hxxp://Received[:] from DB9PR03MB8797[.]eurprd03[.]prod[.]outlook[.]com (2603[:]10a6[:]10[:]3c6[::]6) by AS1PR03MB8286[.]eurprd03[.]prod[.]outlook[.]com with HTTPS; Wed, 24 Apr 2024 07[:]15[:]29 +0000 Received[:] from AM0PR02CA0003[.]eurprd02[.]prod[.]outlook[.]com (2603[:]10a6[:]208[:]3e[::]16) by DB9PR03MB8797[.]eurprd03[.]prod[.]outlook[.]com (2603[:]10a6[:]10[:]3c6[::]6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15[.]20[.]7519[.]22; Wed, 24 Apr 2024 07[:]15[:]14 +0000 Received[:] from AMS0EPF00000198[.]eurprd05[.]prod[.]outlook[.]com (2603[:]10a6[:]208[:]3e[:]cafe[::]38) by AM0PR02CA0003[.]outlook[.]office365[.]com (2603[:]10a6[:]208[:]3e[::]16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15[.]20[.]7495[.]34 via Frontend Transport; Wed, 24 Apr 2024 07[:]15[:]14 +0000 Authentication-Results[:] spf=pass (sender IP is 18[.]185[.]115[.]173) smtp[.]mailfrom=cepsa[.]net; dkim=none (message not signed) header[.]d=none;dmarc=none action=none header[.]from=cepsa[.]net;compauth=none reason=905 Received-SPF[:] Pass (protection[.]outlook[.]com[:] domain of cepsa[.]net designates 18[.]185[.]115[.]173 as permitted sender) receiver=protection[.]outlook[.]com; client-ip=18[.]185[.]115[.]173; helo=inpost[.]tmes[.]trendmicro[.]eu; pr=C Received[:] from inpost[.]tmes[.]trendmicro[.]eu (18[.]185[.]115[.]173) by AMS0EPF00000198[.]mail[.]protection[.]outlook[.]com (10[.]167[.]16[.]244) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15[.]20[.]7519[.]19 via Frontend Transport; Wed, 24 Apr 2024 07[:]15[:]14 +0000 Received[:] from 94[.]199[.]89[.]127_[.]trendmicro[.]com (unknown [172[.]21[.]192[.]213]) by inpost[.]tmes[.]trendmicro[.]eu (Postfix) with SMTP id 299C11002841C; Wed, 24 Apr 2024 07[:]15[:]14 +0000 (UTC) X-TM-MAIL-RECEIVED-TIME[:] 1713942910[.]581000 X-TM-MAIL-UUID[:] 6954505e-0917-49e7-831f-53b74621322f Received[:] from mailout-wxp12[.]retarus[.]com (unknown [94[.]199[.]89[.]127]) by inpre01[.]tmes[.]trendmicro[.]eu (Trend Micro Email Security) with ESMTPS id 8DFAB10001D79 for <laura[.]sanchez@cepsa[.]com>; Wed, 24 Apr 2024 07[:]15[:]10 +0000 (UTC) Received[:] from mpc01[.]dmz2[.]retloc (unknown [172[.]19[.]20[.]180]) by mailout-wxp12[.]retarus[.]com (Postfix) with SMTP id 4VPVcY6JRZzy8j for <laura[.]sanchez@cepsa[.]com>; Wed, 24 Apr 2024 09[:]15[:]09 +0200 (CEST) Message-Id[:] <20240424-090845[.]5FF70425FECCD72B@wxp-live03[.]6185323711> From[:] Cepsa News <cepsanews@cepsa[.]net> To[:] "Laura" <laura[.]sanchez@cepsa[.]com> Subject[:] �Laura, ya puedes ver los resultados de la encuesta 'Pulso de Experiencia del Empleado' MIME-Version[:] 1[.]0 Content-Type[:] multipart/alternative; boundary="----=_Part_589043_811584779[.]1713942525880" X-RecipientId[:] 9RNE/XCsjL8/sjDf X-Priority[:] 3 X-Mailer[:] WebExpress (WXP 22-02) Date[:] Wed, 24 Apr 2024 09[:]15[:]09 +0200 (CEST) X-TM-Received-SPF[:] Pass (domain of cepsanews@cepsa[.]net designates 94[.]199[.]89[.]127 as permitted sender) client-ip=94[.]199[.]89[.]127; envelope-from=cepsanews@cepsa[.]net; helo=mailout-wxp12[.]retarus[.]com X-TM-Authentication-Results[:] dkim=pass; No processed signatures and verification is not enforced X-TM-AS-ERS[:] 94[.]199[.]89[.]127-127[.]5[.]249[.]21 X-TMASE-Version[:] StarCloud-1[.]3-9[.]1[.]1023-28340[.]006 X-TMASE-Result[:] 11-18[.]693400-10[.]000000 X-TMASE-MatchedRID[:] UEe6CCDNlZyy+hvfWxsFoJNOoNC0sfXvYN0tb4Z/TMG5uc/LtNqe4m0O CYVs4K5QbuqHP0DtSX0KGDKVKwz5wRZu3Ax5Ngq8/6m/JkIXRCu+h6L7H7eLaiJ5QEgmrAyz4Ue 8oxVhy3tGMhoFpspfJxyoHwE8OdJfqOPwwHr9Yehayaf9MuAM8S3T7t6UgHiaLNRiaqFTd+hWJu HILWFuk1AHtPacGE8IDVown93C+HPpmfi8TiIK/xurwBe+xrCWZCs63gBSa2KjPe6aYKpTiUJ2G 47hrgWd4Ny8B0DozqXSAo4PbTZcxrgU/ZjHtFNglzTGew21KsPTF2hY9pzQmO2KkeTNUqW9O5hQ 4cMD6XV7v8adQwPy2mBbXvNV/xDyJOyPZ8F0fn4tzM8wdlz5DuEKbxqb5I/nKF12+S6s3LCtks+ hZ1eND5uU6dz7QzzRZXWbUd698v9IhbHCNJtZqMmW4LCLTo7kI19CJGmayrosixkOgV2EShVMzC T6JCbLhn28VtCXxNAhwMYhTlIAf3E/RCjP1nuH7GNzFncRbSBbaTWtKN5hhfiZZN0os1WwcY7L7 JBdU55BgF91iIN4/9WAjKnIheWuFNFPqRTzmmQV6fBhG8MwdDDb3HCazFjJj6V1I/BaagkKgBqV M04P3WX2vdzqtyg1ycrNBW/bYyau90ZLtc5cF/ot/poFC1QHYPug2iT1M55LrfW2SLJ1Ie4eDWG vKKvH/jvcfA6GmUiWw3NFKKX/aBNtDlktrjFDfuoXhR6LeChy3EJB/3blhWSltov/KwUif+DGnw FiiWSwwtxeUntEPmsPZXMpcQcgR79VMgC/174fM6JuaffwLXvBA9C/1eiFmyIrubThJAddWGOk0 uc0xkRcQHQSxySqJIJy9uuwhBcGgpDvlwURb7qPTJPkGiTpjwrT44I8p0WVKR9z7T/94gaG4Utj +sREfiAqrjYtFiScW6wTW9o7dbfujhvoRgiS1s9JVPGt8rp9Yczx5vE8On7cGd19dSFd X-TMASE-SNAP-Result[:] 1[.]821001[.]0001-0-1-1[:]1,22[:]0,28[:]1,33[:]0,34[:]0-0 X-TMASE-XGENCLOUD[:] e5a6230b-529b-4868-9a1d-ef0a188603f6-0-0-200-0 X-TM-Deliver-Signature[:] B4C0FF289F059A76B9A51020EA3980B8 X-TM-Addin-Auth[:] NOV5moA49BpYeRrYHRHnBWccSRLgZjSsU2IkqcNYBPigHCZUi0/ndc2HNzM jMAmiZp2Gibw83cloDUltwARVp07eZ9OiopMEX5DzRCx1zH8VtpKBDzE5UOFuMlfCMZfTsfQt8z RD19BtLkBiUNSZeNi8R6Cbt1VVZzIQH5YTiytCMkmsiq+6MDfQ7x4nKC+6LDoPFXmjQMe3s0QYD S8n57mY3VARoj+MTAbpDQSaUXOd0cer9keB81xthQCzzRvd+Hn9qoPBFpp3lWSQ+fbeZpi0EK+2 NHtyW2eOVFtdwyo3tctWg/B8qx/OIWFEuko7[.]2D2g5ceDMUXKdqvTWbL/uElXTiYNK5uYJ1w7Xn riAfDCaiJ5laI0YLBZBNkLqqyB77IRetjokmxPJ54Uv8cGSj4uFhznGz2bP4neSvfGPh16/WcX6 +JDWhobCNswHYiK/W6s5TT037s8T97+ne/EtdIT/tNmzQk6pCpoE1Xw+hD7mFa0nQloU6lc/cG8 V2+jWRavaTl73+lBEhir4FayGXdDajiP6hxM9aljJpWIvrNIG9/BwTGNPVWbTmjdIglgxZFLJcV I12gA2wtLZNFVIgyfCO5DJ14BjtZvBK63Ms5VYdSq6HgZBtB72/SS5GMw05nt/N3GqnzUIZ8pyk 5XQQ== X-TM-Addin-ProductCode[:] EMS Return-Path[:] cepsanews@cepsa[.]net X-MS-Exchange-Organization-ExpirationStartTime[:] 24 Apr 2024 07[:]15[:]14[.]4433 (UTC) X-MS-Exchange-Organization-ExpirationStartTimeReason[:] OriginalSubmit X-MS-Exchange-Organization-ExpirationInterval[:] 1[:]00[:]00[:]00[.]0000000 X-MS-Exchange-Organization-ExpirationIntervalReason[:] OriginalSubmit X-MS-Exchange-Organization-Network-Message-Id[:] 