Edit tour

Windows Analysis Report
Setup.exe.7z

Overview

General Information

Sample name:	Setup.exe.7z
Analysis ID:	1583304
MD5:	87d0a861b1235be65f22ad5463990bc4
SHA1:	61337d2d65349d120cd670064dacfe54b0407893
SHA256:	7cd634dcbaf6fb4e5376bfbe975828238644770e411e1f63fef47a5b352e2d7e
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for dropped file

Creates multiple autostart registry keys

Found strings related to Crypto-Mining

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Tries to harvest and steal browser information (history, passwords, etc)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Drops PE files

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Installs a global mouse hook

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

Queries keyboard layouts

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: CurrentVersion Autorun Keys Modification

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Classification

Process Tree

System is w10x64_ra

OpenWith.exe (PID: 6912 cmdline: C:\Windows\system32\OpenWith.exe -Embedding MD5: E4A834784FA08C17D47A1E72429C5109)

7zG.exe (PID: 4188 cmdline: "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\user\Desktop\Setup.exe\" -ad -an -ai#7zMap10193:76:7zEvent19362 MD5: 50F289DF0C19484E970849AAC4E6F977)

rundll32.exe (PID: 6100 cmdline: C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding MD5: EF3179D498793BF4234F708D3BE28633)

Setup.exe (PID: 7064 cmdline: "C:\Users\user\Desktop\Setup.exe\Setup.exe" MD5: D4E4F0B0432D6EB4E61518AF4F839905)

chrome.exe (PID: 1160 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://pcapp.store/installing.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&winver=19045&version=fa.2001g&nocache=20250102061607.239&_fcid=1734694685230875 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 4376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1996,i,9649082435104922829,9310766055222458882,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 5336 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5420 --field-trial-handle=1996,i,9649082435104922829,9310766055222458882,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6132 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5564 --field-trial-handle=1996,i,9649082435104922829,9310766055222458882,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

nsgC284.tmp (PID: 7100 cmdline: "C:\Users\user\AppData\Local\Temp\nsgC284.tmp" /internal 1734694685230875 /force MD5: 0ABEFE193A5575A9C273105CD50CFB25)

PcAppStore.exe (PID: 6968 cmdline: "C:\Users\user\PCAppStore\PcAppStore.exe" /init default MD5: 0BA9718F1D8FBFFD130565A2BC568140)

explorer.exe (PID: 4552 cmdline: C:\Windows\Explorer.EXE MD5: 662F4F92FDE3557E86D110526BB578D5)

msedgewebview2.exe (PID: 2172 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=6968.6112.17141226139066604686 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 5048 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\PCAppStore\UserData\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\PCAppStore\UserData\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x170,0x7ffa1c2b8e88,0x7ffa1c2b8e98,0x7ffa1c2b8ea8 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 6912 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1764 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:2 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 6364 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=2036 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:3 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 4860 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=2416 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:8 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 4296 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-nacl --first-renderer-process --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1735810226763476 --launch-time-ticks=6360422219 --mojo-platform-channel-handle=3304 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:1 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 5212 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-nacl --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1735810226763476 --launch-time-ticks=6360676761 --mojo-platform-channel-handle=3624 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:1 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 3848 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1735810226763476 --launch-time-ticks=6360915784 --mojo-platform-channel-handle=3708 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:1 MD5: 9909D978B39FB7369F511D8506C17CA0)

msedgewebview2.exe (PID: 7832 cmdline: "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-GB --service-sandbox-type=audio --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=4804 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:8 MD5: 9909D978B39FB7369F511D8506C17CA0)

Watchdog.exe (PID: 2936 cmdline: "C:\Users\user\PCAppStore\Watchdog.exe" /guid=C1B82742-2267-4E50-8B1E-525BB13B4A34 /rid=20250102061616.8456349890 /ver=fa.2001g MD5: 646EB11A93F5B255A528B46AAE2A4465)

cleanup

Sigma Signatures

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: "C:\Users\user\PCAppStore\PCAppStore.exe" /init default, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\nsgC284.tmp, ProcessId: 7100, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\PCAppStore

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-02T12:16:17.988643+0100	2028371	3	Unknown Traffic	192.168.2.17	49795	207.246.91.177	443	TCP
2025-01-02T12:16:25.712515+0100	2028371	3	Unknown Traffic	192.168.2.17	49805	207.246.91.177	443	TCP
2025-01-02T12:16:27.322354+0100	2028371	3	Unknown Traffic	192.168.2.17	49810	207.246.91.177	443	TCP
2025-01-02T12:16:28.941957+0100	2028371	3	Unknown Traffic	192.168.2.17	49820	207.246.91.177	443	TCP
2025-01-02T12:16:30.577225+0100	2028371	3	Unknown Traffic	192.168.2.17	49828	207.246.91.177	443	TCP
2025-01-02T12:16:31.477934+0100	2028371	3	Unknown Traffic	192.168.2.17	49838	207.246.91.177	443	TCP
2025-01-02T12:16:32.188436+0100	2028371	3	Unknown Traffic	192.168.2.17	49851	207.246.91.177	443	TCP
2025-01-02T12:16:32.533218+0100	2028371	3	Unknown Traffic	192.168.2.17	49854	207.246.91.177	443	TCP
2025-01-02T12:16:33.009377+0100	2028371	3	Unknown Traffic	192.168.2.17	49859	207.246.91.177	443	TCP
2025-01-02T12:16:35.286298+0100	2028371	3	Unknown Traffic	192.168.2.17	49877	207.246.91.177	443	TCP
2025-01-02T12:16:35.332317+0100	2028371	3	Unknown Traffic	192.168.2.17	49876	207.246.91.177	443	TCP
2025-01-02T12:16:41.727304+0100	2028371	3	Unknown Traffic	192.168.2.17	49893	207.246.91.177	443	TCP
2025-01-02T12:16:45.580727+0100	2028371	3	Unknown Traffic	192.168.2.17	49904	207.246.91.177	443	TCP
2025-01-02T12:16:46.983867+0100	2028371	3	Unknown Traffic	192.168.2.17	49907	207.246.91.177	443	TCP
2025-01-02T12:16:50.768726+0100	2028371	3	Unknown Traffic	192.168.2.17	49920	207.246.91.177	443	TCP
2025-01-02T12:16:53.413506+0100	2028371	3	Unknown Traffic	192.168.2.17	49928	147.182.211.77	443	TCP
2025-01-02T12:16:56.686209+0100	2028371	3	Unknown Traffic	192.168.2.17	49938	147.182.211.77	443	TCP
2025-01-02T12:16:58.249156+0100	2028371	3	Unknown Traffic	192.168.2.17	49946	207.246.91.177	443	TCP
2025-01-02T12:17:02.197969+0100	2028371	3	Unknown Traffic	192.168.2.17	49950	207.246.91.177	443	TCP
2025-01-02T12:17:03.835629+0100	2028371	3	Unknown Traffic	192.168.2.17	49952	207.246.91.177	443	TCP
2025-01-02T12:17:04.546785+0100	2028371	3	Unknown Traffic	192.168.2.17	49953	207.246.91.177	443	TCP

ETPRO MALWARE Common Downloader Header Pattern HCa

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-02T12:16:26.143595+0100	2803304	3	Unknown Traffic	192.168.2.17	49806	207.246.91.177	443	TCP
2025-01-02T12:16:32.672024+0100	2803304	3	Unknown Traffic	192.168.2.17	49855	207.246.91.177	443	TCP
2025-01-02T12:16:32.681379+0100	2803304	3	Unknown Traffic	192.168.2.17	49852	207.246.91.177	443	TCP
2025-01-02T12:16:33.057019+0100	2803304	3	Unknown Traffic	192.168.2.17	49857	195.181.170.18	443	TCP
2025-01-02T12:16:33.081061+0100	2803304	3	Unknown Traffic	192.168.2.17	49856	195.181.170.18	443	TCP
2025-01-02T12:16:34.947195+0100	2803304	3	Unknown Traffic	192.168.2.17	49865	207.246.91.177	443	TCP
2025-01-02T12:16:34.949936+0100	2803304	3	Unknown Traffic	192.168.2.17	49864	207.246.91.177	443	TCP
2025-01-02T12:16:36.545013+0100	2803304	3	Unknown Traffic	192.168.2.17	49879	195.181.170.18	443	TCP
2025-01-02T12:16:36.566993+0100	2803304	3	Unknown Traffic	192.168.2.17	49878	195.181.170.18	443	TCP
2025-01-02T12:16:41.284319+0100	2803304	3	Unknown Traffic	192.168.2.17	49884	207.246.91.177	443	TCP
2025-01-02T12:16:41.285350+0100	2803304	3	Unknown Traffic	192.168.2.17	49883	207.246.91.177	443	TCP
2025-01-02T12:16:43.509805+0100	2803304	3	Unknown Traffic	192.168.2.17	49895	207.246.91.177	443	TCP
2025-01-02T12:16:43.581572+0100	2803304	3	Unknown Traffic	192.168.2.17	49894	195.181.170.18	443	TCP
2025-01-02T12:16:43.585902+0100	2803304	3	Unknown Traffic	192.168.2.17	49892	195.181.170.18	443	TCP
2025-01-02T12:16:45.226813+0100	2803304	3	Unknown Traffic	192.168.2.17	49899	207.246.91.177	443	TCP
2025-01-02T12:16:46.665057+0100	2803304	3	Unknown Traffic	192.168.2.17	49901	207.246.91.177	443	TCP
2025-01-02T12:16:46.726444+0100	2803304	3	Unknown Traffic	192.168.2.17	49902	195.181.170.18	443	TCP
2025-01-02T12:16:46.733601+0100	2803304	3	Unknown Traffic	192.168.2.17	49903	195.181.170.18	443	TCP
2025-01-02T12:16:47.083288+0100	2803304	3	Unknown Traffic	192.168.2.17	49906	207.246.91.177	443	TCP
2025-01-02T12:16:48.223720+0100	2803304	3	Unknown Traffic	192.168.2.17	49909	207.246.91.177	443	TCP
2025-01-02T12:16:48.301623+0100	2803304	3	Unknown Traffic	192.168.2.17	49911	195.181.170.18	443	TCP
2025-01-02T12:16:48.683666+0100	2803304	3	Unknown Traffic	192.168.2.17	49914	207.246.91.177	443	TCP
2025-01-02T12:16:49.025744+0100	2803304	3	Unknown Traffic	192.168.2.17	49916	207.246.91.177	443	TCP
2025-01-02T12:16:50.438589+0100	2803304	3	Unknown Traffic	192.168.2.17	49917	207.246.91.177	443	TCP
2025-01-02T12:16:50.928320+0100	2803304	3	Unknown Traffic	192.168.2.17	49919	207.246.91.177	443	TCP
2025-01-02T12:16:51.084625+0100	2803304	3	Unknown Traffic	192.168.2.17	49921	207.246.91.177	443	TCP
2025-01-02T12:16:53.051595+0100	2803304	3	Unknown Traffic	192.168.2.17	49923	207.246.91.177	443	TCP
2025-01-02T12:16:55.218395+0100	2803304	3	Unknown Traffic	192.168.2.17	49927	207.246.91.177	443	TCP
2025-01-02T12:16:55.251466+0100	2803304	3	Unknown Traffic	192.168.2.17	49929	207.246.91.177	443	TCP
2025-01-02T12:16:55.705159+0100	2803304	3	Unknown Traffic	192.168.2.17	49934	207.246.91.177	80	TCP
2025-01-02T12:16:55.800879+0100	2803304	3	Unknown Traffic	192.168.2.17	49934	207.246.91.177	80	TCP
2025-01-02T12:16:55.825075+0100	2803304	3	Unknown Traffic	192.168.2.17	49932	207.246.91.177	443	TCP
2025-01-02T12:16:56.358667+0100	2803304	3	Unknown Traffic	192.168.2.17	49935	207.246.91.177	443	TCP
2025-01-02T12:16:56.387574+0100	2803304	3	Unknown Traffic	192.168.2.17	49936	207.246.91.177	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	ReversingLabs: Detection: 33%
Source: C:\Users\user\PCAppStore\Uninstaller.exe	ReversingLabs: Detection: 29%

Source: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g	HTTP Parser: No favicon
Source: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g	HTTP Parser: No favicon
Source: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g	HTTP Parser: No favicon
Source: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g	HTTP Parser: No favicon

Bitcoin Miner

Found strings related to Crypto-Mining

Source: msedgewebview2.exe, 0000001E.00000002.2693170250.000012CC00888000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: jsecoin.com/
Source: msedgewebview2.exe, 0000001E.00000002.2693170250.000012CC00888000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: coinhive.com/

Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp

Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PCAppStore

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp

File created: C:\Users\user\PCAppStore\ReadMe.txt

Jump to behavior

Source: unknown	HTTPS traffic detected: 207.246.91.177:443 -> 192.168.2.17:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 169.150.255.181:443 -> 192.168.2.17:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.246.91.177:443 -> 192.168.2.17:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.246.91.177:443 -> 192.168.2.17:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.205.91:443 -> 192.168.2.17:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.205.91:443 -> 192.168.2.17:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.246.91.177:443 -> 192.168.2.17:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.246.91.177:443 -> 192.168.2.17:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.246.91.177:443 -> 192.168.2.17:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.181.170.18:443 -> 192.168.2.17:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.181.170.18:443 -> 192.168.2.17:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.246.91.177:443 -> 192.168.2.17:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.246.91.177:443 -> 192.168.2.17:49877 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.246.91.177:443 -> 192.168.2.17:49904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 169.150.255.181:443 -> 192.168.2.17:49915 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 147.182.211.77:443 -> 192.168.2.17:49928 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.246.91.177:443 -> 192.168.2.17:49953 version: TLS 1.2

Source:	Binary string: C:\Build\Build_2001g_D20241113T092744\fa_rss\AppStoreUpdater\Release\auto_updater.pdb1 source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\zak\Downloads\Inetc\Unicode\Plugins\inetc.pdb source: Setup.exe, 0000000C.00000002.1849044659.000000000040A000.00000004.00000001.01000000.0000000B.sdmp, nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Build\Build_2001g_D20241113T092744\fa_rss\Watchdog\x64\Release\Watchdog.pdb source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000001A.00000000.1893940296.00007FF786BCA000.00000002.00000001.01000000.0000001B.sdmp
Source:	Binary string: C:\Build\Build_2001g_D20241113T092744\fa_rss\AppStoreUpdater\Release\auto_updater.pdb source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Build\Build_2001g_D20241113T092744\fa_rss\engine\Release\PCAppStore.pdb source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893065239.00007FF70087F000.00000002.00000001.01000000.0000001A.sdmp

Source: global traffic	HTTP traffic detected: GET /api/pcapp_engine.php?a=config&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //src/app/appStore.js HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //src/app/appOffer.js HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73406_6671309e0b993.png HTTP/1.1Host: repcdn.pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73398_66603950c621c.png HTTP/1.1Host: repcdn.pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //src/app/appWidget.js HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //search-menu/?a=getTemplate&p[tmplType]=search HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73400_666176fb273fb.png HTTP/1.1Host: repcdn.pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73377_663ce6da92b28.jpg HTTP/1.1Host: repcdn.pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //src/app/appWindow.js HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //appstore-settings/ HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //src/app/appHint.js HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73356_663ce796de577.jpg HTTP/1.1Host: repcdn.pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73401_66684ff6b31a4.png HTTP/1.1Host: repcdn.pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //appstore-menu/ HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //appstore-hint/ HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73424_66a3b3e271152.png HTTP/1.1Host: repcdn.pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73326_663e2383827ed.jpg HTTP/1.1Host: repcdn.pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //images/front_img/appstore-settings/index_5/icon_check.png HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //src/app/appSearchMenu.js HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73394_663ce7758e4ec.jpg HTTP/1.1Host: repcdn.pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //src/app/appMenuStore.js HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/appstore-settings/index_5/icon_check.png HTTP/1.1Cache-Control: no-cacheHost: repository.pcapp.storeConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET //appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //appstore-widget/?id=73412 HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //search-menu/?a=getTemplate&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&p[tmplType]=search&version=fa.2001g HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //src/app/appSettings.js HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //appstore-widget/?id=73273 HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /images/front_img/appstore-hint/index_1/in_background_auto_update_img.png HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //search-menu/?a=getTemplate&p[tmplType]=menu HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/appstore-hint/index_1/in_background_auto_update_img.png HTTP/1.1Cache-Control: no-cacheHost: repository.pcapp.storeConnection: Keep-AliveCookie: finishInstallInApp=done
Source: global traffic	HTTP traffic detected: GET /images/front_img/logo/logo-light.svg HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /images/front_img/appstore-menu/index_12/icon_search_write_right.png HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /images/front_img/appstore-hint/index_1/in_background_auto_update_img.png HTTP/1.1Cache-Control: no-cacheHost: pcapp.storeConnection: Keep-AliveCookie: finishInstallInApp=done
Source: global traffic	HTTP traffic detected: GET /images/front_img/appstore-hint/index_1/in_background_img.png HTTP/1.1Cache-Control: no-cacheHost: pcapp.storeConnection: Keep-AliveCookie: finishInstallInApp=done
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/logo/logo-light.svg HTTP/1.1Cache-Control: no-cacheHost: repository.pcapp.storeConnection: Keep-AliveCookie: finishInstallInApp=done
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/appstore-menu/index_12/icon_search_write_right.png HTTP/1.1Cache-Control: no-cacheHost: repository.pcapp.storeConnection: Keep-AliveCookie: finishInstallInApp=done
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/appstore-hint/index_1/in_background_img.png HTTP/1.1Cache-Control: no-cacheConnection: Keep-AliveHost: repository.pcapp.storeCookie: finishInstallInApp=done
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/appstore-hint/index_1/in_background_auto_update_img.png HTTP/1.1Cache-Control: no-cacheConnection: Keep-AliveHost: repository.pcapp.storeCookie: finishInstallInApp=done
Source: global traffic	HTTP traffic detected: GET /images/front_img/appstore-hint/index_1/in_background_auto_update_img.png HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /images/front_img/appstore-hint/index_1/in_background_img.png HTTP/1.1Host: pcapp.storeCache-Control: no-cache

Source: Joe Sandbox View	IP Address: 18.173.205.91 18.173.205.91
Source: Joe Sandbox View	IP Address: 207.246.91.177 207.246.91.177
Source: Joe Sandbox View	IP Address: 162.159.61.3 162.159.61.3
Source: Joe Sandbox View	IP Address: 147.182.211.77 147.182.211.77

