Edit tour

Windows Analysis Report
https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072

Overview

General Information

Sample URL:	https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072
Analysis ID:	1431774
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6252 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6772 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2216,i,12332344547776072591,4045626395108805331,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1868 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1714064100023&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: chromecache_84.2.dr	String found in binary or memory: http://adomas.org/javascript-mouse-wheel/
Source: chromecache_88.2.dr	String found in binary or memory: http://api.jqueryui.com/category/theming/
Source: chromecache_84.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_84.2.dr	String found in binary or memory: http://brandonaaron.net)
Source: chromecache_84.2.dr, chromecache_88.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_84.2.dr, chromecache_88.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_84.2.dr	String found in binary or memory: http://trentrichardson.com/examples/timepicker
Source: chromecache_84.2.dr	String found in binary or memory: http://www.jacklmoore.com/autosize
Source: chromecache_84.2.dr	String found in binary or memory: http://www.mathias-bank.de)
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/carhartl/jquery-cookie
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/furf/jquery-ui-touch-punch
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/gabceb
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/gabceb/jquery-browser-plugin
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/markrian/jquery-ui-touch-punch-improved

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.5:49731 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@16/44@6/4

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2216,i,12332344547776072591,4045626395108805331,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2216,i,12332344547776072591,4045626395108805331,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
fp2e7a.wpc.phicdn.net	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label
http://adomas.org/javascript-mouse-wheel/	0%	URL Reputation	safe
http://brandonaaron.net)	0%	Avira URL Cloud	safe
http://www.mathias-bank.de)	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.google.com	172.217.215.147	true	false		high
pe-0005f101.gslb.pphosted.com	208.84.65.44	true	false		high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	0%, Virustotal, Browse	unknown
securemail.fairview.org	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Reputation
https://securemail.fairview.org/securereader/javax.faces.resource/jsf.js.jsf?ln=javax.faces	false	high
https://securemail.fairview.org/securereader/javax.faces.resource/messages/messages.png.jsf?ln=primefaces&v=7.0.17	false	high
https://securemail.fairview.org/securereader/javax.faces.resource/jquery/jquery-plugins.js.jsf?ln=primefaces&v=7.0.17	false	high
https://securemail.fairview.org/favicon.ico	false	high
https://securemail.fairview.org/securereader/javax.faces.resource/jquery/jquery.js.jsf?ln=primefaces&v=7.0.17	false	high
https://securemail.fairview.org/securereader/javax.faces.resource/components.js.jsf?ln=primefaces&v=7.0.17	false	high
https://securemail.fairview.org/securereader/javax.faces.resource/theme.css.jsf?ln=primefaces-aristo	false	high
https://securemail.fairview.org/formpostdir/images/TipClose.gif	false	high
https://securemail.fairview.org/formpostdir/Image?i=4	false	high
https://securemail.fairview.org/securereader/javax.faces.resource/hotkey/hotkey.js.jsf?ln=primefaces&v=7.0.17	false	high
https://securemail.fairview.org/formpostdir/images/CheckBullet.gif	false	high
https://securemail.fairview.org/securereader/javax.faces.resource/components.css.jsf?ln=primefaces&v=7.0.17	false	high
https://securemail.fairview.org/formpostdir/images/BangBullet.gif	false	high
https://securemail.fairview.org/securereader/javax.faces.resource/core.js.jsf?ln=primefaces&v=7.0.17	false	high
https://securemail.fairview.org/formpostdir/fonts/sourcesanspro-regular.ttf.woff	false	high
https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jquery.org/license	chromecache_84.2.dr, chromecache_88.2.dr	false		high
https://github.com/carhartl/jquery-cookie	chromecache_84.2.dr	false		high
http://adomas.org/javascript-mouse-wheel/	chromecache_84.2.dr	false	URL Reputation: safe	unknown
http://jqueryui.com	chromecache_84.2.dr, chromecache_88.2.dr	false		high
http://api.jqueryui.com/category/theming/	chromecache_88.2.dr	false		high
http://brandonaaron.net)	chromecache_84.2.dr	false	Avira URL Cloud: safe	low
http://api.jqueryui.com/position/	chromecache_84.2.dr	false		high
https://github.com/jquery/jquery-color	chromecache_84.2.dr	false		high
https://github.com/markrian/jquery-ui-touch-punch-improved	chromecache_84.2.dr	false		high
https://github.com/gabceb/jquery-browser-plugin	chromecache_84.2.dr	false		high
http://www.mathias-bank.de)	chromecache_84.2.dr	false	Avira URL Cloud: safe	low
https://github.com/furf/jquery-ui-touch-punch	chromecache_84.2.dr	false		high
https://github.com/gabceb	chromecache_84.2.dr	false		high
http://www.jacklmoore.com/autosize	chromecache_84.2.dr	false		high
http://trentrichardson.com/examples/timepicker	chromecache_84.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.215.147	www.google.com	United States	15169	GOOGLEUS	false
208.84.65.44	pe-0005f101.gslb.pphosted.com	United States	26211	PROOFPOINT-ASN-US-WESTUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431774
Start date and time:	2024-04-25 18:54:27 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@16/44@6/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 74.125.138.94, 172.253.124.139, 172.253.124.138, 172.253.124.101, 172.253.124.100, 172.253.124.102, 172.253.124.113, 142.250.9.84, 34.104.35.123, 64.233.177.95, 142.250.105.95, 142.250.9.95, 108.177.122.95, 74.125.136.95, 74.125.138.95, 173.194.219.95, 64.233.176.95, 172.253.124.95, 142.251.15.95, 172.217.215.95, 64.233.185.95, 20.12.23.50, 23.40.205.26, 72.21.81.240, 192.229.211.108, 20.3.187.198, 13.85.23.206, 40.68.123.157, 64.233.177.94
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 15:55:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9861803028572567
Encrypted:	false
SSDEEP:	48:8NJdRTZ90HyidAKZdA19ehwiZUklqehQy+3:8N9Lxvy
MD5:	CD8D2DECE8EA3134B1BDA9FC46E6C7AB
SHA1:	55E098AD43654DE66F83D52A6359F6A6A92EDFF4
SHA-256:	E0FD84682FE11163F0C4414AAD2093F52F3B13988206B678C15752B37D19BF87
SHA-512:	A417EB1DA63E8549AFCE0064EFD36178B25AD20B0D7C594FFAA4ED6EA6D97365860B81DE2502153D46B21ECC4CC3DF03DE948C2036CFC4F93ADB7967A26DB6AE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....UB.X1...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 15:55:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.0028928097140035
Encrypted:	false
SSDEEP:	48:8OdRTZ90HyidAKZdA1weh/iZUkAQkqehfy+2:8kLD9QWy
MD5:	8F5D6D899C0873751B7C63A7C3E92477
SHA1:	AC2AB69DC3D24607FDA5AF2B84FEEA06F1853825
SHA-256:	319B6F9BDC4C66365390EF30C22EAA10CE23CA0644C783B6BB70EC94CAFE5DDE
SHA-512:	DC39CF3ACFA8B40829690C82E5AD620C64BEADC748BCA6F8FFE882BDD9184F14BFF3060F332FF421FCF08A4DE716BC34349E4DB67D7BBF5DCA9F6CD062D19801
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....vvX1...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.012745539985474
Encrypted:	false
SSDEEP:	48:8xGdRTZ9sHyidAKZdA14tseh7sFiZUkmgqeh7sVy+BX:8xsLrnjy
MD5:	359E0910E1E8B87F2F4EFED0A059A63B
SHA1:	2CCB427A078C90256A8BBEFBC4F7E8F166F5B70C
SHA-256:	3A2C84AA2215C734B4F7326C99040E89569100936763281D3883EB17E13D90DC
SHA-512:	91EEA4BFAFE0A530FE0D953451709A1E250F83EC2B55F1E12E21C2EED6C7B7B50DB8D54699B99A3EB3177EC9F1B5CD6D6974C5DB7D22023A2A39DCF938879AC9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 15:55:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.000941199799895
Encrypted:	false
SSDEEP:	48:83dRTZ90HyidAKZdA1vehDiZUkwqehLy+R:8nLgdy
MD5:	AB2A22E8EE08F4F6FCD8F202C071C94A
SHA1:	BA8D8B8FCEDF2480C713AF39EF5496661C0ADB0C
SHA-256:	DF391B55AE6BBCD1659A9A916156409481C093BBE570E7EBC8FAB1136EDEC52B
SHA-512:	93A786C3FDA119FFE3270DA85DA9BFB99305A8EC2FB1731F6E242204EAD44E4C44A64101EA53037814645229BE60A87D44D46E4AB77C49D253547AAC0A07F970
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....XqX1...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 15:55:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9889172828758763
Encrypted:	false
SSDEEP:	48:8P9dRTZ90HyidAKZdA1hehBiZUk1W1qehJy+C:8PBLA9py
MD5:	F7C8979EBBBD1AD16D83FCD1541CA301
SHA1:	8FEFC9DCC6C402CBD187A51AD9B6382ACF9C79A2
SHA-256:	3C701AB9297BE720E6EA8DFB29F4332FA2E0AB6E7EAB1B8B6B35656082079054
SHA-512:	D047C97A361E2E666295DF809226DF811DE04A7E34879D4E75E2332670BF69567409D71FCEE3A5C548FA4F54F4FD280004A2CE2BDC34326981343E67CA672586
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....s{X1...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 15:55:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.997990518459796
Encrypted:	false
SSDEEP:	48:8BdRTZ90HyidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbjy+yT+:8lLOT/TbxWOvTbjy7T
MD5:	A653A6D7854E8B2E5AD808C46FD6BCDB
SHA1:	631B7618A4D31F3DD9CAC45664FB4F49F108A9A1
SHA-256:	38934378CAE639E48F07C6C8AECFE6699627DC1766CF6B23E43D26DBE2A489F5
SHA-512:	00A0AEDFB17F6BB447C338C8E20B6E297117E4007EAA2F92ACF8ACFDC3D4CF4C1B2D9CF319ABF90BE3FB4FB950999D4E727F0D6E09BDAC43C64EE29108FB1E38
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......hX1...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25115), with no line terminators
Category:	downloaded
Size (bytes):	25115
Entropy (8bit):	5.077240836874768
Encrypted:	false
SSDEEP:	384:sBJC4J7GJiL/72fZBhVgKKri8s/oAT8s5oAjG8sl8sJ0:hJfBhxv
MD5:	6C9193EACA3F3316140C7A96D8E2EDEA
SHA1:	853589DF20768E14568C2A37177F440DDADB95D4
SHA-256:	4E4A1EDD64E32C55BB71E49FDDAF41EE58AAD04BDC1570A93A89645CB3C09895
SHA-512:	7BB0E6178DCF0BDB7871924A92AF01CA05BD37BAD50C9B7FA256115CB6CE5906D6BD1018D812EA5462AE434BDEB2C7C470238F795495E28BF9516C663951BAD1
Malicious:	false
Reputation:	low
URL:	https://securemail.fairview.org/securereader/javax.faces.resource/theme.css.jsf?ln=primefaces-aristo
Preview:	a{outline:0}.ui-widget{font-family:Arial,sans-serif;font-size:1.1em}.ui-widget .ui-widget{font-size:1em}.ui-widget input,.ui-widget select,.ui-widget textarea,.ui-widget button{font-family:Arial,sans-serif;font-size:1em}.ui-widget-content{border:1px solid #a8a8a8;background:#fff;color:#4f4f4f}.ui-widget-content a{color:#4f4f4f}.ui-widget-header{border:1px solid #a8a8a8;background:#c4c4c4 url("/securereader/javax.faces.resource/images/ui-bg_highlight-soft_100_c4c4c4_1x100.png.jsf?ln=primefaces-aristo") 50% 50% repeat-x;background:#c4c4c4 linear-gradient(top,rgba(255,255,255,0.8),rgba(255,255,255,0));background:#c4c4c4 -webkit-gradient(linear,left top,left bottom,from(rgba(255,255,255,0.8)),to(rgba(255,255,255,0)));background:#c4c4c4 -moz-linear-gradient(top,rgba(255,255,255,0.8),rgba(255,255,255,0));color:#333;font-weight:bold;text-shadow:0 1px 0 rgba(255,255,255,0.7)}.ui-widget-header a{color:#4f4f4f}.ui-state-default,.ui-widget-content .ui-state-default,.ui-widget-header .ui-state-def

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 128612, version 2.10
Category:	downloaded
Size (bytes):	128612
Entropy (8bit):	7.992355830336478
Encrypted:	true
SSDEEP:	3072:lwqTtPj/eAjhKdBz8D3G/KZi77IvKOL3tUBqD7AYhg:lwqTcANOOQnHaZ74
MD5:	03ADBB294261977089607CDEA10B520C
SHA1:	4DD8B4AD179F3F9B64EC980418F2C9D354A9983D
SHA-256:	D79149C9559597EFFB066E4ED38C2C4B429C88D0420725C296D52C40363EAF68
SHA-512:	5C40F0B1B41B832854E786AE3B6E9FAC4DAC0ED82F7FE3F6B3B8CB5034224DFDA5C2E6FB1B45D04F7CCEF7BA0FB48FD005B9FA527E72700088F9093A952025C4
Malicious:	false
Reputation:	low
URL:	https://securemail.fairview.org/formpostdir/fonts/sourcesanspro-regular.ttf.woff
Preview:	wOFF.......d......\|H........................BASE.......:...:....DSIG...T............GDEF..v....x....$..GPOS..y...QM......;.GSUB...T......<Z....OS/2...$...Y...`]..cmap...8...X..6....[cvt ..,........"..fpgm..+........s.Y.7gasp..v.............glyf..?....w..R,e...head.......6...6.l.Yhhea.......!...$...Zhmtx...........`...\loca..-........d.f.Xmaxp....... ... ...zname..Nd...j...<...post..S..."...K.C3.oprep..,....S...V.c...........E.8_.<...........g.........:...o..............x.c`d``...=....V..8...".}...~................v...............s....x.c`f\|.8.......).....B3.1.1.E.Y..Y...X....3.%.............w.....o0.00...1>`.......\|..Y...x..ypV..../$.KX..[.B..Y..a....AY..Hpt...n(b.F..q:.:v:.eZE...:...uZ5.6#.K.q0,Q#1(U^...>?#....43.9w{w=..s..[d.._C.....uv........\|....Z.i.C..)..o.5p;.c..../#m......."A_.`..2..,..s..H.i.";J..'Rd.K...FZe....e>&.JM0Ijl.d..5..\|...15..7..7.Gv.d.'%C.f.......c.{.] Y.=k..a.....E...\..hp^.6K.I....f"?..a.\|E..La.."...s..=G.......I:...'..`......b{....:Y

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	5.223148900731864
Encrypted:	false
SSDEEP:	24:tqAwGyTSQB24gTAhnsx1nD+o1NMTTJaz:tL+bgTinelDMd
MD5:	A05A05DCD6158CC4F8701173734F484A
SHA1:	FEEF99DC27E3DB5BF07A255B8EE509CCCACFF245
SHA-256:	CA9A42575D5AD76A2915ED24034A512413392423BC5EC029B4605AEE7EDF5D46
SHA-512:	635E76CBF85BC1E9AF0168A9B87D2085CBC68BEDEB07116DF062C2AAEA0F105D37378E37D881A8AED91EA3C0DFAF700BD6CD628620C5DCEEA6626EB3547E902C
Malicious:	false
Reputation:	low
URL:	https://securemail.fairview.org/favicon.ico
Preview:	............ .h.......(....... ..... .............................................................................................D..................................................d.................................................P...................................................@.....S..K..0.......................................................f..........................................................P....................................6.....j...........................................n......................f............................I.............{........................................^.......................i................................!.....:............./...................................{..............j...........................................................................-..`..M..v...@.........

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 8 x 8
Category:	dropped
Size (bytes):	64
Entropy (8bit):	4.431150438178646
Encrypted:	false
SSDEEP:	3:CEVDalaaPZSxlHlWBfbwpn:39urSjMBc
MD5:	0099E0458F743BD64142F6BC36E00E0D
SHA1:	90C3E270B87CE28789925391972647697AE458D9
SHA-256:	3A085E20C4C690FCAB707C3492923DA12EF0D9911EACA70C7978C5595B1E546B
SHA-512:	93D376DF2E289169ECFBB76375ADE021A75A819195B7C44337EB76E67D9E3839E492270479EC955FD184290B9CF57E59B0A2086A0453C04CEA1CDE141D07432D
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,............`.....bV..C.f..;

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18546)
Category:	downloaded
Size (bytes):	430302
Entropy (8bit):	5.112123976635055
Encrypted:	false
SSDEEP:	3072:6YyVvbIOc7M1WTzkfbpdZPND0mUw2d5wZ/nL8YIPDi2rGb:6Yqh1Ozkfj0mUw2drLi
MD5:	1EC2E61D03A4C0EF91BE8E321D07C5D8
SHA1:	31034A0F1087C879BB12D3E16D85D341783E3249
SHA-256:	A73D718DED1E36A2B0330EE5C0B5806AE9DA6306C406149EF0D4D7D0DB1670BA
SHA-512:	579CD2F97B2F40480B31C67FDDFF882CAD24D8CF26016084B7E9A86C605387281C5554E3607C567CDB19C30FEAD53ACEF1E8BC56B6DF8561525110CC37D63A68
Malicious:	false
Reputation:	low
URL:	https://securemail.fairview.org/securereader/javax.faces.resource/components.js.jsf?ln=primefaces&v=7.0.17
Preview:	if(!PrimeFaces.dialog){PrimeFaces.dialog={};PrimeFaces.dialog.DialogHandler={openDialog:function(f){var h=this.findRootWindow(),k=f.sourceComponentId+"_dlg";if(h.document.getElementById(k)){return}var j=f.sourceComponentId.replace(/:/g,"_")+"_dlgwidget",d=f.options.styleClass\|\|"",e=$('<div id="'+k+'" class="ui-dialog ui-widget ui-widget-content ui-corner-all ui-shadow ui-hidden-container ui-overlay-hidden '+d+'" data-pfdlgcid="'+PrimeFaces.escapeHTML(f.pfdlgcid)+'" data-widget="'+j+'"></div>').append('<div class="ui-dialog-titlebar ui-widget-header ui-helper-clearfix ui-corner-top"><span id="'+k+'_title" class="ui-dialog-title"></span></div>');var g=e.children(".ui-dialog-titlebar");if(f.options.closable!==false){g.append('<a class="ui-dialog-titlebar-icon ui-dialog-titlebar-close ui-corner-all" href="#" role="button"><span class="ui-icon ui-icon-closethick"></span></a>')}if(f.options.minimizable){g.append('<a class="ui-dialog-titlebar-icon ui-dialog-titlebar-minimize ui-corner-all" hr

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	120
Entropy (8bit):	5.013443696071996
Encrypted:	false
SSDEEP:	3:MPbnf/ZnKYM7lINE9s+sn2lo6UKKcwWCNl2r3/n:Mjnf/ZnHMaE2nEr1Az2D
MD5:	1475C9E3EBE720E9CFC549828F7CB54C
SHA1:	697DD7CA3EA929B9D7EF13252F496698B3592015
SHA-256:	AA60060F7664A5A126F4BC30DEC1FB9639A5B86EFDBBAA78B7E2BC6868EE46EE
SHA-512:	FB924CBF05EEA0D86F9CAE1519D3EF3C37CBB2EB10DA2718DB770F70DFD9387B7E95BFC1649FA5078B65AA947E0ACD982BDD90C10BCC6DE67DC1D250AF9E473B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAkhBUypnNyo5xIFDZA08QsSBQ0qAeMMEgUNfhkhWBIFDQ_712cSBQ3ZFN9F?alt=proto
Preview:	ClgKCw2QNPELGgQIAxgBChENKgHjDBoECAUYARoECFYYAgogDX4ZIVgaBAhMGAIqEwgKUg8KBSFAJCMqEAEY/////w8KCw0P+9dnGgQIXxgCCgcN2RTfRRoA

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (44333), with no line terminators
Category:	downloaded
Size (bytes):	44333
Entropy (8bit):	5.2070457479068235
Encrypted:	false
SSDEEP:	768:6NoxuhiTYgEUtMNBQa89jYh07Owrk+6xbyUlbyUMEMMl6DaQykWkIkGPwhNrH8QL:ZIDUtMNBQZ9jk06wrl6xbyUlbyUMEMM+
MD5:	3E4F4050044D88C1DD0ED50742A7785D
SHA1:	188C5A4A665650BEFA953ACF5FEC87A8969BE5CA
SHA-256:	E905FFB004E884DECC0118B5596596FE6FB88FEFDE62113402F3F8E1AC3BBA8A
SHA-512:	B91470139A058C56A256D0314BEF77C88FFD7E08E9931E46740D91470EFB2DF4FB64C36DDA183BB48DBE8575FD80344AA328BB1715FAF965A9CCB9626B4AFA41
Malicious:	false
Reputation:	low
URL:	https://securemail.fairview.org/securereader/javax.faces.resource/jsf.js.jsf?ln=javax.faces
Preview:	if(typeof OpenAjax!=="undefined"&&typeof OpenAjax.hub.registerLibrary!=="undefined"){OpenAjax.hub.registerLibrary("jsf","www.sun.com","2.2",null)}if(!((jsf&&jsf.specversion&&jsf.specversion>=20000)&&(jsf.implversion&&jsf.implversion>=3))){var jsf={};jsf.ajax=function(){var eventListeners=[];var errorListeners=[];var delayHandler=null;var isIE=function isIE(){if(typeof isIECache!=="undefined"){return isIECache}isIECache=document.all&&window.ActiveXObject&&navigator.userAgent.toLowerCase().indexOf("msie")>-1&&navigator.userAgent.toLowerCase().indexOf("opera")==-1;return isIECache};var isIECache;var getIEVersion=function getIEVersion(){if(typeof IEVersionCache!=="undefined"){return IEVersionCache}if(/MSIE ([0-9]+)/.test(navigator.userAgent)){IEVersionCache=parseInt(RegExp.$1)}else{IEVersionCache=-1}return IEVersionCache};var IEVersionCache;var isAutoExec=function isAutoExec(){try{if(typeof isAutoExecCache!=="undefined"){return isAutoExecCache}var autoExecTestString="<script>var mojarra =

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 8 x 8
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.431150438178646
Encrypted:	false
SSDEEP:	3:CEVDalaaPZSxlHlWBfbwpn:39urSjMBc
MD5:	0099E0458F743BD64142F6BC36E00E0D
SHA1:	90C3E270B87CE28789925391972647697AE458D9
SHA-256:	3A085E20C4C690FCAB707C3492923DA12EF0D9911EACA70C7978C5595B1E546B
SHA-512:	93D376DF2E289169ECFBB76375ADE021A75A819195B7C44337EB76E67D9E3839E492270479EC955FD184290B9CF57E59B0A2086A0453C04CEA1CDE141D07432D
Malicious:	false
Reputation:	low
URL:	https://securemail.fairview.org/formpostdir/images/CheckBullet.gif
Preview:	GIF89a...................!.......,............`.....bV..C.f..;

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 508, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	16755
Entropy (8bit):	7.9757414204084
Encrypted:	false
SSDEEP:	384:Tdgk731LaMW7NKnbxHIQCb7m8YPc5qEJZU2pWxSml1F4SOZP:51LadN6NCbS8YPafJZbsxSqb45ZP
MD5:	93D46004C954437039DB089DD097EB38
SHA1:	61BED313EE1EFA40DA3E9C18FBFA7CA214190DE7
SHA-256:	4C5C882C57946ED56E325D16C508BE939D9B46936B958DF23EE8B42BAB1F1BAC
SHA-512:	3FA7402F517CC9944DE5C46441E3755FFDC1F6408812AE3BB2685953AF0944586D35BAECC1F44037BD65EC0AFC18A6B51E0485BA99A21059E1DE5158BA4B1BAE
Malicious:	false
Reputation:	low
URL:	https://securemail.fairview.org/securereader/javax.faces.resource/messages/messages.png.jsf?ln=primefaces&v=7.0.17
Preview:	.PNG........IHDR... ..............A:IDATx..W..$K.=.==...{...m.m.m....w..;w...dEw..y.}..Q.U.'3OeW.A.......{...2...{..D"f.......ObY.6...y...................5j..x4..(...}..?..J.X.noo.5k....;.Q.?S...D..?.#N...+/.3f.P.r..j.V..8.Q..5.9P...e.Rn..y..>}..o..3g..k....W^y.I..aI....:P.\|..n.;v.P....y.P..e.p\.tK.9..q..}...L6.AgG.Z.\|...Zk...{...'.X$....{..8.....`.R.X&s._....Np.\|..j@...b]..V..r...V"'..=....+W"...6.pC..W_}..8K8.s..F...6[..!a[......GQ..`....~.....V_0....%:4^..r.....~..n......X.b..b..0.k.......}.q.D..x...wb..z#y./Y...(e3(.3.9n.[..9..V...".\.E.TBz.\.x.%..H .4Vrm2........@<N............M..i...`...Gb.....DU.%G<...X.`".t.~...(U...PX....Ku$...`.G....Jn."...C'./....M.8..........i........#.wJ....qh.e..{..l...y.../..Km.G..mz........1..n..=...F..L..ou.i....D..DJ.k.u..........T..;.M....#...I....h{.....D......~.5...O.`...p.^..s....\|......X..a1U.LF.4......(1bE._N.D..z.P'.RD...d.$zPb.w..*..2..R.1..m.....Tmt.I:...4\|.@.....Sh..U.D.........f^A.0U...L..

