Edit tour

Windows Analysis Report
https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button

Overview

General Information

Sample URL:	https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button
Analysis ID:	1428619
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 892 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2228 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2508 --field-trial-handle=2476,i,7506934698310214352,14515741543659021388,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5684 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button

HTTP Parser: No favicon

Source: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button

HTTP Parser: No <meta name="author".. found

Source: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button

HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49738 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.63.206.91:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.63.206.91:443 -> 192.168.2.5:49728 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49738 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/bootstrap.min.css?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/css/font-awesome/css/font-awesome.min.css?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/css/ionicons/css/ionicons.min.css?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/css/adminlte.css?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /frontend/assets/css/style.css?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/css/skin-blue.css?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /frontend/assets/cache/1c9ce001/jquery.min.js HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /frontend/assets/cache/1c9ce001/jquery-migrate.min.js HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/js/bootstrap.min.js?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/js/knockout.min.js?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/js/adminlte.js?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/js/notify.js?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /assets/js/cookie.js?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /assets/js/app.js?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /frontend/assets/js/app.js?av=1262687b HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: newexra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-buttonAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: newexra.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B

Source: unknown

DNS traffic detected: queries for: newexra.com

Source: chromecache_74.2.dr	String found in binary or memory: http://almsaeedstudio.com
Source: chromecache_73.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by/4.0/
Source: chromecache_82.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_82.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_89.2.dr, chromecache_75.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_73.2.dr	String found in binary or memory: http://ionicons.com/
Source: chromecache_87.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_79.2.dr, chromecache_74.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_79.2.dr	String found in binary or memory: http://www.almsaeedstudio.com
Source: chromecache_87.2.dr	String found in binary or memory: http://www.json.org/json2.js
Source: chromecache_87.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_73.2.dr	String found in binary or memory: https://github.com/driftyco/ionicons
Source: chromecache_73.2.dr	String found in binary or memory: https://github.com/google/material-design-icons
Source: chromecache_76.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_74.2.dr	String found in binary or memory: https://github.com/lipis/bootstrap-social
Source: chromecache_89.2.dr, chromecache_75.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_73.2.dr	String found in binary or memory: https://twitter.com/benjsperry
Source: chromecache_73.2.dr	String found in binary or memory: https://twitter.com/ionicframework
Source: chromecache_84.2.dr, chromecache_85.2.dr, chromecache_88.2.dr	String found in binary or memory: https://www.mailwizz.com)
Source: chromecache_84.2.dr, chromecache_85.2.dr, chromecache_88.2.dr	String found in binary or memory: https://www.mailwizz.com/
Source: chromecache_84.2.dr, chromecache_85.2.dr, chromecache_88.2.dr	String found in binary or memory: https://www.mailwizz.com/license/

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703

Source: unknown	HTTPS traffic detected: 23.63.206.91:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.63.206.91:443 -> 192.168.2.5:49728 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@16/41@6/4

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2508 --field-trial-handle=2476,i,7506934698310214352,14515741543659021388,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2508 --field-trial-handle=2476,i,7506934698310214352,14515741543659021388,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button	4%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://almsaeedstudio.com	0%	Virustotal		Browse
http://www.almsaeedstudio.com	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
newexra.com	91.202.233.192	true	false	unknown
www.google.com	74.125.136.106	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button	false	unknown
https://newexra.com/assets/css/ionicons/css/ionicons.min.css?av=1262687b	false	unknown
https://newexra.com/assets/js/bootstrap.min.js?av=1262687b	false	unknown
https://newexra.com/assets/css/skin-blue.css?av=1262687b	false	unknown
https://newexra.com/assets/css/bootstrap.min.css?av=1262687b	false	unknown
https://newexra.com/frontend/assets/cache/1c9ce001/jquery-migrate.min.js	false	unknown
https://newexra.com/frontend/assets/js/app.js?av=1262687b	false	unknown
https://newexra.com/assets/js/knockout.min.js?av=1262687b	false	unknown
https://newexra.com/frontend/assets/css/style.css?av=1262687b	false	unknown
https://newexra.com/favicon.ico	false	unknown
https://newexra.com/assets/js/cookie.js?av=1262687b	false	unknown
https://newexra.com/assets/css/font-awesome/css/font-awesome.min.css?av=1262687b	false	unknown
https://newexra.com/assets/js/adminlte.js?av=1262687b	false	unknown
https://newexra.com/assets/css/adminlte.css?av=1262687b	false	unknown
https://newexra.com/assets/js/notify.js?av=1262687b	false	unknown
https://newexra.com/frontend/assets/cache/1c9ce001/jquery.min.js	false	unknown
https://newexra.com/assets/js/app.js?av=1262687b	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/lipis/bootstrap-social	chromecache_74.2.dr	false		high
http://fontawesome.io	chromecache_82.2.dr	false		high
https://github.com/google/material-design-icons	chromecache_73.2.dr	false		high
https://www.mailwizz.com/	chromecache_84.2.dr, chromecache_85.2.dr, chromecache_88.2.dr	false		high
https://www.mailwizz.com/license/	chromecache_84.2.dr, chromecache_85.2.dr, chromecache_88.2.dr	false		high
https://twitter.com/benjsperry	chromecache_73.2.dr	false		high
https://www.mailwizz.com)	chromecache_84.2.dr, chromecache_85.2.dr, chromecache_88.2.dr	false		low
http://knockoutjs.com/	chromecache_87.2.dr	false		high
http://opensource.org/licenses/MIT	chromecache_79.2.dr, chromecache_74.2.dr	false		high
http://ionicons.com/	chromecache_73.2.dr	false		high
http://www.json.org/json2.js	chromecache_87.2.dr	false		high
https://github.com/driftyco/ionicons	chromecache_73.2.dr	false		high
https://twitter.com/ionicframework	chromecache_73.2.dr	false		high
http://fontawesome.io/license	chromecache_82.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php)	chromecache_87.2.dr	false		high
http://getbootstrap.com)	chromecache_89.2.dr, chromecache_75.2.dr	false		low
http://www.almsaeedstudio.com	chromecache_79.2.dr	false	0%, Virustotal, Browse	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_89.2.dr, chromecache_75.2.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_76.2.dr	false		high
http://creativecommons.org/licenses/by/4.0/	chromecache_73.2.dr	false		high
http://almsaeedstudio.com	chromecache_74.2.dr	false	0%, Virustotal, Browse	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
91.202.233.192	newexra.com	Russian Federation	9009	M247GB	false
74.125.136.106	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428619
Start date and time:	2024-04-19 10:25:22 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@16/41@6/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 74.125.138.94, 172.217.215.101, 172.217.215.102, 172.217.215.139, 172.217.215.100, 172.217.215.113, 172.217.215.138, 142.251.15.84, 34.104.35.123, 74.125.136.95, 64.233.185.95, 74.125.138.95, 64.233.176.95, 64.233.177.95, 142.250.9.95, 142.250.105.95, 142.251.15.95, 108.177.122.95, 173.194.219.95, 172.253.124.95, 172.217.215.95, 13.85.23.86, 72.21.81.240, 199.232.210.172, 192.229.211.108, 20.242.39.171, 13.85.23.206, 64.233.185.94
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, update.googleapis.com, hlb.apr-52dd2-0.edgecastdns.net, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 07:26:14 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.964480599027449
Encrypted:	false
SSDEEP:	48:8Lvd+T6uHHIidAKZdA19ehwiZUklqehTy+3:88nmsy
MD5:	0C5860ED8229AE2D2D7859D926AB8CF6
SHA1:	219BE093776F0EC957951D014D79777EE107B918
SHA-256:	F0F53CBA65B217269A6F334D5FB6B8161EC51CDD8280566F2DCD3B3C35D290CD
SHA-512:	12EC9A659E49D5FA8849E2A40B6FBA3C989B0D54DBE9F540CA1ACA21CC941066D4819C02C6EC7DBB39652922F4CE9EAE0989BF8CD57DD4164121F4AB62BF6EF4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....T\'>3...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XEC....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XEC....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XEC....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XEC..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XHC...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........G........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 07:26:14 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9826580296289995
Encrypted:	false
SSDEEP:	48:8Gd+T6uHHIidAKZdA1weh/iZUkAQkqehcy+2:8Hnk9Qxy
MD5:	A02E61EC1CED577B4500EDCFABD6AE4F
SHA1:	F9F29D35631067BFB53314A8F4FA16D19F379755
SHA-256:	0F1DC145E708D05C4306D61A9429B0C54F5C721D1A266804E9135B4B785C50C3
SHA-512:	C7A0F37D28883E6C99E92BAB6275FF75BD6E26CF9449C0E879E2A7D111E5701EF25A66CEF89E55957CB06CEB3DEB256D0F0EF9D1DF2755212B5C29F2F110D0FB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......>3...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XEC....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XEC....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XEC....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XEC..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XHC...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........G........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	3.9950408341065873
Encrypted:	false
SSDEEP:	48:8xvd+T6usHIidAKZdA14tseh7sFiZUkmgqeh7s6y+BX:8xontnoy
MD5:	CB00F17EE15CB59A772A823AD1953D9D
SHA1:	1DBD8ED1DCB4DFB38C00F139FA9FE8C2D690CB29
SHA-256:	0183A26BC2C13953CB3F91458D6851EF2E116066B1D6BBCD2CD2496338893CA4
SHA-512:	6CE791C1C6A8EC5959EB3E7EF9B31590A28C4D77A92BBE7F73ABD79380BB37F669E965DDA9AEDD9150BE7EDFD88B41E2D736436966751D4FECFEAE52A832AF8D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XEC....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XEC....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XEC....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XEC..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........G........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 07:26:14 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9821253768040195
Encrypted:	false
SSDEEP:	48:8Rd+T6uHHIidAKZdA1vehDiZUkwqehQy+R:8qnviy
MD5:	285A16A99EBEAFC4D7EBABD387589B99
SHA1:	6962352C35B694C1852F8219B3B6108DB0166E7F
SHA-256:	0C3766CDE3EC5ED9FB59761F325176556B55C08E56FB5DC0713F44765428AD04
SHA-512:	7DE04B704A1633D7F68D7E3FCC412946B84CEFDFD735850CF9943C2AF3521DF427A1B36AC2CF3050957DB38D657E5FE21D51F1D37DD51551C3636E1072FE4D5D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....5..>3...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XEC....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XEC....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XEC....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XEC..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XHC...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........G........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 07:26:14 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.971577250934623
Encrypted:	false
SSDEEP:	48:8oYd+T6uHHIidAKZdA1hehBiZUk1W1qehWy+C:8opnP92y
MD5:	C5AAF07B7CD0D89B120CA383591139FD
SHA1:	15DF407817B9135EC4C5FE97B8B273D33DCAA98F
SHA-256:	E3D39387718E7DC8AE3B145ACC0035C8D415ADB9B14DF6B84C404D689A755813
SHA-512:	30FDE3E3EAB3AB5A2743EEB8C2B8725AC347355D94C8C2DDEA9F4BF40DAF07D40F2D94BCFA0DA959E1579A1B6FDA9E4CAEFB8D6E71E82FAAEA1C4B4A09B05F11
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......">3...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XEC....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XEC....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XEC....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XEC..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XHC...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........G........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 07:26:14 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9788033714302244
Encrypted:	false
SSDEEP:	48:89d+T6uHHIidAKZdA1duT+ehOuTbbiZUk5OjqehOuTboy+yT+:8unHT/TbxWOvTboy7T
MD5:	296FCFFC1EA85B9AA73E601B4C97E8AE
SHA1:	BA4D5435210BF6045B2A28F9AB8C3154F9E1CF9E
SHA-256:	D13BE5F7FDC1906CE84B4EE461973E954FE6F62D83F9C24667738AA0DC7E10B4
SHA-512:	E49190CE20F63A9440DE85D934526FC4A54DA1C22F14868FB50E977F9DE5F961F4E360B842D9A4BCBD14EFD70ECC65FBB15842551A12818B1BE57274FE185052
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....i..>3...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XEC....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XEC....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XEC....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XEC..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XHC...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........G........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50806)
Category:	downloaded
Size (bytes):	51284
Entropy (8bit):	4.573984507129134
Encrypted:	false
SSDEEP:	384:048l+hhJhjRqFdtYRjJIjsjaHnNfc2C4741mf5HRzL:04DhhjQFduRjJ7uHFcu7Smf5xzL
MD5:	0D6763B67616CB9183F3931313D42971
SHA1:	F0459300E39155DF7AA5E94B3BDB8C8594F49A60
SHA-256:	DE2BBD8E0B32F53A53C1729BEDB350CEA59E9115FBA4F2BED8E2E3DD1F76D9FA
SHA-512:	240A635919DFA2715E18163BB78CAAF125ABD40EB155810980EFD430860E371691DC2F461132948342E16AB6C99DC133245E4D9A2BFE3EBE5036E96BF352E319
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/css/ionicons/css/ionicons.min.css?av=1262687b
Preview:	@charset "UTF-8";/!. Ionicons, v2.0.0. Created by Ben Sperry for the Ionic Framework, http://ionicons.com/. https://twitter.com/benjsperry https://twitter.com/ionicframework. MIT License: https://github.com/driftyco/ionicons.. Android-style icons originally built by Google.s. Material Design Icons: https://github.com/google/material-design-icons. used under CC BY http://creativecommons.org/licenses/by/4.0/. Modified icons to fit ionicon.s grid from original../@font-face{font-family:"Ionicons";src:url("../fonts/ionicons.eot?v=2.0.0");src:url("../fonts/ionicons.eot?v=2.0.0#iefix") format("embedded-opentype"),url("../fonts/ionicons.ttf?v=2.0.0") format("truetype"),url("../fonts/ionicons.woff?v=2.0.0") format("woff"),url("../fonts/ionicons.svg?v=2.0.0#Ionicons") format("svg");font-weight:normal;font-style:normal}.ion,.ionicons,.ion-alert:before,.ion-alert-circled:before,.ion-android-add:before,.ion-android-add-circle:before,.ion-android-alarm-clock:before,.ion-android-alert:

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	230596
Entropy (8bit):	5.026328281726413
Encrypted:	false
SSDEEP:	6144:tDd8jCdBCPExnNr15VeZai31/UpWtF3UtKaGRVElCDqohubj0eF9Fud1gq557aPK:tDd8jCdBCPExnNr15VvWtF3aKaGRVElA
MD5:	315A0BDC202C9B2FE19CFC42EA04D764
SHA1:	D04F2D715A73CA562CAA2544EA885A932F20E185
SHA-256:	7E794BC4608F3355CA991E021119E82FB87DFEA7057A6ACFC88DCBB2E9642082
SHA-512:	A59D555F8B395A345CB2BB9987BB1AF30792804B2CC4BB4A89764C9183AD38E074F71A267ACA8BF61287941F87C8F9929DDDEFA163B254A26AF81282C11806FB
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/css/adminlte.css?av=1262687b
Preview:	./!. AdminLTE v2.3.6. * Author: Almsaeed Studio. * Website: Almsaeed Studio <http://almsaeedstudio.com>. * License: Open source - MIT. * Please visit http://opensource.org/licenses/MIT for more information.!/./. * Core: General Layout Style. * -------------------------. /.html,.body {. min-height: 100%;. height: 100%;.}..layout-boxed html,..layout-boxed body {. height: 100%;.}.body {. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. font-family: sans-serif;. font-weight: 400;. overflow-x: hidden;. overflow-y: auto;.}./ Layout /..wrapper {. min-height: 100%;. position: relative;. overflow: hidden;.}..wrapper:before,..wrapper:after {. content: " ";. display: table;.}..wrapper:after {. clear: both;.}..layout-boxed .wrapper {. max-width: 1250px;. margin: 0 auto;. min-height: 100%;. box-shadow: 0 0 8px rgba(0, 0, 0, 0.5);. position: relative;.}..layout-boxed {. background: url('../img/boxed-bg.jpg') repeat fixed;.}./.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28941)
Category:	downloaded
Size (bytes):	29110
Entropy (8bit):	5.098131946780992
Encrypted:	false
SSDEEP:	768:jryxMjJYkskKzykVtCb+9C8agZMdyKHfivbOCtFKH:3HbjZC7w
MD5:	BA847811448EF90D98D272AECCEF2A95
SHA1:	5814E91BB6276F4DE8B7951C965F2F190A03978D
SHA-256:	898D05A17F2CFC5120DDCDBA47A885C378C0B466F30F0700E502757E24B403A1
SHA-512:	BCED99D9331614757643273441A2B8921103382949AB0E510F386C453EC2A2359DA39680D8A169E6BCBE7531844EAF5F598560F0D133D3FA3A9F6C7502B148DF
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/js/bootstrap.min.js?av=1262687b
Preview:	/!. Bootstrap v3.1.1 (http://getbootstrap.com). * Copyright 2011-2014 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var c in b)if(void 0!==a.style[c])return{end:b[c]};return!1}a.fn.emulateTransitionEnd=function(b){var c=!1,d=this;a(this).one(a.support.transition.end,function(){c=!0});var e=function(){c\|\|a(d).trigger(a.support.transition.end)};return setTimeout(e,b),this},a(function(){a.support.transition=b()})}(jQuery),+function(a){"use strict";var b='[data-dismiss="alert"]',c=function(c){a(c).on("click",b,this.close)};c.prototype.close=function(b){function c(){f.trigger("closed.bs.alert").remove()}var d=a(this),e=d.attr("