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49795 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49805 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49810 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49828 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49820 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49851 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49838 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49854 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49859 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49876 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49877 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49893 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49907 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49904 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49920 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49928 -> 147.182.211.77:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49938 -> 147.182.211.77:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49950 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49952 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49953 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49934 -> 207.246.91.177:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.17:49946 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49806 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49852 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49855 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49857 -> 195.181.170.18:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49856 -> 195.181.170.18:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49865 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49864 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49878 -> 195.181.170.18:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49879 -> 195.181.170.18:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49884 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49883 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49895 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49899 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49901 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49902 -> 195.181.170.18:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49903 -> 195.181.170.18:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49911 -> 195.181.170.18:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49906 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49914 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49916 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49909 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49921 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49894 -> 195.181.170.18:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49932 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49923 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49917 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49936 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49927 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49929 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49935 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49919 -> 207.246.91.177:443
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.17:49892 -> 195.181.170.18:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_mini_installer&evt_action=show_page&p=wel&_fcid=1734694685230875 HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_mini_installer&evt_action=show_page&p=installing&_fcid=1734694685230875 HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_mini_installer&evt_action=start&permision=&_fcid=1734694685230875 HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_mini_installer&evt_action=download_start&_fcid=1734694685230875 HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /installing.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&winver=19045&version=fa.2001g&nocache=20250102061607.239&_fcid=1734694685230875 HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /download.php?&src=mini_installer&file=1&mini_ver=fa.2001g HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: delivery.pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g HTTP/1.1Host: pcapp.storeConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lp/lpd_installing_r2/src/lpd_installing_r2.min.css?nocache=1731594251558 HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/front_img/lp/lpd_installing_r2/img/done_windows_icon.svg HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /src/main.js HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lp/lpd_installing_r2/src/lpd_installing_r2.min.js?nocache=1731594251558 HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /src/main.js HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/front_img/logo/logo-dark.svg HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/lp/lpd_installing_r2/img/done_windows_icon.svg HTTP/1.1Host: repository.pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_mini_installer&evt_action=download_done&result=12345678-1234-5678-90AB-CDDEEFAABBCC&_fcid=1734694685230875 HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /lp/lpd_installing_r2/src/lpd_installing_r2.min.js?nocache=1731594251558 HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/logo/logo-dark.svg HTTP/1.1Host: repository.pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1734694685230875
Source: global traffic	HTTP traffic detected: GET /images/front_img/lp/lpd_installing_r2/img/done_cursor_icon.svg HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/lp/lpd_installing_r2/src/lpd_installing_r2.min.css?nocache=1731594251558Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1734694685230875
Source: global traffic	HTTP traffic detected: GET /api/api.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/lp/lpd_installing_r2/img/done_windows_icon.svg HTTP/1.1Host: repository.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_mini_installer&evt_action=done&_fcid=1734694685230875 HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pixelgif.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/lp/lpd_installing_r2/img/done_cursor_icon.svg HTTP/1.1Host: repository.pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34
Source: global traffic	HTTP traffic detected: GET /api/api.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/858128210/?random=1735816571776&cv=11&fst=1735816571776&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/858128210/?random=1735816571802&cv=11&fst=1735816571802&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/858128210?random=1735816571776&cv=11&fst=1735816571776&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/858128210?random=1735816571802&cv=11&fst=1735816571802&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/858128210/?random=1735816571816&cv=11&fst=1735816571816&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dconversion&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/858128210?random=1735816571816&cv=11&fst=1735816571816&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dconversion HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_installer&evt_action=internal&prev_v=fa.2001g HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/logo/logo-dark.svg HTTP/1.1Host: repository.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-VFQWFX3X1C&gacid=1340293989.1735816572&gtm=45je4cc1v898645365za200zb9103256652&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=1886245849 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_installer&evt_action=start&permision= HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/858128210/?random=1735816571776&cv=11&fst=1735815600000&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dmk4GgMjvKAIoDN4SYbnV4XhwthxOhg&random=1908624295&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/858128210/?random=1735816571802&cv=11&fst=1735815600000&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dAG3wmpq05OsD-IU_nNbOVmny0Gutfw&random=335870858&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/858128210/?random=1735816571776&cv=11&fst=1735816571776&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/858128210/?random=1735816571802&cv=11&fst=1735816571802&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/lp/lpd_installing_r2/img/done_cursor_icon.svg HTTP/1.1Host: repository.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/858128210/?random=1735816571816&cv=11&fst=1735815600000&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dconversion&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7d_7UhGWNfEWx92MYtgnB9JW8X-lIvUQ&random=2688799713&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/858128210/?random=1735816571816&cv=11&fst=1735816571816&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dconversion&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_installer&evt_action=installing&e=03000200-0400-0500-0006-000700080009&u=52 HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /lp/appstore/img/favicon.ico HTTP/1.1Host: pcapp.storeConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001gAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/858128210/?random=1735816571776&cv=11&fst=1735815600000&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dmk4GgMjvKAIoDN4SYbnV4XhwthxOhg&random=1908624295&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/858128210/?random=1735816571802&cv=11&fst=1735815600000&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dAG3wmpq05OsD-IU_nNbOVmny0Gutfw&random=335870858&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/858128210/?random=1735816571816&cv=11&fst=1735815600000&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dconversion&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7d_7UhGWNfEWx92MYtgnB9JW8X-lIvUQ&random=2688799713&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_installer&evt_action=localmac&addon[]=EC-F4-BB-FF-25-8B HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /lp/appstore/img/favicon.ico HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&inst_parent=&evt_src=fa_installer&evt_action=done HTTP/1.1User-Agent: NSIS_Inetc (Mozilla)Host: pcapp.storeConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /api/api.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_product&evt_action=channel&id=-3&eng_time=1735822737703&nocache=6350046 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":0,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735822737&nocache=8570 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":1,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735824776&nocache=11904 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":2,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735826695&nocache=15039 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":3,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735828613&nocache=18174 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /api/api.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":4,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735830532&nocache=21309 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":5,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735832451&nocache=24444 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_product&evt_action=started&prnt=nsgC284.tmp&sys_lang=en-GB&eng_time=1735822745448&nocache=6357828 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /api/pcapp_engine.php?a=config&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":6,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735834250&nocache=27383 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":7,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735836168&nocache=30518 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_product&evt_action=webview_error&reason=failed_to_create_thread_hook&eng_time=1735822746632&nocache=6359421 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /api/api.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":8,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735838087&nocache=885 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /search-menu/?a=getTemplate&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&p[tmplType]=search&version=fa.2001g HTTP/1.1Host: pcapp.storeConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g HTTP/1.1Host: pcapp.storeConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g HTTP/1.1Host: pcapp.storeConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_menu_search&evt_action=created&&eng_time=1735822747963&nocache=6361046 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":9,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735840006&nocache=4020 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /src/app/appWindow.js HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pcapp.store/appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: finishInstallInApp=done
Source: global traffic	HTTP traffic detected: GET /src/app/appMenuStore.js HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pcapp.store/appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: finishInstallInApp=done
Source: global traffic	HTTP traffic detected: GET /src/app/appSearchMenu.js HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pcapp.store/search-menu/?a=getTemplate&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&p[tmplType]=search&version=fa.2001gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: finishInstallInApp=done; _fcid=1735816589292045
Source: global traffic	HTTP traffic detected: GET /images/front_img/logo/logo-light.svg HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: finishInstallInApp=done
Source: global traffic	HTTP traffic detected: GET /pixel.gif?evt_src=web&evt_action=new_fcid&ncrd=1735816589405&user-agent=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/117.0.0.0%20Safari/537.36%20Edg/117.0.2045.47%20PcApp/1.0.0.2001g HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: finishInstallInApp=done; _fcid=1735816589292045
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/offer_1515_win10.png HTTP/1.1Host: repcdn.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_product&evt_action=webview_error&reason=failed_to_create_thread_hook&eng_time=1735822747987&nocache=6362671 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /src/app/appWindow.js HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pcapp.store/search-menu/?a=getTemplate&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&p[tmplType]=search&version=fa.2001gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: finishInstallInApp=done; _fcid=1735816589292045
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":10,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735842164&nocache=7546 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/logo/logo-light.svg HTTP/1.1Host: repository.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045
Source: global traffic	HTTP traffic detected: GET /images/front_img/appstore-hint/index_1/in_background_auto_update_img.png HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: finishInstallInApp=done; _fcid=1735816589292045
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: finishInstallInApp=done; _fcid=1735816589292045
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_menu_store&evt_action=updated&evt_src=fa_menu_store&evt_action=updated&version=fa.2001g&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&eng_time=1735822751230&nocache=6363578 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /pixel.gif?evt_src=fa_menu_store&evt_action=internet_check&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&ncrd=1735816590497&user-agent=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/117.0.0.0%20Safari/537.36%20Edg/117.0.2045.47%20PcApp/1.0.0.2001g HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: finishInstallInApp=done; _fcid=1735816589292045
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73398_66603950c621c.png HTTP/1.1Host: repcdn.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73401_66684ff6b31a4.png HTTP/1.1Host: repcdn.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73356_663ce796de577.jpg HTTP/1.1Host: repcdn.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73400_666176fb273fb.png HTTP/1.1Host: repcdn.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73406_6671309e0b993.png HTTP/1.1Host: repcdn.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73326_663e2383827ed.jpg HTTP/1.1Host: repcdn.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/appstore-hint/index_1/in_background_auto_update_img.png HTTP/1.1Host: repository.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/videos/solitaire_category_video_2_webm.webm HTTP/1.1Host: repository.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept-Encoding: identity;q=1, ;q=0Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://pcapp.store/Accept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_menu_store&evt_action=created&&eng_time=1735822748312&nocache=6364296 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":11,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735844083&nocache=10681 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_hint&evt_action=show&version=fa.2001g&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&eng_time=1735822752290&nocache=6364640 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET //src/app/appStore.js HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //src/app/appOffer.js HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73406_6671309e0b993.png HTTP/1.1Host: repcdn.pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73398_66603950c621c.png HTTP/1.1Host: repcdn.pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /api/api.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/videos/mahjong_video_470x260_2.webm HTTP/1.1Host: repository.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept-Encoding: identity;q=1, ;q=0Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://pcapp.store/Accept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/videos/watermelon_1.webm HTTP/1.1Host: repository.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept-Encoding: identity;q=1, ;q=0Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://pcapp.store/Accept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/videos/Hidden_Objects_category_video_4_webm.webm HTTP/1.1Host: repository.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept-Encoding: identity;q=1, ;q=0Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://pcapp.store/Accept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73424_66a3b3e271152.png HTTP/1.1Host: repcdn.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":12,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735846122&nocache=14012 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73377_663ce6da92b28.jpg HTTP/1.1Host: repcdn.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73394_663ce7758e4ec.jpg HTTP/1.1Host: repcdn.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/videos/classic_games_4_webm.webm HTTP/1.1Host: repository.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept-Encoding: identity;q=1, ;q=0Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://pcapp.store/Accept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET //src/app/appWidget.js HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //search-menu/?a=getTemplate&p[tmplType]=search HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /notify_app_v2.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&lastid=0&lasttime=0&end_v=fa.2001g&nocache=6364640 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":13,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735848160&nocache=17343 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/videos/checkers_1.webm HTTP/1.1Host: repository.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept-Encoding: identity;q=1, ;q=0Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://pcapp.store/Accept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/videos/top10_400x280.webm HTTP/1.1Host: repository.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept-Encoding: identity;q=1, ;q=0Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://pcapp.store/Accept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/videos/scavenger_quest_1.webm HTTP/1.1Host: repository.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept-Encoding: identity;q=1, ;q=0Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://pcapp.store/Accept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /images/front_img/appstore-menu/index_12/icon_search_write_right.png HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: finishInstallInApp=done; _fcid=1735816589292045
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":14,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735850199&nocache=20674 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_product&evt_action=webview_error&reason=failed_to_create_thread_hook&eng_time=1735822748337&nocache=6365906 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_hint&evt_action=close&version=fa.2001g&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&eng_time=1735822754074&nocache=6367390 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73400_666176fb273fb.png HTTP/1.1Host: repcdn.pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73377_663ce6da92b28.jpg HTTP/1.1Host: repcdn.pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/videos/Parking_Plot_1.webm HTTP/1.1Host: repository.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept-Encoding: identity;q=1, ;q=0Accept: /*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://pcapp.store/Accept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /api/api.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":15,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735852478&nocache=24400 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":16,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735855116&nocache=28711 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/appstore-menu/index_12/icon_search_write_right.png HTTP/1.1Host: repository.pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001gAccept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pcapp.store/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8Cookie: _fcid=1735816589292045
Source: global traffic	HTTP traffic detected: GET //src/app/appWindow.js HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //appstore-settings/ HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":17,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735857274&nocache=32237 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /api/api.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":18,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735859313&nocache=2800 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET //src/app/appHint.js HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_hint&evt_action=created&&eng_time=1735822748441&nocache=6370046 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73356_663ce796de577.jpg HTTP/1.1Host: repcdn.pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73401_66684ff6b31a4.png HTTP/1.1Host: repcdn.pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":19,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735862071&nocache=7307 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET //appstore-menu/ HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":20,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735864110&nocache=10638 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET //appstore-hint/ HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_offer&evt_action=show_welcome&evt_src=fa_offer&evt_action=show_welcome&count_show=true&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&oid=1831&otype=startmenu&p=a&eng_time=1735822764142&nocache=6376500 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73424_66a3b3e271152.png HTTP/1.1Host: repcdn.pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73326_663e2383827ed.jpg HTTP/1.1Host: repcdn.pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //images/front_img/appstore-settings/index_5/icon_check.png HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_product&evt_action=windows_created&&eng_time=1735822752022&nocache=6378687 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":21,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735865909&nocache=13577 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /api/api.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
Source: global traffic	HTTP traffic detected: GET //src/app/appSearchMenu.js HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/3rdparty/application/images/apps_73394_663ce7758e4ec.jpg HTTP/1.1Host: repcdn.pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //src/app/appMenuStore.js HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/appstore-settings/index_5/icon_check.png HTTP/1.1Cache-Control: no-cacheHost: repository.pcapp.storeConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":22,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735867947&nocache=16908 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET //appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":23,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735869866&nocache=20043 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET //appstore-widget/?id=73412 HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET //appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_menu_store&evt_action=open_start_menu&&eng_time=1735822752031&nocache=6381671 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET //search-menu/?a=getTemplate&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&p[tmplType]=search&version=fa.2001g HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":24,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735871785&nocache=23178 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":25,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735873943&nocache=26704 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /api/api.php HTTP/1.1Host: pcapp.storeConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
Source: global traffic	HTTP traffic detected: GET //src/app/appSettings.js HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":26,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735875982&nocache=30035 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET //appstore-widget/?id=73273 HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /images/front_img/appstore-hint/index_1/in_background_auto_update_img.png HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_pcdetails&evt_action=ext_chrome&data=%5B%22ahfgeienlihckogmohjhadlkjgocpleb%22,%22gdaefkejpgkiemlaofpalmlakkmbjdnl%22,%22mhjfbmdgcfjbbpaeojofohoefgiehjai%22,%22neajdppkdcdipfabeoofebfddakdcjhd%22,%22nkeimhogjdpnpccoofpliimaahmaaome%22%5D&eng_time=1735822752036&nocache=6384500 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: ev.pcapp.store
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":27,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735878260&nocache=990 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET //search-menu/?a=getTemplate&p[tmplType]=menu HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/appstore-hint/index_1/in_background_auto_update_img.png HTTP/1.1Cache-Control: no-cacheHost: repository.pcapp.storeConnection: Keep-AliveCookie: finishInstallInApp=done
Source: global traffic	HTTP traffic detected: GET /images/front_img/logo/logo-light.svg HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /images/front_img/appstore-menu/index_12/icon_search_write_right.png HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_pcdetails&evt_action=ext_edge&data=%5B%22ahfgeienlihckogmohjhadlkjgocpleb%22,%22dgiklkfkllikcanfonkcabmbdfmgleag%22,%22fikbjbembnmfhppjfnmfkahdhfohhjmg%22,%22ghbmnnjooekpmoecnnnilnnbdlolhkhi%22,%22iglcjdemknebjbklcgkfaebgojjphkec%22,%22ihmafllikibpmigkcoadcmckbfhibefp%22,%22jdiccldimpdaibmpdkjnbmckianbfold%22,%22jmjflgjpcpepeafmmgdpfkogkghcpiha%22,%22mhjfbmdgcfjbbpaeojofohoefgiehjai%22,%22ncbjelpjchkpbikbpkcchkhkblodoama%22,%22nkeimhogjdpnpccoofpliimaahmaaome%22%5D&eng_time=1735822752189&nocache=6388812 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: ev.pcapp.store
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":28,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735880539&nocache=4713 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /images/front_img/appstore-hint/index_1/in_background_auto_update_img.png HTTP/1.1Cache-Control: no-cacheHost: pcapp.storeConnection: Keep-AliveCookie: finishInstallInApp=done
Source: global traffic	HTTP traffic detected: GET /images/front_img/appstore-hint/index_1/in_background_img.png HTTP/1.1Cache-Control: no-cacheHost: pcapp.storeConnection: Keep-AliveCookie: finishInstallInApp=done
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/logo/logo-light.svg HTTP/1.1Cache-Control: no-cacheHost: repository.pcapp.storeConnection: Keep-AliveCookie: finishInstallInApp=done
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/appstore-menu/index_12/icon_search_write_right.png HTTP/1.1Cache-Control: no-cacheHost: repository.pcapp.storeConnection: Keep-AliveCookie: finishInstallInApp=done
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/appstore-hint/index_1/in_background_img.png HTTP/1.1Cache-Control: no-cacheConnection: Keep-AliveHost: repository.pcapp.storeCookie: finishInstallInApp=done
Source: global traffic	HTTP traffic detected: GET /pcapp/images/front_img/appstore-hint/index_1/in_background_auto_update_img.png HTTP/1.1Cache-Control: no-cacheConnection: Keep-AliveHost: repository.pcapp.storeCookie: finishInstallInApp=done
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":29,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735882698&nocache=8240 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":30,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735884976&nocache=11966 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_product&evt_action=contextual_offer&&eng_time=1735822756559&nocache=6390375 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":31,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735887615&nocache=16276 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":32,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735890134&nocache=20391 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_hint&evt_action=deleted&&eng_time=1735822756727&nocache=6394312 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":33,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735892772&nocache=24701 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_menu_store&evt_action=show&&eng_time=1735822761376&nocache=6395921 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_menu_store&evt_action=click_close&evt_src=fa_menu_store&evt_action=click_close&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&eng_time=1735822784273&nocache=6396625 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":34,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735895411&nocache=29012 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":35,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735898410&nocache=1142 HTTP/1.1Accept: /UA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: d74queuslupub.cloudfront.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /notify_app_v2.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&lastid=0&lasttime=0&end_v=fa.2001g&nocache=6364640 HTTP/1.1Connection: Keep-AliveUser-Agent: WinHTTP 1.0Host: pcapp.store
Source: global traffic	HTTP traffic detected: GET /images/front_img/appstore-hint/index_1/in_background_auto_update_img.png HTTP/1.1Host: pcapp.storeCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /images/front_img/appstore-hint/index_1/in_background_img.png HTTP/1.1Host: pcapp.storeCache-Control: no-cache

Source: msedgewebview2.exe, 00000024.00000002.2670730884.0000048C008AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000003.2125327544.0000048C008AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000003.2013438476.0000048C008AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://microsoftstart.msn.cn/https://rewards.microsoft.com/https://www.microsoftnews.com/https://www.facebook.com/www.staging-bing-int.comaction.getBadgeTextColorhttps://outlook.live.com/https://rewards.bing.com/https://www.microsoftnews.cn/translatorserp.bing.comhttps://translator.bing.com/manifest:action equals www.facebook.com (Facebook)
Source: msedgewebview2.exe, 0000001E.00000002.2627311725.000012CC004D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2599654029.00002ED00089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2012878939.00002ED00089C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/* equals www.facebook.com (Facebook)
Source: msedgewebview2.exe, 00000023.00000002.2599654029.00002ED00089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2012878939.00002ED00089C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2045028569.00002ED000898000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.microsoftnews.cn/https://www.facebook.com/https://rewards.microsoft.com/translatorserp.bing.comhttps://www.microsoftnews.com/permission:accessibilityPrivatehttps://rewards.bing.com/https://translator.bing.com/https://outlook.live.com/* equals www.facebook.com (Facebook)
Source: msedgewebview2.exe, 0000001E.00000002.2627311725.000012CC004D0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2557099624.00002ED000290000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: pcapp.store
Source: global traffic	DNS traffic detected: DNS query: delivery.pcapp.store
Source: global traffic	DNS traffic detected: DNS query: repository.pcapp.store
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: d74queuslupub.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: repcdn.pcapp.store
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com
Source: global traffic	DNS traffic detected: DNS query: ev.pcapp.store

Source: unknown	DoH DNS queries detected: name: repository.pcapp.store
Source: unknown	DoH DNS queries detected: name: repository.pcapp.store

Source: unknown

HTTP traffic detected: POST /inst_cpg.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&version=fa.2001g&src=pcapp_mini&uc=16le HTTP/1.1Content-Type: application/jsonUser-Agent: NSIS_wininetHost: pcapp.storeContent-Length: 4418Cache-Control: no-cache

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 02 Jan 2025 11:16:12 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 02 Jan 2025 11:16:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 02 Jan 2025 11:16:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 02 Jan 2025 11:16:22 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 02 Jan 2025 11:16:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 02 Jan 2025 11:16:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 02 Jan 2025 11:16:37 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 02 Jan 2025 11:16:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 02 Jan 2025 11:16:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 02 Jan 2025 11:16:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 02 Jan 2025 11:16:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 02 Jan 2025 11:16:50 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 02 Jan 2025 11:16:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 02 Jan 2025 11:16:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Encoding