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19425)
Category:	downloaded
Size (bytes):	267239
Entropy (8bit):	5.292248426826677
Encrypted:	false
SSDEEP:	6144:rFfwZqOMrqrJxaCg/qd/JsgciBjUZKziu1/:rFBE7eA
MD5:	540804DAC5A11DF20E7119A35D01E2F8
SHA1:	6D1AB351BC7568ACB90E29C6ABDF4570A907A431
SHA-256:	52D03B5EA1D204F7E6917075ECBB1C562F2FBE9029FE95C4BD25A70EDDDE2728
SHA-512:	F458CC926ECAB96EB1C771C7FE4DC643E0F217F8AA362DAECCDA719B2B8CC0059192E5BAEACF5969429AE1A2CA7B59B7773CD1F7A003C079FF871556DD52D9FD
Malicious:	false
Reputation:	low
URL:	https://securemail.fairview.org/securereader/javax.faces.resource/jquery/jquery-plugins.js.jsf?ln=primefaces&v=7.0.17
Preview:	/! jQuery UI - v1.12.1 - 2017-08-09. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/draggable.js, widgets/droppable.js, widgets/resizable.js, widgets/selectable.js, widgets/sortable.js, widgets/datepicker.js, widgets/mouse.js, widgets/slider.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js.* Copyright jQuery Foundation and other contributors; Licensed MIT */.(function(a){if(typeof define==="function"&&define.amd){define(["jquery"],a)}else{a(jQuery)}}(function(K){K.ui=K.ui\|\|{};var Z=K.ui.version="

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 8 x 8
Category:	dropped
Size (bytes):	64
Entropy (8bit):	4.440413476123046
Encrypted:	false
SSDEEP:	3:CRM7lHr/lWrdS75e8:CJS3
MD5:	08563EA7B7B4F4488302CC85B21E4992
SHA1:	38C7C24638EE35C10A544F0401FB1270C0CD6D3A
SHA-256:	749F13D9A507A80A7ACC85A5AD8C4CEE027BB31EBEA982D259A9256802009922
SHA-512:	DC05FF3243A053DF87292C9416AF5C1DC95587910DD8732607E4D6C952DF9B056F55FA19C396F8C0CA13AD7DA4613AF10C975EFE7AFEAF7A4610F2FD0154D7E3
Malicious:	false
Reputation:	low
Preview:	GIF89a.........lg_I......!.......,..............f..^Zm......P..;

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 8 x 8
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.440413476123046
Encrypted:	false
SSDEEP:	3:CRM7lHr/lWrdS75e8:CJS3
MD5:	08563EA7B7B4F4488302CC85B21E4992
SHA1:	38C7C24638EE35C10A544F0401FB1270C0CD6D3A
SHA-256:	749F13D9A507A80A7ACC85A5AD8C4CEE027BB31EBEA982D259A9256802009922
SHA-512:	DC05FF3243A053DF87292C9416AF5C1DC95587910DD8732607E4D6C952DF9B056F55FA19C396F8C0CA13AD7DA4613AF10C975EFE7AFEAF7A4610F2FD0154D7E3
Malicious:	false
Reputation:	low
URL:	https://securemail.fairview.org/formpostdir/images/TipClose.gif
Preview:	GIF89a.........lg_I......!.......,..............f..^Zm......P..;

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 508, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	16755
Entropy (8bit):	7.9757414204084
Encrypted:	false
SSDEEP:	384:Tdgk731LaMW7NKnbxHIQCb7m8YPc5qEJZU2pWxSml1F4SOZP:51LadN6NCbS8YPafJZbsxSqb45ZP
MD5:	93D46004C954437039DB089DD097EB38
SHA1:	61BED313EE1EFA40DA3E9C18FBFA7CA214190DE7
SHA-256:	4C5C882C57946ED56E325D16C508BE939D9B46936B958DF23EE8B42BAB1F1BAC
SHA-512:	3FA7402F517CC9944DE5C46441E3755FFDC1F6408812AE3BB2685953AF0944586D35BAECC1F44037BD65EC0AFC18A6B51E0485BA99A21059E1DE5158BA4B1BAE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ..............A:IDATx..W..$K.=.==...{...m.m.m....w..;w...dEw..y.}..Q.U.'3OeW.A.......{...2...{..D"f.......ObY.6...y...................5j..x4..(...}..?..J.X.noo.5k....;.Q.?S...D..?.#N...+/.3f.P.r..j.V..8.Q..5.9P...e.Rn..y..>}..o..3g..k....W^y.I..aI....:P.\|..n.;v.P....y.P..e.p\.tK.9..q..}...L6.AgG.Z.\|...Zk...{...'.X$....{..8.....`.R.X&s._....Np.\|..j@...b]..V..r...V"'..=....+W"...6.pC..W_}..8K8.s..F...6[..!a[......GQ..`....~.....V_0....%:4^..r.....~..n......X.b..b..0.k.......}.q.D..x...wb..z#y./Y...(e3(.3.9n.[..9..V...".\.E.TBz.\.x.%..H .4Vrm2........@<N............M..i...`...Gb.....DU.%G<...X.`".t.~...(U...PX....Ku$...`.G....Jn."...C'./....M.8..........i........#.wJ....qh.e..{..l...y.../..Km.G..mz........1..n..=...F..L..ou.i....D..DJ.k.u..........T..;.M....#...I....h{.....D......~.5...O.`...p.^..s....\|......X..a1U.LF.4......(1bE._N.D..z.P'.RD...d.$zPb.w..*..2..R.1..m.....Tmt.I:...4\|.@.....Sh..U.D.........f^A.0U...L..

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15488)
Category:	downloaded
Size (bytes):	93818
Entropy (8bit):	4.870223615541555
Encrypted:	false
SSDEEP:	1536:s57R1lQB9y9HyXNoNiNTN/hQNBQIYOHhJvebvzQO:GVQnQO
MD5:	CA00B2BD616FFC3C6041350A592C7426
SHA1:	EA082A42F3BB7A907B5A05E1E5EA5F6B967E3EFE
SHA-256:	19846DEA837AA2A28869F608DB27827473E96713C9DE87ED94906AF0A928DDC2
SHA-512:	E18DE16BD4F1C2CEFCB9E205A5DAF48CB60925961F3F6DE0C4A93529B1B9AAB2C49F0E6CB08F45DA673152C8A333F622002DC229172C2FB804C8139CAA5C21DF
Malicious:	false
Reputation:	low
URL:	https://securemail.fairview.org/securereader/javax.faces.resource/components.css.jsf?ln=primefaces&v=7.0.17
Preview:	.ui-helper-hidden-accessible input,.ui-helper-hidden-accessible select{-webkit-transform:scale(0);-moz-transform:scale(0);-ms-transform:scale(0);transform:scale(0)}.ui-shadow{-moz-box-shadow:0 5px 10px rgba(0,0,0,0.8);-webkit-box-shadow:0 5px 10px rgba(0,0,0,0.8);box-shadow:0 5px 10px rgba(0,0,0,0.8)}.ui-overlay-visible{visibility:visible}ui-overlay-visible {visibility:visible!important}.ui-overlay-hidden{visibility:hidden}.ui-overlay-hidden {visibility:hidden!important}.ui-overflow-hidden{overflow:hidden}.ui-datepicker .ui-datepicker-current.ui-priority-secondary{opacity:1}.ui-icon-blank{background-position:16px 16px}@media only all{th.ui-column-p-6,td.ui-column-p-6,th.ui-column-p-5,td.ui-column-p-5,th.ui-column-p-4,td.ui-column-p-4,th.ui-column-p-3,td.ui-column-p-3,th.ui-column-p-2,td.ui-column-p-2,th.ui-column-p-1,td.ui-column-p-1{display:none}}@media screen and (min-width:20em){th.ui-column-p-1,td.ui-column-p-1{display:table-cell}}@media screen and (min-width:30em){th.ui-column-p

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13183)
Category:	downloaded
Size (bytes):	37785
Entropy (8bit):	5.338234647560044
Encrypted:	false
SSDEEP:	768:ZGSoI+BTN8GWYArW1PHnXpAPNUFeKqq4R4bgeMSHh7FNE:cf58GWYArW1PHnZqQeKJG
MD5:	5B3C7AC6A53B9D9BDB7A1C7B27EE036F
SHA1:	E4116A2AF7920957C0B26FE3B8B6212BFCA3B876
SHA-256:	60A0E7BCF2F261816807201BB2A09522F62C399293CDF4B0B6443A42F6228C8B
SHA-512:	D769330B8D78CA256CCDBC9473A7E74086B6D49CB7BE743C5C70D46C44F72F4B1543EFF477AB3554CE49A9955DB0EA638895EE87265B54C901F1C6041D990C80
Malicious:	false
Reputation:	low
URL:	https://securemail.fairview.org/securereader/javax.faces.resource/core.js.jsf?ln=primefaces&v=7.0.17
Preview:	(function(a){if(a.PrimeFaces){a.PrimeFaces.debug("PrimeFaces already loaded, ignoring duplicate execution.");return}var b={escapeClientId:function(c){return"#"+c.replace(/:/g,"\\:")},onElementLoad:function(c,d){if(c.prop("complete")){d()}else{c.on("load",d)}},cleanWatermarks:function(){$.watermark.hideAll()},showWatermarks:function(){$.watermark.showAll()},getWidgetById:function(e){for(var d in b.widgets){var c=b.widgets[d];if(c&&c.id===e){return c}}return null},addSubmitParam:function(d,f){var e=$(this.escapeClientId(d));for(var c in f){e.append('<input type="hidden" name="'+b.escapeHTML(c)+'" value="'+b.escapeHTML(f[c])+'" class="ui-submit-param"></input>')}return this},submit:function(f,e){var c=$(this.escapeClientId(f));var d;if(e){d=c.attr("target");c.attr("target",e)}c.submit();c.children("input.ui-submit-param").remove();if(e){if(d!==undefined){c.attr("target",d)}else{c.removeAttr("target")}}},onPost:function(){this.nonAjaxPosted=true;this.abortXHRs()},abortXHRs:function(){b.aja

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	5.223148900731864
Encrypted:	false
SSDEEP:	24:tqAwGyTSQB24gTAhnsx1nD+o1NMTTJaz:tL+bgTinelDMd
MD5:	A05A05DCD6158CC4F8701173734F484A
SHA1:	FEEF99DC27E3DB5BF07A255B8EE509CCCACFF245
SHA-256:	CA9A42575D5AD76A2915ED24034A512413392423BC5EC029B4605AEE7EDF5D46
SHA-512:	635E76CBF85BC1E9AF0168A9B87D2085CBC68BEDEB07116DF062C2AAEA0F105D37378E37D881A8AED91EA3C0DFAF700BD6CD628620C5DCEEA6626EB3547E902C
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .............................................................................................D..................................................d.................................................P...................................................@.....S..K..0.......................................................f..........................................................P....................................6.....j...........................................n......................f............................I.............{........................................^.......................i................................!.....:............./...................................{..............j...........................................................................-..`..M..v...@.........

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 8 x 8
Category:	downloaded
Size (bytes):	79
Entropy (8bit):	4.003649478784567
Encrypted:	false
SSDEEP:	3:CqauVL/at/FylhJNlglrmrT:Wu5a1IwkX
MD5:	4C69EEE876E3130B6951BA08FD6EB67C
SHA1:	884FD33D52C7EA30F04E8732A364A22DDB760F7D
SHA-256:	CB61290F2FAD07BA1668C99FFF76B88C2910924860B2FD71547BAA3A4451B62F
SHA-512:	8C4FEED2A343E384775B5D4F90442287252374A0D029B14C2E89B6C5FA388BC0F8E5C54FDEDFD154E99A046516CCAF9E982A2B4E628247C3FD07BD42C4FCCA31
Malicious:	false
Reputation:	low
URL:	https://securemail.fairview.org/formpostdir/images/BangBullet.gif
Preview:	GIF89a..........ff...................!.......,...........H...@...l,.... .Q..$.;

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 8 x 8
Category:	dropped
Size (bytes):	79
Entropy (8bit):	4.003649478784567
Encrypted:	false
SSDEEP:	3:CqauVL/at/FylhJNlglrmrT:Wu5a1IwkX
MD5:	4C69EEE876E3130B6951BA08FD6EB67C
SHA1:	884FD33D52C7EA30F04E8732A364A22DDB760F7D
SHA-256:	CB61290F2FAD07BA1668C99FFF76B88C2910924860B2FD71547BAA3A4451B62F
SHA-512:	8C4FEED2A343E384775B5D4F90442287252374A0D029B14C2E89B6C5FA388BC0F8E5C54FDEDFD154E99A046516CCAF9E982A2B4E628247C3FD07BD42C4FCCA31
Malicious:	false
Reputation:	low
Preview:	GIF89a..........ff...................!.......,...........H...@...l,.... .Q..$.;

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 200x35, components 3
Category:	downloaded
Size (bytes):	26204
Entropy (8bit):	6.828375954832998
Encrypted:	false
SSDEEP:	384:JVvntIAJH0AefEtMBBL+88dXc0rklqxLU+YNg7gs7PHSJ:Jpq5YMBx+8P0rklqdYy0sPG
MD5:	2D4CBE68DFB070EBAE1F5748C3CF3C00
SHA1:	CF853CA02E135CE678D337743FD5BEF7A4879067
SHA-256:	51B0C250E45E4588939CEAB52FACD992EE4E3DFBDC6E55D9757B5BDAD82B4AE6
SHA-512:	F95908A31968EA45807DBC30ECCCBF57FFA69DE4AD131BAE0D38EF932C2E9968720BE0EAEBE232E2150A6BAD3F188EE3968C92F89077AE0BBC3BBB2AE5DB5D95
Malicious:	false
Reputation:	low
URL:	https://securemail.fairview.org/formpostdir/Image?i=4
Preview:	......JFIF.....,.,....."Exif..MM.*.........................,Photoshop 3.0.8BIM.........,.......,........E.http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>..<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c004 79.164570, 2020/11/18-15:51:46 ">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpGImg="http://ns.adobe.com/xap/1.0/g/img/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:illustrator="http://ns.adobe.com/illustrator/1.0/" xmlns:pdf="http://ns.adobe.com/pdf/1.3/">.....<dc:format>image/jpeg</dc:format>.....<dc:title>......<rdf:Alt>.......<rdf:li xml:lang="x-default">FV_Logo_rgb_BLACK</rdf:li>......</rdf:Alt>.....</dc:title>.....<xmp:MetadataDate>2021-02-18

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89493
Entropy (8bit):	5.289599913770796
Encrypted:	false
SSDEEP:	1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakF:YYh8eip3hXuf6IidlrvakdtQ47GK1
MD5:	12108007906290015100837A6A61E9F4
SHA1:	1D6AE46F2FFA213DEDE37A521B011EC1CD8D1AD3
SHA-256:	C4DCCDD9AE25B64078E0C73F273DE94F8894D5C99E4741645ECE29AEEFC9C5A4
SHA-512:	93658F3EB4A044523A7136871E125D73C9005DA44CE09045103A35A4F18695888ECAFE2F9C0D0FA741B95CC618C6000F9AD9AFFC821A400EA7E5F2C0C8968530
Malicious:	false
Reputation:	low
URL:	https://securemail.fairview.org/securereader/javax.faces.resource/jquery/jquery.js.jsf?ln=primefaces&v=7.0.17
Preview:	/! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2266), with no line terminators
Category:	downloaded
Size (bytes):	2266
Entropy (8bit):	5.298091481985771
Encrypted:	false
SSDEEP:	48:+roQmfyrhnAw1xwQiEDv3+uiDPsKKZYcOGkre:+rzuOhz1GQiq3+uiDPaKGki
MD5:	3EC16AA44D720657743FB21B8843A42A
SHA1:	63585295ACACCEFA397927146CDF66DD4E61B2D1
SHA-256:	AA45349925767E946B92475663269F3388B684612CAF430E23E5080C60D617DF
SHA-512:	C2736C0F0C03033F1391AA2F8E6200FD116EDB9D074F38246E8DDF7D02CA9407AD656CF6B42733DCDE2E32E23FA880E4B749BCFDCBED70C063A6DF8DC1F4809D
Malicious:	false
Reputation:	low
URL:	https://securemail.fairview.org/securereader/javax.faces.resource/hotkey/hotkey.js.jsf?ln=primefaces&v=7.0.17
Preview:	(function(b){b.hotkeys={version:"0.2.0",specialKeys:{8:"backspace",9:"tab",10:"return",13:"return",16:"shift",17:"ctrl",18:"alt",19:"pause",20:"capslock",27:"esc",32:"space",33:"pageup",34:"pagedown",35:"end",36:"home",37:"left",38:"up",39:"right",40:"down",45:"insert",46:"del",59:";",61:"=",96:"0",97:"1",98:"2",99:"3",100:"4",101:"5",102:"6",103:"7",104:"8",105:"9",106:"",107:"+",109:"-",110:".",111:"/",112:"f1",113:"f2",114:"f3",115:"f4",116:"f5",117:"f6",118:"f7",119:"f8",120:"f9",121:"f10",122:"f11",123:"f12",144:"numlock",145:"scroll",173:"-",186:";",187:"=",188:",",189:"-",190:".",191:"/",192:"`",219:"[",220:"\\",221:"]",222:"'"},shiftNums:{"`":"~","1":"!","2":"@","3":"#","4":"$","5":"%","6":"^","7":"&","8":"","9":"(","0":")","-":"_","=":"+",";":": ","'":'"',",":"<",".":">","/":"?","\\":"\|"},textAcceptingInputTypes:["text","password","number","email","url","range","date","month","week","time","datetime","datetime-local","search","color","tel"],textInputTypes:/textarea\|input\|sel

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 200x35, components 3
Category:	dropped
Size (bytes):	26204
Entropy (8bit):	6.828375954832998
Encrypted:	false
SSDEEP:	384:JVvntIAJH0AefEtMBBL+88dXc0rklqxLU+YNg7gs7PHSJ:Jpq5YMBx+8P0rklqdYy0sPG
MD5:	2D4CBE68DFB070EBAE1F5748C3CF3C00
SHA1:	CF853CA02E135CE678D337743FD5BEF7A4879067
SHA-256:	51B0C250E45E4588939CEAB52FACD992EE4E3DFBDC6E55D9757B5BDAD82B4AE6
SHA-512:	F95908A31968EA45807DBC30ECCCBF57FFA69DE4AD131BAE0D38EF932C2E9968720BE0EAEBE232E2150A6BAD3F188EE3968C92F89077AE0BBC3BBB2AE5DB5D95
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,....."Exif..MM.*.........................,Photoshop 3.0.8BIM.........,.......,........E.http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>..<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c004 79.164570, 2020/11/18-15:51:46 ">...<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">....<rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpGImg="http://ns.adobe.com/xap/1.0/g/img/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:illustrator="http://ns.adobe.com/illustrator/1.0/" xmlns:pdf="http://ns.adobe.com/pdf/1.3/">.....<dc:format>image/jpeg</dc:format>.....<dc:title>......<rdf:Alt>.......<rdf:li xml:lang="x-default">FV_Logo_rgb_BLACK</rdf:li>......</rdf:Alt>.....</dc:title>.....<xmp:MetadataDate>2021-02-18

