Edit tour

Windows Analysis Report
http://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app

Overview

General Information

Sample URL:	http://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app
Analysis ID:	1658335
Infos:

Detection

Score:	1
Range:	0 - 100
Confidence:	100%

Signatures

Creates files inside the system directory

Deletes files inside the Windows folder

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2576 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 1832 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2368,i,4451319589850786817,14206868647945929326,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2396 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6512 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 142.251.40.228:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.33.233:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.33.233:443 -> 192.168.2.4:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.33.233:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.33.233:443 -> 192.168.2.4:49741 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.appConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-efa30c7e.css HTTP/1.1Host: extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-4c2b365d.js HTTP/1.1Host: extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.appConnection: keep-aliveOrigin: https://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.appsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJKhywEInP7MAQiFoM0BCL7VzgEIgNbOAQj5184BCMHYzgEIyNzOAQiK4M4BCK7kzgEIi+XOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prettier.svg HTTP/1.1Host: extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prettier.svg HTTP/1.1Host: extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app

Source: chromecache_57.3.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Fira
Source: chromecache_56.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/firacode/v22/uU9NCBsR6Z2vfE9aq3bh09SDulI.woff2)
Source: chromecache_56.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/firacode/v22/uU9NCBsR6Z2vfE9aq3bh0NSDulI.woff2)
Source: chromecache_56.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/firacode/v22/uU9NCBsR6Z2vfE9aq3bh0dSDulI.woff2)
Source: chromecache_56.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/firacode/v22/uU9NCBsR6Z2vfE9aq3bh2dSDulI.woff2)
Source: chromecache_56.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/firacode/v22/uU9NCBsR6Z2vfE9aq3bh3dSD.woff2)
Source: chromecache_56.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/firacode/v22/uU9NCBsR6Z2vfE9aq3bh3tSDulI.woff2)
Source: chromecache_56.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v21/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxQKYbABA.woff2
Source: chromecache_56.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v21/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxRKYbABA.woff2
Source: chromecache_56.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v21/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxTKYbABA.woff2
Source: chromecache_56.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v21/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxaKYbABA.woff2
Source: chromecache_56.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v21/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxdKYbABA.woff2
Source: chromecache_56.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/ibmplexsans/v21/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYY.woff2)
Source: chromecache_54.3.dr	String found in binary or memory: https://github.com/reach/reach-ui/issues/new?assignees=&labels=&template=Bug_report.md
Source: chromecache_58.3.dr	String found in binary or memory: https://prettier-replit.erikoxdev.repl.co/
Source: chromecache_54.3.dr	String found in binary or memory: https://prettier.io/docs/en/ignore.html

Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723

Source: unknown	HTTPS traffic detected: 142.251.40.228:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.33.233:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.33.233:443 -> 192.168.2.4:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.33.233:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.33.233:443 -> 192.168.2.4:49741 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir2576_1974357774

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir2576_1974357774

Jump to behavior

Source: classification engine

Classification label: clean1.win@22/17@10/3

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2368,i,4451319589850786817,14206868647945929326,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2396 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2368,i,4451319589850786817,14206868647945929326,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2396 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://prettier-replit.erikoxdev.repl.co/	0%	Avira URL Cloud	safe
https://prettier.io/docs/en/ignore.html	0%	Avira URL Cloud	safe
https://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app/prettier.svg	0%	Avira URL Cloud	safe
https://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app/assets/index-efa30c7e.css	0%	Avira URL Cloud	safe
https://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app/assets/index-4c2b365d.js	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.google.com	142.251.40.228	true	false		high
extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app	34.117.33.233	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app/prettier.svg	false	Avira URL Cloud: safe	unknown
http://c.pki.goog/r/gsr1.crl	false		high
http://c.pki.goog/r/r4.crl	false		high
https://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app/assets/index-4c2b365d.js	false	Avira URL Cloud: safe	unknown
https://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app/assets/index-efa30c7e.css	false	Avira URL Cloud: safe	unknown
https://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app/	false		unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://prettier.io/docs/en/ignore.html	chromecache_54.3.dr	false	Avira URL Cloud: safe	unknown
https://github.com/reach/reach-ui/issues/new?assignees=&labels=&template=Bug_report.md	chromecache_54.3.dr	false		high
https://prettier-replit.erikoxdev.repl.co/	chromecache_58.3.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
142.251.40.228	www.google.com	United States		15169	GOOGLEUS	false
34.117.33.233	extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app	United States		139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1658335
Start date and time:	2025-04-07 15:10:29 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@22/17@10/3
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.80.99, 142.250.65.206, 142.251.40.110, 192.178.155.84, 142.250.65.238, 142.251.40.206, 142.250.81.238, 142.251.40.234, 199.232.210.172, 142.250.81.227, 23.203.176.221, 142.251.41.10, 142.251.40.202, 142.250.81.234, 142.250.80.10, 172.217.165.138, 142.250.80.74, 142.250.80.106, 142.250.65.202, 142.250.64.74, 142.250.72.106, 142.250.65.234, 142.250.65.170, 142.250.176.202, 142.250.80.42, 142.250.64.106, 142.251.32.110, 142.250.80.78, 142.251.41.14, 142.251.40.238, 172.253.122.94, 142.250.80.67, 184.31.69.3, 204.79.197.222, 172.202.163.200
Excluded domains from analysis (whitelisted): fp.msedge.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37554)
Category:	downloaded
Size (bytes):	371552
Entropy (8bit):	5.467800883387786
Encrypted:	false
SSDEEP:	6144:s00K3m0cbiQStHLnBCfsSnx5UKpa10b+cOGRhKf/c:zYStLEfsSnx5UKy0qcrRhK3c
MD5:	C6B47BB6D98B297348282FBCA3F8E5F8
SHA1:	D02414CBF3F36BCDF267D7AEF9D8BDEBF85FB561
SHA-256:	60CC373BADC243E6C6DA2D16DFEB1279BE37B99DFED889B6B724D72F0E178B8A
SHA-512:	3F6C8C67B79F0A610A2889C957D3E179C953BDF2FA4223FAAF8EBA0E96BD20C786D1E28295883F0F00977CCE1746A9E9057408A6C2402D719D4D9A18EED24580
Malicious:	false
Reputation:	low
URL:	https://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app/assets/index-4c2b365d.js
Preview:	var Qg=Object.defineProperty;var qg=(e,t,n)=>t in e?Qg(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var Cr=(e,t,n)=>(qg(e,typeof t!="symbol"?t+"":t,n),n);function Zg(e,t){for(var n=0;n<t.length;n++){const r=t[n];if(typeof r!="string"&&!Array.isArray(r)){for(const i in r)if(i!=="default"&&!(i in e)){const o=Object.getOwnPropertyDescriptor(r,i);o&&Object.defineProperty(e,i,o.get?o:{enumerable:!0,get:()=>r[i]})}}}return Object.freeze(Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}))}(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const i of document.querySelectorAll('link[rel="modulepreload"]'))r(i);new MutationObserver(i=>{for(const o of i)if(o.type==="childList")for(const s of o.addedNodes)s.tagName==="LINK"&&s.rel==="modulepreload"&&r(s)}).observe(document,{childList:!0,subtree:!0});function n(i){const o={};return i.integrity&&(o.integrity=i.integrity),i.referrerPolicy&&(o.referrerPolicy=

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 45712, version 1.0
Category:	downloaded
Size (bytes):	45712
Entropy (8bit):	7.994989058321625
Encrypted:	true
SSDEEP:	768:7Alk3Vzs14DNE+WtOrSGDz68e9zamVMwSxn0uFqc8NyQ+Kxh/D6:f3BC4pEpOuB8k+wSR0XfyjW9e
MD5:	B2C9031D9FD6493CCDA94908CDBA4ABD
SHA1:	D8B4E62DBB826591E45B6B7245EDBCA76B4F48A4
SHA-256:	E2291E842CF5AF167122A22881A740C7F2DDA7716F1E8CD76680264F4A859470
SHA-512:	B2A0C2A42B5D755EC7BB3BE02D8969F9847A85EC309F35D52EBC3C98AC5DB261F88A6B70003295AD0A2E467E37B600694B2B8C8A5201036C3D0853B34515DA5D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/ibmplexsans/v21/zYXzKVElMYYaJe8bpLHnCwDKr932-G7dytD-Dmu1syxeKYY.woff2
Preview:	wOF2..............................................O...r..b?HVAR.3?MVARb.`?STAT.2'..\|+"..../j........[....0..F.6.$..8. ..T..m..([.m.@..n.OK.......\|..Q0....6.G.Y.(;J ..`....e..../H&2fwA..-. 0T....R.Q26.%z.......Z...L4j.....6/........BK....mr..;ET.`..&..D..B.uF..(0...V..T:.&..rv...i..>B.'.<K...t/.(.4;B.a..LUP\|.b....1..9...v._..~\|a.@.._...4.\.....r..i.]VQwq..;.4.u>_...0\|3"`.NS...._E.<.M.cQ;...z$.d*.)t.......`...QE^...l...:h.....d.......e'.u..2>lhP....=iH=,uy.V)i....5...7Z..c..+.=..x.x`.+.Xe..=L..'.w....!...q%./..........vh...J..ghT.P.b....!Fu.:?_lB.81'S.....y.M...{....<.P...~.A@2:u....nkM.f.tl.3...,....5...c.._iV.Jxz..7..d.@.^`:.ju..m.N.BQ...D....Z.'..U.Q..u......m.t.W...E.@.....D...n9.k.e.%v.7.\|_....C......{.K...K.kw.."Gn-_.j...%..o.j+.$=S.6....i.N.[.#.\|....r.%.XJ..E.\|......!%K.......},na.;A.`..5c5t..H....>.A......i.L.AM.6..u..I.`..7..iO\...r.......x"Ji.a.\........... .....b.....F.?o.\|.....%..%......+..K.h..2...,.hx..l........YmR.Ft....&6.".Y.E&r.x...

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	18112
Entropy (8bit):	5.523746682324223
Encrypted:	false
SSDEEP:	192:V1Fmv9MblXS1Yf29M6l+B1fYV9Mpl9v1xCz9MXlba2aIBAmM3xIGR32M2aZBRmM2:z6AVuj3Npvczb
MD5:	7F30FFD4D8F9456ACCAF31931F8DAA46
SHA1:	B2890A9D7FDB969CC177436476AE10BFD7572875
SHA-256:	8503A5220EC2F44D77FC1B9AFC31CDF3F6CF726E724522B4021E82443B97CE20
SHA-512:	8B6DCE39C6DCD44416D26BAC6C09B446614DA830F68EA45C0B61F0F98AB0EF0A1C4F1341B79931B310D629A73399F9F35C3A6E878760A632C3F089127DC84041
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Fira+Code:wght@300;400;500;700&family=IBM+Plex+Sans:wght@300;400;500;700&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Fira Code';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/firacode/v22/uU9NCBsR6Z2vfE9aq3bh0NSDulI.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Fira Code';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/firacode/v22/uU9NCBsR6Z2vfE9aq3bh2dSDulI.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Fira Code';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/firacode/v22/uU9NCBsR6Z2vfE9aq3bh0dSDulI.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Fira Code';. font-style: normal;. font-weight: 300;. font-display: swap;. src: u

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (683)
Category:	downloaded
Size (bytes):	684
Entropy (8bit):	5.110386752077103
Encrypted:	false
SSDEEP:	12:oE4HobeyvRZWkC8Vu5FdeQ6KAMiyA78yAkgNIXeDvRmFC8Vu5FYN:LbesoAVkehK3iyy8ylgfsVjN
MD5:	C129FE50746D10E913F404DE7EB452E8
SHA1:	4010EC1E262EF039085AD419C1C8BD24FBCDD023
SHA-256:	EFA30C7E90B55D4F508C530FB4E4312B19AD91451D5E466C91A15E05D1E05311
SHA-512:	4DE59D80D3DCA1E33035C9ABDEBB6DF698558F190FAD0AF7D0820B2CFA809C76BBB4F2812BCD9D87BEF979D39ED9B1AFAE4DB88150E55F2D4B7A9F30E3480E2C
Malicious:	false
Reputation:	low
URL:	https://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app/assets/index-efa30c7e.css
Preview:	@import"https://fonts.googleapis.com/css2?family=Fira+Code:wght@300;400;500;700&family=IBM+Plex+Sans:wght@300;400;500;700&display=swap";{margin:0;padding:0;box-sizing:border-box;font-family:IBM Plex Sans,sans-serif}#root{display:flex;flex-direction:column;align-items:center;flex:1 1 auto;width:100vw;height:100vh}.spinElement{animation-name:spin;animation-duration:5s;animation-iteration-count:infinite;animation-timing-function:linear}@keyframes spin{0%{transform:rotate(0)}to{transform:rotate(360deg)}}{margin:0;padding:0;box-sizing:border-box}#__next{display:flex;flex-direction:column;align-items:center;flex:1 1 auto;width:100vw;height:100vh}html,body{height:100%;width:100%}.