Source: 7zG.exe, 00000009.00000003.1604697709.00000144AB490000.00000004.00000800.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1902793448.000000000040A000.00000004.00000001.01000000.00000013.sdmp, nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000001B.00000000.1942109035.000000000C687000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: 7zG.exe, 00000009.00000003.1604697709.00000144AB490000.00000004.00000800.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1902793448.000000000040A000.00000004.00000001.01000000.00000013.sdmp, nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: 7zG.exe, 00000009.00000003.1604697709.00000144AB490000.00000004.00000800.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1902793448.000000000040A000.00000004.00000001.01000000.00000013.sdmp, nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000001B.00000000.1942109035.000000000CABF000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: 7zG.exe, 00000009.00000003.1604697709.00000144AB490000.00000004.00000800.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1902793448.000000000040A000.00000004.00000001.01000000.00000013.sdmp, nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: 7zG.exe, 00000009.00000003.1604697709.00000144AB490000.00000004.00000800.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1902793448.000000000040A000.00000004.00000001.01000000.00000013.sdmp, nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000001B.00000000.1942109035.000000000C687000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: 7zG.exe, 00000009.00000003.1604697709.00000144AB490000.00000004.00000800.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1902793448.000000000040A000.00000004.00000001.01000000.00000013.sdmp, nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000001B.00000000.1942109035.000000000CABF000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: 7zG.exe, 00000009.00000003.1604697709.00000144AB490000.00000004.00000800.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1902793448.000000000040A000.00000004.00000001.01000000.00000013.sdmp, nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000001B.00000000.1942109035.000000000CABF000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: 7zG.exe, 00000009.00000003.1604697709.00000144AB490000.00000004.00000800.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1902793448.000000000040A000.00000004.00000001.01000000.00000013.sdmp, nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0
Source: 7zG.exe, 00000009.00000003.1604697709.00000144AB490000.00000004.00000800.00020000.00000000.sdmp, Setup.exe, 0000000C.00000000.1746059318.000000000040A000.00000008.00000001.01000000.0000000B.sdmp, Setup.exe, 0000000C.00000002.1849044659.000000000040A000.00000004.00000001.01000000.0000000B.sdmp, nsgC284.tmp, 00000017.00000000.1840701979.000000000040A000.00000008.00000001.01000000.00000013.sdmp, nsgC284.tmp, 00000017.00000002.1902793448.000000000040A000.00000004.00000001.01000000.00000013.sdmp, nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://nsis.sf.net/NSIS_ErrorError
Source: 7zG.exe, 00000009.00000003.1604697709.00000144AB490000.00000004.00000800.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1902793448.000000000040A000.00000004.00000001.01000000.00000013.sdmp, nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000001B.00000000.1923391720.00000000090A8000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001B.00000002.2693860122.00000000090AD000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001B.00000000.1923391720.0000000009065000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: 7zG.exe, 00000009.00000003.1604697709.00000144AB490000.00000004.00000800.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1902793448.000000000040A000.00000004.00000001.01000000.00000013.sdmp, nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0A
Source: 7zG.exe, 00000009.00000003.1604697709.00000144AB490000.00000004.00000800.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1902793448.000000000040A000.00000004.00000001.01000000.00000013.sdmp, nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000001B.00000000.1942109035.000000000C687000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0C
Source: 7zG.exe, 00000009.00000003.1604697709.00000144AB490000.00000004.00000800.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1902793448.000000000040A000.00000004.00000001.01000000.00000013.sdmp, nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000001B.00000000.1942109035.000000000CABF000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0X
Source: PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6C8000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6CD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/
Source: PcAppStore.exe, 00000019.00000003.2052272122.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/h
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD73F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD730000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD730000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD725000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD730000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD730000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD730000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD730000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/image
Source: PcAppStore.exe, 00000019.00000002.2556135345.00000243DE73A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_bac
Source: PcAppStore.exe, 00000019.00000002.2556135345.00000243DE73A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_bach
Source: PcAppStore.exe, 00000019.00000003.2213964788.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2151397507.00000243DE73D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD74D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2327275875.00000243DE5C1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2541137500.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6BC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2201117577.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_auto_update_img.png
Source: PcAppStore.exe, 00000019.00000003.2194018725.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2220854124.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2249381588.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD74D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2201117577.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_auto_update_img.png&M
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_auto_update_img.png)
Source: PcAppStore.exe, 00000019.00000003.2052272122.00000243DE73E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2151397507.00000243DE73D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_auto_update_img.png.png;
Source: PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2541137500.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_auto_update_img.png1
Source: PcAppStore.exe, 00000019.00000003.2194018725.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2220854124.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2249381588.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD74D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2201117577.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_auto_update_img.pngJLu
Source: PcAppStore.exe, 00000019.00000003.2323036588.00000243DE5C0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270083154.00000243DE5BA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2327275875.00000243DE5C1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_auto_update_img.pngR
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_auto_update_img.pnggC
Source: PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_auto_update_img.pngmx
Source: PcAppStore.exe, 00000019.00000003.2323036588.00000243DE5C0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2327275875.00000243DE5C1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_auto_update_img.pngr%
Source: PcAppStore.exe, 00000019.00000003.2052272122.00000243DE73E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2556135345.00000243DE73A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2151397507.00000243DE73D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_auto_update_img.pngz
Source: PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2060574321.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6F4000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6C8000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6CC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2316173992.00000243DE914000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2315006018.00000243DE6D3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2234673553.00000243DEA28000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2531109155.00000243DE63E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6AE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_img.png
Source: PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6C8000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2315006018.00000243DE6D3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE6D4000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2318574909.00000243DE6D3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6CD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_img.png#
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_img.png0B
Source: PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_img.png4
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_img.png66176fb273fb.png
Source: PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_img.pnga
Source: PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_img.pnged
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_img.pngs
Source: PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2060574321.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6F4000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_img.pngx
Source: PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6C8000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6CD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcapp.store:80/notify_app_v2.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&lastid=0&lasttime=
Source: PcAppStore.exe, 00000019.00000003.2316173992.00000243DE914000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2234673553.00000243DEA28000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pcappstore.loc
Source: 7zG.exe, 00000009.00000003.1604697709.00000144AB490000.00000004.00000800.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1902793448.000000000040A000.00000004.00000001.01000000.00000013.sdmp, nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.digicert.com/CPS0
Source: PcAppStore.exe, 00000019.00000003.2040442382.00000243DE5C3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2039583664.00000243DE5C7000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2551616030.00002ED000254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore
Source: PcAppStore.exe, 00000019.00000003.2040442382.00000243DE5BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270083154.00000243DE5BA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5BB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2039583664.00000243DE5BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore/
Source: PcAppStore.exe, 00000019.00000003.2040442382.00000243DE5BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2039583664.00000243DE5BC000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2551616030.00002ED000254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromewebstore.google.com/
Source: PcAppStore.exe, 00000019.00000002.2572370964.0000218000237000.00000004.00000800.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2578872690.00002180002F8000.00000004.00000800.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2573056252.000021800024C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2561792059.000012CC00124000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2790076010.000012CC01128000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2485860776.00004CA0000E2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2469088838.00004CA000054000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2073629861.00004CA000466000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2473671402.00004CA000084000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2077835267.00004CA000AD0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2484685871.00004CA0000D8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2078051175.00004CA00014D000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2591218960.00002ED000818000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2593613376.00002ED00082D000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2651795315.00002ED0010F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://csp.withgoogle.com/csp/apps-themes
Source: PcAppStore.exe, 00000019.00000002.2578872690.00002180002F8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://csp.withgoogle.com/csp/apps-themesContent-Type:
Source: PcAppStore.exe, 00000019.00000002.2580543163.0000218000328000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2561792059.000012CC00124000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://csp.withgoogle.com/csp/apps-themeslContent-Typejfont/woff2x
Source: PcAppStore.exe, 00000019.00000002.2577483798.00002180002CC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2561792059.000012CC00124000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2790076010.000012CC01128000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2528838256.00004CA000358000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2485860776.00004CA0000E2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2469088838.00004CA000054000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2073629861.00004CA000466000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2546293684.00004CA000470000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2077835267.00004CA000AD0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2546293684.00004CA000466000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2484685871.00004CA0000D8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2536763589.00004CA0003BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2078051175.00004CA00014D000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2589260134.00002ED00073C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2591218960.00002ED000818000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2426327444.00000166B47ED000.00000004.10000000.00040000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2593613376.00002ED00082D000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2544399833.00002ED000211000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/apps-themes
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000001A.00000003.2087309433.000001D604DB6000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000001A.00000003.2020267183.000001D604DB4000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000001A.00000002.2403892198.000001D602F1C000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000001A.00000000.1893940296.00007FF786BCA000.00000002.00000001.01000000.0000001B.sdmp, Watchdog.exe, 0000001A.00000002.2472331480.00007FF786BCA000.00000002.00000001.01000000.0000001B.sdmp, Watchdog.exe, 0000001A.00000002.2452264905.000001D604DB4000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000001A.00000003.2154639428.000001D604DB6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://d74queuslupub.cloudfront.net/p.gif?guid=%ws&version=%ws&evt_src=watch_dog&evt_action=signal_
Source: Setup.exe, 0000000C.00000003.1847495997.0000000002ED3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://delivery.pcapp.store/
Source: Setup.exe, 0000000C.00000002.1851682820.0000000002ED4000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 0000000C.00000003.1847495997.0000000002ED3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://delivery.pcapp.store/0
Source: Setup.exe, 0000000C.00000002.1849739837.0000000000596000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://delivery.pcapp.store/download.php?&src=mini_installer&file=1&mini_ver=&evt_src=fa_mini_insta
Source: Setup.exe, 0000000C.00000002.1849044659.0000000000436000.00000004.00000001.01000000.0000000B.sdmp	String found in binary or memory: https://delivery.pcapp.store/download.php?&src=mini_installer&file=1&mini_ver=ersion=fa.2001g&src=pc
Source: Setup.exe, 0000000C.00000002.1851388344.0000000002E67000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 0000000C.00000003.1847495997.0000000002ED3000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 0000000C.00000003.1847495997.0000000002E67000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://delivery.pcapp.store/download.php?&src=mini_installer&file=1&mini_ver=fa.2001g
Source: Setup.exe, 0000000C.00000003.1847495997.0000000002ED3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://delivery.pcapp.store/download.php?&src=mini_installer&file=1&mini_ver=fa.2001ga
Source: PcAppStore.exe, 00000019.00000003.2040442382.00000243DE5BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2039583664.00000243DE5BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-5.corp.google.com/
Source: PcAppStore.exe, 00000019.00000003.2040442382.00000243DE5BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270083154.00000243DE5BA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5BB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2039583664.00000243DE5BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive-preprod.corp.google.com/
Source: PcAppStore.exe, 00000019.00000003.2270083154.00000243DE5BA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5BB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2039583664.00000243DE5BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://drive-staging.corp.google.com/
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ev.pcapp.store/YBH
Source: PcAppStore.exe, 00000019.00000003.2234673553.00000243DEAD3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2238592104.00000243DE998000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2016520662.00002ED000790000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2021779017.00002ED000D60000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2104246028.00002ED0010A2000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2018069295.00002ED000C6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ev.pcapp.store/p.gif?
Source: PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5F7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2259897481.00000243DE667000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2541137500.00000243DE6AA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311354888.00000243DE98F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2302901480.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ev.pcapp.store/p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_p
Source: PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ev.pcapp.store:443al
Source: PcAppStore.exe, 00000019.00000003.2244794470.00000243DE715000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE715000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2238592104.00000243DEA27000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2579112506.0000218000308000.00000004.00000800.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241150609.00000243DE997000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2249864560.00000243DEAD3000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2091089330.00004CA00037C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2531447473.00004CA000380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2017648378.00002ED000C5C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2045028569.00002ED0008A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2089386157.00002ED000A9A000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2016468116.00002ED00074C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2567774963.00002ED000356000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2426327444.00000166B47E7000.00000004.10000000.00040000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2520302449.0000101C00101000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2021779017.00002ED000DA0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2021779017.00002ED000D48000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2629509181.00002ED000A2C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2559198613.00002ED0002B4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2588632107.00002ED000718000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2034433467.00002ED000C6C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fonts.googleapis.com/css2?family=Inter:wght
Source: PcAppStore.exe, 00000019.00000002.2580543163.0000218000328000.00000004.00000800.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2579112506.0000218000308000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2035867718.00004CA000158000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2581070012.00002ED000662000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2591218960.00002ED00080C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fonts.gstatic.com
Source: PcAppStore.exe, 00000019.00000003.2234673553.00000243DEAD3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE715000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE715000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2234673553.00000243DEA28000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2238592104.00000243DEA27000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241150609.00000243DE997000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2308151079.00000243DE750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2249864560.00000243DEAD3000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2006856441.00004CA0003E4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2017648378.00002ED000C5C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2021779017.00002ED000D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2016468116.00002ED00074C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2520302449.0000101C00101000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2021779017.00002ED000DA0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2021779017.00002ED000D48000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2016520662.00002ED000790000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2021779017.00002ED000D60000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2034433467.00002ED000C6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2023323799.00002ED000794000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getbootstrap.com/)
Source: PcAppStore.exe, 00000019.00000003.2253191680.00000243DE9AD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2234673553.00000243DEAD3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2085450536.00000243DE9F8000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2212881789.00000243DE93C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2049344084.00000243DE93C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2234673553.00000243DEA28000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2086581729.00000243DE998000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2238592104.00000243DE998000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2049344084.00000243DE995000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2154449927.00000243DEA13000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2085227104.00002ED000ABC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2026545348.00002ED00065B000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2016520662.00002ED000790000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2021779017.00002ED000D60000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2018069295.00002ED000C6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2035158915.00002ED000DE8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000003.2025883601.0000048C0078C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000003.2049055605.0000048C00AF9000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000003.2026052898.0000048C00C7F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000003.2043767714.0000048C00A93000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000003.2030073064.0000048C0074C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/facebook/regenerator/blob/main/LICENSE
Source: PcAppStore.exe, 00000019.00000003.2234673553.00000243DEAD3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE715000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE715000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2234673553.00000243DEA28000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2238592104.00000243DEA27000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241150609.00000243DE997000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2308151079.00000243DE750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2249864560.00000243DEAD3000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2006856441.00004CA0003E4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2017648378.00002ED000C5C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2021779017.00002ED000D30000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2016468116.00002ED00074C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2520302449.0000101C00101000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2021779017.00002ED000DA0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2021779017.00002ED000D48000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2016520662.00002ED000790000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2021779017.00002ED000D60000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2034433467.00002ED000C6C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2023323799.00002ED000794000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://google.comlast_v=%ws&dl_lnk=%wsempty_instructionsno_internet_connectionend
Source: PcAppStore.exe, 00000019.00000003.2040442382.00000243DE5BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://microsoftedge.microsoft.
Source: PcAppStore.exe, 00000019.00000003.2040442382.00000243DE5BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://microsoftedge.microsoft.C630FABF
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.3
Source: PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.sh
Source: PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6D8000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2315006018.00000243DE6D3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2318574909.00000243DE6D3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2652515619.00002ED00110C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.st
Source: Setup.exe, 0000000C.00000003.1800192066.0000000002ECC000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 0000000C.00000003.1806443891.0000000002ED2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.stWG
Source: PcAppStore.exe, 00000019.00000003.2234673553.00000243DEAD3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2238592104.00000243DE998000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2512854258.00004CA00020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2469967329.00004CA000060000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2528838256.00004CA000358000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2502367687.00004CA00018C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2091089330.00004CA00037C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2532764702.00004CA000390000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2551909313.00004CA0004FC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2402894765.000000C4563F7000.00000004.00000010.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2473671402.00004CA000084000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2487655040.00004CA0000F0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2480780744.00004CA0000B4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2531447473.00004CA000380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2476984424.00004CA00009C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2497788635.00004CA00016C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000022.00000002.2424944209.0000213400024000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2426327444.00000166B47E7000.00000004.10000000.00040000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2016520662.00002ED000790000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2021779017.00002ED000D60000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2619852159.00002ED00097C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893065239.00007FF70087F000.00000002.00000001.01000000.0000001A.sdmp	String found in binary or memory: https://pcapp.store%02X
Source: PcAppStore.exe, 00000019.00000003.2040146717.00000243DE5EC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD74A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE62A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2571547132.0000218000220000.00000004.00000800.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2327275875.00000243DE5C1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE666000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE6FD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6F6000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2153457505.00000243DE646000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2221017078.00000243DB0D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD749000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2066398794.00000243DE6F7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5BB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/
Source: PcAppStore.exe, 00000019.00000003.2255293270.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/)
Source: PcAppStore.exe, 00000019.00000002.2534578849.00000243DE668000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/.00tc
Source: PcAppStore.exe, 00000019.00000003.2255293270.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/.js
Source: PcAppStore.exe, 00000019.00000003.2255293270.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//app
Source: PcAppStore.exe, 00000019.00000003.2060574321.00000243DE737000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2123748147.00000243DE735000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE73E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD709000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5F7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE734000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD700000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE60E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2117345184.00000243DE8EC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2556135345.00000243DE73A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5E2000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2316173992.00000243DE8EB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE737000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE613000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2151397507.00000243DE73D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2151269455.00000243DE737000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2123911042.00000243DE60A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-hint/
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-hint/994
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13
Source: PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2512619891.00000243DE590000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE61B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244518650.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2541137500.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g
Source: PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gC
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2123911042.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE61B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gT5
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gg
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2123911042.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE61B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gm5
Source: PcAppStore.exe, 00000019.00000003.2248541485.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE73E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6C8000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270482790.00000243DE62A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6F9000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD700000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2556135345.00000243DE73A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE646000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2512619891.00000243DE590000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2260903625.00000243DE64A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE61B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2534578849.00000243DE651000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2151397507.00000243DE73D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE649000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/
Source: PcAppStore.exe, 00000019.00000003.2194018725.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD709000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD700000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD708000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu//
Source: PcAppStore.exe, 00000019.00000003.2248541485.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2260903625.00000243DE64A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/025917
Source: PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6F9000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6FA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/484456chFga6
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/607144
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/682
Source: PcAppStore.exe, 00000019.00000003.2248541485.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2260903625.00000243DE64A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/?guid
Source: PcAppStore.exe, 00000019.00000003.2248541485.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2260903625.00000243DE64A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/?guid21tore/_O
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/?guid=C1B82742-2267-4E50-8B1E
Source: PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5D2000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6F4000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6F9000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2259897481.00000243DE667000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2531109155.00000243DE63E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2248098274.00000243DE667000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2123911042.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g
Source: PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g)
Source: PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2541137500.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gW
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2123911042.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE61B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gc5
Source: PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gg
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001ggI
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2123911042.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE61B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gx5
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/?guid=C1B82742-2267-4E50-8B1E.png
Source: PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/C
Source: PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/e/
Source: PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD766000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-menu/g2
Source: PcAppStore.exe, 00000019.00000003.2125314384.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE635000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2060574321.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6F4000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD700000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6E7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2066398794.00000243DE71E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2185124662.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD707000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-settings/
Source: PcAppStore.exe, 00000019.00000003.2194018725.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD700000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD707000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-settings/G
Source: PcAppStore.exe, 00000019.00000003.2106075584.00000243DE635000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2153457505.00000243DE634000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-settings/h&
Source: PcAppStore.exe, 00000019.00000003.2169735497.00000243DE62A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2260903625.00000243DE64A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE61B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD73F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2559138153.00000243DE8EF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD743000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-widget/?id=73273
Source: PcAppStore.exe, 00000019.00000003.2117345184.00000243DE8EC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2316173992.00000243DE8EB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2559138153.00000243DE8EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-widget/?id=73273%
Source: PcAppStore.exe, 00000019.00000003.2169735497.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2123911042.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE61B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-widget/?id=732731;f
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-widget/?id=73273D
Source: PcAppStore.exe, 00000019.00000003.2217244351.00000243DE648000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2248541485.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2184134777.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2059396771.00000243DE651000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2260903625.00000243DE64A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-widget/?id=73273SO
Source: PcAppStore.exe, 00000019.00000003.2217244351.00000243DE648000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2248541485.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2184134777.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2059396771.00000243DE651000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2260903625.00000243DE64A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-widget/?id=73273WO
Source: PcAppStore.exe, 00000019.00000003.2217244351.00000243DE648000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2248541485.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2184134777.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2059396771.00000243DE651000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2260903625.00000243DE64A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-widget/?id=73273oO
Source: PcAppStore.exe, 00000019.00000003.2059396771.00000243DE651000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2117345184.00000243DE8FD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE666000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2123911042.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE61B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2151397507.00000243DE73D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD73F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE666000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2212210326.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD730000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD743000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD730000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-widget/?id=73412
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2123911042.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE61B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//appstore-widget/?id=73412j5
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//ima
Source: PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270482790.00000243DE5E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//images/front_img/appstore-settings/index_5/
Source: PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270482790.00000243DE5E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//images/front_img/appstore-settings/index_5/hng-
Source: PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2318574909.00000243DE6D3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2556808256.00000243DE741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244518650.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2221017078.00000243DB0CD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2212210326.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2248845974.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6CD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6C6000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2253191680.00000243DEA27000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD70F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2060574321.00000243DE6D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//images/front_img/appstore-settings/index_5/icon_check.png
Source: PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6C8000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6CD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2060574321.00000243DE6D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//images/front_img/appstore-settings/index_5/icon_check.png&
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//images/front_img/appstore-settings/index_5/icon_check.png00o
Source: PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//images/front_img/appstore-settings/index_5/icon_check.png1
Source: PcAppStore.exe, 00000019.00000003.2244794470.00000243DE702000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//images/front_img/appstore-settings/index_5/icon_check.png9
Source: PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2248845974.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//images/front_img/appstore-settings/index_5/icon_check.pngS
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//images/front_img/appstore-settings/index_5/icon_check.pngU
Source: PcAppStore.exe, 00000019.00000003.2221017078.00000243DB147000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//images/front_img/appstore-settings/index_5/icon_check.pngUH
Source: PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//images/front_img/appstore-settings/index_5/icon_check.pngWl
Source: PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6C8000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6CD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//images/front_img/appstore-settings/index_5/icon_check.pnge
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//images/front_img/appstore-settings/index_5/icon_check.pngight.png621c.png
Source: PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//images/front_img/appstore-settings/index_5/icon_check.pngoreQ
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//images/front_img/appstore-settings/index_5/icon_check.pngv
Source: PcAppStore.exe, 00000019.00000003.2241778546.00000243DD71C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//images/front_img/appstore-settings/index_5/icon_crres
Source: PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270482790.00000243DE5E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//images/front_img/appstore-settings/index_5/t/
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//sea8Tt
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE61B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//search-menu/?a=getT
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//search-menu/?a=getT8546n
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//search-menu/?a=getTearch
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5E2000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270482790.00000243DE5E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//search-menu/?a=getTemplate&guid=C1B82742-22
Source: PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//search-menu/?a=getTemplate&guid=C1B82742-22.
Source: PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2512619891.00000243DE590000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2308151079.00000243DE750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6FA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6FA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE697000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2060574321.00000243DE697000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6F6000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE697000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6FA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2060574321.00000243DE6F9000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE697000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE697000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6FA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE697000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//search-menu/?a=getTemplate&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&p
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5E2000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270482790.00000243DE5E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//search-menu/?a=getTemplate&guid=C1B82742-229
Source: PcAppStore.exe, 00000019.00000003.2073603926.00000243DE73B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2512619891.00000243DE590000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2308151079.00000243DE750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2121568804.00000243DE753000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD74D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE67B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2326865061.00000243DE741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2117345184.00000243DE93A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2308151079.00000243DE757000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD73F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2212210326.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2060574321.00000243DE73B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6FA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6FA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE697000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2060574321.00000243DE697000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE633000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2168192723.00000243DE67B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//search-menu/?a=getTemplate&p
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6E7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src
Source: PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2117345184.00000243DE8EC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2541137500.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6BC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/a
Source: PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/a6
Source: PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/ab
Source: PcAppStore.exe, 00000019.00000003.2193039835.00000243DE94A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2217505888.00000243DE753000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2212881789.00000243DE94B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2254280101.00000243DE945000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD72C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241150609.00000243DE93C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2326865061.00000243DE741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2308151079.00000243DE757000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6BC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD72D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2556808256.00000243DE75B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2216741325.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/ap
Source: PcAppStore.exe, 00000019.00000003.2270482790.00000243DE62A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/app
Source: PcAppStore.exe, 00000019.00000003.2255293270.00000243DD70F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE69B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD71C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2217244351.00000243DE648000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2184134777.00000243DE648000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE69D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6F4000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE69C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6E7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD71C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD71C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270482790.00000243DE62A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE633000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE69C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2259897481.00000243DE667000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appHint.js
Source: PcAppStore.exe, 00000019.00000002.2531109155.00000243DE641000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appHint.js86X1s6M
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appHint.js86sk
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appHint.js880
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appHint.js969
Source: PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appHint.js969IykOG
Source: PcAppStore.exe, 00000019.00000002.2556135345.00000243DE73A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appHint.js969hJfC
Source: PcAppStore.exe, 00000019.00000003.2040146717.00000243DE5EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appHint.jsC$
Source: PcAppStore.exe, 00000019.00000003.2194018725.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD700000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD707000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD708000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD708000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appHint.jsK
Source: PcAppStore.exe, 00000019.00000003.2244794470.00000243DE69B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE69D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE69C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE69E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE69C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE699000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2541137500.00000243DE69D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE69D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appHint.jsk
Source: PcAppStore.exe, 00000019.00000003.2259897481.00000243DE667000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2248098274.00000243DE667000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appHint.jss8t
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appHint.jsv
Source: PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE61B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD73F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE666000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2302901480.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2541137500.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2212210326.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6BC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6FA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE633000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6C6000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2253191680.00000243DEA27000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD70F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appMenuStore.js
Source: PcAppStore.exe, 00000019.00000003.2052272122.00000243DE73E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2556135345.00000243DE73A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2151397507.00000243DE73D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appMenuStore.js0
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appMenuStore.js06b
Source: PcAppStore.exe, 00000019.00000003.2218492823.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appMenuStore.js8
Source: PcAppStore.exe, 00000019.00000003.2185124662.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2153457505.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2200980611.00000243DE642000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appMenuStore.jsA_
Source: PcAppStore.exe, 00000019.00000003.2185124662.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2153457505.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2200980611.00000243DE642000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appMenuStore.jsI_d
Source: PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6F9000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6FA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appMenuStore.jsgMAo
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appMenuStore.jsh4jF
Source: PcAppStore.exe, 00000019.00000003.2106075584.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2150514133.00000243DE666000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE666000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE666000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2212210326.00000243DE664000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appMenuStore.jsltT
Source: PcAppStore.exe, 00000019.00000002.2531109155.00000243DE641000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appMenuStore.jsx0C9F
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appMenuStore.jsy
Source: PcAppStore.exe, 00000019.00000003.2221017078.00000243DB147000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2446819182.00000243DB159000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2072176623.00000243DE92F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOff
Source: PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffe
Source: PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5EA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270482790.00000243DE605000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2534578849.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2040146717.00000243DE5EC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD755000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE681000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2556808256.00000243DE741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE61B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE67B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2326865061.00000243DE741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5CC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD755000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2308151079.00000243DE757000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2183670602.00000243DE786000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2302901480.00000243DE664000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.js
Source: PcAppStore.exe, 00000019.00000003.2040146717.00000243DE5EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.js)
Source: PcAppStore.exe, 00000019.00000003.2259897481.00000243DE667000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2248098274.00000243DE667000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.js0tc
Source: PcAppStore.exe, 00000019.00000002.2556135345.00000243DE73A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.js17
Source: PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2541137500.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.js297582#
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.js31
Source: PcAppStore.exe, 00000019.00000003.2040146717.00000243DE5EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.js5
Source: PcAppStore.exe, 00000019.00000003.2184134777.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.js69pm
Source: PcAppStore.exe, 00000019.00000003.2270482790.00000243DE62A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE61B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.js7hhWs
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.jsCASghP
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.jsXODofN
Source: PcAppStore.exe, 00000019.00000003.2185124662.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2153457505.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2200980611.00000243DE642000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.jsY_t
Source: PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2060574321.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6F4000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.jsZ
Source: PcAppStore.exe, 00000019.00000003.2040146717.00000243DE5EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.jse
Source: PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.jsek
Source: PcAppStore.exe, 00000019.00000003.2217244351.00000243DE648000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.jsorg
Source: PcAppStore.exe, 00000019.00000002.2531109155.00000243DE641000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.jswO18J5
Source: PcAppStore.exe, 00000019.00000003.2137757222.00000243DD73F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD73F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD743000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appOffer.js~Y
Source: PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2260903625.00000243DE64A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE61B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2534578849.00000243DE651000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2327275875.00000243DE5C1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE666000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2541137500.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2212210326.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6BC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2559138153.00000243DE8EF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSearchMenu.js
Source: PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2541137500.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSearchMenu.js.jpgP
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSearchMenu.js0
Source: PcAppStore.exe, 00000019.00000003.2323036588.00000243DE5C0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270083154.00000243DE5BA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2327275875.00000243DE5C1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSearchMenu.js2926E8252Cw
Source: PcAppStore.exe, 00000019.00000003.2161017609.00000243DD745000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD745000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD73F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSearchMenu.jsBX
Source: PcAppStore.exe, 00000019.00000003.2323036588.00000243DE5C0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270083154.00000243DE5BA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2327275875.00000243DE5C1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSearchMenu.jsC630FABF
Source: PcAppStore.exe, 00000019.00000003.2323036588.00000243DE5C0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270083154.00000243DE5BA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2327275875.00000243DE5C1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSearchMenu.jsC8D42E9E79s
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSearchMenu.jsD1
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSearchMenu.jsnt.js
Source: PcAppStore.exe, 00000019.00000003.2106075584.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2150514133.00000243DE666000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE666000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE666000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSearchMenu.jst
Source: PcAppStore.exe, 00000019.00000003.2169735497.00000243DE62A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2302901480.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2559138153.00000243DE8F4000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5F2000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2559138153.00000243DE8EF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSettings.js
Source: PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6F4000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2060574321.00000243DE6F7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6F7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6F6000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6F6000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2066398794.00000243DE6F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSettings.js4
Source: PcAppStore.exe, 00000019.00000003.2255293270.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSettings.jsC
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSettings.jsL1
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSettings.jsSearchM
Source: PcAppStore.exe, 00000019.00000003.2194018725.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD700000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD708000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD708000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSettings.jsq
Source: PcAppStore.exe, 00000019.00000003.2137757222.00000243DD73F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD73F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD743000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appSettings.jss
Source: PcAppStore.exe, 00000019.00000003.2072176623.00000243DE92F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD755000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2512619891.00000243DE590000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE681000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD736000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE68C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE67B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2326865061.00000243DE741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE68D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5CC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2324535537.00000243DE8E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD755000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2308151079.00000243DE757000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appStore.js
Source: PcAppStore.exe, 00000019.00000003.2194018725.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD700000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD708000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD708000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appStore.js)$
Source: PcAppStore.exe, 00000019.00000003.2259897481.00000243DE667000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2248098274.00000243DE667000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appStore.js6
Source: PcAppStore.exe, 00000019.00000002.2531109155.00000243DE641000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appStore.js74LgQOd
Source: PcAppStore.exe, 00000019.00000003.2303670890.00000243DD768000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD768000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD766000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD768000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appStore.jsEN_EVE
Source: PcAppStore.exe, 00000019.00000003.2303670890.00000243DD768000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD768000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD766000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD768000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appStore.jsFJw4Yz
Source: PcAppStore.exe, 00000019.00000003.2184134777.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appStore.jsRVi9ku
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5F2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appStore.jsiOxgCR
Source: PcAppStore.exe, 00000019.00000003.2217244351.00000243DE648000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appStore.jsorgd
Source: PcAppStore.exe, 00000019.00000002.2556135345.00000243DE73A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appStore.jswGgoNC
Source: PcAppStore.exe, 00000019.00000003.2199349275.00000243DE646000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE633000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270083154.00000243DE5BA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE61B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2327275875.00000243DE5C1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD73F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2302901480.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2212210326.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6FA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE633000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6C6000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2253191680.00000243DEA27000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD70F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWidget.js