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 18:55:10.047280073 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:10.047298908 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:10.172379971 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:15.263492107 CEST	49710	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:15.263540030 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:15.263618946 CEST	49710	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:15.264054060 CEST	49711	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:15.264147043 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:15.264251947 CEST	49710	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:15.264272928 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:15.264287949 CEST	49711	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:15.264482975 CEST	49711	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:15.264513016 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:15.798863888 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:15.799146891 CEST	49710	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:15.799176931 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:15.800657988 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:15.800731897 CEST	49710	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:15.801713943 CEST	49710	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:15.801836014 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:15.801873922 CEST	49710	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:15.804960966 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:15.805186033 CEST	49711	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:15.805212975 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:15.806654930 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:15.806721926 CEST	49711	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:15.807919025 CEST	49711	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:15.807998896 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:15.844140053 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:15.854358912 CEST	49711	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:15.854377985 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:15.900288105 CEST	49710	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:15.900310040 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:15.900376081 CEST	49711	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:15.993942976 CEST	49710	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.609388113 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.609424114 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.609435081 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.609477997 CEST	49710	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.609486103 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.609513998 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.609533072 CEST	49710	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.631715059 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.631747961 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.631799936 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.632617950 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.632648945 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.632702112 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.633353949 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.633421898 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.633486032 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.633924961 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.633996964 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.634069920 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.634565115 CEST	49711	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.634859085 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.634876966 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.635195017 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.635210037 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.635399103 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.635430098 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.635554075 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.635577917 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.656157017 CEST	49710	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.676162004 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.781830072 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.781858921 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.781882048 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.781927109 CEST	49710	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.781969070 CEST	49710	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.781974077 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.781985998 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.782006979 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.782016039 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.782036066 CEST	49710	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.782068968 CEST	49710	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.782087088 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.782095909 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.782150984 CEST	49710	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.782174110 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.782244921 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.782294035 CEST	49710	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.782475948 CEST	49710	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.782506943 CEST	443	49710	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.783106089 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.783133030 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.783189058 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.783797026 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.783809900 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.829175949 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.829241037 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.829266071 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.829283953 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.829330921 CEST	49711	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.829413891 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.829457045 CEST	49711	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.884658098 CEST	49711	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.884681940 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.931380033 CEST	49711	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.983928919 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.984154940 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.984216928 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.984246016 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.984333992 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.984366894 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.984831095 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.985136032 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.985153913 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.985214949 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.985222101 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.985289097 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.985605955 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.985661030 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:16.985791922 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:16.985800982 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.001669884 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.001703024 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.001719952 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.001794100 CEST	49711	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.001880884 CEST	49711	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.001910925 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.001950026 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.001970053 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.002006054 CEST	49711	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.002007961 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.002027988 CEST	49711	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.002043962 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.002079964 CEST	49711	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.002329111 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.002384901 CEST	49711	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.002702951 CEST	49711	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.002734900 CEST	443	49711	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.003076077 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.003154993 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.003243923 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.003856897 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.003890991 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.026943922 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.028114080 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.176445007 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.176760912 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.176820040 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.177834034 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.177918911 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.178246975 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.178317070 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.178380966 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.178397894 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.228404999 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.377914906 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.377933025 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.377938986 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.378021955 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.378046036 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.378535032 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.378565073 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.378624916 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.378660917 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.427481890 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.427496910 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.427517891 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.427555084 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.475227118 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.475229025 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.526669025 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.526699066 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.526711941 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.526768923 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.526825905 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.526863098 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.550093889 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.550101995 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.550136089 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.550180912 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.550214052 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.550230980 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.550304890 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.550312996 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.550335884 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.550364017 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.550386906 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.550412893 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.550563097 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.550575018 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.550609112 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.550618887 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.550656080 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.550673008 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.550683975 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.550956964 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.550988913 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.550991058 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.550996065 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.551009893 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.551018953 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.551054955 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.551078081 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.551093102 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.554079056 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.554145098 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.554153919 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.567567110 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.598941088 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.598941088 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.687225103 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.687783003 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.687798023 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.688956976 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.689973116 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.690152884 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.690197945 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.699229002 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.699242115 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.699291945 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.699309111 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.699326038 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.699352026 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.699594021 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.699601889 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.699654102 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.699681997 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.699700117 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.699815035 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.699884892 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.699898958 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.722769976 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.722780943 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.722807884 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.722842932 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.722862005 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.722870111 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.722872019 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.722893000 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.722898960 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.722925901 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.722927094 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.723402023 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.723412991 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.723443985 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.723455906 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.723476887 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.723489046 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.723499060 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.723839998 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.723848104 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.723906040 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.723922968 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.724168062 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.724198103 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.724220037 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.724240065 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.724266052 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.724478006 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.724508047 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.724529982 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.724539042 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.724551916 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.724788904 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.724848032 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.724857092 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.725075006 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.725126982 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.725135088 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.725287914 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.725363970 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.725393057 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.725512981 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.725575924 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.725589037 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.725883007 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.725939989 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.725949049 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.726331949 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.726386070 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.726393938 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.732127905 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.740911961 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.740928888 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.771701097 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.771704912 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.871289968 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.871306896 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.871372938 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.871396065 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.872112989 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.872119904 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.872179985 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.872196913 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.872363091 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.872371912 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.872426987 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.872442007 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.872639894 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.872695923 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.872704029 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.872756958 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.872787952 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.872905016 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.872967005 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.872982025 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.873125076 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.873183012 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.873195887 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.895462990 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.895471096 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.895541906 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.895555973 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.895602942 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.895729065 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.895740986 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.895780087 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.895807981 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.895817041 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.895839930 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.895879984 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.895888090 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.895916939 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.895940065 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.895962954 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.896687031 CEST	49716	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.896706104 CEST	443	49716	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.897314072 CEST	49720	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.897346020 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.897401094 CEST	49720	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.898693085 CEST	49720	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.898711920 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.904961109 CEST	49714	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.904973030 CEST	443	49714	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.913911104 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.942017078 CEST	49721	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.942049026 CEST	443	49721	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:17.942111969 CEST	49721	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.943308115 CEST	49721	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:17.943321943 CEST	443	49721	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.043349028 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.043411016 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.043433905 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.043451071 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.043468952 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.043484926 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.043504953 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.044235945 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.044246912 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.044315100 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.044336081 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.047084093 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.047121048 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.047157049 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.047173977 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.047203064 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.047338963 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.047396898 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.047400951 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.047441959 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.047470093 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.047679901 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.047753096 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.047768116 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.048049927 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.048147917 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.048162937 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.048366070 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.048429012 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.048441887 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.048544884 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.048605919 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.048619032 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.048923969 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.048986912 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.049000978 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.049293995 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.049361944 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.049375057 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.049572945 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.049649000 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.049662113 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.049777985 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.049838066 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.049850941 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.050234079 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.050302982 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.050316095 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.069442034 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.071014881 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.071398020 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.071427107 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.071697950 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.071738005 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.072902918 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.072972059 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.073169947 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.073259115 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.073338985 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.073432922 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.073446989 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.074055910 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.074258089 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.074486017 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.083936930 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.083951950 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.098128080 CEST	49722	443	192.168.2.5	172.217.215.147
Apr 25, 2024 18:55:18.098185062 CEST	443	49722	172.217.215.147	192.168.2.5
Apr 25, 2024 18:55:18.098272085 CEST	49722	443	192.168.2.5	172.217.215.147
Apr 25, 2024 18:55:18.098998070 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.099014044 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.100728035 CEST	49722	443	192.168.2.5	172.217.215.147
Apr 25, 2024 18:55:18.100760937 CEST	443	49722	172.217.215.147	192.168.2.5
Apr 25, 2024 18:55:18.116141081 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.117949009 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.131689072 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.147568941 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.215763092 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.215787888 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.215821981 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.215826988 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.215881109 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.215900898 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.215970039 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.216094017 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.216130972 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.216146946 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.216161966 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.216171980 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.216185093 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.216200113 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.216207027 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.216244936 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.216279984 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.216391087 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.216439009 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.216471910 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.216506004 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.216521978 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.216726065 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.216764927 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.216784000 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.216805935 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.216840029 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.216840029 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.216861010 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.217010975 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.217031956 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.217089891 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.217089891 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.217107058 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.219290972 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.219332933 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.219353914 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.219367981 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.219410896 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.219665051 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.219728947 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.219743013 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.219793081 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.219847918 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.219856024 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.220057011 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.220122099 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.220177889 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.220238924 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.220253944 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.220525980 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.220592976 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.220606089 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.220885038 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.220949888 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.220963001 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.221301079 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.221369982 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.221385002 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.221651077 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.221730947 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.221744061 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.221991062 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.222059965 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.222073078 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.222242117 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.222321987 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.222335100 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.222522974 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.222582102 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.223758936 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.231470108 CEST	49715	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.231489897 CEST	443	49715	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.242182016 CEST	49717	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.242206097 CEST	443	49717	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.332288980 CEST	443	49722	172.217.215.147	192.168.2.5
Apr 25, 2024 18:55:18.358721972 CEST	49722	443	192.168.2.5	172.217.215.147
Apr 25, 2024 18:55:18.358762026 CEST	443	49722	172.217.215.147	192.168.2.5
Apr 25, 2024 18:55:18.360477924 CEST	443	49722	172.217.215.147	192.168.2.5
Apr 25, 2024 18:55:18.360542059 CEST	49722	443	192.168.2.5	172.217.215.147
Apr 25, 2024 18:55:18.372963905 CEST	49722	443	192.168.2.5	172.217.215.147
Apr 25, 2024 18:55:18.373080969 CEST	443	49722	172.217.215.147	192.168.2.5
Apr 25, 2024 18:55:18.395514965 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.396073103 CEST	49720	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.396110058 CEST	443	49721	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.396143913 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.396668911 CEST	49721	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.396687031 CEST	443	49721	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.396982908 CEST	443	49721	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.397250891 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.399805069 CEST	49721	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.399867058 CEST	443	49721	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.400271893 CEST	49721	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.400970936 CEST	49720	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.401160955 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.401465893 CEST	49720	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.413137913 CEST	49722	443	192.168.2.5	172.217.215.147
Apr 25, 2024 18:55:18.413171053 CEST	443	49722	172.217.215.147	192.168.2.5
Apr 25, 2024 18:55:18.422199965 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.422257900 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.422336102 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.422393084 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.423428059 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.423454046 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.423464060 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.423568964 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.423593044 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.444119930 CEST	443	49721	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.444122076 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.460401058 CEST	49722	443	192.168.2.5	172.217.215.147
Apr 25, 2024 18:55:18.476257086 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.476264000 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.476278067 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.520678043 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.595530033 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.595546007 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.595587969 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.595629930 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.595629930 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.595668077 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.595679998 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.595942020 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.595952988 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.595999956 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.596012115 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.596173048 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.596213102 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.596225977 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.596244097 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.596268892 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.596524954 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.596537113 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.596576929 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.596584082 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.596623898 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.596647978 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.596883059 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.596893072 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.596930027 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.596940994 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.597305059 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.597340107 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.597353935 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.597362995 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.597383022 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.646439075 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.646460056 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.646478891 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.692173958 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.743695021 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.743767023 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.743834972 CEST	49720	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.743874073 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.746237040 CEST	443	49721	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.746256113 CEST	443	49721	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.746306896 CEST	443	49721	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.746361017 CEST	49721	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.746361017 CEST	49721	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.768378973 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.768409967 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.768446922 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.768466949 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.768488884 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.768505096 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.768568993 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.768656015 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.768723965 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.768738031 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.768781900 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.769027948 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.769041061 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.769040108 CEST	49721	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.769062042 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.769068003 CEST	443	49721	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.769079924 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.769079924 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.769102097 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.769155025 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.769165993 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.769469023 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.769479036 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.769526958 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.769536018 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.769712925 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.769723892 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.769757986 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.769768953 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.769790888 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.770024061 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.770072937 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.770081997 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.770104885 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.770144939 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.770411015 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.770422935 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.770483971 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.770493984 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.770535946 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.770709991 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.770760059 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.770766973 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.770818949 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.770889997 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.771871090 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.771905899 CEST	443	49719	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.771931887 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.772062063 CEST	49719	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.774188995 CEST	49723	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.774252892 CEST	443	49723	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.774311066 CEST	49723	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.776204109 CEST	49723	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.776237011 CEST	443	49723	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.787080050 CEST	49720	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.787102938 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.817764997 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.833861113 CEST	49720	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.909658909 CEST	49724	443	192.168.2.5	184.31.62.93
Apr 25, 2024 18:55:18.909704924 CEST	443	49724	184.31.62.93	192.168.2.5
Apr 25, 2024 18:55:18.909770012 CEST	49724	443	192.168.2.5	184.31.62.93
Apr 25, 2024 18:55:18.911804914 CEST	49724	443	192.168.2.5	184.31.62.93
Apr 25, 2024 18:55:18.911825895 CEST	443	49724	184.31.62.93	192.168.2.5
Apr 25, 2024 18:55:18.916140079 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.916152954 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.916188955 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.916214943 CEST	49720	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.916253090 CEST	49720	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.916551113 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.916560888 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.916604996 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.916610956 CEST	49720	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.916621923 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.916666985 CEST	49720	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.916675091 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.916692972 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.916737080 CEST	49720	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.916807890 CEST	49720	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.916820049 CEST	443	49720	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.941385984 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.941397905 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.941454887 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.941474915 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.941713095 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.941723108 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.941764116 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.941772938 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.942274094 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.942322969 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.942333937 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.942378998 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.942399979 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.942636967 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.942687988 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.942694902 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.942933083 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.942986012 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.942995071 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.943180084 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.943233967 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.943240881 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.943459988 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.943500996 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.943506002 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.943789005 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.943835020 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.943842888 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.944120884 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.944164991 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.944175005 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.944493055 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.944555044 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.944562912 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.944925070 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.944984913 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.944993019 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.945290089 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.945334911 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.945343018 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.985832930 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:18.985908031 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:18.985918045 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.041085958 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.064712048 CEST	49725	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.064790964 CEST	443	49725	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.065561056 CEST	49725	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.065870047 CEST	49725	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.065897942 CEST	443	49725	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.114029884 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.114048004 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.114100933 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.114103079 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.114142895 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.114155054 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.114161968 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.114547968 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.114559889 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.114624023 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.114635944 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.114773035 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.114821911 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.114824057 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.114844084 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.114917040 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.114931107 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.114983082 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.115031004 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.115183115 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.115190029 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.115267992 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.115317106 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.115324974 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.115504026 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.115562916 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.115571022 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.115741968 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.115797043 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.115804911 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.116008997 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.116066933 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.116077900 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.116297960 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.116347075 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.116357088 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.116664886 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.116724968 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.116731882 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.117005110 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.117068052 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.117075920 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.117306948 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.117362022 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.117372036 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.117729902 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.117780924 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.117789030 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.118463993 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.118537903 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.118546009 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.118815899 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.118870974 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.118879080 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.119059086 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.119113922 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.119123936 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.119482040 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.119546890 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.119555950 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.119699955 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.119762897 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.119771004 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.120007992 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.120062113 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.120070934 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.120347977 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.120404959 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.120413065 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.120667934 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.120732069 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.120740891 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.120964050 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.121026039 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.121032953 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.121273994 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.121329069 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.121339083 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.121685028 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.131190062 CEST	443	49723	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.131751060 CEST	49723	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.131782055 CEST	443	49723	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.133483887 CEST	443	49723	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.134435892 CEST	49723	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.134694099 CEST	443	49723	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.134974957 CEST	49723	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.149224997 CEST	443	49724	184.31.62.93	192.168.2.5
Apr 25, 2024 18:55:19.149354935 CEST	49724	443	192.168.2.5	184.31.62.93
Apr 25, 2024 18:55:19.153804064 CEST	49724	443	192.168.2.5	184.31.62.93
Apr 25, 2024 18:55:19.153825998 CEST	443	49724	184.31.62.93	192.168.2.5
Apr 25, 2024 18:55:19.154221058 CEST	443	49724	184.31.62.93	192.168.2.5
Apr 25, 2024 18:55:19.158376932 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.158459902 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.158472061 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.158693075 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.180124998 CEST	443	49723	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.194495916 CEST	49724	443	192.168.2.5	184.31.62.93
Apr 25, 2024 18:55:19.250761986 CEST	49724	443	192.168.2.5	184.31.62.93
Apr 25, 2024 18:55:19.286194086 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.286266088 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.286283970 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.286323071 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.286385059 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.286393881 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.286884069 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.286936998 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.286943913 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.287164927 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.287225962 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.287234068 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.287472963 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.287539005 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.287549019 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.288459063 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.288537025 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.288546085 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.288885117 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.288945913 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.292135954 CEST	443	49724	184.31.62.93	192.168.2.5
Apr 25, 2024 18:55:19.295795918 CEST	49718	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.295814037 CEST	443	49718	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.360949039 CEST	443	49724	184.31.62.93	192.168.2.5
Apr 25, 2024 18:55:19.361076117 CEST	443	49724	184.31.62.93	192.168.2.5
Apr 25, 2024 18:55:19.361238003 CEST	49724	443	192.168.2.5	184.31.62.93
Apr 25, 2024 18:55:19.414695024 CEST	443	49725	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.417298079 CEST	49725	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.417355061 CEST	443	49725	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.417831898 CEST	443	49725	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.419058084 CEST	49725	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.419148922 CEST	443	49725	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.419325113 CEST	49725	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.443114042 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.443193913 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.443330050 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.443545103 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.443576097 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.456821918 CEST	49727	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.456897974 CEST	443	49727	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.457068920 CEST	49727	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.459291935 CEST	49727	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.459326982 CEST	443	49727	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.462585926 CEST	49728	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.462625027 CEST	443	49728	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.462841034 CEST	49728	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.463141918 CEST	49728	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.463157892 CEST	443	49728	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.464118958 CEST	443	49725	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.466506004 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.466573954 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.466661930 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.466932058 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.466960907 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.476984978 CEST	49724	443	192.168.2.5	184.31.62.93
Apr 25, 2024 18:55:19.477008104 CEST	443	49724	184.31.62.93	192.168.2.5
Apr 25, 2024 18:55:19.524280071 CEST	443	49723	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.524688959 CEST	443	49723	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.524947882 CEST	49723	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.549458981 CEST	49723	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.549488068 CEST	443	49723	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.584614038 CEST	49731	443	192.168.2.5	184.31.62.93
Apr 25, 2024 18:55:19.584646940 CEST	443	49731	184.31.62.93	192.168.2.5
Apr 25, 2024 18:55:19.584769964 CEST	49731	443	192.168.2.5	184.31.62.93
Apr 25, 2024 18:55:19.585577965 CEST	49731	443	192.168.2.5	184.31.62.93
Apr 25, 2024 18:55:19.585592031 CEST	443	49731	184.31.62.93	192.168.2.5
Apr 25, 2024 18:55:19.597775936 CEST	49732	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.597784996 CEST	443	49732	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.597944975 CEST	49732	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.598277092 CEST	49732	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.598289967 CEST	443	49732	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.647576094 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:19.654555082 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:19.786360979 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:19.795419931 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.804691076 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.804704905 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.807601929 CEST	443	49725	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.808254004 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.808304071 CEST	443	49725	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.808326960 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.808379889 CEST	49725	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.809127092 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.809309006 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.809660912 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.809669018 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.809889078 CEST	443	49728	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.810333967 CEST	49728	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.810353041 CEST	443	49728	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.810956955 CEST	443	49727	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.811017990 CEST	443	49728	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.811918020 CEST	49727	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.811954975 CEST	443	49727	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.812493086 CEST	49728	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.812552929 CEST	443	49728	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.813081980 CEST	49725	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.813105106 CEST	443	49725	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.813137054 CEST	443	49727	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.815145016 CEST	49727	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.815325975 CEST	443	49727	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.815603018 CEST	49728	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.817202091 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.818248987 CEST	443	49731	184.31.62.93	192.168.2.5
Apr 25, 2024 18:55:19.818342924 CEST	49731	443	192.168.2.5	184.31.62.93
Apr 25, 2024 18:55:19.821528912 CEST	49727	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.822360039 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.822380066 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.824644089 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.824704885 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.824759960 CEST	49731	443	192.168.2.5	184.31.62.93
Apr 25, 2024 18:55:19.824769974 CEST	443	49731	184.31.62.93	192.168.2.5
Apr 25, 2024 18:55:19.825182915 CEST	443	49731	184.31.62.93	192.168.2.5
Apr 25, 2024 18:55:19.827133894 CEST	49731	443	192.168.2.5	184.31.62.93
Apr 25, 2024 18:55:19.827517986 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.827610016 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.827800989 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.827817917 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.850395918 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.857706070 CEST	49733	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.857749939 CEST	443	49733	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.857911110 CEST	49733	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.858103991 CEST	49733	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.858123064 CEST	443	49733	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.860116005 CEST	443	49728	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.864142895 CEST	443	49727	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.872118950 CEST	443	49731	184.31.62.93	192.168.2.5
Apr 25, 2024 18:55:19.881617069 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.982157946 CEST	443	49732	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:19.996742964 CEST	49732	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:19.996766090 CEST	443	49732	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.000387907 CEST	443	49732	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.000477076 CEST	49732	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.001230001 CEST	49732	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.001401901 CEST	443	49732	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.001476049 CEST	49732	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.034533024 CEST	443	49731	184.31.62.93	192.168.2.5
Apr 25, 2024 18:55:20.034687996 CEST	443	49731	184.31.62.93	192.168.2.5
Apr 25, 2024 18:55:20.034923077 CEST	49731	443	192.168.2.5	184.31.62.93
Apr 25, 2024 18:55:20.035675049 CEST	49731	443	192.168.2.5	184.31.62.93
Apr 25, 2024 18:55:20.035696030 CEST	443	49731	184.31.62.93	192.168.2.5
Apr 25, 2024 18:55:20.035703897 CEST	49731	443	192.168.2.5	184.31.62.93
Apr 25, 2024 18:55:20.035710096 CEST	443	49731	184.31.62.93	192.168.2.5
Apr 25, 2024 18:55:20.048134089 CEST	443	49732	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.049531937 CEST	49732	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.049540043 CEST	443	49732	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.096084118 CEST	49732	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.182100058 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.182157993 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.182178974 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.182230949 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.182290077 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.182327032 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.195563078 CEST	443	49727	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.195736885 CEST	443	49727	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.195810080 CEST	49727	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.196342945 CEST	49727	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.196391106 CEST	443	49727	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.200016022 CEST	443	49728	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.200037956 CEST	443	49728	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.200089931 CEST	49728	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.200118065 CEST	443	49728	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.205087900 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.205141068 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.205162048 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.205202103 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.205213070 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.205259085 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.205308914 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.223860979 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.223882914 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.239865065 CEST	49728	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.239876032 CEST	443	49728	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.255951881 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.255971909 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.272068977 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.288106918 CEST	49728	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.304163933 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.354492903 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.354520082 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.354568005 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.354579926 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.354638100 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.354638100 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.354696035 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.354717970 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.354760885 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.354772091 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.354772091 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.354806900 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.354859114 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.354913950 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.354929924 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.355182886 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.355294943 CEST	443	49726	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.355572939 CEST	49726	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.369767904 CEST	443	49733	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.370034933 CEST	49733	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.370049953 CEST	443	49733	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.370455980 CEST	443	49732	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.370522022 CEST	443	49733	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.370611906 CEST	443	49732	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.370740891 CEST	49732	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.370884895 CEST	49733	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.370965958 CEST	443	49733	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.371028900 CEST	49733	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.371371984 CEST	49732	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.371386051 CEST	443	49732	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.372796059 CEST	443	49728	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.372808933 CEST	443	49728	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.372834921 CEST	443	49728	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.372850895 CEST	49728	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.372883081 CEST	49728	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.372888088 CEST	443	49728	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.372981071 CEST	443	49728	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.373023987 CEST	49728	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.373223066 CEST	49728	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.373234034 CEST	443	49728	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.377151966 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.377162933 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.377182007 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.377212048 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.377248049 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.377429962 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.377439976 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.377456903 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.377487898 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.377516031 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.377698898 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.377708912 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.377729893 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.377758980 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.377780914 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.416110992 CEST	443	49733	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.416351080 CEST	49733	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.484575033 CEST	49734	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.484653950 CEST	443	49734	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.484973907 CEST	49734	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.488415956 CEST	49734	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.488452911 CEST	443	49734	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.489674091 CEST	49735	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.489727974 CEST	443	49735	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.489778996 CEST	49735	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.491239071 CEST	49735	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.491260052 CEST	443	49735	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.549467087 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.549478054 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.549544096 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.549568892 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.549993992 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.550024986 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.550050020 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.550060034 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.550065994 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.550090075 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.550117016 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.550117016 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.550247908 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.550307989 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.550322056 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.550595045 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.550652027 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.550682068 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.550894022 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.550942898 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.550956964 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.592202902 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.715967894 CEST	443	49733	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.716047049 CEST	443	49733	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.716116905 CEST	49733	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.717034101 CEST	49733	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.717056990 CEST	443	49733	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.721681118 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.721755028 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.721776009 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.722182035 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.722237110 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.722259045 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.722290993 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.722322941 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.722439051 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.722491026 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.722505093 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.722698927 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.722754955 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.722769976 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.722871065 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.722917080 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.722929955 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.722960949 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.722984076 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.723010063 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.723934889 CEST	49729	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.723959923 CEST	443	49729	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.753437996 CEST	49737	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.753515959 CEST	443	49737	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.753599882 CEST	49737	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.754046917 CEST	49737	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.754080057 CEST	443	49737	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.838457108 CEST	443	49735	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.840429068 CEST	49735	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.840464115 CEST	443	49735	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.840806007 CEST	443	49735	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.841309071 CEST	49735	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.841367960 CEST	443	49735	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.841519117 CEST	49735	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.843084097 CEST	443	49734	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.843508005 CEST	49734	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.843549013 CEST	443	49734	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.845164061 CEST	443	49734	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.845612049 CEST	49734	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.845809937 CEST	443	49734	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.846004963 CEST	49734	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:20.884135008 CEST	443	49735	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:20.888147116 CEST	443	49734	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.105273008 CEST	443	49737	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.105844975 CEST	49737	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:21.105878115 CEST	443	49737	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.107014894 CEST	443	49737	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.107595921 CEST	49737	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:21.107779026 CEST	443	49737	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.107810974 CEST	49737	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:21.148140907 CEST	443	49737	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.150671959 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 25, 2024 18:55:21.150778055 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:21.160294056 CEST	49737	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:21.226005077 CEST	443	49735	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.226069927 CEST	443	49735	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.226125956 CEST	49735	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:21.228041887 CEST	49735	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:21.228065014 CEST	443	49735	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.251427889 CEST	443	49734	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.251482010 CEST	443	49734	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.251591921 CEST	49734	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:21.251630068 CEST	443	49734	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.318476915 CEST	49734	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:21.318501949 CEST	443	49734	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.365293980 CEST	49734	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:21.423168898 CEST	443	49734	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.423192978 CEST	443	49734	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.423244953 CEST	49734	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:21.423278093 CEST	443	49734	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.423309088 CEST	49734	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:21.423326015 CEST	49734	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:21.423341990 CEST	443	49734	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.423944950 CEST	443	49734	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.423996925 CEST	49734	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:21.431792021 CEST	49734	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:21.431822062 CEST	443	49734	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.490736961 CEST	443	49737	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.490818024 CEST	443	49737	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.490881920 CEST	49737	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:21.502006054 CEST	49737	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:21.502039909 CEST	443	49737	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.949354887 CEST	49738	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:21.949398994 CEST	443	49738	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:21.949521065 CEST	49738	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:21.949789047 CEST	49738	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:21.949805021 CEST	443	49738	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:22.304058075 CEST	443	49738	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:22.304269075 CEST	49738	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:22.304295063 CEST	443	49738	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:22.305859089 CEST	443	49738	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:22.306200027 CEST	49738	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:22.306384087 CEST	443	49738	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:22.306395054 CEST	49738	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:22.348150015 CEST	443	49738	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:22.349783897 CEST	49738	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:22.687818050 CEST	443	49738	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:22.688266993 CEST	443	49738	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:22.688327074 CEST	49738	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:22.688827038 CEST	49738	443	192.168.2.5	208.84.65.44
Apr 25, 2024 18:55:22.688842058 CEST	443	49738	208.84.65.44	192.168.2.5
Apr 25, 2024 18:55:28.345563889 CEST	443	49722	172.217.215.147	192.168.2.5
Apr 25, 2024 18:55:28.345634937 CEST	443	49722	172.217.215.147	192.168.2.5
Apr 25, 2024 18:55:28.345706940 CEST	49722	443	192.168.2.5	172.217.215.147
Apr 25, 2024 18:55:28.446249962 CEST	49722	443	192.168.2.5	172.217.215.147
Apr 25, 2024 18:55:28.446325064 CEST	443	49722	172.217.215.147	192.168.2.5
Apr 25, 2024 18:55:31.364969015 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:31.365128994 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:31.369442940 CEST	49743	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:31.369474888 CEST	443	49743	23.1.237.91	192.168.2.5
Apr 25, 2024 18:55:31.369869947 CEST	49743	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:31.370887995 CEST	49743	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:31.370903969 CEST	443	49743	23.1.237.91	192.168.2.5
Apr 25, 2024 18:55:31.522716045 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 25, 2024 18:55:31.522754908 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 25, 2024 18:55:31.697381973 CEST	443	49743	23.1.237.91	192.168.2.5
Apr 25, 2024 18:55:31.697449923 CEST	49743	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:31.716974020 CEST	49743	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:31.716988087 CEST	443	49743	23.1.237.91	192.168.2.5
Apr 25, 2024 18:55:31.717350960 CEST	443	49743	23.1.237.91	192.168.2.5
Apr 25, 2024 18:55:31.717434883 CEST	49743	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:31.718046904 CEST	49743	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:31.718075037 CEST	443	49743	23.1.237.91	192.168.2.5
Apr 25, 2024 18:55:31.718327045 CEST	49743	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:31.718341112 CEST	443	49743	23.1.237.91	192.168.2.5
Apr 25, 2024 18:55:32.084583044 CEST	443	49743	23.1.237.91	192.168.2.5
Apr 25, 2024 18:55:32.084667921 CEST	49743	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:32.084983110 CEST	443	49743	23.1.237.91	192.168.2.5
Apr 25, 2024 18:55:32.085033894 CEST	443	49743	23.1.237.91	192.168.2.5
Apr 25, 2024 18:55:32.085036993 CEST	49743	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:32.085079908 CEST	49743	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:32.161166906 CEST	49743	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:32.161166906 CEST	49743	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:55:32.161190033 CEST	443	49743	23.1.237.91	192.168.2.5
Apr 25, 2024 18:55:32.161330938 CEST	49743	443	192.168.2.5	23.1.237.91
Apr 25, 2024 18:56:18.047065020 CEST	49748	443	192.168.2.5	172.217.215.147
Apr 25, 2024 18:56:18.047101021 CEST	443	49748	172.217.215.147	192.168.2.5
Apr 25, 2024 18:56:18.047162056 CEST	49748	443	192.168.2.5	172.217.215.147
Apr 25, 2024 18:56:18.047472000 CEST	49748	443	192.168.2.5	172.217.215.147
Apr 25, 2024 18:56:18.047488928 CEST	443	49748	172.217.215.147	192.168.2.5
Apr 25, 2024 18:56:18.278775930 CEST	443	49748	172.217.215.147	192.168.2.5
Apr 25, 2024 18:56:18.333832979 CEST	49748	443	192.168.2.5	172.217.215.147
Apr 25, 2024 18:56:18.339930058 CEST	49748	443	192.168.2.5	172.217.215.147
Apr 25, 2024 18:56:18.339941025 CEST	443	49748	172.217.215.147	192.168.2.5
Apr 25, 2024 18:56:18.341448069 CEST	443	49748	172.217.215.147	192.168.2.5
Apr 25, 2024 18:56:18.341851950 CEST	49748	443	192.168.2.5	172.217.215.147
Apr 25, 2024 18:56:18.342048883 CEST	443	49748	172.217.215.147	192.168.2.5
Apr 25, 2024 18:56:18.396334887 CEST	49748	443	192.168.2.5	172.217.215.147
Apr 25, 2024 18:56:28.280420065 CEST	443	49748	172.217.215.147	192.168.2.5
Apr 25, 2024 18:56:28.280566931 CEST	443	49748	172.217.215.147	192.168.2.5
Apr 25, 2024 18:56:28.280751944 CEST	49748	443	192.168.2.5	172.217.215.147
Apr 25, 2024 18:56:28.445400000 CEST	49748	443	192.168.2.5	172.217.215.147
Apr 25, 2024 18:56:28.445422888 CEST	443	49748	172.217.215.147	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 18:55:14.390434027 CEST	53	64721	1.1.1.1	192.168.2.5
Apr 25, 2024 18:55:14.394103050 CEST	53	63673	1.1.1.1	192.168.2.5
Apr 25, 2024 18:55:14.964004040 CEST	53372	53	192.168.2.5	1.1.1.1
Apr 25, 2024 18:55:14.964242935 CEST	61892	53	192.168.2.5	1.1.1.1
Apr 25, 2024 18:55:15.016195059 CEST	53	64893	1.1.1.1	192.168.2.5
Apr 25, 2024 18:55:15.262514114 CEST	53	53372	1.1.1.1	192.168.2.5
Apr 25, 2024 18:55:15.262831926 CEST	53	61892	1.1.1.1	192.168.2.5
Apr 25, 2024 18:55:17.985805988 CEST	60421	53	192.168.2.5	1.1.1.1
Apr 25, 2024 18:55:17.986077070 CEST	56005	53	192.168.2.5	1.1.1.1
Apr 25, 2024 18:55:18.095854044 CEST	53	60421	1.1.1.1	192.168.2.5
Apr 25, 2024 18:55:18.096436977 CEST	53	56005	1.1.1.1	192.168.2.5
Apr 25, 2024 18:55:19.076730013 CEST	50446	53	192.168.2.5	1.1.1.1
Apr 25, 2024 18:55:19.077204943 CEST	63848	53	192.168.2.5	1.1.1.1
Apr 25, 2024 18:55:19.289504051 CEST	53	63848	1.1.1.1	192.168.2.5
Apr 25, 2024 18:55:19.438005924 CEST	53	50446	1.1.1.1	192.168.2.5
Apr 25, 2024 18:55:19.579638958 CEST	53	53552	1.1.1.1	192.168.2.5
Apr 25, 2024 18:55:33.281593084 CEST	53	60466	1.1.1.1	192.168.2.5
Apr 25, 2024 18:55:52.320976019 CEST	53	53815	1.1.1.1	192.168.2.5
Apr 25, 2024 18:56:13.447609901 CEST	53	62889	1.1.1.1	192.168.2.5
Apr 25, 2024 18:56:15.154824972 CEST	53	60224	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 25, 2024 18:55:14.964004040 CEST	192.168.2.5	1.1.1.1	0x7794	Standard query (0)	securemail.fairview.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:55:14.964242935 CEST	192.168.2.5	1.1.1.1	0x49ac	Standard query (0)	securemail.fairview.org	65	IN (0x0001)	false
Apr 25, 2024 18:55:17.985805988 CEST	192.168.2.5	1.1.1.1	0xb9a7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:55:17.986077070 CEST	192.168.2.5	1.1.1.1	0x2048	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 18:55:19.076730013 CEST	192.168.2.5	1.1.1.1	0xc197	Standard query (0)	securemail.fairview.org	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:55:19.077204943 CEST	192.168.2.5	1.1.1.1	0x15ee	Standard query (0)	securemail.fairview.org	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 25, 2024 18:55:15.262514114 CEST	1.1.1.1	192.168.2.5	0x7794	No error (0)	securemail.fairview.org	pe-0005f101.gslb.pphosted.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 18:55:15.262514114 CEST	1.1.1.1	192.168.2.5	0x7794	No error (0)	pe-0005f101.gslb.pphosted.com		208.84.65.44	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:55:15.262831926 CEST	1.1.1.1	192.168.2.5	0x49ac	No error (0)	securemail.fairview.org	pe-0005f101.gslb.pphosted.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 18:55:18.095854044 CEST	1.1.1.1	192.168.2.5	0xb9a7	No error (0)	www.google.com		172.217.215.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:55:18.095854044 CEST	1.1.1.1	192.168.2.5	0xb9a7	No error (0)	www.google.com		172.217.215.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:55:18.095854044 CEST	1.1.1.1	192.168.2.5	0xb9a7	No error (0)	www.google.com		172.217.215.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:55:18.095854044 CEST	1.1.1.1	192.168.2.5	0xb9a7	No error (0)	www.google.com		172.217.215.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:55:18.095854044 CEST	1.1.1.1	192.168.2.5	0xb9a7	No error (0)	www.google.com		172.217.215.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:55:18.095854044 CEST	1.1.1.1	192.168.2.5	0xb9a7	No error (0)	www.google.com		172.217.215.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:55:18.096436977 CEST	1.1.1.1	192.168.2.5	0x2048	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 18:55:19.289504051 CEST	1.1.1.1	192.168.2.5	0x15ee	No error (0)	securemail.fairview.org	pe-0005f101.gslb.pphosted.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 18:55:19.438005924 CEST	1.1.1.1	192.168.2.5	0xc197	No error (0)	securemail.fairview.org	pe-0005f101.gslb.pphosted.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 18:55:19.438005924 CEST	1.1.1.1	192.168.2.5	0xc197	No error (0)	pe-0005f101.gslb.pphosted.com		208.84.65.44	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:55:31.113219976 CEST	1.1.1.1	192.168.2.5	0x8905	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 18:55:31.113219976 CEST	1.1.1.1	192.168.2.5	0x8905	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:55:44.195439100 CEST	1.1.1.1	192.168.2.5	0xa9d7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 18:55:44.195439100 CEST	1.1.1.1	192.168.2.5	0xa9d7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 18:56:07.445441008 CEST	1.1.1.1	192.168.2.5	0x6624	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 18:56:07.445441008 CEST	1.1.1.1	192.168.2.5	0x6624	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