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	976
Entropy (8bit):	4.71868792230306
Encrypted:	false
SSDEEP:	12:hY0JzMNYyg58EIl2zvNqmPNqh0IN5eQIl2zpxmqsPWGVxS9qAEdHIQL:hY0JoNYt1wSvNBNU0I2QwS3EPWGVg7Ex
MD5:	A8CE4028991352BD8C00B9A6C6004D30
SHA1:	337146418AB4BCC84580070BD66E5248E4F2AAB3
SHA-256:	24D5B18D99147BCE579C676C804B190C3AEAF8CE40B67C47007AA9B3CE75FFD9
SHA-512:	1AF487FC5EF7B547E5D911824107739A9F46211AB1F6FAE482FA266D1320EBBE57D6BCEC0AA33F281A1DC37EA4CB9E04E2102A3316A494C8C5940DA687D0E584
Malicious:	false
Reputation:	low
URL:	https://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app/
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <link rel="icon" type="image/svg+xml" href="/prettier.svg" />. <meta name="viewport" content="width=device-width, initial-scale=1.0" />. <title>Vite + React + TS</title>. <meta. name="description". content="Use Prettier in Replit (yes i added seo)". />. <meta name="author" content="ErikoXDev" />. <meta property="og:title" content="Prettier for Replit" />. <meta property="og:type" content="website" />. <meta. property="og:url". content="https://prettier-replit.erikoxdev.repl.co/". />. <meta. property="og:description". content="Use Prettier in Replit (yes i added seo)". />. <meta name="theme-color" content="#002633" />. <script type="module" crossorigin src="/assets/index-4c2b365d.js"></script>. <link rel="stylesheet" href="/assets/index-efa30c7e.css">. </head>. <body>. <div id="root"></div>. . </body>.</html>.

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HKmn:qmn
MD5:	EC331136E75314D2030EE013B6069921
SHA1:	6B7428B8B15616A67F767D42964AF94FCBE2A803
SHA-256:	A7358DF6B7B60280F2A0D7CD5B70A9F1DFA4FCE5C31FB1A24FB2F109AF7EE977
SHA-512:	30C9B411C937F7D3DE9E59D8BE1CDE4F262B05C6AC2EC2D2C1956E705FE255D84DE17913826A0378B7FD4E51E075EE72A6BF16B870BF78B83D4F1D4507A44278
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIZCUxSlUmSDvfOEgUNBu27_yGBr4g9inPd0w==?alt=proto
Preview:	CgkKBw0G7bv/GgA=

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4911
Entropy (8bit):	4.6239121881345335
Encrypted:	false
SSDEEP:	48:rOKxrBEkBdwHs1l942VgMdI2Y2rkNTu9LzrUoLBaxHnOjPLTGQGNUqnldnUkvS9x:6uBpHVr2CLJ4I3YEf
MD5:	5AD58D64C5533E17124427294E89BDDC
SHA1:	B6CAC74996142B328F0575329528BD335AC7D23B
SHA-256:	023FA512E17DEA46C6A09C9EA28F67DEC2000ADF4A972AD2888F0A48DB6BAD85
SHA-512:	A4664A28003542398892542B97C2469B3ACF895D1618378FDD3119E4907E8D8EBD5D1B41796CCFFA4208B9EF15259446EF465831405B70191394194C11336323
Malicious:	false
Reputation:	low
URL:	https://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app/prettier.svg
Preview:	<svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 210 210" width="2500" height="2500"><style>.st0{fill:#56b3b4}.st1{fill:#ea5e5e}.st2{fill:#bf85bf}.st3{fill:#f7ba3e}.st4{opacity:.5;fill:#4d616e;enable-background:new}</style><title>prettier-icon-dark</title><g id="Page-1"><g id="prettier-icon-dark"><g id="Icon-_x28_Dark_x29_"><g id="Group"><path id="Rectangle" class="st0" d="M155 40h10c2.8 0 5 2.2 5 5s-2.2 5-5 5h-10c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_1_" class="st1" d="M5 200h50c2.8 0 5 2.2 5 5s-2.2 5-5 5H5c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_2_" class="st2" d="M125 120h30c2.8 0 5 2.2 5 5s-2.2 5-5 5h-30c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_3_" class="st1" d="M65 120h40c2.8 0 5 2.2 5 5s-2.2 5-5 5H65c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_4_" class="st0" d="M5 120h40c2.8 0 5 2.2 5 5s-2.2 5-5 5H5c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_5_" class="st2" d="M5 160h50c2.8 0 5 2.2 5 5s-2.2 5-5 5H5c-2.8 0-5-2.2-5-5s2.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4256)
Category:	downloaded
Size (bytes):	4261
Entropy (8bit):	5.850575504709559
Encrypted:	false
SSDEEP:	96:Z/jl3g0SL0yPifrtX/HjhzoBROL+J5g9DCEiPLz6DH9DrfffffX:f3g05yafr99zoBROKJm9Dbh9n
MD5:	C7D1B302E0CE0D4E9CEA41B549A98D86
SHA1:	7FD3FDD038836EB6F234A4261F6A6F3A5DACC181
SHA-256:	126419E776B9806F5B37471CE52BF1E06A49EA2EF68388DAC7A9870DBCC84EB9
SHA-512:	07110D69F3BA1CE3099B9D6A7218E00FD4C213C6B529A9B511F721DAD4B8F1A7AB0F311A427F21F8E006F6AAAECA88B3DF6A1A5E2ED5369A707A25E13EACD25B
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["",["nvidia stock forecast","zodiac signs daily horoscope today","arkansas baseball","severe weather tornadoes","raising kanan who killed famous","saudi arabia bans visas","st louis cardinals","big lots reopening stores"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4SFQoRVHJlbmRpbmcgc2VhcmNoZXMoCg\u003d\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"google:entityinfo":"CggvbS8wNng2OBINQmFzZWJhbGwgdGVhbTLiEmRhdGE6aW1hZ2UvcG5nO2Jhc2U2NCxpVkJPUncwS0dnb0FBQUFOU1VoRVVnQUFBRUFBQUFBOUNBTUFBQUFxQzUvekFBQUJaVkJNVkVYLy8vKzNJU2E3SVNTNUlTVytJU1ArNWc3LzZnQ2hJaTZlSWkrSUl6Yi82QXhrSkQvQklTSytIUjl2SkR5TUl6VnJKRDJsSWkydUlTbCtJem5JMGRlb0FCSjNKRHB6SkR1bHNMci83Z0R5OXZpMHZzYURBQmF0dU1HTkFBQ2FJakZkSkVDNERCTFIxT08vd2NqUnZRQ2VBQlBqemdDREFBQmVPbEtjcHJGMkFCbDhscVhUMnQvbDZ1MTJlNHN5QUMxYUFDVW9LRXRNTlZGVVYyNlJBQk10UkdGTlNHRnpFUzZQbHFJbkFERkhBQ3VnRFI1cmFFTlVXRUFBRUVwWmFYNTVpWmx4Y0ZZN1FEN0h

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4911
Entropy (8bit):	4.6239121881345335
Encrypted:	false
SSDEEP:	48:rOKxrBEkBdwHs1l942VgMdI2Y2rkNTu9LzrUoLBaxHnOjPLTGQGNUqnldnUkvS9x:6uBpHVr2CLJ4I3YEf
MD5:	5AD58D64C5533E17124427294E89BDDC
SHA1:	B6CAC74996142B328F0575329528BD335AC7D23B
SHA-256:	023FA512E17DEA46C6A09C9EA28F67DEC2000ADF4A972AD2888F0A48DB6BAD85
SHA-512:	A4664A28003542398892542B97C2469B3ACF895D1618378FDD3119E4907E8D8EBD5D1B41796CCFFA4208B9EF15259446EF465831405B70191394194C11336323
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 210 210" width="2500" height="2500"><style>.st0{fill:#56b3b4}.st1{fill:#ea5e5e}.st2{fill:#bf85bf}.st3{fill:#f7ba3e}.st4{opacity:.5;fill:#4d616e;enable-background:new}</style><title>prettier-icon-dark</title><g id="Page-1"><g id="prettier-icon-dark"><g id="Icon-_x28_Dark_x29_"><g id="Group"><path id="Rectangle" class="st0" d="M155 40h10c2.8 0 5 2.2 5 5s-2.2 5-5 5h-10c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_1_" class="st1" d="M5 200h50c2.8 0 5 2.2 5 5s-2.2 5-5 5H5c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_2_" class="st2" d="M125 120h30c2.8 0 5 2.2 5 5s-2.2 5-5 5h-30c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_3_" class="st1" d="M65 120h40c2.8 0 5 2.2 5 5s-2.2 5-5 5H65c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_4_" class="st0" d="M5 120h40c2.8 0 5 2.2 5 5s-2.2 5-5 5H5c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_5_" class="st2" d="M5 160h50c2.8 0 5 2.2 5 5s-2.2 5-5 5H5c-2.8 0-5-2.2-5-5s2.