49c376f7-795d-4722-14c7-08dc642e4984 X-EOPAttributedMessage[:] 0 X-EOPTenantAttributedMessage[:] bc5f3009-5bd3-4402-beb1-6e2eb7c68ff2[:]0 X-MS-Exchange-Organization-MessageDirectionality[:] Incoming X-MS-PublicTrafficType[:] Email X-MS-TrafficTypeDiagnostic[:] AMS0EPF00000198[:]EE_|DB9PR03MB8797[:]EE_|AS1PR03MB8286[:]EE_ X-MS-Exchange-Organization-AuthSource[:] AMS0EPF00000198[.]eurprd05[.]prod[.]outlook[.]com X-MS-Exchange-Organization-AuthAs[:] Anonymous X-MS-Office365-Filtering-Correlation-Id[:] 49c376f7-795d-4722-14c7-08dc642e4984 X-MS-Exchange-AtpMessageProperties[:] SL X-MS-Exchange-Organization-SCL[:] 1 X-Microsoft-Antispam[:] BCL[:]0;ARA[:]13230031|4143199003; X-Forefront-Antispam-Report[:] CIP[:]18[.]185[.]115[.]173;CTRY[:]DE;LANG[:]es;SCL[:]1;SRV[:];IPV[:]NLI;SFV[:]NSPM;H[:]inpost[.]tmes[.]trendmicro[.]eu;PTR[:]inpost[.]tmes[.]trendmicro[.]eu;CAT[:]NONE;SFS[:](13230031)(4143199003);DIR[:]INB; X-MS-Exchange-CrossTenant-OriginalArrivalTime[:] 24 Apr 2024 07[:]15[:]14[.]3965 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id[:] 49c376f7-795d-4722-14c7-08dc642e4984 X-MS-Exchange-CrossTenant-Id[:] bc5f3009-5bd3-4402-beb1-6e2eb7c68ff2 X-MS-Exchange-CrossTenant-AuthSource[:] AMS0EPF00000198[.]eurprd05[.]prod[.]outlook[.]com X-MS-Exchange-CrossTenant-AuthAs[:] Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader[:] Internet X-MS-Exchange-Transport-CrossTenantHeadersStamped[:] DB9PR03MB8797 X-MS-Exchange-Transport-EndToEndLatency[:] 00[:]00[:]14[.]8819985 X-MS-Exchange-Processed-By-BccFoldering[:] 15[.]20[.]7472[.]035 X-Microsoft-Antispam-Mailbox-Delivery[:] ucf[:]0;jmr[:]0;auth[:]0;dest[:]I;ENG[:](910001)(944506478)(944626604)(920097)(930097)(140003); X-Microsoft-Antispam-Message-Info[:] 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

Sharing

Behavioral task

behavioral1

Sample

http://Received: from DB9PR03MB8797.eurprd03.prod.outlook.com (2603:10a6:10:3c6::6) by AS1PR03MB8286.eurprd03.prod.outlook.com with HTTPS; Wed, 24 Apr 2024 07:15:29 +0000 Received: from AM0PR02CA0003.eurprd02.prod.outlook.com (2603:10a6:208:3e::16) by DB9PR03MB8797.eurprd03.prod.outlook.com (2603:10a6:10:3c6::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7519.22; Wed, 24 Apr 2024 07:15:14 +0000 Received: from AMS0EPF00000198.eurprd05.prod.outlook.com (2603:10a6:208:3e:cafe::38) by AM0PR02CA0003.outlook.office365.com (2603:10a6:208:3e::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7495.34 via Frontend Transport; Wed, 24 Apr 2024 07:15:14 +0000 Authentication-Results: spf=pass (sender IP is 18.185.115.173) smtp.mailfrom=cepsa.net; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cepsa.net;compauth=none reason=905 Received-SPF: Pass (protection.outlook.com: domain of cepsa.net designates 18.185.115.173 as permitted sender) receiver=protection.outlook.com; client-ip=18.185.115.173; helo=inpost.tmes.trendmicro.eu; pr=C