Source: PcAppStore.exe, 00000019.00000003.2123748147.00000243DE735000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2117345184.00000243DE8EC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2316173992.00000243DE8EB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2559138153.00000243DE8EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWidget.js0
Source: PcAppStore.exe, 00000019.00000003.2270482790.00000243DE62A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE61B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWidget.js06b
Source: PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2302901480.00000243DE664000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWidget.js4
Source: PcAppStore.exe, 00000019.00000003.2184134777.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWidget.js4==
Source: PcAppStore.exe, 00000019.00000003.2259897481.00000243DE667000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2248098274.00000243DE667000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWidget.js7k
Source: PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6C8000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2315006018.00000243DE6D3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2318574909.00000243DE6D3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6CD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWidget.jsA
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWidget.jsBwQ9D
Source: PcAppStore.exe, 00000019.00000003.2073603926.00000243DE734000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE737000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWidget.jsf%e
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWidget.jshe
Source: PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6C8000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2315006018.00000243DE6D3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2318574909.00000243DE6D3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6CD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWidget.jsi
Source: PcAppStore.exe, 00000019.00000003.2323036588.00000243DE5C0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270083154.00000243DE5BA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2327275875.00000243DE5C1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWidget.jsonkcabmbdfmgle
Source: PcAppStore.exe, 00000019.00000002.2531109155.00000243DE641000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWidget.jsshss6
Source: PcAppStore.exe, 00000019.00000003.2194018725.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD700000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD707000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWidget.jsw
Source: PcAppStore.exe, 00000019.00000003.2073603926.00000243DE73B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2512619891.00000243DE590000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE61B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2302901480.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2212210326.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2060574321.00000243DE73B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6FA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE633000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6C6000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2253191680.00000243DEA27000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD70F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWindow.js
Source: PcAppStore.exe, 00000019.00000003.2184134777.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWindow.js$LT
Source: PcAppStore.exe, 00000019.00000003.2137757222.00000243DD73F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD743000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD73F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD73F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD740000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD743000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWindow.js2
Source: PcAppStore.exe, 00000019.00000002.2531109155.00000243DE641000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWindow.js4Qw/u
Source: PcAppStore.exe, 00000019.00000003.2259897481.00000243DE667000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2248098274.00000243DE667000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWindow.jsjs
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWindow.jsppWidget.
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//src/app/appWindow.jswASlcK
Source: PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//srceed
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store//srcxFt
Source: PcAppStore.exe, 00000019.00000002.2534578849.00000243DE668000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/2
Source: PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/2LFga6
Source: PcAppStore.exe, 00000019.00000003.2060574321.00000243DE6FD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2066398794.00000243DE6FD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE6FD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6F6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/3273
Source: PcAppStore.exe, 00000019.00000003.2185124662.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2153457505.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/3412re/
Source: PcAppStore.exe, 00000019.00000003.2040442382.00000243DE5BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/3D06C8D42E9E79s
Source: PcAppStore.exe, 00000019.00000002.2556135345.00000243DE73A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/6MV4oN
Source: PcAppStore.exe, 00000019.00000002.2534578849.00000243DE668000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/7
Source: PcAppStore.exe, 00000019.00000003.2303670890.00000243DD747000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD747000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD747000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/9Rp=p
Source: PcAppStore.exe, 00000019.00000002.2534578849.00000243DE668000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/9k
Source: nsgC284.tmp, 00000017.00000003.1901983150.00000000007AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/:j
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/?
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/?p=lpd_appstore-faq
Source: PcAppStore.exe, 00000019.00000003.2185124662.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2153457505.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2200980611.00000243DE642000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/E_x
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/G
Source: PcAppStore.exe, 00000019.00000003.2052272122.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6F6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/H
Source: PcAppStore.exe, 00000019.00000003.2217244351.00000243DE648000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2184134777.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2059396771.00000243DE651000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/OO
Source: PcAppStore.exe, 00000019.00000002.2534578849.00000243DE668000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE62A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/P
Source: PcAppStore.exe, 00000019.00000003.2060574321.00000243DE6F7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6F6000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2066398794.00000243DE6F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/Q
Source: PcAppStore.exe, 00000019.00000002.2534578849.00000243DE668000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/UET86s$t
Source: PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/XMgMAo
Source: PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/_
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/account/logintray_exitxl.
Source: PcAppStore.exe, 00000019.00000003.2221017078.00000243DB147000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.1982164733.00000243DD720000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/api/pcapp_engine.php?a=config&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=
Source: PcAppStore.exe, 00000019.00000002.2576437574.00002180002A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2780004405.000012CC0107C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2509255122.000001AA69C65000.00000002.00000001.00040000.0000002C.sdmp, msedgewebview2.exe, 0000001E.00000002.2532408461.000001AA6C4B0000.00000002.00000001.00040000.00000048.sdmp, msedgewebview2.exe, 0000001E.00000002.2532408461.000001AA6C4B3000.00000002.00000001.00040000.00000048.sdmp, msedgewebview2.exe, 0000001E.00000002.2744009193.000012CC00D14000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2741108129.000012CC00CE0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2562958614.000012CC00134000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g?
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gV
Source: PcAppStore.exe, 00000019.00000002.2578591369.00002180002EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gnSec-Fe
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2572370964.0000218000237000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2780004405.000012CC0107C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2509255122.000001AA69C65000.00000002.00000001.00040000.0000002C.sdmp, msedgewebview2.exe, 0000001E.00000002.2532408461.000001AA6C4B0000.00000002.00000001.00040000.00000048.sdmp, msedgewebview2.exe, 0000001E.00000002.2734677677.000012CC00BBC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2532408461.000001AA6C4B3000.00000002.00000001.00040000.00000048.sdmp, msedgewebview2.exe, 0000001E.00000002.2666247261.000012CC006F0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2741108129.000012CC00CE0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2553537726.000012CC000A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2562958614.000012CC00134000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2568146619.000012CC0017C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2549137384.000012CC00070000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2763867328.000012CC00EB8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2471226063.00004CA00007B000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2473671402.00004CA000084000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2549593865.00004CA000488000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000003.2263957125.0000048C027BB000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000002.2716650050.0000048C00EB0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000002.2634700861.0000048C00355000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000003.2010009977.0000048C00824000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g
Source: PcAppStore.exe, 00000019.00000002.2572370964.0000218000237000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2509255122.000001AA69C43000.00000002.00000001.00040000.0000002C.sdmp, msedgewebview2.exe, 0000001E.00000002.2604800125.000012CC003D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gPCAppSt
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gi
Source: PcAppStore.exe, 00000019.00000003.2028011902.00002180002EC000.00000004.00000800.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2578591369.00002180002EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gnSec-Fe
Source: PcAppStore.exe, 00000019.00000003.2255293270.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/cn/
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893065239.00007FF70087F000.00000002.00000001.01000000.0000001A.sdmp	String found in binary or memory: https://pcapp.store/cpg_fa.php?guid=An
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893065239.00007FF70087F000.00000002.00000001.01000000.0000001A.sdmp	String found in binary or memory: https://pcapp.store/dl_cta_open.php?guid=%ws&id=%lu&type=%ws
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893065239.00007FF70087F000.00000002.00000001.01000000.0000001A.sdmp	String found in binary or memory: https://pcapp.store/dl_cta_open.php?guid=%ws&oid=%lu&entryApp=%ws
Source: PcAppStore.exe, 00000019.00000003.2106075584.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2150514133.00000243DE666000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE666000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE666000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/dtl
Source: nsgC284.tmp, 00000017.00000002.1914130327.00000000039D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/es
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/fa_version.php?guid=%ws&end_v=%ws&nocache=%d
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/fa_version.php?guid=%ws&res=link&nocache=%d
Source: PcAppStore.exe, 00000019.00000002.2574190444.0000218000268000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2777209104.000012CC01030000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2539993998.000012CC0001F000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2681640924.000012CC007C8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2793169904.000012CC011AC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2771259986.000012CC00F67000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2783280016.000012CC010BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2033603257.00004CA0003E7000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2476984424.00004CA00009C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2426327444.00000166B47E7000.00000004.10000000.00040000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2627081805.00002ED0009D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/favicon.ico
Source: PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/gAisb2h
Source: PcAppStore.exe, 00000019.00000003.2137757222.00000243DD74A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD749000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/guidw=
Source: PcAppStore.exe, 00000019.00000003.2060574321.00000243DE6FD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2066398794.00000243DE6FD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE6FD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6F6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/h
Source: PcAppStore.exe, 00000019.00000002.2534578849.00000243DE668000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/hKCoFDhth
Source: PcAppStore.exe, 00000019.00000003.2194018725.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD700000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD708000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD708000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/hnd_c
Source: PcAppStore.exe, 00000019.00000003.2125314384.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/ima
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2556135345.00000243DE73A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/appstore-hint/index_1/in_ba
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/appstore-hint/index_1/in_ba.jpg
Source: PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2512619891.00000243DE590000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2302901480.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2541137500.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE700000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2559138153.00000243DE8EF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE700000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE700000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/appstore-hint/index_1/in_background_auto_update_img.png
Source: PcAppStore.exe, 00000019.00000003.2178167247.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/appstore-hint/index_1/in_background_auto_update_img.pngb
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2541137500.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/appstore-hint/index_1/in_background_auto_update_img.pngg
Source: PcAppStore.exe, 00000019.00000002.2531109155.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/appstore-hint/index_1/in_background_auto_update_img.pngjpg
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2318574909.00000243DE6D3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/appstore-hint/index_1/in_background_img.png
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/appstore-hint/index_1/in_background_img.pngE
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2315006018.00000243DE6D3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2318574909.00000243DE6D3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/appstore-hint/index_1/in_background_img.pnga
Source: PcAppStore.exe, 00000019.00000003.2316173992.00000243DE8EB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2531109155.00000243DE64A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6F7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD74D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2327275875.00000243DE5C1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6F6000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2541137500.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2559138153.00000243DE8F4000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD750000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/appstore-menu/index_12/icon_search_write_right.png
Source: PcAppStore.exe, 00000019.00000003.2194018725.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2220854124.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2249381588.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD74D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2201117577.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/appstore-menu/index_12/icon_search_write_right.png:M
Source: PcAppStore.exe, 00000019.00000003.2316173992.00000243DE8EB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2559138153.00000243DE8F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/appstore-menu/index_12/icon_search_write_right.pngR
Source: PcAppStore.exe, 00000019.00000003.2194018725.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2220854124.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2249381588.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD74D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2201117577.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/appstore-menu/index_12/icon_search_write_right.pngZMe
Source: PcAppStore.exe, 00000019.00000003.2316173992.00000243DE8EB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2559138153.00000243DE8F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/appstore-menu/index_12/icon_search_write_right.pngh
Source: PcAppStore.exe, 00000019.00000003.2323036588.00000243DE5C0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2327275875.00000243DE5C1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/appstore-menu/index_12/icon_search_write_right.pnghtm
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/log
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/logX1
Source: PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244518650.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6F6000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE697000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2060574321.00000243DE697000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6CD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6F6000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE697000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE722000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/logo/logo-light.svg
Source: PcAppStore.exe, 00000019.00000002.2556808256.00000243DE753000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2308151079.00000243DE750000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/logo/logo-light.svg.pngno
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/logo/logo-light.svg12/iconu/
Source: PcAppStore.exe, 00000019.00000003.2303670890.00000243DD760000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD75E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD75E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD760000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD75E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD760000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/logo/logo-light.svg28.jpgC
Source: PcAppStore.exe, 00000019.00000003.2125314384.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE71C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE71C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244518650.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE722000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2216741325.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE722000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/logo/logo-light.svg3?
Source: PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/logo/logo-light.svg50-8B1E.png
Source: PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6C8000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6CD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/logo/logo-light.svgN
Source: PcAppStore.exe, 00000019.00000003.2125314384.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE71C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244518650.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE722000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2216741325.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE722000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/logo/logo-light.svge6da92b28.jpg
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/images/front_img/logo/logo-light.svgndex_5/hng
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A4E000.00000004.00000020.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1903718719.000000000071C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/inst_cpg.php?guid=&src=pcapp_full.
Source: Setup.exe, 0000000C.00000003.1848310705.0000000000610000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/inst_cpg.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&ve
Source: nsgC284.tmp, 00000017.00000003.1901983150.0000000000783000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/inst_cpg.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&src=pcap
Source: Setup.exe, 0000000C.00000003.1806722006.00000000005F6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/installing.php?guid=
Source: Setup.exe, 0000000C.00000002.1849739837.0000000000596000.00000004.00000020.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1906161066.0000000002A4E000.00000004.00000020.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1903718719.000000000071C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/installing.php?guid=&winver=
Source: Setup.exe, 0000000C.00000003.1806443891.0000000002ECD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/installing.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&winver
Source: Setup.exe, 0000000C.00000003.1847495997.0000000002ECC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/installing.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&winver=19045&version=fa
Source: PcAppStore.exe, 00000019.00000003.2185124662.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2153457505.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/js
Source: PcAppStore.exe, 00000019.00000003.2073603926.00000243DE734000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE737000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/k
Source: PcAppStore.exe, 00000019.00000003.2217244351.00000243DE648000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2184134777.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2059396771.00000243DE651000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/kO
Source: PcAppStore.exe, 00000019.00000002.2578591369.00002180002EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/nSec-Fetch-DesteimagenSec-Fetch-Modegno-corsnSec-Fetch-Siteisame-sitejUser-Agent
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893065239.00007FF70087F000.00000002.00000001.01000000.0000001A.sdmp	String found in binary or memory: https://pcapp.store/notify_app_v2.php?guid=&lastid=&lasttime=&nocache=&end_v=%ws%ws%ws%d%ws%d%ws%ws%
Source: PcAppStore.exe, 00000019.00000003.2185124662.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2531109155.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2121568804.00000243DE741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2153457505.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2117345184.00000243DE8FD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/notify_app_v2.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&lastid=0&lasttime=0&
Source: PcAppStore.exe, 00000019.00000003.2040442382.00000243DE5BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/onkcabmbdfmgle
Source: PcAppStore.exe, 00000019.00000003.2217244351.00000243DE648000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2184134777.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2059396771.00000243DE651000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/p
Source: PcAppStore.exe, 00000019.00000003.2255293270.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/pXjIim
Source: PcAppStore.exe, 00000019.00000003.2185124662.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2153457505.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/pc
Source: Setup.exe, 0000000C.00000002.1849739837.00000000005C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/pixel.gif?guid=
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A4E000.00000004.00000020.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1903718719.000000000071C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/pixel.gif?guid=&version=&evt_src=fa_installer&evt_action=localmac
Source: Setup.exe, 0000000C.00000002.1851682820.0000000002ED0000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 0000000C.00000003.1806443891.0000000002ECD000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 0000000C.00000003.1847495997.0000000002ECC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/pixel.gif?guid=C1B82742-
Source: PcAppStore.exe, 00000019.00000003.2213964788.00000243DD74F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD70F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2534578849.00000243DE651000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD74D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE714000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2248541485.00000243DE654000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2327275875.00000243DE5C1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE700000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD70D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD70F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.1982164733.00000243DD710000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244190771.00000243DE788000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2201117577.00000243DD750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE714000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_
Source: nsgC284.tmp, 00000017.00000003.1901983150.0000000000783000.00000004.00000020.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1914130327.00000000039B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&inst_parent
Source: Setup.exe, 0000000C.00000003.1800192066.0000000002ECC000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 0000000C.00000003.1806443891.0000000002ED2000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 0000000C.00000003.1847495997.0000000002ED3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gS32
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893065239.00007FF70087F000.00000002.00000001.01000000.0000001A.sdmp	String found in binary or memory: https://pcapp.store/pixel.gifcurrent_path()
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893065239.00007FF70087F000.00000002.00000001.01000000.0000001A.sdmp	String found in binary or memory: https://pcapp.store/pixel.giftype
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A4E000.00000004.00000020.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1903718719.000000000071C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/privacy.html?guid=By
Source: Setup.exe, 0000000C.00000002.1849739837.0000000000596000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/privacy.html?guid=welhttps://pcapp.store/pixel.gif?guid=&version=&evt_src=fa_min
Source: PcAppStore.exe, 00000019.00000003.2255293270.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/s
Source: PcAppStore.exe, 00000019.00000003.2095455996.00000243DE678000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2089378341.00000243DE77D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2308151079.00000243DE77C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/search-menu/
Source: PcAppStore.exe, 00000019.00000002.2577483798.00002180002CC000.00000004.00000800.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2512619891.00000243DE590000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2660946482.000012CC006A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2509255122.000001AA69C65000.00000002.00000001.00040000.0000002C.sdmp, msedgewebview2.exe, 0000001E.00000002.2532408461.000001AA6C4B0000.00000002.00000001.00040000.00000048.sdmp, msedgewebview2.exe, 0000001E.00000002.2729420553.000012CC00B58000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2532408461.000001AA6C4B3000.00000002.00000001.00040000.00000048.sdmp, msedgewebview2.exe, 0000001E.00000002.2509255122.000001AA69C43000.00000002.00000001.00040000.0000002C.sdmp, msedgewebview2.exe, 0000001E.00000002.2679910334.000012CC007B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2604800125.000012CC003D7000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2651816083.000012CC00634000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2528838256.00004CA000358000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2045028569.00002ED0008A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2089386157.00002ED000A9A000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2654988441.00002ED001248000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2118312826.00002ED000324000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2567774963.00002ED000356000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2658658628.00002ED00128C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2441179491.00000166B7977000.00000004.10000000.00040000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2426327444.00000166B47E7000.00000004.10000000.00040000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2589260134.00002ED00073C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/search-menu/?a=getTemplate&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&p
Source: PcAppStore.exe, 00000019.00000003.2095455996.00000243DE678000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2568283245.00000243DEA03000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2089378341.00000243DE77D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/search-menu/img/skeleton.png
Source: PcAppStore.exe, 00000019.00000003.2095455996.00000243DE678000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2568283245.00000243DEA03000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2089378341.00000243DE77D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/search-menu/search-hub.php?q=
Source: PcAppStore.exe, 00000019.00000003.2217244351.00000243DE648000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2184134777.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2150514133.00000243DE666000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2059396771.00000243DE651000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE666000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2123911042.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE666000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/store/
Source: PcAppStore.exe, 00000019.00000003.2217244351.00000243DE648000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2184134777.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2059396771.00000243DE651000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/store/_O
Source: PcAppStore.exe, 00000019.00000003.2217244351.00000243DE648000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2248541485.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2184134777.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2059396771.00000243DE651000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2260903625.00000243DE64A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/t
Source: PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/tWt
Source: Setup.exe, 0000000C.00000002.1849739837.0000000000596000.00000004.00000020.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1906161066.0000000002A4E000.00000004.00000020.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000002.1903718719.000000000071C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/tos.html?guid=
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893065239.00007FF70087F000.00000002.00000001.01000000.0000001A.sdmp	String found in binary or memory: https://pcapp.store/wgetenv_errorUSERPROFILETemp
Source: PcAppStore.exe, 00000019.00000003.2255293270.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store/yMy8A5
Source: PcAppStore.exe, 00000019.00000003.2072176623.00000243DE98F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2212881789.00000243DE98F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2193039835.00000243DE98F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2143424753.00000243DE98F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2115347729.00000243DE98F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store:443
Source: PcAppStore.exe, 00000019.00000003.2052272122.00000243DE789000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2089378341.00000243DE784000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244190771.00000243DE788000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2151397507.00000243DE784000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2308151079.00000243DE788000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store:443/notify_app_v2.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&lastid=0&lasttim
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6B3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2541137500.00000243DE69D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6A0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6B1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6B1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6B1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store:443/pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store:443Local
Source: PcAppStore.exe, 00000019.00000003.2072176623.00000243DE98F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6E1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.store:443s
Source: PcAppStore.exe, 00000019.00000003.2028942070.0000218000244000.00000004.00000800.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2580543163.0000218000328000.00000004.00000800.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2028011902.00002180002EC000.00000004.00000800.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2572370964.0000218000237000.00000004.00000800.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2578872690.00002180002F8000.00000004.00000800.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2572721042.0000218000244000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2587326229.000012CC002A0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2561792059.000012CC00124000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2577008898.000012CC0020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2607735889.000012CC003DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pcapp.storex
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://pcappstore.s3.amazonaws.com/versionrinstruction_failed%ws?guid=%ws&nocache=%dauto_updater.ex
Source: PcAppStore.exe, 00000019.00000003.2327026364.00000243DE63B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2531109155.00000243DE645000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2531109155.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.
Source: PcAppStore.exe, 00000019.00000003.2175532802.00000243DD730000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD732000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD730000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.sto
Source: PcAppStore.exe, 00000019.00000003.2090395532.00000243DD725000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD730000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.sto0
Source: PcAppStore.exe, 00000019.00000003.2255293270.00000243DD730000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD730000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD732000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD725000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD730000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD730000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD730000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD732000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD730000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.stoX
Source: PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2059396771.00000243DE651000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2260903625.00000243DE64A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2534578849.00000243DE651000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE6FD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6F6000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/
Source: PcAppStore.exe, 00000019.00000003.2060574321.00000243DE6E5000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/)
Source: PcAppStore.exe, 00000019.00000003.2255293270.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store//vK
Source: PcAppStore.exe, 00000019.00000003.2217244351.00000243DE648000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2248541485.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2184134777.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2059396771.00000243DE651000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2260903625.00000243DE64A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2534578849.00000243DE651000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/8L
Source: PcAppStore.exe, 00000019.00000003.2060574321.00000243DE6E5000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/?$
Source: PcAppStore.exe, 00000019.00000003.2125314384.00000243DE6E3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/I
Source: PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/Q
Source: PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/Y
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/l
Source: PcAppStore.exe, 00000019.00000003.2123911042.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5F2000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/
Source: PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/21
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/applica
Source: PcAppStore.exe, 00000019.00000003.2125314384.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2556135345.00000243DE73A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5E2000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2316173992.00000243DE8EB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2512619891.00000243DE590000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244518650.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2559138153.00000243DE8F4000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270482790.00000243DE5E4000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2559138153.00000243DE8EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/ima
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/ima.
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/ima.jpg
Source: PcAppStore.exe, 00000019.00000003.2125314384.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2556135345.00000243DE73A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/ima.png
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/ima.pngB
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270482790.00000243DE5E4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/imad
Source: PcAppStore.exe, 00000019.00000003.2164121488.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2534578849.00000243DE668000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2248098274.00000243DE667000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE646000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2123911042.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2151397507.00000243DE73D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244518650.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73326_663e2383827ed.jpg
Source: PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73326_663e2383827ed.jpg1
Source: PcAppStore.exe, 00000019.00000003.2123911042.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73326_663e2383827ed.jpg13
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73326_663e2383827ed.jpg2
Source: PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73326_663e2383827ed.jpg?$
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73326_663e2383827ed.jpgQ
Source: PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73326_663e2383827ed.jpgc
Source: PcAppStore.exe, 00000019.00000003.2052272122.00000243DE73E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2151397507.00000243DE73D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73326_663e2383827ed.jpgd
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73326_663e2383827ed.jpge
Source: PcAppStore.exe, 00000019.00000002.2534578849.00000243DE668000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2302901480.00000243DE664000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73326_663e2383827ed.jpgjson
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73326_663e2383827ed.jpgq
Source: PcAppStore.exe, 00000019.00000002.2531109155.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73326_663e2383827ed.jpgr
Source: PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD766000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73326_663e2383827ed.jpgu
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73326_663e2383827ed.jpgype
Source: PcAppStore.exe, 00000019.00000003.2199349275.00000243DE633000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73356_644
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2185124662.00000243DE635000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE646000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244518650.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2302901480.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6DC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2212210326.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE6DC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73356_663ce796de577.jpg
Source: PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6C8000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6DC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE6DC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6CD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6DC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73356_663ce796de577.jpg(
Source: PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73356_663ce796de577.jpg)
Source: PcAppStore.exe, 00000019.00000003.2178167247.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73356_663ce796de577.jpg4
Source: PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73356_663ce796de577.jpg9e0.
Source: PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73356_663ce796de577.jpgQ
Source: PcAppStore.exe, 00000019.00000003.2194018725.00000243DD771000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73356_663ce796de577.jpgcoE
Source: PcAppStore.exe, 00000019.00000003.2178167247.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73356_663ce796de577.jpge
Source: PcAppStore.exe, 00000019.00000002.2531109155.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73356_663ce796de577.jpgh
Source: PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73356_663ce796de577.jpgl
Source: PcAppStore.exe, 00000019.00000003.2169735497.00000243DE633000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2249036791.00000243DE69B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2534578849.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD755000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2556808256.00000243DE741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE67B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2326865061.00000243DE741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5CC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD755000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2308151079.00000243DE757000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2183670602.00000243DE786000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2302901480.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD771000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2541137500.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73377_663ce6da92b28.jpg
Source: PcAppStore.exe, 00000019.00000003.2178167247.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2168551971.00000243DE788000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2151397507.00000243DE784000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73377_663ce6da92b28.jpg3
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73377_663ce6da92b28.jpg;
Source: PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73377_663ce6da92b28.jpgIx
Source: PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73377_663ce6da92b28.jpgSRDp
Source: PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73377_663ce6da92b28.jpgi
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73377_663ce6da92b28.jpgx
Source: PcAppStore.exe, 00000019.00000002.2556135345.00000243DE73A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2248098274.00000243DE667000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2151397507.00000243DE73D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244518650.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2302901480.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2212210326.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6BC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD76E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73394_663ce7758e4ec.jpg
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73394_663ce7758e4ec.jpg)
Source: PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73394_663ce7758e4ec.jpgI
Source: PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73394_663ce7758e4ec.jpgQQ9B
Source: PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73394_663ce7758e4ec.jpga
Source: PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73394_663ce7758e4ec.jpgda92
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73394_663ce7758e4ec.jpgi
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73394_663ce7758e4ec.jpgjson
Source: PcAppStore.exe, 00000019.00000003.2199349275.00000243DE646000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE633000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2534578849.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241150609.00000243DE93C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2512619891.00000243DE590000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2556808256.00000243DE741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE67B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2326865061.00000243DE741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244518650.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2308151079.00000243DE757000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD73F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2302901480.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD771000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2212210326.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE633000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73398_66603950c621c.png
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73398_66603950c621c.png)
Source: PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73398_66603950c621c.png1
Source: PcAppStore.exe, 00000019.00000003.2178167247.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73398_66603950c621c.png3608
Source: PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73398_66603950c621c.png50c6
Source: PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73398_66603950c621c.pngQ
Source: PcAppStore.exe, 00000019.00000002.2534578849.00000243DE668000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2302901480.00000243DE664000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73398_66603950c621c.pngght.
Source: PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73398_66603950c621c.pngjADG
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD72C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE700000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE646000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE633000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241150609.00000243DE93C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244518650.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2308151079.00000243DE757000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2302901480.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD771000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73400_666176fb273fb.png
Source: PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73400_666176fb273fb.png8382
Source: PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73400_666176fb273fb.png:Y
Source: PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73400_666176fb273fb.pngSRDp
Source: PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73400_666176fb273fb.pngi
Source: PcAppStore.exe, 00000019.00000002.2531109155.00000243DE635000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2327026364.00000243DE635000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73400_666176fb273fb.pngjc
Source: PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73400_666176fb273fb.pngjson
Source: PcAppStore.exe, 00000019.00000003.2185124662.00000243DE635000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73401_644
Source: PcAppStore.exe, 00000019.00000003.2052272122.00000243DE73E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2531109155.00000243DE635000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6F9000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6E1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2060574321.00000243DE6E5000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2531109155.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE6E3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2556135345.00000243DE73A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD771000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE646000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2512619891.00000243DE590000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2151397507.00000243DE73D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244518650.00000243DE71D000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73401_66684ff6b31a4.png
Source: PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73401_66684ff6b31a4.png1374
Source: PcAppStore.exe, 00000019.00000003.2178167247.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73401_66684ff6b31a4.png3608
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73401_66684ff6b31a4.pngI
Source: PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73401_66684ff6b31a4.pngP
Source: PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73401_66684ff6b31a4.pngf6b3
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73401_66684ff6b31a4.pngjson
Source: PcAppStore.exe, 00000019.00000003.2194018725.00000243DD771000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73401_66684ff6b31a4.pngkoM
Source: PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73401_66684ff6b31a4.pngq
Source: PcAppStore.exe, 00000019.00000003.2169735497.00000243DE633000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2249036791.00000243DE69B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2534578849.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241150609.00000243DE93C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD755000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2512619891.00000243DE590000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2556808256.00000243DE741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE67B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2326865061.00000243DE741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5CC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD755000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2308151079.00000243DE757000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD73F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2302901480.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD771000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73406_6671309e0b993.png
Source: PcAppStore.exe, 00000019.00000003.2178167247.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73406_6671309e0b993.png#
Source: PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73406_6671309e0b993.png-
Source: PcAppStore.exe, 00000019.00000003.2178167247.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73406_6671309e0b993.png8
Source: PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6E0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73406_6671309e0b993.pngI
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73406_6671309e0b993.pngQ
Source: PcAppStore.exe, 00000019.00000003.2150514133.00000243DE666000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73406_6671309e0b993.pngcapp
Source: PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73406_6671309e0b993.pngda92
Source: PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73406_6671309e0b993.pnge271
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD771000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73406_6671309e0b993.pngtml
Source: PcAppStore.exe, 00000019.00000002.2531109155.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE641000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73424_6
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73424_66a3b3e27
Source: PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5F7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2531109155.00000243DE64A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE646000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2249036791.00000243DE69B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE702000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2534578849.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2512619891.00000243DE590000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2326865061.00000243DE741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5CC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2308151079.00000243DE757000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73424_66a3b3e271152.png
Source: PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73424_66a3b3e271152.png50c6
Source: PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73424_66a3b3e271152.png96de
Source: PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6F4000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6F6000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6F6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73424_66a3b3e271152.pngB
Source: PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73424_66a3b3e271152.pngOY
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73424_66a3b3e271152.pngjson
Source: PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73424_66a3b3e27C
Source: PcAppStore.exe, 00000019.00000003.2316173992.00000243DE8EB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2559138153.00000243DE8EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/3rdparty/application/imahng
Source: PcAppStore.exe, 00000019.00000003.2123911042.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/pcapp/images/store/
Source: PcAppStore.exe, 00000019.00000003.2255293270.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.store/svw
Source: PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repcdn.pcapp.stox
Source: PcAppStore.exe, 00000019.00000002.2526219866.00000243DE62E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE62E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2556808256.00000243DE753000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE62E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2316173992.00000243DE8EB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE61B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2308151079.00000243DE750000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2326865061.00000243DE741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2559138153.00000243DE8EF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE61C000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000002.2697176611.0000048C00AB0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000002.2721858410.0000048C00F08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://repository.pcapp.store/
Source: PcAppStore.exe, 00000019.00000002.2526219866.00000243DE62E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE62E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repository.pcapp.store/-hint/index_1/in_background_img.png
Source: PcAppStore.exe, 00000019.00000003.2316173992.00000243DE8EB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2559138153.00000243DE8EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repository.pcapp.store/.jpg
Source: PcAppStore.exe, 00000019.00000002.2556808256.00000243DE753000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2308151079.00000243DE750000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repository.pcapp.store/8
Source: PcAppStore.exe, 00000019.00000002.2526219866.00000243DE62E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE62E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE62E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repository.pcapp.store/N2
Source: PcAppStore.exe, 00000019.00000003.2311918504.00000243DE71C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repository.pcapp.store/P
Source: PcAppStore.exe, 00000019.00000003.2316173992.00000243DE8EB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2559138153.00000243DE8EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repository.pcapp.store/c.jpg&
Source: PcAppStore.exe, 00000019.00000003.2316173992.00000243DE8EB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2559138153.00000243DE8EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repository.pcapp.store/c.jpg7
Source: PcAppStore.exe, 00000019.00000002.2526219866.00000243DE62E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE62E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repository.pcapp.store/ore//search-menu/?a=getTemplate&p
Source: PcAppStore.exe, 00000019.00000002.2578241682.00002180002DC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000002.2605270743.0000048C00211000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000002.2721858410.0000048C00F08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://repository.pcapp.store/pcapp/images/3rdparty/application/videos/Parking_Plot_1.webmfstatus
Source: PcAppStore.exe, 00000019.00000003.2311354888.00000243DE98F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD76E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD736000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2480780744.00004CA0000B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://repository.pcapp.store/pcapp/images/front_img/appstore-hint/index_1/in_background_auto_updat
Source: PcAppStore.exe, 00000019.00000003.2323036588.00000243DE5C0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2316173992.00000243DE8EB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE60B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311354888.00000243DE98F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2512619891.00000243DE590000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2327275875.00000243DE5C1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE61C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5BB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE601000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repository.pcapp.store/pcapp/images/front_img/appstore-hint/index_1/in_background_img.png
Source: PcAppStore.exe, 00000019.00000003.2316173992.00000243DE8EB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repository.pcapp.store/pcapp/images/front_img/appstore-hint/index_1/in_background_img.png=d
Source: PcAppStore.exe, 00000019.00000003.2316173992.00000243DE8EB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repository.pcapp.store/pcapp/images/front_img/appstore-hint/index_1/in_background_img.pngE
Source: PcAppStore.exe, 00000019.00000003.2311354888.00000243DE98F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repository.pcapp.store/pcapp/images/front_img/appstore-hint/index_1/in_background_img.pngapp
Source: PcAppStore.exe, 00000019.00000003.2311354888.00000243DE98F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2572721042.0000218000244000.00000004.00000800.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE619000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE61C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE70C000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2574207365.000012CC001DC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2725380155.000012CC00B0C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2528838256.00004CA000358000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2091089330.00004CA00037C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2088499724.00004CA000464000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2480780744.00004CA0000B4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2493340886.00004CA000128000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000002.2765540329.0000048C01D82000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000003.2125327544.0000048C00894000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000002.2643200695.0000048C003BC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000002.2645837096.0000048C0060C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://repository.pcapp.store/pcapp/images/front_img/appstore-menu/index_12/icon_search_write_right
Source: PcAppStore.exe, 00000019.00000003.2193039835.00000243DE98F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2512619891.00000243DE590000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270482790.00000243DE5D2000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2221017078.00000243DB0CD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5CB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repository.pcapp.store/pcapp/images/front_img/appstore-settings/index_5/icon_check.png
Source: PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2576041354.00002180002A0000.00000004.00000800.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE617000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2469967329.00004CA000060000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2055560784.00004CA00040C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2091089330.00004CA00037C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2134914020.00004CA0004D8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2426327444.00000166B47E7000.00000004.10000000.00040000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2637171947.00002ED000BEC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000003.2125327544.0000048C00894000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000002.2702249912.0000048C00B34000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://repository.pcapp.store/pcapp/images/front_img/logo/logo-light.svg
Source: PcAppStore.exe, 00000019.00000002.2541137500.00000243DE6AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://repository.pcapp.store/pcapp/images/front_img/logo/logo-light.svgQ
Source: PcAppStore.exe, 00000019.00000002.2576041354.00002180002A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://repository.pcapp.store/pcapp/images/front_img/logo/logo-light.svgServer:
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893065239.00007FF70087F000.00000002.00000001.01000000.0000001A.sdmp	String found in binary or memory: https://search.pcapp.store/r.html?q=%ws&br=%ws&en=%ws&guid=%ws&end_v=%ws
Source: PcAppStore.exe, 00000019.00000003.2234673553.00000243DEAD3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2234673553.00000243DEA28000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2238592104.00000243DE998000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2238592104.00000243DE9FD000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2011620520.00004CA0003E4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2006856441.00004CA0003E8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2016520662.00002ED000790000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2021779017.00002ED000D60000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000003.2016868724.0000048C007B4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000003.2018982671.0000048C00C2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: PcAppStore.exe, 00000019.00000003.2234673553.00000243DEAD3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2234673553.00000243DEA28000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2238592104.00000243DE998000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2238592104.00000243DE9FD000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2011620520.00004CA0003E4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2016520662.00002ED000790000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2021779017.00002ED000D60000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000003.2016868724.0000048C007B4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000003.2018982671.0000048C00C2C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-858128210