Static File Info

⊘No static file info

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 283
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 7, 2025 15:11:27.504555941 CEST	49671	443	192.168.2.4	204.79.197.203
Apr 7, 2025 15:11:27.816767931 CEST	49671	443	192.168.2.4	204.79.197.203
Apr 7, 2025 15:11:28.426268101 CEST	49671	443	192.168.2.4	204.79.197.203
Apr 7, 2025 15:11:29.629324913 CEST	49671	443	192.168.2.4	204.79.197.203
Apr 7, 2025 15:11:32.129307032 CEST	49671	443	192.168.2.4	204.79.197.203
Apr 7, 2025 15:11:36.270337105 CEST	49678	443	192.168.2.4	20.189.173.27
Apr 7, 2025 15:11:36.707458973 CEST	49678	443	192.168.2.4	20.189.173.27
Apr 7, 2025 15:11:37.019881010 CEST	49671	443	192.168.2.4	204.79.197.203
Apr 7, 2025 15:11:37.316729069 CEST	49678	443	192.168.2.4	20.189.173.27
Apr 7, 2025 15:11:38.519949913 CEST	49678	443	192.168.2.4	20.189.173.27
Apr 7, 2025 15:11:39.121831894 CEST	49723	443	192.168.2.4	142.251.40.228
Apr 7, 2025 15:11:39.121864080 CEST	443	49723	142.251.40.228	192.168.2.4
Apr 7, 2025 15:11:39.122020006 CEST	49723	443	192.168.2.4	142.251.40.228
Apr 7, 2025 15:11:39.122266054 CEST	49723	443	192.168.2.4	142.251.40.228
Apr 7, 2025 15:11:39.122277975 CEST	443	49723	142.251.40.228	192.168.2.4
Apr 7, 2025 15:11:39.339205027 CEST	443	49723	142.251.40.228	192.168.2.4
Apr 7, 2025 15:11:39.339294910 CEST	49723	443	192.168.2.4	142.251.40.228
Apr 7, 2025 15:11:39.341279030 CEST	49723	443	192.168.2.4	142.251.40.228
Apr 7, 2025 15:11:39.341289043 CEST	443	49723	142.251.40.228	192.168.2.4
Apr 7, 2025 15:11:39.341695070 CEST	443	49723	142.251.40.228	192.168.2.4
Apr 7, 2025 15:11:39.394469023 CEST	49723	443	192.168.2.4	142.251.40.228
Apr 7, 2025 15:11:40.925738096 CEST	49678	443	192.168.2.4	20.189.173.27
Apr 7, 2025 15:11:41.213582039 CEST	49726	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.213614941 CEST	443	49726	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.213996887 CEST	49726	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.214243889 CEST	49726	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.214257956 CEST	443	49726	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.426311016 CEST	443	49726	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.426386118 CEST	49726	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.431163073 CEST	49726	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.431169987 CEST	443	49726	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.431427956 CEST	443	49726	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.432259083 CEST	49726	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.476269007 CEST	443	49726	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.509485006 CEST	49727	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.509551048 CEST	443	49727	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.509607077 CEST	49728	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.509649038 CEST	49727	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.509660006 CEST	443	49728	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.509728909 CEST	49728	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.509942055 CEST	49727	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.509975910 CEST	443	49727	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.510046959 CEST	49728	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.510062933 CEST	443	49728	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.654031992 CEST	443	49726	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.654164076 CEST	443	49726	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.654216051 CEST	49726	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.654984951 CEST	49726	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.654994965 CEST	443	49726	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.719361067 CEST	443	49727	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.719441891 CEST	49727	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.720006943 CEST	49727	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.720022917 CEST	443	49727	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.720484018 CEST	443	49727	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.726320028 CEST	443	49728	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.726511002 CEST	49728	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.727022886 CEST	49728	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.727051973 CEST	443	49728	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.727328062 CEST	443	49728	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.730602980 CEST	49729	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.730640888 CEST	443	49729	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.730773926 CEST	49729	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.730876923 CEST	49729	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.730889082 CEST	443	49729	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.732121944 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.732158899 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.732264996 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.732418060 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.732433081 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.766515970 CEST	49727	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.782450914 CEST	49728	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.938796043 CEST	443	49729	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.939089060 CEST	49729	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.939110041 CEST	443	49729	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.939301014 CEST	49729	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.939306974 CEST	443	49729	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.943397045 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.943608999 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.943640947 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:41.943770885 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:41.943777084 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.222742081 CEST	443	49729	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.222820997 CEST	443	49729	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.222950935 CEST	49729	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.229537964 CEST	49729	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.229556084 CEST	443	49729	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.233814955 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.233947039 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.234019995 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.234038115 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.234066963 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.234174967 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.234189987 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.234263897 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.234307051 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.234313965 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.243669033 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.243717909 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.243726015 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.250027895 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.250076056 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.250082970 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.250091076 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.250127077 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.257678032 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.301907063 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.301919937 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.327991009 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.328072071 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.328082085 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.332057953 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.332139015 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.332146883 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.339440107 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.339601994 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.339611053 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.346725941 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.346827030 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.346834898 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.353887081 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.353965998 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.353974104 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.361258984 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.361335993 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.361345053 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.367039919 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.367088079 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.367094994 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.373862982 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.373930931 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.373939037 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.380110979 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.380218983 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.380227089 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.386507034 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.387285948 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.387294054 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.392574072 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.392605066 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.392663002 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.392680883 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.396250010 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.400857925 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.408479929 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.408509970 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.408541918 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.408554077 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.408925056 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.416182995 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.423674107 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.423707962 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.423763037 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.423775911 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.423814058 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.426582098 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.426615953 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.426667929 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.426683903 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.431648016 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.432267904 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.432286024 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.437966108 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.440244913 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.440259933 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.443211079 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.443236113 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.443265915 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.443275928 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.444246054 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.448565960 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.454483032 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.454507113 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.454592943 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.454612970 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.455809116 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.460355043 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.467652082 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.467674017 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.467737913 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.467760086 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.468239069 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.472949028 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.477121115 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.477147102 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.477212906 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.477231979 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.478096008 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.481309891 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.486156940 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.486244917 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.486309052 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.486325026 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.488244057 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.490823030 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.495322943 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.495354891 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.495412111 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.495425940 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.496239901 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.499699116 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.504085064 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.504163980 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.504219055 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.504232883 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.506874084 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.508481979 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.512507915 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.512536049 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.512569904 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.512587070 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.512973070 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.516695976 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.520443916 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.520467997 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.520505905 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.520523071 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.520792007 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.524492979 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.528637886 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.528809071 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.528863907 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.528881073 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.529252052 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.530997038 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.533349037 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.533374071 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.533421040 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.533433914 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.535679102 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.535742044 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.535753012 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.536238909 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.538278103 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.540508986 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.540534019 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.540592909 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.540613890 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.542726994 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.542778015 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.542785883 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.542824030 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.545202017 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.547539949 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.547601938 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.547607899 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.549946070 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.549985886 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.549995899 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.550003052 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.550041914 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.550048113 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.552445889 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.554481983 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.554541111 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.554548979 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.554836035 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.554841995 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.556866884 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.559165955 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.559222937 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.559223890 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.559237957 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.559257030 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.561568975 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.564332962 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.564340115 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.564479113 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.566138029 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.566173077 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.566195965 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.566204071 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.566215992 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.568475962 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.570852995 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.570911884 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.570919037 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.572244883 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.572248936 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.574489117 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.574542999 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.574548960 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.576929092 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.579371929 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.579410076 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.579427958 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.579437017 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.579449892 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.582226038 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.584228992 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.584264040 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.584273100 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.586477041 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.586519003 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.586539984 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.586545944 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.586563110 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.588694096 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.590594053 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.590648890 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.590661049 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.591737986 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.591790915 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.591800928 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.591880083 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.593507051 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.595753908 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.595783949 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.595808983 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.595824003 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.596240044 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.597729921 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.600404978 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.600445986 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.600500107 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.600516081 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.601926088 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.601982117 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.601993084 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.602032900 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.604259014 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.605779886 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.605811119 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.605844021 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.605859995 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.606949091 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.608130932 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.610521078 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.610558987 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.610630035 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.610644102 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.612236977 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.612247944 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.614109993 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.614135981 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.614172935 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.614187002 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.616239071 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.616250992 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.616678953 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.616734028 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.616741896 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.618470907 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.618520021 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.618530035 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.621861935 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.624231100 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.624248981 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.624274015 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.624315023 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.624320984 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.624989986 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.625034094 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.625040054 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.627161026 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.627226114 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.627233028 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.629559040 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.630829096 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.630863905 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.630883932 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.630892038 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.630918026 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.632472038 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.633465052 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.633495092 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.633532047 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.633539915 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.633552074 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.635082006 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.636257887 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.636264086 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.637170076 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.637223005 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.637228966 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.638669968 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.640259981 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.640291929 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.640299082 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.641974926 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.642013073 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.642033100 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.642040014 