71400DEFF2F8BD0CAA3958CA21D5E4CBA60C013317461851DA8891E75514824949FB2616D058F795358661D28797F5990
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/js/cookie.js?av=1262687b
Preview:	/!. JavaScript Cookie v2.1.3. * https://github.com/js-cookie/js-cookie. . Copyright 2006, 2015 Klaus Hartl & Fagner Brack. * Released under the MIT license. */.;(function (factory) {. var registeredInModuleLoader = false;. if (typeof define === 'function' && define.amd) {. define(factory);. registeredInModuleLoader = true;. }. if (typeof exports === 'object') {. module.exports = factory();. registeredInModuleLoader = true;. }. if (!registeredInModuleLoader) {. var OldCookies = window.Cookies;. var api = window.Cookies = factory();. api.noConflict = function () {. window.Cookies = OldCookies;. return api;. };. }.}(function () {. function extend () {. var i = 0;. var result = {};. for (; i < arguments.length; i++) {. var attributes = arguments[ i ];. for (var key in attributes) {. result[key] = attributes[key];. }

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://newexra.com/frontend/assets/cache/1c9ce001/jquery.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	210643
Entropy (8bit):	4.913708674646796
Encrypted:	false
SSDEEP:	6144:JVzMC3Zr2Nx5D+LDQip5y+JRq2ZV4afXkuXb0GL/l+JRdGPDumxJZ+DjcA0MoEY:PzMC3Zr2Nx5D+LDQip5y+JRq2ZV4afXV
MD5:	B94B3FB60C559DB34B7AE821C9368B5F
SHA1:	1D389CC788030FEDB24E709E7D1330EC3789D18F
SHA-256:	2FEFBAF4D062DF56D0335279167BE66E487540EA9DD8DB745A226D64BE95F239
SHA-512:	E8E92320CDBBC71E53F4E54C7CC59AD785E43F7BC56D8C68B9AF08CBBBF6EDBC5EC0FF9FB9886974F0D7545542D9E6817982B5E77CD1BEDB934B1BC0A64E8AC9
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/css/skin-blue.css?av=1262687b
Preview:	:root {. --mz-blue: #63B3ED;. --mz-indigo: #596CFF;. --mz-purple: #6f42c1;. --mz-pink: #d63384;. --mz-red: #F56565;. --mz-orange: #fd7e14;. --mz-yellow: #FBD38D;. --mz-green: #81E6D9;. --mz-teal: #20c997;. --mz-cyan: #0dcaf0;. --mz-white: #fff;. --mz-gray: #5e6278;. --mz-gray-dark: #343a40;. --mz-gray-100: #f8f9fa;. --mz-gray-200: #e9ecef;. --mz-gray-300: #dee2e6;. --mz-gray-400: #ced4da;. --mz-gray-500: #adb5bd;. --mz-gray-600: #6c757d;. --mz-gray-700: #495057;. --mz-gray-800: #343a40;. --mz-gray-900: #212529;. --mz-text-gray: #7e8299;. --mz-form-text-color: #3f4254;. --mz-primary: #009ef7;. --mz-light-primary: #f1fafe;. --mz-primary-text-color: #17a1f7;. --mz-secondary: #8392ab;. --mz-success: #2dce89;. --mz-light-success: #E8FFF3;. --mz-info: #11cdef;. --mz-warning: #fb6340;. --mz-danger: #F1416C;. --mz-light-danger: #fff5f8;. --mz-light: #e9ecef;. --mz-dark: #344767;. --mz

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9373)
Category:	downloaded
Size (bytes):	9774
Entropy (8bit):	5.247988101918291
Encrypted:	false
SSDEEP:	192:FQVn5yyXgGyPE0cmi8NSWqqpULv/cE9OAZFvnsTNYRUivUv:FQVjPeNSRZ/H8MmNjv
MD5:	ADD5B3F0900365F3B4240664DA17760E
SHA1:	7CBD53BFCF830E7C150D6BB55EFCC2832E7543E7
SHA-256:	42338BC162A705B04953FC72340216DBEFB55CF12EC1A6E7CAD04E5E680E26BC
SHA-512:	A18E3C2B06A156AC1852AD26C3C7E11482F76B5263853ADFB3A4011BCD628A466938E5E68F1666F4A8599AF27BFBAD074264F0CEA52E339C1F8360AC8C80041D
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/js/adminlte.js?av=1262687b
Preview:	/! AdminLTE app.js. ================. * Main JS application file for AdminLTE v2. This file. * should be included in all pages. It controls some layout. * options and implements exclusive AdminLTE plugins.. . @Author Almsaeed Studio. * @Support <http://www.almsaeedstudio.com>. * @Email <abdullah@almsaeedstudio.com>. * @version 2.3.6. * @license MIT <http://opensource.org/licenses/MIT>. */.function _init(){"use strict";$.AdminLTE.layout={activate:function(){var a=this;a.fix(),a.fixSidebar(),$(window,".wrapper").resize(function(){a.fix(),a.fixSidebar()})},fix:function(){var a=$(".main-header").outerHeight()+$(".main-footer").outerHeight(),b=$(window).height(),c=$(".sidebar").height();if($("body").hasClass("fixed"))$(".content-wrapper, .right-side").css("min-height",b-$(".main-footer").outerHeight());else{var d;b>=c?($(".content-wrapper, .right-side").css("min-height",b-a),d=b-a):($(".content-wrapper, .right-side").css("min-height",c),d=c);var e=$($.AdminLTE.options.controlSideba

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13326)
Category:	downloaded
Size (bytes):	13467
Entropy (8bit):	5.263709993634405
Encrypted:	false
SSDEEP:	192:arprDN+e3IUefKSfI0bP1CMjt9kdgOFWIa/aC3+sZv9LRS:arprx6PfK2P1CMjt8FWIa2sZVI
MD5:	A36B8E9CBFB4A675225AA408C4D15C0C
SHA1:	FCD46DE9C99E71ED586A850D877FD3B01E8269FD
SHA-256:	16EB18D9C6303CDD50AC58DB5B2B116C5DCC4C43C89424F268F6D13FC599FB19
SHA-512:	403B23497D664AD048027357C77D5DCAFC38C157478E89CEC2B91A221A62225CEA19409DB08EB633042D1E9245F8DA72D929929464913A8356402385A6A6EC3A
Malicious:	false
Reputation:	low
URL:	https://newexra.com/frontend/assets/cache/1c9ce001/jquery-migrate.min.js
Preview:	/! jQuery Migrate v3.4.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+n[a]>+o[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.0";var t=Object.create(null),o=(s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	16550
Entropy (8bit):	4.913182980727161
Encrypted:	false
SSDEEP:	384:ELqQF5+71U5iEChoiD+r460ZsA3GhZK+qKDQt19N3UV1xhbbBHlMFQ6+Fu:ELqQF5c0TBHiFOFu
MD5:	8EB135311DE8119732EBCF00BB775364
SHA1:	6B6ACD0D3B7E1D27C8130899DCA581CB9A415FE9
SHA-256:	AC6BC213C9EF74C63BE52C04725427833977BDFCFF9975974C494B47D4CE5FE2
SHA-512:	F31FF0AAB855C07BFA160CF788752BA6995EDCE57FF308B0DBF41787BC30546DE18251D576440C14A67E605637D6A6EB06CD62D4A0ACADE8FB24AA0052C47397
Malicious:	false
Reputation:	low
URL:	https://newexra.com/frontend/assets/css/style.css?av=1262687b
Preview:	body {. font-family: "Open Sans", Verdana, Arial, Helvetica, sans-serif;. color: #3a3a3a;. background-color: #FFFFFF;.}..content-wrapper {. background-color: #FFFFFF;. padding: 30px 0 0 0;.}.h1,.h2 h3,.h4,.h5 {. font-family: "Helvetica Neue", Arial, Helvetica, sans-serif;. padding: 0 0 0 0;. margin: 0 0 0 0;.}..ctrl-site.act-index .row-large {. margin-left: 0!important;. margin-right: 0!important;.}..ctrl-site.act-index .content {. padding: 0!important;.}..ctrl-site.act-index .container-fluid-large {. width: 100%!important;. padding-left: 0;. padding-right: 0;. left: 0!important;.}.h1.page-heading {. padding-top: 0;. margin-top: 0;. font-size: 30px;.}.h1.page-heading small {. font-size: 12px;.}..related-articles {. margin-top: 10px;.}..related-articles .article {. margin-bottom: 10px;. font-size: 12px;. border-bottom: 1px dotted #c2c2c2;. padding-bottom: 5px;. min-height: 90px;. border-right: 1px dotted #c2c2c2;.}..related-articles .article .title {. font-siz

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27303)
Category:	downloaded
Size (bytes):	27466
Entropy (8bit):	4.752060795123139
Encrypted:	false
SSDEEP:	384:Qi5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8c:Dlr+Klk3YlKfwYUf8l8yQ/T
MD5:	4FBD15CB6047AF93373F4F895639C8BF
SHA1:	12D6861075DE8E293265FF6FF03B1F3ADCB44C76
SHA-256:	DDD92F10AD162C7449EFF0ACAF40598C05B1111739587EDB75E5326B6697C5D5
SHA-512:	F8BE32CBA15170319B5C9F663C6F0C4FFDD4083CF047D80F7B214D302B489ECA25FBEE66DDB9366D758A7598EFC9B9A886B02C9F751AE71F207CB9DB1356243A
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/css/font-awesome/css/font-awesome.min.css?av=1262687b
Preview:	/!. Font Awesome 4.5.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.5.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.5.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.5.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.5.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.5.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.5.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:l36nJdjRR:ZG9
MD5:	4485A2BAFD72B3EB2371C9B1286BBDF3
SHA1:	502BABAD61CDB4D2CFA39D15AE3D23395E9AD97B
SHA-256:	9C6EF9763E8B7231452141B50CEC16E9281C6E18E11298FE1DE104E9B6E9406F
SHA-512:	44A5F2B4CFE613600459D4D0F762A0A3885BEC43D82FD4F094C7D98D75580580FE395A1178AF32BEFB523777355176E66BFAD9DC4703BB6FD156F2E8D82D14B5
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnd8rnfSFlCYRIFDQlsRZgSBQ05l8Fr?alt=proto
Preview:	ChIKBw0JbEWYGgAKBw05l8FrGgA=

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	5593
Entropy (8bit):	5.047886922238787
Encrypted:	false
SSDEEP:	96:x3FligI/LYTDs9jxTJ9bptJxplNJZT76r3yJ37E/9+OSIE:xVEgEnxtxTODQOk
MD5:	9A19754FBD746AE6B603286C3A971E55
SHA1:	C45B906EC95326202C2A8E13545B5C17E92BBDC7
SHA-256:	D1416DC4293EAAE9E4AAC8D5267FB0D5DCB35D9DBC44B63278F75750A1F9CC22
SHA-512:	B4E7421BD39A79044BD4F2B11FE2FCDA7015AE75B189458E15FDA9967C9F7413814FA45F8E0BE1897D218E4D44AF4937A8F8DA8DA9FA9E75859D71DCA805B6C3
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/js/notify.js?av=1262687b
Preview:	/*. This file is part of the MailWizz EMA application.. . @package MailWizz EMA. * @author MailWizz Development Team <support@mailwizz.com>. * @link https://www.mailwizz.com/. * @copyright MailWizz EMA (https://www.mailwizz.com). * @license https://www.mailwizz.com/license/. * @since 1.0. */.;(function( $, window, document, undefined ){...var notify = function() {......var messages = {....error: [],....warning: [],....info: [],....success: [],...};......var options = {....container: '#notify-container',....errorClass: 'alert alert-block alert-danger',....warningClass: 'alert alert-block alert-warning',....infoClass: 'alert alert-block alert-info',....successClass: 'alert alert-block alert-success',....htmlWrapper: '<div class="{CLASS}">{CONTENT}</div>',....htmlCloseButton: '<button type="button" class="close" data-dismiss="alert">.</button>',....htmlHeading: '<p>{CONTENT}</p>',....errorHeading: '',....warningHeading: '',....infoHeading: '',....successHeading: '',........_merged:

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	572
Entropy (8bit):	5.012979234486064
Encrypted:	false
SSDEEP:	12:UJSFQeWd+X5WmYGl3yePD3xvzzAMJ1WylKRRHVifybIRHVv:ivkc1eNHAMJMySR1iybIR1v
MD5:	92F929C4BC5B25C73B8288922E6BDDBA
SHA1:	8FC728C33DCB01BDDA4F2FC005DC2D65778E0723
SHA-256:	6FB1A7F0EF69A34D10191D7AFA3899746645013F058EAC4B4E4D0B3AFAD6B4B3
SHA-512:	85FFEF8F6F935A68E4A6321FDEBA0F631BBF5FD929184D3BFCDA1A38634DE33B70BCA7DC40C184AA301A0585945196F2E1529BA4D83BACBC7ED8B9257469B0D3
Malicious:	false
Reputation:	low
URL:	https://newexra.com/frontend/assets/js/app.js?av=1262687b
Preview:	/*. This file is part of the MailWizz EMA application.. . @package MailWizz EMA. * @author MailWizz Development Team <support@mailwizz.com>. * @link https://www.mailwizz.com/. * @copyright MailWizz EMA (https://www.mailwizz.com). * @license https://www.mailwizz.com/license/. * @since 1.0. */.jQuery(document).ready(function($){.. // since 1.6.4. $('.ctrl-lists form').on('submit', function(){. $(this).css({opacity: .5});. });.. // since 2.4.3. $('.ctrl-surveys form').on('submit', function(){. $(this).css({opacity: .5});. });..});.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 2 colors
Category:	dropped
Size (bytes):	198
Entropy (8bit):	1.9172424882027073
Encrypted:	false
SSDEEP:	3:3/nlrXllvlNl/FXl1ll1lPflQQC/PcelVoX55/w/P3wlz:J1xlF6vHa55/6gz
MD5:	FF82D748B4ADD52E4DD7C8F0B58B89F2
SHA1:	EA69CEBF29F461D7831368697F303EA4F0C69A2D
SHA-256:	DE88C1F678413736E858B27974CD5D2181B3DF891B8999DD93835384B0CA2D8F
SHA-512:	4A5BF02B465CE7D5AED54E9800ED320EB929DDAA6C3ED5B3454D61B93B1EC7496AC1BBB529BE8B2F30A0BF339D452EC3A1F2FDA81F4F32C2D978584D146C48E8
Malicious:	false
Reputation:	low
Preview:	......................(....... ...........@.....................:..........#.......w.......#..........................................................................................................