Received: from inpost.tmes.trendmicro.eu (18.185.115.173) by AMS0EPF00000198.mail.protection.outlook.com (10.167.16.244) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.7519.19 via Frontend Transport; Wed, 24 Apr 2024 07:15:14 +0000 Received: from 94.199.89.127_.trendmicro.com (unknown [172.21.192.213]) by inpost.tmes.trendmicro.eu (Postfix) with SMTP id 299C11002841C; Wed, 24 Apr 2024 07:15:14 +0000 (UTC) X-TM-MAIL-RECEIVED-TIME: 1713942910.581000 X-TM-MAIL-UUID: 6954505e-0917-49e7-831f-53b74621322f Received: from mailout-wxp12.retarus.com (unknown [94.199.89.127]) by inpre01.tmes.trendmicro.eu (Trend Micro Email Security) with ESMTPS id 8DFAB10001D79 for <[email protected]>; Wed, 24 Apr 2024 07:15:10 +0000 (UTC) Received: from mpc01.dmz2.retloc (unknown [172.19.20.180]) by mailout-wxp12.retarus.com (Postfix) with SMTP id 4VPVcY6JRZzy8j for <[email protected]>; Wed, 24 Apr 2024 09:15:09 +0200 (CEST) Message-Id: <[email protected]> From: Cepsa News <[email protected]> To: "Laura" <[email protected]> Subject: �Laura, ya puedes ver los resultados de la encuesta 'Pulso de Experiencia del Empleado' MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_589043_811584779.1713942525880" X-RecipientId: 9RNE/XCsjL8/sjDf X-Priority: 3 X-Mailer: WebExpress (WXP 22-02) Date: Wed, 24 Apr 2024 09:15:09 +0200 (CEST) X-TM-Received-SPF: Pass (domain of [email protected] designates 94.199.89.127 as permitted sender) client-ip=94.199.89.127; [email protected]; helo=mailout-wxp12.retarus.com X-TM-Authentication-Results: dkim=pass; No processed signatures and verification is not enforced X-TM-AS-ERS: 94.199.89.127-127.5.249.21 X-TMASE-Version: StarCloud-1.3-9.1.1023-28340.006 X-TMASE-Result: 11-18.693400-10.000000 X-TMASE-MatchedRID: UEe6CCDNlZyy+hvfWxsFoJNOoNC0sfXvYN0tb4Z/TMG5uc/LtNqe4m0O CYVs4K5QbuqHP0DtSX0KGDKVKwz5wRZu3Ax5Ngq8/6m/JkIXRCu+h6L7H7eLaiJ5QEgmrAyz4Ue 8oxVhy3tGMhoFpspfJxyoHwE8OdJfqOPwwHr9Yehayaf9MuAM8S3T7t6UgHiaLNRiaqFTd+hWJu HILWFuk1AHtPacGE8IDVown93C+HPpmfi8TiIK/xurwBe+xrCWZCs63gBSa2KjPe6aYKpTiUJ2G 47hrgWd4Ny8B0DozqXSAo4PbTZcxrgU/ZjHtFNglzTGew21KsPTF2hY9pzQmO2KkeTNUqW9O5hQ 4cMD6XV7v8adQwPy2mBbXvNV/xDyJOyPZ8F0fn4tzM8wdlz5DuEKbxqb5I/nKF12+S6s3LCtks+ hZ1eND5uU6dz7QzzRZXWbUd698v9IhbHCNJtZqMmW4LCLTo7kI19CJGmayrosixkOgV2EShVMzC T6JCbLhn28VtCXxNAhwMYhTlIAf3E/RCjP1nuH7GNzFncRbSBbaTWtKN5hhfiZZN0os1WwcY7L7 JBdU55BgF91iIN4/9WAjKnIheWuFNFPqRTzmmQV6fBhG8MwdDDb3HCazFjJj6V1I/BaagkKgBqV M04P3WX2vdzqtyg1ycrNBW/bYyau90ZLtc5cF/ot/poFC1QHYPug2iT1M55LrfW2SLJ1Ie4eDWG vKKvH/jvcfA6GmUiWw3NFKKX/aBNtDlktrjFDfuoXhR6LeChy3EJB/3blhWSltov/KwUif+DGnw FiiWSwwtxeUntEPmsPZXMpcQcgR79VMgC/174fM6JuaffwLXvBA9C/1eiFmyIrubThJAddWGOk0 uc0xkRcQHQSxySqJIJy9uuwhBcGgpDvlwURb7qPTJPkGiTpjwrT44I8p0WVKR9z7T/94gaG4Utj +sREfiAqrjYtFiScW6wTW9o7dbfujhvoRgiS1s9JVPGt8rp9Yczx5vE8On7cGd19dSFd X-TMASE-SNAP-Result: 