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.642052889 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.643369913 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.644239902 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.644244909 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.644411087 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.644469023 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.644474983 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.645955086 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.647629976 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.647670031 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.647695065 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.647701979 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.647722006 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.648657084 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.649022102 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.649028063 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.649868965 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.650147915 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.650154114 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.651348114 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.652245045 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.652251005 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.653150082 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.653215885 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.653222084 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.654652119 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.654725075 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.654731035 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.655733109 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.655848980 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.655854940 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.657080889 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.657974005 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.658034086 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.658041954 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.658931971 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.658936977 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.659593105 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.660243034 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.660248995 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.660752058 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.660800934 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.660806894 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.661849022 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.663068056 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.663108110 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.663127899 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.663135052 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.663160086 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.664474010 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.664509058 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.664549112 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.664556026 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.664592981 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.665482998 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.666858912 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.666893959 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.666913033 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.666918993 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.668061018 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.668104887 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.668112040 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.668148994 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.669219971 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.670907021 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.670947075 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.670973063 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.670979023 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.671016932 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.671143055 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.671587944 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.672765970 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.672810078 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.672832966 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.672838926 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.672879934 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.673259974 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.673887014 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.674760103 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.674793959 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.674812078 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.674818039 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.675896883 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.675945044 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.675951004 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.676083088 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.677009106 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.678289890 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.678328991 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.678343058 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.678352118 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.679399967 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.679460049 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.679466009 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.679514885 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.680402994 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.681499004 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.681534052 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.681560040 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.681566000 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.681950092 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.777611971 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.777705908 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.777735949 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.777760029 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.777787924 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.777827024 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.777827024 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.777841091 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.777872086 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.777882099 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.777889013 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.777909040 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.777925968 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.777932882 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.777970076 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.777976036 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778017044 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778040886 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778089046 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.778095961 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778115988 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778151035 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778161049 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.778167009 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778192043 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778206110 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.778212070 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778232098 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.778244972 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778271914 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778281927 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778285027 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.778291941 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778321981 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.778328896 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778354883 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778367043 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.778373003 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778409004 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.778414965 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778445959 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778472900 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778493881 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778515100 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778517962 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.778523922 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778546095 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.778561115 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.778563023 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778573036 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778610945 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778614044 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.778625965 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778647900 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778661013 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.778666973 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778692007 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778702021 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.778707981 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778736115 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778743029 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.778748989 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778781891 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778793097 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.778799057 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778842926 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.778848886 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778879881 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778889894 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.778930902 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.778938055 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.779047966 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:42.779074907 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.779107094 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.779612064 CEST	49730	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:42.779634953 CEST	443	49730	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:43.822225094 CEST	49681	80	192.168.2.4	2.17.190.73
Apr 7, 2025 15:11:44.130966902 CEST	49681	80	192.168.2.4	2.17.190.73
Apr 7, 2025 15:11:44.168900013 CEST	49709	443	192.168.2.4	131.253.33.254
Apr 7, 2025 15:11:44.178924084 CEST	49709	443	192.168.2.4	131.253.33.254
Apr 7, 2025 15:11:44.178958893 CEST	49709	443	192.168.2.4	131.253.33.254
Apr 7, 2025 15:11:44.268660069 CEST	443	49709	131.253.33.254	192.168.2.4
Apr 7, 2025 15:11:44.269651890 CEST	443	49709	131.253.33.254	192.168.2.4
Apr 7, 2025 15:11:44.269675016 CEST	443	49709	131.253.33.254	192.168.2.4
Apr 7, 2025 15:11:44.269721985 CEST	49709	443	192.168.2.4	131.253.33.254
Apr 7, 2025 15:11:44.269737959 CEST	49709	443	192.168.2.4	131.253.33.254
Apr 7, 2025 15:11:44.277301073 CEST	49709	443	192.168.2.4	131.253.33.254
Apr 7, 2025 15:11:44.278716087 CEST	443	49709	131.253.33.254	192.168.2.4
Apr 7, 2025 15:11:44.280586958 CEST	443	49709	131.253.33.254	192.168.2.4
Apr 7, 2025 15:11:44.280602932 CEST	443	49709	131.253.33.254	192.168.2.4
Apr 7, 2025 15:11:44.280643940 CEST	49709	443	192.168.2.4	131.253.33.254
Apr 7, 2025 15:11:44.280668974 CEST	49709	443	192.168.2.4	131.253.33.254
Apr 7, 2025 15:11:44.297148943 CEST	49709	443	192.168.2.4	131.253.33.254
Apr 7, 2025 15:11:44.379484892 CEST	443	49709	131.253.33.254	192.168.2.4
Apr 7, 2025 15:11:44.396609068 CEST	443	49709	131.253.33.254	192.168.2.4
Apr 7, 2025 15:11:44.399225950 CEST	443	49709	131.253.33.254	192.168.2.4
Apr 7, 2025 15:11:44.399243116 CEST	443	49709	131.253.33.254	192.168.2.4
Apr 7, 2025 15:11:44.399313927 CEST	49709	443	192.168.2.4	131.253.33.254
Apr 7, 2025 15:11:44.537499905 CEST	49737	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:44.537538052 CEST	443	49737	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:44.537642002 CEST	49737	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:44.537851095 CEST	49737	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:44.537866116 CEST	443	49737	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:44.635409117 CEST	49723	443	192.168.2.4	142.251.40.228
Apr 7, 2025 15:11:44.643368959 CEST	49738	80	192.168.2.4	142.251.40.163
Apr 7, 2025 15:11:44.676269054 CEST	443	49723	142.251.40.228	192.168.2.4
Apr 7, 2025 15:11:44.736469984 CEST	80	49738	142.251.40.163	192.168.2.4
Apr 7, 2025 15:11:44.736536980 CEST	49738	80	192.168.2.4	142.251.40.163
Apr 7, 2025 15:11:44.736660004 CEST	49738	80	192.168.2.4	142.251.40.163
Apr 7, 2025 15:11:44.740170002 CEST	443	49737	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:44.740480900 CEST	49737	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:44.740499973 CEST	443	49737	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:44.740573883 CEST	49737	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:44.740578890 CEST	443	49737	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:44.741481066 CEST	49681	80	192.168.2.4	2.17.190.73
Apr 7, 2025 15:11:44.759927034 CEST	443	49723	142.251.40.228	192.168.2.4
Apr 7, 2025 15:11:44.760056973 CEST	443	49723	142.251.40.228	192.168.2.4
Apr 7, 2025 15:11:44.760152102 CEST	443	49723	142.251.40.228	192.168.2.4
Apr 7, 2025 15:11:44.760193110 CEST	49723	443	192.168.2.4	142.251.40.228
Apr 7, 2025 15:11:44.760212898 CEST	443	49723	142.251.40.228	192.168.2.4
Apr 7, 2025 15:11:44.760288954 CEST	49723	443	192.168.2.4	142.251.40.228
Apr 7, 2025 15:11:44.760297060 CEST	443	49723	142.251.40.228	192.168.2.4
Apr 7, 2025 15:11:44.766320944 CEST	443	49723	142.251.40.228	192.168.2.4
Apr 7, 2025 15:11:44.766521931 CEST	49723	443	192.168.2.4	142.251.40.228
Apr 7, 2025 15:11:44.766757965 CEST	49723	443	192.168.2.4	142.251.40.228
Apr 7, 2025 15:11:44.766771078 CEST	443	49723	142.251.40.228	192.168.2.4
Apr 7, 2025 15:11:44.830982924 CEST	80	49738	142.251.40.163	192.168.2.4
Apr 7, 2025 15:11:44.831727028 CEST	80	49738	142.251.40.163	192.168.2.4
Apr 7, 2025 15:11:44.840895891 CEST	49738	80	192.168.2.4	142.251.40.163
Apr 7, 2025 15:11:44.936724901 CEST	80	49738	142.251.40.163	192.168.2.4
Apr 7, 2025 15:11:44.964664936 CEST	443	49737	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:44.964704990 CEST	443	49737	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:44.964744091 CEST	443	49737	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:44.964765072 CEST	49737	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:44.964775085 CEST	443	49737	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:44.964903116 CEST	49737	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:44.964910984 CEST	443	49737	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:44.968075991 CEST	443	49737	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:44.968127012 CEST	49737	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:44.972606897 CEST	49737	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:44.972620010 CEST	443	49737	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:44.989298105 CEST	49738	80	192.168.2.4	142.251.40.163
Apr 7, 2025 15:11:45.153498888 CEST	49741	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:45.153567076 CEST	443	49741	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:45.153687954 CEST	49741	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:45.154026985 CEST	49741	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:45.154062986 CEST	443	49741	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:45.358427048 CEST	443	49741	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:45.358494997 CEST	49741	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:45.377794027 CEST	49741	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:45.377805948 CEST	443	49741	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:45.378676891 CEST	443	49741	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:45.396449089 CEST	49741	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:45.440275908 CEST	443	49741	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:45.581588030 CEST	443	49741	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:45.581728935 CEST	443	49741	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:45.581814051 CEST	443	49741	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:45.581813097 CEST	49741	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:45.581878901 CEST	443	49741	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:45.581967115 CEST	443	49741	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:45.582029104 CEST	49741	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:45.582050085 CEST	443	49741	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:45.582362890 CEST	49741	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:45.582709074 CEST	49741	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:45.582793951 CEST	443	49741	34.117.33.233	192.168.2.4
Apr 7, 2025 15:11:45.582936049 CEST	49741	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:11:45.730737925 CEST	49678	443	192.168.2.4	20.189.173.27
Apr 7, 2025 15:11:45.956602097 CEST	49681	80	192.168.2.4	2.17.190.73
Apr 7, 2025 15:11:46.628469944 CEST	49671	443	192.168.2.4	204.79.197.203
Apr 7, 2025 15:11:48.363640070 CEST	49681	80	192.168.2.4	2.17.190.73
Apr 7, 2025 15:11:53.165755033 CEST	49681	80	192.168.2.4	2.17.190.73
Apr 7, 2025 15:11:55.338145018 CEST	49678	443	192.168.2.4	20.189.173.27
Apr 7, 2025 15:12:02.776918888 CEST	49681	80	192.168.2.4	2.17.190.73
Apr 7, 2025 15:12:26.724037886 CEST	49727	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:12:26.724100113 CEST	443	49727	34.117.33.233	192.168.2.4
Apr 7, 2025 15:12:26.741774082 CEST	49728	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:12:26.741841078 CEST	443	49728	34.117.33.233	192.168.2.4
Apr 7, 2025 15:12:39.083684921 CEST	49748	443	192.168.2.4	142.251.40.228
Apr 7, 2025 15:12:39.083719969 CEST	443	49748	142.251.40.228	192.168.2.4
Apr 7, 2025 15:12:39.083820105 CEST	49748	443	192.168.2.4	142.251.40.228
Apr 7, 2025 15:12:39.084007978 CEST	49748	443	192.168.2.4	142.251.40.228
Apr 7, 2025 15:12:39.084017992 CEST	443	49748	142.251.40.228	192.168.2.4
Apr 7, 2025 15:12:39.288186073 CEST	443	49748	142.251.40.228	192.168.2.4
Apr 7, 2025 15:12:39.288723946 CEST	49748	443	192.168.2.4	142.251.40.228
Apr 7, 2025 15:12:39.288738966 CEST	443	49748	142.251.40.228	192.168.2.4
Apr 7, 2025 15:12:43.131706953 CEST	49727	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:12:43.131778002 CEST	49728	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:12:43.131814003 CEST	443	49727	34.117.33.233	192.168.2.4
Apr 7, 2025 15:12:43.131877899 CEST	443	49728	34.117.33.233	192.168.2.4
Apr 7, 2025 15:12:43.131887913 CEST	49727	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:12:43.131925106 CEST	49728	443	192.168.2.4	34.117.33.233
Apr 7, 2025 15:12:45.393834114 CEST	49738	80	192.168.2.4	142.251.40.163
Apr 7, 2025 15:12:45.487987995 CEST	80	49738	142.251.40.163	192.168.2.4
Apr 7, 2025 15:12:45.488050938 CEST	49738	80	192.168.2.4	142.251.40.163
Apr 7, 2025 15:12:49.285881042 CEST	443	49748	142.251.40.228	192.168.2.4
Apr 7, 2025 15:12:49.286061049 CEST	443	49748	142.251.40.228	192.168.2.4
Apr 7, 2025 15:12:49.286124945 CEST	49748	443	192.168.2.4	142.251.40.228
Apr 7, 2025 15:12:51.132046938 CEST	49748	443	192.168.2.4	142.251.40.228
Apr 7, 2025 15:12:51.132072926 CEST	443	49748	142.251.40.228	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 7, 2025 15:11:35.318490028 CEST	53	59283	1.1.1.1	192.168.2.4
Apr 7, 2025 15:11:35.344137907 CEST	53	51593	1.1.1.1	192.168.2.4
Apr 7, 2025 15:11:36.122124910 CEST	53	60135	1.1.1.1	192.168.2.4
Apr 7, 2025 15:11:36.318093061 CEST	53	61406	1.1.1.1	192.168.2.4
Apr 7, 2025 15:11:39.021115065 CEST	63731	53	192.168.2.4	1.1.1.1
Apr 7, 2025 15:11:39.021276951 CEST	56974	53	192.168.2.4	1.1.1.1
Apr 7, 2025 15:11:39.119932890 CEST	53	63731	1.1.1.1	192.168.2.4
Apr 7, 2025 15:11:39.120677948 CEST	53	56974	1.1.1.1	192.168.2.4
Apr 7, 2025 15:11:41.022294044 CEST	53810	53	192.168.2.4	1.1.1.1
Apr 7, 2025 15:11:41.022726059 CEST	50248	53	192.168.2.4	1.1.1.1
Apr 7, 2025 15:11:41.041516066 CEST	56832	53	192.168.2.4	1.1.1.1
Apr 7, 2025 15:11:41.041896105 CEST	62468	53	192.168.2.4	1.1.1.1
Apr 7, 2025 15:11:41.159652948 CEST	53	53810	1.1.1.1	192.168.2.4
Apr 7, 2025 15:11:41.161309004 CEST	53	50248	1.1.1.1	192.168.2.4
Apr 7, 2025 15:11:41.162884951 CEST	64530	53	192.168.2.4	1.1.1.1
Apr 7, 2025 15:11:41.163073063 CEST	55369	53	192.168.2.4	1.1.1.1
Apr 7, 2025 15:11:41.181324959 CEST	53	56832	1.1.1.1	192.168.2.4
Apr 7, 2025 15:11:41.230074883 CEST	53	62468	1.1.1.1	192.168.2.4
Apr 7, 2025 15:11:41.306165934 CEST	53	55369	1.1.1.1	192.168.2.4
Apr 7, 2025 15:11:41.508790970 CEST	53	64530	1.1.1.1	192.168.2.4
Apr 7, 2025 15:11:42.334145069 CEST	53	55582	1.1.1.1	192.168.2.4
Apr 7, 2025 15:11:44.733992100 CEST	53	60997	1.1.1.1	192.168.2.4
Apr 7, 2025 15:11:44.998909950 CEST	49673	53	192.168.2.4	1.1.1.1
Apr 7, 2025 15:11:44.999077082 CEST	51612	53	192.168.2.4	1.1.1.1
Apr 7, 2025 15:11:45.141845942 CEST	53	51612	1.1.1.1	192.168.2.4
Apr 7, 2025 15:11:45.142293930 CEST	53	49673	1.1.1.1	192.168.2.4
Apr 7, 2025 15:11:53.436506033 CEST	53	61811	1.1.1.1	192.168.2.4
Apr 7, 2025 15:12:12.415611982 CEST	53	53454	1.1.1.1	192.168.2.4
Apr 7, 2025 15:12:34.700402021 CEST	53	64534	1.1.1.1	192.168.2.4
Apr 7, 2025 15:12:34.890908957 CEST	53	52678	1.1.1.1	192.168.2.4
Apr 7, 2025 15:12:35.715508938 CEST	138	138	192.168.2.4	192.168.2.255
Apr 7, 2025 15:12:37.087296963 CEST	53	61430	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 7, 2025 15:11:41.230174065 CEST	192.168.2.4	1.1.1.1	c26c	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 7, 2025 15:11:39.021115065 CEST	192.168.2.4	1.1.1.1	0x8c66	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 7, 2025 15:11:39.021276951 CEST	192.168.2.4	1.1.1.1	0x9482	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 7, 2025 15:11:41.022294044 CEST	192.168.2.4	1.1.1.1	0x5452	Standard query (0)	extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app	A (IP address)	IN (0x0001)	false
Apr 7, 2025 15:11:41.022726059 CEST	192.168.2.4	1.1.1.1	0xd65f	Standard query (0)	extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app	65	IN (0x0001)	false
Apr 7, 2025 15:11:41.041516066 CEST	192.168.2.4	1.1.1.1	0xb5bf	Standard query (0)	extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app	A (IP address)	IN (0x0001)	false
Apr 7, 2025 15:11:41.041896105 CEST	192.168.2.4	1.1.1.1	0xee20	Standard query (0)	extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app	65	IN (0x0001)	false
Apr 7, 2025 15:11:41.162884951 CEST	192.168.2.4	1.1.1.1	0x7fc8	Standard query (0)	extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app	A (IP address)	IN (0x0001)	false
Apr 7, 2025 15:11:41.163073063 CEST	192.168.2.4	1.1.1.1	0xf16f	Standard query (0)	extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app	65	IN (0x0001)	false
Apr 7, 2025 15:11:44.998909950 CEST	192.168.2.4	1.1.1.1	0x83ed	Standard query (0)	extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app	A (IP address)	IN (0x0001)	false
Apr 7, 2025 15:11:44.999077082 CEST	192.168.2.4	1.1.1.1	0x839	Standard query (0)	extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Apr 7, 2025 15:11:39.119932890 CEST	1.1.1.1	192.168.2.4	0x8c66	No error (0)	www.google.com	142.251.40.228	A (IP address)	IN (0x0001)	false
Apr 7, 2025 15:11:39.120677948 CEST	1.1.1.1	192.168.2.4	0x9482	No error (0)	www.google.com		65	IN (0x0001)	false
Apr 7, 2025 15:11:41.159652948 CEST	1.1.1.1	192.168.2.4	0x5452	No error (0)	extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app	34.117.33.233	A (IP address)	IN (0x0001)	false
Apr 7, 2025 15:11:41.181324959 CEST	1.1.1.1	192.168.2.4	0xb5bf	No error (0)	extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app	34.117.33.233	A (IP address)	IN (0x0001)	false
Apr 7, 2025 15:11:41.508790970 CEST	1.1.1.1	192.168.2.4	0x7fc8	No error (0)	extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app	34.117.33.233	A (IP address)	IN (0x0001)	false
Apr 7, 2025 15:11:45.142293930 CEST	1.1.1.1	192.168.2.4	0x83ed	No error (0)	extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app	34.117.33.233	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app