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (597)
Category:	downloaded
Size (bytes):	68249
Entropy (8bit):	5.3682826223243545
Encrypted:	false
SSDEEP:	1536:CbbHXA6RWSh71JjpqeifPGf2J7RTJGjkJJyh2OsY86DUcQCLv:qAWFekkOYcQ8v
MD5:	0B0128AB9E61554877CBB24986C24F04
SHA1:	30F5C25060787C4FB0FD4A45EE48D82C683145DA
SHA-256:	E8957BB182A5047B07BEA0A49FD22B11614B1AB9AC5B8286FCB2259F48658E73
SHA-512:	D802FF5446AE2A466A414F411E09EFE3C3A15DC24FC7DBDDCF137526B28355CE053D4FCC104FC167A77D97498FED59AF2EC8ED630AA2610A43B242BD746F0A04
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/js/knockout.min.js?av=1262687b
Preview:	/!. Knockout JavaScript library v3.5.1. * (c) The Knockout.js team - http://knockoutjs.com/. * License: MIT (http://www.opensource.org/licenses/mit-license.php). */..(function() {(function(n){var A=this\|\|(0,eval)("this"),w=A.document,R=A.navigator,v=A.jQuery,H=A.JSON;v\|\|"undefined"===typeof jQuery\|\|(v=jQuery);(function(n){"function"===typeof define&&define.amd?define(["exports","require"],n):"object"===typeof exports&&"object"===typeof module?n(module.exports\|\|exports):n(A.ko={})})(function(S,T){function K(a,c){return null===a\|\|typeof a in W?a===c:!1}function X(b,c){var d;return function(){d\|\|(d=a.a.setTimeout(function(){d=n;b()},c))}}function Y(b,c){var d;return function(){clearTimeout(d);.d=a.a.setTimeout(b,c)}}function Z(a,c){c&&"change"!==c?"beforeChange"===c?this.pc(a):this.gb(a,c):this.qc(a)}function aa(a,c){null!==c&&c.s&&c.s()}function ba(a,c){var d=this.qd,e=d[r];e.ra\|\|(this.Qb&&this.mb[c]?(d.uc(c,a,this.mb[c]),this.mb[c]=null,--this.Qb):e.I[c]\|\|d.uc(c,a,e.J?{da:a}:d.$c(a))

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2797
Entropy (8bit):	4.730152899581526
Encrypted:	false
SSDEEP:	48:Ekc1eNgMh5mssfxKssWphSRuRIjuFpEyiH0i9kaH7nnF+yKeesyKeeLkuBjqScG9:xSvxKpYhSRgaMJiH0i9rnF/KeaKekpHr
MD5:	3ADE0B17B1B7C3D1C27ABA12CEEDA1D3
SHA1:	F8C1FE63C016A077E1545D123EB4DB8E8A690C6D
SHA-256:	CF55D95AD63C72F2EEB219DA669CC848CC3022FA4A4798D62ED19ED342460CBE
SHA-512:	316F6B21C9959EB215E9A0591E26AEC6E2EF4EF681694640B076E8C2B268255A793B1AF31BD529CA9374375B2B9DF9A196D97BC51063BE5FC94826338774C9A1
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/js/app.js?av=1262687b
Preview:	/*. This file is part of the MailWizz EMA application.. . @package MailWizz EMA. * @author MailWizz Development Team <support@mailwizz.com>. * @link https://www.mailwizz.com/. * @copyright MailWizz EMA (https://www.mailwizz.com). * @license https://www.mailwizz.com/license/. * @since 1.0. */.jQuery(document).ready(function($){.. ajaxData = {};. if ($('meta[name=csrf-token-name]').length && $('meta[name=csrf-token-value]').length) {. var csrfTokenName = $('meta[name=csrf-token-name]').attr('content');. var csrfTokenValue = $('meta[name=csrf-token-value]').attr('content');. ajaxData[csrfTokenName] = csrfTokenValue;. }.. // input/select/textarea fields help text. $('.has-help-text').popover();. $(document).on('blur', '.has-help-text', function(e) {. if ($(this).data('bs.popover')) {. // this really doesn't want to behave correct unless forced this way!. $(this).data('bs.popover').destroy();. $('.popover')

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65366)
Category:	downloaded
Size (bytes):	99961
Entropy (8bit):	5.103690141294514
Encrypted:	false
SSDEEP:	768:rnB72vDPZJF1Y13kGxw+snfkzaZbZb3PxNCMpm0Fr89YjMXdQJaQ:j6p1Y13NwTk+fPM4891XE
MD5:	8A7442CA6BEDD62CEC4881040B9A9E83
SHA1:	E2D2B846E9EA72A1985458A3748AAB4E01A8FB3A
SHA-256:	E9503448692B738DD260FBD7F7CABF2E11F09B600FA97E6EB3A56EBA5B1A7E9B
SHA-512:	057FD1D2E51DF045DB3DADBD41FAC2B31839C4F651F897CCD24E8AEB3162CA04E37B50977F11DC96B50A25B94EE2525EA2B2539862788E38F43636D0B5B4D192
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/css/bootstrap.min.css?av=1262687b
Preview:	/!. Bootstrap v3.1.1 (http://getbootstrap.com). * Copyright 2011-2014 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /../! normalize.css v3.0.0 \| MIT License \| git.io/normalize */html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:0 0}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{-moz-box-sizing:content-box;box-

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 2 colors
Category:	downloaded
Size (bytes):	198
Entropy (8bit):	1.9172424882027073
Encrypted:	false
SSDEEP:	3:3/nlrXllvlNl/FXl1ll1lPflQQC/PcelVoX55/w/P3wlz:J1xlF6vHa55/6gz
MD5:	FF82D748B4ADD52E4DD7C8F0B58B89F2
SHA1:	EA69CEBF29F461D7831368697F303EA4F0C69A2D
SHA-256:	DE88C1F678413736E858B27974CD5D2181B3DF891B8999DD93835384B0CA2D8F
SHA-512:	4A5BF02B465CE7D5AED54E9800ED320EB929DDAA6C3ED5B3454D61B93B1EC7496AC1BBB529BE8B2F30A0BF339D452EC3A1F2FDA81F4F32C2D978584D146C48E8
Malicious:	false
Reputation:	low
URL:	https://newexra.com/favicon.ico
Preview:	......................(....... ...........@.....................:..........#.......w.......#..........................................................................................................