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4938
Entropy (8bit):	4.0610177180520655
Encrypted:	false
SSDEEP:	96:cIBtgSBvwbu1D+2y2O5tMENRk4QUFNNmHJ1sltgRVK1:cIBqSBYq1a2y2itMEf/QS2UIi1
MD5:	449DD3907404CEAD5D8BA6203B3550DC
SHA1:	C9BB690411C3F46145F8EA137E6783929D8C27AA
SHA-256:	3585A42757908BA2ACE27F41B01256F6CF4FFB9679F7AC0FF8957817D5CCFDE1
SHA-512:	AF975D70F9BB4F5C9E10CA9A3F3DA7C71400DEFF2F8BD0CAA3958CA21D5E4CBA60C013317461851DA8891E75514824949FB2616D058F795358661D28797F5990
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/js/cookie.js?av=1262687b
Preview:	/!. JavaScript Cookie v2.1.3. * https://github.com/js-cookie/js-cookie. . Copyright 2006, 2015 Klaus Hartl & Fagner Brack. * Released under the MIT license. */.;(function (factory) {. var registeredInModuleLoader = false;. if (typeof define === 'function' && define.amd) {. define(factory);. registeredInModuleLoader = true;. }. if (typeof exports === 'object') {. module.exports = factory();. registeredInModuleLoader = true;. }. if (!registeredInModuleLoader) {. var OldCookies = window.Cookies;. var api = window.Cookies = factory();. api.noConflict = function () {. window.Cookies = OldCookies;. return api;. };. }.}(function () {. function extend () {. var i = 0;. var result = {};. for (; i < arguments.length; i++) {. var attributes = arguments[ i ];. for (var key in attributes) {. result[key] = attributes[key];. }

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://newexra.com/frontend/assets/cache/1c9ce001/jquery.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	210643
Entropy (8bit):	4.913708674646796
Encrypted:	false
SSDEEP:	6144:JVzMC3Zr2Nx5D+LDQip5y+JRq2ZV4afXkuXb0GL/l+JRdGPDumxJZ+DjcA0MoEY:PzMC3Zr2Nx5D+LDQip5y+JRq2ZV4afXV
MD5:	B94B3FB60C559DB34B7AE821C9368B5F
SHA1:	1D389CC788030FEDB24E709E7D1330EC3789D18F
SHA-256:	2FEFBAF4D062DF56D0335279167BE66E487540EA9DD8DB745A226D64BE95F239
SHA-512:	E8E92320CDBBC71E53F4E54C7CC59AD785E43F7BC56D8C68B9AF08CBBBF6EDBC5EC0FF9FB9886974F0D7545542D9E6817982B5E77CD1BEDB934B1BC0A64E8AC9
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/css/skin-blue.css?av=1262687b
Preview:	:root {. --mz-blue: #63B3ED;. --mz-indigo: #596CFF;. --mz-purple: #6f42c1;. --mz-pink: #d63384;. --mz-red: #F56565;. --mz-orange: #fd7e14;. --mz-yellow: #FBD38D;. --mz-green: #81E6D9;. --mz-teal: #20c997;. --mz-cyan: #0dcaf0;. --mz-white: #fff;. --mz-gray: #5e6278;. --mz-gray-dark: #343a40;. --mz-gray-100: #f8f9fa;. --mz-gray-200: #e9ecef;. --mz-gray-300: #dee2e6;. --mz-gray-400: #ced4da;. --mz-gray-500: #adb5bd;. --mz-gray-600: #6c757d;. --mz-gray-700: #495057;. --mz-gray-800: #343a40;. --mz-gray-900: #212529;. --mz-text-gray: #7e8299;. --mz-form-text-color: #3f4254;. --mz-primary: #009ef7;. --mz-light-primary: #f1fafe;. --mz-primary-text-color: #17a1f7;. --mz-secondary: #8392ab;. --mz-success: #2dce89;. --mz-light-success: #E8FFF3;. --mz-info: #11cdef;. --mz-warning: #fb6340;. --mz-danger: #F1416C;. --mz-light-danger: #fff5f8;. --mz-light: #e9ecef;. --mz-dark: #344767;. --mz

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9373)
Category:	downloaded
Size (bytes):	9774
Entropy (8bit):	5.247988101918291
Encrypted:	false
SSDEEP:	192:FQVn5yyXgGyPE0cmi8NSWqqpULv/cE9OAZFvnsTNYRUivUv:FQVjPeNSRZ/H8MmNjv
MD5:	ADD5B3F0900365F3B4240664DA17760E
SHA1:	7CBD53BFCF830E7C150D6BB55EFCC2832E7543E7
SHA-256:	42338BC162A705B04953FC72340216DBEFB55CF12EC1A6E7CAD04E5E680E26BC
SHA-512:	A18E3C2B06A156AC1852AD26C3C7E11482F76B5263853ADFB3A4011BCD628A466938E5E68F1666F4A8599AF27BFBAD074264F0CEA52E339C1F8360AC8C80041D
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/js/adminlte.js?av=1262687b
Preview:	/! AdminLTE app.js. ================. * Main JS application file for AdminLTE v2. This file. * should be included in all pages. It controls some layout. * options and implements exclusive AdminLTE plugins.. . @Author Almsaeed Studio. * @Support <http://www.almsaeedstudio.com>. * @Email <abdullah@almsaeedstudio.com>. * @version 2.3.6. * @license MIT <http://opensource.org/licenses/MIT>. */.function _init(){"use strict";$.AdminLTE.layout={activate:function(){var a=this;a.fix(),a.fixSidebar(),$(window,".wrapper").resize(function(){a.fix(),a.fixSidebar()})},fix:function(){var a=$(".main-header").outerHeight()+$(".main-footer").outerHeight(),b=$(window).height(),c=$(".sidebar").height();if($("body").hasClass("fixed"))$(".content-wrapper, .right-side").css("min-height",b-$(".main-footer").outerHeight());else{var d;b>=c?($(".content-wrapper, .right-side").css("min-height",b-a),d=b-a):($(".content-wrapper, .right-side").css("min-height",c),d=c);var e=$($.AdminLTE.options.controlSideba

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13326)
Category:	downloaded
Size (bytes):	13467
Entropy (8bit):	5.263709993634405
Encrypted:	false
SSDEEP:	192:arprDN+e3IUefKSfI0bP1CMjt9kdgOFWIa/aC3+sZv9LRS:arprx6PfK2P1CMjt8FWIa2sZVI
MD5:	A36B8E9CBFB4A675225AA408C4D15C0C
SHA1:	FCD46DE9C99E71ED586A850D877FD3B01E8269FD
SHA-256:	16EB18D9C6303CDD50AC58DB5B2B116C5DCC4C43C89424F268F6D13FC599FB19
SHA-512:	403B23497D664AD048027357C77D5DCAFC38C157478E89CEC2B91A221A62225CEA19409DB08EB633042D1E9245F8DA72D929929464913A8356402385A6A6EC3A
Malicious:	false
Reputation:	low
URL:	https://newexra.com/frontend/assets/cache/1c9ce001/jquery-migrate.min.js
Preview:	/! jQuery Migrate v3.4.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+n[a]>+o[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.0";var t=Object.create(null),o=(s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	16550
Entropy (8bit):	4.913182980727161
Encrypted:	false
SSDEEP:	384:ELqQF5+71U5iEChoiD+r460ZsA3GhZK+qKDQt19N3UV1xhbbBHlMFQ6+Fu:ELqQF5c0TBHiFOFu
MD5:	8EB135311DE8119732EBCF00BB775364
SHA1:	6B6ACD0D3B7E1D27C8130899DCA581CB9A415FE9
SHA-256:	AC6BC213C9EF74C63BE52C04725427833977BDFCFF9975974C494B47D4CE5FE2
SHA-512:	F31FF0AAB855C07BFA160CF788752BA6995EDCE57FF308B0DBF41787BC30546DE18251D576440C14A67E605637D6A6EB06CD62D4A0ACADE8FB24AA0052C47397
Malicious:	false
Reputation:	low
URL:	https://newexra.com/frontend/assets/css/style.css?av=1262687b
Preview:	body {. font-family: "Open Sans", Verdana, Arial, Helvetica, sans-serif;. color: #3a3a3a;. background-color: #FFFFFF;.}..content-wrapper {. background-color: #FFFFFF;. padding: 30px 0 0 0;.}.h1,.h2 h3,.h4,.h5 {. font-family: "Helvetica Neue", Arial, Helvetica, sans-serif;. padding: 0 0 0 0;. margin: 0 0 0 0;.}..ctrl-site.act-index .row-large {. margin-left: 0!important;. margin-right: 0!important;.}..ctrl-site.act-index .content {. padding: 0!important;.}..ctrl-site.act-index .container-fluid-large {. width: 100%!important;. padding-left: 0;. padding-right: 0;. left: 0!important;.}.h1.page-heading {. padding-top: 0;. margin-top: 0;. font-size: 30px;.}.h1.page-heading small {. font-size: 12px;.}..related-articles {. margin-top: 10px;.}..related-articles .article {. margin-bottom: 10px;. font-size: 12px;. border-bottom: 1px dotted #c2c2c2;. padding-bottom: 5px;. min-height: 90px;. border-right: 1px dotted #c2c2c2;.}..related-articles .article .title {. font-siz

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27303)
Category:	downloaded
Size (bytes):	27466
Entropy (8bit):	4.752060795123139
Encrypted:	false
SSDEEP:	384:Qi5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8c:Dlr+Klk3YlKfwYUf8l8yQ/T
MD5:	4FBD15CB6047AF93373F4F895639C8BF
SHA1:	12D6861075DE8E293265FF6FF03B1F3ADCB44C76
SHA-256:	DDD92F10AD162C7449EFF0ACAF40598C05B1111739587EDB75E5326B6697C5D5
SHA-512:	F8BE32CBA15170319B5C9F663C6F0C4FFDD4083CF047D80F7B214D302B489ECA25FBEE66DDB9366D758A7598EFC9B9A886B02C9F751AE71F207CB9DB1356243A
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/css/font-awesome/css/font-awesome.min.css?av=1262687b
Preview:	/!. Font Awesome 4.5.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.5.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.5.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.5.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.5.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.5.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.5.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:l36nJdjRR:ZG9
MD5:	4485A2BAFD72B3EB2371C9B1286BBDF3
SHA1:	502BABAD61CDB4D2CFA39D15AE3D23395E9AD97B
SHA-256:	9C6EF9763E8B7231452141B50CEC16E9281C6E18E11298FE1DE104E9B6E9406F
SHA-512:	44A5F2B4CFE613600459D4D0F762A0A3885BEC43D82FD4F094C7D98D75580580FE395A1178AF32BEFB523777355176E66BFAD9DC4703BB6FD156F2E8D82D14B5
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnd8rnfSFlCYRIFDQlsRZgSBQ05l8Fr?alt=proto
Preview:	ChIKBw0JbEWYGgAKBw05l8FrGgA=

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	5593
Entropy (8bit):	5.047886922238787
Encrypted:	false
SSDEEP:	96:x3FligI/LYTDs9jxTJ9bptJxplNJZT76r3yJ37E/9+OSIE:xVEgEnxtxTODQOk
MD5:	9A19754FBD746AE6B603286C3A971E55
SHA1:	C45B906EC95326202C2A8E13545B5C17E92BBDC7
SHA-256:	D1416DC4293EAAE9E4AAC8D5267FB0D5DCB35D9DBC44B63278F75750A1F9CC22
SHA-512:	B4E7421BD39A79044BD4F2B11FE2FCDA7015AE75B189458E15FDA9967C9F7413814FA45F8E0BE1897D218E4D44AF4937A8F8DA8DA9FA9E75859D71DCA805B6C3
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/js/notify.js?av=1262687b
Preview:	/*. This file is part of the MailWizz EMA application.. . @package MailWizz EMA. * @author MailWizz Development Team <support@mailwizz.com>. * @link https://www.mailwizz.com/. * @copyright MailWizz EMA (https://www.mailwizz.com). * @license https://www.mailwizz.com/license/. * @since 1.0. */.;(function( $, window, document, undefined ){...var notify = function() {......var messages = {....error: [],....warning: [],....info: [],....success: [],...};......var options = {....container: '#notify-container',....errorClass: 'alert alert-block alert-danger',....warningClass: 'alert alert-block alert-warning',....infoClass: 'alert alert-block alert-info',....successClass: 'alert alert-block alert-success',....htmlWrapper: '<div class="{CLASS}">{CONTENT}</div>',....htmlCloseButton: '<button type="button" class="close" data-dismiss="alert">.</button>',....htmlHeading: '<p>{CONTENT}</p>',....errorHeading: '',....warningHeading: '',....infoHeading: '',....successHeading: '',........_merged:

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	572
Entropy (8bit):	5.012979234486064
Encrypted:	false
SSDEEP:	12:UJSFQeWd+X5WmYGl3yePD3xvzzAMJ1WylKRRHVifybIRHVv:ivkc1eNHAMJMySR1iybIR1v
MD5:	92F929C4BC5B25C73B8288922E6BDDBA
SHA1:	8FC728C33DCB01BDDA4F2FC005DC2D65778E0723
SHA-256:	6FB1A7F0EF69A34D10191D7AFA3899746645013F058EAC4B4E4D0B3AFAD6B4B3
SHA-512:	85FFEF8F6F935A68E4A6321FDEBA0F631BBF5FD929184D3BFCDA1A38634DE33B70BCA7DC40C184AA301A0585945196F2E1529BA4D83BACBC7ED8B9257469B0D3
Malicious:	false
Reputation:	low
URL:	https://newexra.com/frontend/assets/js/app.js?av=1262687b
Preview:	/*. This file is part of the MailWizz EMA application.. . @package MailWizz EMA. * @author MailWizz Development Team <support@mailwizz.com>. * @link https://www.mailwizz.com/. * @copyright MailWizz EMA (https://www.mailwizz.com). * @license https://www.mailwizz.com/license/. * @since 1.0. */.jQuery(document).ready(function($){.. // since 1.6.4. $('.ctrl-lists form').on('submit', function(){. $(this).css({opacity: .5});. });.. // since 2.4.3. $('.ctrl-surveys form').on('submit', function(){. $(this).css({opacity: .5});. });..});.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 2 colors
Category:	dropped
Size (bytes):	198
Entropy (8bit):	1.9172424882027073
Encrypted:	false
SSDEEP:	3:3/nlrXllvlNl/FXl1ll1lPflQQC/PcelVoX55/w/P3wlz:J1xlF6vHa55/6gz
MD5:	FF82D748B4ADD52E4DD7C8F0B58B89F2
SHA1:	EA69CEBF29F461D7831368697F303EA4F0C69A2D
SHA-256:	DE88C1F678413736E858B27974CD5D2181B3DF891B8999DD93835384B0CA2D8F
SHA-512:	4A5BF02B465CE7D5AED54E9800ED320EB929DDAA6C3ED5B3454D61B93B1EC7496AC1BBB529BE8B2F30A0BF339D452EC3A1F2FDA81F4F32C2D978584D146C48E8
Malicious:	false
Reputation:	low
Preview:	......................(....... ...........@.....................:..........#.......w.......#..........................................................................................................