www.google.com

c.pki.goog

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.4	49738	142.251.40.163	80

Timestamp	Bytes transferred	Direction	Data
Apr 7, 2025 15:11:44.736660004 CEST	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Apr 7, 2025 15:11:44.831727028 CEST	222	IN	HTTP/1.1 304 Not Modified Date: Mon, 07 Apr 2025 13:02:01 GMT Expires: Mon, 07 Apr 2025 13:52:01 GMT Age: 583 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Apr 7, 2025 15:11:44.840895891 CEST	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Apr 7, 2025 15:11:44.936724901 CEST	1243	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="cacerts" Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]} Content-Length: 530 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 07 Apr 2025 12:40:53 GMT Expires: Mon, 07 Apr 2025 13:30:53 GMT Cache-Control: public, max-age=3000 Last-Modified: Thu, 03 Apr 2025 14:18:00 GMT Content-Type: application/pkix-crl Vary: Accept-Encoding Age: 1851 Data Raw: 30 82 02 0e 30 82 01 93 02 01 01 30 0a 06 08 2a 86 48 ce 3d 04 03 03 30 47 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 22 30 20 06 03 55 04 0a 13 19 47 6f 6f 67 6c 65 20 54 72 75 73 74 20 53 65 72 76 69 63 65 73 20 4c 4c 43 31 14 30 12 06 03 55 04 03 13 0b 47 54 53 20 52 6f 6f 74 20 52 34 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 17 0d 32 36 30 32 32 38 30 37 35 39 35 39 5a 30 81 e9 30 2f 02 10 6e 47 a9 ce 4f 46 c2 3d e2 49 ea cc 38 94 53 73 17 0d 31 39 30 39 33 30 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 f0 9c 5b 70 05 a6 dc 86 e2 f9 9e f3 17 0d 32 30 30 31 33 31 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 fe a5 81 44 7e 3b fd 3b b8 1c 24 98 17 0d 32 33 30 36 31 33 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 16 68 25 e1 70 04 40 61 24 91 f5 40 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 00 8e b2 58 e7 b5 94 0c 1f f9 00 44 17 0d 32 35 30 [TRUNCATED] Data Ascii: 000H=0G10UUS1"0 UGoogle Trust Services LLC10UGTS Root R4250403080000Z260228075959Z00/nGOF=I8Ss190930000000Z00U0,[p200131000000Z00U0,D~;;$230613000000Z00U0,h%p@a$@250403080000Z00U0,XD250403080000Z00U/0-0U0U#0LtI6>j0H=i0f1>2en:IN@g=;bQZ~`NX1?^4y[$\4{;$zDeU6O

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49726	34.117.33.233	443	1832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:11:41 UTC	707	OUT	GET / HTTP/1.1 Host: extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-07 13:11:41 UTC	361	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Age: 4376 Content-Length: 976 Content-Type: text/html; charset=utf-8 Strict-Transport-Security: max-age=63072000; includeSubDomains Date: Mon, 07 Apr 2025 13:11:41 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-04-07 13:11:41 UTC	859	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 22 20 68 72 65 66 3d 22 2f 70 72 65 74 74 69 65 72 2e 73 76 67 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 56 69 74 65 20 2b 20 52 65 61 63 74 20 2b 20 54 53 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8" /> <link rel="icon" type="image/svg+xml" href="/prettier.svg" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <title>Vite + React + TS</title>
2025-04-07 13:11:41 UTC	69	IN	Data Raw: 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 69 6e 64 65 78 2d 65 66 61 33 30 63 37 65 2e 63 73 73 22 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 Data Ascii: ="stylesheet" href="/assets/index-efa30c7e.css"> </head> <body>
2025-04-07 13:11:41 UTC	48	IN	Data Raw: 20 20 20 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 0a 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <div id="root"></div> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49729	34.117.33.233	443	1832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:11:41 UTC	645	OUT	GET /assets/index-efa30c7e.css HTTP/1.1 Host: extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-07 13:11:42 UTC	349	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Content-Length: 684 Content-Type: text/css; charset=utf-8 Strict-Transport-Security: max-age=63072000; includeSubDomains Date: Mon, 07 Apr 2025 13:11:42 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-04-07 13:11:42 UTC	684	IN	Data Raw: 40 69 6d 70 6f 72 74 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 46 69 72 61 2b 43 6f 64 65 3a 77 67 68 74 40 33 30 30 3b 34 30 30 3b 35 30 30 3b 37 30 30 26 66 61 6d 69 6c 79 3d 49 42 4d 2b 50 6c 65 78 2b 53 61 6e 73 3a 77 67 68 74 40 33 30 30 3b 34 30 30 3b 35 30 30 3b 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 3b 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 49 42 4d 20 50 6c 65 78 20 53 61 6e 73 2c 73 61 6e 73 2d 73 65 72 69 66 7d 23 72 6f 6f 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d Data Ascii: @import"https://fonts.googleapis.com/css2?family=Fira+Code:wght@300;400;500;700&family=IBM+Plex+Sans:wght@300;400;500;700&display=swap";*{margin:0;padding:0;box-sizing:border-box;font-family:IBM Plex Sans,sans-serif}#root{display:flex;flex-direction:colum