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 23:59:12.814894915 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 18, 2024 23:59:12.814909935 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 18, 2024 23:59:12.908646107 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 18, 2024 23:59:20.124845982 CEST	49709	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:20.124913931 CEST	443	49709	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:20.125010967 CEST	49709	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:20.125323057 CEST	49709	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:20.125355005 CEST	443	49709	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:20.142971992 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:20.143011093 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:20.143107891 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:20.145054102 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:20.145071983 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:20.873441935 CEST	443	49709	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:20.873980999 CEST	49709	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:20.874042034 CEST	443	49709	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:20.875725985 CEST	443	49709	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:20.875833988 CEST	49709	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:20.880175114 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:20.904093027 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:20.904119968 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:20.904470921 CEST	49709	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:20.904978991 CEST	443	49709	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:20.904995918 CEST	49709	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:20.908119917 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:20.908219099 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:20.909570932 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:20.909746885 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:20.948142052 CEST	443	49709	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:20.951060057 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:20.951073885 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:20.951178074 CEST	49709	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:20.951235056 CEST	443	49709	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:20.997816086 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:20.997823000 CEST	49709	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.192898989 CEST	443	49709	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.192939043 CEST	443	49709	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.192948103 CEST	443	49709	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.193048954 CEST	443	49709	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.193053961 CEST	49709	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.193145990 CEST	49709	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.204744101 CEST	49709	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.204776049 CEST	443	49709	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.315849066 CEST	49713	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.315929890 CEST	443	49713	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.316025019 CEST	49713	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.317497015 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.317528963 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.317589998 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.319185019 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.319210052 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.319291115 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.320573092 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.320655107 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.320739985 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.321474075 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.321573019 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.321698904 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.324594021 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.324991941 CEST	49713	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.325022936 CEST	443	49713	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.331316948 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.331340075 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.332427025 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.332441092 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.333267927 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.333302021 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.334045887 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.334075928 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.368144035 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.800463915 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.800518036 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.800538063 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.800555944 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.800595045 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.800601959 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.800612926 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.800642014 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.800657034 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.800688028 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.800718069 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.800718069 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.800802946 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.800849915 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.800885916 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.800911903 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.800962925 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.800988913 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.801018000 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.805165052 CEST	443	49713	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.805939913 CEST	49713	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.805955887 CEST	443	49713	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.806334019 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.806440115 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.807116985 CEST	443	49713	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.807132959 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.807192087 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.807696104 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.807739973 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.808969975 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.809465885 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.811611891 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.811712980 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.813271046 CEST	49713	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.813456059 CEST	443	49713	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.814521074 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.814703941 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.815279961 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.815315962 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.816553116 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.816659927 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.817379951 CEST	49713	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.817572117 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.818074942 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.818104982 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.818977118 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.819056988 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.820252895 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.820415974 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.821130037 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.821146965 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.827048063 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.828774929 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.828787088 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.832355022 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.832489967 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.833712101 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.833880901 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.834144115 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.834151983 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.860146046 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.860243082 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.862001896 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:21.864154100 CEST	443	49713	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:21.876507998 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.038768053 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.038819075 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.038866997 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.038897038 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.038937092 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.038959980 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.038968086 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.038995028 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.039035082 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.039045095 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.039077044 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.039092064 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.039122105 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.039153099 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.039257050 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.039297104 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.039330006 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.039340973 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.039392948 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.039413929 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.095716000 CEST	49718	443	192.168.2.5	64.233.185.99
Apr 18, 2024 23:59:22.095748901 CEST	443	49718	64.233.185.99	192.168.2.5
Apr 18, 2024 23:59:22.095881939 CEST	49718	443	192.168.2.5	64.233.185.99
Apr 18, 2024 23:59:22.097008944 CEST	49718	443	192.168.2.5	64.233.185.99
Apr 18, 2024 23:59:22.097023010 CEST	443	49718	64.233.185.99	192.168.2.5
Apr 18, 2024 23:59:22.276503086 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.276550055 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.276592970 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.276612043 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.276649952 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.276663065 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.276688099 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.276700974 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.276796103 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.276808977 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.276884079 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.278445005 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.278474092 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.280554056 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.280642033 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.280874014 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.283282042 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.283322096 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.323529005 CEST	443	49718	64.233.185.99	192.168.2.5
Apr 18, 2024 23:59:22.324862003 CEST	49718	443	192.168.2.5	64.233.185.99
Apr 18, 2024 23:59:22.324875116 CEST	443	49718	64.233.185.99	192.168.2.5
Apr 18, 2024 23:59:22.326450109 CEST	443	49718	64.233.185.99	192.168.2.5
Apr 18, 2024 23:59:22.326512098 CEST	49718	443	192.168.2.5	64.233.185.99
Apr 18, 2024 23:59:22.335973024 CEST	49718	443	192.168.2.5	64.233.185.99
Apr 18, 2024 23:59:22.336065054 CEST	443	49718	64.233.185.99	192.168.2.5
Apr 18, 2024 23:59:22.387506962 CEST	49718	443	192.168.2.5	64.233.185.99
Apr 18, 2024 23:59:22.387518883 CEST	443	49718	64.233.185.99	192.168.2.5
Apr 18, 2024 23:59:22.418817997 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 18, 2024 23:59:22.418910980 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 18, 2024 23:59:22.436163902 CEST	49718	443	192.168.2.5	64.233.185.99
Apr 18, 2024 23:59:22.506278992 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.506344080 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.506364107 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.506402969 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.506447077 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.506459951 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.506524086 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.506553888 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.506561041 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.506561995 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.506587982 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.506599903 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.506609917 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.506638050 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.506656885 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.509777069 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.509830952 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.509872913 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.509922028 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.509947062 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.509972095 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.510010958 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.510457993 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.510499001 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.510525942 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.510533094 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.510581970 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.510822058 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.510875940 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.510895014 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.510931015 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.510973930 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.511001110 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.511017084 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.511073112 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.511097908 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.511152983 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.511224031 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.511234999 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.511337042 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.511431932 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.513484955 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 18, 2024 23:59:22.515405893 CEST	443	49713	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.515465975 CEST	443	49713	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.515508890 CEST	443	49713	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.515580893 CEST	49713	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.515593052 CEST	443	49713	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.515620947 CEST	443	49713	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.515664101 CEST	49713	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.515675068 CEST	443	49713	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.515710115 CEST	49713	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.515737057 CEST	49713	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.515742064 CEST	443	49713	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.515827894 CEST	49713	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.515831947 CEST	443	49713	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.515925884 CEST	49713	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.522655010 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.522682905 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.523495913 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.523535013 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.523646116 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.526441097 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.526457071 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.531475067 CEST	49713	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.531491041 CEST	443	49713	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.532502890 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.532529116 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.532713890 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.535862923 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.535876036 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.556298971 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.556330919 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.556340933 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.556500912 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.556504011 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.556566000 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.556576967 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.556641102 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.556641102 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.556960106 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.556981087 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.557018042 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.557024002 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.557061911 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.559695005 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.609783888 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.739092112 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.739161015 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.739213943 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.739285946 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.739326954 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.739383936 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.739554882 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.739607096 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.739645004 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.739658117 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.739690065 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.739733934 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.739871979 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.739917040 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.739948034 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.739959002 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.739985943 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.740024090 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.745023012 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.745052099 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.745100021 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.745124102 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.745168924 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.745201111 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.745220900 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.745246887 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.745301962 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.745315075 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.745412111 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.745471001 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.766536951 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.792476892 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.792507887 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.793348074 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.793447971 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.793550968 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.799351931 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.799385071 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.799436092 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.799447060 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.799606085 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.799614906 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.799664974 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.799700022 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.799743891 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.799787045 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.799793959 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.799844980 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.799864054 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.800123930 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.800173998 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.800228119 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.800235033 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.800268888 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.800359011 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.816574097 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.824552059 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.824564934 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.825679064 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.825711012 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.825728893 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.826651096 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.826838017 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.827054977 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.872117996 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.972085953 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.972115040 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.972136974 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.972177982 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.972214937 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.972240925 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.972244978 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.972254992 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.972276926 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.972321987 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.972871065 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.972893953 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.972949028 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.972961903 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.972980976 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.973284960 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.973320961 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.973364115 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.973372936 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.973419905 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.973455906 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.973478079 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.973515034 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.973521948 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:22.973572016 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:22.973952055 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.004791975 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.005815983 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.005845070 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.006231070 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.007692099 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.007814884 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.008033991 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.015328884 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.015360117 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.015412092 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.015431881 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.015469074 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.024622917 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.027128935 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.027142048 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.028620005 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.028759956 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.029839993 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.029912949 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.030249119 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.030256987 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.041778088 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.041810989 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.041862011 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.041939020 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.041956902 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.042043924 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.042043924 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.042654037 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.042696953 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.042777061 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.042777061 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.042784929 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.042829037 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.043011904 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.043055058 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.043104887 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.043111086 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.043145895 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.043191910 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.043235064 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.043240070 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.043271065 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.043299913 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.043329954 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.043340921 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.043411970 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.043453932 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.043515921 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.043520927 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.043564081 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.043564081 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.043612957 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.043654919 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.043704987 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.043709993 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.043730021 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.043761015 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.043761015 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.052158117 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.066039085 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.082108021 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.195385933 CEST	49723	443	192.168.2.5	23.220.189.216
Apr 18, 2024 23:59:23.195467949 CEST	443	49723	23.220.189.216	192.168.2.5
Apr 18, 2024 23:59:23.195559025 CEST	49723	443	192.168.2.5	23.220.189.216
Apr 18, 2024 23:59:23.198014021 CEST	49723	443	192.168.2.5	23.220.189.216
Apr 18, 2024 23:59:23.198033094 CEST	443	49723	23.220.189.216	192.168.2.5