securemail.fairview.org

https:

www.bing.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:15 UTC	741	OUT	GET /formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072 HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 16:55:16 UTC	957	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 16:55:15 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Set-Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; Path=/securereader; Secure; HttpOnly Set-Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; Path=/formpostdir; Secure; HttpOnly Set-Cookie: BID=49444072; Max-Age=28800; Expires=Fri, 26-Apr-2024 00:55:16 GMT; Path=/; Secure; HttpOnly Set-Cookie: BID=49444072; Max-Age=28800; Expires=Fri, 26-Apr-2024 00:55:16 GMT; Path=/; Secure; HttpOnly Pragma: no-cache Cache-Control: no-store, max-age=0 Expires: Thu, 30 Sep 2021 23:59:59 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Content-Length: 29571 Connection: close Content-Type: text/html;charset=UTF-8
2024-04-25 16:55:16 UTC	7235	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 09 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 20 69 64 3d 22 6a 5f 69 64 74 33 22 3e 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 65 63 75 72 65 72 65 61 64 65 72 2f 6a 61 76 61 78 2e 66 61 63 65 73 2e 72 65 73 6f 75 72 63 65 2f 74 68 65 6d 65 2e 63 73 73 2e 6a 73 66 3f 6c 6e 3d 70 72 69 6d 65 66 61 63 65 73 2d 61 72 69 73 74 6f 22 20 2f 3e 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 65 63 75 72 65 72 65 61 64 65 72 2f 6a 61 76 61 78 2e 66 61 63 65 73 2e 72 65 73 6f 75 72 63 65 2f 63 6f 6d 70 6f 6e Data Ascii: <!DOCTYPE html><html lang="en"><head id="j_idt3"><link type="text/css" rel="stylesheet" href="/securereader/javax.faces.resource/theme.css.jsf?ln=primefaces-aristo" /><link type="text/css" rel="stylesheet" href="/securereader/javax.faces.resource/compon
2024-04-25 16:55:16 UTC	949	IN	Data Raw: 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 70 66 70 74 45 6e 64 53 65 73 73 69 6f 6e 42 74 6e 27 29 2e 66 6f 63 75 73 28 29 3b 0a 20 20 20 20 20 20 20 20 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 20 20 20 20 7d 0a 7d 0a 20 20 20 20 20 20 20 20 2f 2f 5d 5d 3e 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 53 74 79 6c 69 6e 67 20 66 6f 72 20 61 20 6d 6f 64 61 6c 20 74 6f 20 61 70 70 65 61 Data Ascii: document.getElementById('pfptEndSessionBtn').focus(); event.preventDefault(); }} //... </script><style type="text/css">/******************************************************************************Styling for a modal to appea
2024-04-25 16:55:16 UTC	8184	IN	Data Raw: 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 31 33 65 6d 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 65 6d 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 7d 0a 2e 70 66 70 74 4d 6f 64 61 6c 42 75 74 74 6f 6e 73 43 6f 6e 74 61 69 6e 65 72 20 2e 63 6f 6e 74 69 6e 75 65 53 65 73 73 69 6f 6e 42 74 6e 3a 68 6f 76 65 72 2c 20 2e 70 66 70 74 4d 6f 64 61 6c 42 75 74 74 6f 6e 73 43 6f 6e 74 61 69 6e 65 72 20 2e Data Ascii: border-radius: 0; border: 0; color: #FFFFFF; font-size: 1.13em; font-weight: bold; margin-top: 1em; padding: 10px; vertical-align: baseline;}.pfptModalButtonsContainer .continueSessionBtn:hover, .pfptModalButtonsContainer .
2024-04-25 16:55:16 UTC	8184	IN	Data Raw: 65 6d 2d 6c 69 6e 6b 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 34 65 6d 20 38 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 31 38 41 33 41 35 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 38 38 65 6d 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 64 72 Data Ascii: em-link { background-image: none; padding: 0.4em 8px; color: #FFFFFF; background-color: #18A3A5; font-weight: 600; font-size: 0.88em; border-radius: 5px; vertical-align: middle; text-decoration:none; -webkit-user-dr
2024-04-25 16:55:16 UTC	5019	IN	Data Raw: 4d 65 73 73 61 67 65 22 2c 22 77 69 64 67 65 74 5f 64 69 61 6c 6f 67 5f 6a 5f 69 64 74 36 30 22 2c 7b 69 64 3a 22 64 69 61 6c 6f 67 3a 6a 5f 69 64 74 36 30 22 2c 74 61 72 67 65 74 3a 22 64 69 61 6c 6f 67 3a 66 6e 61 6d 65 22 7d 29 3b 7d 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 74 64 3e 0a 20 20 20 20 20 20 20 20 3c 2f 74 72 3e 0a 0a 09 09 3c 74 72 3e 0a 09 09 09 3c 74 64 20 63 6c 61 73 73 3d 22 72 65 67 69 73 74 72 61 74 69 6f 6e 46 69 65 6c 64 4c 61 62 65 6c 22 3e 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 64 69 61 6c 6f 67 3a 6c 6e 61 6d 65 22 3e 4c 61 73 74 20 4e 61 6d 65 3a 3c 2f 6c 61 62 65 6c 3e 0a 09 09 09 3c 2f 74 64 3e 0a 09 09 09 3c 74 64 3e 3c 69 6e 70 75 74 20 69 64 3d 22 64 69 61 6c 6f 67 3a 6c 6e 61 6d 65 22 20 Data Ascii: Message","widget_dialog_j_idt60",{id:"dialog:j_idt60",target:"dialog:fname"});});</script> </td> </tr><tr><td class="registrationFieldLabel"><label for="dialog:lname">Last Name:</label></td><td><input id="dialog:lname"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49711	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:16 UTC	755	OUT	GET /securereader/javax.faces.resource/theme.css.jsf?ln=primefaces-aristo HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
2024-04-25 16:55:16 UTC	569	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 16:55:16 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 02 May 2024 16:55:16 GMT Last-Modified: Tue, 15 Mar 2022 20:40:34 GMT ETag: W/"24683-1647376834000" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: text/css
2024-04-25 16:55:16 UTC	7623	IN	Data Raw: 31 66 66 38 0d 0a 61 7b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 75 69 2d 77 69 64 67 65 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 65 6d 7d 2e 75 69 2d 77 69 64 67 65 74 20 2e 75 69 2d 77 69 64 67 65 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 75 69 2d 77 69 64 67 65 74 20 69 6e 70 75 74 2c 2e 75 69 2d 77 69 64 67 65 74 20 73 65 6c 65 63 74 2c 2e 75 69 2d 77 69 64 67 65 74 20 74 65 78 74 61 72 65 61 2c 2e 75 69 2d 77 69 64 67 65 74 20 62 75 74 74 6f 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 7b 62 6f 72 64 65 72 3a 31 70 78 Data Ascii: 1ff8a{outline:0}.ui-widget{font-family:Arial,sans-serif;font-size:1.1em}.ui-widget .ui-widget{font-size:1em}.ui-widget input,.ui-widget select,.ui-widget textarea,.ui-widget button{font-family:Arial,sans-serif;font-size:1em}.ui-widget-content{border:1px
2024-04-25 16:55:16 UTC	567	IN	Data Raw: 78 20 2d 31 36 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 32 2d 65 2d 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 34 70 78 20 2d 31 36 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 31 2d 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 33 32 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 31 2d 6e 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 36 70 78 20 2d 33 32 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 31 2d 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 32 70 78 20 2d 33 32 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 31 2d 73 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a Data Ascii: x -16px}.ui-icon-triangle-2-e-w{background-position:-144px -16px}.ui-icon-arrow-1-n{background-position:0 -32px}.ui-icon-arrow-1-ne{background-position:-16px -32px}.ui-icon-arrow-1-e{background-position:-32px -32px}.ui-icon-arrow-1-se{background-position:
2024-04-25 16:55:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-25 16:55:16 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 69 6f 6e 3a 2d 31 34 34 70 78 20 2d 33 32 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 32 2d 65 2d 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 36 30 70 78 20 2d 33 32 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 2d 32 2d 73 65 2d 6e 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 37 36 70 78 20 2d 33 32 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 73 74 6f 70 2d 31 2d 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 39 32 70 78 20 2d 33 32 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 61 72 72 6f 77 73 74 6f 70 2d 31 2d 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 30 38 70 78 20 2d 33 32 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 61 Data Ascii: 1ff8ion:-144px -32px}.ui-icon-arrow-2-e-w{background-position:-160px -32px}.ui-icon-arrow-2-se-nw{background-position:-176px -32px}.ui-icon-arrowstop-1-n{background-position:-192px -32px}.ui-icon-arrowstop-1-e{background-position:-208px -32px}.ui-icon-a
2024-04-25 16:55:16 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-04-25 16:55:16 UTC	8184	IN	Data Raw: 72 2d 72 61 64 69 75 73 2d 74 6f 70 6c 65 66 74 3a 33 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 74 6f 70 72 69 67 68 74 3a 33 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 75 69 2d 63 6f 72 6e 65 72 2d 62 6f 74 74 6f 6d 7b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 62 6f 74 74 6f 6d 6c 65 66 74 3a 33 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 Data Ascii: r-radius-topleft:3px;-webkit-border-top-left-radius:3px;border-top-left-radius:3px;-moz-border-radius-topright:3px;-webkit-border-top-right-radius:3px;border-top-right-radius:3px}.ui-corner-bottom{-moz-border-radius-bottomleft:3px;-webkit-border-bottom-le
2024-04-25 16:55:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-25 16:55:16 UTC	575	IN	Data Raw: 32 33 33 0d 0a 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 75 69 2d 69 6e 70 75 74 67 72 6f 75 70 20 2e 75 69 2d 62 75 74 74 6f 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 75 69 2d 69 6e 70 75 74 67 72 6f 75 70 20 2e 75 69 2d 62 75 74 74 6f 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 75 69 2d 69 6e 70 75 74 67 72 6f 75 70 20 2e 75 69 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3a 6c 61 73 74 2d 63 68 69 6c 64 20 2e 75 69 2d 62 75 74 74 6f 6e 2e 75 69 2d 61 75 74 6f 63 6f 6d Data Ascii: 233r-top-right-radius:3px;border-bottom-right-radius:3px}.ui-inputgroup .ui-button:first-child{border-top-left-radius:3px;border-bottom-left-radius:3px}.ui-inputgroup .ui-button:last-child,.ui-inputgroup .ui-autocomplete:last-child .ui-button.ui-autocom

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:16 UTC	762	OUT	GET /securereader/javax.faces.resource/components.css.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
2024-04-25 16:55:17 UTC	569	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 16:55:17 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 02 May 2024 16:55:17 GMT Last-Modified: Tue, 15 Mar 2022 20:40:34 GMT ETag: W/"93422-1647376834000" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: text/css
2024-04-25 16:55:17 UTC	7623	IN	Data Raw: 31 66 66 38 0d 0a 2e 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 2d 61 63 63 65 73 73 69 62 6c 65 20 69 6e 70 75 74 2c 2e 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 2d 61 63 63 65 73 73 69 62 6c 65 20 73 65 6c 65 63 74 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 7d 2e 75 69 2d 73 68 61 64 6f 77 7b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 35 70 78 20 31 30 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 38 29 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 35 70 78 20 31 30 70 78 20 72 Data Ascii: 1ff8.ui-helper-hidden-accessible input,.ui-helper-hidden-accessible select{-webkit-transform:scale(0);-moz-transform:scale(0);-ms-transform:scale(0);transform:scale(0)}.ui-shadow{-moz-box-shadow:0 5px 10px rgba(0,0,0,0.8);-webkit-box-shadow:0 5px 10px r
2024-04-25 16:55:17 UTC	567	IN	Data Raw: 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 75 69 2d 73 6c 69 64 65 72 2d 68 61 6e 64 6c 65 7b 74 6f 70 3a 2d 2e 33 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 2e 36 65 6d 7d 2e 75 69 2d 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 75 69 2d 73 6c 69 64 65 72 2d 72 61 6e 67 65 7b 74 6f 70 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 75 69 2d 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 75 69 2d 73 6c 69 64 65 72 2d 72 61 6e 67 65 2d 6d 69 6e 7b 6c 65 66 74 3a 30 7d 2e 75 69 2d 73 6c 69 64 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 2e 75 69 2d 73 6c 69 64 65 72 2d 72 61 6e 67 65 2d 6d 61 78 7b 72 69 67 68 74 3a 30 7d 2e 75 69 2d 73 6c 69 64 65 72 2d 76 65 72 74 69 63 61 6c 7b 77 69 64 74 68 3a 2e 38 65 6d 3b 68 65 69 67 68 Data Ascii: der-horizontal .ui-slider-handle{top:-.3em;margin-left:-.6em}.ui-slider-horizontal .ui-slider-range{top:0;height:100%}.ui-slider-horizontal .ui-slider-range-min{left:0}.ui-slider-horizontal .ui-slider-range-max{right:0}.ui-slider-vertical{width:.8em;heigh
2024-04-25 16:55:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-25 16:55:17 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 72 2d 64 69 76 20 64 6c 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 75 69 2d 74 69 6d 65 70 69 63 6b 65 72 2d 64 69 76 20 64 6c 20 64 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 30 20 35 70 78 7d 2e 75 69 2d 74 69 6d 65 70 69 63 6b 65 72 2d 64 69 76 20 64 6c 20 64 64 7b 6d 61 72 67 69 6e 3a 30 20 31 30 70 78 20 31 30 70 78 20 34 30 25 7d 2e 75 69 2d 74 69 6d 65 70 69 63 6b 65 72 2d 64 69 76 20 74 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 30 25 7d 2e 75 69 2d 74 70 69 63 6b 65 72 2d 67 72 69 64 2d 6c 61 62 65 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 75 69 2d 74 69 6d 65 70 69 63 Data Ascii: 1ff8r-div dl{text-align:left}.ui-timepicker-div dl dt{float:left;clear:left;padding:0 0 0 5px}.ui-timepicker-div dl dd{margin:0 10px 10px 40%}.ui-timepicker-div td{font-size:90%}.ui-tpicker-grid-label{background:0;border:0;margin:0;padding:0}.ui-timepic
2024-04-25 16:55:17 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-04-25 16:55:17 UTC	8184	IN	Data Raw: 3a 62 6c 6f 63 6b 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 30 65 6d 29 7b 2e 75 69 2d 63 6f 6c 75 6d 6e 74 6f 67 67 6c 65 72 20 2e 75 69 2d 63 6f 6c 75 6d 6e 74 6f 67 67 6c 65 72 2d 69 74 65 6d 2e 75 69 2d 63 6f 6c 75 6d 6e 2d 70 2d 34 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 65 6d 29 7b 2e 75 69 2d 63 6f 6c 75 6d 6e 74 6f 67 67 6c 65 72 20 2e 75 69 2d 63 6f 6c 75 6d 6e 74 6f 67 67 6c 65 72 2d 69 74 65 6d 2e 75 69 2d 63 6f 6c 75 6d 6e 2d 70 2d 35 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 30 65 6d 29 7b 2e 75 Data Ascii: :block}}@media screen and (min-width:50em){.ui-columntoggler .ui-columntoggler-item.ui-column-p-4{display:block}}@media screen and (min-width:60em){.ui-columntoggler .ui-columntoggler-item.ui-column-p-5{display:block}}@media screen and (min-width:70em){.u
2024-04-25 16:55:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-25 16:55:17 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 65 66 6c 6f 77 20 2e 75 69 2d 72 65 66 6c 6f 77 2d 64 72 6f 70 64 6f 77 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 75 69 2d 64 61 74 61 74 61 62 6c 65 2d 72 65 66 6c 6f 77 20 2e 75 69 2d 72 65 66 6c 6f 77 2d 64 72 6f 70 64 6f 77 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 75 69 2d 64 61 74 61 74 61 62 6c 65 2d 72 65 66 6c 6f 77 20 74 72 2e 75 69 2d 64 61 74 61 74 61 62 6c 65 2d 65 6d 70 74 79 2d 6d 65 73 73 61 67 65 3e 74 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 72 64 65 72 3a 30 20 6e 6f 6e 65 7d 7d 0a 2e 75 69 2d Data Ascii: 1ff8eflow .ui-reflow-dropdown{display:inline-block}.ui-datatable-reflow .ui-reflow-dropdown{margin-left:5px;border-top-left-radius:3px;border-bottom-left-radius:3px}.ui-datatable-reflow tr.ui-datatable-empty-message>td{display:block;border:0 none}}.ui-
2024-04-25 16:55:17 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-04-25 16:55:17 UTC	8184	IN	Data Raw: 6c 20 2e 75 69 2d 73 65 6c 65 63 74 6f 6e 65 6d 65 6e 75 2d 66 69 6c 74 65 72 7b 77 69 64 74 68 3a 38 35 25 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 7d 2e 75 69 2d 73 65 6c 65 63 74 6f 6e 65 6d 65 6e 75 2d 70 61 6e 65 6c 20 2e 75 69 2d 73 65 6c 65 63 74 6f 6e 65 6d 65 6e 75 2d 66 69 6c 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 2e 34 65 6d 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 75 69 2d 73 65 6c 65 63 74 6f 6e 65 6d 65 6e 75 2d 70 61 6e 65 6c 20 2e 75 69 2d 73 65 6c 65 63 74 6f 6e 65 6d 65 6e 75 2d 66 69 6c 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 75 69 2d 69 63 6f 6e 7b Data Ascii: l .ui-selectonemenu-filter{width:85%;padding-right:15px}.ui-selectonemenu-panel .ui-selectonemenu-filter-container{position:relative;margin:0;padding:.4em;display:inline-block;width:100%}.ui-selectonemenu-panel .ui-selectonemenu-filter-container .ui-icon{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:16 UTC	750	OUT	GET /securereader/javax.faces.resource/jquery/jquery.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
2024-04-25 16:55:17 UTC	576	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 16:55:17 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 02 May 2024 16:55:17 GMT Last-Modified: Tue, 15 Mar 2022 20:40:34 GMT ETag: W/"89493-1647376834000" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: text/javascript
2024-04-25 16:55:17 UTC	7616	IN	Data Raw: 31 66 66 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 30 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 1ff8/! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-04-25 16:55:17 UTC	574	IN	Data Raw: 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 65 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 65 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6e 6f 64 Data Ascii: ype&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function de(t){return function(e){return"input"===e.nodeName.toLowerCase()&&e.type===t}}function he(n){return function(e){var t=e.nod
2024-04-25 16:55:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-25 16:55:17 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 74 69 6f 6e 20 76 65 28 61 29 7b 72 65 74 75 72 6e 20 6c 65 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 2b 6f 2c 6c 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c Data Ascii: 1ff8tion ve(a){return le(function(o){return o=+o,le(function(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML
2024-04-25 16:55:17 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-04-25 16:55:17 UTC	8184	IN	Data Raw: 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b Data Ascii: &(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[
2024-04-25 16:55:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-25 16:55:17 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 29 3a 6e 2e 6e 6f 64 65 54 79 70 65 3f 53 2e 67 72 65 70 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 21 3d 3d 72 7d 29 3a 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 6e 3f 53 2e 67 72 65 70 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2d 31 3c 69 2e 63 61 6c 6c 28 6e 2c 65 29 21 3d 3d 72 7d 29 3a 53 2e 66 69 6c 74 65 72 28 6e 2c 65 2c 72 29 7d 53 2e 66 69 6c 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 5b 30 5d 3b 72 65 74 75 72 6e 20 6e 26 26 28 65 3d 22 3a 6e 6f 74 28 22 2b 65 2b 22 29 22 29 2c 31 3d 3d 3d 74 2e 6c 65 6e 67 74 68 26 26 31 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 3f 53 2e 66 69 6e 64 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 Data Ascii: 1ff8):n.nodeType?S.grep(e,function(e){return e===n!==r}):"string"!=typeof n?S.grep(e,function(e){return-1<i.call(n,e)!==r}):S.filter(n,e,r)}S.filter=function(e,t,n){var r=t[0];return n&&(e=":not("+e+")"),1===t.length&&1===r.nodeType?S.find.matchesSelect
2024-04-25 16:55:17 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-04-25 16:55:17 UTC	8184	IN	Data Raw: 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 Data Ascii: ).replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t=Object.create(null),V(e)&&(e.nodeType?e[this.expand