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 207.246.91.177:443 -> 192.168.2.17:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 169.150.255.181:443 -> 192.168.2.17:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.246.91.177:443 -> 192.168.2.17:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.246.91.177:443 -> 192.168.2.17:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.205.91:443 -> 192.168.2.17:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.205.91:443 -> 192.168.2.17:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.246.91.177:443 -> 192.168.2.17:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.246.91.177:443 -> 192.168.2.17:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.246.91.177:443 -> 192.168.2.17:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.181.170.18:443 -> 192.168.2.17:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 195.181.170.18:443 -> 192.168.2.17:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.246.91.177:443 -> 192.168.2.17:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.246.91.177:443 -> 192.168.2.17:49877 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.246.91.177:443 -> 192.168.2.17:49904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 169.150.255.181:443 -> 192.168.2.17:49915 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 147.182.211.77:443 -> 192.168.2.17:49928 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.246.91.177:443 -> 192.168.2.17:49953 version: TLS 1.2

Source: C:\Users\user\PCAppStore\PcAppStore.exe

Windows user hook set: 0 mouse low level C:\Users\user\PCAppStore\PcAppStore.exe

Jump to behavior

Source: classification engine

Classification label: mal64.spyw.evad.mine.win7Z@48/287@45/25

Source: C:\Program Files\7-Zip\7zG.exe

File created: C:\Users\user\Desktop\Setup.exe

Jump to behavior

Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Mutant created: NULL
Source: C:\Windows\System32\OpenWith.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6912:120:WilError_03