Apr 18, 2024 23:59:23.205265999 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.205323935 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.205487013 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.205487967 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.205528975 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.205559015 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.205609083 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.205610991 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.205642939 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.205684900 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.205723047 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.205775023 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.205791950 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.205831051 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.205867052 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.205881119 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.205910921 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.205934048 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.205938101 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.205955982 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.206016064 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.206029892 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.206123114 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.206186056 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.207803011 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.207819939 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.208328009 CEST	49724	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.208349943 CEST	443	49724	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.208445072 CEST	49724	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.208919048 CEST	49724	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.208942890 CEST	443	49724	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.284192085 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.284218073 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.284336090 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.284336090 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.284351110 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.284432888 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.284450054 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.284459114 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.284502983 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.284540892 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.284547091 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.284611940 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.284971952 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.284993887 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.285449028 CEST	49725	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.285495043 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.285569906 CEST	49725	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.285972118 CEST	49725	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.285984993 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.302376986 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.302599907 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.302614927 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.303491116 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.303558111 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.304045916 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.304111004 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.304296970 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.304302931 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.345256090 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.423346043 CEST	443	49723	23.220.189.216	192.168.2.5
Apr 18, 2024 23:59:23.423455000 CEST	49723	443	192.168.2.5	23.220.189.216
Apr 18, 2024 23:59:23.429764986 CEST	49723	443	192.168.2.5	23.220.189.216
Apr 18, 2024 23:59:23.429783106 CEST	443	49723	23.220.189.216	192.168.2.5
Apr 18, 2024 23:59:23.430193901 CEST	443	49723	23.220.189.216	192.168.2.5
Apr 18, 2024 23:59:23.478816986 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.478841066 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.478874922 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.478903055 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.478909016 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.478979111 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.482642889 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.482695103 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.482714891 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.482762098 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.482784033 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.482810974 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.482815981 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.482831001 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.483171940 CEST	49723	443	192.168.2.5	23.220.189.216
Apr 18, 2024 23:59:23.483500004 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.483550072 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.483586073 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.483592987 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.483627081 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.488886118 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.488903046 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.489249945 CEST	49726	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.489339113 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.489428997 CEST	49726	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.489687920 CEST	49726	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.489722967 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.520550966 CEST	49723	443	192.168.2.5	23.220.189.216
Apr 18, 2024 23:59:23.529002905 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.568145037 CEST	443	49723	23.220.189.216	192.168.2.5
Apr 18, 2024 23:59:23.626712084 CEST	443	49723	23.220.189.216	192.168.2.5
Apr 18, 2024 23:59:23.626867056 CEST	443	49723	23.220.189.216	192.168.2.5
Apr 18, 2024 23:59:23.626974106 CEST	49723	443	192.168.2.5	23.220.189.216
Apr 18, 2024 23:59:23.627154112 CEST	49723	443	192.168.2.5	23.220.189.216
Apr 18, 2024 23:59:23.627196074 CEST	443	49723	23.220.189.216	192.168.2.5
Apr 18, 2024 23:59:23.627224922 CEST	49723	443	192.168.2.5	23.220.189.216
Apr 18, 2024 23:59:23.627242088 CEST	443	49723	23.220.189.216	192.168.2.5
Apr 18, 2024 23:59:23.678998947 CEST	49727	443	192.168.2.5	23.220.189.216
Apr 18, 2024 23:59:23.679030895 CEST	443	49727	23.220.189.216	192.168.2.5
Apr 18, 2024 23:59:23.679424047 CEST	49727	443	192.168.2.5	23.220.189.216
Apr 18, 2024 23:59:23.680043936 CEST	49727	443	192.168.2.5	23.220.189.216
Apr 18, 2024 23:59:23.680061102 CEST	443	49727	23.220.189.216	192.168.2.5
Apr 18, 2024 23:59:23.682303905 CEST	443	49724	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.683245897 CEST	49724	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.683269978 CEST	443	49724	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.684484959 CEST	443	49724	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.685530901 CEST	49724	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.685734034 CEST	443	49724	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.686223030 CEST	49724	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.721945047 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.721975088 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.722069025 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.722094059 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.722213030 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.722316027 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.722342014 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.722409010 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.722414970 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.722443104 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.722469091 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.722476006 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.722522020 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.722537994 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.722687960 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.732120991 CEST	443	49724	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.753561974 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.753623009 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.753643036 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.753660917 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.753695011 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.753700972 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.753722906 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.753751993 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.753765106 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.753765106 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.753813028 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.754807949 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.754859924 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.754906893 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.754916906 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.754929066 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.754987955 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.755112886 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.759120941 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.759138107 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.759720087 CEST	49728	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.759768009 CEST	443	49728	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.759912014 CEST	49728	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.762967110 CEST	49728	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.762995958 CEST	443	49728	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.765250921 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.765328884 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.765332937 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.765600920 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.777733088 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.798223972 CEST	49725	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.798239946 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.798809052 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.800476074 CEST	49719	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.800488949 CEST	443	49719	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.801165104 CEST	49729	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.801184893 CEST	443	49729	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.801253080 CEST	49729	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.802798033 CEST	49725	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.802885056 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.829488039 CEST	49729	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.829505920 CEST	443	49729	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.829803944 CEST	49725	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.872118950 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.886197090 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 18, 2024 23:59:23.886337042 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 18, 2024 23:59:23.900913000 CEST	443	49727	23.220.189.216	192.168.2.5
Apr 18, 2024 23:59:23.901031017 CEST	49727	443	192.168.2.5	23.220.189.216
Apr 18, 2024 23:59:23.927619934 CEST	49727	443	192.168.2.5	23.220.189.216
Apr 18, 2024 23:59:23.927658081 CEST	443	49727	23.220.189.216	192.168.2.5
Apr 18, 2024 23:59:23.928652048 CEST	443	49727	23.220.189.216	192.168.2.5
Apr 18, 2024 23:59:23.930027008 CEST	49727	443	192.168.2.5	23.220.189.216
Apr 18, 2024 23:59:23.976119041 CEST	443	49727	23.220.189.216	192.168.2.5
Apr 18, 2024 23:59:23.977602959 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.977989912 CEST	49726	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.978013992 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.979165077 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.980576992 CEST	49726	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:23.980761051 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:23.980791092 CEST	49726	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.013108015 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.013128996 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.013137102 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.013154030 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.013202906 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.013223886 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.013274908 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.013362885 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.013401031 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.016885042 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.016901016 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.016978979 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.016997099 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.028115034 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.028141022 CEST	49726	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.059209108 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.105657101 CEST	443	49727	23.220.189.216	192.168.2.5
Apr 18, 2024 23:59:24.105751038 CEST	443	49727	23.220.189.216	192.168.2.5
Apr 18, 2024 23:59:24.105947971 CEST	49727	443	192.168.2.5	23.220.189.216
Apr 18, 2024 23:59:24.109714985 CEST	49727	443	192.168.2.5	23.220.189.216
Apr 18, 2024 23:59:24.109743118 CEST	443	49727	23.220.189.216	192.168.2.5
Apr 18, 2024 23:59:24.109770060 CEST	49727	443	192.168.2.5	23.220.189.216
Apr 18, 2024 23:59:24.109787941 CEST	443	49727	23.220.189.216	192.168.2.5
Apr 18, 2024 23:59:24.150700092 CEST	443	49724	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.150762081 CEST	443	49724	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.150845051 CEST	49724	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.150904894 CEST	443	49724	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.150945902 CEST	443	49724	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.151010990 CEST	49724	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.157103062 CEST	49724	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.157135010 CEST	443	49724	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.247178078 CEST	443	49728	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.251101017 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.251113892 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.251188993 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.251199007 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.251239061 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.251269102 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.251292944 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.252912045 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.252929926 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.252960920 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.253005981 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.253012896 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.253048897 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.253067970 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.253093958 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.262857914 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.262916088 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.262936115 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.262995005 CEST	49725	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.263065100 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.263108969 CEST	49725	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.263113022 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.263144016 CEST	49725	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.263190031 CEST	49725	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.277358055 CEST	49728	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.277390957 CEST	443	49728	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.277910948 CEST	443	49728	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.279772043 CEST	49728	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.279863119 CEST	443	49728	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.288561106 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.288580894 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.304605961 CEST	49728	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.308068037 CEST	443	49729	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.308980942 CEST	49729	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.309019089 CEST	443	49729	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.309444904 CEST	49725	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.309475899 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.310158014 CEST	443	49729	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.311491966 CEST	49729	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.311676979 CEST	443	49729	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.316021919 CEST	49729	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.352121115 CEST	443	49728	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.360114098 CEST	443	49729	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.461307049 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.461338043 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.461432934 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.461555004 CEST	49726	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.461555004 CEST	49726	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.465677977 CEST	49726	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.465722084 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.724905014 CEST	443	49728	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.724952936 CEST	443	49728	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.725044966 CEST	49728	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.725081921 CEST	443	49728	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.725121975 CEST	443	49728	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.725193024 CEST	49728	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.725954056 CEST	49728	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.725979090 CEST	443	49728	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.780875921 CEST	443	49729	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.781059027 CEST	443	49729	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:24.781167984 CEST	49729	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.781680107 CEST	49729	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:24.781716108 CEST	443	49729	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:25.468617916 CEST	49730	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:25.468698978 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:25.468841076 CEST	49730	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:25.476623058 CEST	49730	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:25.476659060 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:25.948914051 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:25.952673912 CEST	49730	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:25.952734947 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:25.953258038 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:25.953852892 CEST	49730	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:25.953959942 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:25.954161882 CEST	49730	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:25.996145010 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:26.416043043 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:26.416269064 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:26.416563034 CEST	49730	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:26.422835112 CEST	49730	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:26.422894001 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:26.573997974 CEST	49732	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:26.574054003 CEST	443	49732	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:26.574132919 CEST	49732	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:26.574357033 CEST	49732	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:26.574403048 CEST	443	49732	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:27.062385082 CEST	443	49732	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:27.062781096 CEST	49732	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:27.062807083 CEST	443	49732	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:27.064274073 CEST	443	49732	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:27.064347029 CEST	49732	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:27.065584898 CEST	49732	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:27.065668106 CEST	443	49732	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:27.066360950 CEST	49732	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:27.066374063 CEST	443	49732	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:27.106638908 CEST	49732	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:27.546777964 CEST	443	49732	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:27.546880960 CEST	443	49732	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:27.546966076 CEST	49732	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:27.548568964 CEST	49732	443	192.168.2.5	91.202.233.192
Apr 18, 2024 23:59:27.548595905 CEST	443	49732	91.202.233.192	192.168.2.5
Apr 18, 2024 23:59:32.309458971 CEST	443	49718	64.233.185.99	192.168.2.5
Apr 18, 2024 23:59:32.309544086 CEST	443	49718	64.233.185.99	192.168.2.5
Apr 18, 2024 23:59:32.309643030 CEST	49718	443	192.168.2.5	64.233.185.99
Apr 18, 2024 23:59:33.080629110 CEST	49718	443	192.168.2.5	64.233.185.99
Apr 18, 2024 23:59:33.080653906 CEST	443	49718	64.233.185.99	192.168.2.5
Apr 18, 2024 23:59:34.267433882 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 18, 2024 23:59:34.267599106 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 18, 2024 23:59:34.269609928 CEST	49738	443	192.168.2.5	23.1.237.91
Apr 18, 2024 23:59:34.269695997 CEST	443	49738	23.1.237.91	192.168.2.5
Apr 18, 2024 23:59:34.269872904 CEST	49738	443	192.168.2.5	23.1.237.91
Apr 18, 2024 23:59:34.282176971 CEST	49738	443	192.168.2.5	23.1.237.91
Apr 18, 2024 23:59:34.282212973 CEST	443	49738	23.1.237.91	192.168.2.5
Apr 18, 2024 23:59:34.420773029 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 18, 2024 23:59:34.420814991 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 18, 2024 23:59:34.614214897 CEST	443	49738	23.1.237.91	192.168.2.5
Apr 18, 2024 23:59:34.614316940 CEST	49738	443	192.168.2.5	23.1.237.91
Apr 18, 2024 23:59:34.709192991 CEST	49738	443	192.168.2.5	23.1.237.91
Apr 18, 2024 23:59:34.709249020 CEST	443	49738	23.1.237.91	192.168.2.5
Apr 18, 2024 23:59:34.710454941 CEST	443	49738	23.1.237.91	192.168.2.5
Apr 18, 2024 23:59:34.710572004 CEST	49738	443	192.168.2.5	23.1.237.91
Apr 18, 2024 23:59:34.726236105 CEST	49738	443	192.168.2.5	23.1.237.91
Apr 18, 2024 23:59:34.726283073 CEST	443	49738	23.1.237.91	192.168.2.5
Apr 18, 2024 23:59:34.727309942 CEST	49738	443	192.168.2.5	23.1.237.91
Apr 18, 2024 23:59:34.727324963 CEST	443	49738	23.1.237.91	192.168.2.5
Apr 18, 2024 23:59:37.718667984 CEST	443	49738	23.1.237.91	192.168.2.5
Apr 18, 2024 23:59:37.718730927 CEST	49738	443	192.168.2.5	23.1.237.91
Apr 18, 2024 23:59:37.718914986 CEST	443	49738	23.1.237.91	192.168.2.5
Apr 18, 2024 23:59:37.718964100 CEST	49738	443	192.168.2.5	23.1.237.91
Apr 18, 2024 23:59:37.718990088 CEST	443	49738	23.1.237.91	192.168.2.5
Apr 18, 2024 23:59:37.719038010 CEST	49738	443	192.168.2.5	23.1.237.91
Apr 19, 2024 00:00:22.034125090 CEST	49743	443	192.168.2.5	64.233.185.99
Apr 19, 2024 00:00:22.034203053 CEST	443	49743	64.233.185.99	192.168.2.5
Apr 19, 2024 00:00:22.034281015 CEST	49743	443	192.168.2.5	64.233.185.99
Apr 19, 2024 00:00:22.034715891 CEST	49743	443	192.168.2.5	64.233.185.99
Apr 19, 2024 00:00:22.034744024 CEST	443	49743	64.233.185.99	192.168.2.5
Apr 19, 2024 00:00:22.249739885 CEST	443	49743	64.233.185.99	192.168.2.5
Apr 19, 2024 00:00:22.250250101 CEST	49743	443	192.168.2.5	64.233.185.99
Apr 19, 2024 00:00:22.250273943 CEST	443	49743	64.233.185.99	192.168.2.5
Apr 19, 2024 00:00:22.250592947 CEST	443	49743	64.233.185.99	192.168.2.5
Apr 19, 2024 00:00:22.251209021 CEST	49743	443	192.168.2.5	64.233.185.99
Apr 19, 2024 00:00:22.251255035 CEST	443	49743	64.233.185.99	192.168.2.5
Apr 19, 2024 00:00:22.293872118 CEST	49743	443	192.168.2.5	64.233.185.99
Apr 19, 2024 00:00:32.260603905 CEST	443	49743	64.233.185.99	192.168.2.5
Apr 19, 2024 00:00:32.260790110 CEST	443	49743	64.233.185.99	192.168.2.5
Apr 19, 2024 00:00:32.260886908 CEST	49743	443	192.168.2.5	64.233.185.99
Apr 19, 2024 00:00:32.796274900 CEST	49743	443	192.168.2.5	64.233.185.99
Apr 19, 2024 00:00:32.796345949 CEST	443	49743	64.233.185.99	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 23:59:18.139211893 CEST	53	56855	1.1.1.1	192.168.2.5
Apr 18, 2024 23:59:18.428134918 CEST	53	62781	1.1.1.1	192.168.2.5
Apr 18, 2024 23:59:19.043025017 CEST	53	52805	1.1.1.1	192.168.2.5
Apr 18, 2024 23:59:20.015575886 CEST	59330	53	192.168.2.5	1.1.1.1
Apr 18, 2024 23:59:20.016113043 CEST	63512	53	192.168.2.5	1.1.1.1
Apr 18, 2024 23:59:20.122872114 CEST	53	59330	1.1.1.1	192.168.2.5
Apr 18, 2024 23:59:20.124196053 CEST	53	63512	1.1.1.1	192.168.2.5
Apr 18, 2024 23:59:21.986121893 CEST	57701	53	192.168.2.5	1.1.1.1
Apr 18, 2024 23:59:21.986690044 CEST	64527	53	192.168.2.5	1.1.1.1
Apr 18, 2024 23:59:22.090646029 CEST	53	57701	1.1.1.1	192.168.2.5
Apr 18, 2024 23:59:22.092782021 CEST	53	64527	1.1.1.1	192.168.2.5
Apr 18, 2024 23:59:25.572153091 CEST	53	50591	1.1.1.1	192.168.2.5
Apr 18, 2024 23:59:26.465945005 CEST	56329	53	192.168.2.5	1.1.1.1
Apr 18, 2024 23:59:26.466558933 CEST	52009	53	192.168.2.5	1.1.1.1
Apr 18, 2024 23:59:26.572613001 CEST	53	56329	1.1.1.1	192.168.2.5
Apr 18, 2024 23:59:26.573421955 CEST	53	52009	1.1.1.1	192.168.2.5
Apr 18, 2024 23:59:36.719404936 CEST	53	60721	1.1.1.1	192.168.2.5
Apr 18, 2024 23:59:56.031642914 CEST	53	61925	1.1.1.1	192.168.2.5
Apr 19, 2024 00:00:17.917908907 CEST	53	54395	1.1.1.1	192.168.2.5
Apr 19, 2024 00:00:18.557495117 CEST	53	59064	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 18, 2024 23:59:20.015575886 CEST	192.168.2.5	1.1.1.1	0xcda8	Standard query (0)	newexra.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:59:20.016113043 CEST	192.168.2.5	1.1.1.1	0x87b8	Standard query (0)	newexra.com	65	IN (0x0001)	false
Apr 18, 2024 23:59:21.986121893 CEST	192.168.2.5	1.1.1.1	0xdabc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:59:21.986690044 CEST	192.168.2.5	1.1.1.1	0xd7ab	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 23:59:26.465945005 CEST	192.168.2.5	1.1.1.1	0x76be	Standard query (0)	newexra.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:59:26.466558933 CEST	192.168.2.5	1.1.1.1	0xb968	Standard query (0)	newexra.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 18, 2024 23:59:20.122872114 CEST	1.1.1.1	192.168.2.5	0xcda8	No error (0)	newexra.com		91.202.233.192	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:59:22.090646029 CEST	1.1.1.1	192.168.2.5	0xdabc	No error (0)	www.google.com		64.233.185.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:59:22.090646029 CEST	1.1.1.1	192.168.2.5	0xdabc	No error (0)	www.google.com		64.233.185.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:59:22.090646029 CEST	1.1.1.1	192.168.2.5	0xdabc	No error (0)	www.google.com		64.233.185.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:59:22.090646029 CEST	1.1.1.1	192.168.2.5	0xdabc	No error (0)	www.google.com		64.233.185.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:59:22.090646029 CEST	1.1.1.1	192.168.2.5	0xdabc	No error (0)	www.google.com		64.233.185.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:59:22.090646029 CEST	1.1.1.1	192.168.2.5	0xdabc	No error (0)	www.google.com		64.233.185.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:59:22.092782021 CEST	1.1.1.1	192.168.2.5	0xd7ab	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 23:59:26.572613001 CEST	1.1.1.1	192.168.2.5	0x76be	No error (0)	newexra.com		91.202.233.192	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:59:34.019166946 CEST	1.1.1.1	192.168.2.5	0x9ec2	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 23:59:34.019166946 CEST	1.1.1.1	192.168.2.5	0x9ec2	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 23:59:47.478538990 CEST	1.1.1.1	192.168.2.5	0x5b33	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 23:59:47.478538990 CEST	1.1.1.1	192.168.2.5	0x5b33	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 00:00:11.151948929 CEST	1.1.1.1	192.168.2.5	0x5047	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 00:00:11.151948929 CEST	1.1.1.1	192.168.2.5	0x5047	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 00:00:30.699371099 CEST	1.1.1.1	192.168.2.5	0xb9cb	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 00:00:30.699371099 CEST	1.1.1.1	192.168.2.5	0xb9cb	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