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49717	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:17 UTC	758	OUT	GET /securereader/javax.faces.resource/jquery/jquery-plugins.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
2024-04-25 16:55:17 UTC	577	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 16:55:17 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 02 May 2024 16:55:17 GMT Last-Modified: Tue, 15 Mar 2022 20:40:34 GMT ETag: W/"267239-1647376834000" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: text/javascript
2024-04-25 16:55:17 UTC	7615	IN	Data Raw: 31 66 66 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 37 2d 30 38 2d 30 39 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 66 6f 63 75 73 61 62 6c 65 2e 6a 73 2c 20 66 6f 72 6d 2d 72 65 73 65 74 2d 6d 69 78 69 6e 2e 6a 73 2c 20 6b 65 79 63 6f 64 65 2e 6a 73 2c 20 6c 61 62 65 6c 73 2e 6a 73 2c 20 73 63 72 6f 6c 6c 2d 70 61 72 65 6e 74 2e 6a 73 2c 20 74 61 62 62 61 62 6c 65 2e 6a 73 2c 20 75 6e 69 71 75 65 2d 69 64 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 64 72 61 67 67 61 62 6c 65 2e 6a 73 Data Ascii: 1ff8/! jQuery UI - v1.12.1 - 2017-08-09 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, focusable.js, form-reset-mixin.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/draggable.js
2024-04-25 16:55:17 UTC	575	IN	Data Raw: 5f 74 6f 67 67 6c 65 43 6c 61 73 73 3a 66 75 6e 63 74 69 6f 6e 28 61 6a 2c 61 6b 2c 61 67 2c 61 6c 29 7b 61 6c 3d 28 74 79 70 65 6f 66 20 61 6c 3d 3d 3d 22 62 6f 6f 6c 65 61 6e 22 29 3f 61 6c 3a 61 67 3b 76 61 72 20 61 68 3d 28 74 79 70 65 6f 66 20 61 6a 3d 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 61 6a 3d 3d 3d 6e 75 6c 6c 29 2c 61 69 3d 7b 65 78 74 72 61 3a 61 68 3f 61 6b 3a 61 67 2c 6b 65 79 73 3a 61 68 3f 61 6a 3a 61 6b 2c 65 6c 65 6d 65 6e 74 3a 61 68 3f 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3a 61 6a 2c 61 64 64 3a 61 6c 7d 3b 61 69 2e 65 6c 65 6d 65 6e 74 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 74 68 69 73 2e 5f 63 6c 61 73 73 65 73 28 61 69 29 2c 61 6c 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 5f 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 6a 2c 61 69 2c 61 Data Ascii: _toggleClass:function(aj,ak,ag,al){al=(typeof al==="boolean")?al:ag;var ah=(typeof aj==="string"\|\|aj===null),ai={extra:ah?ak:ag,keys:ah?aj:ak,element:ah?this.element:aj,add:al};ai.element.toggleClass(this._classes(ai),al);return this},_on:function(aj,ai,a
2024-04-25 16:55:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-25 16:55:17 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 3f 61 67 5b 61 70 5d 3a 61 70 29 2e 61 70 70 6c 79 28 61 67 2c 61 72 67 75 6d 65 6e 74 73 29 7d 69 66 28 74 79 70 65 6f 66 20 61 70 21 3d 3d 22 73 74 72 69 6e 67 22 29 7b 61 6e 2e 67 75 69 64 3d 61 70 2e 67 75 69 64 3d 61 70 2e 67 75 69 64 7c 7c 61 6e 2e 67 75 69 64 7c 7c 4b 2e 67 75 69 64 2b 2b 7d 76 61 72 20 61 6f 3d 61 71 2e 6d 61 74 63 68 28 2f 5e 28 5b 5c 77 3a 2d 5d 2a 29 5c 73 2a 28 2e 2a 29 24 2f 29 3b 76 61 72 20 61 6d 3d 61 6f 5b 31 5d 2b 61 67 2e 65 76 65 6e 74 4e 61 6d 65 73 70 61 63 65 3b 76 61 72 20 61 6c 3d 61 6f 5b 32 5d 3b 69 66 28 61 6c 29 7b 61 6b 2e 6f 6e 28 61 6d 2c 61 6c 2c 61 6e 29 7d 65 6c 73 65 7b 61 69 2e 6f 6e 28 61 6d 2c 61 6e 29 7d 7d 29 7d 2c 5f 6f 66 66 3a 66 75 6e 63 74 69 6f 6e 28 61 68 2c 61 67 29 7b 61 Data Ascii: 1ff8?ag[ap]:ap).apply(ag,arguments)}if(typeof ap!=="string"){an.guid=ap.guid=ap.guid\|\|an.guid\|\|K.guid++}var ao=aq.match(/^([\w:-])\s(.*)$/);var am=ao[1]+ag.eventNamespace;var al=ao[2];if(al){ak.on(am,al,an)}else{ai.on(am,an)}})},_off:function(ah,ag){a
2024-04-25 16:55:17 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-04-25 16:55:17 UTC	8184	IN	Data Raw: 48 65 69 67 68 74 3a 61 78 2e 61 74 5b 31 5d 3d 3d 3d 22 62 6f 74 74 6f 6d 22 3f 2d 61 78 2e 74 61 72 67 65 74 48 65 69 67 68 74 3a 30 2c 61 76 3d 2d 32 2a 61 78 2e 6f 66 66 73 65 74 5b 31 5d 2c 61 45 2c 61 75 3b 69 66 28 61 43 3c 30 29 7b 61 75 3d 61 79 2e 74 6f 70 2b 61 42 2b 61 48 2b 61 76 2b 61 78 2e 63 6f 6c 6c 69 73 69 6f 6e 48 65 69 67 68 74 2d 61 47 2d 61 46 3b 69 66 28 61 75 3c 30 7c 7c 61 75 3c 61 72 28 61 43 29 29 7b 61 79 2e 74 6f 70 2b 3d 61 42 2b 61 48 2b 61 76 7d 7d 65 6c 73 65 7b 69 66 28 61 7a 3e 30 29 7b 61 45 3d 61 79 2e 74 6f 70 2d 61 78 2e 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 2e 6d 61 72 67 69 6e 54 6f 70 2b 61 42 2b 61 48 2b 61 76 2d 61 74 3b 69 66 28 61 45 3e 30 7c 7c 61 72 28 61 45 29 3c 61 7a 29 7b 61 79 2e 74 6f 70 Data Ascii: Height:ax.at[1]==="bottom"?-ax.targetHeight:0,av=-2*ax.offset[1],aE,au;if(aC<0){au=ay.top+aB+aH+av+ax.collisionHeight-aG-aF;if(au<0\|\|au<ar(aC)){ay.top+=aB+aH+av}}else{if(az>0){aE=ay.top-ax.collisionPosition.marginTop+aB+aH+av-at;if(aE>0\|\|ar(aE)<az){ay.top
2024-04-25 16:55:17 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-25 16:55:17 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 72 65 74 75 72 6e 20 61 67 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 69 66 28 74 68 69 73 2e 5f 6d 6f 75 73 65 44 69 73 74 61 6e 63 65 4d 65 74 28 61 67 29 26 26 74 68 69 73 2e 5f 6d 6f 75 73 65 44 65 6c 61 79 4d 65 74 28 61 67 29 29 7b 74 68 69 73 2e 5f 6d 6f 75 73 65 53 74 61 72 74 65 64 3d 28 74 68 69 73 2e 5f 6d 6f 75 73 65 53 74 61 72 74 28 74 68 69 73 2e 5f 6d 6f 75 73 65 44 6f 77 6e 45 76 65 6e 74 2c 61 67 29 21 3d 3d 66 61 6c 73 65 29 3b 28 74 68 69 73 2e 5f 6d 6f 75 73 65 53 74 61 72 74 65 64 3f 74 68 69 73 2e 5f 6d 6f 75 73 65 44 72 61 67 28 61 67 29 3a 74 68 69 73 2e 5f 6d 6f 75 73 65 55 70 28 61 67 29 29 7d 72 65 74 75 72 6e 20 21 74 68 69 73 2e 5f 6d 6f 75 73 65 53 74 61 72 74 65 64 7d 2c 5f 6d 6f 75 73 65 55 70 Data Ascii: 1ff8return ag.preventDefault()}if(this._mouseDistanceMet(ag)&&this._mouseDelayMet(ag)){this._mouseStarted=(this._mouseStart(this._mouseDownEvent,ag)!==false);(this._mouseStarted?this._mouseDrag(ag):this._mouseUp(ag))}return !this._mouseStarted},_mouseUp
2024-04-25 16:55:17 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-04-25 16:55:17 UTC	8184	IN	Data Raw: 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 3b 61 68 2e 74 6f 70 2b 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 7d 69 66 28 74 68 69 73 2e 5f 69 73 52 6f 6f 74 4e 6f 64 65 28 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 5b 30 5d 29 29 7b 61 68 3d 7b 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 7d 7d 72 65 74 75 72 6e 7b 74 6f 70 3a 61 68 2e 74 6f 70 2b 28 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 2e 63 73 73 28 22 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 22 29 2c 31 30 29 7c 7c 30 29 2c 6c 65 66 74 3a 61 68 2e 6c 65 66 74 2b 28 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 2e 63 73 73 28 22 62 6f 72 64 65 72 4c 65 Data Ascii: scrollParent.scrollLeft();ah.top+=this.scrollParent.scrollTop()}if(this._isRootNode(this.offsetParent[0])){ah={top:0,left:0}}return{top:ah.top+(parseInt(this.offsetParent.css("borderTopWidth"),10)\|\|0),left:ah.left+(parseInt(this.offsetParent.css("borderLe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49715	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:17 UTC	741	OUT	GET /securereader/javax.faces.resource/core.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
2024-04-25 16:55:18 UTC	576	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 16:55:17 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 02 May 2024 16:55:17 GMT Last-Modified: Tue, 15 Mar 2022 20:40:34 GMT ETag: W/"37785-1647376834000" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: text/javascript
2024-04-25 16:55:18 UTC	7616	IN	Data Raw: 31 66 66 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 50 72 69 6d 65 46 61 63 65 73 29 7b 61 2e 50 72 69 6d 65 46 61 63 65 73 2e 64 65 62 75 67 28 22 50 72 69 6d 65 46 61 63 65 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 2c 20 69 67 6e 6f 72 69 6e 67 20 64 75 70 6c 69 63 61 74 65 20 65 78 65 63 75 74 69 6f 6e 2e 22 29 3b 72 65 74 75 72 6e 7d 76 61 72 20 62 3d 7b 65 73 63 61 70 65 43 6c 69 65 6e 74 49 64 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 22 23 22 2b 63 2e 72 65 70 6c 61 63 65 28 2f 3a 2f 67 2c 22 5c 5c 3a 22 29 7d 2c 6f 6e 45 6c 65 6d 65 6e 74 4c 6f 61 64 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 69 66 28 63 2e 70 72 6f 70 28 22 63 6f 6d 70 6c 65 74 65 22 29 29 7b 64 28 29 7d 65 6c 73 65 7b 63 2e 6f 6e 28 22 Data Ascii: 1ff8(function(a){if(a.PrimeFaces){a.PrimeFaces.debug("PrimeFaces already loaded, ignoring duplicate execution.");return}var b={escapeClientId:function(c){return"#"+c.replace(/:/g,"\\:")},onElementLoad:function(c,d){if(c.prop("complete")){d()}else{c.on("
2024-04-25 16:55:18 UTC	574	IN	Data Raw: 64 6c 65 72 2e 63 6f 6e 66 69 72 6d 28 63 29 7d 2c 64 65 66 65 72 72 65 64 52 65 6e 64 65 72 73 3a 5b 5d 2c 61 64 64 44 65 66 65 72 72 65 64 52 65 6e 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 63 2c 64 29 7b 74 68 69 73 2e 64 65 66 65 72 72 65 64 52 65 6e 64 65 72 73 2e 70 75 73 68 28 7b 77 69 64 67 65 74 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 3a 63 2c 63 61 6c 6c 62 61 63 6b 3a 64 7d 29 7d 2c 72 65 6d 6f 76 65 44 65 66 65 72 72 65 64 52 65 6e 64 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 64 3d 28 74 68 69 73 2e 64 65 66 65 72 72 65 64 52 65 6e 64 65 72 73 2e 6c 65 6e 67 74 68 2d 31 29 3b 64 3e 3d 30 3b 64 2d 2d 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 64 65 66 65 72 72 65 64 52 65 6e 64 65 72 73 5b 64 5d 3b 69 66 28 63 2e 77 69 Data Ascii: dler.confirm(c)},deferredRenders:[],addDeferredRender:function(e,c,d){this.deferredRenders.push({widget:e,container:c,callback:d})},removeDeferredRenders:function(e){for(var d=(this.deferredRenders.length-1);d>=0;d--){var c=this.deferredRenders[d];if(c.wi
2024-04-25 16:55:18 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-25 16:55:18 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 6c 6f 63 61 6c 65 53 65 74 74 69 6e 67 73 29 7b 76 61 72 20 63 3d 62 2e 73 65 74 74 69 6e 67 73 2e 6c 6f 63 61 6c 65 3b 74 68 69 73 2e 6c 6f 63 61 6c 65 53 65 74 74 69 6e 67 73 3d 62 2e 6c 6f 63 61 6c 65 73 5b 63 5d 3b 69 66 28 21 74 68 69 73 2e 6c 6f 63 61 6c 65 53 65 74 74 69 6e 67 73 29 7b 69 66 28 63 29 7b 74 68 69 73 2e 6c 6f 63 61 6c 65 53 65 74 74 69 6e 67 73 3d 62 2e 6c 6f 63 61 6c 65 73 5b 63 2e 73 70 6c 69 74 28 22 5f 22 29 5b 30 5d 5d 7d 69 66 28 21 74 68 69 73 2e 6c 6f 63 61 6c 65 53 65 74 74 69 6e 67 73 29 7b 74 68 69 73 2e 6c 6f 63 61 6c 65 53 65 74 74 69 6e 67 73 3d 62 2e 6c 6f 63 61 6c 65 73 2e 65 6e 5f 55 53 7d 7d 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 61 6c 65 Data Ascii: 1ff8ction(){if(!this.localeSettings){var c=b.settings.locale;this.localeSettings=b.locales[c];if(!this.localeSettings){if(c){this.localeSettings=b.locales[c.split("_")[0]]}if(!this.localeSettings){this.localeSettings=b.locales.en_US}}}return this.locale
2024-04-25 16:55:18 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-04-25 16:55:18 UTC	8184	IN	Data Raw: 73 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 50 72 69 6d 65 46 61 63 65 73 2e 64 65 62 75 67 28 22 49 6e 69 74 69 61 74 69 6e 67 20 61 6a 61 78 20 72 65 71 75 65 73 74 2e 22 29 3b 50 72 69 6d 65 46 61 63 65 73 2e 63 75 73 74 6f 6d 46 6f 63 75 73 3d 66 61 6c 73 65 3b 76 61 72 20 6e 3d 28 66 2e 67 6c 6f 62 61 6c 3d 3d 3d 74 72 75 65 7c 7c 66 2e 67 6c 6f 62 61 6c 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 3f 74 72 75 65 3a 66 61 6c 73 65 2c 63 3d 6e 75 6c 6c 2c 67 3d 6e 75 6c 6c 2c 76 3d 6e 75 6c 6c 3b 69 66 28 66 2e 6f 6e 73 74 61 72 74 29 7b 76 3d 66 2e 6f 6e 73 74 61 72 74 2e 63 61 6c 6c 28 74 68 69 73 2c 66 29 7d 69 66 28 66 2e 65 78 74 26 26 66 2e 65 78 74 2e 6f 6e 73 74 61 72 74 29 7b 76 3d 66 2e 65 78 74 2e 6f 6e 73 74 61 72 74 2e 63 61 6c 6c 28 74 Data Ascii: send:function(f){PrimeFaces.debug("Initiating ajax request.");PrimeFaces.customFocus=false;var n=(f.global===true\|\|f.global===undefined)?true:false,c=null,g=null,v=null;if(f.onstart){v=f.onstart.call(this,f)}if(f.ext&&f.ext.onstart){v=f.ext.onstart.call(t
2024-04-25 16:55:18 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-25 16:55:18 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 29 3d 3d 3d 22 61 72 67 73 22 29 7b 76 61 72 20 63 3d 64 2e 74 65 78 74 43 6f 6e 74 65 6e 74 7c 7c 64 2e 69 6e 6e 65 72 54 65 78 74 7c 7c 64 2e 74 65 78 74 3b 69 66 28 65 2e 70 66 41 72 67 73 29 7b 76 61 72 20 62 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 63 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 62 29 7b 65 2e 70 66 41 72 67 73 5b 61 5d 3d 62 5b 61 5d 7d 7d 65 6c 73 65 7b 65 2e 70 66 41 72 67 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 63 29 7d 7d 7d 7d 2c 64 6f 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 7d 2c 64 6f 44 65 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3b 24 28 50 72 69 6d 65 46 61 63 65 73 2e 65 73 63 61 70 65 43 6c 69 65 6e 74 Data Ascii: 1ff8)==="args"){var c=d.textContent\|\|d.innerText\|\|d.text;if(e.pfArgs){var b=JSON.parse(c);for(var a in b){e.pfArgs[a]=b[a]}}else{e.pfArgs=JSON.parse(c)}}}},doError:function(a,b){},doDelete:function(a){var b=a.getAttribute("id");$(PrimeFaces.escapeClient
2024-04-25 16:55:18 UTC	6	IN	Data Raw: 31 33 62 39 0d 0a Data Ascii: 13b9
2024-04-25 16:55:18 UTC	5049	IN	Data Raw: 6e 28 61 29 7b 69 66 28 21 74 68 69 73 2e 64 65 73 74 72 6f 79 4c 69 73 74 65 6e 65 72 73 29 7b 74 68 69 73 2e 64 65 73 74 72 6f 79 4c 69 73 74 65 6e 65 72 73 3d 5b 5d 7d 74 68 69 73 2e 64 65 73 74 72 6f 79 4c 69 73 74 65 6e 65 72 73 2e 70 75 73 68 28 61 29 7d 2c 61 64 64 52 65 66 72 65 73 68 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 74 68 69 73 2e 72 65 66 72 65 73 68 4c 69 73 74 65 6e 65 72 73 29 7b 74 68 69 73 2e 72 65 66 72 65 73 68 4c 69 73 74 65 6e 65 72 73 3d 5b 5d 7d 74 68 69 73 2e 72 65 66 72 65 73 68 4c 69 73 74 65 6e 65 72 73 2e 70 75 73 68 28 61 29 7d 7d 29 3b 50 72 69 6d 65 46 61 63 65 73 2e 77 69 64 67 65 74 2e 44 79 6e 61 6d 69 63 4f 76 65 72 6c 61 79 57 69 64 67 65 74 3d 50 72 69 6d 65 46 61 63 65 73 2e 77 Data Ascii: n(a){if(!this.destroyListeners){this.destroyListeners=[]}this.destroyListeners.push(a)},addRefreshListener:function(a){if(!this.refreshListeners){this.refreshListeners=[]}this.refreshListeners.push(a)}});PrimeFaces.widget.DynamicOverlayWidget=PrimeFaces.w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49718	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:18 UTC	747	OUT	GET /securereader/javax.faces.resource/components.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
2024-04-25 16:55:18 UTC	577	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 16:55:18 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 02 May 2024 16:55:18 GMT Last-Modified: Tue, 15 Mar 2022 20:40:34 GMT ETag: W/"430302-1647376834000" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: text/javascript
2024-04-25 16:55:18 UTC	7615	IN	Data Raw: 31 66 66 38 0d 0a 69 66 28 21 50 72 69 6d 65 46 61 63 65 73 2e 64 69 61 6c 6f 67 29 7b 50 72 69 6d 65 46 61 63 65 73 2e 64 69 61 6c 6f 67 3d 7b 7d 3b 50 72 69 6d 65 46 61 63 65 73 2e 64 69 61 6c 6f 67 2e 44 69 61 6c 6f 67 48 61 6e 64 6c 65 72 3d 7b 6f 70 65 6e 44 69 61 6c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 66 69 6e 64 52 6f 6f 74 57 69 6e 64 6f 77 28 29 2c 6b 3d 66 2e 73 6f 75 72 63 65 43 6f 6d 70 6f 6e 65 6e 74 49 64 2b 22 5f 64 6c 67 22 3b 69 66 28 68 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6b 29 29 7b 72 65 74 75 72 6e 7d 76 61 72 20 6a 3d 66 2e 73 6f 75 72 63 65 43 6f 6d 70 6f 6e 65 6e 74 49 64 2e 72 65 70 6c 61 63 65 28 2f 3a 2f 67 2c 22 5f 22 29 2b 22 5f 64 6c 67 77 69 64 Data Ascii: 1ff8if(!PrimeFaces.dialog){PrimeFaces.dialog={};PrimeFaces.dialog.DialogHandler={openDialog:function(f){var h=this.findRootWindow(),k=f.sourceComponentId+"_dlg";if(h.document.getElementById(k)){return}var j=f.sourceComponentId.replace(/:/g,"_")+"_dlgwid
2024-04-25 16:55:18 UTC	575	IN	Data Raw: 28 29 7d 2c 62 69 6e 64 4b 65 79 45 76 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 68 65 61 64 65 72 73 2e 6f 6e 28 22 66 6f 63 75 73 2e 61 63 63 6f 72 64 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 22 75 69 2d 74 61 62 73 2d 6f 75 74 6c 69 6e 65 22 29 7d 29 2e 6f 6e 28 22 62 6c 75 72 2e 61 63 63 6f 72 64 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 69 2d 74 61 62 73 2d 6f 75 74 6c 69 6e 65 22 29 7d 29 2e 6f 6e 28 22 6b 65 79 64 6f 77 6e 2e 61 63 63 6f 72 64 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 24 2e 75 69 2e 6b 65 79 43 6f 64 65 2c 61 3d 63 2e 77 68 69 63 68 3b 69 66 28 61 3d 3d 3d Data Ascii: ()},bindKeyEvents:function(){this.headers.on("focus.accordion",function(){$(this).addClass("ui-tabs-outline")}).on("blur.accordion",function(){$(this).removeClass("ui-tabs-outline")}).on("keydown.accordion",function(c){var b=$.ui.keyCode,a=c.which;if(a===
2024-04-25 16:55:18 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-25 16:55:18 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 29 29 7d 7d 7d 2c 73 65 6c 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 70 61 6e 65 6c 73 2e 65 71 28 63 29 3b 69 66 28 74 68 69 73 2e 63 66 67 2e 6f 6e 54 61 62 43 68 61 6e 67 65 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 63 66 67 2e 6f 6e 54 61 62 43 68 61 6e 67 65 2e 63 61 6c 6c 28 74 68 69 73 2c 62 29 3b 69 66 28 61 3d 3d 3d 66 61 6c 73 65 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 7d 76 61 72 20 64 3d 74 68 69 73 2e 63 66 67 2e 64 79 6e 61 6d 69 63 26 26 21 74 68 69 73 2e 69 73 4c 6f 61 64 65 64 28 62 29 3b 69 66 28 74 68 69 73 2e 63 66 67 2e 6d 75 6c 74 69 70 6c 65 29 7b 74 68 69 73 2e 61 64 64 54 6f 53 65 6c 65 63 74 69 6f 6e 28 63 29 7d 65 6c 73 65 7b 74 68 69 73 2e 63 66 67 2e 61 63 74 69 76 65 Data Ascii: 1ff8))}}},select:function(c){var b=this.panels.eq(c);if(this.cfg.onTabChange){var a=this.cfg.onTabChange.call(this,b);if(a===false){return false}}var d=this.cfg.dynamic&&!this.isLoaded(b);if(this.cfg.multiple){this.addToSelection(c)}else{this.cfg.active
2024-04-25 16:55:18 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-04-25 16:55:18 UTC	8184	IN	Data Raw: 6f 77 6e 2e 6f 66 66 28 29 2e 70 72 6f 70 28 22 64 69 73 61 62 6c 65 64 22 2c 74 72 75 65 29 2e 61 64 64 43 6c 61 73 73 28 22 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 22 29 7d 7d 2c 65 6e 61 62 6c 65 44 72 6f 70 64 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 2e 70 72 6f 70 28 22 64 69 73 61 62 6c 65 64 22 29 29 7b 74 68 69 73 2e 62 69 6e 64 44 72 6f 70 64 6f 77 6e 45 76 65 6e 74 73 28 29 3b 74 68 69 73 2e 64 72 6f 70 64 6f 77 6e 2e 70 72 6f 70 28 22 64 69 73 61 62 6c 65 64 22 2c 66 61 6c 73 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 75 69 2d 73 74 61 74 65 2d 64 69 73 61 62 6c 65 64 22 29 7d 7d 2c 62 69 6e 64 4b 65 79 45 76 65 Data Ascii: own.off().prop("disabled",true).addClass("ui-state-disabled")}},enableDropdown:function(){if(this.dropdown.length&&this.dropdown.prop("disabled")){this.bindDropdownEvents();this.dropdown.prop("disabled",false).removeClass("ui-state-disabled")}},bindKeyEve
2024-04-25 16:55:18 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-25 16:55:18 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 6f 61 64 22 2c 76 61 6c 75 65 3a 74 72 75 65 7d 29 7d 69 66 28 74 68 69 73 2e 68 61 73 42 65 68 61 76 69 6f 72 28 22 71 75 65 72 79 22 29 29 7b 74 68 69 73 2e 63 61 6c 6c 42 65 68 61 76 69 6f 72 28 22 71 75 65 72 79 22 2c 62 29 7d 65 6c 73 65 7b 50 72 69 6d 65 46 61 63 65 73 2e 61 6a 61 78 2e 52 65 71 75 65 73 74 2e 68 61 6e 64 6c 65 28 62 29 7d 7d 2c 73 68 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 61 6c 69 67 6e 50 61 6e 65 6c 28 29 3b 69 66 28 74 68 69 73 2e 63 66 67 2e 65 66 66 65 63 74 29 7b 74 68 69 73 2e 70 61 6e 65 6c 2e 73 68 6f 77 28 74 68 69 73 2e 63 66 67 2e 65 66 66 65 63 74 2c 7b 7d 2c 74 68 69 73 2e 63 66 67 2e 65 66 66 65 63 74 44 75 72 61 74 69 6f 6e 29 7d 65 6c 73 65 7b 74 68 69 73 2e 70 61 6e 65 6c 2e 73 Data Ascii: 1ff8oad",value:true})}if(this.hasBehavior("query")){this.callBehavior("query",b)}else{PrimeFaces.ajax.Request.handle(b)}},show:function(){this.alignPanel();if(this.cfg.effect){this.panel.show(this.cfg.effect,{},this.cfg.effectDuration)}else{this.panel.s
2024-04-25 16:55:18 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-04-25 16:55:18 UTC	8184	IN	Data Raw: 69 64 67 65 74 2e 65 78 74 65 6e 64 28 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 68 69 73 2e 5f 73 75 70 65 72 28 62 29 3b 74 68 69 73 2e 69 6e 70 75 74 3d 24 28 74 68 69 73 2e 6a 71 49 64 2b 22 5f 69 6e 70 75 74 22 29 3b 74 68 69 73 2e 6a 71 45 6c 3d 74 68 69 73 2e 63 66 67 2e 70 6f 70 75 70 3f 74 68 69 73 2e 69 6e 70 75 74 3a 24 28 74 68 69 73 2e 6a 71 49 64 2b 22 5f 69 6e 6c 69 6e 65 22 29 3b 76 61 72 20 67 3d 74 68 69 73 3b 74 68 69 73 2e 63 6f 6e 66 69 67 75 72 65 4c 6f 63 61 6c 65 28 29 3b 74 68 69 73 2e 62 69 6e 64 44 61 74 65 53 65 6c 65 63 74 4c 69 73 74 65 6e 65 72 28 29 3b 74 68 69 73 2e 62 69 6e 64 56 69 65 77 43 68 61 6e 67 65 4c 69 73 74 65 6e 65 72 28 29 3b 74 68 69 73 2e 62 69 6e 64 43 6c 6f 73 65 4c 69 73 74 65 6e 65 72 28 Data Ascii: idget.extend({init:function(b){this._super(b);this.input=$(this.jqId+"_input");this.jqEl=this.cfg.popup?this.input:$(this.jqId+"_inline");var g=this;this.configureLocale();this.bindDateSelectListener();this.bindViewChangeListener();this.bindCloseListener(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49719	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:18 UTC	732	OUT	GET /securereader/javax.faces.resource/jsf.js.jsf?ln=javax.faces HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
2024-04-25 16:55:18 UTC	576	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 16:55:18 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 02 May 2024 16:55:18 GMT Last-Modified: Tue, 15 Mar 2022 20:40:34 GMT ETag: W/"44376-1647376834000" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: text/javascript