Source: C:\Users\user\Desktop\Setup.exe\Setup.exe

File created: C:\Users\user\AppData\Local\Temp\nsrAB31.tmp

Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select Name from Win32_Processor
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select MaxClockSpeed from Win32_Processor
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select NumberOfCores from Win32_Processor
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select NumberOfLogicalProcessors from Win32_Processor
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select Name from Win32_Processor
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select MaxClockSpeed from Win32_Processor
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select NumberOfCores from Win32_Processor
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select NumberOfLogicalProcessors from Win32_Processor

Source: C:\Windows\System32\OpenWith.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Windows\System32\OpenWith.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File read: C:\Windows\System32\drivers\etc\hosts

Source: unknown

Process created: C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893344947.00007FF7008DF000.00000008.00000001.01000000.0000001A.sdmp	Binary or memory string: SELECT sql FROM%d UNION ALL SELECT shell_add_schema(sql,mainNULL,name) AS sql, type, tbl_name, name, rowid, AS snum, AS sname FROM .sqlite_schema UNION ALL SELECT shell_module_schema(name), 'table', name, name, name, 9e+99, 'main' FROM pragma_module_list) WHERE %Qlower(printf('%s.%s',sname,tbl_name))lower(tbl_name) GLOB LIKE ESCAPE '\' AND name NOT LIKE 'sqlite_%%' AND sql IS NOT NULL ORDER BY snum, rowidSQL: %s;
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893344947.00007FF7008DF000.00000008.00000001.01000000.0000001A.sdmp	Binary or memory string: INSERT INTO sqlite_schema(type,name,tbl_name,rootpage,sql)VALUES('table','%q','%q',0,'%q');%s
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893344947.00007FF7008DF000.00000008.00000001.01000000.0000001A.sdmp	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893344947.00007FF7008DF000.00000008.00000001.01000000.0000001A.sdmp	Binary or memory string: SELECT max(length(key)) FROM temp.sqlite_parameters;
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893344947.00007FF7008DF000.00000008.00000001.01000000.0000001A.sdmp	Binary or memory string: CREATE TABLE ColNames( cpos INTEGER PRIMARY KEY, name TEXT, nlen INT, chop INT, reps INT, suff TEXT);CREATE VIEW RepeatedNames AS SELECT DISTINCT t.name FROM ColNames t WHERE t.name COLLATE NOCASE IN ( SELECT o.name FROM ColNames o WHERE o.cpos<>t.cpos);
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893344947.00007FF7008DF000.00000008.00000001.01000000.0000001A.sdmp	Binary or memory string: SELECT type,name,tbl_name,sql FROM sqlite_schema ORDER BY name;
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893344947.00007FF7008DF000.00000008.00000001.01000000.0000001A.sdmp	Binary or memory string: SELECT key, quote(value) FROM temp.sqlite_parameters;
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893344947.00007FF7008DF000.00000008.00000001.01000000.0000001A.sdmp	Binary or memory string: SELECT 'CREATE TEMP' \|\| substr(sql, 7) FROM sqlite_schema WHERE tbl_name = %Q AND type IN ('table', 'trigger') ORDER BY type;
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893344947.00007FF7008DF000.00000008.00000001.01000000.0000001A.sdmp	Binary or memory string: INSERT INTO selftest(tno,op,cmd,ans) SELECT rowid*10,op,cmd,ans FROM [_shell$self];
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893344947.00007FF7008DF000.00000008.00000001.01000000.0000001A.sdmp	Binary or memory string: SELECT * FROM "%w" ORDER BY rowid DESC;Warning: cannot step "%s" backwardsSELECT name, sql FROM sqlite_schema WHERE %sError: (%d) %s on [%s]
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893344947.00007FF7008DF000.00000008.00000001.01000000.0000001A.sdmp	Binary or memory string: INSERT INTO sqlite_schema(type,name,tbl_name,rootpage,sql)VALUES('table','%q','%q',0,'%q');
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893344947.00007FF7008DF000.00000008.00000001.01000000.0000001A.sdmp	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893344947.00007FF7008DF000.00000008.00000001.01000000.0000001A.sdmp	Binary or memory string: SELECT * FROM "%w" ORDER BY rowid DESC;
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893344947.00007FF7008DF000.00000008.00000001.01000000.0000001A.sdmp	Binary or memory string: SELECT tbl,idx,stat FROM sqlite_stat1 ORDER BY tbl,idx;
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893344947.00007FF7008DF000.00000008.00000001.01000000.0000001A.sdmp	Binary or memory string: SELECT 'EXPLAIN QUERY PLAN SELECT 1 FROM ' \|\| quote(s.name) \|\| ' WHERE ' \|\| group_concat(quote(s.name) \|\| '.' \|\| quote(f.[from]) \|\| '=?' \|\| fkey_collate_clause( f.[table], COALESCE(f.[to], p.[name]), s.name, f.[from]),' AND '), 'SEARCH ' \|\| s.name \|\| ' USING COVERING INDEX(' \|\| group_concat('=?', ' AND ') \|\| ')', s.name \|\| '(' \|\| group_concat(f.[from], ', ') \|\| ')', f.[table] \|\| '(' \|\| group_concat(COALESCE(f.[to], p.[name])) \|\| ')', 'CREATE INDEX ' \|\| quote(s.name \|\|'_'\|\| group_concat(f.[from], '_')) \|\| ' ON ' \|\| quote(s.name) \|\| '(' \|\| group_concat(quote(f.[from]) \|\| fkey_collate_clause( f.[table], COALESCE(f.[to], p.[name]), s.name, f.[from]), ', ') \|\| ');', f.[table] FROM sqlite_schema AS s, pragma_foreign_key_list(s.name) AS f LEFT JOIN pragma_table_info AS p ON (pk-1=seq AND p.arg=f.[table]) GROUP BY s.name, f.id ORDER BY (CASE WHEN ? THEN f.[table] ELSE s.name END)
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893344947.00007FF7008DF000.00000008.00000001.01000000.0000001A.sdmp	Binary or memory string: SELECT 'CREATE TEMP' \|\| substr(sql, 7) FROM sqlite_schema WHERE tbl_name = %Q AND type IN ('table', 'trigger') ORDER BY type;ALTER TABLE temp.%Q RENAME TO %QINSERT INTO %Q VALUES(, %s?)UPDATE %Q SET , %s%Q=?DELETE FROM %QSELECT type, name, sql, 1 FROM sqlite_schema WHERE type IN ('table','view') AND name NOT LIKE 'sqlite_%%' UNION ALL SELECT type, name, sql, 2 FROM sqlite_schema WHERE type = 'trigger' AND tbl_name IN(SELECT name FROM sqlite_schema WHERE type = 'view') ORDER BY 4, 1CREATE TABLE x(, %s%Q COLLATE %s)CREATE VIRTUAL TABLE %Q USING expert(%Q)SELECT max(i.seqno) FROM sqlite_schema AS s, pragma_index_list(s.name) AS l, pragma_index_info(l.name) AS i WHERE s.type = 'table', %sx.%Q IS rem(%d, x.%Q) COLLATE %s%s%dSELECT %s FROM %Q x ORDER BY %sSELECT %s FROM temp.t592690916721053953805701627921227776 x ORDER BY %s%d %dDROP TABLE IF EXISTS temp.t592690916721053953805701627921227776CREATE TABLE temp.t592690916721053953805701627921227776 AS SELECT * FROM %QSELECT s.rowid, s.name, l.name FROM sqlite_schema AS s, pragma_index_list(s.name) AS l WHERE s.type = 'table'SELECT name, coll FROM pragma_index_xinfo(?) WHERE keyINSERT INTO sqlite_stat1 VALUES(?, ?, ?)ANALYZE; PRAGMA writable_schema=1remsampleDROP TABLE IF EXISTS temp.t592690916721053953805701627921227776ANALYZE sqlite_schemaDROP TABLE IF EXISTS temp.t592690916721053953805701627921227776:memory::memory:SELECT sql FROM sqlite_schema WHERE name NOT LIKE 'sqlite_%%' AND sql NOT LIKE 'CREATE VIRTUAL %%'Cannot find a unique index name to propose. -- stat1: %s;%s%s
Source: msedgewebview2.exe, 0000001E.00000002.2512000241.000001AA69FB5000.00000002.00000001.00040000.0000002D.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893344947.00007FF7008DF000.00000008.00000001.01000000.0000001A.sdmp	Binary or memory string: INSERT OR IGNORE INTO "%s" VALUES(?,?);Error %d: %s on [%s]
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893344947.00007FF7008DF000.00000008.00000001.01000000.0000001A.sdmp	Binary or memory string: SELECT name,seq FROM sqlite_sequence ORDER BY name;

Source: unknown	Process created: C:\Windows\System32\OpenWith.exe C:\Windows\system32\OpenWith.exe -Embedding
Source: unknown	Process created: C:\Program Files\7-Zip\7zG.exe "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\user\Desktop\Setup.exe\" -ad -an -ai#7zMap10193:76:7zEvent19362
Source: unknown	Process created: C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
Source: unknown	Process created: C:\Users\user\Desktop\Setup.exe\Setup.exe "C:\Users\user\Desktop\Setup.exe\Setup.exe"
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://pcapp.store/installing.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&winver=19045&version=fa.2001g&nocache=20250102061607.239&_fcid=1734694685230875
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1996,i,9649082435104922829,9310766055222458882,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5420 --field-trial-handle=1996,i,9649082435104922829,9310766055222458882,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5564 --field-trial-handle=1996,i,9649082435104922829,9310766055222458882,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Process created: C:\Users\user\AppData\Local\Temp\nsgC284.tmp "C:\Users\user\AppData\Local\Temp\nsgC284.tmp" /internal 1734694685230875 /force
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Process created: C:\Users\user\PCAppStore\PcAppStore.exe "C:\Users\user\PCAppStore\PcAppStore.exe" /init default
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Process created: C:\Users\user\PCAppStore\Watchdog.exe "C:\Users\user\PCAppStore\Watchdog.exe" /guid=C1B82742-2267-4E50-8B1E-525BB13B4A34 /rid=20250102061616.8456349890 /ver=fa.2001g
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=6968.6112.17141226139066604686
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\PCAppStore\UserData\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\PCAppStore\UserData\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x170,0x7ffa1c2b8e88,0x7ffa1c2b8e98,0x7ffa1c2b8ea8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1764 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:2
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=2036 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:3
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=2416 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-nacl --first-renderer-process --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1735810226763476 --launch-time-ticks=6360422219 --mojo-platform-channel-handle=3304 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-nacl --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1735810226763476 --launch-time-ticks=6360676761 --mojo-platform-channel-handle=3624 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1735810226763476 --launch-time-ticks=6360915784 --mojo-platform-channel-handle=3708 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-GB --service-sandbox-type=audio --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=4804 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:8
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://pcapp.store/installing.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&winver=19045&version=fa.2001g&nocache=20250102061607.239&_fcid=1734694685230875	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Process created: C:\Users\user\AppData\Local\Temp\nsgC284.tmp "C:\Users\user\AppData\Local\Temp\nsgC284.tmp" /internal 1734694685230875 /force	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1996,i,9649082435104922829,9310766055222458882,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5420 --field-trial-handle=1996,i,9649082435104922829,9310766055222458882,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5564 --field-trial-handle=1996,i,9649082435104922829,9310766055222458882,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Process created: C:\Users\user\PCAppStore\PcAppStore.exe "C:\Users\user\PCAppStore\PcAppStore.exe" /init default	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Process created: C:\Users\user\PCAppStore\Watchdog.exe "C:\Users\user\PCAppStore\Watchdog.exe" /guid=C1B82742-2267-4E50-8B1E-525BB13B4A34 /rid=20250102061616.8456349890 /ver=fa.2001g	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=6968.6112.17141226139066604686	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\PCAppStore\UserData\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\PCAppStore\UserData\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x170,0x7ffa1c2b8e88,0x7ffa1c2b8e98,0x7ffa1c2b8ea8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1764 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:2
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=2036 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:3
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=2416 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-nacl --first-renderer-process --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1735810226763476 --launch-time-ticks=6360422219 --mojo-platform-channel-handle=3304 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-nacl --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1735810226763476 --launch-time-ticks=6360676761 --mojo-platform-channel-handle=3624 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1735810226763476 --launch-time-ticks=6360915784 --mojo-platform-channel-handle=3708 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-GB --service-sandbox-type=audio --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=4804 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:8

Source: C:\Windows\System32\OpenWith.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: twinui.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: pdh.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: actxprxy.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windows.ui.appdefaults.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: uiautomationcore.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: uianimation.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: thumbcache.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: tiledatarepository.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: staterepository.core.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windows.staterepository.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windows.staterepositorycore.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: mrmcorer.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: directmanipulation.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: acgenral.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: riched20.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: usp10.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: msls31.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: wlanapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: pcappdebugger.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: eventsviewer.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: uiautomationcore.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: uiamanager.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: eventsviewer.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: dbghelp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: twinapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: netprofm.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Section loaded: npmproxy.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\explorer.exe	Section loaded: windows.cloudstore.schema.shell.dll
Source: C:\Windows\explorer.exe	Section loaded: capabilityaccessmanagerclient.dll
Source: C:\Windows\explorer.exe	Section loaded: execmodelproxy.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: version.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ntmarta.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.system.profile.platformdiagnosticsandusagedatasettings.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: policymanager.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msvcp110_win.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kbdus.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.system.profile.platformdiagnosticsandusagedatasettings.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: policymanager.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msvcp110_win.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: userenv.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: gpapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wkscli.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: netutils.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mdmregistration.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mdmregistration.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msvcp110_win.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: omadmapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: powrprof.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptsp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dmcmnutils.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: iri.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: umpdc.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msasn1.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: netapi32.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: netapi32.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dsreg.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msvcp110_win.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptsp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: profapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msasn1.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: powrprof.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: umpdc.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dwrite.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dpapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: nlaapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: iphlpapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dhcpcsvc.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dnsapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: textinputframework.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: coreuicomponents.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: coremessaging.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wintypes.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wintypes.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wintypes.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.storage.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wldp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.ui.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windowmanagementapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: inputhost.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: twinapi.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: twinapi.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: propsys.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: profapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wtsapi32.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mscms.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: coloradapterclient.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winsta.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winhttp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.security.authentication.web.core.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: iertutil.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: devobj.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msasn1.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptsp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: rsaenh.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dataexchange.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d11.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dcomp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxgi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxgi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: resourcepolicyclient.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mf.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mfplat.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: rtworkq.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: hevcdecoder.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dolbydecmft.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mfperfhelper.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: netapi32.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uiautomationcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dwmapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: atlthunk.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: oleacc.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: directmanipulation.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d11.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: d3d10warp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dxcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dcomp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dbghelp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dwrite.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dbghelp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dwrite.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dbghelp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: policymanager.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: msvcp110_win.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dwrite.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wldp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wldp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wldp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: vaultcli.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: microsoftaccountwamextension.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: aadwamextension.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: sspicli.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: hevcdecoder.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: tenantrestrictionsplugin.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.web.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: netprofm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: npmproxy.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: cryptbase.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mmdevapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: devobj.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: audioses.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: powrprof.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: umpdc.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: resourcepolicyclient.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dwritecore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: wevtapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: windows.system.userprofile.diagnosticssettings.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: secur32.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: iphlpapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: kernel.appcore.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: uxtheme.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dhcpcsvc.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: dnsapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: nlaapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: mswsock.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: rasadhlp.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ncrypt.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ntasn1.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ncryptprov.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: profapi.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: ntmarta.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Section loaded: winmm.dll

Source: C:\Windows\System32\OpenWith.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.19.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.19.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.19.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.19.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.19.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.19.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: PC App Store.lnk.23.dr	LNK file: ..\..\..\..\..\..\PCAppStore\PcAppStore.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\7-Zip\7zG.exe	Window detected: Number of UI elements: 15
Source: C:\Windows\explorer.exe	Window detected: Number of UI elements: 17

Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp

Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PCAppStore

Jump to behavior

Source:	Binary string: C:\Build\Build_2001g_D20241113T092744\fa_rss\AppStoreUpdater\Release\auto_updater.pdb1 source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\zak\Downloads\Inetc\Unicode\Plugins\inetc.pdb source: Setup.exe, 0000000C.00000002.1849044659.000000000040A000.00000004.00000001.01000000.0000000B.sdmp, nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Build\Build_2001g_D20241113T092744\fa_rss\Watchdog\x64\Release\Watchdog.pdb source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000001A.00000000.1893940296.00007FF786BCA000.00000002.00000001.01000000.0000001B.sdmp
Source:	Binary string: C:\Build\Build_2001g_D20241113T092744\fa_rss\AppStoreUpdater\Release\auto_updater.pdb source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Build\Build_2001g_D20241113T092744\fa_rss\engine\Release\PCAppStore.pdb source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893065239.00007FF70087F000.00000002.00000001.01000000.0000001A.sdmp

Source: inetc.dll.23.dr	Static PE information: real checksum: 0x0 should be: 0x13c41
Source: nsJSON.dll.23.dr	Static PE information: real checksum: 0x0 should be: 0x6718
Source: nsDialogs.dll.12.dr	Static PE information: real checksum: 0x0 should be: 0x2f9b
Source: Math.dll.23.dr	Static PE information: real checksum: 0x0 should be: 0x155a8
Source: NSISFastLib.dll.23.dr	Static PE information: real checksum: 0x0 should be: 0x30512
Source: System.dll.23.dr	Static PE information: real checksum: 0x0 should be: 0x3d68
Source: inetc.dll.12.dr	Static PE information: real checksum: 0x0 should be: 0x13c41
Source: Setup.exe.9.dr	Static PE information: real checksum: 0x33905 should be: 0x3e9a5
Source: nsJSON.dll.12.dr	Static PE information: real checksum: 0x0 should be: 0x6718
Source: NSISFastLib.dll.12.dr	Static PE information: real checksum: 0x0 should be: 0x30512
Source: System.dll.12.dr	Static PE information: real checksum: 0x0 should be: 0x3d68

Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\System.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	File created: C:\Users\user\AppData\Local\Temp\nsbD001.tmp\nsJSON.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	File created: C:\Users\user\AppData\Local\Temp\nsbD001.tmp\NSISFastLib.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	File created: C:\Users\user\PCAppStore\PcAppStore.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	File created: C:\Users\user\PCAppStore\Uninstaller.exe	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\nsJSON.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	File created: C:\Users\user\PCAppStore\AutoUpdater.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	File created: C:\Users\user\AppData\Local\Temp\nsbD001.tmp\System.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	File created: C:\Users\user\AppData\Local\Temp\nsbD001.tmp\Math.dll	Jump to dropped file
Source: C:\Program Files\7-Zip\7zG.exe	File created: C:\Users\user\Desktop\Setup.exe\Setup.exe	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\NSISFastLib.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	File created: C:\Users\user\AppData\Local\Temp\nsbD001.tmp\inetc.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\nsDialogs.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	File created: C:\Users\user\PCAppStore\Watchdog.exe	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\inetc.dll	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp

File created: C:\Users\user\PCAppStore\ReadMe.txt

Jump to behavior

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run PcAppStoreUpdater	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Watchdog	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run PCAppStore	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run PCAppStore	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run PCAppStore	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run PcAppStoreUpdater	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run PcAppStoreUpdater	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Watchdog	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Watchdog	Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Windows\System32\OpenWith.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select Caption from Win32_DiskDrive
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select Size from Win32_DiskDrive
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select Caption from Win32_DiskDrive
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select Size from Win32_DiskDrive

Source: C:\Users\user\PCAppStore\Watchdog.exe

Thread delayed: delay time: 300000

Jump to behavior

Source: C:\Users\user\PCAppStore\PcAppStore.exe	Window / User API: threadDelayed 397			Jump to behavior
Source: C:\Users\user\PCAppStore\PcAppStore.exe	Window / User API: threadDelayed 467			Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\System.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsbD001.tmp\nsJSON.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsbD001.tmp\NSISFastLib.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Dropped PE file which has not been started: C:\Users\user\PCAppStore\Uninstaller.exe	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\nsJSON.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Dropped PE file which has not been started: C:\Users\user\PCAppStore\AutoUpdater.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsbD001.tmp\System.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsbD001.tmp\Math.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\NSISFastLib.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsbD001.tmp\inetc.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\nsDialogs.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\inetc.dll	Jump to dropped file

Source: C:\Windows\System32\OpenWith.exe TID: 6916	Thread sleep count: 63 > 30	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe TID: 1180	Thread sleep count: 310 > 30	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe TID: 1180	Thread sleep time: -18600000s >= -30000s	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe TID: 6960	Thread sleep time: -900000s >= -30000s	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe TID: 1180	Thread sleep time: -60000s >= -30000s	Jump to behavior

Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Key opened: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\d0010809

Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select ReleaseDate from Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select ReleaseDate from Win32_BIOS

Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select UUID from Win32_ComputerSystemProduct
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select Vendor from Win32_ComputerSystemProduct
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select Version from Win32_ComputerSystemProduct
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_ComputerSystem
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select UUID from Win32_ComputerSystemProduct
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select Vendor from Win32_ComputerSystemProduct
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select Version from Win32_ComputerSystemProduct
Source: C:\Users\user\PCAppStore\PcAppStore.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_ComputerSystemProduct

Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select Name from Win32_Processor
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select MaxClockSpeed from Win32_Processor
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select NumberOfCores from Win32_Processor
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select NumberOfLogicalProcessors from Win32_Processor
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select Name from Win32_Processor
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select MaxClockSpeed from Win32_Processor
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select NumberOfCores from Win32_Processor
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : Select NumberOfLogicalProcessors from Win32_Processor

Source: C:\Users\user\PCAppStore\PcAppStore.exe	Last function: Thread delayed
Source: C:\Users\user\PCAppStore\Watchdog.exe	Last function: Thread delayed
Source: C:\Users\user\PCAppStore\Watchdog.exe	Last function: Thread delayed

Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\PCAppStore\UserData\EBWebView\Default\Code Cache\wasm FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\PCAppStore\UserData\EBWebView\Default\Code Cache\js FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\PCAppStore\UserData\EBWebView\Default\blob_storage\bba67bf9-f6e0-4d35-805f-9a7c481a3be2 FullSizeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	File Volume queried: C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data FullSizeInformation

Source: C:\Users\user\PCAppStore\Watchdog.exe	Thread delayed: delay time: 60000	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Thread delayed: delay time: 300000	Jump to behavior
Source: C:\Users\user\PCAppStore\Watchdog.exe	Thread delayed: delay time: 60000	Jump to behavior

Source: explorer.exe, 0000001B.00000002.2693860122.0000000009050000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: VMware SATA CD00dRom0
Source: msedgewebview2.exe, 0000001E.00000003.2354133243.000012CC011B4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware
Source: Setup.exe, 0000000C.00000003.1753740331.0000000000617000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Vd Dastem_stats":{"os_name":"Microsoft+Windows+10+Pro","os_installdate":"20231003095718%2E000000%2B060","os_processes":"100","os_architecture":"64-bit","os_virtmem":"8387636","os_mem":"4193332","cpu_name":"Intel%28R%29+Core%28TM%292+CPU+6600+%40+2%2E40+GHz","cpu_maxclock":"2000","cpu_cores":"4","cpu_logicalproc":"4","pc_vendor":"VMware%2C+Inc%2E","pc_version":"None","gpu_name":"2YSPKRWS","gpu_ram":"0","gpu_bitsperpixel":"32","gpu_x":"1280","gpu_y":"1024","disk_name":"ZU4SORKW+SCSI+Disk+Device",
Source: PcAppStore.exe, 00000019.00000003.2221017078.00000243DB0E2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMware, Inc.
Source: explorer.exe, 0000001B.00000000.1923391720.00000000091C6000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#4&224f42ef&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}z
Source: Setup.exe, 0000000C.00000003.1753740331.0000000000611000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: {"system_stats":{"os_name":"Microsoft+Windows+10+Pro","os_installdate":"20231003095718%2E000000%2B060","os_processes":"100","os_architecture":"64-bit","os_virtmem":"8387636","os_mem":"4193332","cpu_name":"Intel%28R%29+Core%28TM%292+CPU+6600+%40+2%2E40+GHz","cpu_maxclock":"2000","cpu_cores":"4","cpu_logicalproc":"4","pc_vendor":"VMware%2C+Inc%2E","pc_version":"None","gpu_name":"2YSPKRWS","gpu_ram":"0","gpu_bitsperpixel":"32","gpu_x":"1280","gpu_y":"1024","disk_name":"ZU4SORKW+SCSI+Disk+Device","disk_size":"412300001200","sec_as":"","sec_av":"Windows+Defender","sec_fw":"","bios_releasedate":"20230522000000%2E000000%2B000"},"pcapps":{"0":"7-Zip+23%2E01+%28x64%29","1":"Mozilla+Firefox+%28x64+en-US%29","2":"Mozilla+Maintenance+Service","3":"Microsoft+Office+Professional+Plus+2019+-+en-us","4":"Microsoft+Visual+C%2B%2B+2022+X64+Additional+Runtime+-+14%2E36%2E32532","5":"Microsoft+Update+Health+Tools","6":"Office+16+Click-to-Run+Licensing+Component","7":"Office+16+Click-to-Run+Extensibility+Component+64-bit+Registration","8":"Adobe+Acrobat+%2864-bit%29","9":"Microsoft+Visual+C%2B%2B+2022+X64+Minimum+Runtime+-+14%2E36%2E32532","10":"Google+Chrome","11":"Microsoft+Edge","12":"Microsoft+Edge+Update","13":"Microsoft+Edge+WebView2+Runtime","14":"Java+Auto+Updater","15":"Java+8+Update+381","16":"Microsoft+Visual+C%2B%2B+2015-2022+Redistributable+%28x64%29+-+14%2E36%2E32532","17":"Office+16+Click-to-Run+Extensibility+Component"},"processes":{"0":"ApplicationFrameHost%2Eexe","1":"Memory+Compression","2":"OfficeClickToRun%2Eexe","3":"PhoneExperienceHost%2Eexe","4":"Registry","5":"RuntimeBroker%2Eexe","6":"SearchApp%2Eexe","7":"Setup%2Eexe","8":"SgrmBroker%2Eexe","9":"StartMenuExperienceHost%2Eexe","10":"System","11":"WinStore%2EApp%2Eexe","12":"WmiPrvSE%2Eexe","13":"%5BSystem+Process%5D","14":"conhost%2Eexe","15":"csrss%2Eexe","16":"ctfmon%2Eexe","17":"dasHost%2Eexe","18":"dllhost%2Eexe","19":"dwm%2Eexe","20":"explorer%2Eexe","21":"fontdrvhost%2Eexe","22":"lsass%2Eexe","23":"services%2Eexe","24":"sihost%2Eexe","25":"smartscreen%2Eexe","26":"smss%2Eexe","27":"spoolsv%2Eexe","28":"svchost%2Eexe","29":"wininit%2Eexe","30":"winlogon%2Eexe"},"sys_lang":"en-GB","parent_proc":"explorer%2Eexe"}
Source: explorer.exe, 0000001B.00000002.2693860122.0000000009061000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001B.00000000.1923391720.000000000903B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWal@
Source: explorer.exe, 0000001B.00000000.1923391720.00000000091C6000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#4&224f42ef&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}W)J
Source: explorer.exe, 0000001B.00000002.2402529797.0000000001321000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}G4
Source: Setup.exe, 0000000C.00000003.1806722006.0000000000610000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 0000000C.00000002.1851273898.0000000002E30000.00000004.00000020.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000003.1901983150.000000000076E000.00000004.00000020.00020000.00000000.sdmp, nsgC284.tmp, 00000017.00000003.1901983150.00000000007AE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2221017078.00000243DB147000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2446819182.00000243DB15E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2221017078.00000243DB0D1000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000001A.00000002.2403892198.000001D602FAB000.00000004.00000020.00020000.00000000.sdmp, Watchdog.exe, 0000001A.00000002.2403892198.000001D602F1C000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000001B.00000000.1923391720.000000000908F000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: Setup.exe, 0000000C.00000003.1753740331.0000000000645000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: bstem_stats":{"os_name":"Microsoft+Windows+10+Pro","os_installdate":"20231003095718%2E000000%2B060","os_processes":"100","os_architecture":"64-bit","os_virtmem":"8387636","os_mem":"4193332","cpu_name":"Intel%28R%29+Core%28TM%292+CPU+6600+%40+2%2E40+GHz","cpu_maxclock":"2000","cpu_cores":"4","cpu_logicalproc":"4","pc_vendor":"VMware%2C+Inc%2E","pc_version":"None","gpu_name":"2YSPKRWS","gpu_ram":"0","gpu_bitsperpixel":"32","gpu_x":"1280","gpu_y":"1024","disk_name":"ZU4SORKW+SCSI+Disk+Device","disk_size":"412300001200","sec_as":"","sec_av":"Windows+Defender","sec_fw":"","bios_releasedate":"20230522000000%2E000000%2B000"},"pcapps":{"0":"7-Zip+23%2E01+%28x64%29","1":"Mozilla+Firefox+%28x64+en-US%29","2":"Mozilla+Maintenance+Service","3":"Microsoft+Office+Professional+Plus+2019+-+en-us","4":"Microsoft+Visual+C%2B%2B+2022+X64+Additional+Runtime+-+14%2E36%2E32532","5":"Microsoft+Update+Health+Tools","6":"Office+16+Click-to-Run+Licensing+Component","7":"Office+16+Click-to-Run+Extensibility+Component+64-bit+Registration","8":"Adobe+Acrobat+%2864-bit%29","9":"Microsoft+Visual+C%2B%2B+2022+X64+Minimum+Runtime+-+14%2E36%2E32532","10":"Google+Chrome","11":"Microsoft+Edge","12":"Microsoft+Edge+Update","13":"Microsoft+Edge+WebView2+Runtime","14":"Java+Auto+Updater","15":"Java+8+Update+381","16":"Microsoft+Visual+C%2B%2B+2015-2022+Redistributable+%28x64%29+-+14%2E36%2E32532","17":"Office+16+Click-to-Run+Extensibility+Component"},"processes":{"0":"ApplicationFrameHost%2Eexe","1":"Memory+Compression","2":"OfficeClickToRun%2Eexe","3":"PhoneExperienceHost%2Eexe","4":"Registry","5":"RuntimeBroker%2Eexe","6":"SearchApp%2Eexe","7":"Setup%2Eexe","8":"SgrmBroker%2Eexe","9":"StartMenuExperienceHost%2Eexe","10":"System","11":"WinStore%2EApp%2Eexe","12":"WmiPrvSE%2Eexe","13":"%5BSystem+Process%5D","14":"conhost%2Eexe","15":"csrss%2Eexe","16":"ctfmon%2Eexe","17":"dasHost%2Eexe","18":"dllhost%2Eexe","19":"dwm%2Eexe","20":"explorer%2Eexe","21":"fontdrvhost%2Eexe","22":"lsass%2Eexe","23":"services%2Eexe","24":"sihost%2Eexe",
Source: Setup.exe, 0000000C.00000003.1848310705.00000000005E9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMware%2C+Inc%2E
Source: explorer.exe, 0000001B.00000000.1923391720.0000000008F19000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001B.00000002.2693860122.0000000008FB9000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWUS;
Source: msedgewebview2.exe, 00000024.00000003.2297184544.0000048C01947000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: jaTTSRQPOWqwknnrohaYUSUXSad_ipfUNLLMNPPPQQQPOONNNNNOQRSSSTUVWXZZWYfe[]^]_cifegadeecba`__``_aa`__bkrnkheegdabcb`__XacqprlfsoghnumgdkqvuwsstvpqvwipsbZ[\]_ciebh`_nukcYffb`_\X]ty\|\|{\|se_bhgjoligknk`^`ekpjd^\`q{}
Source: Setup.exe, 0000000C.00000003.1806722006.0000000000602000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: "pc_vendor":"VMware%2C+Inc%2E",
Source: explorer.exe, 0000001B.00000003.2074798831.0000000009193000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: SCSI\CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00\4&224f42ef&0&000000
Source: explorer.exe, 0000001B.00000000.1900265610.0000000001287000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI\DISK&VEN_VMWARE&PROD_VIRTUAL_DISK\4&1656F219&0&000000=
Source: explorer.exe, 0000001B.00000000.1903355152.00000000037BB000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: VMware SVGA II
Source: PcAppStore.exe, 00000019.00000003.2221017078.00000243DB147000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW$G
Source: msedgewebview2.exe, 0000001E.00000002.2470263078.000001AA64C6C000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2428201735.0000022F8F02B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: explorer.exe, 0000001B.00000002.2693860122.000000000918E000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: SCSI\Disk&Ven_VMware&Prod_Virtual_disk\4&1656f219&0&000000
Source: msedgewebview2.exe, 00000024.00000003.2278611378.0000048C04354000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ,Gcksqk?T]K7=@E5/?EHOPATjO6zwvhGFScs\|l@"
Source: nsgC284.tmp, 00000017.00000003.1879049500.0000000003992000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMware, Inc.a4R
Source: nsgC284.tmp, 00000017.00000003.1878764479.0000000003992000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: LstringVMware, Inc.4
Source: msedgewebview2.exe, 00000024.00000003.2337025355.0000048C04488000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: chhgggghgijrihliookdeffehp.--$(-+#++1/cJgigfgfffgjppppppysrqnrjnomlhffffffffffffffffffffggggiefbcfgehgfsYKHI]^IrehfghhhggggfffghV<10.-.0.+-.....///////////12<EKQQA61110EOQK?486/-/-..//..-5312GLNg
Source: msedgewebview2.exe, 00000024.00000003.2313980734.0000048C03A41000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: jaTTSRQPOWqwknnrohaYUSUXSad_ipfUNLLMNPPPQQQPOONNNNNNPQRRRSTUVWYYYZgf[]^^`cifdf`cddba`_^^___aa`^^bkrnkheegdabcb`__XacqprlfsoghnumgdkqvuwsstvpqvwipsbZ[\]_ciebh`_nukcYffb`_\X]ty\|\|{\|se_bhgjoligknk`^`ekpjd^\`q{}
Source: explorer.exe, 0000001B.00000000.1923391720.00000000091C6000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#4&224f42ef&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}Z
Source: Setup.exe, 0000000C.00000003.1753499453.0000000000645000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: {"system_stats":{"os_name":"Microsoft+Windows+10+Pro","os_installdate":"20231003095718%2E000000%2B060","os_processes":"100","os_architecture":"64-bit","os_virtmem":"8387636","os_mem":"4193332","cpu_name":"Intel%28R%29+Core%28TM%292+CPU+6600+%40+2%2E40+GHz","cpu_maxclock":"2000","cpu_cores":"4","cpu_logicalproc":"4","pc_vendor":"VMware%2C+Inc%2E","pc_version":"None","gpu_name":"2YSPKRWS","gpu_ram":"0","gpu_bitsperpixel":"32","gpu_x":"1280","gpu_y":"1024","disk_name":"ZU4SORKW+SCSI+Disk+Device","disk_size":"412300001200","sec_as":"","sec_av":"Windows+Defender","sec_fw":"","bios_releasedate":"20230522000000%2E000000%2B000"},"pcapps":{"0":"7-Zip+23%2E01+%28x64%29","1":"Mozilla+Firefox+%28x64+en-US%29","2":"Mozilla+Maintenance+Service","3":"Microsoft+Office+Professional+Plus+2019+-+en-us","4":"Microsoft+Visual+C%2B%2B+2022+X64+Additional+Runtime+-+14%2E36%2E32532","5":"Microsoft+Update+Health+Tools","6":"Office+16+Click-to-Run+Licensing+Component","7":"Office+16+Click-to-Run+Extensibility+Component+64-bit+Registration","8":"Adobe+Acrobat+%2864-bit%29","9":"Microsoft+Visual+C%2B%2B+2022+X64+Minimum+Runtime+-+14%2E36%2E32532","10":"Google+Chrome","11":"Microsoft+Edge","12":"Microsoft+Edge+Update","13":"Microsoft+Edge+WebView2+Runtime","14":"Java+Auto+Updater","15":"Java+8+Update+381","16":"Microsoft+Visual+C%2B%2B+2015-2022+Redistributable+%28x64%29+-+14%2E36%2E32532","17":"Office+16+Click-to-Run+Extensibility+Component"},"processes":{"0":"ApplicationFrameHost%2Eexe","1":"Memory+Compression","2":"OfficeClickToRun%2Eexe","3":"PhoneExperienceHost%2Eexe","4":"Registry","5":"RuntimeBroker%2Eexe","6":"SearchApp%2Eexe","7":"Setup%2Eexe","8":"SgrmBroker%2Eexe","9":"StartMenuExperienceHost%2Eexe","10":"System","11":"WinStore%2EApp%2Eexe",
Source: Setup.exe, 0000000C.00000003.1753985109.0000000000645000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: bstem_stats":{"os_name":"Microsoft+Windows+10+Pro","os_installdate":"20231003095718%2E000000%2B060","os_processes":"100","os_architecture":"64-bit","os_virtmem":"8387636","os_mem":"4193332","cpu_name":"Intel%28R%29+Core%28TM%292+CPU+6600+%40+2%2E40+GHz","cpu_maxclock":"2000","cpu_cores":"4","cpu_logicalproc":"4","pc_vendor":"VMware%2C+Inc%2E","pc_version":"None","gpu_name":"2YSPKRWS","gpu_ram":"0","gpu_bitsperpixel":"32","gpu_x":"1280","gpu_y":"1024","disk_name":"ZU4SORKW+SCSI+Disk+Device","disk_size":"412300001200","sec_as":"","sec_av":"Windows+Defender","sec_fw":"","bios_releasedate":"20230522000000%2E000000%2B000"},"pcapps":{"0":"7-Zip+23%2E01+%28x64%29","1":"Mozilla+Firefox+%28x64+en-US%29","2":"Mozilla+Maintenance+Service","3":"Microsoft+Office+Professional+Plus+2019+-+en-us","4":"Microsoft+Visual+C%2B%2B+2022+X64+Additional+Runtime+-+14%2E36%2E32532","5":"Microsoft+Update+Health+Tools","6":"Office+16+Click-to-Run+Licensing+Component","7":"Office+16+Click-to-Run+Extensibility+Component+64-bit+Registration","8":"Adobe+Acrobat+%2864-bit%29","9":"Microsoft+Visual+C%2B%2B+2022+X64+Minimum+Runtime+-+14%2E36%2E32532","10":"Google+Chrome","11":"Microsoft+Edge","12":"Microsoft+Edge+Update","13":"Microsoft+Edge+WebView2+Runtime","14":"Java+Auto+Updater","15
Source: explorer.exe, 0000001B.00000000.1923391720.000000000903B000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: 4NECVMWar VMware SATA CD00
Source: msedgewebview2.exe, 00000024.00000003.2306927491.0000048C03B4F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: jaTTSRQPOWqwknnrohaYUSUXSad_ipfUNLLMNPPPQQPOONNMMLMNPQRRRSTUVWYYYYgg\]^__bifdfaddcba`__^___```_^bkrnkhecidabcb`__XacqprlfsoghnuogdkqvuwqutvpqvwipsbZ[\]^chdag_^mukcYffb]b\X]ty\|\|{\|se_bhfkoligknka_afkpjd^[_pz\|
Source: explorer.exe, 0000001B.00000002.2693860122.000000000907A000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: NXTVMWare
Source: explorer.exe, 0000001B.00000003.2074798831.00000000090CB000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: SCSI\CDROM&VEN_NECVMWAR&PROD_VMWARE_SATA_CD00\4&224F42EF&0&0000007
Source: msedgewebview2.exe, 00000024.00000003.2337025355.0000048C04488000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ysrqnrjnomlhffffffffffffffffffffggggiefbcfgehgfsYKHI]^IrehfghhhggggfffghV<10.-.0.+*-.....///////////12<EKQQA61110EOQK?486/-/-..//..-5312GLNg
Source: PcAppStore.exe, 00000019.00000003.2221017078.00000243DB0E2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: stringComputer System ProductComputer System ProductY67C3BC1B82742-2267-4E50-8B1E-525BB13B4A34VMware, Inc.None+
Source: nsgC284.tmp, 00000017.00000003.1901983150.0000000000783000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMware%2C+Inc%2E9-\
Source: explorer.exe, 0000001B.00000000.1900265610.0000000001287000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SCSI\DISK&VEN_VMWARE&PROD_VIRTUAL_DISK\4&1656F219&0&000000]
Source: Watchdog.exe, 0000001A.00000002.2403892198.000001D602F1C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW@
Source: msedgewebview2.exe, 0000001E.00000002.2685898996.000012CC00818000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: USB device added: path=\\?\usb#vid_0e0f&pid_0003#5&2dda038&0&5#{a5dcbf10-6530-11d2-901f-00c04fb951ed} vendor=3599 "VMware", product=3 "VMware Virtual USB Mouse", serial="", driver="usbccgp", guid=7fd7a7d2-3296-4b04-8a18-90bd51e3c85a