newexra.com

https:

www.bing.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	91.202.233.192	443	6604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:20 UTC	752	OUT	GET /lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 21:59:21 UTC	645	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Thu, 18 Apr 2024 21:59:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.3.6 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; path=/; HttpOnly Set-Cookie: csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B; path=/; HttpOnly; SameSite=Lax Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000
2024-04-18 21:59:21 UTC	6634	IN	Data Raw: 31 39 64 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 2d 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 63 73 72 66 5f 74 6f 6b 65 6e 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 2d 76 61 6c 75 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 58 59 32 66 6d 31 32 59 56 70 34 53 46 52 56 55 48 46 4a 51 58 70 4a 59 6b 4e 44 59 6c 4a 53 55 56 42 6b 57 6b 39 7a 62 32 72 62 51 4c 79 59 76 73 55 43 69 4e 42 68 36 6e 31 36 7a 42 2d 50 31 33 74 6c 39 68 38 4a 55 47 56 4d 49 6e 75 36 30 6e 67 54 5f 41 Data Ascii: 19dd<!DOCTYPE html><html dir="ltr"><head> <meta charset="utf-8"> <meta name="csrf-token-name" content="csrf_token" /><meta name="csrf-token-value" content="eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49710	91.202.233.192	443	6604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:21 UTC	870	OUT	GET /assets/css/bootstrap.min.css?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
2024-04-18 21:59:21 UTC	281	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Thu, 18 Apr 2024 21:59:21 GMT Content-Type: text/css Content-Length: 99961 Last-Modified: Mon, 08 Apr 2024 17:12:12 GMT Connection: close ETag: "6614256c-18679" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-18 21:59:21 UTC	16103	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 31 2e 31 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 34 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 0a 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 30 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 Data Ascii: /! Bootstrap v3.1.1 (http://getbootstrap.com) * Copyright 2011-2014 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.0 \| MIT License \| git.io/normalize */html{font-family:sans-ser
2024-04-18 21:59:21 UTC	16384	IN	Data Raw: 66 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6c 67 2d 70 75 73 68 2d 31 7b 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6c 67 2d 70 75 73 68 2d 30 7b 6c 65 66 74 3a 30 7d 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 31 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 Data Ascii: ft:16.66666667%}.col-lg-push-1{left:8.33333333%}.col-lg-push-0{left:0}.col-lg-offset-12{margin-left:100%}.col-lg-offset-11{margin-left:91.66666667%}.col-lg-offset-10{margin-left:83.33333333%}.col-lg-offset-9{margin-left:75%}.col-lg-offset-8{margin-left:66
2024-04-18 21:59:22 UTC	16384	IN	Data Raw: 64 61 7d 2e 62 74 6e 2d 69 6e 66 6f 3a 68 6f 76 65 72 2c 2e 62 74 6e 2d 69 6e 66 6f 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 69 6e 66 6f 3a 61 63 74 69 76 65 2c 2e 62 74 6e 2d 69 6e 66 6f 2e 61 63 74 69 76 65 2c 2e 6f 70 65 6e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 69 6e 66 6f 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 39 62 33 64 37 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 36 39 61 62 63 7d 2e 62 74 6e 2d 69 6e 66 6f 3a 61 63 74 69 76 65 2c 2e 62 74 6e 2d 69 6e 66 6f 2e 61 63 74 69 76 65 2c 2e 6f 70 65 6e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 69 6e 66 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 62 74 6e 2d 69 6e 66 6f Data Ascii: da}.btn-info:hover,.btn-info:focus,.btn-info:active,.btn-info.active,.open .dropdown-toggle.btn-info{color:#fff;background-color:#39b3d7;border-color:#269abc}.btn-info:active,.btn-info.active,.open .dropdown-toggle.btn-info{background-image:none}.btn-info
2024-04-18 21:59:22 UTC	16384	IN	Data Raw: 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 7d 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 3e 2e 62 74 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 2e 62 74 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 Data Ascii: bottom-left-radius:0;border-top-left-radius:0}.btn-group>.btn-group{float:left}.btn-group>.btn-group:not(:first-child):not(:last-child)>.btn{border-radius:0}.btn-group>.btn-group:first-child>.btn:last-child,.btn-group>.btn-group:first-child>.dropdown-togg
2024-04-18 21:59:22 UTC	16384	IN	Data Raw: 72 2d 6e 61 76 3e 2e 64 69 73 61 62 6c 65 64 3e 61 3a 68 6f 76 65 72 2c 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 3e 2e 64 69 73 61 62 6c 65 64 3e 61 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 34 34 34 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 3a 68 6f 76 65 72 2c 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 33 33 7d Data Ascii: r-nav>.disabled>a:hover,.navbar-inverse .navbar-nav>.disabled>a:focus{color:#444;background-color:transparent}.navbar-inverse .navbar-toggle{border-color:#333}.navbar-inverse .navbar-toggle:hover,.navbar-inverse .navbar-toggle:focus{background-color:#333}
2024-04-18 21:59:22 UTC	16384	IN	Data Raw: 68 69 6c 64 20 74 68 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 2e 74 61 62 6c 65 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 74 62 6f 64 79 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 74 68 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 Data Ascii: hild th:last-child,.panel>.table-responsive:first-child>.table:first-child>tbody:first-child>tr:first-child th:last-child{border-top-right-radius:3px}.panel>.table:last-child,.panel>.table-responsive:last-child>.table:last-child{border-bottom-right-radius
2024-04-18 21:59:22 UTC	1938	IN	Data Raw: 72 3a 61 66 74 65 72 2c 2e 70 61 6e 65 6c 2d 62 6f 64 79 3a 61 66 74 65 72 2c 2e 6d 6f 64 61 6c 2d 66 6f 6f 74 65 72 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 63 65 6e 74 65 72 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 2e 70 75 6c 6c 2d 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 75 6c 6c 2d 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 68 6f 77 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 6e 76 69 73 69 62 6c 65 Data Ascii: r:after,.panel-body:after,.modal-footer:after{clear:both}.center-block{display:block;margin-left:auto;margin-right:auto}.pull-right{float:right!important}.pull-left{float:left!important}.hide{display:none!important}.show{display:block!important}.invisible