2024-04-25 16:55:18 UTC	7616	IN	Data Raw: 31 66 66 38 0d 0a 69 66 28 74 79 70 65 6f 66 20 4f 70 65 6e 41 6a 61 78 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 4f 70 65 6e 41 6a 61 78 2e 68 75 62 2e 72 65 67 69 73 74 65 72 4c 69 62 72 61 72 79 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 4f 70 65 6e 41 6a 61 78 2e 68 75 62 2e 72 65 67 69 73 74 65 72 4c 69 62 72 61 72 79 28 22 6a 73 66 22 2c 22 77 77 77 2e 73 75 6e 2e 63 6f 6d 22 2c 22 32 2e 32 22 2c 6e 75 6c 6c 29 7d 69 66 28 21 28 28 6a 73 66 26 26 6a 73 66 2e 73 70 65 63 76 65 72 73 69 6f 6e 26 26 6a 73 66 2e 73 70 65 63 76 65 72 73 69 6f 6e 3e 3d 32 30 30 30 30 29 26 26 28 6a 73 66 2e 69 6d 70 6c 76 65 72 73 69 6f 6e 26 26 6a 73 66 2e 69 6d 70 6c 76 65 72 73 69 6f 6e 3e 3d 33 29 29 29 7b 76 61 72 20 6a 73 66 3d 7b 7d Data Ascii: 1ff8if(typeof OpenAjax!=="undefined"&&typeof OpenAjax.hub.registerLibrary!=="undefined"){OpenAjax.hub.registerLibrary("jsf","www.sun.com","2.2",null)}if(!((jsf&&jsf.specversion&&jsf.specversion>=20000)&&(jsf.implversion&&jsf.implversion>=3))){var jsf={}
2024-04-25 16:55:18 UTC	574	IN	Data Raw: 69 70 74 22 29 7b 63 6f 6e 74 69 6e 75 65 7d 7d 73 63 72 69 70 74 73 2e 70 75 73 68 28 73 63 72 69 70 74 53 74 72 29 7d 72 65 74 75 72 6e 20 73 63 72 69 70 74 73 7d 3b 76 61 72 20 72 65 6d 6f 76 65 53 63 72 69 70 74 73 3d 66 75 6e 63 74 69 6f 6e 20 72 65 6d 6f 76 65 53 63 72 69 70 74 73 28 73 74 72 29 7b 72 65 74 75 72 6e 20 73 74 72 2e 72 65 70 6c 61 63 65 28 2f 3c 73 63 72 69 70 74 5b 5e 3e 5d 2a 74 79 70 65 3d 22 74 65 78 74 5c 2f 6a 61 76 61 73 63 72 69 70 74 22 5b 5e 3e 5d 2a 3e 28 5b 5c 53 5c 73 5d 2a 3f 29 3c 5c 2f 73 63 72 69 70 74 3e 2f 69 67 6d 2c 22 22 29 7d 3b 76 61 72 20 72 75 6e 53 63 72 69 70 74 73 3d 66 75 6e 63 74 69 6f 6e 20 72 75 6e 53 63 72 69 70 74 73 28 73 63 72 69 70 74 73 29 7b 69 66 28 21 73 63 72 69 70 74 73 7c 7c 73 63 72 69 70 Data Ascii: ipt"){continue}}scripts.push(scriptStr)}return scripts};var removeScripts=function removeScripts(str){return str.replace(/<script[^>]type="text\/javascript"[^>]>([\S\s]*?)<\/script>/igm,"")};var runScripts=function runScripts(scripts){if(!scripts\|\|scrip
2024-04-25 16:55:18 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-25 16:55:18 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 75 6e 53 63 72 69 70 74 28 68 65 61 64 2c 6c 6f 61 64 65 64 53 63 72 69 70 74 55 72 6c 73 2c 73 63 72 69 70 74 73 2c 30 29 7d 3b 76 61 72 20 72 75 6e 53 63 72 69 70 74 3d 66 75 6e 63 74 69 6f 6e 20 72 75 6e 53 63 72 69 70 74 28 68 65 61 64 2c 6c 6f 61 64 65 64 53 63 72 69 70 74 55 72 6c 73 2c 73 63 72 69 70 74 73 2c 69 6e 64 65 78 29 7b 69 66 28 69 6e 64 65 78 3e 3d 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 29 7b 72 65 74 75 72 6e 7d 76 61 72 20 66 69 6e 64 73 72 63 3d 2f 73 72 63 3d 22 28 5b 5c 53 5d 2a 3f 29 22 2f 69 6d 3b 76 61 72 20 73 74 72 69 70 53 74 61 72 74 3d 2f 5e 5c 73 2a 28 3c 21 2d 2d 29 2a 5c 73 2a 28 5c 2f 5c 2f 29 2a 5c 73 2a 28 5c 2f 5c 2a 29 2a 5c Data Ascii: 1ff8cument.documentElement;runScript(head,loadedScriptUrls,scripts,0)};var runScript=function runScript(head,loadedScriptUrls,scripts,index){if(index>=scripts.length){return}var findsrc=/src="([\S]?)"/im;var stripStart=/^\s(...)\s(\/\/)\s(\/\)\
2024-04-25 16:55:18 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-04-25 16:55:18 UTC	8184	IN	Data Raw: 2d 31 7d 7d 63 61 74 63 68 28 65 78 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 29 7b 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6e 61 6d 65 29 7d 7d 7d 7d 3b 76 61 72 20 63 6c 6f 6e 65 41 74 74 72 69 62 75 74 65 73 3d 66 75 6e 63 74 69 6f 6e 20 63 6c 6f 6e 65 41 74 74 72 69 62 75 74 65 73 28 74 61 72 67 65 74 2c 73 6f 75 72 63 65 29 7b 76 61 72 20 63 6f 72 65 45 6c 65 6d 65 6e 74 50 72 6f 70 65 72 74 69 65 73 3d 5b 22 63 6c 61 73 73 4e 61 6d 65 22 2c 22 74 69 74 6c 65 22 2c 22 6c 61 6e 67 22 2c 22 78 6d 6c 6c 61 6e 67 22 5d 3b 76 61 72 20 69 6e 70 75 74 45 6c 65 6d 65 6e 74 50 72 6f 70 65 72 74 69 65 73 3d 5b 22 6e 61 6d 65 22 2c 22 76 61 6c 75 65 22 2c 22 73 69 7a 65 22 2c 22 6d 61 78 4c 65 Data Ascii: -1}}catch(ex){return function(name){return element.getAttribute(name)}}}};var cloneAttributes=function cloneAttributes(target,source){var coreElementProperties=["className","title","lang","xmllang"];var inputElementProperties=["name","value","size","maxLe
2024-04-25 16:55:18 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-25 16:55:18 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 24 2f 67 2c 22 22 29 3b 76 61 72 20 70 61 72 73 65 72 45 6c 65 6d 65 6e 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 76 61 72 20 74 61 67 3d 64 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 76 61 72 20 74 61 62 6c 65 45 6c 65 6d 65 6e 74 73 3d 5b 22 74 64 22 2c 22 74 68 22 2c 22 74 72 22 2c 22 74 62 6f 64 79 22 2c 22 74 68 65 61 64 22 2c 22 74 66 6f 6f 74 22 5d 3b 76 61 72 20 69 73 49 6e 54 61 62 6c 65 3d 66 61 6c 73 65 3b 66 6f 72 28 76 61 72 20 74 65 69 3d 30 2c 74 65 6c 3d 74 61 62 6c 65 45 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 65 69 3c 74 65 6c 3b 74 65 69 2b 2b 29 7b 69 66 28 74 61 62 6c 65 45 6c 65 6d 65 6e 74 73 5b 74 65 69 5d 3d 3d 74 61 67 29 Data Ascii: 1ff8$/g,"");var parserElement=document.createElement("div");var tag=d.nodeName.toLowerCase();var tableElements=["td","th","tr","tbody","thead","tfoot"];var isInTable=false;for(var tei=0,tel=tableElements.length;tei<tel;tei++){if(tableElements[tei]==tag)
2024-04-25 16:55:18 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2024-04-25 16:55:18 UTC	8184	IN	Data Raw: 72 6f 6a 65 63 74 53 74 61 67 65 28 29 3d 3d 3d 22 44 65 76 65 6c 6f 70 6d 65 6e 74 22 29 7b 69 66 28 73 74 61 74 75 73 3d 3d 22 73 65 72 76 65 72 45 72 72 6f 72 22 29 7b 61 6c 65 72 74 28 22 73 65 72 76 65 72 45 72 72 6f 72 3a 20 22 2b 73 65 72 76 65 72 45 72 72 6f 72 4e 61 6d 65 2b 22 20 22 2b 73 65 72 76 65 72 45 72 72 6f 72 4d 65 73 73 61 67 65 29 7d 65 6c 73 65 7b 61 6c 65 72 74 28 73 74 61 74 75 73 2b 22 3a 20 22 2b 64 61 74 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 29 7d 7d 7d 3b 76 61 72 20 73 65 6e 64 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 45 76 65 6e 74 28 72 65 71 75 65 73 74 2c 63 6f 6e 74 65 78 74 2c 73 74 61 74 75 73 29 7b 76 61 72 20 64 61 74 61 3d 7b 7d 3b 64 61 74 61 2e 74 79 70 65 3d 22 65 76 65 6e 74 22 3b 64 61 74 61 2e Data Ascii: rojectStage()==="Development"){if(status=="serverError"){alert("serverError: "+serverErrorName+" "+serverErrorMessage)}else{alert(status+": "+data.description)}}};var sendEvent=function sendEvent(request,context,status){var data={};data.type="event";data.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49721	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:18 UTC	750	OUT	GET /securereader/javax.faces.resource/hotkey/hotkey.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
2024-04-25 16:55:18 UTC	569	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 16:55:18 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 02 May 2024 16:55:18 GMT Last-Modified: Tue, 15 Mar 2022 20:40:34 GMT ETag: W/"2266-1647376834000" Content-Length: 2266 X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: text/javascript
2024-04-25 16:55:18 UTC	2266	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 68 6f 74 6b 65 79 73 3d 7b 76 65 72 73 69 6f 6e 3a 22 30 2e 32 2e 30 22 2c 73 70 65 63 69 61 6c 4b 65 79 73 3a 7b 38 3a 22 62 61 63 6b 73 70 61 63 65 22 2c 39 3a 22 74 61 62 22 2c 31 30 3a 22 72 65 74 75 72 6e 22 2c 31 33 3a 22 72 65 74 75 72 6e 22 2c 31 36 3a 22 73 68 69 66 74 22 2c 31 37 3a 22 63 74 72 6c 22 2c 31 38 3a 22 61 6c 74 22 2c 31 39 3a 22 70 61 75 73 65 22 2c 32 30 3a 22 63 61 70 73 6c 6f 63 6b 22 2c 32 37 3a 22 65 73 63 22 2c 33 32 3a 22 73 70 61 63 65 22 2c 33 33 3a 22 70 61 67 65 75 70 22 2c 33 34 3a 22 70 61 67 65 64 6f 77 6e 22 2c 33 35 3a 22 65 6e 64 22 2c 33 36 3a 22 68 6f 6d 65 22 2c 33 37 3a 22 6c 65 66 74 22 2c 33 38 3a 22 75 70 22 2c 33 39 3a 22 72 69 67 68 74 22 2c 34 30 3a 22 64 6f 77 Data Ascii: (function(b){b.hotkeys={version:"0.2.0",specialKeys:{8:"backspace",9:"tab",10:"return",13:"return",16:"shift",17:"ctrl",18:"alt",19:"pause",20:"capslock",27:"esc",32:"space",33:"pageup",34:"pagedown",35:"end",36:"home",37:"left",38:"up",39:"right",40:"dow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49720	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:18 UTC	754	OUT	GET /formpostdir/Image?i=4 HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
2024-04-25 16:55:18 UTC	515	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 16:55:18 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 26204 Cache-Control: max-age=0 Expires: Thu, 25 Apr 2024 16:55:18 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: image/jpeg
2024-04-25 16:55:18 UTC	7677	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff ed 00 2c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 03 ed 00 00 00 00 00 10 01 2c 00 00 00 01 00 01 01 2c 00 00 00 01 00 01 ff e1 45 15 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0d 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 Data Ascii: JFIF,,"ExifMM*,Photoshop 3.08BIM,,Ehttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c
2024-04-25 16:55:18 UTC	507	IN	Data Raw: 73 73 61 62 4a 4a 55 6b 49 57 50 74 54 46 58 66 6b 68 2f 0d 0a 7a 6b 4a 72 76 35 6e 65 5a 4c 72 54 54 35 64 69 30 36 77 73 62 59 33 46 31 65 72 63 74 4b 51 78 59 4a 48 47 46 4d 61 62 75 53 54 31 36 4b 63 56 57 66 6e 31 2b 66 49 2f 4c 6e 7a 4a 70 2b 6d 66 34 63 74 74 5a 4e 35 5a 69 35 2b 73 0d 0a 54 79 2b 6d 79 66 76 58 54 67 42 36 63 6d 33 77 31 36 34 71 37 38 68 66 7a 35 48 35 6a 65 5a 4e 51 30 7a 2f 41 41 35 62 61 4d 62 4f 7a 4e 7a 39 59 67 6c 39 52 6e 2f 65 6f 6e 41 6a 30 34 39 76 69 72 31 78 56 37 6c 69 72 77 7a 38 0d 0a 30 76 38 41 6e 4b 2f 79 66 35 52 76 70 74 49 30 4f 33 50 6d 4c 56 34 43 55 75 47 6a 6b 45 56 70 43 34 32 4b 4e 4e 52 79 37 4c 33 43 43 6e 62 6b 44 69 72 79 66 2f 6f 64 6e 38 77 76 72 58 4c 39 42 36 54 39 56 37 52 63 62 6e 31 4f 0d 0a Data Ascii: ssabJJUkIWPtTFXfkh/zkJrv5neZLrTT5di06wsbY3F1erctKQxYJHGFMabuST16KcVWfn1+fI/LnzJp+mf4cttZN5Zi5+sTy+myfvXTgB6cm3w164q78hfz5H5jeZNQ0z/AA5baMbOzNz9Ygl9Rn/eonAj049vir1xV7lirwz80v8AnK/yf5RvptI0O3PmLV4CUuGjkEVpC42KNNRy7L3CCnbkDiryf/odn8wvrXL9B6T9V7Rcbn1O
2024-04-25 16:55:18 UTC	8192	IN	Data Raw: 36 62 66 36 5a 36 4d 6b 63 55 4c 73 34 6b 68 6c 35 41 74 38 57 2f 77 4d 6f 72 38 78 69 72 4e 66 7a 54 38 2b 51 2b 52 50 49 32 70 65 5a 35 49 46 75 6e 73 68 47 49 4c 56 6e 39 0d 0a 50 31 5a 4a 5a 56 6a 56 65 56 47 70 39 71 70 32 36 44 46 58 67 4f 6b 66 38 35 6e 36 2f 71 75 71 32 57 6c 32 66 6b 2b 42 37 75 2f 6e 69 74 62 64 66 72 72 37 79 54 4f 45 51 66 33 50 38 7a 59 71 2b 56 4d 56 65 34 65 54 50 2b 63 73 0d 0a 66 4f 66 6c 54 79 74 70 76 6c 32 7a 30 66 54 70 37 58 54 49 52 42 46 4e 4d 4a 2f 55 5a 51 53 61 74 78 6b 55 56 33 37 44 46 55 36 2f 36 48 61 38 2f 77 44 2f 41 46 59 74 4b 2b 36 35 2f 77 43 71 75 4b 73 35 2f 4a 66 2f 41 4a 79 64 0d 0a 38 32 2b 66 50 7a 42 73 66 4c 57 6f 36 56 59 57 74 70 64 52 7a 75 38 31 75 4a 76 55 42 68 68 61 51 55 35 79 4d 75 35 Data Ascii: 6bf6Z6MkcULs4khl5At8W/wMor8xirNfzT8+Q+RPI2peZ5IFunshGILVn9P1ZJZVjVeVGp9qp26DFXgOkf85n6/quq2Wl2fk+B7u/nitbdfrr7yTOEQf3P8zYq+VMVe4eTP+csfOflTytpvl2z0fTp7XTIRBFNMJ/UZQSatxkUV37DFU6/6Ha8/wD/AFYtK+65/wCquKs5/Jf/AJyd82+fPzBsfLWo6VYWtpdRzu81uJvUBhhaQU5yMu5
2024-04-25 16:55:18 UTC	8176	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-25 16:55:18 UTC	1652	IN	Data Raw: b6 a3 36 97 e2 2f 0c 6a d9 8e 0d 5e ce 54 d9 2c 62 4c 11 b2 58 5d 65 82 e1 55 d0 93 0c a1 64 4c 2b 00 7e 91 7c 4c ff 00 83 d1 5b e3 37 c3 9d 7b c2 3e 28 fd 97 f4 3d 5b c3 7e 28 d3 a7 d2 75 5b 29 3c 6d 20 5b bb 59 e3 68 a5 8c 9f b1 71 b9 19 86 7b 66 bf 32 7f e0 8d ff 00 11 b5 4f 85 7f f0 55 df d9 d7 56 d1 ee a7 b3 ba 93 e2 16 8d a6 ca f0 e7 7b db 5d de 47 69 73 1f 1d 77 c1 3c a8 47 70 e4 57 ed b6 bd ff 00 07 8f 7e cb 76 ff 00 0f 26 ba d2 fe 07 fc 4a bc f1 5a da 6e 87 4d ba d3 34 9b 6b 07 b9 da 0f 96 d7 6b 71 23 ac 5b b2 3c c1 6e cd 81 9f 2f b5 77 9f f0 40 3f f8 2f ba ff 00 c1 52 be 38 78 9b e1 cf 8e 3e 11 69 3e 1d f1 65 8f 9d af 68 5a bf 86 b4 97 9f 4b 82 c1 1c 62 de f5 db 73 5b cf 19 28 12 72 56 39 89 db 88 a4 08 26 00 f3 bf f8 3d 6f f6 4b ff 00 84 d3 f6 Data Ascii: 6/j^T,bLX]eUdL+~\|L[7{>(=[~(u[)<m [Yhq{f2OUV{]Gisw<GpW~v&JZnM4kkq#[<n/w@?/R8x>i>ehZKbs[(rV9&=oK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49723	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:19 UTC	764	OUT	GET /formpostdir/images/TipClose.gif HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
2024-04-25 16:55:19 UTC	613	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 16:55:19 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes ETag: W/"64-1662740746000" Last-Modified: Fri, 09 Sep 2022 16:25:46 GMT Content-Length: 64 Cache-Control: max-age=2592000 Expires: Sat, 25 May 2024 16:55:19 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: image/gif
2024-04-25 16:55:19 UTC	64	IN	Data Raw: 47 49 46 38 39 61 08 00 08 00 91 02 00 99 8d 6c 67 5f 49 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 08 00 08 00 00 02 11 0c 84 02 66 b8 f7 5e 5a 6d 86 aa 8c 94 99 bb 50 00 00 3b Data Ascii: GIF89alg_I!,f^ZmP;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49724	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:19 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 16:55:19 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0790) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=137296 Date: Thu, 25 Apr 2024 16:55:19 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49725	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:19 UTC	766	OUT	GET /formpostdir/images/BangBullet.gif HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
2024-04-25 16:55:19 UTC	613	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 16:55:19 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes ETag: W/"79-1662740746000" Last-Modified: Fri, 09 Sep 2022 16:25:46 GMT Content-Length: 79 Cache-Control: max-age=2592000 Expires: Sat, 25 May 2024 16:55:19 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: image/gif
2024-04-25 16:55:19 UTC	79	IN	Data Raw: 47 49 46 38 39 61 08 00 08 00 a2 04 00 ff ff 00 66 66 00 00 00 00 99 99 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 04 00 2c 00 00 00 00 08 00 08 00 00 03 14 48 04 0c ba 40 08 06 e3 6c 2c 04 cc c6 e0 20 a4 51 0a a6 24 00 3b Data Ascii: GIF89aff!,H@l, Q$;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49726	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:19 UTC	435	OUT	GET /formpostdir/Image?i=4 HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
2024-04-25 16:55:20 UTC	515	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 16:55:20 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Length: 26204 Cache-Control: max-age=0 Expires: Thu, 25 Apr 2024 16:55:20 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: image/jpeg
2024-04-25 16:55:20 UTC	7677	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff ed 00 2c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 03 ed 00 00 00 00 00 10 01 2c 00 00 00 01 00 01 01 2c 00 00 00 01 00 01 ff e1 45 15 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0d 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 Data Ascii: JFIF,,"ExifMM*,Photoshop 3.08BIM,,Ehttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c
2024-04-25 16:55:20 UTC	507	IN	Data Raw: 73 73 61 62 4a 4a 55 6b 49 57 50 74 54 46 58 66 6b 68 2f 0d 0a 7a 6b 4a 72 76 35 6e 65 5a 4c 72 54 54 35 64 69 30 36 77 73 62 59 33 46 31 65 72 63 74 4b 51 78 59 4a 48 47 46 4d 61 62 75 53 54 31 36 4b 63 56 57 66 6e 31 2b 66 49 2f 4c 6e 7a 4a 70 2b 6d 66 34 63 74 74 5a 4e 35 5a 69 35 2b 73 0d 0a 54 79 2b 6d 79 66 76 58 54 67 42 36 63 6d 33 77 31 36 34 71 37 38 68 66 7a 35 48 35 6a 65 5a 4e 51 30 7a 2f 41 41 35 62 61 4d 62 4f 7a 4e 7a 39 59 67 6c 39 52 6e 2f 65 6f 6e 41 6a 30 34 39 76 69 72 31 78 56 37 6c 69 72 77 7a 38 0d 0a 30 76 38 41 6e 4b 2f 79 66 35 52 76 70 74 49 30 4f 33 50 6d 4c 56 34 43 55 75 47 6a 6b 45 56 70 43 34 32 4b 4e 4e 52 79 37 4c 33 43 43 6e 62 6b 44 69 72 79 66 2f 6f 64 6e 38 77 76 72 58 4c 39 42 36 54 39 56 37 52 63 62 6e 31 4f 0d 0a Data Ascii: ssabJJUkIWPtTFXfkh/zkJrv5neZLrTT5di06wsbY3F1erctKQxYJHGFMabuST16KcVWfn1+fI/LnzJp+mf4cttZN5Zi5+sTy+myfvXTgB6cm3w164q78hfz5H5jeZNQ0z/AA5baMbOzNz9Ygl9Rn/eonAj049vir1xV7lirwz80v8AnK/yf5RvptI0O3PmLV4CUuGjkEVpC42KNNRy7L3CCnbkDiryf/odn8wvrXL9B6T9V7Rcbn1O
2024-04-25 16:55:20 UTC	8192	IN	Data Raw: 36 62 66 36 5a 36 4d 6b 63 55 4c 73 34 6b 68 6c 35 41 74 38 57 2f 77 4d 6f 72 38 78 69 72 4e 66 7a 54 38 2b 51 2b 52 50 49 32 70 65 5a 35 49 46 75 6e 73 68 47 49 4c 56 6e 39 0d 0a 50 31 5a 4a 5a 56 6a 56 65 56 47 70 39 71 70 32 36 44 46 58 67 4f 6b 66 38 35 6e 36 2f 71 75 71 32 57 6c 32 66 6b 2b 42 37 75 2f 6e 69 74 62 64 66 72 72 37 79 54 4f 45 51 66 33 50 38 7a 59 71 2b 56 4d 56 65 34 65 54 50 2b 63 73 0d 0a 66 4f 66 6c 54 79 74 70 76 6c 32 7a 30 66 54 70 37 58 54 49 52 42 46 4e 4d 4a 2f 55 5a 51 53 61 74 78 6b 55 56 33 37 44 46 55 36 2f 36 48 61 38 2f 77 44 2f 41 46 59 74 4b 2b 36 35 2f 77 43 71 75 4b 73 35 2f 4a 66 2f 41 4a 79 64 0d 0a 38 32 2b 66 50 7a 42 73 66 4c 57 6f 36 56 59 57 74 70 64 52 7a 75 38 31 75 4a 76 55 42 68 68 61 51 55 35 79 4d 75 35 Data Ascii: 6bf6Z6MkcULs4khl5At8W/wMor8xirNfzT8+Q+RPI2peZ5IFunshGILVn9P1ZJZVjVeVGp9qp26DFXgOkf85n6/quq2Wl2fk+B7u/nitbdfrr7yTOEQf3P8zYq+VMVe4eTP+csfOflTytpvl2z0fTp7XTIRBFNMJ/UZQSatxkUV37DFU6/6Ha8/wD/AFYtK+65/wCquKs5/Jf/AJyd82+fPzBsfLWo6VYWtpdRzu81uJvUBhhaQU5yMu5
2024-04-25 16:55:20 UTC	8176	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-25 16:55:20 UTC	1652	IN	Data Raw: b6 a3 36 97 e2 2f 0c 6a d9 8e 0d 5e ce 54 d9 2c 62 4c 11 b2 58 5d 65 82 e1 55 d0 93 0c a1 64 4c 2b 00 7e 91 7c 4c ff 00 83 d1 5b e3 37 c3 9d 7b c2 3e 28 fd 97 f4 3d 5b c3 7e 28 d3 a7 d2 75 5b 29 3c 6d 20 5b bb 59 e3 68 a5 8c 9f b1 71 b9 19 86 7b 66 bf 32 7f e0 8d ff 00 11 b5 4f 85 7f f0 55 df d9 d7 56 d1 ee a7 b3 ba 93 e2 16 8d a6 ca f0 e7 7b db 5d de 47 69 73 1f 1d 77 c1 3c a8 47 70 e4 57 ed b6 bd ff 00 07 8f 7e cb 76 ff 00 0f 26 ba d2 fe 07 fc 4a bc f1 5a da 6e 87 4d ba d3 34 9b 6b 07 b9 da 0f 96 d7 6b 71 23 ac 5b b2 3c c1 6e cd 81 9f 2f b5 77 9f f0 40 3f f8 2f ba ff 00 c1 52 be 38 78 9b e1 cf 8e 3e 11 69 3e 1d f1 65 8f 9d af 68 5a bf 86 b4 97 9f 4b 82 c1 1c 62 de f5 db 73 5b cf 19 28 12 72 56 39 89 db 88 a4 08 26 00 f3 bf f8 3d 6f f6 4b ff 00 84 d3 f6 Data Ascii: 6/j^T,bLX]eUdL+~\|L[7{>(=[~(u[)<m [Yhq{f2OUV{]Gisw<GpW~v&JZnM4kkq#[<n/w@?/R8x>i>ehZKbs[(rV9&=oK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49728	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:19 UTC	815	OUT	GET /securereader/javax.faces.resource/messages/messages.png.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://securemail.fairview.org/securereader/javax.faces.resource/components.css.jsf?ln=primefaces&v=7.0.17 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
2024-04-25 16:55:20 UTC	570	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 16:55:20 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 02 May 2024 16:55:20 GMT Last-Modified: Tue, 15 Mar 2022 20:40:34 GMT ETag: W/"16755-1647376834000" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: image/png
2024-04-25 16:55:20 UTC	7622	IN	Data Raw: 31 66 66 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 01 fc 08 06 00 00 00 b0 f1 ad 14 00 00 41 3a 49 44 41 54 78 01 b4 57 03 b0 24 4b d3 3d dd 3d 3d 9e b5 06 7b ff b5 9e 6d db b6 6d db b6 6d db b6 ad bb b6 77 af d7 3b 77 ac ae ff 64 45 77 bc 89 79 0a 7d 19 91 51 d5 55 d5 95 27 33 4f 65 57 a3 41 0c a5 94 81 ff 91 b8 7b d7 ef 8f 7f 32 d6 9f 9a dc 7b ef bd 93 89 44 22 66 9a a6 c2 df 08 c7 f1 4f 62 59 96 36 d8 d6 d6 96 79 fb ed b7 db 01 88 2e a3 e2 df 00 f8 a9 9b bf fc f2 cb a7 8c 1a 35 6a ed a6 a6 a6 78 34 1a ed a1 28 0d 9e fc 7d 1f ec ab 3f c7 0d 4a b1 58 ec 6e 6f 6f ef 9c 35 6b d6 d4 c3 0e 3b ec 51 00 3f 53 cb f5 00 44 95 18 3f e2 88 23 4e bc f2 ca 2b 2f 1c 33 66 cc 50 c8 aa 72 19 15 6a ad 56 83 e3 38 a8 51 1d ad 35 8e 39 50 Data Ascii: 1ff8PNGIHDR A:IDATxW$K==={mmmw;wdEwy}QU'3OeWA{2{D"fObY6y.5jx4(}?JXnoo5k;Q?SD?#N+/3fPrjV8Q59P
2024-04-25 16:55:20 UTC	568	IN	Data Raw: 3e 6c d1 e2 0d dc 0b 9f 04 07 af cb e7 9d 0b 23 22 ac 46 d6 01 3f 0f 0d d9 00 06 69 3d 5f 19 15 15 76 25 31 f1 2b f3 e8 d1 54 f2 da 6b 6a e1 ec d9 4a 31 4b 34 85 e3 9e b5 fd 1c 1a 4a 9f 7a 34 a3 05 c1 c1 5b 01 04 bc e9 ef ff 7e 56 cb 96 64 0c 0d b5 16 44 44 d0 e7 81 81 9b 71 0f e8 75 8a e2 26 6a ca 61 b3 e9 98 f9 46 15 a4 0b 60 48 97 2e d5 ed 88 8e 4e e8 69 30 6c 6b 65 d0 77 b6 d4 32 d5 7c ed 9a cc fb cb 35 aa aa 94 de cc d4 65 9a cd d6 5f 3d bd 97 bd 5b 50 60 27 a9 39 e2 4b 8a ab ab 20 d5 f5 20 15 90 ee 7d 7a 66 bd 00 2a 1f 01 d2 eb 54 4f 17 03 c2 25 c9 3e f6 df b5 6d 3b bc af 9b db 17 c1 40 e7 72 53 85 52 77 f9 b2 8e 15 15 c9 5a 90 6f ab bc 76 4d 77 c3 64 2a 3f a3 d7 cf 7c b7 b0 f0 75 02 2c 60 f8 b9 bb 97 1b f4 7a 9b 88 df 26 49 a8 24 dc 13 72 ae 6a 2b Data Ascii: >l#"F?i=_v%1+TkjJ1K4Jz4[~VdDDqu&jaF`H.Ni0lkew2\|5e_=[P`'9K }zfTO%>m;@rSRwZovMwd?\|u,`z&I$rj+
2024-04-25 16:55:20 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-25 16:55:20 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 52 2d 55 6b af 97 95 ff c4 a4 b4 4e d7 22 50 61 be cf ae 78 cb 3a 3d 73 fc 2d 91 f5 f4 d3 57 4f cd 9f 7f 24 7d f3 e6 56 5f 2e 5f 9e b0 7d c1 82 7e e7 df 7e 7b 3a 7f f9 76 7f a7 da da 03 01 35 35 3d aa bd bd 15 8a 8c 54 4a 4a 8a 75 69 b7 6e 9e 59 15 10 f0 21 18 8d be 18 c5 f1 b8 1e f6 f5 4d 2f 8d 8f 23 e3 a3 8f da f2 9e 7b 4e 29 78 fe 79 95 a5 56 2a 7c 7d a1 b5 70 f9 72 0b 0b d3 c5 ac 82 1b 0b 37 6c a8 2c fb e0 03 aa 63 81 ba ec cd 37 c5 89 c9 9a 3b 69 92 2d 83 e7 ce 0e e0 46 2f 3f bf 9e 0e 6d 37 3e 88 88 80 80 ce 5f 7b 7a 9e c8 8b 8c 24 33 a7 b4 24 39 59 2d 59 bc d8 56 ba e6 3d b2 6c df 4e 55 5c 0d 51 cd 97 ea 2a b6 8a 7d fb 94 f2 2d 5b 6a 4b de 78 5d 31 3e 39 9a d2 42 43 85 f3 53 71 c1 c1 dd ff ce 4d 89 54 1f 84 10 b3 d7 78 fb bc 75 22 Data Ascii: 1ff8R-UkN"Pax:=s-WO$}V_._}~~{:v55=TJJuinY!M/#{N)xyV\|}pr7l,c7;i-F/?m7>_{z$3$9Y-YV=lNU\Q}-[jKx]1>9BCSqMTxu"
2024-04-25 16:55:20 UTC	5	IN	Data Raw: 31 38 33 0d 0a Data Ascii: 183