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49730	34.117.33.233	443	1832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:11:41 UTC	702	OUT	GET /assets/index-4c2b365d.js HTTP/1.1 Host: extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app Connection: keep-alive Origin: https://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-07 13:11:42 UTC	359	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Content-Length: 371552 Content-Type: text/javascript; charset=utf-8 Strict-Transport-Security: max-age=63072000; includeSubDomains Date: Mon, 07 Apr 2025 13:11:42 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-04-07 13:11:42 UTC	861	IN	Data Raw: 76 61 72 20 51 67 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 71 67 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 51 67 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 3b 76 61 72 20 43 72 3d 28 65 2c 74 2c 6e 29 3d 3e 28 71 67 28 65 2c 74 79 70 65 6f 66 20 74 21 3d 22 73 79 6d 62 6f 6c 22 3f 74 2b 22 22 3a 74 2c 6e 29 2c 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 5a 67 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 63 6f 6e 73 74 20 72 3d 74 5b 6e 5d 3b 69 66 28 74 79 70 65 6f 66 20 72 21 3d 22 73 74 72 69 6e 67 22 26 26 21 Data Ascii: var Qg=Object.defineProperty;var qg=(e,t,n)=>t in e?Qg(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var Cr=(e,t,n)=>(qg(e,typeof t!="symbol"?t+"":t,n),n);function Zg(e,t){for(var n=0;n<t.length;n++){const r=t[n];if(typeof r!="string"&&!
2025-04-07 13:11:42 UTC	1220	IN	Data Raw: 6d 65 6e 74 2c 7b 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 30 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 63 6f 6e 73 74 20 6f 3d 7b 7d 3b 72 65 74 75 72 6e 20 69 2e 69 6e 74 65 67 72 69 74 79 26 26 28 6f 2e 69 6e 74 65 67 72 69 74 79 3d 69 2e 69 6e 74 65 67 72 69 74 79 29 2c 69 2e 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 26 26 28 6f 2e 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 3d 69 2e 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 29 2c 69 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 3d 3d 22 75 73 65 2d 63 72 65 64 65 6e 74 69 61 6c 73 22 3f 6f 2e 63 72 65 64 65 6e 74 69 61 6c 73 3d 22 69 6e 63 6c 75 64 65 22 3a 69 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 3d 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3f 6f 2e 63 72 65 64 65 6e 74 69 61 6c Data Ascii: ment,{childList:!0,subtree:!0});function n(i){const o={};return i.integrity&&(o.integrity=i.integrity),i.referrerPolicy&&(o.referrerPolicy=i.referrerPolicy),i.crossOrigin==="use-credentials"?o.credentials="include":i.crossOrigin==="anonymous"?o.credential
2025-04-07 13:11:42 UTC	1220	IN	Data Raw: 74 79 70 65 6f 66 20 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 65 3a 6e 75 6c 6c 29 7d 76 61 72 20 79 68 3d 7b 69 73 4d 6f 75 6e 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 2c 65 6e 71 75 65 75 65 46 6f 72 63 65 55 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 6e 71 75 65 75 65 52 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 6e 71 75 65 75 65 53 65 74 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 77 68 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2c 78 68 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 64 69 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 70 72 6f 70 73 3d 65 2c 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 74 2c 74 68 69 73 2e 72 65 66 73 3d 78 68 2c 74 68 69 73 2e 75 70 64 61 Data Ascii: typeof e=="function"?e:null)}var yh={isMounted:function(){return!1},enqueueForceUpdate:function(){},enqueueReplaceState:function(){},enqueueSetState:function(){}},wh=Object.assign,xh={};function di(e,t,n){this.props=e,this.context=t,this.refs=xh,this.upda
2025-04-07 13:11:42 UTC	1220	IN	Data Raw: 66 6f 72 28 76 61 72 20 61 3d 41 72 72 61 79 28 6c 29 2c 75 3d 30 3b 75 3c 6c 3b 75 2b 2b 29 61 5b 75 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 75 2b 32 5d 3b 69 2e 63 68 69 6c 64 72 65 6e 3d 61 7d 69 66 28 65 26 26 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 66 6f 72 28 72 20 69 6e 20 6c 3d 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 2c 6c 29 69 5b 72 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 28 69 5b 72 5d 3d 6c 5b 72 5d 29 3b 72 65 74 75 72 6e 7b 24 24 74 79 70 65 6f 66 3a 42 6f 2c 74 79 70 65 3a 65 2c 6b 65 79 3a 6f 2c 72 65 66 3a 73 2c 70 72 6f 70 73 3a 69 2c 5f 6f 77 6e 65 72 3a 4c 63 2e 63 75 72 72 65 6e 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 76 28 65 2c 74 29 7b 72 65 74 75 72 6e 7b 24 24 74 79 70 65 6f 66 3a 42 6f 2c 74 79 70 65 3a 65 2e 74 79 70 65 2c 6b 65 Data Ascii: for(var a=Array(l),u=0;u<l;u++)a[u]=arguments[u+2];i.children=a}if(e&&e.defaultProps)for(r in l=e.defaultProps,l)i[r]===void 0&&(i[r]=l[r]);return{$$typeof:Bo,type:e,key:o,ref:s,props:i,_owner:Lc.current}}function fv(e,t){return{$$typeof:Bo,type:e.type,ke
2025-04-07 13:11:42 UTC	1220	IN	Data Raw: 2b 29 2c 73 2b 3d 76 73 28 6f 2c 74 2c 6e 2c 61 2c 69 29 3b 65 6c 73 65 20 69 66 28 6f 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 74 68 72 6f 77 20 74 3d 53 74 72 69 6e 67 28 65 29 2c 45 72 72 6f 72 28 22 4f 62 6a 65 63 74 73 20 61 72 65 20 6e 6f 74 20 76 61 6c 69 64 20 61 73 20 61 20 52 65 61 63 74 20 63 68 69 6c 64 20 28 66 6f 75 6e 64 3a 20 22 2b 28 74 3d 3d 3d 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3f 22 6f 62 6a 65 63 74 20 77 69 74 68 20 6b 65 79 73 20 7b 22 2b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 2b 22 7d 22 3a 74 29 2b 22 29 2e 20 49 66 20 79 6f 75 20 6d 65 61 6e 74 20 74 6f 20 72 65 6e 64 65 72 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 63 68 69 6c 64 72 65 6e 2c 20 75 73 65 20 61 6e 20 61 72 72 Data Ascii: +),s+=vs(o,t,n,a,i);else if(o==="object")throw t=String(e),Error("Objects are not valid as a React child (found: "+(t==="[object Object]"?"object with keys {"+Object.keys(e).join(", ")+"}":t)+"). If you meant to render a collection of children, use an arr
2025-04-07 13:11:42 UTC	1220	IN	Data Raw: 64 65 3d 6e 76 3b 59 2e 53 75 73 70 65 6e 73 65 3d 6c 76 3b 59 2e 5f 5f 53 45 43 52 45 54 5f 49 4e 54 45 52 4e 41 4c 53 5f 44 4f 5f 4e 4f 54 5f 55 53 45 5f 4f 52 5f 59 4f 55 5f 57 49 4c 4c 5f 42 45 5f 46 49 52 45 44 3d 68 76 3b 59 2e 63 6c 6f 6e 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 65 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 52 65 61 63 74 2e 63 6c 6f 6e 65 45 6c 65 6d 65 6e 74 28 2e 2e 2e 29 3a 20 54 68 65 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 52 65 61 63 74 20 65 6c 65 6d 65 6e 74 2c 20 62 75 74 20 79 6f 75 20 70 61 73 73 65 64 20 22 2b 65 2b 22 2e 22 29 3b 76 61 72 20 72 3d 77 68 28 7b 7d 2c 65 2e 70 72 6f 70 73 29 2c 69 3d 65 2e 6b 65 79 2c 6f 3d 65 2e 72 65 66 2c Data Ascii: de=nv;Y.Suspense=lv;Y.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED=hv;Y.cloneElement=function(e,t,n){if(e==null)throw Error("React.cloneElement(...): The argument must be a React element, but you passed "+e+".");var r=wh({},e.props),i=e.key,o=e.ref,
2025-04-07 13:11:42 UTC	965	IN	Data Raw: 76 2c 74 79 70 65 3a 65 2c 63 6f 6d 70 61 72 65 3a 74 3d 3d 3d 76 6f 69 64 20 30 3f 6e 75 6c 6c 3a 74 7d 7d 3b 59 2e 73 74 61 72 74 54 72 61 6e 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 79 73 2e 74 72 61 6e 73 69 74 69 6f 6e 3b 79 73 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 7b 7d 3b 74 72 79 7b 65 28 29 7d 66 69 6e 61 6c 6c 79 7b 79 73 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 74 7d 7d 3b 59 2e 75 6e 73 74 61 62 6c 65 5f 61 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 63 74 28 2e 2e 2e 29 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 69 6e 20 70 72 6f 64 75 63 74 69 6f 6e 20 62 75 69 6c 64 73 20 6f 66 20 52 65 61 63 74 2e 22 29 7d 3b 59 2e 75 73 65 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 Data Ascii: v,type:e,compare:t===void 0?null:t}};Y.startTransition=function(e){var t=ys.transition;ys.transition={};try{e()}finally{ys.transition=t}};Y.unstable_act=function(){throw Error("act(...) is not supported in production builds of React.")};Y.useCallback=func
2025-04-07 13:11:42 UTC	1220	IN	Data Raw: 28 65 29 7d 3b 59 2e 75 73 65 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 53 74 61 74 65 28 65 29 7d 3b 59 2e 75 73 65 53 79 6e 63 45 78 74 65 72 6e 61 6c 53 74 6f 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 71 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 53 79 6e 63 45 78 74 65 72 6e 61 6c 53 74 6f 72 65 28 65 2c 74 2c 6e 29 7d 3b 59 2e 75 73 65 54 72 61 6e 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 71 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 54 72 61 6e 73 69 74 69 6f 6e 28 29 7d 3b 59 2e 76 65 72 73 69 6f 6e 3d 22 31 38 2e 32 2e 30 22 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 59 7d 29 28 4a 67 Data Ascii: (e)};Y.useState=function(e){return qe.current.useState(e)};Y.useSyncExternalStore=function(e,t,n){return qe.current.useSyncExternalStore(e,t,n)};Y.useTransition=function(){return qe.current.useTransition()};Y.version="18.2.0";(function(e){e.exports=Y})(Jg
2025-04-07 13:11:42 UTC	1220	IN	Data Raw: 28 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 6f 3d 70 65 72 66 6f 72 6d 61 6e 63 65 3b 65 2e 75 6e 73 74 61 62 6c 65 5f 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 2e 6e 6f 77 28 29 7d 7d 65 6c 73 65 7b 76 61 72 20 73 3d 44 61 74 65 2c 6c 3d 73 2e 6e 6f 77 28 29 3b 65 2e 75 6e 73 74 61 62 6c 65 5f 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 2e 6e 6f 77 28 29 2d 6c 7d 7d 76 61 72 20 61 3d 5b 5d 2c 75 3d 5b 5d 2c 63 3d 31 2c 66 3d 6e 75 6c 6c 2c 70 3d 33 2c 64 3d 21 31 2c 79 3d 21 31 2c 77 3d 21 31 2c 45 3d 74 79 70 65 6f 66 20 73 65 74 54 69 Data Ascii: (typeof performance=="object"&&typeof performance.now=="function"){var o=performance;e.unstable_now=function(){return o.now()}}else{var s=Date,l=s.now();e.unstable_now=function(){return s.now()-l}}var a=[],u=[],c=1,f=null,p=3,d=!1,y=!1,w=!1,E=typeof setTi
2025-04-07 13:11:42 UTC	1220	IN	Data Raw: 61 72 20 50 3d 21 31 2c 6b 3d 6e 75 6c 6c 2c 52 3d 2d 31 2c 4e 3d 35 2c 4d 3d 2d 31 3b 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 72 65 74 75 72 6e 21 28 65 2e 75 6e 73 74 61 62 6c 65 5f 6e 6f 77 28 29 2d 4d 3c 4e 29 7d 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 69 66 28 6b 21 3d 3d 6e 75 6c 6c 29 7b 76 61 72 20 24 3d 65 2e 75 6e 73 74 61 62 6c 65 5f 6e 6f 77 28 29 3b 4d 3d 24 3b 76 61 72 20 54 3d 21 30 3b 74 72 79 7b 54 3d 6b 28 21 30 2c 24 29 7d 66 69 6e 61 6c 6c 79 7b 54 3f 4f 28 29 3a 28 50 3d 21 31 2c 6b 3d 6e 75 6c 6c 29 7d 7d 65 6c 73 65 20 50 3d 21 31 7d 76 61 72 20 4f 3b 69 66 28 74 79 70 65 6f 66 20 6d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 28 47 29 7d 3b 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 4d 65 73 73 Data Ascii: ar P=!1,k=null,R=-1,N=5,M=-1;function F(){return!(e.unstable_now()-M<N)}function G(){if(k!==null){var $=e.unstable_now();M=$;var T=!0;try{T=k(!0,$)}finally{T?O():(P=!1,k=null)}}else P=!1}var O;if(typeof m=="function")O=function(){m(G)};else if(typeof Mess