1.821001.0001-0-1-1:1,22:0,28:1,33:0,34:0-0 X-TMASE-XGENCLOUD: e5a6230b-529b-4868-9a1d-ef0a188603f6-0-0-200-0 X-TM-Deliver-Signature: B4C0FF289F059A76B9A51020EA3980B8 X-TM-Addin-Auth: NOV5moA49BpYeRrYHRHnBWccSRLgZjSsU2IkqcNYBPigHCZUi0/ndc2HNzM jMAmiZp2Gibw83cloDUltwARVp07eZ9OiopMEX5DzRCx1zH8VtpKBDzE5UOFuMlfCMZfTsfQt8z RD19BtLkBiUNSZeNi8R6Cbt1VVZzIQH5YTiytCMkmsiq+6MDfQ7x4nKC+6LDoPFXmjQMe3s0QYD S8n57mY3VARoj+MTAbpDQSaUXOd0cer9keB81xthQCzzRvd+Hn9qoPBFpp3lWSQ+fbeZpi0EK+2 NHtyW2eOVFtdwyo3tctWg/B8qx/OIWFEuko7.2D2g5ceDMUXKdqvTWbL/uElXTiYNK5uYJ1w7Xn riAfDCaiJ5laI0YLBZBNkLqqyB77IRetjokmxPJ54Uv8cGSj4uFhznGz2bP4neSvfGPh16/WcX6 +JDWhobCNswHYiK/W6s5TT037s8T97+ne/EtdIT/tNmzQk6pCpoE1Xw+hD7mFa0nQloU6lc/cG8 V2+jWRavaTl73+lBEhir4FayGXdDajiP6hxM9aljJpWIvrNIG9/BwTGNPVWbTmjdIglgxZFLJcV I12gA2wtLZNFVIgyfCO5DJ14BjtZvBK63Ms5VYdSq6HgZBtB72/SS5GMw05nt/N3GqnzUIZ8pyk 5XQQ== X-TM-Addin-ProductCode: EMS Return-Path: [email protected] X-MS-Exchange-Organization-ExpirationStartTime: 24 Apr 2024 07:15:14.4433 (UTC) X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000 X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit X-MS-Exchange-Organization-Network-Message-Id: 49c376f7-795d-4722-14c7-08dc642e4984 X-EOPAttributedMessage: 0 X-EOPTenantAttributedMessage: bc5f3009-5bd3-4402-beb1-6e2eb7c68ff2:0 X-MS-Exchange-Organization-MessageDirectionality: Incoming X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AMS0EPF00000198:EE_|DB9PR03MB8797:EE_|AS1PR03MB8286:EE_ X-MS-Exchange-Organization-AuthSource: AMS0EPF00000198.eurprd05.prod.outlook.com X-MS-Exchange-Organization-AuthAs: Anonymous X-MS-Office365-Filtering-Correlation-Id: 49c376f7-795d-4722-14c7-08dc642e4984 X-MS-Exchange-AtpMessageProperties: SL X-MS-Exchange-Organization-SCL: 1 X-Microsoft-Antispam: BCL:0;ARA:13230031|4143199003; X-Forefront-Antispam-Report: CIP:18.185.115.173;CTRY:DE;LANG:es;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:inpost.tmes.trendmicro.eu;PTR:inpost.tmes.trendmicro.eu;CAT:NONE;SFS:(13230031)(4143199003);DIR:INB; X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Apr 2024 07:15:14.3965 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 49c376f7-795d-4722-14c7-08dc642e4984 X-MS-Exchange-CrossTenant-Id: bc5f3009-5bd3-4402-beb1-6e2eb7c68ff2 X-MS-Exchange-CrossTenant-AuthSource: AMS0EPF00000198.eurprd05.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9PR03MB8797 X-MS-Exchange-Transport-EndToEndLatency: 00:00:14.8819985 X-MS-Exchange-Processed-By-BccFoldering: 15.20.7472.035 X-Microsoft-Antispam-Mailbox-Delivery: ucf:0;jmr:0;auth:0;dest:I;ENG:(910001)(944506478)(944626604)(920097)(930097)(140003); X-Microsoft-Antispam-Message-Info: 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

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

General

Target