2024-04-25 16:55:20 UTC	387	IN	Data Raw: c8 ee 23 9f 5d 9b ee 40 73 ad cf 1e cb c0 82 30 a2 c6 cf 1d 7e 5a 34 61 ed 53 ce f5 2b d6 69 51 7b 99 9d ce 0a a7 30 a0 22 31 3d 39 76 e4 fb ce ae f5 19 39 61 91 8a 3e b0 40 65 7e 89 16 8a 35 5d e4 17 b2 00 fb 82 64 19 18 fa 2b 9e f4 01 62 e9 65 07 00 cb 3a bf f7 52 b4 07 7d f6 44 16 c4 50 24 f6 be 47 9c 13 4b d0 44 cf cd 29 b2 8c 10 c9 23 61 fa ef 87 de 7c 1d 44 ea 10 90 65 c8 f7 cb 2a 16 33 ed 8d e3 de 75 fe 9e ca 82 08 22 e9 fd 13 da 45 24 71 9e 5b c8 01 96 90 14 89 82 a2 1e c4 98 a3 61 8d fb 04 28 ca a0 58 b0 ce 92 4e 2e 0b 21 ec b3 d3 d7 8d 9b 14 f4 c5 08 b1 00 a0 69 d2 a1 17 47 6d 6e 2b 14 5d 4f 24 1b 2c 8a c5 98 62 93 00 ee ae 54 c6 29 b5 37 e0 7a 60 e5 41 b9 19 3f 65 a9 66 4e ee f5 0d a0 fb dc 11 3b f0 da 9f a6 b4 1b e5 1d 07 9d 43 22 2a 23 22 4a Data Ascii: #]@s0~Z4aS+iQ{0"1=9v9a>@e~5]d+be:R}DP$GKD)#a\|De3u"E$q[a(XN.!iGmn+]O$,bT)7z`A?efN;C"#"J
2024-04-25 16:55:20 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-25 16:55:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49727	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:19 UTC	767	OUT	GET /formpostdir/images/CheckBullet.gif HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
2024-04-25 16:55:20 UTC	613	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 16:55:20 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes ETag: W/"64-1662740746000" Last-Modified: Fri, 09 Sep 2022 16:25:46 GMT Content-Length: 64 Cache-Control: max-age=2592000 Expires: Sat, 25 May 2024 16:55:20 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: image/gif
2024-04-25 16:55:20 UTC	64	IN	Data Raw: 47 49 46 38 39 61 08 00 08 00 91 03 00 00 bf 00 ff ff ff 80 ff 80 ff ff ff 21 f9 04 01 00 00 03 00 2c 00 00 00 00 08 00 08 00 00 02 11 dc 80 60 97 c8 1d 1a 0a 62 56 0a b1 43 d5 99 66 14 00 3b Data Ascii: GIF89a!,`bVCf;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49731	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:19 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 16:55:20 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=137296 Date: Thu, 25 Apr 2024 16:55:19 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-25 16:55:20 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49729	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:19 UTC	757	OUT	GET /formpostdir/fonts/sourcesanspro-regular.ttf.woff HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://securemail.fairview.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
2024-04-25 16:55:20 UTC	615	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 16:55:20 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes ETag: W/"128612-1662740748000" Last-Modified: Fri, 09 Sep 2022 16:25:48 GMT Content-Length: 128612 Cache-Control: max-age=0 Expires: Thu, 25 Apr 2024 16:55:20 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: font/woff
2024-04-25 16:55:20 UTC	7577	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 01 f6 64 00 13 00 00 00 04 7c 48 00 02 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 42 41 53 45 00 01 e5 18 00 00 00 3a 00 00 00 3a 8b 19 94 b1 44 53 49 47 00 01 e5 54 00 00 11 0d 00 00 18 fc 90 16 06 f3 47 44 45 46 00 01 76 8c 00 00 02 78 00 00 03 c2 83 24 87 b4 47 50 4f 53 00 01 79 04 00 00 51 4d 00 01 02 16 0c ca 3b 13 47 53 55 42 00 01 ca 54 00 00 1a c2 00 00 3c 5a 92 a2 9d 89 4f 53 2f 32 00 00 02 24 00 00 00 59 00 00 00 60 5d b0 d7 80 63 6d 61 70 00 00 0e 38 00 00 1d 58 00 00 36 86 97 c0 f1 5b 63 76 74 20 00 00 2c e8 00 00 00 2a 00 00 00 2a 01 22 0d ca 66 70 67 6d 00 00 2b 90 00 00 01 02 00 00 01 73 06 59 9c 37 67 61 73 70 00 01 76 84 00 00 00 08 00 00 00 08 ff ff 00 03 67 6c 79 66 00 00 3f ec 00 01 0e Data Ascii: wOFFd\|HBASE::DSIGTGDEFvx$GPOSyQM;GSUBT<ZOS/2$Y`]cmap8X6[cvt ,**"fpgm+sY7gaspvglyf?
2024-04-25 16:55:20 UTC	607	IN	Data Raw: a0 7f e6 54 a1 9e d9 df 0b c7 a9 af 14 fc a5 57 76 dd c2 f1 d9 b5 4a 9d b8 33 bb 3e 01 b1 06 7d 53 40 72 22 74 8e 82 7c 0d bd 53 40 72 1f 74 8f 82 bc 0c fd 53 80 50 47 a0 83 94 16 e0 68 85 1e c4 7a 4c c6 b9 d9 9e a5 66 0c c2 da 20 e3 6c d0 50 a1 81 d9 3e 85 96 d9 de 1a a9 6f 16 f6 23 2c c9 f6 00 68 30 d6 13 32 5a 81 13 15 7a 08 6b e3 8c f3 b2 bd 09 c8 1b d0 99 05 08 f1 c8 4d 33 2e 02 cd 14 7a 2c db b3 d0 46 63 ac 10 67 a8 77 7c 4a 46 6b 70 aa 42 43 b3 b3 10 2e d6 38 2c c4 e2 88 ec 2c 04 f1 c3 33 14 42 0d 82 4e 54 50 cf a0 17 0b d0 d3 d9 59 08 a8 5b 7c 8e 42 4f 66 67 27 74 c8 ce 45 e8 9c ed b9 55 16 c3 e7 65 2c 06 e7 2b 52 7b f8 82 8c 1b b3 fd 5f a8 b5 a1 b0 67 a1 57 b6 9f d6 5a 9f 0a 7b 10 6e ca f6 df 46 eb 04 f4 b8 72 3b b8 54 91 5c cf 97 65 f4 cd f6 79 Data Ascii: TWvJ3>}S@r"t\|S@rtSPGhzLf lP>o#,h02ZzkM3.z,Fcgw\|JFkpBC.8,,3BNTPY[\|BOfg'tEUe,+R{_gWZ{nFr;T\ey
2024-04-25 16:55:20 UTC	8192	IN	Data Raw: ff 99 81 da 66 aa 29 04 dd 65 aa 2b 8c 9c 69 6a 28 f4 3e d6 c3 15 46 7e 33 8d 15 86 56 33 67 28 84 1c 61 5a 2b 8c 38 35 17 2b 8c 58 33 c8 19 46 62 1e f1 68 10 eb 46 e2 19 fa cc 20 76 cd 0d 6a 3f 73 a3 22 e7 68 ba 2a 72 8e 06 71 63 6e d5 b3 33 88 0f 23 3e 02 dd 64 e0 bf 46 7c 14 9a c8 c0 1f 8d f8 21 74 90 81 0f 1a c9 19 d0 43 46 f6 20 fe f7 23 56 e8 51 33 1a 8f a1 57 cc 93 19 72 67 f9 29 85 65 8f 63 15 b1 ab 79 56 11 fb 99 e7 15 86 6e 33 f0 53 33 41 5b 31 33 5b f1 f8 3c 33 47 f1 c8 33 66 ae e2 e5 ac e6 2b 1e 7e 6f 16 28 1e d7 61 16 2a 09 b4 8b 41 7e 34 d0 50 09 b4 8b 91 33 45 fe 4b a0 57 cc 52 c5 c3 8e 06 3a d7 20 0f 25 d0 25 06 7e 6d e0 cf 5e f6 f0 99 92 88 ad 36 28 09 f4 81 f9 5c 49 c4 6e 1b 95 04 fa c0 6c 52 12 68 11 b3 59 49 a0 2d cc 16 c5 23 ff 98 6d Data Ascii: f)e+ij(>F~3V3g(aZ+85+X3FbhF vj?s"hrqcn3#>dF\|!tCF #VQ3Wrg)ecyVn3S3A[13[<3G3f+~o(aA~4P3EKWR: %%~m^6(\InlRhYI-#m
2024-04-25 16:55:20 UTC	8176	IN	Data Raw: 93 77 66 77 66 76 42 4f 4e 3d 39 ef c4 8d b3 39 87 db db dd 4b ba 88 a4 d3 29 23 01 ca c9 20 01 02 13 64 61 30 5f 83 30 18 0c c2 80 65 01 16 0a b6 c1 18 8c b0 31 ec 61 30 20 0b 19 63 0c 42 88 68 c1 57 08 dd ec af 52 57 77 ef cc 9e 64 7f ff f9 81 6e b7 f7 33 3d dd 55 af aa de 7b f5 ea 05 4e c7 1d e1 38 be ce ff 21 a7 e1 4c 9c 95 eb e7 5c dc 19 ee 61 8e 9b 3d 0c 7f 94 fc 8f 70 1c 67 6f 1d a1 00 8f 00 9e d3 b5 8e 3c c2 69 39 f0 dc a3 9c 01 fe c9 d9 fb 87 e0 0d b6 47 38 0b c6 ec 14 7b 14 3e 4d ba 72 b0 2b 17 bd 2a 0f 38 a2 f6 68 a2 04 44 2b 70 8c 03 31 0c 0c 29 3b 30 08 47 c0 93 ed 38 b8 6a b1 a6 6d 2c dd 35 30 f5 93 a9 4a fe 0e 70 f8 f6 db f9 3f 3c 77 e5 f0 5d 67 ce dc 05 16 4f dc 70 c3 89 d2 d3 ed 0a f8 ea d3 3f 84 ed e3 61 db 39 3e c8 df 03 7b 60 e7 b6 a4 Data Ascii: wfwfvBON=99K)# da0_0e1a0 cBhWRWwdn3=U{N8!L\a=pgo<i9G8{>Mr+*8hD+p1);0G8jm,50Jp?<w]gOp?a9>{`
2024-04-25 16:55:20 UTC	8192	IN	Data Raw: ed a6 17 9f f7 a2 9c 18 50 3b d8 46 07 e2 61 ec fc 84 dc 2c c3 34 50 27 cc 1c 0d 7b f1 b9 8a e4 9f 5b 65 6e 96 35 29 2c 07 eb 43 c8 1b 40 ec 1a 93 a4 de a7 4a a1 49 e0 c6 64 bd 4f 08 f6 a1 78 a4 62 47 98 52 b6 10 e8 b7 38 4d ae be c2 83 52 ac d2 57 73 59 67 22 e2 37 35 82 99 ce a8 25 fb 48 10 ee 53 f5 19 b3 0d 68 95 d1 4b c8 3e 85 78 e7 4f b0 af e0 04 d4 02 df f3 3f 8c d4 52 47 69 e5 71 7c 7a 3f 97 a7 9f 21 b9 83 f6 f0 1e 8a 20 7b 4d 05 df 9d d8 56 45 4a 40 bc ce 9c 56 87 f0 55 04 5e 4d 32 2f f6 99 ed ee 31 5d 82 c4 c9 0c d1 90 86 52 91 04 3f a0 60 9b 22 48 11 72 26 88 3b f1 97 5b fb df f6 6e a3 90 0c a5 17 82 d1 d8 a9 46 63 ce 1a dc 5f 29 cc 96 3c 9a f6 17 81 37 dd 08 8b 83 fe 50 64 a5 32 b6 11 a8 9c f6 c4 d6 a3 c6 1e 30 bc bf 2a 0c 80 1f 8d 0c 56 17 0d Data Ascii: P;Fa,4P'{[en5),C@JIdOxbGR8MRWsYg"75%HShK>xO?RGiq\|z?! {MVEJ@VU^M2/1]R?`"Hr&;[nFc_)<7Pd20*V
2024-04-25 16:55:20 UTC	8176	IN	Data Raw: 71 d5 7a 41 55 b7 b1 ba e7 7e 43 96 36 24 57 06 12 8b 1a 69 67 a1 a8 81 f8 f0 a9 07 e8 f9 8a 60 3e ba 1f 79 93 02 67 7c 51 14 17 e3 ed 67 39 45 ad c6 88 cc a7 3b de a5 34 c9 bb b7 49 59 48 b7 aa 5e a3 9b ee 74 fa 69 c1 48 92 a3 b0 4b 9d 46 d2 32 bd 41 59 a6 f1 8f 4f cf 19 6d 26 ad d1 da 33 73 ea 8d 5b 0b c6 5e a3 d6 da 8f 2a 36 22 10 55 6c 84 ad fe 1d a9 c7 08 b4 b0 fd 5e 71 2a 36 33 dd fe 11 be 88 4d 89 ed 1f 49 34 e3 bf c1 05 64 49 d8 71 d6 20 c7 19 cb a7 ca 28 73 04 84 d8 59 56 3f 96 d0 3a 6c e5 41 39 45 34 32 cb b5 02 25 61 bf 8a ea 1d 26 e4 62 88 ee bf df ba d8 ec b1 a0 62 88 07 f7 f3 39 54 f2 90 16 43 9c 6c 7b 41 2f 29 86 d8 fe 6f 24 13 50 fe d1 f7 63 9f e7 e6 9e f5 24 65 ab 37 52 af 00 76 7f 93 2a 4b 42 cd 41 a3 a8 1e a9 71 89 1f b9 ff f0 54 af bf Data Ascii: qzAU~C6$Wig`>yg\|Qg9E;4IYH^tiHKF2AYOm&3s[^6"Ul^q63MI4dIq (sYV?:lA9E42%a&bb9TCl{A/)o$Pc$e7Rv*KBAqT
2024-04-25 16:55:20 UTC	8192	IN	Data Raw: ec d7 d9 47 18 37 63 66 10 12 6f 13 ae 33 a6 e1 63 be 46 12 0a 45 69 3f ed 68 6e 45 c3 11 f2 23 03 a2 67 2f 5e bd 29 d7 d4 bc a6 b9 a9 b9 ff c2 d1 00 d0 69 9d a3 57 ae 0a 00 4b e2 dc 55 ec 23 85 9b be f4 fc ae fc d6 d6 e6 dc e6 cc 70 b7 bb 33 38 ba a7 bf c3 db 17 19 bd 64 e2 fc 14 3d c7 bb 9e 79 01 fc 84 8d 4a 2f 40 de 5a 46 2e fd 30 a6 0f 82 2d cc 13 90 ae a0 74 4c 63 3d cc 13 ec 1d 84 c6 92 fc dc 39 f0 34 f3 35 d8 76 29 e4 0c 6a bb 14 b6 1d e5 fb 69 41 70 d7 5a 6d a0 c8 3e b2 f9 13 e8 3e 94 fd 76 1f f3 17 78 dd c6 d4 01 83 00 87 73 ad fd 20 af 08 ae 0e 14 2d 6b 37 df fa 17 f4 be 3f b2 19 70 86 84 c5 91 22 2d 43 30 53 ff 00 0e 31 eb d9 3b e1 df 99 6a cf 78 c1 17 5b 15 d1 e6 e9 b6 12 7b a7 ea 59 15 7a c6 1e 36 0f 1e 92 c8 91 96 06 cc 54 2e bf 0b e5 f6 99 Data Ascii: G7cfo3cFEi?hnE#g/^)iWKU#p38d=yJ/@ZF.0-tLc=945v)jiApZm>>vxs -k7?p"-C0S1;jx[{Yz6T.
2024-04-25 16:55:20 UTC	8176	IN	Data Raw: 84 90 53 5d e3 fc 11 5a 79 10 d5 0c a5 d1 7e 27 ad 4f 6d cc 72 eb 2d c6 8f 8d 93 b7 e8 c2 54 04 97 aa 52 aa 41 b0 d2 04 32 83 b7 f7 f4 f4 95 06 38 39 7d f3 3e 59 b3 ba 65 ac 4d 63 6a d6 42 8b c8 1a 56 aa a0 2d 11 c2 d2 fa cf 9c ec 86 7b dc f5 13 33 93 d8 3e ca 76 ac fa cc fc a3 64 1f 61 bf 83 fb e4 60 56 37 f4 ee 89 33 90 f5 f8 a4 06 8a 14 c8 b1 5e ce e5 22 6b 0f 71 3d 33 e9 48 92 80 d0 1b b2 f5 16 a8 a1 0a d7 0d 2b 81 1b 4b c7 c0 e2 a9 a7 2e de f4 ea dc dc ab 73 a4 a9 68 0b fe f1 8f 91 f9 f1 28 f1 ef 83 d7 d8 17 59 39 e8 61 b8 f5 f1 1b bc 3e fe 8b 62 9e 99 71 04 1c db dd 12 0d 9c 49 31 41 c6 d7 88 74 9a 39 a0 fc a0 79 c9 56 8c d7 c1 c5 96 23 b5 79 c9 47 b3 be 15 89 eb ba 46 8f 69 81 b3 7d f1 fb 4a 47 02 8d ed 70 96 eb 3b ec 23 c9 43 56 60 ff 17 b6 c4 4b Data Ascii: S]Zy~'Omr-TRA289}>YeMcjBV-{3>vda`V73^"kq=3H+K.sh(Y9a>bqI1At9yV#yGFi}JGp;#CV`K
2024-04-25 16:55:20 UTC	8192	IN	Data Raw: 76 14 a1 e6 aa e9 d0 fb de 42 d4 82 16 b2 27 a7 f1 b5 38 8c c1 62 7b c8 ec d1 f8 4d 6d ec 3d e2 7e a8 51 72 43 a4 37 69 b5 ea c2 2d 9a ae 8e ce 1e 9d 2e 60 b1 c3 b9 e8 82 f3 f7 2a 38 7f 8d 8c 0b f6 64 13 ec 5d 98 b7 fa cc d4 72 7a 82 31 d3 3e 99 69 7f 00 8f 83 8a d4 61 ee fc 89 93 ee 9f e2 5e 12 aa a1 41 6f 81 00 c4 42 85 57 6d 1f cf df 3c 35 3b 3b b1 bc 29 93 c9 64 3d 95 dd 02 c5 d5 93 ab e6 b3 5d 85 7c f1 c7 70 9c f2 2b 27 4b 5c ec 55 70 ff 59 c7 9c 04 7b 32 c0 2b f4 63 7c 9f 82 f0 d3 0c fe d4 8c 3d 4a 1c 26 93 09 d7 2d 71 32 41 3c a3 23 f0 3e 52 71 71 8c 56 ec 43 6b 71 12 f7 29 02 3f 4d d5 15 cf 48 eb 0e 56 80 6b a2 93 61 f2 7c 95 b8 c2 a3 29 97 a0 d4 28 3e bd 00 dc 3c 75 d9 d6 d2 f0 39 9f 5c 37 7d e1 42 26 dc 35 1e 88 77 ca 58 fb 80 3f 3f ea 6c 1b 4f Data Ascii: vB'8b{Mm=~QrC7i-.`*8d]rz1>ia^AoBWm<5;;)d=]\|p+'K\UpY{2+c\|=J&-q2A<#>RqqVCkq)?MHVka\|)(><u9\7}B&5wX??lO
2024-04-25 16:55:20 UTC	8176	IN	Data Raw: 8e d1 0a be be d9 02 c1 5a 9f 47 71 62 45 cf 0b 87 68 e5 4a a3 2e 48 45 bc 62 58 d8 60 a9 40 e4 bc c9 e0 fa 9e c2 e6 7a 28 3c bc ad d8 bb d9 dd ed a8 c7 c6 37 ca 7f f9 0b f5 ba e1 48 d5 09 7e e2 0f 86 46 f7 0e 8e 9f 38 1a 48 b9 8b 0e cf e6 9d f5 99 f9 2e 1e cb 43 df c4 bc 04 4a 05 7c fc b2 5c 33 2b f0 ac 9d 2b c2 0a af 92 87 91 9d 34 c4 5f 34 a2 8e 16 4c 54 d0 8c 01 4d d9 56 b4 b5 57 e4 0c 66 b5 e3 0b 0b e3 13 f3 f3 87 3a 2f d8 53 dc 32 18 0c 0e 6e 29 9e 70 a1 ea ec f9 f9 be fd bb 76 ed db b7 6b d7 fe 77 4e fe 88 e0 99 7b f0 9c df 43 e6 08 cd 3d 24 67 c0 3d cb 7d 48 57 48 8f a4 94 cc 0a 64 50 8a 8e ba 2a d1 d8 0f f6 1b 13 a8 c8 20 16 b5 ba 0a ca 46 4c 6d 0a 36 49 e0 98 4d f5 a1 0b 36 2f 2c ec fa b7 9d d7 f5 0c 7b 8a 53 49 f0 bd 68 7e d7 bb 47 df 7d fe f9 Data Ascii: ZGqbEhJ.HEbX`@z(<7H~F8H.CJ\|\3++4_4LTMVWf:/S2n)pvkwN{C=$g=}HWHdP* FLm6IM6/,{SIh~G}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49732	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:19 UTC	445	OUT	GET /formpostdir/images/TipClose.gif HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
2024-04-25 16:55:20 UTC	613	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 16:55:20 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes ETag: W/"64-1662740746000" Last-Modified: Fri, 09 Sep 2022 16:25:46 GMT Content-Length: 64 Cache-Control: max-age=2592000 Expires: Sat, 25 May 2024 16:55:20 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: image/gif
2024-04-25 16:55:20 UTC	64	IN	Data Raw: 47 49 46 38 39 61 08 00 08 00 91 02 00 99 8d 6c 67 5f 49 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 08 00 08 00 00 02 11 0c 84 02 66 b8 f7 5e 5a 6d 86 aa 8c 94 99 bb 50 00 00 3b Data Ascii: GIF89alg_I!,f^ZmP;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49733	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:20 UTC	447	OUT	GET /formpostdir/images/BangBullet.gif HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
2024-04-25 16:55:20 UTC	613	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 16:55:20 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes ETag: W/"79-1662740746000" Last-Modified: Fri, 09 Sep 2022 16:25:46 GMT Content-Length: 79 Cache-Control: max-age=2592000 Expires: Sat, 25 May 2024 16:55:20 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: image/gif
2024-04-25 16:55:20 UTC	79	IN	Data Raw: 47 49 46 38 39 61 08 00 08 00 a2 04 00 ff ff 00 66 66 00 00 00 00 99 99 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 04 00 2c 00 00 00 00 08 00 08 00 00 03 14 48 04 0c ba 40 08 06 e3 6c 2c 04 cc c6 e0 20 a4 51 0a a6 24 00 3b Data Ascii: GIF89aff!,H@l, Q$;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49735	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:20 UTC	448	OUT	GET /formpostdir/images/CheckBullet.gif HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
2024-04-25 16:55:21 UTC	613	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 16:55:21 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes ETag: W/"64-1662740746000" Last-Modified: Fri, 09 Sep 2022 16:25:46 GMT Content-Length: 64 Cache-Control: max-age=2592000 Expires: Sat, 25 May 2024 16:55:21 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Content-Type: image/gif
2024-04-25 16:55:21 UTC	64	IN	Data Raw: 47 49 46 38 39 61 08 00 08 00 91 03 00 00 bf 00 ff ff ff 80 ff 80 ff ff ff 21 f9 04 01 00 00 03 00 2c 00 00 00 00 08 00 08 00 00 02 11 dc 80 60 97 c8 1d 1a 0a 62 56 0a b1 43 d5 99 66 14 00 3b Data Ascii: GIF89a!,`bVCf;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49734	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:20 UTC	496	OUT	GET /securereader/javax.faces.resource/messages/messages.png.jsf?ln=primefaces&v=7.0.17 HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
2024-04-25 16:55:21 UTC	570	IN	HTTP/1.1 200 200 Date: Thu, 25 Apr 2024 16:55:21 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Expires: Thu, 02 May 2024 16:55:21 GMT Last-Modified: Tue, 15 Mar 2022 20:40:34 GMT ETag: W/"16755-1647376834000" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' X-UA-Compatible: IE=edge Connection: close Transfer-Encoding: chunked Content-Type: image/png
2024-04-25 16:55:21 UTC	7622	IN	Data Raw: 31 66 66 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 01 fc 08 06 00 00 00 b0 f1 ad 14 00 00 41 3a 49 44 41 54 78 01 b4 57 03 b0 24 4b d3 3d dd 3d 3d 9e b5 06 7b ff b5 9e 6d db b6 6d db b6 6d db b6 ad bb b6 77 af d7 3b 77 ac ae ff 64 45 77 bc 89 79 0a 7d 19 91 51 d5 55 d5 95 27 33 4f 65 57 a3 41 0c a5 94 81 ff 91 b8 7b d7 ef 8f 7f 32 d6 9f 9a dc 7b ef bd 93 89 44 22 66 9a a6 c2 df 08 c7 f1 4f 62 59 96 36 d8 d6 d6 96 79 fb ed b7 db 01 88 2e a3 e2 df 00 f8 a9 9b bf fc f2 cb a7 8c 1a 35 6a ed a6 a6 a6 78 34 1a ed a1 28 0d 9e fc 7d 1f ec ab 3f c7 0d 4a b1 58 ec 6e 6f 6f ef 9c 35 6b d6 d4 c3 0e 3b ec 51 00 3f 53 cb f5 00 44 95 18 3f e2 88 23 4e bc f2 ca 2b 2f 1c 33 66 cc 50 c8 aa 72 19 15 6a ad 56 83 e3 38 a8 51 1d ad 35 8e 39 50 Data Ascii: 1ff8PNGIHDR A:IDATxW$K==={mmmw;wdEwy}QU'3OeWA{2{D"fObY6y.5jx4(}?JXnoo5k;Q?SD?#N+/3fPrjV8Q59P
2024-04-25 16:55:21 UTC	568	IN	Data Raw: 3e 6c d1 e2 0d dc 0b 9f 04 07 af cb e7 9d 0b 23 22 ac 46 d6 01 3f 0f 0d d9 00 06 69 3d 5f 19 15 15 76 25 31 f1 2b f3 e8 d1 54 f2 da 6b 6a e1 ec d9 4a 31 4b 34 85 e3 9e b5 fd 1c 1a 4a 9f 7a 34 a3 05 c1 c1 5b 01 04 bc e9 ef ff 7e 56 cb 96 64 0c 0d b5 16 44 44 d0 e7 81 81 9b 71 0f e8 75 8a e2 26 6a ca 61 b3 e9 98 f9 46 15 a4 0b 60 48 97 2e d5 ed 88 8e 4e e8 69 30 6c 6b 65 d0 77 b6 d4 32 d5 7c ed 9a cc fb cb 35 aa aa 94 de cc d4 65 9a cd d6 5f 3d bd 97 bd 5b 50 60 27 a9 39 e2 4b 8a ab ab 20 d5 f5 20 15 90 ee 7d 7a 66 bd 00 2a 1f 01 d2 eb 54 4f 17 03 c2 25 c9 3e f6 df b5 6d 3b bc af 9b db 17 c1 40 e7 72 53 85 52 77 f9 b2 8e 15 15 c9 5a 90 6f ab bc 76 4d 77 c3 64 2a 3f a3 d7 cf 7c b7 b0 f0 75 02 2c 60 f8 b9 bb 97 1b f4 7a 9b 88 df 26 49 a8 24 dc 13 72 ae 6a 2b Data Ascii: >l#"F?i=_v%1+TkjJ1K4Jz4[~VdDDqu&jaF`H.Ni0lkew2\|5e_=[P`'9K }zfTO%>m;@rSRwZovMwd?\|u,`z&I$rj+
2024-04-25 16:55:21 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-25 16:55:21 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 52 2d 55 6b af 97 95 ff c4 a4 b4 4e d7 22 50 61 be cf ae 78 cb 3a 3d 73 fc 2d 91 f5 f4 d3 57 4f cd 9f 7f 24 7d f3 e6 56 5f 2e 5f 9e b0 7d c1 82 7e e7 df 7e 7b 3a 7f f9 76 7f a7 da da 03 01 35 35 3d aa bd bd 15 8a 8c 54 4a 4a 8a 75 69 b7 6e 9e 59 15 10 f0 21 18 8d be 18 c5 f1 b8 1e f6 f5 4d 2f 8d 8f 23 e3 a3 8f da f2 9e 7b 4e 29 78 fe 79 95 a5 56 2a 7c 7d a1 b5 70 f9 72 0b 0b d3 c5 ac 82 1b 0b 37 6c a8 2c fb e0 03 aa 63 81 ba ec cd 37 c5 89 c9 9a 3b 69 92 2d 83 e7 ce 0e e0 46 2f 3f bf 9e 0e 6d 37 3e 88 88 80 80 ce 5f 7b 7a 9e c8 8b 8c 24 33 a7 b4 24 39 59 2d 59 bc d8 56 ba e6 3d b2 6c df 4e 55 5c 0d 51 cd 97 ea 2a b6 8a 7d fb 94 f2 2d 5b 6a 4b de 78 5d 31 3e 39 9a d2 42 43 85 f3 53 71 c1 c1 dd ff ce 4d 89 54 1f 84 10 b3 d7 78 fb bc 75 22 Data Ascii: 1ff8R-UkN"Pax:=s-WO$}V_._}~~{:v55=TJJuinY!M/#{N)xyV\|}pr7l,c7;i-F/?m7>_{z$3$9Y-YV=lNU\Q}-[jKx]1>9BCSqMTxu"
2024-04-25 16:55:21 UTC	5	IN	Data Raw: 31 38 33 0d 0a Data Ascii: 183
2024-04-25 16:55:21 UTC	387	IN	Data Raw: c8 ee 23 9f 5d 9b ee 40 73 ad cf 1e cb c0 82 30 a2 c6 cf 1d 7e 5a 34 61 ed 53 ce f5 2b d6 69 51 7b 99 9d ce 0a a7 30 a0 22 31 3d 39 76 e4 fb ce ae f5 19 39 61 91 8a 3e b0 40 65 7e 89 16 8a 35 5d e4 17 b2 00 fb 82 64 19 18 fa 2b 9e f4 01 62 e9 65 07 00 cb 3a bf f7 52 b4 07 7d f6 44 16 c4 50 24 f6 be 47 9c 13 4b d0 44 cf cd 29 b2 8c 10 c9 23 61 fa ef 87 de 7c 1d 44 ea 10 90 65 c8 f7 cb 2a 16 33 ed 8d e3 de 75 fe 9e ca 82 08 22 e9 fd 13 da 45 24 71 9e 5b c8 01 96 90 14 89 82 a2 1e c4 98 a3 61 8d fb 04 28 ca a0 58 b0 ce 92 4e 2e 0b 21 ec b3 d3 d7 8d 9b 14 f4 c5 08 b1 00 a0 69 d2 a1 17 47 6d 6e 2b 14 5d 4f 24 1b 2c 8a c5 98 62 93 00 ee ae 54 c6 29 b5 37 e0 7a 60 e5 41 b9 19 3f 65 a9 66 4e ee f5 0d a0 fb dc 11 3b f0 da 9f a6 b4 1b e5 1d 07 9d 43 22 2a 23 22 4a Data Ascii: #]@s0~Z4aS+iQ{0"1=9v9a>@e~5]d+be:R}DP$GKD)#a\|De3u"E$q[a(XN.!iGmn+]O$,bT)7z`A?efN;C"#"J
2024-04-25 16:55:21 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-25 16:55:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49737	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:21 UTC	699	OUT	GET /favicon.ico HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BID=49444072
2024-04-25 16:55:21 UTC	598	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 16:55:21 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Fri, 09 Sep 2022 18:31:36 GMT ETag: "47e-5e842c188b200" Accept-Ranges: bytes Content-Length: 1150 Cache-Control: public, max-age=1550000 Expires: Thu, 25 Apr 2024 16:55:21 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' Connection: close Content-Type: image/x-icon
2024-04-25 16:55:21 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 f3 0e 00 00 f3 0e 00 00 00 00 00 00 00 00 00 00 d7 8c 02 ff ec 92 00 ff ee 8f 00 ff d6 82 04 ff d6 86 0f ff eb 92 0c ff e6 86 00 ff ec 90 01 ff ef 90 00 ff e9 8d 00 ff e4 89 06 ff e4 88 0b ff e3 87 0a ff e3 88 05 ff e3 89 02 ff e4 8c 02 ff eb 8c 00 ff f5 8b 00 ff e5 8b 0f ff ef be 80 ff ff f0 d9 ff ff e8 bf ff ea a2 44 ff f1 88 01 ff d8 8b 10 ff e2 8e 0c ff e8 8d 03 ff eb 89 00 ff e9 8b 02 ff e6 8d 07 ff e1 8c 08 ff de 8a 08 ff d5 88 13 ff f0 8a 00 ff eb 8c 0d ff fc d4 a0 ff f1 fb ff ff fb fe ff ff dc a7 64 ff ef 8a 05 ff dd 88 0a ff e9 8c 01 ff ee 8b 00 ff eb 8b 00 ff e6 8e 01 ff df 8c 08 ff db 88 04 ff e2 89 03 ff c5 Data Ascii: h( Dd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49738	208.84.65.44	443	6772	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:22 UTC	380	OUT	GET /favicon.ico HTTP/1.1 Host: securemail.fairview.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BID=49444072
2024-04-25 16:55:22 UTC	598	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 16:55:22 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains Last-Modified: Fri, 09 Sep 2022 18:31:36 GMT ETag: "47e-5e842c188b200" Accept-Ranges: bytes Content-Length: 1150 Cache-Control: public, max-age=1550000 Expires: Thu, 25 Apr 2024 16:55:22 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Expect-CT: max-age=86400, enforce Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' Connection: close Content-Type: image/x-icon
2024-04-25 16:55:22 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 f3 0e 00 00 f3 0e 00 00 00 00 00 00 00 00 00 00 d7 8c 02 ff ec 92 00 ff ee 8f 00 ff d6 82 04 ff d6 86 0f ff eb 92 0c ff e6 86 00 ff ec 90 01 ff ef 90 00 ff e9 8d 00 ff e4 89 06 ff e4 88 0b ff e3 87 0a ff e3 88 05 ff e3 89 02 ff e4 8c 02 ff eb 8c 00 ff f5 8b 00 ff e5 8b 0f ff ef be 80 ff ff f0 d9 ff ff e8 bf ff ea a2 44 ff f1 88 01 ff d8 8b 10 ff e2 8e 0c ff e8 8d 03 ff eb 89 00 ff e9 8b 02 ff e6 8d 07 ff e1 8c 08 ff de 8a 08 ff d5 88 13 ff f0 8a 00 ff eb 8c 0d ff fc d4 a0 ff f1 fb ff ff fb fe ff ff dc a7 64 ff ef 8a 05 ff dd 88 0a ff e9 8c 01 ff ee 8b 00 ff eb 8b 00 ff e6 8e 01 ff df 8c 08 ff db 88 04 ff e2 89 03 ff c5 Data Ascii: h( Dd