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49723	142.251.40.228	443	1832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:11:44 UTC	595	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJKhywEInP7MAQiFoM0BCL7VzgEIgNbOAQj5184BCMHYzgEIyNzOAQiK4M4BCK7kzgEIi+XOAQ== Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-07 13:11:44 UTC	1303	IN	HTTP/1.1 200 OK Date: Mon, 07 Apr 2025 13:11:44 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ai6YdfuVD_-SEDb3m5zxsg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-04-07 13:11:44 UTC	1303	IN	Data Raw: 63 38 61 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6e 76 69 64 69 61 20 73 74 6f 63 6b 20 66 6f 72 65 63 61 73 74 22 2c 22 7a 6f 64 69 61 63 20 73 69 67 6e 73 20 64 61 69 6c 79 20 68 6f 72 6f 73 63 6f 70 65 20 74 6f 64 61 79 22 2c 22 61 72 6b 61 6e 73 61 73 20 62 61 73 65 62 61 6c 6c 22 2c 22 73 65 76 65 72 65 20 77 65 61 74 68 65 72 20 74 6f 72 6e 61 64 6f 65 73 22 2c 22 72 61 69 73 69 6e 67 20 6b 61 6e 61 6e 20 77 68 6f 20 6b 69 6c 6c 65 64 20 66 61 6d 6f 75 73 22 2c 22 73 61 75 64 69 20 61 72 61 62 69 61 20 62 61 6e 73 20 76 69 73 61 73 22 2c 22 73 74 20 6c 6f 75 69 73 20 63 61 72 64 69 6e 61 6c 73 22 2c 22 62 69 67 20 6c 6f 74 73 20 72 65 6f 70 65 6e 69 6e 67 20 73 74 6f 72 65 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c Data Ascii: c8a)]}'["",["nvidia stock forecast","zodiac signs daily horoscope today","arkansas baseball","severe weather tornadoes","raising kanan who killed famous","saudi arabia bans visas","st louis cardinals","big lots reopening stores"],["","","","","","","",
2025-04-07 13:11:44 UTC	1303	IN	Data Raw: 57 6c 69 56 6c 68 70 4d 30 78 69 55 6b 4a 54 56 6d 52 30 5a 48 5a 79 55 31 68 61 56 32 6f 34 61 7a 4a 6d 53 57 78 73 62 55 39 77 61 33 56 76 55 33 42 34 53 58 68 69 5a 45 31 68 4d 6d 68 6e 59 58 4a 44 54 44 5a 44 52 46 4d 77 52 55 64 6e 62 32 78 43 55 6c 51 32 64 54 6c 75 4e 31 4e 69 61 31 56 61 61 55 6f 7a 52 30 68 49 54 54 64 68 4d 55 39 74 5a 6c 42 32 5a 6d 5a 76 4e 32 74 76 55 53 39 31 5a 58 67 35 62 55 5a 33 55 47 4a 71 4e 6b 6c 59 51 58 5a 48 54 6b 4a 79 4c 33 4e 77 64 32 38 79 4b 30 4e 58 55 44 6b 30 57 6d 5a 36 52 32 74 48 53 6c 4a 73 56 47 52 59 65 46 59 35 62 6c 64 43 55 33 68 47 56 56 6c 79 4e 47 6c 50 52 30 39 5a 52 6b 6c 51 64 45 5a 59 64 79 74 30 59 6c 5a 43 64 31 4a 56 59 33 6c 4f 56 6d 78 50 5a 32 59 7a 63 6d 6f 31 63 54 4e 30 51 6e 68 57 Data Ascii: WliVlhpM0xiUkJTVmR0ZHZyU1haV2o4azJmSWxsbU9wa3VvU3B4SXhiZE1hMmhnYXJDTDZDRFMwRUdnb2xCUlQ2dTluN1Nia1VaaUozR0hITTdhMU9tZlB2ZmZvN2tvUS91ZXg5bUZ3UGJqNklYQXZHTkJyL3Nwd28yK0NXUDk0WmZ6R2tHSlJsVGRYeFY5bldCU3hGVVlyNGlPR09ZRklQdEZYdyt0YlZCd1JVY3lOVmxPZ2Yzcmo1cTN0QnhW
2025-04-07 13:11:44 UTC	611	IN	Data Raw: 56 32 45 79 56 30 39 33 5a 44 42 68 54 57 56 45 4d 6b 49 34 61 32 70 6a 4f 55 4e 6e 54 54 6c 71 63 79 74 74 55 56 49 34 55 57 46 56 4f 48 42 4c 55 56 67 33 64 45 70 70 4e 69 73 32 63 46 6f 33 51 7a 45 77 61 69 38 76 62 30 35 79 64 55 68 77 4d 32 74 4d 57 6d 31 43 52 58 4d 35 62 54 56 6d 62 58 45 77 63 31 4e 4d 56 6c 4e 50 53 46 42 56 4f 57 39 4a 63 58 4d 78 61 58 51 34 61 56 5a 4f 4d 33 56 49 61 6d 4a 50 4e 7a 4a 42 52 54 46 6b 56 31 41 35 4e 32 5a 72 64 32 64 73 52 30 4a 6b 54 57 70 61 54 47 77 77 62 6e 49 7a 64 6c 70 6a 56 45 68 4d 4e 32 4a 61 51 54 59 76 4e 43 39 49 54 7a 56 70 54 79 39 42 64 6d 4a 76 65 57 4a 4c 64 47 78 55 4d 33 42 34 5a 54 46 74 64 33 4d 76 63 46 59 31 65 57 4d 7a 63 56 4a 43 64 6d 68 73 63 44 59 77 64 43 74 69 65 6b 70 50 52 45 38 Data Ascii: V2EyV093ZDBhTWVEMkI4a2pjOUNnTTlqcyttUVI4UWFVOHBLUVg3dEppNis2cFo3QzEwai8vb05ydUhwM2tMWm1CRXM5bTVmbXEwc1NMVlNPSFBVOW9JcXMxaXQ4aVZOM3VIamJPNzJBRTFkV1A5N2Zrd2dsR0JkTWpaTGwwbnIzdlpjVEhMN2JaQTYvNC9ITzVpTy9BdmJveWJLdGxUM3B4ZTFtd3MvcFY1eWMzcVJCdmhscDYwdCtiekpPRE8
2025-04-07 13:11:44 UTC	91	IN	Data Raw: 35 35 0d 0a 31 4e 6f 54 6e 70 54 57 54 64 54 62 56 45 34 52 48 56 71 61 46 6f 32 52 55 52 71 4d 6b 5a 45 61 6c 56 59 62 32 74 56 4d 6b 68 43 61 48 42 4f 57 6b 73 33 57 6d 4a 50 56 7a 42 42 52 44 4e 49 64 31 64 4f 63 46 6c 4d 4f 47 78 53 52 30 35 5a 65 57 6f 31 53 6e 0d 0a Data Ascii: 551NoTnpTWTdTbVE4RHVqaFo2RURqMkZEalVYb2tVMkhCaHBOWks3WmJPVzBBRDNId1dOcFlMOGxSR05ZeWo1Sn
2025-04-07 13:11:44 UTC	973	IN	Data Raw: 33 63 36 0d 0a 49 72 59 6a 42 54 55 32 63 30 61 54 4a 57 61 45 46 46 62 57 52 5a 4d 56 4a 4b 4e 6d 4a 7a 51 33 51 72 64 30 39 34 55 6c 68 4d 57 57 74 72 5a 32 64 4f 65 54 42 47 61 54 52 78 56 56 4a 76 53 58 5a 6e 55 6d 49 35 64 55 31 4a 63 46 56 33 64 7a 64 4f 55 6d 70 73 52 6b 31 42 56 30 56 6e 52 30 6c 49 53 55 6c 33 52 31 56 6f 65 45 68 32 61 55 46 6f 55 6d 5a 74 4e 6b 52 43 4e 48 6b 32 53 54 42 4b 62 57 5a 6d 4f 57 52 48 5a 6d 31 43 54 30 70 74 52 6c 46 36 64 44 49 79 56 48 4a 32 52 6c 68 32 54 56 5a 76 53 6a 45 31 62 31 6c 7a 4d 30 64 45 52 48 45 32 65 6d 51 34 64 43 74 33 4f 56 4e 53 59 58 51 34 54 31 46 73 55 6b 78 58 56 47 39 53 5a 30 68 58 65 6c 68 6d 63 47 4e 46 5a 6e 67 7a 55 6c 42 75 5a 57 38 33 4d 30 56 32 59 55 56 30 65 6d 46 4f 65 54 67 76 Data Ascii: 3c6IrYjBTU2c0aTJWaEFFbWRZMVJKNmJzQ3Qrd094UlhMWWtrZ2dOeTBGaTRxVVJvSXZnUmI5dU1JcFV3dzdOUmpsRk1BV0VnR0lISUl3R1VoeEh2aUFoUmZtNkRCNHk2STBKbWZmOWRHZm1CT0ptRlF6dDIyVHJ2Rlh2TVZvSjE1b1lzM0dERHE2emQ4dCt3OVNSYXQ4T1FsUkxXVG9SZ0hXelhmcGNFZngzUlBuZW83M0V2YUV0emFOeTgv
2025-04-07 13:11:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49737	34.117.33.233	443	1832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:11:44 UTC	678	OUT	GET /prettier.svg HTTP/1.1 Host: extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-07 13:11:44 UTC	352	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Age: 11045 Content-Length: 4911 Content-Type: image/svg+xml Strict-Transport-Security: max-age=63072000; includeSubDomains Date: Mon, 07 Apr 2025 13:11:44 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-04-07 13:11:44 UTC	868	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 30 20 32 31 30 22 20 77 69 64 74 68 3d 22 32 35 30 30 22 20 68 65 69 67 68 74 3d 22 32 35 30 30 22 3e 3c 73 74 79 6c 65 3e 2e 73 74 30 7b 66 69 6c 6c 3a 23 35 36 62 33 62 34 7d 2e 73 74 31 7b 66 69 6c 6c 3a 23 65 61 35 65 35 65 7d 2e 73 74 32 7b 66 69 6c 6c 3a 23 62 66 38 35 62 66 7d 2e 73 74 33 7b 66 69 6c 6c 3a 23 66 37 62 61 33 65 7d 2e 73 74 34 7b 6f 70 61 63 69 74 79 3a 2e 35 3b 66 69 6c 6c 3a 23 34 64 36 31 36 65 3b 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 65 77 7d 3c 2f 73 74 79 6c 65 3e 3c 74 69 74 6c 65 3e 70 72 65 74 74 69 65 72 Data Ascii: <svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 210 210" width="2500" height="2500"><style>.st0{fill:#56b3b4}.st1{fill:#ea5e5e}.st2{fill:#bf85bf}.st3{fill:#f7ba3e}.st4{opacity:.5;fill:#4d616e;enable-background:new}</style><title>prettier
2025-04-07 13:11:44 UTC	1220	IN	Data Raw: 20 35 48 35 63 2d 32 2e 38 20 30 2d 35 2d 32 2e 32 2d 35 2d 35 73 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 35 5f 22 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 35 20 31 36 30 68 35 30 63 32 2e 38 20 30 20 35 20 32 2e 32 20 35 20 35 73 2d 32 2e 32 20 35 2d 35 20 35 48 35 63 2d 32 2e 38 20 30 2d 35 2d 32 2e 32 2d 35 2d 35 73 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 36 5f 22 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 35 20 38 30 68 35 30 63 32 2e 38 20 30 20 35 20 32 2e 32 20 35 20 35 73 2d 32 2e 32 20 35 2d 35 20 35 48 35 63 2d 32 2e 38 20 30 2d 35 2d 32 2e 32 2d 35 2d 35 73 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 Data Ascii: 5H5c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_5_" class="st2" d="M5 160h50c2.8 0 5 2.2 5 5s-2.2 5-5 5H5c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_6_" class="st2" d="M5 80h50c2.8 0 5 2.2 5 5s-2.2 5-5 5H5c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path
2025-04-07 13:11:44 UTC	1220	IN	Data Raw: 32 2e 32 2d 35 2d 35 73 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 31 36 5f 22 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 38 35 20 31 30 30 68 38 30 63 32 2e 38 20 30 20 35 20 32 2e 32 20 35 20 35 73 2d 32 2e 32 20 35 2d 35 20 35 48 38 35 63 2d 32 2e 38 20 30 2d 35 2d 32 2e 32 2d 35 2d 35 73 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 31 37 5f 22 20 63 6c 61 73 73 3d 22 73 74 33 22 20 64 3d 22 4d 33 35 20 31 30 30 68 33 30 63 32 2e 38 20 30 20 35 20 32 2e 32 20 35 20 35 73 2d 32 2e 32 20 35 2d 35 20 35 48 33 35 63 2d 32 2e 38 20 30 2d 35 2d 32 2e 32 2d 35 2d 35 73 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 52 65 Data Ascii: 2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_16_" class="st0" d="M85 100h80c2.8 0 5 2.2 5 5s-2.2 5-5 5H85c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_17_" class="st3" d="M35 100h30c2.8 0 5 2.2 5 5s-2.2 5-5 5H35c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Re