http://Received: from DB9PR03MB8797.eurprd03.prod.outlook.com (2603:10a6:10:3c6::6) by AS1PR03MB8286.eurprd03.prod.outlook.com with HTTPS; Wed, 24 Apr 2024 07:15:29 +0000 Received: from AM0PR02CA0003.eurprd02.prod.outlook.com (2603:10a6:208:3e::16) by DB9PR03MB8797.eurprd03.prod.outlook.com (2603:10a6:10:3c6::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7519.22; Wed, 24 Apr 2024 07:15:14 +0000 Received: from AMS0EPF00000198.eurprd05.prod.outlook.com (2603:10a6:208:3e:cafe::38) by AM0PR02CA0003.outlook.office365.com (2603:10a6:208:3e::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7495.34 via Frontend Transport; Wed, 24 Apr 2024 07:15:14 +0000 Authentication-Results: spf=pass (sender IP is 18.185.115.173) smtp.mailfrom=cepsa.net; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cepsa.net;compauth=none reason=905 Received-SPF: Pass (protection.outlook.com: domain of cepsa.net designates 18.185.115.173 as permitted sender) receiver=protection.outlook.com; client-ip=18.185.115.173; helo=inpost.tmes.trendmicro.eu; pr=C Received: from inpost.tmes.trendmicro.eu (18.185.115.173) by AMS0EPF00000198.mail.protection.outlook.com (10.167.16.244) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.20.7519.19 via Frontend Transport; Wed, 24 Apr 2024 07:15:14 +0000 Received: from 94.199.89.127_.trendmicro.com (unknown [172.21.192.213]) by inpost.tmes.trendmicro.eu (Postfix) with SMTP id 299C11002841C; Wed, 24 Apr 2024 07:15:14 +0000 (UTC) X-TM-MAIL-RECEIVED-TIME: 1713942910.581000 X-TM-MAIL-UUID: 6954505e-0917-49e7-831f-53b74621322f Received: from mailout-wxp12.retarus.com (unknown [94.199.89.127]) by inpre01.tmes.trendmicro.eu (Trend Micro Email Security) with ESMTPS id 8DFAB10001D79 for <[email protected]>; Wed, 24 Apr 2024 07:15:10 +0000 (UTC) Received: from mpc01.dmz2.retloc (unknown [172.19.20.180]) by mailout-wxp12.retarus.com (Postfix) with SMTP id 4VPVcY6JRZzy8j for <[email protected]>; Wed, 24 Apr 2024 09:15:09 +0200 (CEST) Message-Id: <[email protected]> From: Cepsa News <[email protected]> To: "Laura" <[email protected]> Subject: �Laura, ya puedes ver los resultados de la encuesta 'Pulso de Experiencia del Empleado' MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_589043_811584779.1713942525880" X-RecipientId: 9RNE/XCsjL8/sjDf X-Priority: 3 X-Mailer: WebExpress (WXP 22-02) Date: Wed, 24 Apr 2024 09:15:09 +0200 (CEST) X-TM-Received-SPF: Pass (domain of [email protected] designates 94.199.89.127 as permitted sender) client-ip=94.199.89.127; [email protected]; helo=mailout-wxp12.retarus.com X-TM-Authentication-Results: dkim=pass; No processed signatures and verification is not enforced X-TM-AS-ERS: 94.199.89.127-127.5.249.21 X-TMASE-Version: StarCloud-1.3-9.1.1023-28340.006 X-TMASE-Result: 11-18.693400-10.000000 X-TMASE-MatchedRID: UEe6CCDNlZyy+hvfWxsFoJNOoNC0sfXvYN0tb4Z/TMG5uc/LtNqe4m0O CYVs4K5QbuqHP0DtSX0KGDKVKwz5wRZu3Ax5Ngq8/6m/JkIXRCu+h6L7H7eLaiJ5QEgmrAyz4Ue 