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (597)
Category:	downloaded
Size (bytes):	68249
Entropy (8bit):	5.3682826223243545
Encrypted:	false
SSDEEP:	1536:CbbHXA6RWSh71JjpqeifPGf2J7RTJGjkJJyh2OsY86DUcQCLv:qAWFekkOYcQ8v
MD5:	0B0128AB9E61554877CBB24986C24F04
SHA1:	30F5C25060787C4FB0FD4A45EE48D82C683145DA
SHA-256:	E8957BB182A5047B07BEA0A49FD22B11614B1AB9AC5B8286FCB2259F48658E73
SHA-512:	D802FF5446AE2A466A414F411E09EFE3C3A15DC24FC7DBDDCF137526B28355CE053D4FCC104FC167A77D97498FED59AF2EC8ED630AA2610A43B242BD746F0A04
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/js/knockout.min.js?av=1262687b
Preview:	/!. Knockout JavaScript library v3.5.1. * (c) The Knockout.js team - http://knockoutjs.com/. * License: MIT (http://www.opensource.org/licenses/mit-license.php). */..(function() {(function(n){var A=this\|\|(0,eval)("this"),w=A.document,R=A.navigator,v=A.jQuery,H=A.JSON;v\|\|"undefined"===typeof jQuery\|\|(v=jQuery);(function(n){"function"===typeof define&&define.amd?define(["exports","require"],n):"object"===typeof exports&&"object"===typeof module?n(module.exports\|\|exports):n(A.ko={})})(function(S,T){function K(a,c){return null===a\|\|typeof a in W?a===c:!1}function X(b,c){var d;return function(){d\|\|(d=a.a.setTimeout(function(){d=n;b()},c))}}function Y(b,c){var d;return function(){clearTimeout(d);.d=a.a.setTimeout(b,c)}}function Z(a,c){c&&"change"!==c?"beforeChange"===c?this.pc(a):this.gb(a,c):this.qc(a)}function aa(a,c){null!==c&&c.s&&c.s()}function ba(a,c){var d=this.qd,e=d[r];e.ra\|\|(this.Qb&&this.mb[c]?(d.uc(c,a,this.mb[c]),this.mb[c]=null,--this.Qb):e.I[c]\|\|d.uc(c,a,e.J?{da:a}:d.$c(a))

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2797
Entropy (8bit):	4.730152899581526
Encrypted:	false
SSDEEP:	48:Ekc1eNgMh5mssfxKssWphSRuRIjuFpEyiH0i9kaH7nnF+yKeesyKeeLkuBjqScG9:xSvxKpYhSRgaMJiH0i9rnF/KeaKekpHr
MD5:	3ADE0B17B1B7C3D1C27ABA12CEEDA1D3
SHA1:	F8C1FE63C016A077E1545D123EB4DB8E8A690C6D
SHA-256:	CF55D95AD63C72F2EEB219DA669CC848CC3022FA4A4798D62ED19ED342460CBE
SHA-512:	316F6B21C9959EB215E9A0591E26AEC6E2EF4EF681694640B076E8C2B268255A793B1AF31BD529CA9374375B2B9DF9A196D97BC51063BE5FC94826338774C9A1
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/js/app.js?av=1262687b
Preview:	/*. This file is part of the MailWizz EMA application.. . @package MailWizz EMA. * @author MailWizz Development Team <support@mailwizz.com>. * @link https://www.mailwizz.com/. * @copyright MailWizz EMA (https://www.mailwizz.com). * @license https://www.mailwizz.com/license/. * @since 1.0. */.jQuery(document).ready(function($){.. ajaxData = {};. if ($('meta[name=csrf-token-name]').length && $('meta[name=csrf-token-value]').length) {. var csrfTokenName = $('meta[name=csrf-token-name]').attr('content');. var csrfTokenValue = $('meta[name=csrf-token-value]').attr('content');. ajaxData[csrfTokenName] = csrfTokenValue;. }.. // input/select/textarea fields help text. $('.has-help-text').popover();. $(document).on('blur', '.has-help-text', function(e) {. if ($(this).data('bs.popover')) {. // this really doesn't want to behave correct unless forced this way!. $(this).data('bs.popover').destroy();. $('.popover')

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65366)
Category:	downloaded
Size (bytes):	99961
Entropy (8bit):	5.103690141294514
Encrypted:	false
SSDEEP:	768:rnB72vDPZJF1Y13kGxw+snfkzaZbZb3PxNCMpm0Fr89YjMXdQJaQ:j6p1Y13NwTk+fPM4891XE
MD5:	8A7442CA6BEDD62CEC4881040B9A9E83
SHA1:	E2D2B846E9EA72A1985458A3748AAB4E01A8FB3A
SHA-256:	E9503448692B738DD260FBD7F7CABF2E11F09B600FA97E6EB3A56EBA5B1A7E9B
SHA-512:	057FD1D2E51DF045DB3DADBD41FAC2B31839C4F651F897CCD24E8AEB3162CA04E37B50977F11DC96B50A25B94EE2525EA2B2539862788E38F43636D0B5B4D192
Malicious:	false
Reputation:	low
URL:	https://newexra.com/assets/css/bootstrap.min.css?av=1262687b
Preview:	/!. Bootstrap v3.1.1 (http://getbootstrap.com). * Copyright 2011-2014 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /../! normalize.css v3.0.0 \| MIT License \| git.io/normalize */html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:0 0}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{-moz-box-sizing:content-box;box-

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 2 colors
Category:	downloaded
Size (bytes):	198
Entropy (8bit):	1.9172424882027073
Encrypted:	false
SSDEEP:	3:3/nlrXllvlNl/FXl1ll1lPflQQC/PcelVoX55/w/P3wlz:J1xlF6vHa55/6gz
MD5:	FF82D748B4ADD52E4DD7C8F0B58B89F2
SHA1:	EA69CEBF29F461D7831368697F303EA4F0C69A2D
SHA-256:	DE88C1F678413736E858B27974CD5D2181B3DF891B8999DD93835384B0CA2D8F
SHA-512:	4A5BF02B465CE7D5AED54E9800ED320EB929DDAA6C3ED5B3454D61B93B1EC7496AC1BBB529BE8B2F30A0BF339D452EC3A1F2FDA81F4F32C2D978584D146C48E8
Malicious:	false
Reputation:	low
URL:	https://newexra.com/favicon.ico
Preview:	......................(....... ...........@.....................:..........#.......w.......#..........................................................................................................