2025-04-07 13:11:44 UTC	529	IN	Data Raw: 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 32 37 5f 22 20 63 6c 61 73 73 3d 22 73 74 34 22 20 64 3d 22 4d 31 34 35 20 31 34 30 68 32 30 63 32 2e 38 20 30 20 35 20 32 2e 32 20 35 20 35 73 2d 32 2e 32 20 35 2d 35 20 35 68 2d 32 30 63 2d 32 2e 38 20 30 2d 35 2d 32 2e 32 2d 35 2d 35 73 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 32 38 5f 22 20 63 6c 61 73 73 3d 22 73 74 34 22 20 64 3d 22 4d 31 38 35 20 31 34 30 68 32 30 63 32 2e 38 20 30 20 35 20 32 2e 32 20 35 20 35 73 2d 32 2e 32 20 35 2d 35 20 35 68 2d 32 30 63 2d 32 2e 38 20 30 2d 35 2d 32 2e 32 2d 35 2d 35 73 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 52 65 63 74 61 6e Data Ascii: 2.2-5 5-5z"/><path id="Rectangle_27_" class="st4" d="M145 140h20c2.8 0 5 2.2 5 5s-2.2 5-5 5h-20c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_28_" class="st4" d="M185 140h20c2.8 0 5 2.2 5 5s-2.2 5-5 5h-20c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectan
2025-04-07 13:11:44 UTC	1074	IN	Data Raw: 20 35 73 2d 32 2e 32 20 35 2d 35 20 35 68 2d 32 30 63 2d 32 2e 38 20 30 2d 35 2d 32 2e 32 2d 35 2d 35 73 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 33 32 5f 22 20 63 6c 61 73 73 3d 22 73 74 34 22 20 64 3d 22 4d 31 38 35 20 34 30 68 32 30 63 32 2e 38 20 30 20 35 20 32 2e 32 20 35 20 35 73 2d 32 2e 32 20 35 2d 35 20 35 68 2d 32 30 63 2d 32 2e 38 20 30 2d 35 2d 32 2e 32 2d 35 2d 35 73 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 33 33 5f 22 20 63 6c 61 73 73 3d 22 73 74 34 22 20 64 3d 22 4d 31 39 35 20 36 30 68 31 30 63 32 2e 38 20 30 20 35 20 32 2e 32 20 35 20 35 73 2d 32 2e 32 20 35 2d 35 20 35 68 2d 31 30 63 2d 32 2e 38 20 30 2d 35 2d 32 2e 32 2d Data Ascii: 5s-2.2 5-5 5h-20c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_32_" class="st4" d="M185 40h20c2.8 0 5 2.2 5 5s-2.2 5-5 5h-20c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_33_" class="st4" d="M195 60h10c2.8 0 5 2.2 5 5s-2.2 5-5 5h-10c-2.8 0-5-2.2-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49741	34.117.33.233	443	1832	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-07 13:11:45 UTC	433	OUT	GET /prettier.svg HTTP/1.1 Host: extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-07 13:11:45 UTC	351	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Age: 3515 Content-Length: 4911 Content-Type: image/svg+xml Strict-Transport-Security: max-age=63072000; includeSubDomains Date: Mon, 07 Apr 2025 13:11:45 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-04-07 13:11:45 UTC	869	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 30 20 32 31 30 22 20 77 69 64 74 68 3d 22 32 35 30 30 22 20 68 65 69 67 68 74 3d 22 32 35 30 30 22 3e 3c 73 74 79 6c 65 3e 2e 73 74 30 7b 66 69 6c 6c 3a 23 35 36 62 33 62 34 7d 2e 73 74 31 7b 66 69 6c 6c 3a 23 65 61 35 65 35 65 7d 2e 73 74 32 7b 66 69 6c 6c 3a 23 62 66 38 35 62 66 7d 2e 73 74 33 7b 66 69 6c 6c 3a 23 66 37 62 61 33 65 7d 2e 73 74 34 7b 6f 70 61 63 69 74 79 3a 2e 35 3b 66 69 6c 6c 3a 23 34 64 36 31 36 65 3b 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 65 77 7d 3c 2f 73 74 79 6c 65 3e 3c 74 69 74 6c 65 3e 70 72 65 74 74 69 65 72 Data Ascii: <svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 210 210" width="2500" height="2500"><style>.st0{fill:#56b3b4}.st1{fill:#ea5e5e}.st2{fill:#bf85bf}.st3{fill:#f7ba3e}.st4{opacity:.5;fill:#4d616e;enable-background:new}</style><title>prettier
2025-04-07 13:11:45 UTC	1220	IN	Data Raw: 35 48 35 63 2d 32 2e 38 20 30 2d 35 2d 32 2e 32 2d 35 2d 35 73 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 35 5f 22 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 35 20 31 36 30 68 35 30 63 32 2e 38 20 30 20 35 20 32 2e 32 20 35 20 35 73 2d 32 2e 32 20 35 2d 35 20 35 48 35 63 2d 32 2e 38 20 30 2d 35 2d 32 2e 32 2d 35 2d 35 73 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 36 5f 22 20 63 6c 61 73 73 3d 22 73 74 32 22 20 64 3d 22 4d 35 20 38 30 68 35 30 63 32 2e 38 20 30 20 35 20 32 2e 32 20 35 20 35 73 2d 32 2e 32 20 35 2d 35 20 35 48 35 63 2d 32 2e 38 20 30 2d 35 2d 32 2e 32 2d 35 2d 35 73 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 Data Ascii: 5H5c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_5_" class="st2" d="M5 160h50c2.8 0 5 2.2 5 5s-2.2 5-5 5H5c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_6_" class="st2" d="M5 80h50c2.8 0 5 2.2 5 5s-2.2 5-5 5H5c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path
2025-04-07 13:11:45 UTC	1220	IN	Data Raw: 2e 32 2d 35 2d 35 73 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 31 36 5f 22 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 38 35 20 31 30 30 68 38 30 63 32 2e 38 20 30 20 35 20 32 2e 32 20 35 20 35 73 2d 32 2e 32 20 35 2d 35 20 35 48 38 35 63 2d 32 2e 38 20 30 2d 35 2d 32 2e 32 2d 35 2d 35 73 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 31 37 5f 22 20 63 6c 61 73 73 3d 22 73 74 33 22 20 64 3d 22 4d 33 35 20 31 30 30 68 33 30 63 32 2e 38 20 30 20 35 20 32 2e 32 20 35 20 35 73 2d 32 2e 32 20 35 2d 35 20 35 48 33 35 63 2d 32 2e 38 20 30 2d 35 2d 32 2e 32 2d 35 2d 35 73 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 52 65 63 Data Ascii: .2-5-5s2.2-5 5-5z"/><path id="Rectangle_16_" class="st0" d="M85 100h80c2.8 0 5 2.2 5 5s-2.2 5-5 5H85c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_17_" class="st3" d="M35 100h30c2.8 0 5 2.2 5 5s-2.2 5-5 5H35c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rec
2025-04-07 13:11:45 UTC	529	IN	Data Raw: 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 32 37 5f 22 20 63 6c 61 73 73 3d 22 73 74 34 22 20 64 3d 22 4d 31 34 35 20 31 34 30 68 32 30 63 32 2e 38 20 30 20 35 20 32 2e 32 20 35 20 35 73 2d 32 2e 32 20 35 2d 35 20 35 68 2d 32 30 63 2d 32 2e 38 20 30 2d 35 2d 32 2e 32 2d 35 2d 35 73 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 32 38 5f 22 20 63 6c 61 73 73 3d 22 73 74 34 22 20 64 3d 22 4d 31 38 35 20 31 34 30 68 32 30 63 32 2e 38 20 30 20 35 20 32 2e 32 20 35 20 35 73 2d 32 2e 32 20 35 2d 35 20 35 68 2d 32 30 63 2d 32 2e 38 20 30 2d 35 2d 32 2e 32 2d 35 2d 35 73 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 52 65 63 74 61 6e 67 Data Ascii: .2-5 5-5z"/><path id="Rectangle_27_" class="st4" d="M145 140h20c2.8 0 5 2.2 5 5s-2.2 5-5 5h-20c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_28_" class="st4" d="M185 140h20c2.8 0 5 2.2 5 5s-2.2 5-5 5h-20c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectang
2025-04-07 13:11:45 UTC	1073	IN	Data Raw: 35 73 2d 32 2e 32 20 35 2d 35 20 35 68 2d 32 30 63 2d 32 2e 38 20 30 2d 35 2d 32 2e 32 2d 35 2d 35 73 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 33 32 5f 22 20 63 6c 61 73 73 3d 22 73 74 34 22 20 64 3d 22 4d 31 38 35 20 34 30 68 32 30 63 32 2e 38 20 30 20 35 20 32 2e 32 20 35 20 35 73 2d 32 2e 32 20 35 2d 35 20 35 68 2d 32 30 63 2d 32 2e 38 20 30 2d 35 2d 32 2e 32 2d 35 2d 35 73 32 2e 32 2d 35 20 35 2d 35 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 5f 33 33 5f 22 20 63 6c 61 73 73 3d 22 73 74 34 22 20 64 3d 22 4d 31 39 35 20 36 30 68 31 30 63 32 2e 38 20 30 20 35 20 32 2e 32 20 35 20 35 73 2d 32 2e 32 20 35 2d 35 20 35 68 2d 31 30 63 2d 32 2e 38 20 30 2d 35 2d 32 2e 32 2d 35 Data Ascii: 5s-2.2 5-5 5h-20c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_32_" class="st4" d="M185 40h20c2.8 0 5 2.2 5 5s-2.2 5-5 5h-20c-2.8 0-5-2.2-5-5s2.2-5 5-5z"/><path id="Rectangle_33_" class="st4" d="M195 60h10c2.8 0 5 2.2 5 5s-2.2 5-5 5h-10c-2.8 0-5-2.2-5

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2576, Parent PID: 3452

Function Logs

General

Target ID:	1
Start time:	09:11:29
Start date:	07/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Registry Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

COM Activities

WMI Operations

Show Windows behavior

Process Activities

Process Created

Process Terminated

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Timing Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Windows UI Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Token Activities

Token Adjusted

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1832, Parent PID: 2576

Function Logs

General

Target ID:	3
Start time:	09:11:33
Start date:	07/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2368,i,4451319589850786817,14206868647945929326,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2396 /prefetch:3
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Timing Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6512, Parent PID: 3452

Function Logs

General

Target ID:	9
Start time:	09:11:40
Start date:	07/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

File Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 2576, Parent PID: 3452

General

File Activities

File Opened

File Created

Windows Analysis Report
http://extension-71b9e9dd-9e9b-4615-8d28-3187422a5ba7.replit.app