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49713	91.202.233.192	443	6604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:21 UTC	890	OUT	GET /assets/css/font-awesome/css/font-awesome.min.css?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
2024-04-18 21:59:22 UTC	280	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Thu, 18 Apr 2024 21:59:22 GMT Content-Type: text/css Content-Length: 27466 Last-Modified: Mon, 08 Apr 2024 17:12:12 GMT Connection: close ETag: "6614256c-6b4a" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-18 21:59:22 UTC	16104	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 35 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 35 2e 30 27 29 3b 73 Data Ascii: /! Font Awesome 4.5.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.5.0');s
2024-04-18 21:59:22 UTC	11362	IN	Data Raw: 79 6f 75 74 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 37 22 7d 2e 66 61 2d 78 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 38 22 7d 2e 66 61 2d 78 69 6e 67 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 39 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 61 22 7d 2e 66 61 2d 64 72 6f 70 62 6f 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 62 22 7d 2e 66 61 2d 73 74 61 63 6b 2d 6f 76 65 72 66 6c 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 63 22 7d 2e 66 61 2d 69 6e 73 74 61 67 72 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 64 22 Data Ascii: youtube:before{content:"\f167"}.fa-xing:before{content:"\f168"}.fa-xing-square:before{content:"\f169"}.fa-youtube-play:before{content:"\f16a"}.fa-dropbox:before{content:"\f16b"}.fa-stack-overflow:before{content:"\f16c"}.fa-instagram:before{content:"\f16d"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49714	91.202.233.192	443	6604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:21 UTC	882	OUT	GET /assets/css/ionicons/css/ionicons.min.css?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
2024-04-18 21:59:22 UTC	280	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Thu, 18 Apr 2024 21:59:22 GMT Content-Type: text/css Content-Length: 51284 Last-Modified: Mon, 08 Apr 2024 17:12:12 GMT Connection: close ETag: "6614256c-c854" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-18 21:59:22 UTC	16104	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 20 49 6f 6e 69 63 6f 6e 73 2c 20 76 32 2e 30 2e 30 0a 20 20 43 72 65 61 74 65 64 20 62 79 20 42 65 6e 20 53 70 65 72 72 79 20 66 6f 72 20 74 68 65 20 49 6f 6e 69 63 20 46 72 61 6d 65 77 6f 72 6b 2c 20 68 74 74 70 3a 2f 2f 69 6f 6e 69 63 6f 6e 73 2e 63 6f 6d 2f 0a 20 20 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 62 65 6e 6a 73 70 65 72 72 79 20 20 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 69 6f 6e 69 63 66 72 61 6d 65 77 6f 72 6b 0a 20 20 4d 49 54 20 4c 69 63 65 6e 73 65 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 64 72 69 66 74 79 63 6f 2f 69 6f 6e 69 63 6f 6e 73 0a 0a 20 20 41 6e 64 72 6f 69 64 2d 73 74 79 6c 65 20 69 63 6f 6e 73 20 6f Data Ascii: @charset "UTF-8";/*! Ionicons, v2.0.0 Created by Ben Sperry for the Ionic Framework, http://ionicons.com/ https://twitter.com/benjsperry https://twitter.com/ionicframework MIT License: https://github.com/driftyco/ionicons Android-style icons o
2024-04-18 21:59:22 UTC	16384	IN	Data Raw: 72 65 2c 2e 69 6f 6e 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 6c 61 6e 65 74 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 6c 61 79 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 6c 61 79 73 74 61 74 69 6f 6e 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 6c 75 73 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 6c 75 73 2d 63 69 72 63 6c 65 64 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 6c 75 73 2d 72 6f 75 6e 64 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 6f 64 69 75 6d 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 6f 75 6e 64 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 6f 77 65 72 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 72 69 63 65 74 61 67 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 72 69 63 65 74 61 67 73 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 72 69 6e 74 65 Data Ascii: re,.ion-plane:before,.ion-planet:before,.ion-play:before,.ion-playstation:before,.ion-plus:before,.ion-plus-circled:before,.ion-plus-round:before,.ion-podium:before,.ion-pound:before,.ion-power:before,.ion-pricetag:before,.ion-pricetags:before,.ion-printe
2024-04-18 21:59:22 UTC	16384	IN	Data Raw: 65 6e 74 3a 22 5c 66 33 65 37 22 7d 2e 69 6f 6e 2d 69 6f 73 2d 62 6f 6f 6b 6d 61 72 6b 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 65 61 22 7d 2e 69 6f 6e 2d 69 6f 73 2d 62 6f 6f 6b 6d 61 72 6b 73 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 65 39 22 7d 2e 69 6f 6e 2d 69 6f 73 2d 62 6f 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 65 63 22 7d 2e 69 6f 6e 2d 69 6f 73 2d 62 6f 78 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 65 62 22 7d 2e 69 6f 6e 2d 69 6f 73 2d 62 72 69 65 66 63 61 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 65 65 22 7d 2e 69 6f 6e 2d 69 6f 73 2d 62 72 69 65 66 63 61 73 65 2d 6f 75 74 6c 69 6e 65 3a 62 65 Data Ascii: ent:"\f3e7"}.ion-ios-bookmarks:before{content:"\f3ea"}.ion-ios-bookmarks-outline:before{content:"\f3e9"}.ion-ios-box:before{content:"\f3ec"}.ion-ios-box-outline:before{content:"\f3eb"}.ion-ios-briefcase:before{content:"\f3ee"}.ion-ios-briefcase-outline:be
2024-04-18 21:59:22 UTC	2412	IN	Data Raw: 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 34 31 22 7d 2e 69 6f 6e 2d 73 6f 63 69 61 6c 2d 74 75 6d 62 6c 72 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 34 30 22 7d 2e 69 6f 6e 2d 73 6f 63 69 61 6c 2d 74 75 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 35 22 7d 2e 69 6f 6e 2d 73 6f 63 69 61 6c 2d 74 77 69 74 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 65 65 22 7d 2e 69 6f 6e 2d 73 6f 63 69 61 6c 2d 74 77 69 74 63 68 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 65 64 22 7d 2e 69 6f 6e 2d 73 6f 63 69 61 6c 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 34 33 22 7d 2e 69 6f 6e 2d 73 6f 63 Data Ascii: before{content:"\f241"}.ion-social-tumblr-outline:before{content:"\f240"}.ion-social-tux:before{content:"\f2c5"}.ion-social-twitch:before{content:"\f4ee"}.ion-social-twitch-outline:before{content:"\f4ed"}.ion-social-twitter:before{content:"\f243"}.ion-soc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49716	91.202.233.192	443	6604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:21 UTC	865	OUT	GET /assets/css/adminlte.css?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
2024-04-18 21:59:22 UTC	282	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Thu, 18 Apr 2024 21:59:22 GMT Content-Type: text/css Content-Length: 230596 Last-Modified: Mon, 08 Apr 2024 17:12:12 GMT Connection: close ETag: "6614256c-384c4" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-18 21:59:22 UTC	16102	IN	Data Raw: 0a 2f 2a 21 0a 20 2a 20 20 20 41 64 6d 69 6e 4c 54 45 20 76 32 2e 33 2e 36 0a 20 2a 20 20 20 41 75 74 68 6f 72 3a 20 41 6c 6d 73 61 65 65 64 20 53 74 75 64 69 6f 0a 20 2a 20 20 20 57 65 62 73 69 74 65 3a 20 41 6c 6d 73 61 65 65 64 20 53 74 75 64 69 6f 20 3c 68 74 74 70 3a 2f 2f 61 6c 6d 73 61 65 65 64 73 74 75 64 69 6f 2e 63 6f 6d 3e 0a 20 2a 20 20 20 4c 69 63 65 6e 73 65 3a 20 4f 70 65 6e 20 73 6f 75 72 63 65 20 2d 20 4d 49 54 0a 20 2a 20 20 20 20 20 20 20 20 20 20 20 50 6c 65 61 73 65 20 76 69 73 69 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 21 2a 2f 0a 2f 2a 0a 20 2a 20 43 6f 72 65 3a 20 47 65 6e 65 72 61 6c 20 4c 61 79 6f Data Ascii: /! AdminLTE v2.3.6 * Author: Almsaeed Studio * Website: Almsaeed Studio <http://almsaeedstudio.com> * License: Open source - MIT * Please visit http://opensource.org/licenses/MIT for more information!// * Core: General Layo
2024-04-18 21:59:22 UTC	16384	IN	Data Raw: 6e 75 20 6c 69 20 3e 20 61 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 73 69 64 65 62 61 72 2d 6d 65 6e 75 20 6c 69 20 3e 20 61 20 3e 20 2e 70 75 6c 6c 2d 72 69 67 68 74 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 72 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 37 70 78 3b 0a 7d 0a 2f 2a 0a 20 2a 20 43 6f 6d 70 6f 6e 65 6e 74 3a 20 43 6f 6e 74 72 6f 6c 20 73 69 64 65 62 61 72 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 69 73 20 69 73 20 74 68 65 20 72 69 67 68 74 20 73 69 64 65 62 61 72 2e 0a 20 2a 2f 0a 2e 63 6f 6e 74 72 6f 6c 2d 73 69 64 65 62 61 72 2d 62 67 20 7b 0a 20 20 Data Ascii: nu li > a { position: relative;}.sidebar-menu li > a > .pull-right-container { position: absolute; right: 10px; top: 50%; margin-top: -7px;}/* * Component: Control sidebar. By default, this is the right sidebar. */.control-sidebar-bg {
2024-04-18 21:59:22 UTC	16384	IN	Data Raw: 0a 2e 66 6f 72 6d 2d 67 72 6f 75 70 2e 68 61 73 2d 77 61 72 6e 69 6e 67 20 2e 68 65 6c 70 2d 62 6c 6f 63 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 33 39 63 31 32 3b 0a 7d 0a 2e 66 6f 72 6d 2d 67 72 6f 75 70 2e 68 61 73 2d 65 72 72 6f 72 20 6c 61 62 65 6c 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 65 65 33 35 32 34 3b 0a 7d 0a 2e 66 6f 72 6d 2d 67 72 6f 75 70 2e 68 61 73 2d 65 72 72 6f 72 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2c 0a 2e 66 6f 72 6d 2d 67 72 6f 75 70 2e 68 61 73 2d 65 72 72 6f 72 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 65 65 33 35 32 34 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 66 6f 72 6d 2d 67 72 6f 75 70 2e 68 61 73 2d 65 72 72 Data Ascii: .form-group.has-warning .help-block { color: #f39c12;}.form-group.has-error label { color: #ee3524;}.form-group.has-error .form-control,.form-group.has-error .input-group-addon { border-color: #ee3524; box-shadow: none;}.form-group.has-err
2024-04-18 21:59:22 UTC	16384	IN	Data Raw: 0a 2e 63 68 61 74 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 32 30 70 78 20 35 70 78 20 31 30 70 78 3b 0a 7d 0a 2e 63 68 61 74 20 2e 69 74 65 6d 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 7d 0a 2e 63 68 61 74 20 2e 69 74 65 6d 3a 62 65 66 6f 72 65 2c 0a 2e 63 68 61 74 20 2e 69 74 65 6d 3a 61 66 74 65 72 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 7d 0a 2e 63 68 61 74 20 2e 69 74 65 6d 3a 61 66 74 65 72 20 7b 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 2e 63 68 61 74 20 2e 69 74 65 6d 20 3e 20 69 6d 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 34 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 34 30 70 78 3b 0a 20 20 62 6f 72 64 65 72 3a 20 32 Data Ascii: .chat { padding: 5px 20px 5px 10px;}.chat .item { margin-bottom: 10px;}.chat .item:before,.chat .item:after { content: " "; display: table;}.chat .item:after { clear: both;}.chat .item > img { width: 40px; height: 40px; border: 2
2024-04-18 21:59:22 UTC	16384	IN	Data Raw: 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2f 2a 0a 20 2a 20 43 6f 6d 70 6f 6e 65 6e 74 3a 20 4c 61 62 65 6c 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 2f 0a 6c 61 62 65 6c 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 2e 6c 61 62 65 6c 2d 64 65 66 61 75 6c 74 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 32 64 36 64 65 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 0a 7d 0a 2f 2a 0a 20 2a 20 43 6f 6d 70 6f 6e 65 6e 74 3a 20 44 69 72 65 63 74 20 43 68 61 74 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 2f 0a 2e 64 69 72 65 63 74 2d 63 68 61 74 20 2e 62 6f 78 2d 62 6f 64 79 20 7b 0a 20 20 62 6f 72 64 65 72 Data Ascii: ext-align: right;}/* * Component: Label * ---------------- /label { font-weight: normal;}.label-default { background-color: #d2d6de; color: #444;}/ * Component: Direct Chat * ---------------------- */.direct-chat .box-body { border
2024-04-18 21:59:22 UTC	16384	IN	Data Raw: 75 63 6b 65 74 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 31 36 33 37 35 38 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 0a 7d 0a 2e 62 74 6e 2d 62 69 74 62 75 63 6b 65 74 3a 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 0a 2e 62 74 6e 2d 62 69 74 62 75 63 6b 65 74 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 0a 2e 6f 70 65 6e 20 3e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 62 69 74 62 75 63 6b 65 74 3a 68 6f 76 65 72 2c 0a 2e 62 74 6e 2d 62 69 74 62 75 63 6b 65 74 3a 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 0a 2e 62 74 6e 2d 62 69 74 62 75 63 6b 65 74 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 0a 2e 6f 70 Data Ascii: ucket { color: #fff; background-color: #163758; border-color: rgba(0, 0, 0, 0.2);}.btn-bitbucket:active:hover,.btn-bitbucket.active:hover,.open > .dropdown-toggle.btn-bitbucket:hover,.btn-bitbucket:active:focus,.btn-bitbucket.active:focus,.op
2024-04-18 21:59:22 UTC	16384	IN	Data Raw: 74 6e 2d 6d 69 63 72 6f 73 6f 66 74 2e 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 2c 0a 2e 62 74 6e 2d 6d 69 63 72 6f 73 6f 66 74 5b 64 69 73 61 62 6c 65 64 5d 3a 61 63 74 69 76 65 2c 0a 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 6d 69 63 72 6f 73 6f 66 74 3a 61 63 74 69 76 65 2c 0a 2e 62 74 6e 2d 6d 69 63 72 6f 73 6f 66 74 2e 64 69 73 61 62 6c 65 64 2e 61 63 74 69 76 65 2c 0a 2e 62 74 6e 2d 6d 69 63 72 6f 73 6f 66 74 5b 64 69 73 61 62 6c 65 64 5d 2e 61 63 74 69 76 65 2c 0a 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 6d 69 63 72 6f 73 6f 66 74 2e 61 63 74 69 76 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 36 37 32 65 63 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f Data Ascii: tn-microsoft.disabled:active,.btn-microsoft[disabled]:active,fieldset[disabled] .btn-microsoft:active,.btn-microsoft.disabled.active,.btn-microsoft[disabled].active,fieldset[disabled] .btn-microsoft.active { background-color: #2672ec; border-colo
2024-04-18 21:59:22 UTC	16384	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 20 6c 69 6e 65 61 72 20 30 2e 33 73 3b 0a 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 20 6c 69 6e 65 61 72 20 30 2e 33 73 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 6c 69 6e 65 61 72 20 30 2e 33 73 3b 0a 7d 0a 2e 66 63 2d 63 6f 6c 6f 72 2d 70 69 63 6b 65 72 20 3e 20 6c 69 20 2e 66 61 3a 68 6f 76 65 72 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 30 64 65 67 29 3b 0a 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 30 64 65 67 29 3b 0a 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 30 64 65 67 29 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 Data Ascii: ransform linear 0.3s; -o-transition: -o-transform linear 0.3s; transition: transform linear 0.3s;}.fc-color-picker > li .fa:hover { -webkit-transform: rotate(30deg); -ms-transform: rotate(30deg); -o-transform: rotate(30deg); transform: rotat