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 19, 2024 10:26:07.676373005 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 19, 2024 10:26:07.676482916 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 19, 2024 10:26:07.817140102 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 19, 2024 10:26:15.066133022 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:15.066227913 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:15.066332102 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:15.066431046 CEST	49711	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:15.066535950 CEST	443	49711	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:15.066605091 CEST	49711	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:15.066678047 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:15.066704988 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:15.066946983 CEST	49711	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:15.066972017 CEST	443	49711	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:15.798779964 CEST	443	49711	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:15.799120903 CEST	49711	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:15.799181938 CEST	443	49711	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:15.800981045 CEST	443	49711	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:15.801070929 CEST	49711	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:15.802114964 CEST	49711	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:15.802301884 CEST	49711	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:15.802314043 CEST	443	49711	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:15.802396059 CEST	443	49711	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:15.810379982 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:15.810667038 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:15.810703039 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:15.814280987 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:15.814358950 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:15.814661026 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:15.814821959 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:15.852006912 CEST	49711	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:15.852026939 CEST	443	49711	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:15.867024899 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:15.867053986 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:15.899470091 CEST	49711	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:15.914798975 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.085473061 CEST	443	49711	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.085535049 CEST	443	49711	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.085556030 CEST	443	49711	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.085621119 CEST	49711	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.085644960 CEST	443	49711	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.085671902 CEST	49711	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.085686922 CEST	49711	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.085690975 CEST	443	49711	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.085751057 CEST	49711	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.100208044 CEST	49711	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.100234032 CEST	443	49711	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.116219044 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.116332054 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.116436005 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.117057085 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.117580891 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.117618084 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.117863894 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.118087053 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.118114948 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.118319988 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.118530989 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.118607998 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.118657112 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.118699074 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.118733883 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.118791103 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.119792938 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.119857073 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.120515108 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.120532036 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.120789051 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.120822906 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.121068954 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.121150017 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.121247053 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.121282101 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.164114952 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.608086109 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.608163118 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.608186007 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.608237028 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.608252048 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.608305931 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.608333111 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.608333111 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.608361006 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.608378887 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.608413935 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.608427048 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.608463049 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.608647108 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.608699083 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.608721972 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.608737946 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.608763933 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.608778954 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.608803034 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.608827114 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.608839989 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.609385014 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.609819889 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.609833956 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.610939980 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.613852024 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.614023924 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.615204096 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.616796017 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.617957115 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.618791103 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.621073961 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.621110916 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.621717930 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.621742010 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.622127056 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.622180939 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.622262001 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.624428988 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.624830008 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.625020981 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.625403881 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.625469923 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.625827074 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.625901937 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.627298117 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.627356052 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.628582954 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.628762007 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.630424023 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.630608082 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.630923986 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.630997896 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.631187916 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.632766962 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.632946014 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.633045912 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.633054018 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.633184910 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.633202076 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.633776903 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.633794069 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.656153917 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.662827969 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.672142029 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.677745104 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.677762032 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.677859068 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.852418900 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.852444887 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.852492094 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.852524996 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.852555990 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.852606058 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.852631092 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.852652073 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.852803946 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.852822065 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.852875948 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.852893114 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.852914095 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.852947950 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.852967978 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.853375912 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.853415966 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.853441954 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.853452921 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:16.853486061 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.853502989 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:16.999686956 CEST	49719	443	192.168.2.5	74.125.136.106
Apr 19, 2024 10:26:16.999768019 CEST	443	49719	74.125.136.106	192.168.2.5
Apr 19, 2024 10:26:16.999838114 CEST	49719	443	192.168.2.5	74.125.136.106
Apr 19, 2024 10:26:17.000761032 CEST	49719	443	192.168.2.5	74.125.136.106
Apr 19, 2024 10:26:17.000792027 CEST	443	49719	74.125.136.106	192.168.2.5
Apr 19, 2024 10:26:17.096298933 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.096322060 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.096369982 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.096386909 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.096415043 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.096426964 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.096451998 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.096471071 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.096586943 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.096636057 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.096647024 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.096793890 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.096854925 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.203269958 CEST	49710	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.203340054 CEST	443	49710	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.204612970 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.204658031 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.204719067 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.206219912 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.206233025 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.218055010 CEST	443	49719	74.125.136.106	192.168.2.5
Apr 19, 2024 10:26:17.229264021 CEST	49719	443	192.168.2.5	74.125.136.106
Apr 19, 2024 10:26:17.229305029 CEST	443	49719	74.125.136.106	192.168.2.5
Apr 19, 2024 10:26:17.230772018 CEST	443	49719	74.125.136.106	192.168.2.5
Apr 19, 2024 10:26:17.230855942 CEST	49719	443	192.168.2.5	74.125.136.106
Apr 19, 2024 10:26:17.241120100 CEST	49719	443	192.168.2.5	74.125.136.106
Apr 19, 2024 10:26:17.241280079 CEST	443	49719	74.125.136.106	192.168.2.5
Apr 19, 2024 10:26:17.288486958 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 19, 2024 10:26:17.288496971 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 19, 2024 10:26:17.288620949 CEST	49719	443	192.168.2.5	74.125.136.106
Apr 19, 2024 10:26:17.288686991 CEST	443	49719	74.125.136.106	192.168.2.5
Apr 19, 2024 10:26:17.329525948 CEST	49719	443	192.168.2.5	74.125.136.106
Apr 19, 2024 10:26:17.332912922 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.332972050 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.333014965 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.333030939 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.333045959 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.333070993 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.333091974 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.333880901 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.333962917 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.333965063 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.334011078 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.334033966 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.334058046 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.334062099 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.334135056 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.334177971 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.351191998 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.351253986 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.351298094 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.351326942 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.351381063 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.351411104 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.351452112 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.352189064 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.352237940 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.352278948 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.352294922 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.352324963 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.354093075 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.354118109 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.354157925 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.354178905 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.354181051 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.354202032 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.354221106 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.354223013 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.354266882 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.354271889 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.354290962 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.354299068 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.354310036 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.354319096 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.354336023 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.354336977 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.354347944 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.354347944 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.354382038 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.354392052 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.354387045 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.354387045 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.354409933 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.354499102 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.354569912 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.354604959 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.354605913 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.354635000 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.354660988 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.354670048 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.354701996 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.366030931 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.366112947 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.366134882 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.366174936 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.366183043 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.366208076 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.366254091 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.366296053 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.366297007 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.366297007 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.366297007 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.366333008 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.366343975 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.366365910 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.366379023 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.366413116 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.396501064 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.396550894 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.414355993 CEST	49715	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.414380074 CEST	443	49715	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.415009022 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.415031910 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.415082932 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.416196108 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.416407108 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.416419029 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.417382956 CEST	49717	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.417412996 CEST	443	49717	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.417661905 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.417752028 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.417824984 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.418632984 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.418668985 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.431325912 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 19, 2024 10:26:17.596215010 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.596240997 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.596282959 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.596335888 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.596405983 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.596438885 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.596472979 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.596498966 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.596515894 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.596565008 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.596577883 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.596645117 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.596700907 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.600086927 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.600158930 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.600213051 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.600213051 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.600227118 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.600239038 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.600270987 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.600275993 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.600286007 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.600348949 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.600348949 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.600419998 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.600435019 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.600537062 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.600543976 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.600588083 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.613001108 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.613061905 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.613095999 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.613157988 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.613210917 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.613212109 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.613233089 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.613261938 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.613289118 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.613310099 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.613313913 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.613333941 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.613369942 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.613389969 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.613467932 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.613507986 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.613538980 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.613552094 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.613578081 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.613604069 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.614162922 CEST	49714	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.614182949 CEST	443	49714	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.614639044 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.614675045 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.614741087 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.616708994 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.616724968 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.685142040 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.689121962 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.689146042 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.690243959 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.702903032 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.703001022 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.703299046 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.744160891 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.843867064 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.843904972 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.843941927 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.843952894 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.844002962 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.844002962 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.846266985 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.846318960 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.846343994 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.846349001 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.846494913 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.846846104 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.846864939 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.846939087 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.846939087 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.846946001 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.846990108 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.847263098 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.847281933 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.847332001 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.847338915 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.847374916 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.847374916 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.847671986 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.847692013 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.847729921 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.847734928 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.847768068 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.847779989 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.848005056 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.848027945 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.848090887 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.848090887 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.848097086 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.848143101 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.860924959 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.860955954 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.861017942 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.861016035 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.861066103 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.861102104 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.861123085 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.861217976 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.861253023 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.861283064 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.861294031 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.861320019 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.861339092 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.861530066 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.861562967 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.861593962 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.861604929 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.861630917 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.861650944 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.861865044 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.861896038 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.861926079 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.861937046 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.861960888 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.861995935 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.862138033 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.862169981 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.862221003 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.862236977 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.862263918 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.862281084 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.893238068 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.893474102 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.893516064 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.897149086 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.897224903 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.897582054 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.897761106 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.897768021 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.903419018 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.903664112 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.903676033 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.904833078 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.905194044 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.905361891 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.905373096 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.940150023 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.947490931 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.947514057 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.947549105 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:17.947575092 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:17.965086937 CEST	49724	443	192.168.2.5	23.63.206.91
Apr 19, 2024 10:26:17.965147972 CEST	443	49724	23.63.206.91	192.168.2.5
Apr 19, 2024 10:26:17.965274096 CEST	49724	443	192.168.2.5	23.63.206.91
Apr 19, 2024 10:26:17.967226982 CEST	49724	443	192.168.2.5	23.63.206.91
Apr 19, 2024 10:26:17.967257023 CEST	443	49724	23.63.206.91	192.168.2.5
Apr 19, 2024 10:26:17.995764971 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.088805914 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.088833094 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.088902950 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.088918924 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.088918924 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.088937998 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.088999033 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.088999033 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.091114044 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.091171980 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.091276884 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.091276884 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.091284037 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.091506958 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.091902018 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.091959000 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.092073917 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.092091084 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.092097044 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.092123032 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.092144966 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.092292070 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.092477083 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.092484951 CEST	443	49716	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.092514038 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.092690945 CEST	49716	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.092787027 CEST	49725	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.092812061 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.092916012 CEST	49725	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.093261957 CEST	49725	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.093280077 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.094094992 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.094532967 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.094552040 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.098164082 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.098311901 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.098640919 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.098778009 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.098783970 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.098809958 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.109566927 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.109581947 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.109606028 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.109642982 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.109671116 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.109704971 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.109874010 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.109983921 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.110008001 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.110083103 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.110083103 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.110097885 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.110178947 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.110366106 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.110445976 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.110486984 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.110605955 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.110786915 CEST	49718	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.110817909 CEST	443	49718	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.112521887 CEST	49726	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.112535954 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.112603903 CEST	49726	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.116966009 CEST	49726	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.116997004 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.140279055 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.140300035 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.192691088 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.192992926 CEST	443	49724	23.63.206.91	192.168.2.5
Apr 19, 2024 10:26:18.193612099 CEST	49724	443	192.168.2.5	23.63.206.91
Apr 19, 2024 10:26:18.200767040 CEST	49724	443	192.168.2.5	23.63.206.91
Apr 19, 2024 10:26:18.200774908 CEST	443	49724	23.63.206.91	192.168.2.5
Apr 19, 2024 10:26:18.201210022 CEST	443	49724	23.63.206.91	192.168.2.5
Apr 19, 2024 10:26:18.245307922 CEST	49724	443	192.168.2.5	23.63.206.91
Apr 19, 2024 10:26:18.272078037 CEST	49724	443	192.168.2.5	23.63.206.91
Apr 19, 2024 10:26:18.316122055 CEST	443	49724	23.63.206.91	192.168.2.5
Apr 19, 2024 10:26:18.363545895 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.363610029 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.363632917 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.363653898 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.363692045 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.363712072 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.363733053 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.363733053 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.363749027 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.363764048 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.363764048 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.363883018 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.364728928 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.369354963 CEST	49722	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.369366884 CEST	443	49722	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.370412111 CEST	49727	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.370477915 CEST	443	49727	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.370640993 CEST	49727	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.372828007 CEST	49727	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.372889042 CEST	443	49727	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.382080078 CEST	443	49724	23.63.206.91	192.168.2.5
Apr 19, 2024 10:26:18.382216930 CEST	443	49724	23.63.206.91	192.168.2.5
Apr 19, 2024 10:26:18.384665012 CEST	49724	443	192.168.2.5	23.63.206.91
Apr 19, 2024 10:26:18.384665012 CEST	49724	443	192.168.2.5	23.63.206.91
Apr 19, 2024 10:26:18.384699106 CEST	443	49724	23.63.206.91	192.168.2.5
Apr 19, 2024 10:26:18.384736061 CEST	49724	443	192.168.2.5	23.63.206.91
Apr 19, 2024 10:26:18.384747028 CEST	443	49724	23.63.206.91	192.168.2.5
Apr 19, 2024 10:26:18.394023895 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.394049883 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.394068956 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.394166946 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.394166946 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.394218922 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.394507885 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.395623922 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.395643950 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.395823956 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.395838976 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.445241928 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.464695930 CEST	49728	443	192.168.2.5	23.63.206.91
Apr 19, 2024 10:26:18.464765072 CEST	443	49728	23.63.206.91	192.168.2.5
Apr 19, 2024 10:26:18.464951992 CEST	49728	443	192.168.2.5	23.63.206.91
Apr 19, 2024 10:26:18.468823910 CEST	49728	443	192.168.2.5	23.63.206.91
Apr 19, 2024 10:26:18.468854904 CEST	443	49728	23.63.206.91	192.168.2.5
Apr 19, 2024 10:26:18.591365099 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.592005968 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.592940092 CEST	49725	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.592956066 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.593287945 CEST	49726	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.593302011 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.594182968 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.594491959 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.595340967 CEST	49725	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.595341921 CEST	49726	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.595542908 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.595551968 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.595813036 CEST	49725	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.595815897 CEST	49726	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.629661083 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.629764080 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.629785061 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.629822969 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.629857063 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.629883051 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.629883051 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.629897118 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.629928112 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.630450964 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.631242037 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.631283998 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.631395102 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.631395102 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.631402969 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.631421089 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.631721020 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.633183956 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.633210897 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.633255959 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.633301020 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.633388042 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.633394003 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.633414030 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.633470058 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.633470058 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.633477926 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.633533955 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.633570910 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.633580923 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.633610010 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.633671045 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.634280920 CEST	49729	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.634299994 CEST	443	49729	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.634407043 CEST	49721	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.634422064 CEST	443	49721	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.634533882 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.634576082 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.634577036 CEST	49729	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.634613037 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.634619951 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.634645939 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.634720087 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.634726048 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.634749889 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.634807110 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.634807110 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.634816885 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.634926081 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.636125088 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.636138916 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.636159897 CEST	49729	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.636174917 CEST	443	49729	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.636203051 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.646162987 CEST	49720	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.646182060 CEST	443	49720	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.646769047 CEST	49730	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.646785975 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.648857117 CEST	49730	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.650413036 CEST	49730	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.650425911 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.681926012 CEST	443	49728	23.63.206.91	192.168.2.5
Apr 19, 2024 10:26:18.682832003 CEST	49728	443	192.168.2.5	23.63.206.91
Apr 19, 2024 10:26:18.683772087 CEST	49728	443	192.168.2.5	23.63.206.91
Apr 19, 2024 10:26:18.683794975 CEST	443	49728	23.63.206.91	192.168.2.5
Apr 19, 2024 10:26:18.684182882 CEST	443	49728	23.63.206.91	192.168.2.5
Apr 19, 2024 10:26:18.686187983 CEST	49728	443	192.168.2.5	23.63.206.91
Apr 19, 2024 10:26:18.732136011 CEST	443	49728	23.63.206.91	192.168.2.5
Apr 19, 2024 10:26:18.800365925 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 19, 2024 10:26:18.800677061 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 19, 2024 10:26:18.803287029 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.803352118 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.803374052 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.803395987 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.803425074 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.803438902 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.803462029 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.803473949 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.803489923 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.803492069 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.803519011 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.803523064 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.803550005 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.803987026 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.804043055 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.804078102 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.804091930 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.804119110 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.852883101 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.860467911 CEST	443	49727	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.861048937 CEST	49727	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.861108065 CEST	443	49727	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.861614943 CEST	443	49727	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.862834930 CEST	49727	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.862834930 CEST	49727	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:18.862953901 CEST	443	49727	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.863033056 CEST	443	49727	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:18.885445118 CEST	443	49728	23.63.206.91	192.168.2.5
Apr 19, 2024 10:26:18.885612011 CEST	443	49728	23.63.206.91	192.168.2.5
Apr 19, 2024 10:26:18.885719061 CEST	49728	443	192.168.2.5	23.63.206.91
Apr 19, 2024 10:26:18.886852980 CEST	49728	443	192.168.2.5	23.63.206.91
Apr 19, 2024 10:26:18.886885881 CEST	443	49728	23.63.206.91	192.168.2.5
Apr 19, 2024 10:26:18.886931896 CEST	49728	443	192.168.2.5	23.63.206.91
Apr 19, 2024 10:26:18.886951923 CEST	443	49728	23.63.206.91	192.168.2.5
Apr 19, 2024 10:26:18.913683891 CEST	49727	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.039639950 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.039671898 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.039733887 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.039741993 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.039772987 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.039808035 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.039838076 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.039859056 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.040003061 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.040050983 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.040069103 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.040091038 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.040146112 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.040146112 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.040168047 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.040231943 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.040245056 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.040302992 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.040352106 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.040410995 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.059284925 CEST	49723	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.059320927 CEST	443	49723	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.062381983 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.062443018 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.062489033 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.062511921 CEST	49726	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.062536001 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.062575102 CEST	49726	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.062618971 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.062665939 CEST	49726	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.079030991 CEST	49726	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.079039097 CEST	443	49726	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.080761909 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.080821037 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.080883026 CEST	49725	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.080898046 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.080971003 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.081017971 CEST	49725	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.087693930 CEST	49725	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.087704897 CEST	443	49725	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.128914118 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.129328012 CEST	49730	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.129348040 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.130496025 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.131925106 CEST	49730	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.132154942 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.132339001 CEST	443	49729	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.162226915 CEST	49729	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.162240982 CEST	443	49729	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.162591934 CEST	49730	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.163548946 CEST	443	49729	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.164283037 CEST	49729	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.164407015 CEST	49729	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.164416075 CEST	443	49729	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.164472103 CEST	443	49729	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.208125114 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.213500023 CEST	49729	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.343360901 CEST	443	49727	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.343399048 CEST	443	49727	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.343439102 CEST	443	49727	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.343476057 CEST	49727	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.343496084 CEST	443	49727	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.343513012 CEST	49727	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.343594074 CEST	443	49727	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.343642950 CEST	49727	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.344420910 CEST	49727	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.344435930 CEST	443	49727	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.600203991 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.600261927 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.600312948 CEST	49730	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.600330114 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.600353956 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.600414991 CEST	49730	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.601402044 CEST	49730	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.601412058 CEST	443	49730	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.621980906 CEST	443	49729	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.622163057 CEST	443	49729	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:19.622220993 CEST	49729	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.624258995 CEST	49729	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:19.624272108 CEST	443	49729	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:20.012176991 CEST	49731	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:20.012254953 CEST	443	49731	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:20.012362003 CEST	49731	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:20.012769938 CEST	49731	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:20.012809992 CEST	443	49731	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:20.498461962 CEST	443	49731	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:20.502756119 CEST	49731	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:20.502813101 CEST	443	49731	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:20.503339052 CEST	443	49731	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:20.504481077 CEST	49731	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:20.504579067 CEST	443	49731	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:20.505081892 CEST	49731	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:20.548146963 CEST	443	49731	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:20.981158018 CEST	443	49731	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:20.981250048 CEST	443	49731	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:20.981439114 CEST	49731	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:20.982115030 CEST	49731	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:20.982175112 CEST	443	49731	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:21.357167959 CEST	49733	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:21.357215881 CEST	443	49733	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:21.357301950 CEST	49733	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:21.357697964 CEST	49733	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:21.357711077 CEST	443	49733	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:21.841239929 CEST	443	49733	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:21.857434034 CEST	49733	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:21.857450008 CEST	443	49733	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:21.858957052 CEST	443	49733	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:21.859023094 CEST	49733	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:21.859877110 CEST	49733	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:21.860040903 CEST	49733	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:21.860049009 CEST	443	49733	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:21.860327959 CEST	443	49733	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:21.912740946 CEST	49733	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:21.912749052 CEST	443	49733	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:21.959665060 CEST	49733	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:22.319828033 CEST	443	49733	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:22.319978952 CEST	443	49733	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:22.320142984 CEST	49733	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:22.322249889 CEST	49733	443	192.168.2.5	91.202.233.192
Apr 19, 2024 10:26:22.322278023 CEST	443	49733	91.202.233.192	192.168.2.5
Apr 19, 2024 10:26:27.255321026 CEST	443	49719	74.125.136.106	192.168.2.5
Apr 19, 2024 10:26:27.255389929 CEST	443	49719	74.125.136.106	192.168.2.5
Apr 19, 2024 10:26:27.255443096 CEST	49719	443	192.168.2.5	74.125.136.106
Apr 19, 2024 10:26:27.432266951 CEST	49719	443	192.168.2.5	74.125.136.106
Apr 19, 2024 10:26:27.432311058 CEST	443	49719	74.125.136.106	192.168.2.5
Apr 19, 2024 10:26:29.207906961 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 19, 2024 10:26:29.208410025 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 19, 2024 10:26:29.212178946 CEST	49738	443	192.168.2.5	23.1.237.91
Apr 19, 2024 10:26:29.212240934 CEST	443	49738	23.1.237.91	192.168.2.5
Apr 19, 2024 10:26:29.212343931 CEST	49738	443	192.168.2.5	23.1.237.91
Apr 19, 2024 10:26:29.213089943 CEST	49738	443	192.168.2.5	23.1.237.91
Apr 19, 2024 10:26:29.213108063 CEST	443	49738	23.1.237.91	192.168.2.5
Apr 19, 2024 10:26:29.584453106 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 19, 2024 10:26:29.734505892 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 19, 2024 10:26:30.535221100 CEST	443	49738	23.1.237.91	192.168.2.5
Apr 19, 2024 10:26:30.535334110 CEST	49738	443	192.168.2.5	23.1.237.91
Apr 19, 2024 10:26:49.672641993 CEST	443	49738	23.1.237.91	192.168.2.5
Apr 19, 2024 10:26:49.672727108 CEST	49738	443	192.168.2.5	23.1.237.91
Apr 19, 2024 10:27:17.170257092 CEST	49743	443	192.168.2.5	74.125.136.106
Apr 19, 2024 10:27:17.170341015 CEST	443	49743	74.125.136.106	192.168.2.5
Apr 19, 2024 10:27:17.170422077 CEST	49743	443	192.168.2.5	74.125.136.106
Apr 19, 2024 10:27:17.170717001 CEST	49743	443	192.168.2.5	74.125.136.106
Apr 19, 2024 10:27:17.170759916 CEST	443	49743	74.125.136.106	192.168.2.5
Apr 19, 2024 10:27:17.385531902 CEST	443	49743	74.125.136.106	192.168.2.5
Apr 19, 2024 10:27:17.385889053 CEST	49743	443	192.168.2.5	74.125.136.106
Apr 19, 2024 10:27:17.385916948 CEST	443	49743	74.125.136.106	192.168.2.5
Apr 19, 2024 10:27:17.387022972 CEST	443	49743	74.125.136.106	192.168.2.5
Apr 19, 2024 10:27:17.387531042 CEST	49743	443	192.168.2.5	74.125.136.106
Apr 19, 2024 10:27:17.387645960 CEST	443	49743	74.125.136.106	192.168.2.5
Apr 19, 2024 10:27:17.429163933 CEST	49743	443	192.168.2.5	74.125.136.106
Apr 19, 2024 10:27:27.407879114 CEST	443	49743	74.125.136.106	192.168.2.5
Apr 19, 2024 10:27:27.407955885 CEST	443	49743	74.125.136.106	192.168.2.5
Apr 19, 2024 10:27:27.408015966 CEST	49743	443	192.168.2.5	74.125.136.106
Apr 19, 2024 10:27:27.580092907 CEST	49743	443	192.168.2.5	74.125.136.106
Apr 19, 2024 10:27:27.580137014 CEST	443	49743	74.125.136.106	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 19, 2024 10:26:12.954395056 CEST	53	51904	1.1.1.1	192.168.2.5
Apr 19, 2024 10:26:13.188086987 CEST	53	56020	1.1.1.1	192.168.2.5
Apr 19, 2024 10:26:13.790733099 CEST	53	60201	1.1.1.1	192.168.2.5
Apr 19, 2024 10:26:14.958699942 CEST	54622	53	192.168.2.5	1.1.1.1
Apr 19, 2024 10:26:14.958808899 CEST	60445	53	192.168.2.5	1.1.1.1
Apr 19, 2024 10:26:15.063210964 CEST	53	54622	1.1.1.1	192.168.2.5
Apr 19, 2024 10:26:15.064815998 CEST	53	60445	1.1.1.1	192.168.2.5
Apr 19, 2024 10:26:16.841960907 CEST	53786	53	192.168.2.5	1.1.1.1
Apr 19, 2024 10:26:16.842673063 CEST	53244	53	192.168.2.5	1.1.1.1
Apr 19, 2024 10:26:16.944571018 CEST	53	53786	1.1.1.1	192.168.2.5
Apr 19, 2024 10:26:16.945713997 CEST	53	53244	1.1.1.1	192.168.2.5
Apr 19, 2024 10:26:20.114867926 CEST	53	55771	1.1.1.1	192.168.2.5
Apr 19, 2024 10:26:21.250788927 CEST	55995	53	192.168.2.5	1.1.1.1
Apr 19, 2024 10:26:21.251197100 CEST	50195	53	192.168.2.5	1.1.1.1
Apr 19, 2024 10:26:21.356499910 CEST	53	50195	1.1.1.1	192.168.2.5
Apr 19, 2024 10:26:21.356559992 CEST	53	55995	1.1.1.1	192.168.2.5
Apr 19, 2024 10:26:31.016815901 CEST	53	64782	1.1.1.1	192.168.2.5
Apr 19, 2024 10:26:50.088010073 CEST	53	57520	1.1.1.1	192.168.2.5
Apr 19, 2024 10:27:12.363137007 CEST	53	64478	1.1.1.1	192.168.2.5
Apr 19, 2024 10:27:13.110409021 CEST	53	59733	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 19, 2024 10:26:14.958699942 CEST	192.168.2.5	1.1.1.1	0xa983	Standard query (0)	newexra.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 10:26:14.958808899 CEST	192.168.2.5	1.1.1.1	0x5905	Standard query (0)	newexra.com	65	IN (0x0001)	false
Apr 19, 2024 10:26:16.841960907 CEST	192.168.2.5	1.1.1.1	0xd14d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 10:26:16.842673063 CEST	192.168.2.5	1.1.1.1	0xa6ee	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 19, 2024 10:26:21.250788927 CEST	192.168.2.5	1.1.1.1	0x7000	Standard query (0)	newexra.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 10:26:21.251197100 CEST	192.168.2.5	1.1.1.1	0xda92	Standard query (0)	newexra.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 19, 2024 10:26:15.063210964 CEST	1.1.1.1	192.168.2.5	0xa983	No error (0)	newexra.com		91.202.233.192	A (IP address)	IN (0x0001)	false
Apr 19, 2024 10:26:16.944571018 CEST	1.1.1.1	192.168.2.5	0xd14d	No error (0)	www.google.com		74.125.136.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 10:26:16.944571018 CEST	1.1.1.1	192.168.2.5	0xd14d	No error (0)	www.google.com		74.125.136.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 10:26:16.944571018 CEST	1.1.1.1	192.168.2.5	0xd14d	No error (0)	www.google.com		74.125.136.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 10:26:16.944571018 CEST	1.1.1.1	192.168.2.5	0xd14d	No error (0)	www.google.com		74.125.136.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 10:26:16.944571018 CEST	1.1.1.1	192.168.2.5	0xd14d	No error (0)	www.google.com		74.125.136.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 10:26:16.944571018 CEST	1.1.1.1	192.168.2.5	0xd14d	No error (0)	www.google.com		74.125.136.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 10:26:16.945713997 CEST	1.1.1.1	192.168.2.5	0xa6ee	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 19, 2024 10:26:21.356559992 CEST	1.1.1.1	192.168.2.5	0x7000	No error (0)	newexra.com		91.202.233.192	A (IP address)	IN (0x0001)	false
Apr 19, 2024 10:26:28.712143898 CEST	1.1.1.1	192.168.2.5	0x9c12	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 10:26:28.712143898 CEST	1.1.1.1	192.168.2.5	0x9c12	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 10:26:28.803688049 CEST	1.1.1.1	192.168.2.5	0x5afb	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 10:26:28.803688049 CEST	1.1.1.1	192.168.2.5	0x5afb	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 10:26:42.223269939 CEST	1.1.1.1	192.168.2.5	0x15a8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 10:26:42.223269939 CEST	1.1.1.1	192.168.2.5	0x15a8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 10:27:05.172893047 CEST	1.1.1.1	192.168.2.5	0xaf5e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 10:27:05.172893047 CEST	1.1.1.1	192.168.2.5	0xaf5e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 10:27:25.080495119 CEST	1.1.1.1	192.168.2.5	0x1c3c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 10:27:25.080495119 CEST	1.1.1.1	192.168.2.5	0x1c3c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

newexra.com

https:

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	91.202.233.192	443	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 08:26:15 UTC	752	OUT	GET /lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 08:26:16 UTC	645	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 19 Apr 2024 08:26:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.3.6 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; path=/; HttpOnly Set-Cookie: csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B; path=/; HttpOnly; SameSite=Lax Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000
2024-04-19 08:26:16 UTC	6626	IN	Data Raw: 31 39 64 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 2d 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 63 73 72 66 5f 74 6f 6b 65 6e 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 2d 76 61 6c 75 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 32 46 4c 54 30 64 6f 59 30 68 51 58 7a 68 53 63 7a 6c 32 62 6c 64 49 51 6c 52 33 56 32 4a 77 54 47 6c 61 4e 33 52 70 57 45 66 50 55 6f 34 77 55 47 77 4b 4c 79 67 45 73 6e 4c 74 62 59 76 59 76 77 4e 65 6c 30 37 55 72 31 47 39 30 33 37 42 64 59 5a 74 6c 67 Data Ascii: 19d5<!DOCTYPE html><html dir="ltr"><head> <meta charset="utf-8"> <meta name="csrf-token-name" content="csrf_token" /><meta name="csrf-token-value" content="M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49710	91.202.233.192	443	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 08:26:16 UTC	870	OUT	GET /assets/css/bootstrap.min.css?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
2024-04-19 08:26:16 UTC	281	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 19 Apr 2024 08:26:16 GMT Content-Type: text/css Content-Length: 99961 Last-Modified: Mon, 08 Apr 2024 17:12:12 GMT Connection: close ETag: "6614256c-18679" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-19 08:26:16 UTC	16103	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 31 2e 31 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 34 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 0a 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 30 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 Data Ascii: /! Bootstrap v3.1.1 (http://getbootstrap.com) * Copyright 2011-2014 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.0 \| MIT License \| git.io/normalize */html{font-family:sans-ser
2024-04-19 08:26:16 UTC	16384	IN	Data Raw: 66 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6c 67 2d 70 75 73 68 2d 31 7b 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6c 67 2d 70 75 73 68 2d 30 7b 6c 65 66 74 3a 30 7d 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 31 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 63 6f 6c 2d 6c 67 2d 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 Data Ascii: ft:16.66666667%}.col-lg-push-1{left:8.33333333%}.col-lg-push-0{left:0}.col-lg-offset-12{margin-left:100%}.col-lg-offset-11{margin-left:91.66666667%}.col-lg-offset-10{margin-left:83.33333333%}.col-lg-offset-9{margin-left:75%}.col-lg-offset-8{margin-left:66
2024-04-19 08:26:16 UTC	16384	IN	Data Raw: 64 61 7d 2e 62 74 6e 2d 69 6e 66 6f 3a 68 6f 76 65 72 2c 2e 62 74 6e 2d 69 6e 66 6f 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 69 6e 66 6f 3a 61 63 74 69 76 65 2c 2e 62 74 6e 2d 69 6e 66 6f 2e 61 63 74 69 76 65 2c 2e 6f 70 65 6e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 69 6e 66 6f 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 39 62 33 64 37 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 36 39 61 62 63 7d 2e 62 74 6e 2d 69 6e 66 6f 3a 61 63 74 69 76 65 2c 2e 62 74 6e 2d 69 6e 66 6f 2e 61 63 74 69 76 65 2c 2e 6f 70 65 6e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 69 6e 66 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 62 74 6e 2d 69 6e 66 6f Data Ascii: da}.btn-info:hover,.btn-info:focus,.btn-info:active,.btn-info.active,.open .dropdown-toggle.btn-info{color:#fff;background-color:#39b3d7;border-color:#269abc}.btn-info:active,.btn-info.active,.open .dropdown-toggle.btn-info{background-image:none}.btn-info
2024-04-19 08:26:16 UTC	16384	IN	Data Raw: 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 7d 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 3e 2e 62 74 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 2e 62 74 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 Data Ascii: bottom-left-radius:0;border-top-left-radius:0}.btn-group>.btn-group{float:left}.btn-group>.btn-group:not(:first-child):not(:last-child)>.btn{border-radius:0}.btn-group>.btn-group:first-child>.btn:last-child,.btn-group>.btn-group:first-child>.dropdown-togg
2024-04-19 08:26:16 UTC	16384	IN	Data Raw: 72 2d 6e 61 76 3e 2e 64 69 73 61 62 6c 65 64 3e 61 3a 68 6f 76 65 72 2c 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 6e 61 76 3e 2e 64 69 73 61 62 6c 65 64 3e 61 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 34 34 34 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 3a 68 6f 76 65 72 2c 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 33 33 7d Data Ascii: r-nav>.disabled>a:hover,.navbar-inverse .navbar-nav>.disabled>a:focus{color:#444;background-color:transparent}.navbar-inverse .navbar-toggle{border-color:#333}.navbar-inverse .navbar-toggle:hover,.navbar-inverse .navbar-toggle:focus{background-color:#333}
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 68 69 6c 64 20 74 68 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 2e 74 61 62 6c 65 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 74 62 6f 64 79 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 74 68 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 Data Ascii: hild th:last-child,.panel>.table-responsive:first-child>.table:first-child>tbody:first-child>tr:first-child th:last-child{border-top-right-radius:3px}.panel>.table:last-child,.panel>.table-responsive:last-child>.table:last-child{border-bottom-right-radius
2024-04-19 08:26:17 UTC	1938	IN	Data Raw: 72 3a 61 66 74 65 72 2c 2e 70 61 6e 65 6c 2d 62 6f 64 79 3a 61 66 74 65 72 2c 2e 6d 6f 64 61 6c 2d 66 6f 6f 74 65 72 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 63 65 6e 74 65 72 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 2e 70 75 6c 6c 2d 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 75 6c 6c 2d 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 68 6f 77 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 6e 76 69 73 69 62 6c 65 Data Ascii: r:after,.panel-body:after,.modal-footer:after{clear:both}.center-block{display:block;margin-left:auto;margin-right:auto}.pull-right{float:right!important}.pull-left{float:left!important}.hide{display:none!important}.show{display:block!important}.invisible