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49743	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 16:55:31 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1714064100023&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-25 16:55:31 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-25 16:55:31 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-25 16:55:32 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 5E52BE5579214CCFAFB33E99D41D7E6D Ref B: LAX311000114049 Ref C: 2024-04-25T16:55:31Z Date: Thu, 25 Apr 2024 16:55:32 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1714064131.c07d0bf

Target ID:	0
Start time:	18:55:09
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:55:12
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2216,i,12332344547776072591,4045626395108805331,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:55:14
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	HTTP traffic detected: GET /formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072 HTTP/1.1Host: securemail.fairview.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/theme.css.jsf?ln=primefaces-aristo HTTP/1.1Host: securemail.fairview.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/components.css.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.fairview.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/jquery/jquery.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.fairview.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/jquery/jquery-plugins.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.fairview.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/core.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.fairview.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/components.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.fairview.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/jsf.js.jsf?ln=javax.faces HTTP/1.1Host: securemail.fairview.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/hotkey/hotkey.js.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.fairview.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
Source: global traffic	HTTP traffic detected: GET /formpostdir/Image?i=4 HTTP/1.1Host: securemail.fairview.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
Source: global traffic	HTTP traffic detected: GET /formpostdir/images/TipClose.gif HTTP/1.1Host: securemail.fairview.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
Source: global traffic	HTTP traffic detected: GET /formpostdir/images/BangBullet.gif HTTP/1.1Host: securemail.fairview.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
Source: global traffic	HTTP traffic detected: GET /formpostdir/Image?i=4 HTTP/1.1Host: securemail.fairview.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/messages/messages.png.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.fairview.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail.fairview.org/securereader/javax.faces.resource/components.css.jsf?ln=primefaces&v=7.0.17Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
Source: global traffic	HTTP traffic detected: GET /formpostdir/images/CheckBullet.gif HTTP/1.1Host: securemail.fairview.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /formpostdir/fonts/sourcesanspro-regular.ttf.woff HTTP/1.1Host: securemail.fairview.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://securemail.fairview.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
Source: global traffic	HTTP traffic detected: GET /formpostdir/images/TipClose.gif HTTP/1.1Host: securemail.fairview.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
Source: global traffic	HTTP traffic detected: GET /formpostdir/images/BangBullet.gif HTTP/1.1Host: securemail.fairview.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
Source: global traffic	HTTP traffic detected: GET /formpostdir/images/CheckBullet.gif HTTP/1.1Host: securemail.fairview.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
Source: global traffic	HTTP traffic detected: GET /securereader/javax.faces.resource/messages/messages.png.jsf?ln=primefaces&v=7.0.17 HTTP/1.1Host: securemail.fairview.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=CC3F4F35A2EC465486B8B29EAE794C30; BID=49444072
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: securemail.fairview.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BID=49444072
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: securemail.fairview.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BID=49444072

Source: global traffic	DNS traffic detected: DNS query: securemail.fairview.org
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Windows Analysis Report
https://securemail.fairview.org/formpostdir/securereader?id=ikrzsWp6HYdX3FuVu3PZrUrtQ2EXO8T2&brand=49444072