8oxVhy3tGMhoFpspfJxyoHwE8OdJfqOPwwHr9Yehayaf9MuAM8S3T7t6UgHiaLNRiaqFTd+hWJu HILWFuk1AHtPacGE8IDVown93C+HPpmfi8TiIK/xurwBe+xrCWZCs63gBSa2KjPe6aYKpTiUJ2G 47hrgWd4Ny8B0DozqXSAo4PbTZcxrgU/ZjHtFNglzTGew21KsPTF2hY9pzQmO2KkeTNUqW9O5hQ 4cMD6XV7v8adQwPy2mBbXvNV/xDyJOyPZ8F0fn4tzM8wdlz5DuEKbxqb5I/nKF12+S6s3LCtks+ hZ1eND5uU6dz7QzzRZXWbUd698v9IhbHCNJtZqMmW4LCLTo7kI19CJGmayrosixkOgV2EShVMzC T6JCbLhn28VtCXxNAhwMYhTlIAf3E/RCjP1nuH7GNzFncRbSBbaTWtKN5hhfiZZN0os1WwcY7L7 JBdU55BgF91iIN4/9WAjKnIheWuFNFPqRTzmmQV6fBhG8MwdDDb3HCazFjJj6V1I/BaagkKgBqV M04P3WX2vdzqtyg1ycrNBW/bYyau90ZLtc5cF/ot/poFC1QHYPug2iT1M55LrfW2SLJ1Ie4eDWG vKKvH/jvcfA6GmUiWw3NFKKX/aBNtDlktrjFDfuoXhR6LeChy3EJB/3blhWSltov/KwUif+DGnw FiiWSwwtxeUntEPmsPZXMpcQcgR79VMgC/174fM6JuaffwLXvBA9C/1eiFmyIrubThJAddWGOk0 uc0xkRcQHQSxySqJIJy9uuwhBcGgpDvlwURb7qPTJPkGiTpjwrT44I8p0WVKR9z7T/94gaG4Utj +sREfiAqrjYtFiScW6wTW9o7dbfujhvoRgiS1s9JVPGt8rp9Yczx5vE8On7cGd19dSFd X-TMASE-SNAP-Result: 1.821001.0001-0-1-1:1,22:0,28:1,33:0,34:0-0 X-TMASE-XGENCLOUD: e5a6230b-529b-4868-9a1d-ef0a188603f6-0-0-200-0 X-TM-Deliver-Signature: B4C0FF289F059A76B9A51020EA3980B8 X-TM-Addin-Auth: NOV5moA49BpYeRrYHRHnBWccSRLgZjSsU2IkqcNYBPigHCZUi0/ndc2HNzM jMAmiZp2Gibw83cloDUltwARVp07eZ9OiopMEX5DzRCx1zH8VtpKBDzE5UOFuMlfCMZfTsfQt8z RD19BtLkBiUNSZeNi8R6Cbt1VVZzIQH5YTiytCMkmsiq+6MDfQ7x4nKC+6LDoPFXmjQMe3s0QYD S8n57mY3VARoj+MTAbpDQSaUXOd0cer9keB81xthQCzzRvd+Hn9qoPBFpp3lWSQ+fbeZpi0EK+2 NHtyW2eOVFtdwyo3tctWg/B8qx/OIWFEuko7.2D2g5ceDMUXKdqvTWbL/uElXTiYNK5uYJ1w7Xn riAfDCaiJ5laI0YLBZBNkLqqyB77IRetjokmxPJ54Uv8cGSj4uFhznGz2bP4neSvfGPh16/WcX6 +JDWhobCNswHYiK/W6s5TT037s8T97+ne/EtdIT/tNmzQk6pCpoE1Xw+hD7mFa0nQloU6lc/cG8 V2+jWRavaTl73+lBEhir4FayGXdDajiP6hxM9aljJpWIvrNIG9/BwTGNPVWbTmjdIglgxZFLJcV I12gA2wtLZNFVIgyfCO5DJ14BjtZvBK63Ms5VYdSq6HgZBtB72/SS5GMw05nt/N3GqnzUIZ8pyk 5XQQ== X-TM-Addin-ProductCode: EMS Return-Path: [email protected] X-MS-Exchange-Organization-ExpirationStartTime: 24 Apr 2024 07:15:14.4433 (UTC) X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000 X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit X-MS-Exchange-Organization-Network-Message-Id: 49c376f7-795d-4722-14c7-08dc642e4984 X-EOPAttributedMessage: 0 X-EOPTenantAttributedMessage: bc5f3009-5bd3-4402-beb1-6e2eb7c68ff2:0 X-MS-Exchange-Organization-MessageDirectionality: Incoming X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AMS0EPF00000198:EE_|DB9PR03MB8797:EE_|AS1PR03MB8286:EE_ X-MS-Exchange-Organization-AuthSource: AMS0EPF00000198.eurprd05.prod.outlook.com X-MS-Exchange-Organization-AuthAs: Anonymous X-MS-Office365-Filtering-Correlation-Id: 49c376f7-795d-4722-14c7-08dc642e4984 X-MS-Exchange-AtpMessageProperties: SL X-MS-Exchange-Organization-SCL: 1 X-Microsoft-Antispam: BCL:0;ARA:13230031|4143199003; X-Forefront-Antispam-Report: CIP:18.185.115.173;CTRY:DE;LANG:es;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:inpost.tmes.trendmicro.eu;PTR:inpost.tmes.trendmicro.eu;CAT:NONE;SFS:(13230031)(4143199003);DIR:INB; X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Apr 2024 07:15:14.3965 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 49c376f7-795d-4722-14c7-08dc642e4984 X-MS-Exchange-CrossTenant-Id: bc5f3009-5bd3-4402-beb1-6e2eb7c68ff2 X-MS-Exchange-CrossTenant-AuthSource: AMS0EPF00000198.eurprd05.