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	91.202.233.192	443	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 08:26:16 UTC	890	OUT	GET /assets/css/font-awesome/css/font-awesome.min.css?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
2024-04-19 08:26:17 UTC	280	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 19 Apr 2024 08:26:16 GMT Content-Type: text/css Content-Length: 27466 Last-Modified: Mon, 08 Apr 2024 17:12:12 GMT Connection: close ETag: "6614256c-6b4a" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-19 08:26:17 UTC	16104	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 35 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 35 2e 30 27 29 3b 73 Data Ascii: /! Font Awesome 4.5.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.5.0');s
2024-04-19 08:26:17 UTC	11362	IN	Data Raw: 79 6f 75 74 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 37 22 7d 2e 66 61 2d 78 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 38 22 7d 2e 66 61 2d 78 69 6e 67 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 39 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 61 22 7d 2e 66 61 2d 64 72 6f 70 62 6f 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 62 22 7d 2e 66 61 2d 73 74 61 63 6b 2d 6f 76 65 72 66 6c 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 63 22 7d 2e 66 61 2d 69 6e 73 74 61 67 72 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 64 22 Data Ascii: youtube:before{content:"\f167"}.fa-xing:before{content:"\f168"}.fa-xing-square:before{content:"\f169"}.fa-youtube-play:before{content:"\f16a"}.fa-dropbox:before{content:"\f16b"}.fa-stack-overflow:before{content:"\f16c"}.fa-instagram:before{content:"\f16d"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49714	91.202.233.192	443	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 08:26:16 UTC	882	OUT	GET /assets/css/ionicons/css/ionicons.min.css?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
2024-04-19 08:26:17 UTC	280	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 19 Apr 2024 08:26:16 GMT Content-Type: text/css Content-Length: 51284 Last-Modified: Mon, 08 Apr 2024 17:12:12 GMT Connection: close ETag: "6614256c-c854" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-19 08:26:17 UTC	16104	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 20 49 6f 6e 69 63 6f 6e 73 2c 20 76 32 2e 30 2e 30 0a 20 20 43 72 65 61 74 65 64 20 62 79 20 42 65 6e 20 53 70 65 72 72 79 20 66 6f 72 20 74 68 65 20 49 6f 6e 69 63 20 46 72 61 6d 65 77 6f 72 6b 2c 20 68 74 74 70 3a 2f 2f 69 6f 6e 69 63 6f 6e 73 2e 63 6f 6d 2f 0a 20 20 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 62 65 6e 6a 73 70 65 72 72 79 20 20 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 69 6f 6e 69 63 66 72 61 6d 65 77 6f 72 6b 0a 20 20 4d 49 54 20 4c 69 63 65 6e 73 65 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 64 72 69 66 74 79 63 6f 2f 69 6f 6e 69 63 6f 6e 73 0a 0a 20 20 41 6e 64 72 6f 69 64 2d 73 74 79 6c 65 20 69 63 6f 6e 73 20 6f Data Ascii: @charset "UTF-8";/*! Ionicons, v2.0.0 Created by Ben Sperry for the Ionic Framework, http://ionicons.com/ https://twitter.com/benjsperry https://twitter.com/ionicframework MIT License: https://github.com/driftyco/ionicons Android-style icons o
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 72 65 2c 2e 69 6f 6e 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 6c 61 6e 65 74 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 6c 61 79 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 6c 61 79 73 74 61 74 69 6f 6e 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 6c 75 73 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 6c 75 73 2d 63 69 72 63 6c 65 64 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 6c 75 73 2d 72 6f 75 6e 64 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 6f 64 69 75 6d 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 6f 75 6e 64 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 6f 77 65 72 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 72 69 63 65 74 61 67 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 72 69 63 65 74 61 67 73 3a 62 65 66 6f 72 65 2c 2e 69 6f 6e 2d 70 72 69 6e 74 65 Data Ascii: re,.ion-plane:before,.ion-planet:before,.ion-play:before,.ion-playstation:before,.ion-plus:before,.ion-plus-circled:before,.ion-plus-round:before,.ion-podium:before,.ion-pound:before,.ion-power:before,.ion-pricetag:before,.ion-pricetags:before,.ion-printe
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 65 6e 74 3a 22 5c 66 33 65 37 22 7d 2e 69 6f 6e 2d 69 6f 73 2d 62 6f 6f 6b 6d 61 72 6b 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 65 61 22 7d 2e 69 6f 6e 2d 69 6f 73 2d 62 6f 6f 6b 6d 61 72 6b 73 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 65 39 22 7d 2e 69 6f 6e 2d 69 6f 73 2d 62 6f 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 65 63 22 7d 2e 69 6f 6e 2d 69 6f 73 2d 62 6f 78 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 65 62 22 7d 2e 69 6f 6e 2d 69 6f 73 2d 62 72 69 65 66 63 61 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 65 65 22 7d 2e 69 6f 6e 2d 69 6f 73 2d 62 72 69 65 66 63 61 73 65 2d 6f 75 74 6c 69 6e 65 3a 62 65 Data Ascii: ent:"\f3e7"}.ion-ios-bookmarks:before{content:"\f3ea"}.ion-ios-bookmarks-outline:before{content:"\f3e9"}.ion-ios-box:before{content:"\f3ec"}.ion-ios-box-outline:before{content:"\f3eb"}.ion-ios-briefcase:before{content:"\f3ee"}.ion-ios-briefcase-outline:be
2024-04-19 08:26:17 UTC	2412	IN	Data Raw: 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 34 31 22 7d 2e 69 6f 6e 2d 73 6f 63 69 61 6c 2d 74 75 6d 62 6c 72 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 34 30 22 7d 2e 69 6f 6e 2d 73 6f 63 69 61 6c 2d 74 75 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 35 22 7d 2e 69 6f 6e 2d 73 6f 63 69 61 6c 2d 74 77 69 74 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 65 65 22 7d 2e 69 6f 6e 2d 73 6f 63 69 61 6c 2d 74 77 69 74 63 68 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 65 64 22 7d 2e 69 6f 6e 2d 73 6f 63 69 61 6c 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 34 33 22 7d 2e 69 6f 6e 2d 73 6f 63 Data Ascii: before{content:"\f241"}.ion-social-tumblr-outline:before{content:"\f240"}.ion-social-tux:before{content:"\f2c5"}.ion-social-twitch:before{content:"\f4ee"}.ion-social-twitch-outline:before{content:"\f4ed"}.ion-social-twitter:before{content:"\f243"}.ion-soc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49716	91.202.233.192	443	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 08:26:16 UTC	865	OUT	GET /assets/css/adminlte.css?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
2024-04-19 08:26:17 UTC	282	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 19 Apr 2024 08:26:16 GMT Content-Type: text/css Content-Length: 230596 Last-Modified: Mon, 08 Apr 2024 17:12:12 GMT Connection: close ETag: "6614256c-384c4" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-19 08:26:17 UTC	16102	IN	Data Raw: 0a 2f 2a 21 0a 20 2a 20 20 20 41 64 6d 69 6e 4c 54 45 20 76 32 2e 33 2e 36 0a 20 2a 20 20 20 41 75 74 68 6f 72 3a 20 41 6c 6d 73 61 65 65 64 20 53 74 75 64 69 6f 0a 20 2a 20 20 20 57 65 62 73 69 74 65 3a 20 41 6c 6d 73 61 65 65 64 20 53 74 75 64 69 6f 20 3c 68 74 74 70 3a 2f 2f 61 6c 6d 73 61 65 65 64 73 74 75 64 69 6f 2e 63 6f 6d 3e 0a 20 2a 20 20 20 4c 69 63 65 6e 73 65 3a 20 4f 70 65 6e 20 73 6f 75 72 63 65 20 2d 20 4d 49 54 0a 20 2a 20 20 20 20 20 20 20 20 20 20 20 50 6c 65 61 73 65 20 76 69 73 69 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 0a 21 2a 2f 0a 2f 2a 0a 20 2a 20 43 6f 72 65 3a 20 47 65 6e 65 72 61 6c 20 4c 61 79 6f Data Ascii: /! AdminLTE v2.3.6 * Author: Almsaeed Studio * Website: Almsaeed Studio <http://almsaeedstudio.com> * License: Open source - MIT * Please visit http://opensource.org/licenses/MIT for more information!// * Core: General Layo
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 6e 75 20 6c 69 20 3e 20 61 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 73 69 64 65 62 61 72 2d 6d 65 6e 75 20 6c 69 20 3e 20 61 20 3e 20 2e 70 75 6c 6c 2d 72 69 67 68 74 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 72 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 37 70 78 3b 0a 7d 0a 2f 2a 0a 20 2a 20 43 6f 6d 70 6f 6e 65 6e 74 3a 20 43 6f 6e 74 72 6f 6c 20 73 69 64 65 62 61 72 2e 20 42 79 20 64 65 66 61 75 6c 74 2c 20 74 68 69 73 20 69 73 20 74 68 65 20 72 69 67 68 74 20 73 69 64 65 62 61 72 2e 0a 20 2a 2f 0a 2e 63 6f 6e 74 72 6f 6c 2d 73 69 64 65 62 61 72 2d 62 67 20 7b 0a 20 20 Data Ascii: nu li > a { position: relative;}.sidebar-menu li > a > .pull-right-container { position: absolute; right: 10px; top: 50%; margin-top: -7px;}/* * Component: Control sidebar. By default, this is the right sidebar. */.control-sidebar-bg {
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 0a 2e 66 6f 72 6d 2d 67 72 6f 75 70 2e 68 61 73 2d 77 61 72 6e 69 6e 67 20 2e 68 65 6c 70 2d 62 6c 6f 63 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 33 39 63 31 32 3b 0a 7d 0a 2e 66 6f 72 6d 2d 67 72 6f 75 70 2e 68 61 73 2d 65 72 72 6f 72 20 6c 61 62 65 6c 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 65 65 33 35 32 34 3b 0a 7d 0a 2e 66 6f 72 6d 2d 67 72 6f 75 70 2e 68 61 73 2d 65 72 72 6f 72 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2c 0a 2e 66 6f 72 6d 2d 67 72 6f 75 70 2e 68 61 73 2d 65 72 72 6f 72 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 65 65 33 35 32 34 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 66 6f 72 6d 2d 67 72 6f 75 70 2e 68 61 73 2d 65 72 72 Data Ascii: .form-group.has-warning .help-block { color: #f39c12;}.form-group.has-error label { color: #ee3524;}.form-group.has-error .form-control,.form-group.has-error .input-group-addon { border-color: #ee3524; box-shadow: none;}.form-group.has-err
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 0a 2e 63 68 61 74 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 32 30 70 78 20 35 70 78 20 31 30 70 78 3b 0a 7d 0a 2e 63 68 61 74 20 2e 69 74 65 6d 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 7d 0a 2e 63 68 61 74 20 2e 69 74 65 6d 3a 62 65 66 6f 72 65 2c 0a 2e 63 68 61 74 20 2e 69 74 65 6d 3a 61 66 74 65 72 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 7d 0a 2e 63 68 61 74 20 2e 69 74 65 6d 3a 61 66 74 65 72 20 7b 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 2e 63 68 61 74 20 2e 69 74 65 6d 20 3e 20 69 6d 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 34 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 34 30 70 78 3b 0a 20 20 62 6f 72 64 65 72 3a 20 32 Data Ascii: .chat { padding: 5px 20px 5px 10px;}.chat .item { margin-bottom: 10px;}.chat .item:before,.chat .item:after { content: " "; display: table;}.chat .item:after { clear: both;}.chat .item > img { width: 40px; height: 40px; border: 2
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2f 2a 0a 20 2a 20 43 6f 6d 70 6f 6e 65 6e 74 3a 20 4c 61 62 65 6c 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 2f 0a 6c 61 62 65 6c 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 2e 6c 61 62 65 6c 2d 64 65 66 61 75 6c 74 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 32 64 36 64 65 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 0a 7d 0a 2f 2a 0a 20 2a 20 43 6f 6d 70 6f 6e 65 6e 74 3a 20 44 69 72 65 63 74 20 43 68 61 74 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 2f 0a 2e 64 69 72 65 63 74 2d 63 68 61 74 20 2e 62 6f 78 2d 62 6f 64 79 20 7b 0a 20 20 62 6f 72 64 65 72 Data Ascii: ext-align: right;}/* * Component: Label * ---------------- /label { font-weight: normal;}.label-default { background-color: #d2d6de; color: #444;}/ * Component: Direct Chat * ---------------------- */.direct-chat .box-body { border
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 75 63 6b 65 74 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 31 36 33 37 35 38 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 0a 7d 0a 2e 62 74 6e 2d 62 69 74 62 75 63 6b 65 74 3a 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 0a 2e 62 74 6e 2d 62 69 74 62 75 63 6b 65 74 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 0a 2e 6f 70 65 6e 20 3e 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 62 69 74 62 75 63 6b 65 74 3a 68 6f 76 65 72 2c 0a 2e 62 74 6e 2d 62 69 74 62 75 63 6b 65 74 3a 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 0a 2e 62 74 6e 2d 62 69 74 62 75 63 6b 65 74 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 0a 2e 6f 70 Data Ascii: ucket { color: #fff; background-color: #163758; border-color: rgba(0, 0, 0, 0.2);}.btn-bitbucket:active:hover,.btn-bitbucket.active:hover,.open > .dropdown-toggle.btn-bitbucket:hover,.btn-bitbucket:active:focus,.btn-bitbucket.active:focus,.op
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 74 6e 2d 6d 69 63 72 6f 73 6f 66 74 2e 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 2c 0a 2e 62 74 6e 2d 6d 69 63 72 6f 73 6f 66 74 5b 64 69 73 61 62 6c 65 64 5d 3a 61 63 74 69 76 65 2c 0a 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 6d 69 63 72 6f 73 6f 66 74 3a 61 63 74 69 76 65 2c 0a 2e 62 74 6e 2d 6d 69 63 72 6f 73 6f 66 74 2e 64 69 73 61 62 6c 65 64 2e 61 63 74 69 76 65 2c 0a 2e 62 74 6e 2d 6d 69 63 72 6f 73 6f 66 74 5b 64 69 73 61 62 6c 65 64 5d 2e 61 63 74 69 76 65 2c 0a 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 6d 69 63 72 6f 73 6f 66 74 2e 61 63 74 69 76 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 36 37 32 65 63 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f Data Ascii: tn-microsoft.disabled:active,.btn-microsoft[disabled]:active,fieldset[disabled] .btn-microsoft:active,.btn-microsoft.disabled.active,.btn-microsoft[disabled].active,fieldset[disabled] .btn-microsoft.active { background-color: #2672ec; border-colo
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 20 6c 69 6e 65 61 72 20 30 2e 33 73 3b 0a 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 20 6c 69 6e 65 61 72 20 30 2e 33 73 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 6c 69 6e 65 61 72 20 30 2e 33 73 3b 0a 7d 0a 2e 66 63 2d 63 6f 6c 6f 72 2d 70 69 63 6b 65 72 20 3e 20 6c 69 20 2e 66 61 3a 68 6f 76 65 72 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 30 64 65 67 29 3b 0a 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 30 64 65 67 29 3b 0a 20 20 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 30 64 65 67 29 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 Data Ascii: ransform linear 0.3s; -o-transition: -o-transform linear 0.3s; transition: transform linear 0.3s;}.fc-color-picker > li .fa:hover { -webkit-transform: rotate(30deg); -ms-transform: rotate(30deg); -o-transform: rotate(30deg); transform: rotat