2024-04-18 21:59:22 UTC	16384	IN	Data Raw: 74 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 69 6d 67 2d 73 6d 2c 0a 2e 62 6f 78 2d 63 6f 6d 6d 65 6e 74 73 20 2e 62 6f 78 2d 63 6f 6d 6d 65 6e 74 20 69 6d 67 2c 0a 2e 75 73 65 72 2d 62 6c 6f 63 6b 2e 75 73 65 72 2d 62 6c 6f 63 6b 2d 73 6d 20 69 6d 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 69 6d 67 2d 73 6d 20 2b 20 2e 69 6d 67 2d 70 75 73 68 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 30 70 78 3b 0a 7d 0a 2e 69 6d 67 2d 6d 64 20 7b 0a 20 20 77 69 64 74 68 3a 20 36 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0a 7d 0a 2e 69 6d 67 2d 6d 64 20 2b 20 2e 69 6d 67 2d 70 75 73 68 20 7b 0a 20 20 6d 61 72 67 Data Ascii: t: left;}.img-sm,.box-comments .box-comment img,.user-block.user-block-sm img { width: 30px !important; height: 30px !important;}.img-sm + .img-push { margin-left: 40px;}.img-md { width: 60px; height: 60px;}.img-md + .img-push { marg
2024-04-18 21:59:22 UTC	16384	IN	Data Raw: 37 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 2e 6d 69 64 64 6c 65 2c 0a 2e 62 6f 78 65 73 2d 6d 77 2d 77 72 61 70 70 65 72 2e 72 6f 77 20 2e 63 6f 6c 2d 73 6d 2d 38 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 2e 6d 69 64 64 6c 65 2c 0a 2e 62 6f 78 65 73 2d 6d 77 2d 77 72 61 70 70 65 72 2e 72 6f 77 20 2e 63 6f 6c 2d 73 6d 2d 39 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 2e 6d 69 64 64 6c 65 2c 0a 2e 62 6f 78 65 73 2d 6d 77 2d 77 72 61 70 70 65 72 2e 72 6f 77 20 2e 63 6f 6c 2d 78 73 2d 31 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 2e 6d 69 64 64 6c 65 2c 0a 2e 62 6f 78 65 73 2d 6d 77 2d 77 72 61 70 70 65 72 2e 72 6f 77 20 2e 63 6f 6c 2d 78 73 2d 31 30 20 2e 73 6d 61 6c 6c 2d 62 Data Ascii: 7 .small-box > .inner .middle,.boxes-mw-wrapper.row .col-sm-8 .small-box > .inner .middle,.boxes-mw-wrapper.row .col-sm-9 .small-box > .inner .middle,.boxes-mw-wrapper.row .col-xs-1 .small-box > .inner .middle,.boxes-mw-wrapper.row .col-xs-10 .small-b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49717	91.202.233.192	443	6604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:21 UTC	871	OUT	GET /frontend/assets/css/style.css?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
2024-04-18 21:59:22 UTC	280	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Thu, 18 Apr 2024 21:59:22 GMT Content-Type: text/css Content-Length: 16550 Last-Modified: Mon, 08 Apr 2024 17:12:13 GMT Connection: close ETag: "6614256d-40a6" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-18 21:59:22 UTC	16104	IN	Data Raw: 62 6f 64 79 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4f 70 65 6e 20 53 61 6e 73 22 2c 20 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 7d 0a 2e 63 6f 6e 74 65 6e 74 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 20 30 20 30 20 30 3b 0a 7d 0a 68 31 2c 0a 68 32 20 68 33 2c 0a 68 34 2c 0a 68 35 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 41 72 69 61 6c 2c Data Ascii: body { font-family: "Open Sans", Verdana, Arial, Helvetica, sans-serif; color: #3a3a3a; background-color: #FFFFFF;}.content-wrapper { background-color: #FFFFFF; padding: 30px 0 0 0;}h1,h2 h3,h4,h5 { font-family: "Helvetica Neue", Arial,
2024-04-18 21:59:22 UTC	446	IN	Data Raw: 70 3a 20 31 30 70 78 3b 0a 7d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 20 7b 0a 20 20 66 6f 6f 74 65 72 20 75 6c 2e 6c 69 6e 6b 73 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 7d 0a 7d 0a 66 6f 6f 74 65 72 20 75 6c 2e 6c 69 6e 6b 73 20 6c 69 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 34 70 78 3b 0a 7d 0a 66 6f 6f 74 65 72 20 75 6c 2e 6c 69 6e 6b 73 20 6c 69 20 2b 20 6c 69 20 7b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 33 61 33 61 33 61 3b 0a 7d 0a 62 6f 64 79 2e 63 74 72 6c 2d 6c 69 73 74 73 20 66 6f 6f 74 65 72 20 7b 0a 20 20 Data Ascii: p: 10px;}@media only screen and (min-width: 992px) { footer ul.links { padding-top: 5px; }}footer ul.links li { padding: 0 10px; line-height: 14px;}footer ul.links li + li { border-left: 1px solid #3a3a3a;}body.ctrl-lists footer {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49715	91.202.233.192	443	6604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:21 UTC	866	OUT	GET /assets/css/skin-blue.css?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
2024-04-18 21:59:22 UTC	282	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Thu, 18 Apr 2024 21:59:22 GMT Content-Type: text/css Content-Length: 210643 Last-Modified: Mon, 08 Apr 2024 17:12:12 GMT Connection: close ETag: "6614256c-336d3" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-18 21:59:22 UTC	16102	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 20 20 20 20 2d 2d 6d 7a 2d 62 6c 75 65 3a 20 23 36 33 42 33 45 44 3b 0a 20 20 20 20 2d 2d 6d 7a 2d 69 6e 64 69 67 6f 3a 20 23 35 39 36 43 46 46 3b 0a 20 20 20 20 2d 2d 6d 7a 2d 70 75 72 70 6c 65 3a 20 23 36 66 34 32 63 31 3b 0a 20 20 20 20 2d 2d 6d 7a 2d 70 69 6e 6b 3a 20 23 64 36 33 33 38 34 3b 0a 20 20 20 20 2d 2d 6d 7a 2d 72 65 64 3a 20 23 46 35 36 35 36 35 3b 0a 20 20 20 20 2d 2d 6d 7a 2d 6f 72 61 6e 67 65 3a 20 23 66 64 37 65 31 34 3b 0a 20 20 20 20 2d 2d 6d 7a 2d 79 65 6c 6c 6f 77 3a 20 23 46 42 44 33 38 44 3b 0a 20 20 20 20 2d 2d 6d 7a 2d 67 72 65 65 6e 3a 20 23 38 31 45 36 44 39 3b 0a 20 20 20 20 2d 2d 6d 7a 2d 74 65 61 6c 3a 20 23 32 30 63 39 39 37 3b 0a 20 20 20 20 2d 2d 6d 7a 2d 63 79 61 6e 3a 20 23 30 64 63 61 66 30 3b Data Ascii: :root { --mz-blue: #63B3ED; --mz-indigo: #596CFF; --mz-purple: #6f42c1; --mz-pink: #d63384; --mz-red: #F56565; --mz-orange: #fd7e14; --mz-yellow: #FBD38D; --mz-green: #81E6D9; --mz-teal: #20c997; --mz-cyan: #0dcaf0;
2024-04-18 21:59:22 UTC	16384	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 6d 7a 2d 61 63 74 69 76 65 2d 70 72 69 6d 61 72 79 29 3b 0a 7d 0a 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 61 72 6b 20 66 6f 72 6d 20 2e 62 75 74 74 6f 6e 73 2d 73 61 76 65 2d 63 68 61 6e 67 65 73 2d 61 6e 64 2d 61 63 74 69 6f 6e 20 75 6c 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 6c 69 20 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 6d 7a 2d 64 61 72 6b 2d 61 63 74 69 76 65 2d 70 72 69 6d 61 72 79 29 3b 0a 7d 0a 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 7a 2d 64 61 73 68 65 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 Data Ascii: background: var(--mz-active-primary);}.skin-blue.dark form .buttons-save-changes-and-action ul.dropdown-menu li button:hover { background: var(--mz-dark-active-primary);}.skin-blue .dropdown-menu { border-color: var(--mz-dashed-border-color)
2024-04-18 21:59:22 UTC	16384	IN	Data Raw: 20 76 61 72 28 2d 2d 6d 7a 2d 70 72 69 6d 61 72 79 29 3b 0a 7d 0a 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 6f 78 2e 62 6f 78 2d 73 6f 6c 69 64 2e 62 6f 78 2d 69 6e 66 6f 20 3e 20 2e 62 6f 78 2d 68 65 61 64 65 72 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 7a 2d 77 68 69 74 65 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 6d 7a 2d 70 72 69 6d 61 72 79 29 3b 0a 7d 0a 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 6f 78 2e 62 6f 78 2d 73 6f 6c 69 64 2e 62 6f 78 2d 64 61 6e 67 65 72 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 6d 7a 2d 64 61 6e 67 65 72 29 3b 0a 7d 0a 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 6f 78 2e 62 6f 78 2d 73 6f 6c 69 64 2e 62 6f 78 2d 64 61 6e Data Ascii: var(--mz-primary);}.skin-blue .box.box-solid.box-info > .box-header { color: var(--mz-white); background: var(--mz-primary);}.skin-blue .box.box-solid.box-danger { border: 1px solid var(--mz-danger);}.skin-blue .box.box-solid.box-dan
2024-04-18 21:59:22 UTC	16384	IN	Data Raw: 6b 69 6e 2d 62 6c 75 65 20 2e 74 61 62 6c 65 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 20 3e 20 74 64 20 61 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 74 61 62 6c 65 20 3e 20 74 66 6f 6f 74 20 3e 20 74 72 20 3e 20 74 64 20 61 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 7a 2d 67 72 61 79 2d 37 30 30 29 3b 0a 7d 0a 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 61 72 6b 20 2e 74 61 62 6c 65 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 20 3e 20 74 68 20 61 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 61 72 6b 20 2e 74 61 62 6c 65 20 3e 20 74 66 6f 6f 74 20 3e 20 74 72 20 3e 20 74 68 20 61 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 61 72 6b 20 2e 74 61 62 6c 65 20 3e 20 74 68 65 61 64 20 3e 20 74 72 20 3e 20 74 64 20 61 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 Data Ascii: kin-blue .table > tbody > tr > td a,.skin-blue .table > tfoot > tr > td a { color: var(--mz-gray-700);}.skin-blue.dark .table > tbody > tr > th a,.skin-blue.dark .table > tfoot > tr > th a,.skin-blue.dark .table > thead > tr > td a,.skin-blue.d
2024-04-18 21:59:22 UTC	16384	IN	Data Raw: 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 6c 69 67 68 74 2d 62 6c 75 65 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 67 72 65 65 6e 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 6e 61 76 79 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 74 65 61 6c 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 6f 6c 69 76 65 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 6c 69 6d 65 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 6f 72 61 6e 67 65 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 66 75 63 68 73 69 61 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 70 75 72 70 6c 65 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 6d 61 72 6f 6f 6e 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 62 6c 61 63 6b 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 Data Ascii: in-blue .bg-light-blue,.skin-blue .bg-green,.skin-blue .bg-navy,.skin-blue .bg-teal,.skin-blue .bg-olive,.skin-blue .bg-lime,.skin-blue .bg-orange,.skin-blue .bg-fuchsia,.skin-blue .bg-purple,.skin-blue .bg-maroon,.skin-blue .bg-black,.skin-blu
2024-04-18 21:59:23 UTC	16384	IN	Data Raw: 72 2e 72 6f 77 20 2e 63 6f 6c 2d 73 6d 2d 34 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 68 31 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 6f 78 65 73 2d 6d 77 2d 77 72 61 70 70 65 72 2e 72 6f 77 20 2e 63 6f 6c 2d 73 6d 2d 35 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 68 31 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 6f 78 65 73 2d 6d 77 2d 77 72 61 70 70 65 72 2e 72 6f 77 20 2e 63 6f 6c 2d 73 6d 2d 36 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 68 31 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 6f 78 65 73 2d 6d 77 2d 77 72 61 70 70 65 72 2e 72 6f 77 20 2e 63 6f 6c 2d 73 6d 2d 37 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 68 31 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 6f Data Ascii: r.row .col-sm-4 .small-box > .inner h1,.skin-blue .boxes-mw-wrapper.row .col-sm-5 .small-box > .inner h1,.skin-blue .boxes-mw-wrapper.row .col-sm-6 .small-box > .inner h1,.skin-blue .boxes-mw-wrapper.row .col-sm-7 .small-box > .inner h1,.skin-blue .bo
2024-04-18 21:59:23 UTC	16384	IN	Data Raw: 72 6f 77 20 2e 63 6f 6c 2d 73 6d 2d 31 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 68 33 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 61 72 6b 20 2e 62 6f 78 65 73 2d 6d 77 2d 77 72 61 70 70 65 72 2e 72 6f 77 20 2e 63 6f 6c 2d 73 6d 2d 31 30 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 68 33 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 61 72 6b 20 2e 62 6f 78 65 73 2d 6d 77 2d 77 72 61 70 70 65 72 2e 72 6f 77 20 2e 63 6f 6c 2d 73 6d 2d 31 31 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 68 33 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 61 72 6b 20 2e 62 6f 78 65 73 2d 6d 77 2d 77 72 61 70 70 65 72 2e 72 6f 77 20 2e 63 6f 6c 2d 73 6d 2d 31 32 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 68 33 Data Ascii: row .col-sm-1 .small-box > .inner h3,.skin-blue.dark .boxes-mw-wrapper.row .col-sm-10 .small-box > .inner h3,.skin-blue.dark .boxes-mw-wrapper.row .col-sm-11 .small-box > .inner h3,.skin-blue.dark .boxes-mw-wrapper.row .col-sm-12 .small-box > .inner h3
2024-04-18 21:59:23 UTC	16384	IN	Data Raw: 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 7a 2d 64 61 72 6b 2d 67 72 61 79 2d 38 30 30 29 3b 0a 7d 0a 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 70 72 6f 67 72 65 73 73 2d 62 6f 78 20 2e 69 6e 66 6f 20 2e 6e 61 6d 65 20 61 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 70 72 6f 67 72 65 73 73 2d 62 6f 78 20 2e 69 6e 66 6f 20 2e 6e 75 6d 62 65 72 20 61 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 7a 2d 70 72 69 6d 61 72 79 29 3b 0a 7d 0a 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 61 72 6b 20 2e 70 72 6f 67 72 65 73 73 2d 62 6f 78 20 2e 69 6e 66 6f 20 2e 6e 61 6d 65 20 61 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 61 72 6b 20 2e 70 72 6f 67 72 65 73 73 2d 62 6f 78 20 2e 69 6e 66 6f 20 2e 6e 75 6d 62 65 72 20 61 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 Data Ascii: lor: var(--mz-dark-gray-800);}.skin-blue .progress-box .info .name a,.skin-blue .progress-box .info .number a { color: var(--mz-primary);}.skin-blue.dark .progress-box .info .name a,.skin-blue.dark .progress-box .info .number a { color: va
2024-04-18 21:59:23 UTC	16384	IN	Data Raw: 6b 20 2e 70 6f 70 6f 76 65 72 2e 6c 65 66 74 20 3e 20 2e 61 72 72 6f 77 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 7a 2d 64 61 72 6b 2d 73 65 63 6f 6e 64 61 72 79 29 3b 0a 7d 0a 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 70 6f 70 6f 76 65 72 2e 6c 65 66 74 20 3e 20 2e 61 72 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 7a 2d 73 69 64 65 62 61 72 2d 63 6f 6c 6f 72 29 3b 0a 7d 0a 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 61 72 6b 20 2e 70 6f 70 6f 76 65 72 2e 6c 65 66 74 20 3e 20 2e 61 72 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 7a 2d 64 61 72 6b Data Ascii: k .popover.left > .arrow { border-left-color: var(--mz-dark-secondary);}.skin-blue .popover.left > .arrow:after { border-left-color: var(--mz-sidebar-color);}.skin-blue.dark .popover.left > .arrow:after { border-left-color: var(--mz-dark
2024-04-18 21:59:23 UTC	16384	IN	Data Raw: 2d 70 72 69 6d 61 72 79 29 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 6d 73 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 76 61 72 28 2d 2d 6d 7a 2d 64 61 72 6b 2d 70 72 69 6d 61 72 79 29 2c 20 76 61 72 28 2d 2d 6d 7a 2d 64 61 72 6b 2d 70 72 69 6d 61 72 79 29 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 20 30 20 30 2c 20 30 20 31 30 30 25 2c 20 66 72 6f 6d 28 76 61 72 28 2d 2d 6d 7a 2d 64 61 72 6b 2d 70 72 69 6d 61 72 79 29 29 2c 20 74 6f 28 76 61 72 28 2d 2d 6d 7a 2d 64 61 72 6b 2d 70 72 69 6d 61 72 79 29 29 29 20 21 69 6d 70 6f 72 74 Data Ascii: -primary)) !important; background-image: -ms-linear-gradient(top, var(--mz-dark-primary), var(--mz-dark-primary)) !important; background-image: -webkit-gradient(linear, 0 0, 0 100%, from(var(--mz-dark-primary)), to(var(--mz-dark-primary))) !import