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9PR03MB8797 X-MS-Exchange-Transport-EndToEndLatency: 00:00:14.8819985 X-MS-Exchange-Processed-By-BccFoldering: 15.20.7472.035 X-Microsoft-Antispam-Mailbox-Delivery: ucf:0;jmr:0;auth:0;dest:I;ENG:(910001)(944506478)(944626604)(920097)(930097)(140003); X-Microsoft-Antispam-Message-Info: wMIDkht+t63+sGmilLHWb2k2ko3q4W+11Igq+aIJhVEDKGuPUzDGY1ufM5wL/mN3WTy9Oxw6/cLrAiYdMnf++GY3yBVH4ViF+LNzmmraMjJZu/BbkzVuwiDyOfJET6TDrvm4gmGjJep0kNDkXBHpD5GHHUsuH1A3XcGoYNIvlmLIbj911mE3EGOb162Eecr0LVqe8g91K8ntLgikJ6LvC9NAdcHB9PUIFxCkML8o0YNRWayZlDfWgbIIPEP/Aa8Nd9fVZcHkDxEFN3u2Ev1L3Pxf1VSch2ygu+nhUKf0tvBaKyPWcBdUeKVekKTK8MRmo+4KM5u9JYAipVFfQmV431vGwvURkz0zfipUKAWM9Kq2D80UgV7K9jKH+TLzx+6aMmFdoeJcOWmlieyO8rGiqiwE2WSvEaDHnXoRYF6cGrmr8xqjh8lrPdfVJdU9wOt4dpCOC7wJogzF1oLQBRqtbPtt0GXa6NhXEAaIWcQ4zY7kdVaHGnVU3ZrWvaiT5rOqqxi+RHUayxBFU7L0S65iegRUSg3C8hLDxlad04+118WTKqcAD9dF70D/Rn7juKzY6+vaaA5lowvHT7C1j/TOZ6BhADxsyfdOtY+b6OCjbtpewQyAYOrHHx5qkNx450MAi8cSrghute9xWMxxrYZkr/ZjFgUK/GZcg2Dyi/4lkVDCFHuJ49kSbjJrkGxYUWmUYtsalhHd4K+b753i/9CSvxGdZC5AFDecNrUiBmmJnEKkL8npR4WxyN9BkhmtrthiJIYFWzTrXD17389QULwaT46V4Rcuu+zynv6KFbqXFngcSt0c6ETEwN966J1EDZ64vLYueSfgds3CawVQ/1wEzc59tcLjcIU1x658irtbP4+61W6jU4/K2saNp+v0IzFZvy5lqq/bdQ6fdnFrqZ6q+Eks4LwILHDCbcfs09d82lco0UWJRSNYj2d9gGl4GZ/P5xNAevOhaiSnSlXi/PFGchjcZXlLoFaZpRggx/s4HdlGu1c3X5fJ3foWwKzm+UwBV0svRSdWwZQg0oxgEylHJtKCYCBF/hO1CCmVnogVG+j16ju7XVe6KIc6ij6wPRtv/B28eDa4ry8Bhu6ehFZRZ9OEymC3uwpzcCj0gQlKUJL8l80oHdYvE7VijClHp8tzvzhp82vIe1KYwKgmCMqD6AvOChOnQZQpFuqiSB9Iot2G5mR8rk8KtX3NBxq+wMZgDwsIOn0i7trY2iOobHeDKBDDMcQyfVyhhF7ljQ0v94gWnz2vYR+alsWjMyljHcPzPUPO8CUSwhLETxT3An/I2ZK180xPW7AvXEl/z8PIRUqBwyqbX7eawA+IvTAL97hn2y6OApb1QBt3aklg0Pss7kBZg5p2OdoQDImOf2knM9ywmQv4gALucpfQtr0wbt8HlRVzNASalFpPV6izTLpBffutZCy967Of8pMm/iBZV1BG/YWwyC4pf9NTst2BWu+hbrCRTmj88pIKuDO7ChPQg1pl1a/inccglESj1962F3klBawD7SbIvy9H3aygK6u3lpYFJ3KJxB1ckFabTgJO4m+8ZBfPk8R3pQwNkXon7CEqTL8qKCAPY5FcenZcqNBx7IPGb34oJLwqyJKLNIx0sf8bQ9TTRu7VmVlqQCh1+urlCm9w0osidPih8wmqEAcqV7SlAX5PQeQYkq4wbRKcLn3affI3PXzmrdRBNzqcIhEaFQhdklH2fm7Ep3wXow2X+VZQvozHys4UYgAmnIrWX1pSYIQLUL66ajw67r+Tp0wUSQ+A1nkGmD/RbcGDG9YK51QVk8sFk/gVoKIoWkdXKuqalwxxO6zIJizVPiNzec+6wHQm2TT4pFWMdbEKsmVQSvE9FjGHYpq+0j++9zQjadgp8cUhBEfRQ8sbs+y6wSrajpBJe/CESe+1RTwrfVFKRhsC0Cfl6en9LwmNGkUXoyFJFmf6ErmVbhpfIA+QjXJBr89O2Nqxp5B7CA5wNU+cwSieCrmO52eM81yaqWhHGS/+/vdM6xG3p9h9MbglGWI=

Sharing

General

Malware Config

Signatures

Files