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 74 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 69 6d 67 2d 73 6d 2c 0a 2e 62 6f 78 2d 63 6f 6d 6d 65 6e 74 73 20 2e 62 6f 78 2d 63 6f 6d 6d 65 6e 74 20 69 6d 67 2c 0a 2e 75 73 65 72 2d 62 6c 6f 63 6b 2e 75 73 65 72 2d 62 6c 6f 63 6b 2d 73 6d 20 69 6d 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 69 6d 67 2d 73 6d 20 2b 20 2e 69 6d 67 2d 70 75 73 68 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 30 70 78 3b 0a 7d 0a 2e 69 6d 67 2d 6d 64 20 7b 0a 20 20 77 69 64 74 68 3a 20 36 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0a 7d 0a 2e 69 6d 67 2d 6d 64 20 2b 20 2e 69 6d 67 2d 70 75 73 68 20 7b 0a 20 20 6d 61 72 67 Data Ascii: t: left;}.img-sm,.box-comments .box-comment img,.user-block.user-block-sm img { width: 30px !important; height: 30px !important;}.img-sm + .img-push { margin-left: 40px;}.img-md { width: 60px; height: 60px;}.img-md + .img-push { marg
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 37 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 2e 6d 69 64 64 6c 65 2c 0a 2e 62 6f 78 65 73 2d 6d 77 2d 77 72 61 70 70 65 72 2e 72 6f 77 20 2e 63 6f 6c 2d 73 6d 2d 38 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 2e 6d 69 64 64 6c 65 2c 0a 2e 62 6f 78 65 73 2d 6d 77 2d 77 72 61 70 70 65 72 2e 72 6f 77 20 2e 63 6f 6c 2d 73 6d 2d 39 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 2e 6d 69 64 64 6c 65 2c 0a 2e 62 6f 78 65 73 2d 6d 77 2d 77 72 61 70 70 65 72 2e 72 6f 77 20 2e 63 6f 6c 2d 78 73 2d 31 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 2e 6d 69 64 64 6c 65 2c 0a 2e 62 6f 78 65 73 2d 6d 77 2d 77 72 61 70 70 65 72 2e 72 6f 77 20 2e 63 6f 6c 2d 78 73 2d 31 30 20 2e 73 6d 61 6c 6c 2d 62 Data Ascii: 7 .small-box > .inner .middle,.boxes-mw-wrapper.row .col-sm-8 .small-box > .inner .middle,.boxes-mw-wrapper.row .col-sm-9 .small-box > .inner .middle,.boxes-mw-wrapper.row .col-xs-1 .small-box > .inner .middle,.boxes-mw-wrapper.row .col-xs-10 .small-b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49717	91.202.233.192	443	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 08:26:16 UTC	871	OUT	GET /frontend/assets/css/style.css?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
2024-04-19 08:26:17 UTC	280	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 19 Apr 2024 08:26:16 GMT Content-Type: text/css Content-Length: 16550 Last-Modified: Mon, 08 Apr 2024 17:12:13 GMT Connection: close ETag: "6614256d-40a6" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-19 08:26:17 UTC	16104	IN	Data Raw: 62 6f 64 79 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4f 70 65 6e 20 53 61 6e 73 22 2c 20 56 65 72 64 61 6e 61 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 61 33 61 33 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 7d 0a 2e 63 6f 6e 74 65 6e 74 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 33 30 70 78 20 30 20 30 20 30 3b 0a 7d 0a 68 31 2c 0a 68 32 20 68 33 2c 0a 68 34 2c 0a 68 35 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 41 72 69 61 6c 2c Data Ascii: body { font-family: "Open Sans", Verdana, Arial, Helvetica, sans-serif; color: #3a3a3a; background-color: #FFFFFF;}.content-wrapper { background-color: #FFFFFF; padding: 30px 0 0 0;}h1,h2 h3,h4,h5 { font-family: "Helvetica Neue", Arial,
2024-04-19 08:26:17 UTC	446	IN	Data Raw: 70 3a 20 31 30 70 78 3b 0a 7d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 20 7b 0a 20 20 66 6f 6f 74 65 72 20 75 6c 2e 6c 69 6e 6b 73 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 7d 0a 7d 0a 66 6f 6f 74 65 72 20 75 6c 2e 6c 69 6e 6b 73 20 6c 69 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 34 70 78 3b 0a 7d 0a 66 6f 6f 74 65 72 20 75 6c 2e 6c 69 6e 6b 73 20 6c 69 20 2b 20 6c 69 20 7b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 33 61 33 61 33 61 3b 0a 7d 0a 62 6f 64 79 2e 63 74 72 6c 2d 6c 69 73 74 73 20 66 6f 6f 74 65 72 20 7b 0a 20 20 Data Ascii: p: 10px;}@media only screen and (min-width: 992px) { footer ul.links { padding-top: 5px; }}footer ul.links li { padding: 0 10px; line-height: 14px;}footer ul.links li + li { border-left: 1px solid #3a3a3a;}body.ctrl-lists footer {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49718	91.202.233.192	443	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 08:26:16 UTC	866	OUT	GET /assets/css/skin-blue.css?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
2024-04-19 08:26:17 UTC	282	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 19 Apr 2024 08:26:17 GMT Content-Type: text/css Content-Length: 210643 Last-Modified: Mon, 08 Apr 2024 17:12:12 GMT Connection: close ETag: "6614256c-336d3" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-19 08:26:17 UTC	16102	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 20 20 20 20 2d 2d 6d 7a 2d 62 6c 75 65 3a 20 23 36 33 42 33 45 44 3b 0a 20 20 20 20 2d 2d 6d 7a 2d 69 6e 64 69 67 6f 3a 20 23 35 39 36 43 46 46 3b 0a 20 20 20 20 2d 2d 6d 7a 2d 70 75 72 70 6c 65 3a 20 23 36 66 34 32 63 31 3b 0a 20 20 20 20 2d 2d 6d 7a 2d 70 69 6e 6b 3a 20 23 64 36 33 33 38 34 3b 0a 20 20 20 20 2d 2d 6d 7a 2d 72 65 64 3a 20 23 46 35 36 35 36 35 3b 0a 20 20 20 20 2d 2d 6d 7a 2d 6f 72 61 6e 67 65 3a 20 23 66 64 37 65 31 34 3b 0a 20 20 20 20 2d 2d 6d 7a 2d 79 65 6c 6c 6f 77 3a 20 23 46 42 44 33 38 44 3b 0a 20 20 20 20 2d 2d 6d 7a 2d 67 72 65 65 6e 3a 20 23 38 31 45 36 44 39 3b 0a 20 20 20 20 2d 2d 6d 7a 2d 74 65 61 6c 3a 20 23 32 30 63 39 39 37 3b 0a 20 20 20 20 2d 2d 6d 7a 2d 63 79 61 6e 3a 20 23 30 64 63 61 66 30 3b Data Ascii: :root { --mz-blue: #63B3ED; --mz-indigo: #596CFF; --mz-purple: #6f42c1; --mz-pink: #d63384; --mz-red: #F56565; --mz-orange: #fd7e14; --mz-yellow: #FBD38D; --mz-green: #81E6D9; --mz-teal: #20c997; --mz-cyan: #0dcaf0;
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 6d 7a 2d 61 63 74 69 76 65 2d 70 72 69 6d 61 72 79 29 3b 0a 7d 0a 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 61 72 6b 20 66 6f 72 6d 20 2e 62 75 74 74 6f 6e 73 2d 73 61 76 65 2d 63 68 61 6e 67 65 73 2d 61 6e 64 2d 61 63 74 69 6f 6e 20 75 6c 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 6c 69 20 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 6d 7a 2d 64 61 72 6b 2d 61 63 74 69 76 65 2d 70 72 69 6d 61 72 79 29 3b 0a 7d 0a 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 7a 2d 64 61 73 68 65 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 Data Ascii: background: var(--mz-active-primary);}.skin-blue.dark form .buttons-save-changes-and-action ul.dropdown-menu li button:hover { background: var(--mz-dark-active-primary);}.skin-blue .dropdown-menu { border-color: var(--mz-dashed-border-color)
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 20 76 61 72 28 2d 2d 6d 7a 2d 70 72 69 6d 61 72 79 29 3b 0a 7d 0a 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 6f 78 2e 62 6f 78 2d 73 6f 6c 69 64 2e 62 6f 78 2d 69 6e 66 6f 20 3e 20 2e 62 6f 78 2d 68 65 61 64 65 72 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 7a 2d 77 68 69 74 65 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 6d 7a 2d 70 72 69 6d 61 72 79 29 3b 0a 7d 0a 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 6f 78 2e 62 6f 78 2d 73 6f 6c 69 64 2e 62 6f 78 2d 64 61 6e 67 65 72 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 6d 7a 2d 64 61 6e 67 65 72 29 3b 0a 7d 0a 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 6f 78 2e 62 6f 78 2d 73 6f 6c 69 64 2e 62 6f 78 2d 64 61 6e Data Ascii: var(--mz-primary);}.skin-blue .box.box-solid.box-info > .box-header { color: var(--mz-white); background: var(--mz-primary);}.skin-blue .box.box-solid.box-danger { border: 1px solid var(--mz-danger);}.skin-blue .box.box-solid.box-dan
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 6b 69 6e 2d 62 6c 75 65 20 2e 74 61 62 6c 65 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 20 3e 20 74 64 20 61 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 74 61 62 6c 65 20 3e 20 74 66 6f 6f 74 20 3e 20 74 72 20 3e 20 74 64 20 61 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 7a 2d 67 72 61 79 2d 37 30 30 29 3b 0a 7d 0a 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 61 72 6b 20 2e 74 61 62 6c 65 20 3e 20 74 62 6f 64 79 20 3e 20 74 72 20 3e 20 74 68 20 61 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 61 72 6b 20 2e 74 61 62 6c 65 20 3e 20 74 66 6f 6f 74 20 3e 20 74 72 20 3e 20 74 68 20 61 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 61 72 6b 20 2e 74 61 62 6c 65 20 3e 20 74 68 65 61 64 20 3e 20 74 72 20 3e 20 74 64 20 61 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 Data Ascii: kin-blue .table > tbody > tr > td a,.skin-blue .table > tfoot > tr > td a { color: var(--mz-gray-700);}.skin-blue.dark .table > tbody > tr > th a,.skin-blue.dark .table > tfoot > tr > th a,.skin-blue.dark .table > thead > tr > td a,.skin-blue.d
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 6c 69 67 68 74 2d 62 6c 75 65 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 67 72 65 65 6e 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 6e 61 76 79 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 74 65 61 6c 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 6f 6c 69 76 65 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 6c 69 6d 65 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 6f 72 61 6e 67 65 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 66 75 63 68 73 69 61 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 70 75 72 70 6c 65 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 6d 61 72 6f 6f 6e 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 67 2d 62 6c 61 63 6b 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 Data Ascii: in-blue .bg-light-blue,.skin-blue .bg-green,.skin-blue .bg-navy,.skin-blue .bg-teal,.skin-blue .bg-olive,.skin-blue .bg-lime,.skin-blue .bg-orange,.skin-blue .bg-fuchsia,.skin-blue .bg-purple,.skin-blue .bg-maroon,.skin-blue .bg-black,.skin-blu
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 72 2e 72 6f 77 20 2e 63 6f 6c 2d 73 6d 2d 34 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 68 31 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 6f 78 65 73 2d 6d 77 2d 77 72 61 70 70 65 72 2e 72 6f 77 20 2e 63 6f 6c 2d 73 6d 2d 35 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 68 31 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 6f 78 65 73 2d 6d 77 2d 77 72 61 70 70 65 72 2e 72 6f 77 20 2e 63 6f 6c 2d 73 6d 2d 36 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 68 31 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 6f 78 65 73 2d 6d 77 2d 77 72 61 70 70 65 72 2e 72 6f 77 20 2e 63 6f 6c 2d 73 6d 2d 37 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 68 31 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 62 6f Data Ascii: r.row .col-sm-4 .small-box > .inner h1,.skin-blue .boxes-mw-wrapper.row .col-sm-5 .small-box > .inner h1,.skin-blue .boxes-mw-wrapper.row .col-sm-6 .small-box > .inner h1,.skin-blue .boxes-mw-wrapper.row .col-sm-7 .small-box > .inner h1,.skin-blue .bo
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 72 6f 77 20 2e 63 6f 6c 2d 73 6d 2d 31 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 68 33 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 61 72 6b 20 2e 62 6f 78 65 73 2d 6d 77 2d 77 72 61 70 70 65 72 2e 72 6f 77 20 2e 63 6f 6c 2d 73 6d 2d 31 30 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 68 33 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 61 72 6b 20 2e 62 6f 78 65 73 2d 6d 77 2d 77 72 61 70 70 65 72 2e 72 6f 77 20 2e 63 6f 6c 2d 73 6d 2d 31 31 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 68 33 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 61 72 6b 20 2e 62 6f 78 65 73 2d 6d 77 2d 77 72 61 70 70 65 72 2e 72 6f 77 20 2e 63 6f 6c 2d 73 6d 2d 31 32 20 2e 73 6d 61 6c 6c 2d 62 6f 78 20 3e 20 2e 69 6e 6e 65 72 20 68 33 Data Ascii: row .col-sm-1 .small-box > .inner h3,.skin-blue.dark .boxes-mw-wrapper.row .col-sm-10 .small-box > .inner h3,.skin-blue.dark .boxes-mw-wrapper.row .col-sm-11 .small-box > .inner h3,.skin-blue.dark .boxes-mw-wrapper.row .col-sm-12 .small-box > .inner h3
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 7a 2d 64 61 72 6b 2d 67 72 61 79 2d 38 30 30 29 3b 0a 7d 0a 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 70 72 6f 67 72 65 73 73 2d 62 6f 78 20 2e 69 6e 66 6f 20 2e 6e 61 6d 65 20 61 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 70 72 6f 67 72 65 73 73 2d 62 6f 78 20 2e 69 6e 66 6f 20 2e 6e 75 6d 62 65 72 20 61 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 7a 2d 70 72 69 6d 61 72 79 29 3b 0a 7d 0a 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 61 72 6b 20 2e 70 72 6f 67 72 65 73 73 2d 62 6f 78 20 2e 69 6e 66 6f 20 2e 6e 61 6d 65 20 61 2c 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 61 72 6b 20 2e 70 72 6f 67 72 65 73 73 2d 62 6f 78 20 2e 69 6e 66 6f 20 2e 6e 75 6d 62 65 72 20 61 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 Data Ascii: lor: var(--mz-dark-gray-800);}.skin-blue .progress-box .info .name a,.skin-blue .progress-box .info .number a { color: var(--mz-primary);}.skin-blue.dark .progress-box .info .name a,.skin-blue.dark .progress-box .info .number a { color: va
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 6b 20 2e 70 6f 70 6f 76 65 72 2e 6c 65 66 74 20 3e 20 2e 61 72 72 6f 77 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 7a 2d 64 61 72 6b 2d 73 65 63 6f 6e 64 61 72 79 29 3b 0a 7d 0a 0a 2e 73 6b 69 6e 2d 62 6c 75 65 20 2e 70 6f 70 6f 76 65 72 2e 6c 65 66 74 20 3e 20 2e 61 72 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 7a 2d 73 69 64 65 62 61 72 2d 63 6f 6c 6f 72 29 3b 0a 7d 0a 0a 2e 73 6b 69 6e 2d 62 6c 75 65 2e 64 61 72 6b 20 2e 70 6f 70 6f 76 65 72 2e 6c 65 66 74 20 3e 20 2e 61 72 72 6f 77 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6d 7a 2d 64 61 72 6b Data Ascii: k .popover.left > .arrow { border-left-color: var(--mz-dark-secondary);}.skin-blue .popover.left > .arrow:after { border-left-color: var(--mz-sidebar-color);}.skin-blue.dark .popover.left > .arrow:after { border-left-color: var(--mz-dark
2024-04-19 08:26:17 UTC	16384	IN	Data Raw: 2d 70 72 69 6d 61 72 79 29 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 6d 73 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 76 61 72 28 2d 2d 6d 7a 2d 64 61 72 6b 2d 70 72 69 6d 61 72 79 29 2c 20 76 61 72 28 2d 2d 6d 7a 2d 64 61 72 6b 2d 70 72 69 6d 61 72 79 29 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 20 30 20 30 2c 20 30 20 31 30 30 25 2c 20 66 72 6f 6d 28 76 61 72 28 2d 2d 6d 7a 2d 64 61 72 6b 2d 70 72 69 6d 61 72 79 29 29 2c 20 74 6f 28 76 61 72 28 2d 2d 6d 7a 2d 64 61 72 6b 2d 70 72 69 6d 61 72 79 29 29 29 20 21 69 6d 70 6f 72 74 Data Ascii: -primary)) !important; background-image: -ms-linear-gradient(top, var(--mz-dark-primary), var(--mz-dark-primary)) !important; background-image: -webkit-gradient(linear, 0 0, 0 100%, from(var(--mz-dark-primary)), to(var(--mz-dark-primary))) !import