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49719	91.202.233.192	443	6604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:22 UTC	860	OUT	GET /frontend/assets/cache/1c9ce001/jquery.min.js HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
2024-04-18 21:59:23 UTC	310	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Thu, 18 Apr 2024 21:59:23 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 89501 Last-Modified: Wed, 17 Apr 2024 08:26:37 GMT Connection: close ETag: "661f87bd-15d9d" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-18 21:59:23 UTC	16074	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-04-18 21:59:23 UTC	16384	IN	Data Raw: 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 66 28 75 3d 5b 6d 3f 63 2e 66 69 72 73 74 43 68 69 6c 64 3a 63 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 6d 26 26 70 29 7b 64 3d 28 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 63 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 26 26 72 5b 32 5d 2c 61 3d 73 26 26 63 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 73 5d 3b 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 Data Ascii: ()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&"nextSibling"}return!0}if(u=[m?c.firstChild:c.lastChild],m&&p){d=(s=(r=(i=(o=(a=c)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1])&&r[2],a=s&&c.childNodes[s];while(a=++s&&a&&a[l]\|\|(d
2024-04-18 21:59:23 UTC	16384	IN	Data Raw: 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 6d 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 3f 28 74 2e 63 61 6c 6c 28 65 2c 72 29 2c 74 3d 6e 75 6c 6c 29 3a 28 6c 3d 74 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 53 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b 2b 29 74 28 65 5b 73 5d 2c 6e 2c 61 3f 72 3a 72 2e 63 61 6c 6c 28 65 5b 73 5d 2c 73 2c 74 28 65 5b 73 5d 2c 6e 29 29 29 3b 72 65 74 75 72 6e 20 69 3f 65 3a 6c 3f 74 2e 63 61 6c 6c 28 65 29 3a 75 3f 74 28 65 5b 30 5d 2c 6e 29 3a 6f 7d 2c 5f 3d 2f 5e 2d 6d 73 2d 2f 2c 7a 3d 2f 2d 28 5b 61 2d 7a 5d 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 55 28 65 2c 74 29 7b 72 Data Ascii: 0,o,a);else if(void 0!==r&&(i=!0,m(r)\|\|(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(S(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t.call(e):u?t(e[0],n):o},_=/^-ms-/,z=/-([a-z])/g;function U(e,t){r
2024-04-18 21:59:23 UTC	16384	IN	Data Raw: 64 65 54 79 70 65 26 26 31 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 29 29 66 6f 72 28 61 3d 76 65 28 63 29 2c 72 3d 30 2c 69 3d 28 6f 3d 76 65 28 65 29 29 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 73 3d 6f 5b 72 5d 2c 75 3d 61 5b 72 5d 2c 76 6f 69 64 20 30 2c 22 69 6e 70 75 74 22 3d 3d 3d 28 6c 3d 75 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 70 65 2e 74 65 73 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 Data Ascii: deType&&11!==e.nodeType\|\|S.isXMLDoc(e)))for(a=ve(c),r=0,i=(o=ve(e)).length;r<i;r++)s=o[r],u=a[r],void 0,"input"===(l=u.nodeName.toLowerCase())&&pe.test(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(
2024-04-18 21:59:23 UTC	16384	IN	Data Raw: 4f 6e 3d 22 22 21 3d 3d 74 74 2e 76 61 6c 75 65 2c 79 2e 6f 70 74 53 65 6c 65 63 74 65 64 3d 6e 74 2e 73 65 6c 65 63 74 65 64 2c 28 74 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 76 61 6c 75 65 3d 22 74 22 2c 74 74 2e 74 79 70 65 3d 22 72 61 64 69 6f 22 2c 79 2e 72 61 64 69 6f 56 61 6c 75 65 3d 22 74 22 3d 3d 3d 74 74 2e 76 61 6c 75 65 3b 76 61 72 20 63 74 2c 66 74 3d 53 2e 65 78 70 72 2e 61 74 74 72 48 61 6e 64 6c 65 3b 53 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 24 28 74 68 69 73 2c 53 2e 61 74 74 72 2c 65 2c 74 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 6d 6f 76 65 41 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: On=""!==tt.value,y.optSelected=nt.selected,(tt=E.createElement("input")).value="t",tt.type="radio",y.radioValue="t"===tt.value;var ct,ft=S.expr.attrHandle;S.fn.extend({attr:function(e,t){return $(this,S.attr,e,t,1<arguments.length)},removeAttr:function(e)
2024-04-18 21:59:23 UTC	7891	IN	Data Raw: 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 65 29 7b 7d 7d 3b 76 61 72 20 42 74 3d 7b 30 3a 32 30 30 2c 31 32 32 33 3a 32 30 34 7d 2c 24 74 3d 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 28 29 3b 79 2e 63 6f 72 73 3d 21 21 24 74 26 26 22 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 22 69 6e 20 24 74 2c 79 2e 61 6a 61 78 3d 24 74 3d 21 21 24 74 2c 53 2e 61 6a 61 78 54 72 61 6e 73 70 6f 72 74 28 66 75 6e 63 74 69 Data Ascii: (e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpRequest}catch(e){}};var Bt={0:200,1223:204},$t=S.ajaxSettings.xhr();y.cors=!!$t&&"withCredentials"in $t,y.ajax=$t=!!$t,S.ajaxTransport(functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49720	91.202.233.192	443	6604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:23 UTC	868	OUT	GET /frontend/assets/cache/1c9ce001/jquery-migrate.min.js HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
2024-04-18 21:59:23 UTC	309	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Thu, 18 Apr 2024 21:59:23 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 13467 Last-Modified: Wed, 17 Apr 2024 08:26:37 GMT Connection: close ETag: "661f87bd-349b" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-18 21:59:23 UTC	13467	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49721	91.202.233.192	443	6604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:23 UTC	854	OUT	GET /assets/js/bootstrap.min.js?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
2024-04-18 21:59:23 UTC	309	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Thu, 18 Apr 2024 21:59:23 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 29110 Last-Modified: Mon, 08 Apr 2024 17:12:12 GMT Connection: close ETag: "6614256c-71b6" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-18 21:59:23 UTC	16075	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 31 2e 31 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 34 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 Data Ascii: /! Bootstrap v3.1.1 (http://getbootstrap.com) * Copyright 2011-2014 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery"
2024-04-18 21:59:23 UTC	13035	IN	Data Raw: 70 72 6f 78 79 28 74 68 69 73 2e 6c 65 61 76 65 2c 74 68 69 73 29 29 7d 7d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 65 6c 65 63 74 6f 72 3f 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2c 7b 74 72 69 67 67 65 72 3a 22 6d 61 6e 75 61 6c 22 2c 73 65 6c 65 63 74 6f 72 3a 22 22 7d 29 3a 74 68 69 73 2e 66 69 78 54 69 74 6c 65 28 29 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 44 65 66 61 75 6c 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 44 45 46 41 55 4c 54 53 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 67 65 74 44 65 Data Ascii: proxy(this.leave,this))}}this.options.selector?this._options=a.extend({},this.options,{trigger:"manual",selector:""}):this.fixTitle()},b.prototype.getDefaults=function(){return b.DEFAULTS},b.prototype.getOptions=function(b){return b=a.extend({},this.getDe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49722	91.202.233.192	443	6604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:23 UTC	853	OUT	GET /assets/js/knockout.min.js?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
2024-04-18 21:59:24 UTC	310	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Thu, 18 Apr 2024 21:59:23 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 68249 Last-Modified: Mon, 08 Apr 2024 17:12:13 GMT Connection: close ETag: "6614256d-10a99" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-18 21:59:24 UTC	16074	IN	Data Raw: 2f 2a 21 0a 20 2a 20 4b 6e 6f 63 6b 6f 75 74 20 4a 61 76 61 53 63 72 69 70 74 20 6c 69 62 72 61 72 79 20 76 33 2e 35 2e 31 0a 20 2a 20 28 63 29 20 54 68 65 20 4b 6e 6f 63 6b 6f 75 74 2e 6a 73 20 74 65 61 6d 20 2d 20 68 74 74 70 3a 2f 2f 6b 6e 6f 63 6b 6f 75 74 6a 73 2e 63 6f 6d 2f 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 29 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 41 3d 74 68 69 73 7c 7c 28 30 2c 65 76 61 6c 29 28 22 74 68 69 73 22 29 2c 77 3d 41 2e 64 6f 63 75 6d 65 6e 74 2c 52 3d 41 2e 6e 61 76 69 67 61 74 6f 72 2c 76 3d 41 2e Data Ascii: /! Knockout JavaScript library v3.5.1 * (c) The Knockout.js team - http://knockoutjs.com/ * License: MIT (http://www.opensource.org/licenses/mit-license.php) */(function() {(function(n){var A=this\|\|(0,eval)("this"),w=A.document,R=A.navigator,v=A.
2024-04-18 21:59:24 UTC	16384	IN	Data Raw: 0a 61 2e 54 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 61 2e 41 62 28 74 68 69 73 2c 44 29 3b 44 2e 71 62 28 74 68 69 73 29 7d 3b 76 61 72 20 44 3d 7b 71 62 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 55 3d 7b 63 68 61 6e 67 65 3a 5b 5d 7d 3b 61 2e 73 63 3d 31 7d 2c 73 75 62 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 64 3d 64 7c 7c 22 63 68 61 6e 67 65 22 3b 76 61 72 20 66 3d 6e 65 77 20 61 2e 69 63 28 65 2c 63 3f 62 2e 62 69 6e 64 28 63 29 3a 62 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 61 2e 50 61 28 65 2e 55 5b 64 5d 2c 66 29 3b 65 2e 68 62 26 26 65 2e 68 62 28 64 29 7d 29 3b 65 2e 51 61 26 26 65 2e 51 61 28 64 29 3b 65 2e 55 5b 64 5d 7c 7c 28 65 2e 55 5b 64 5d 3d 5b 5d 29 3b 65 2e 55 5b 64 5d Data Ascii: a.T=function(){a.a.Ab(this,D);D.qb(this)};var D={qb:function(a){a.U={change:[]};a.sc=1},subscribe:function(b,c,d){var e=this;d=d\|\|"change";var f=new a.ic(e,c?b.bind(c):b,function(){a.a.Pa(e.U[d],f);e.hb&&e.hb(d)});e.Qa&&e.Qa(d);e.U[d]\|\|(e.U[d]=[]);e.U[d]
2024-04-18 21:59:24 UTC	16384	IN	Data Raw: 3d 30 2c 6b 3d 64 2e 6c 65 6e 67 74 68 3b 66 3c 6b 3b 66 2b 2b 29 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 5b 66 5d 2c 65 29 7d 65 6c 73 65 20 61 2e 61 2e 76 61 28 63 2c 64 29 7d 2c 56 63 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 76 61 72 20 64 3b 62 28 61 29 3f 28 64 3d 61 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 61 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 29 3a 64 3d 61 2e 66 69 72 73 74 43 68 69 6c 64 3b 64 3f 63 21 3d 3d 64 26 26 61 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 2c 64 29 3a 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 7d 2c 57 62 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 29 7b 65 3f 28 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 62 28 63 29 26 26 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 Data Ascii: =0,k=d.length;f<k;f++)e.parentNode.insertBefore(d[f],e)}else a.a.va(c,d)},Vc:function(a,c){var d;b(a)?(d=a.nextSibling,a=a.parentNode):d=a.firstChild;d?c!==d&&a.insertBefore(c,d):a.appendChild(c)},Wb:function(c,d,e){e?(e=e.nextSibling,b(c)&&(c=c.parentNod
2024-04-18 21:59:24 UTC	16384	IN	Data Raw: 2e 66 6f 72 65 61 63 68 2e 52 63 28 63 29 2c 64 2c 65 2c 66 29 7d 7d 3b 61 2e 6d 2e 52 61 2e 66 6f 72 65 61 63 68 3d 21 31 3b 61 2e 68 2e 65 61 2e 66 6f 72 65 61 63 68 3d 0a 21 30 3b 61 2e 63 2e 68 61 73 66 6f 63 75 73 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 62 2e 5f 5f 6b 6f 5f 68 61 73 66 6f 63 75 73 55 70 64 61 74 69 6e 67 3d 21 30 3b 76 61 72 20 66 3d 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 69 66 28 22 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 22 69 6e 20 66 29 7b 76 61 72 20 67 3b 74 72 79 7b 67 3d 66 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 7d 63 61 74 63 68 28 6c 29 7b 67 3d 66 2e 62 6f 64 79 7d 65 3d 67 3d 3d 3d 62 7d 66 3d 63 28 29 3b 61 2e 6d 2e 65 62 28 66 2c 64 2c 22 Data Ascii: .foreach.Rc(c),d,e,f)}};a.m.Ra.foreach=!1;a.h.ea.foreach=!0;a.c.hasfocus={init:function(b,c,d){function e(e){b.__ko_hasfocusUpdating=!0;var f=b.ownerDocument;if("activeElement"in f){var g;try{g=f.activeElement}catch(l){g=f.body}e=g===b}f=c();a.m.eb(f,d,"
2024-04-18 21:59:24 UTC	3023	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 61 2e 61 2e 6b 64 28 6b 29 7d 7d 29 3b 0a 72 65 74 75 72 6e 7b 59 3a 6b 2c 24 3a 6c 2e 6a 61 28 29 3f 6c 3a 6e 7d 7d 76 61 72 20 63 3d 61 2e 61 2e 67 2e 5a 28 29 2c 64 3d 61 2e 61 2e 67 2e 5a 28 29 3b 61 2e 61 2e 65 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 2c 68 2c 6d 2c 6b 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 62 29 7b 79 3d 7b 41 61 3a 62 2c 70 62 3a 61 2e 74 61 28 77 2b 2b 29 7d 3b 76 2e 70 75 73 68 28 79 29 3b 72 7c 7c 46 2e 70 75 73 68 28 79 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 62 29 7b 79 3d 74 5b 62 5d 3b 77 21 3d 3d 79 2e 70 62 2e 76 28 29 26 26 44 2e 70 75 73 68 28 79 29 3b 79 2e 70 62 28 77 2b 2b 29 3b 61 2e 61 2e 55 61 28 79 2e 59 2c 65 29 3b 76 2e 70 75 73 68 28 79 29 7d 66 75 6e 63 Data Ascii: unction(){return!a.a.kd(k)}});return{Y:k,$:l.ja()?l:n}}var c=a.a.g.Z(),d=a.a.g.Z();a.a.ec=function(e,f,g,h,m,k){function l(b){y={Aa:b,pb:a.ta(w++)};v.push(y);r\|\|F.push(y)}function p(b){y=t[b];w!==y.pb.v()&&D.push(y);y.pb(w++);a.a.Ua(y.Y,e);v.push(y)}func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49723	23.220.189.216	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:23 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 21:59:23 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=205429 Date: Thu, 18 Apr 2024 21:59:23 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49724	91.202.233.192	443	6604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:23 UTC	847	OUT	GET /assets/js/notify.js?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
2024-04-18 21:59:24 UTC	308	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Thu, 18 Apr 2024 21:59:24 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 5593 Last-Modified: Mon, 08 Apr 2024 17:12:13 GMT Connection: close ETag: "6614256d-15d9" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-18 21:59:24 UTC	5593	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 4d 61 69 6c 57 69 7a 7a 20 45 4d 41 20 61 70 70 6c 69 63 61 74 69 6f 6e 2e 0a 20 2a 0a 20 2a 20 40 70 61 63 6b 61 67 65 20 4d 61 69 6c 57 69 7a 7a 20 45 4d 41 0a 20 2a 20 40 61 75 74 68 6f 72 20 4d 61 69 6c 57 69 7a 7a 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 54 65 61 6d 20 3c 73 75 70 70 6f 72 74 40 6d 61 69 6c 77 69 7a 7a 2e 63 6f 6d 3e 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 69 6c 77 69 7a 7a 2e 63 6f 6d 2f 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 20 4d 61 69 6c 57 69 7a 7a 20 45 4d 41 20 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 69 6c 77 69 7a 7a 2e 63 6f 6d 29 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 68 74 74 70 73 3a 2f 2f Data Ascii: /** * This file is part of the MailWizz EMA application. * * @package MailWizz EMA * @author MailWizz Development Team <support@mailwizz.com> * @link https://www.mailwizz.com/ * @copyright MailWizz EMA (https://www.mailwizz.com) * @license https://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49725	91.202.233.192	443	6604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:23 UTC	849	OUT	GET /assets/js/adminlte.js?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
2024-04-18 21:59:24 UTC	308	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Thu, 18 Apr 2024 21:59:24 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 9774 Last-Modified: Mon, 08 Apr 2024 17:12:12 GMT Connection: close ETag: "6614256c-262e" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-18 21:59:24 UTC	9774	IN	Data Raw: 2f 2a 21 20 41 64 6d 69 6e 4c 54 45 20 61 70 70 2e 6a 73 0a 20 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 20 4d 61 69 6e 20 4a 53 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 66 69 6c 65 20 66 6f 72 20 41 64 6d 69 6e 4c 54 45 20 76 32 2e 20 54 68 69 73 20 66 69 6c 65 0a 20 2a 20 73 68 6f 75 6c 64 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 61 6c 6c 20 70 61 67 65 73 2e 20 49 74 20 63 6f 6e 74 72 6f 6c 73 20 73 6f 6d 65 20 6c 61 79 6f 75 74 0a 20 2a 20 6f 70 74 69 6f 6e 73 20 61 6e 64 20 69 6d 70 6c 65 6d 65 6e 74 73 20 65 78 63 6c 75 73 69 76 65 20 41 64 6d 69 6e 4c 54 45 20 70 6c 75 67 69 6e 73 2e 0a 20 2a 0a 20 2a 20 40 41 75 74 68 6f 72 20 20 41 6c 6d 73 61 65 65 64 20 53 74 75 64 69 6f 0a 20 2a 20 40 53 75 70 70 6f 72 74 20 3c 68 74 Data Ascii: /! AdminLTE app.js ================ * Main JS application file for AdminLTE v2. This file * should be included in all pages. It controls some layout * options and implements exclusive AdminLTE plugins. * * @Author Almsaeed Studio * @Support <ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49727	23.220.189.216	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:23 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 21:59:24 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=205405 Date: Thu, 18 Apr 2024 21:59:24 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-18 21:59:24 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49726	91.202.233.192	443	6604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:23 UTC	847	OUT	GET /assets/js/cookie.js?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
2024-04-18 21:59:24 UTC	308	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Thu, 18 Apr 2024 21:59:24 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 4938 Last-Modified: Mon, 08 Apr 2024 17:12:12 GMT Connection: close ETag: "6614256c-134a" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-18 21:59:24 UTC	4938	IN	Data Raw: 2f 2a 21 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 43 6f 6f 6b 69 65 20 76 32 2e 31 2e 33 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 73 2d 63 6f 6f 6b 69 65 2f 6a 73 2d 63 6f 6f 6b 69 65 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 36 2c 20 32 30 31 35 20 4b 6c 61 75 73 20 48 61 72 74 6c 20 26 20 46 61 67 6e 65 72 20 42 72 61 63 6b 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 3b 28 66 75 6e 63 74 69 6f 6e 20 28 66 61 63 74 6f 72 79 29 20 7b 0a 20 20 20 20 76 61 72 20 72 65 67 69 73 74 65 72 65 64 49 6e 4d 6f 64 75 6c 65 4c 6f 61 64 65 72 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d Data Ascii: /! JavaScript Cookie v2.1.3 * https://github.com/js-cookie/js-cookie * * Copyright 2006, 2015 Klaus Hartl & Fagner Brack * Released under the MIT license */;(function (factory) { var registeredInModuleLoader = false; if (typeof define ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49728	91.202.233.192	443	6604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:24 UTC	844	OUT	GET /assets/js/app.js?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
2024-04-18 21:59:24 UTC	307	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Thu, 18 Apr 2024 21:59:24 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 2797 Last-Modified: Mon, 08 Apr 2024 17:12:12 GMT Connection: close ETag: "6614256c-aed" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-18 21:59:24 UTC	2797	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 4d 61 69 6c 57 69 7a 7a 20 45 4d 41 20 61 70 70 6c 69 63 61 74 69 6f 6e 2e 0a 20 2a 0a 20 2a 20 40 70 61 63 6b 61 67 65 20 4d 61 69 6c 57 69 7a 7a 20 45 4d 41 0a 20 2a 20 40 61 75 74 68 6f 72 20 4d 61 69 6c 57 69 7a 7a 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 54 65 61 6d 20 3c 73 75 70 70 6f 72 74 40 6d 61 69 6c 77 69 7a 7a 2e 63 6f 6d 3e 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 69 6c 77 69 7a 7a 2e 63 6f 6d 2f 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 20 4d 61 69 6c 57 69 7a 7a 20 45 4d 41 20 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 69 6c 77 69 7a 7a 2e 63 6f 6d 29 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 68 74 74 70 73 3a 2f 2f Data Ascii: /** * This file is part of the MailWizz EMA application. * * @package MailWizz EMA * @author MailWizz Development Team <support@mailwizz.com> * @link https://www.mailwizz.com/ * @copyright MailWizz EMA (https://www.mailwizz.com) * @license https://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49729	91.202.233.192	443	6604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:24 UTC	853	OUT	GET /frontend/assets/js/app.js?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
2024-04-18 21:59:24 UTC	306	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Thu, 18 Apr 2024 21:59:24 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 572 Last-Modified: Mon, 08 Apr 2024 17:12:13 GMT Connection: close ETag: "6614256d-23c" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-18 21:59:24 UTC	572	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 4d 61 69 6c 57 69 7a 7a 20 45 4d 41 20 61 70 70 6c 69 63 61 74 69 6f 6e 2e 0a 20 2a 0a 20 2a 20 40 70 61 63 6b 61 67 65 20 4d 61 69 6c 57 69 7a 7a 20 45 4d 41 0a 20 2a 20 40 61 75 74 68 6f 72 20 4d 61 69 6c 57 69 7a 7a 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 54 65 61 6d 20 3c 73 75 70 70 6f 72 74 40 6d 61 69 6c 77 69 7a 7a 2e 63 6f 6d 3e 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 69 6c 77 69 7a 7a 2e 63 6f 6d 2f 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 20 4d 61 69 6c 57 69 7a 7a 20 45 4d 41 20 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 69 6c 77 69 7a 7a 2e 63 6f 6d 29 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 68 74 74 70 73 3a 2f 2f Data Ascii: /** * This file is part of the MailWizz EMA application. * * @package MailWizz EMA * @author MailWizz Development Team <support@mailwizz.com> * @link https://www.mailwizz.com/ * @copyright MailWizz EMA (https://www.mailwizz.com) * @license https://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49730	91.202.233.192	443	6604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:25 UTC	887	OUT	GET /favicon.ico HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
2024-04-18 21:59:26 UTC	280	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Thu, 18 Apr 2024 21:59:26 GMT Content-Type: image/x-icon Content-Length: 198 Last-Modified: Tue, 14 Nov 2023 07:01:20 GMT Connection: close ETag: "65531b40-c6" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-18 21:59:26 UTC	198	IN	Data Raw: 00 00 01 00 01 00 10 10 02 00 00 00 00 00 b0 00 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 01 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 ad 87 3a 00 f5 f5 f5 00 ff ff 00 00 aa 23 00 00 8a ef 00 00 ab 77 00 00 ab bb 00 00 aa 23 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 bb 15 00 00 ba d5 00 00 aa d5 00 00 93 1d 00 00 bb f5 00 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ( @:#w#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49732	91.202.233.192	443	6604	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:27 UTC	557	OUT	GET /favicon.ico HTTP/1.1 Host: newexra.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=7f2d575d2a5eadaf4679597ee2244477; csrf_token=662b4e4efbcd787ed91244dc9f53b514e43479fes%3A88%3A%22eXY2fm12YVp4SFRVUHFJQXpJYkNDYlJSUVBkWk9zb2rbQLyYvsUCiNBh6n16zB-P13tl9h8JUGVMInu60ngT_A%3D%3D%22%3B
2024-04-18 21:59:27 UTC	280	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Thu, 18 Apr 2024 21:59:27 GMT Content-Type: image/x-icon Content-Length: 198 Last-Modified: Tue, 14 Nov 2023 07:01:20 GMT Connection: close ETag: "65531b40-c6" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-18 21:59:27 UTC	198	IN	Data Raw: 00 00 01 00 01 00 10 10 02 00 00 00 00 00 b0 00 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 01 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 ad 87 3a 00 f5 f5 f5 00 ff ff 00 00 aa 23 00 00 8a ef 00 00 ab 77 00 00 ab bb 00 00 aa 23 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 bb 15 00 00 ba d5 00 00 aa d5 00 00 93 1d 00 00 bb f5 00 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ( @:#w#

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49738	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 21:59:34 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713477543003&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-18 21:59:34 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-18 21:59:34 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-18 21:59:37 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 000AA03D00944BFD81DA5C5253140FFB Ref B: LAX311000111033 Ref C: 2024-04-18T21:59:36Z Date: Thu, 18 Apr 2024 21:59:37 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1713477574.d926f16

Target ID:	0
Start time:	23:59:14
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	23:59:16
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 --field-trial-handle=2032,i,3868403765034609967,554055059277287798,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	23:59:19
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

Windows Analysis Report
https://newexra.com/lists/hd595fmsbd54c/unsubscribe/ps654p1vq6451/zj986hw5a47dc?source=email-client-unsubscribe-button