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49720	91.202.233.192	443	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 08:26:17 UTC	860	OUT	GET /frontend/assets/cache/1c9ce001/jquery.min.js HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
2024-04-19 08:26:18 UTC	310	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 19 Apr 2024 08:26:18 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 89501 Last-Modified: Wed, 17 Apr 2024 08:26:37 GMT Connection: close ETag: "661f87bd-15d9d" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-19 08:26:18 UTC	16074	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-04-19 08:26:18 UTC	16384	IN	Data Raw: 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 66 28 75 3d 5b 6d 3f 63 2e 66 69 72 73 74 43 68 69 6c 64 3a 63 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 6d 26 26 70 29 7b 64 3d 28 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 63 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 26 26 72 5b 32 5d 2c 61 3d 73 26 26 63 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 73 5d 3b 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 Data Ascii: ()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&"nextSibling"}return!0}if(u=[m?c.firstChild:c.lastChild],m&&p){d=(s=(r=(i=(o=(a=c)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1])&&r[2],a=s&&c.childNodes[s];while(a=++s&&a&&a[l]\|\|(d
2024-04-19 08:26:18 UTC	16384	IN	Data Raw: 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 6d 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 3f 28 74 2e 63 61 6c 6c 28 65 2c 72 29 2c 74 3d 6e 75 6c 6c 29 3a 28 6c 3d 74 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 53 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b 2b 29 74 28 65 5b 73 5d 2c 6e 2c 61 3f 72 3a 72 2e 63 61 6c 6c 28 65 5b 73 5d 2c 73 2c 74 28 65 5b 73 5d 2c 6e 29 29 29 3b 72 65 74 75 72 6e 20 69 3f 65 3a 6c 3f 74 2e 63 61 6c 6c 28 65 29 3a 75 3f 74 28 65 5b 30 5d 2c 6e 29 3a 6f 7d 2c 5f 3d 2f 5e 2d 6d 73 2d 2f 2c 7a 3d 2f 2d 28 5b 61 2d 7a 5d 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 55 28 65 2c 74 29 7b 72 Data Ascii: 0,o,a);else if(void 0!==r&&(i=!0,m(r)\|\|(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(S(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t.call(e):u?t(e[0],n):o},_=/^-ms-/,z=/-([a-z])/g;function U(e,t){r
2024-04-19 08:26:18 UTC	16384	IN	Data Raw: 64 65 54 79 70 65 26 26 31 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 29 29 66 6f 72 28 61 3d 76 65 28 63 29 2c 72 3d 30 2c 69 3d 28 6f 3d 76 65 28 65 29 29 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 73 3d 6f 5b 72 5d 2c 75 3d 61 5b 72 5d 2c 76 6f 69 64 20 30 2c 22 69 6e 70 75 74 22 3d 3d 3d 28 6c 3d 75 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 70 65 2e 74 65 73 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 Data Ascii: deType&&11!==e.nodeType\|\|S.isXMLDoc(e)))for(a=ve(c),r=0,i=(o=ve(e)).length;r<i;r++)s=o[r],u=a[r],void 0,"input"===(l=u.nodeName.toLowerCase())&&pe.test(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(
2024-04-19 08:26:18 UTC	16384	IN	Data Raw: 4f 6e 3d 22 22 21 3d 3d 74 74 2e 76 61 6c 75 65 2c 79 2e 6f 70 74 53 65 6c 65 63 74 65 64 3d 6e 74 2e 73 65 6c 65 63 74 65 64 2c 28 74 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 76 61 6c 75 65 3d 22 74 22 2c 74 74 2e 74 79 70 65 3d 22 72 61 64 69 6f 22 2c 79 2e 72 61 64 69 6f 56 61 6c 75 65 3d 22 74 22 3d 3d 3d 74 74 2e 76 61 6c 75 65 3b 76 61 72 20 63 74 2c 66 74 3d 53 2e 65 78 70 72 2e 61 74 74 72 48 61 6e 64 6c 65 3b 53 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 24 28 74 68 69 73 2c 53 2e 61 74 74 72 2c 65 2c 74 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 6d 6f 76 65 41 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: On=""!==tt.value,y.optSelected=nt.selected,(tt=E.createElement("input")).value="t",tt.type="radio",y.radioValue="t"===tt.value;var ct,ft=S.expr.attrHandle;S.fn.extend({attr:function(e,t){return $(this,S.attr,e,t,1<arguments.length)},removeAttr:function(e)
2024-04-19 08:26:18 UTC	7891	IN	Data Raw: 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 65 29 7b 7d 7d 3b 76 61 72 20 42 74 3d 7b 30 3a 32 30 30 2c 31 32 32 33 3a 32 30 34 7d 2c 24 74 3d 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 28 29 3b 79 2e 63 6f 72 73 3d 21 21 24 74 26 26 22 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 22 69 6e 20 24 74 2c 79 2e 61 6a 61 78 3d 24 74 3d 21 21 24 74 2c 53 2e 61 6a 61 78 54 72 61 6e 73 70 6f 72 74 28 66 75 6e 63 74 69 Data Ascii: (e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpRequest}catch(e){}};var Bt={0:200,1223:204},$t=S.ajaxSettings.xhr();y.cors=!!$t&&"withCredentials"in $t,y.ajax=$t=!!$t,S.ajaxTransport(functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49722	91.202.233.192	443	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 08:26:17 UTC	868	OUT	GET /frontend/assets/cache/1c9ce001/jquery-migrate.min.js HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
2024-04-19 08:26:18 UTC	309	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 19 Apr 2024 08:26:18 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 13467 Last-Modified: Wed, 17 Apr 2024 08:26:37 GMT Connection: close ETag: "661f87bd-349b" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-19 08:26:18 UTC	13467	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49721	91.202.233.192	443	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 08:26:17 UTC	854	OUT	GET /assets/js/bootstrap.min.js?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
2024-04-19 08:26:18 UTC	309	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 19 Apr 2024 08:26:18 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 29110 Last-Modified: Mon, 08 Apr 2024 17:12:12 GMT Connection: close ETag: "6614256c-71b6" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-19 08:26:18 UTC	16075	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 31 2e 31 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 34 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 Data Ascii: /! Bootstrap v3.1.1 (http://getbootstrap.com) * Copyright 2011-2014 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery"
2024-04-19 08:26:18 UTC	13035	IN	Data Raw: 70 72 6f 78 79 28 74 68 69 73 2e 6c 65 61 76 65 2c 74 68 69 73 29 29 7d 7d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 65 6c 65 63 74 6f 72 3f 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2c 7b 74 72 69 67 67 65 72 3a 22 6d 61 6e 75 61 6c 22 2c 73 65 6c 65 63 74 6f 72 3a 22 22 7d 29 3a 74 68 69 73 2e 66 69 78 54 69 74 6c 65 28 29 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 44 65 66 61 75 6c 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 44 45 46 41 55 4c 54 53 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 67 65 74 44 65 Data Ascii: proxy(this.leave,this))}}this.options.selector?this._options=a.extend({},this.options,{trigger:"manual",selector:""}):this.fixTitle()},b.prototype.getDefaults=function(){return b.DEFAULTS},b.prototype.getOptions=function(b){return b=a.extend({},this.getDe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49723	91.202.233.192	443	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 08:26:18 UTC	853	OUT	GET /assets/js/knockout.min.js?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
2024-04-19 08:26:18 UTC	310	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 19 Apr 2024 08:26:18 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 68249 Last-Modified: Mon, 08 Apr 2024 17:12:13 GMT Connection: close ETag: "6614256d-10a99" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-19 08:26:18 UTC	16074	IN	Data Raw: 2f 2a 21 0a 20 2a 20 4b 6e 6f 63 6b 6f 75 74 20 4a 61 76 61 53 63 72 69 70 74 20 6c 69 62 72 61 72 79 20 76 33 2e 35 2e 31 0a 20 2a 20 28 63 29 20 54 68 65 20 4b 6e 6f 63 6b 6f 75 74 2e 6a 73 20 74 65 61 6d 20 2d 20 68 74 74 70 3a 2f 2f 6b 6e 6f 63 6b 6f 75 74 6a 73 2e 63 6f 6d 2f 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 29 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 41 3d 74 68 69 73 7c 7c 28 30 2c 65 76 61 6c 29 28 22 74 68 69 73 22 29 2c 77 3d 41 2e 64 6f 63 75 6d 65 6e 74 2c 52 3d 41 2e 6e 61 76 69 67 61 74 6f 72 2c 76 3d 41 2e Data Ascii: /! Knockout JavaScript library v3.5.1 * (c) The Knockout.js team - http://knockoutjs.com/ * License: MIT (http://www.opensource.org/licenses/mit-license.php) */(function() {(function(n){var A=this\|\|(0,eval)("this"),w=A.document,R=A.navigator,v=A.
2024-04-19 08:26:18 UTC	16384	IN	Data Raw: 0a 61 2e 54 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 61 2e 41 62 28 74 68 69 73 2c 44 29 3b 44 2e 71 62 28 74 68 69 73 29 7d 3b 76 61 72 20 44 3d 7b 71 62 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 55 3d 7b 63 68 61 6e 67 65 3a 5b 5d 7d 3b 61 2e 73 63 3d 31 7d 2c 73 75 62 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 64 3d 64 7c 7c 22 63 68 61 6e 67 65 22 3b 76 61 72 20 66 3d 6e 65 77 20 61 2e 69 63 28 65 2c 63 3f 62 2e 62 69 6e 64 28 63 29 3a 62 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 61 2e 50 61 28 65 2e 55 5b 64 5d 2c 66 29 3b 65 2e 68 62 26 26 65 2e 68 62 28 64 29 7d 29 3b 65 2e 51 61 26 26 65 2e 51 61 28 64 29 3b 65 2e 55 5b 64 5d 7c 7c 28 65 2e 55 5b 64 5d 3d 5b 5d 29 3b 65 2e 55 5b 64 5d Data Ascii: a.T=function(){a.a.Ab(this,D);D.qb(this)};var D={qb:function(a){a.U={change:[]};a.sc=1},subscribe:function(b,c,d){var e=this;d=d\|\|"change";var f=new a.ic(e,c?b.bind(c):b,function(){a.a.Pa(e.U[d],f);e.hb&&e.hb(d)});e.Qa&&e.Qa(d);e.U[d]\|\|(e.U[d]=[]);e.U[d]
2024-04-19 08:26:19 UTC	16384	IN	Data Raw: 3d 30 2c 6b 3d 64 2e 6c 65 6e 67 74 68 3b 66 3c 6b 3b 66 2b 2b 29 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 5b 66 5d 2c 65 29 7d 65 6c 73 65 20 61 2e 61 2e 76 61 28 63 2c 64 29 7d 2c 56 63 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 76 61 72 20 64 3b 62 28 61 29 3f 28 64 3d 61 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 61 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 29 3a 64 3d 61 2e 66 69 72 73 74 43 68 69 6c 64 3b 64 3f 63 21 3d 3d 64 26 26 61 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 2c 64 29 3a 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 7d 2c 57 62 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 29 7b 65 3f 28 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 62 28 63 29 26 26 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 Data Ascii: =0,k=d.length;f<k;f++)e.parentNode.insertBefore(d[f],e)}else a.a.va(c,d)},Vc:function(a,c){var d;b(a)?(d=a.nextSibling,a=a.parentNode):d=a.firstChild;d?c!==d&&a.insertBefore(c,d):a.appendChild(c)},Wb:function(c,d,e){e?(e=e.nextSibling,b(c)&&(c=c.parentNod
2024-04-19 08:26:19 UTC	16384	IN	Data Raw: 2e 66 6f 72 65 61 63 68 2e 52 63 28 63 29 2c 64 2c 65 2c 66 29 7d 7d 3b 61 2e 6d 2e 52 61 2e 66 6f 72 65 61 63 68 3d 21 31 3b 61 2e 68 2e 65 61 2e 66 6f 72 65 61 63 68 3d 0a 21 30 3b 61 2e 63 2e 68 61 73 66 6f 63 75 73 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 62 2e 5f 5f 6b 6f 5f 68 61 73 66 6f 63 75 73 55 70 64 61 74 69 6e 67 3d 21 30 3b 76 61 72 20 66 3d 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 69 66 28 22 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 22 69 6e 20 66 29 7b 76 61 72 20 67 3b 74 72 79 7b 67 3d 66 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 7d 63 61 74 63 68 28 6c 29 7b 67 3d 66 2e 62 6f 64 79 7d 65 3d 67 3d 3d 3d 62 7d 66 3d 63 28 29 3b 61 2e 6d 2e 65 62 28 66 2c 64 2c 22 Data Ascii: .foreach.Rc(c),d,e,f)}};a.m.Ra.foreach=!1;a.h.ea.foreach=!0;a.c.hasfocus={init:function(b,c,d){function e(e){b.__ko_hasfocusUpdating=!0;var f=b.ownerDocument;if("activeElement"in f){var g;try{g=f.activeElement}catch(l){g=f.body}e=g===b}f=c();a.m.eb(f,d,"
2024-04-19 08:26:19 UTC	3023	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 61 2e 61 2e 6b 64 28 6b 29 7d 7d 29 3b 0a 72 65 74 75 72 6e 7b 59 3a 6b 2c 24 3a 6c 2e 6a 61 28 29 3f 6c 3a 6e 7d 7d 76 61 72 20 63 3d 61 2e 61 2e 67 2e 5a 28 29 2c 64 3d 61 2e 61 2e 67 2e 5a 28 29 3b 61 2e 61 2e 65 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 2c 68 2c 6d 2c 6b 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 62 29 7b 79 3d 7b 41 61 3a 62 2c 70 62 3a 61 2e 74 61 28 77 2b 2b 29 7d 3b 76 2e 70 75 73 68 28 79 29 3b 72 7c 7c 46 2e 70 75 73 68 28 79 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 62 29 7b 79 3d 74 5b 62 5d 3b 77 21 3d 3d 79 2e 70 62 2e 76 28 29 26 26 44 2e 70 75 73 68 28 79 29 3b 79 2e 70 62 28 77 2b 2b 29 3b 61 2e 61 2e 55 61 28 79 2e 59 2c 65 29 3b 76 2e 70 75 73 68 28 79 29 7d 66 75 6e 63 Data Ascii: unction(){return!a.a.kd(k)}});return{Y:k,$:l.ja()?l:n}}var c=a.a.g.Z(),d=a.a.g.Z();a.a.ec=function(e,f,g,h,m,k){function l(b){y={Aa:b,pb:a.ta(w++)};v.push(y);r\|\|F.push(y)}function p(b){y=t[b];w!==y.pb.v()&&D.push(y);y.pb(w++);a.a.Ua(y.Y,e);v.push(y)}func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49724	23.63.206.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 08:26:18 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 08:26:18 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=167850 Date: Fri, 19 Apr 2024 08:26:18 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49726	91.202.233.192	443	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 08:26:18 UTC	849	OUT	GET /assets/js/adminlte.js?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
2024-04-19 08:26:19 UTC	308	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 19 Apr 2024 08:26:18 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 9774 Last-Modified: Mon, 08 Apr 2024 17:12:12 GMT Connection: close ETag: "6614256c-262e" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-19 08:26:19 UTC	9774	IN	Data Raw: 2f 2a 21 20 41 64 6d 69 6e 4c 54 45 20 61 70 70 2e 6a 73 0a 20 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 2a 20 4d 61 69 6e 20 4a 53 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 66 69 6c 65 20 66 6f 72 20 41 64 6d 69 6e 4c 54 45 20 76 32 2e 20 54 68 69 73 20 66 69 6c 65 0a 20 2a 20 73 68 6f 75 6c 64 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 61 6c 6c 20 70 61 67 65 73 2e 20 49 74 20 63 6f 6e 74 72 6f 6c 73 20 73 6f 6d 65 20 6c 61 79 6f 75 74 0a 20 2a 20 6f 70 74 69 6f 6e 73 20 61 6e 64 20 69 6d 70 6c 65 6d 65 6e 74 73 20 65 78 63 6c 75 73 69 76 65 20 41 64 6d 69 6e 4c 54 45 20 70 6c 75 67 69 6e 73 2e 0a 20 2a 0a 20 2a 20 40 41 75 74 68 6f 72 20 20 41 6c 6d 73 61 65 65 64 20 53 74 75 64 69 6f 0a 20 2a 20 40 53 75 70 70 6f 72 74 20 3c 68 74 Data Ascii: /! AdminLTE app.js ================ * Main JS application file for AdminLTE v2. This file * should be included in all pages. It controls some layout * options and implements exclusive AdminLTE plugins. * * @Author Almsaeed Studio * @Support <ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49725	91.202.233.192	443	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 08:26:18 UTC	847	OUT	GET /assets/js/notify.js?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
2024-04-19 08:26:19 UTC	308	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 19 Apr 2024 08:26:18 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 5593 Last-Modified: Mon, 08 Apr 2024 17:12:13 GMT Connection: close ETag: "6614256d-15d9" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-19 08:26:19 UTC	5593	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 4d 61 69 6c 57 69 7a 7a 20 45 4d 41 20 61 70 70 6c 69 63 61 74 69 6f 6e 2e 0a 20 2a 0a 20 2a 20 40 70 61 63 6b 61 67 65 20 4d 61 69 6c 57 69 7a 7a 20 45 4d 41 0a 20 2a 20 40 61 75 74 68 6f 72 20 4d 61 69 6c 57 69 7a 7a 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 54 65 61 6d 20 3c 73 75 70 70 6f 72 74 40 6d 61 69 6c 77 69 7a 7a 2e 63 6f 6d 3e 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 69 6c 77 69 7a 7a 2e 63 6f 6d 2f 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 20 4d 61 69 6c 57 69 7a 7a 20 45 4d 41 20 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 69 6c 77 69 7a 7a 2e 63 6f 6d 29 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 68 74 74 70 73 3a 2f 2f Data Ascii: /** * This file is part of the MailWizz EMA application. * * @package MailWizz EMA * @author MailWizz Development Team <support@mailwizz.com> * @link https://www.mailwizz.com/ * @copyright MailWizz EMA (https://www.mailwizz.com) * @license https://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49728	23.63.206.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 08:26:18 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 08:26:18 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=167835 Date: Fri, 19 Apr 2024 08:26:18 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-19 08:26:18 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49727	91.202.233.192	443	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 08:26:18 UTC	847	OUT	GET /assets/js/cookie.js?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
2024-04-19 08:26:19 UTC	308	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 19 Apr 2024 08:26:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 4938 Last-Modified: Mon, 08 Apr 2024 17:12:12 GMT Connection: close ETag: "6614256c-134a" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-19 08:26:19 UTC	4938	IN	Data Raw: 2f 2a 21 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 43 6f 6f 6b 69 65 20 76 32 2e 31 2e 33 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 73 2d 63 6f 6f 6b 69 65 2f 6a 73 2d 63 6f 6f 6b 69 65 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 36 2c 20 32 30 31 35 20 4b 6c 61 75 73 20 48 61 72 74 6c 20 26 20 46 61 67 6e 65 72 20 42 72 61 63 6b 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 3b 28 66 75 6e 63 74 69 6f 6e 20 28 66 61 63 74 6f 72 79 29 20 7b 0a 20 20 20 20 76 61 72 20 72 65 67 69 73 74 65 72 65 64 49 6e 4d 6f 64 75 6c 65 4c 6f 61 64 65 72 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d Data Ascii: /! JavaScript Cookie v2.1.3 * https://github.com/js-cookie/js-cookie * * Copyright 2006, 2015 Klaus Hartl & Fagner Brack * Released under the MIT license */;(function (factory) { var registeredInModuleLoader = false; if (typeof define ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49730	91.202.233.192	443	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 08:26:19 UTC	844	OUT	GET /assets/js/app.js?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
2024-04-19 08:26:19 UTC	307	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 19 Apr 2024 08:26:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 2797 Last-Modified: Mon, 08 Apr 2024 17:12:12 GMT Connection: close ETag: "6614256c-aed" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-19 08:26:19 UTC	2797	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 4d 61 69 6c 57 69 7a 7a 20 45 4d 41 20 61 70 70 6c 69 63 61 74 69 6f 6e 2e 0a 20 2a 0a 20 2a 20 40 70 61 63 6b 61 67 65 20 4d 61 69 6c 57 69 7a 7a 20 45 4d 41 0a 20 2a 20 40 61 75 74 68 6f 72 20 4d 61 69 6c 57 69 7a 7a 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 54 65 61 6d 20 3c 73 75 70 70 6f 72 74 40 6d 61 69 6c 77 69 7a 7a 2e 63 6f 6d 3e 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 69 6c 77 69 7a 7a 2e 63 6f 6d 2f 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 20 4d 61 69 6c 57 69 7a 7a 20 45 4d 41 20 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 69 6c 77 69 7a 7a 2e 63 6f 6d 29 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 68 74 74 70 73 3a 2f 2f Data Ascii: /** * This file is part of the MailWizz EMA application. * * @package MailWizz EMA * @author MailWizz Development Team <support@mailwizz.com> * @link https://www.mailwizz.com/ * @copyright MailWizz EMA (https://www.mailwizz.com) * @license https://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49729	91.202.233.192	443	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 08:26:19 UTC	853	OUT	GET /frontend/assets/js/app.js?av=1262687b HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
2024-04-19 08:26:19 UTC	306	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 19 Apr 2024 08:26:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 572 Last-Modified: Mon, 08 Apr 2024 17:12:13 GMT Connection: close ETag: "6614256d-23c" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-19 08:26:19 UTC	572	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 70 61 72 74 20 6f 66 20 74 68 65 20 4d 61 69 6c 57 69 7a 7a 20 45 4d 41 20 61 70 70 6c 69 63 61 74 69 6f 6e 2e 0a 20 2a 0a 20 2a 20 40 70 61 63 6b 61 67 65 20 4d 61 69 6c 57 69 7a 7a 20 45 4d 41 0a 20 2a 20 40 61 75 74 68 6f 72 20 4d 61 69 6c 57 69 7a 7a 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 54 65 61 6d 20 3c 73 75 70 70 6f 72 74 40 6d 61 69 6c 77 69 7a 7a 2e 63 6f 6d 3e 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 69 6c 77 69 7a 7a 2e 63 6f 6d 2f 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 20 4d 61 69 6c 57 69 7a 7a 20 45 4d 41 20 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 61 69 6c 77 69 7a 7a 2e 63 6f 6d 29 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 68 74 74 70 73 3a 2f 2f Data Ascii: /** * This file is part of the MailWizz EMA application. * * @package MailWizz EMA * @author MailWizz Development Team <support@mailwizz.com> * @link https://www.mailwizz.com/ * @copyright MailWizz EMA (https://www.mailwizz.com) * @license https://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49731	91.202.233.192	443	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 08:26:20 UTC	887	OUT	GET /favicon.ico HTTP/1.1 Host: newexra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
2024-04-19 08:26:20 UTC	280	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 19 Apr 2024 08:26:20 GMT Content-Type: image/x-icon Content-Length: 198 Last-Modified: Tue, 14 Nov 2023 07:01:20 GMT Connection: close ETag: "65531b40-c6" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-19 08:26:20 UTC	198	IN	Data Raw: 00 00 01 00 01 00 10 10 02 00 00 00 00 00 b0 00 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 01 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 ad 87 3a 00 f5 f5 f5 00 ff ff 00 00 aa 23 00 00 8a ef 00 00 ab 77 00 00 ab bb 00 00 aa 23 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 bb 15 00 00 ba d5 00 00 aa d5 00 00 93 1d 00 00 bb f5 00 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ( @:#w#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49733	91.202.233.192	443	2228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 08:26:21 UTC	557	OUT	GET /favicon.ico HTTP/1.1 Host: newexra.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mwsid=36229f2e381c3a9a97b92a74ef2ca6da; csrf_token=cf39fdd9949cb929647dd12186b9403ece0d7495s%3A88%3A%22M2FLT0doY0hQXzhSczl2bldIQlR3V2JwTGlaN3RpWEfPUo4wUGwKLygEsnLtbYvYvwNel07Ur1G9037BdYZtlg%3D%3D%22%3B
2024-04-19 08:26:22 UTC	280	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 19 Apr 2024 08:26:22 GMT Content-Type: image/x-icon Content-Length: 198 Last-Modified: Tue, 14 Nov 2023 07:01:20 GMT Connection: close ETag: "65531b40-c6" Strict-Transport-Security: max-age=31536000 Accept-Ranges: bytes
2024-04-19 08:26:22 UTC	198	IN	Data Raw: 00 00 01 00 01 00 10 10 02 00 00 00 00 00 b0 00 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 01 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 ad 87 3a 00 f5 f5 f5 00 ff ff 00 00 aa 23 00 00 8a ef 00 00 ab 77 00 00 ab bb 00 00 aa 23 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 bb 15 00 00 ba d5 00 00 aa d5 00 00 93 1d 00 00 bb f5 00 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ( @:#w#

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 892, Parent PID: 5744

General

Target ID:	0
Start time:	10:26:08
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2228, Parent PID: 892

General

Target ID:	2
Start time:	10:26:11
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2508 --field-trial-handle=2476,i,7506934698310214352,14515741543659021388,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5684, Parent PID: 5744

General

Target ID:	3
Start time:	10:26:14
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

Windows Analysis Report
https://newexra.com/lists/hd595fmsbd54c/unsubscribe/sm021tfebd0e1/zj986hw5a47dc?source=email-client-unsubscribe-button