Source: C:\Users\user\Desktop\Setup.exe\Setup.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://pcapp.store/installing.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&winver=19045&version=fa.2001g&nocache=20250102061607.239&_fcid=1734694685230875	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\PCAppStore\UserData\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\PCAppStore\UserData\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x170,0x7ffa1c2b8e88,0x7ffa1c2b8e98,0x7ffa1c2b8ea8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1764 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:2
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=2036 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:3
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=2416 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:8
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-nacl --first-renderer-process --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1735810226763476 --launch-time-ticks=6360422219 --mojo-platform-channel-handle=3304 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-nacl --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1735810226763476 --launch-time-ticks=6360676761 --mojo-platform-channel-handle=3624 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1735810226763476 --launch-time-ticks=6360915784 --mojo-platform-channel-handle=3708 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:1
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Process created: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-GB --service-sandbox-type=audio --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=4804 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:8

Source: explorer.exe, 0000001B.00000002.2693860122.0000000009212000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001B.00000002.2460701296.0000000001874000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 0000001B.00000000.1901768654.0000000001870000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Shell_TrayWnd
Source: explorer.exe, 0000001B.00000002.2460701296.0000000001874000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 0000001B.00000000.1901768654.0000000001870000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Progman
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893065239.00007FF70087F000.00000002.00000001.01000000.0000001A.sdmp	Binary or memory string: o@Shell_TrayWndTaskbarShell_TrayWndC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.h{"action":"direction_changed","data":{"direction":"%c", "withTopbar":%ws}}{"action":"screen_size_changed","data":{"withTopbar":%ws,"t":%d,"l":%d,"b":%d,"r":%d}}{"action":"locale_layout_changed","data":{"localeLayout": "%ws"}}WilError_03truefalse
Source: explorer.exe, 0000001B.00000000.1900265610.0000000001267000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000001B.00000002.2402529797.000000000126A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: 1Progman&
Source: explorer.exe, 0000001B.00000002.2460701296.0000000001874000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 0000001B.00000000.1901768654.0000000001870000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: YProgram Manager
Source: explorer.exe, 0000001B.00000002.2460701296.0000000001874000.00000002.00000001.00040000.00000000.sdmp, explorer.exe, 0000001B.00000000.1901768654.0000000001870000.00000002.00000001.00040000.00000000.sdmp	Binary or memory string: Progmanlock
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893065239.00007FF70087F000.00000002.00000001.01000000.0000001A.sdmp	Binary or memory string: C:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hC:\Build\Build_2001g_D20241113T092744\fa_rss\engine\packages\Microsoft.Windows.ImplementationLibrary.1.0.240803.1\include\wil\resource.hCoInitialize+Init+FailedCoCreateInstance+CLSID_AppVisibility+IID_IAppVisibilitymenu_searchshowclosepage=aopen_searchIAppVisibility+IsLauncherVisibleWilError_03SearchWindows.UI.Core.CoreWindowSearchHost.exeSearchApp.exeSearchButtonToggleButtonShell_SecondaryTrayWndShell_TrayWnd
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893065239.00007FF70087F000.00000002.00000001.01000000.0000001A.sdmp	Binary or memory string: eM=%ws&eC=%deM=%wsunknown\/LTRRTLLTRSoftware\PCAppStoreAppParamdefaultC++/WinRT version:2.0.220110.5\\\HKEY_CLASSES_ROOTHKEY_CURRENT_USERHKEY_LOCAL_MACHINEHKEY_USERSHKEY_CURRENT_CONFIGCurrentBuildBuildNumberSOFTWARE\Microsoft\Windows NT\CurrentVersionSOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon%lu0e+000e+00%us%5B%5D=\uRoGetActivationFactorycombase.dllCoIncrementMTAUsagecombase.dll.dllDllGetActivationFactoryRoGetActivationFactorycombase.dllCoIncrementMTAUsagecombase.dll.dllDllGetActivationFactoryparamsnamenfinityanindsnannfinityanindtype must be string, but is snan0p+00p+0^(https?://(?:www.)?([^/]+))(/.*)?$URL format is not valid : %wsWinHTTP 1.0handle initialization failuretimeout init failurehandle connection failureGEThandle request creation failurehandle request or response failurefile creation failurequery data not availableproductr_binErreCode=%dproductcreate_shortcutshortcut_erroroid=%luSHGetFolderPath_error_code=%X&oid=%luQueryInterface_error_code=%X&oid=%luCoCreateInstance_error_code=%X&oid=%lu.lnk.lnkproductshortcut_delete_erroreC=%Xinfnan(ind)nannan(snan)infnan(ind)nannan(snan)infnan(ind)nannan(snan)Shell_TrayWndinfnan(ind)nannan(snan)infnan(ind)nannan(snan)infnan(ind)nannan(snan)type must be string, but is unknownmenu_storemenu_searchhttps://pcapp.store%02X
Source: nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893065239.00007FF70087F000.00000002.00000001.01000000.0000001A.sdmp	Binary or memory string: NWidgetShell_TrayWndTrayNotifyWnd+TrayButtonPNGArial++

Source: C:\Windows\System32\OpenWith.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Queries volume information: C:\Windows\Fonts\segmdl2.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Queries volume information: C:\Windows\Fonts\segmdl2.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\Trust Protection Lists\manifest.json VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\WidevineCdm\manifest.json VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\System32\spool\drivers\color\sRGB Color Space Profile.icm VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\Fonts\segoeuib.ttf VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Users\user\PCAppStore\UserData\EBWebView\Default\Code Cache\js\8281fcfdae193bde_0 VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\MEIPreload\preloaded_data.pb VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
Source: C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe	Queries volume information: C:\Users\user\PCAppStore\UserData\EBWebView\Default\Network\SCT Auditing Pending Reports VolumeInformation

Source: C:\Windows\explorer.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : Select displayName from AntiSpywareProduct
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : Select displayName from AntiVirusProduct
Source: C:\Users\user\Desktop\Setup.exe\Setup.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : Select displayName from FirewallProduct
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : Select displayName from AntiSpywareProduct
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : Select displayName from AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\nsgC284.tmp	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : Select displayName from FirewallProduct

Stealing of Sensitive Information

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\PCAppStore\PcAppStore.exe

File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	141 Windows Management Instrumentation	1 Windows Service	1 Windows Service	1 Masquerading	1 OS Credential Dumping	1 Query Registry	Remote Services	1 Input Capture	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Command and Scripting Interpreter	111 Registry Run Keys / Startup Folder	12 Process Injection	141 Virtualization/Sandbox Evasion	1 Input Capture	231 Security Software Discovery	Remote Desktop Protocol	1 Data from Local System	3 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	111 Registry Run Keys / Startup Folder	12 Process Injection	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 DLL Side-Loading	1 Rundll32	NTDS	141 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	Steganography	Cached Domain Credentials	1 Remote System Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	Compile After Delivery	DCSync	1 File and Directory Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	144 System Information Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner
C:\Users\user\AppData\Local\Temp\nsbD001.tmp\Math.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsbD001.tmp\NSISFastLib.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsbD001.tmp\System.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsbD001.tmp\inetc.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsbD001.tmp\nsJSON.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\NSISFastLib.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\System.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\inetc.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\nsDialogs.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\nsJSON.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\nsgC284.tmp	33%	ReversingLabs
C:\Users\user\PCAppStore\AutoUpdater.exe	3%	ReversingLabs
C:\Users\user\PCAppStore\PcAppStore.exe	5%	ReversingLabs
C:\Users\user\PCAppStore\Uninstaller.exe	29%	ReversingLabs
C:\Users\user\PCAppStore\Watchdog.exe	3%	ReversingLabs

Source	Detection	Scanner	Label
https://delivery.pcapp.store/0	0%	Avira URL Cloud	safe
https://pcapp.stWG	0%	Avira URL Cloud	safe
https://delivery.pcapp.store/download.php?&src=mini_installer&file=1&mini_ver=ersion=fa.2001g&src=pc	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
1645886859.rsc.cdn77.org	169.150.255.184	true	false	high
1715720427.rsc.cdn77.org	37.19.194.80	true	false	high
chrome.cloudflare-dns.com	172.64.41.3	true	false	high
google.com	142.250.185.78	true	false	high
pcapp.store	207.246.91.177	true	false	high
d74queuslupub.cloudfront.net	18.173.205.91	true	false	high
stats.g.doubleclick.net	74.125.206.157	true	false	high
googleads.g.doubleclick.net	142.250.185.66	true	false	high
1285660440.rsc.cdn77.org	169.150.255.181	true	false	unknown
www.google.com	142.250.186.164	true	false	high
td.doubleclick.net	142.250.186.34	true	false	high
analytics.google.com	172.217.18.110	true	false	high
ev.pcapp.store	147.182.211.77	true	false	high
repcdn.pcapp.store	unknown	unknown	false	high
repository.pcapp.store	unknown	unknown	false	high
delivery.pcapp.store	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://pcapp.store/pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_hint&evt_action=show&version=fa.2001g&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&eng_time=1735822752290&nocache=6364640	false	high
https://d74queuslupub.cloudfront.net/p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":28,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735880539&nocache=4713	false	unknown
https://pcapp.store/pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_installer&evt_action=start&permision=	false	high
https://pcapp.store/pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_menu_store&evt_action=open_start_menu&&eng_time=1735822752031&nocache=6381671	false	high
https://pcapp.store/pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_menu_store&evt_action=click_close&evt_src=fa_menu_store&evt_action=click_close&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&eng_time=1735822784273&nocache=6396625	false	high
https://d74queuslupub.cloudfront.net/p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":20,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735864110&nocache=10638	false	unknown
https://pcapp.store/pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_menu_store&evt_action=show&&eng_time=1735822761376&nocache=6395921	false	high
https://ev.pcapp.store/p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_pcdetails&evt_action=ext_edge&data=%5B%22ahfgeienlihckogmohjhadlkjgocpleb%22,%22dgiklkfkllikcanfonkcabmbdfmgleag%22,%22fikbjbembnmfhppjfnmfkahdhfohhjmg%22,%22ghbmnnjooekpmoecnnnilnnbdlolhkhi%22,%22iglcjdemknebjbklcgkfaebgojjphkec%22,%22ihmafllikibpmigkcoadcmckbfhibefp%22,%22jdiccldimpdaibmpdkjnbmckianbfold%22,%22jmjflgjpcpepeafmmgdpfkogkghcpiha%22,%22mhjfbmdgcfjbbpaeojofohoefgiehjai%22,%22ncbjelpjchkpbikbpkcchkhkblodoama%22,%22nkeimhogjdpnpccoofpliimaahmaaome%22%5D&eng_time=1735822752189&nocache=6388812	false	high
https://pcapp.store/images/front_img/logo/logo-dark.svg	false	high
https://d74queuslupub.cloudfront.net/p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":13,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735848160&nocache=17343	false	unknown
https://pcapp.store/pixelgif.php	false	high
https://pcapp.store//src/app/appWindow.js	false	high
https://d74queuslupub.cloudfront.net/p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":16,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735855116&nocache=28711	false	unknown
https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73400_666176fb273fb.png	false	high
https://pcapp.store/pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_installer&evt_action=installing&e=03000200-0400-0500-0006-000700080009&u=52	false	high
https://pcapp.store/pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_installer&evt_action=localmac&addon[]=EC-F4-BB-FF-25-8B	false	high
https://d74queuslupub.cloudfront.net/p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":22,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735867947&nocache=16908	false	unknown
https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73356_663ce796de577.jpg	false	high
https://d74queuslupub.cloudfront.net/p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":0,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735822737&nocache=8570	false	unknown
https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73401_66684ff6b31a4.png	false	high
https://pcapp.store//appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g	false	high
https://pcapp.store/images/front_img/appstore-hint/index_1/in_background_auto_update_img.png	false	high
https://d74queuslupub.cloudfront.net/p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":30,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735884976&nocache=11966	false	unknown
https://d74queuslupub.cloudfront.net/p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":1,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735824776&nocache=11904	false	unknown
https://pcapp.store/lp/appstore/img/favicon.ico	false	high
https://pcapp.store//images/front_img/appstore-settings/index_5/icon_check.png	false	high
https://pcapp.store/pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_menu_store&evt_action=created&&eng_time=1735822748312&nocache=6364296	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://pcapp.store/9Rp=p	PcAppStore.exe, 00000019.00000003.2303670890.00000243DD747000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD747000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD747000.00000004.00000020.00020000.00000000.sdmp	false		high
https://repository.pcapp.store/pcapp/images/front_img/logo/logo-light.svgServer:	PcAppStore.exe, 00000019.00000002.2576041354.00002180002A0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://pcapp.store//src/app/appWidget.jsA	PcAppStore.exe, 00000019.00000003.2164121488.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2178167247.00000243DE6C8000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2315006018.00000243DE6D3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2244794470.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2318574909.00000243DE6D3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6CF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6CA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2196139899.00000243DE6CD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73401_66684ff6b31a4.pngjson	PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/search-menu/img/skeleton.png	PcAppStore.exe, 00000019.00000003.2095455996.00000243DE678000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2568283245.00000243DEA03000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2089378341.00000243DE77D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//appstore-menu/?guid=C1B82742-2267-4E50-8B1E.png	PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5E2000.00000004.00000020.00020000.00000000.sdmp	false		high
https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73400_666176fb273fb.png8382	PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	false		high
http://pcapp.store/h	PcAppStore.exe, 00000019.00000003.2052272122.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//src/app/appStore.js6	PcAppStore.exe, 00000019.00000003.2259897481.00000243DE667000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2248098274.00000243DE667000.00000004.00000020.00020000.00000000.sdmp	false		high
https://delivery.pcapp.store/0	Setup.exe, 0000000C.00000002.1851682820.0000000002ED4000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 0000000C.00000003.1847495997.0000000002ED3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://pcapp.store//images/front_img/appstore-settings/index_5/	PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270482790.00000243DE5E4000.00000004.00000020.00020000.00000000.sdmp	false		high
https://repository.pcapp.store/pcapp/images/front_img/logo/logo-light.svgQ	PcAppStore.exe, 00000019.00000002.2541137500.00000243DE6AA000.00000004.00000020.00020000.00000000.sdmp	false		high
https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73424_66a3b3e271152.png96de	PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73424_66a3b3e27	PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//src/app/appSearchMenu.js2926E8252Cw	PcAppStore.exe, 00000019.00000003.2323036588.00000243DE5C0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270083154.00000243DE5BA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2327275875.00000243DE5C1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5BB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://repcdn.pcapp.store/	PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6E0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2059396771.00000243DE651000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2095455996.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2144736015.00000243DE6DA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2260903625.00000243DE64A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2534578849.00000243DE651000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE649000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2125314384.00000243DE6FD000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE6F6000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//appstore-menu/?guid=C1B82742-2267-4E50-8B1E	PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5D1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5E2000.00000004.00000020.00020000.00000000.sdmp	false		high
http://pcapp.store/images/front_img/appstore-hint/index_1/in_background_img.pnged	PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//src/app/appWidget.js0	PcAppStore.exe, 00000019.00000003.2123748147.00000243DE735000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2117345184.00000243DE8EC000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2316173992.00000243DE8EB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2559138153.00000243DE8EF000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//src/app/appWidget.jshe	PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6E7000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//search-menu/?a=getTearch	PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//src/app/appWidget.js4	PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2302901480.00000243DE664000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13	PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//src/app/appHint.js880	PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	false		high
https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73401_66684ff6b31a4.pngI	PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/pixel.gif?guid=	Setup.exe, 0000000C.00000002.1849739837.00000000005C1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://repository.pcapp.store/pcapp/images/3rdparty/application/videos/Parking_Plot_1.webmfstatus	PcAppStore.exe, 00000019.00000002.2578241682.00002180002DC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000002.2605270743.0000048C00211000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000024.00000002.2721858410.0000048C00F08000.00000004.00000800.00020000.00000000.sdmp	false		high
https://pcapp.store//src/app/appMenuStore.jsA_	PcAppStore.exe, 00000019.00000003.2185124662.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2153457505.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2200980611.00000243DE642000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store	PcAppStore.exe, 00000019.00000003.2234673553.00000243DEAD3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2238592104.00000243DE998000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2512854258.00004CA00020C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2469967329.00004CA000060000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2528838256.00004CA000358000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2502367687.00004CA00018C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000003.2091089330.00004CA00037C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2532764702.00004CA000390000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2551909313.00004CA0004FC000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2402894765.000000C4563F7000.00000004.00000010.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2473671402.00004CA000084000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2487655040.00004CA0000F0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2480780744.00004CA0000B4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2531447473.00004CA000380000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2476984424.00004CA00009C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2497788635.00004CA00016C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000022.00000002.2424944209.0000213400024000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2426327444.00000166B47E7000.00000004.10000000.00040000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2016520662.00002ED000790000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2021779017.00002ED000D60000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2619852159.00002ED00097C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://pcapp.store/search-menu/?a=getTemplate&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&p	PcAppStore.exe, 00000019.00000002.2577483798.00002180002CC000.00000004.00000800.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2512619891.00000243DE590000.00000004.00000020.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2660946482.000012CC006A4000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2509255122.000001AA69C65000.00000002.00000001.00040000.0000002C.sdmp, msedgewebview2.exe, 0000001E.00000002.2532408461.000001AA6C4B0000.00000002.00000001.00040000.00000048.sdmp, msedgewebview2.exe, 0000001E.00000002.2729420553.000012CC00B58000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2532408461.000001AA6C4B3000.00000002.00000001.00040000.00000048.sdmp, msedgewebview2.exe, 0000001E.00000002.2509255122.000001AA69C43000.00000002.00000001.00040000.0000002C.sdmp, msedgewebview2.exe, 0000001E.00000002.2679910334.000012CC007B0000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2604800125.000012CC003D7000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 0000001E.00000002.2651816083.000012CC00634000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000021.00000002.2528838256.00004CA000358000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2045028569.00002ED0008A8000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2089386157.00002ED000A9A000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2654988441.00002ED001248000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000003.2118312826.00002ED000324000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2567774963.00002ED000356000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2658658628.00002ED00128C000.00000004.00000800.00020000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2441179491.00000166B7977000.00000004.10000000.00040000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2426327444.00000166B47E7000.00000004.10000000.00040000.00000000.sdmp, msedgewebview2.exe, 00000023.00000002.2589260134.00002ED00073C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://pcapp.store//src/app/appOffer.js~Y	PcAppStore.exe, 00000019.00000003.2137757222.00000243DD73F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD741000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD73F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD743000.00000004.00000020.00020000.00000000.sdmp	false		high
https://drive-daily-5.corp.google.com/	PcAppStore.exe, 00000019.00000003.2040442382.00000243DE5BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2039583664.00000243DE5BC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/store/	PcAppStore.exe, 00000019.00000003.2217244351.00000243DE648000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2184134777.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE664000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2150514133.00000243DE666000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2059396771.00000243DE651000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2073603926.00000243DE666000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2123911042.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE666000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE64F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73401_66684ff6b31a4.pngP	PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6F9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.stWG	Setup.exe, 0000000C.00000003.1800192066.0000000002ECC000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 0000000C.00000003.1806443891.0000000002ED2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://pcapp.store/tWt	PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/guidw=	PcAppStore.exe, 00000019.00000003.2137757222.00000243DD74A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD749000.00000004.00000020.00020000.00000000.sdmp	false		high
https://repository.pcapp.store/ore//search-menu/?a=getTemplate&p	PcAppStore.exe, 00000019.00000002.2526219866.00000243DE62E000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2319072939.00000243DE62E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//src/app/appWidget.jsf%e	PcAppStore.exe, 00000019.00000003.2073603926.00000243DE734000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2052272122.00000243DE737000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//images/front_img/appstore-settings/index_5/hng-	PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270482790.00000243DE5E4000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/cpg_fa.php?guid=An	nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000000.1893065239.00007FF70087F000.00000002.00000001.01000000.0000001A.sdmp	false		high
https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73326_663e2383827ed.jpg?$	PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp	false		high
https://chrome.google.com/webstore/	PcAppStore.exe, 00000019.00000003.2040442382.00000243DE5BE000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2270083154.00000243DE5BA000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5BB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2039583664.00000243DE5BC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/api/pcapp_engine.php?a=config&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=	PcAppStore.exe, 00000019.00000003.2221017078.00000243DB147000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.1982164733.00000243DD720000.00000004.00000020.00020000.00000000.sdmp	false		high
https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73401_66684ff6b31a4.pngq	PcAppStore.exe, 00000019.00000003.2261345837.00000243DE6DE000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001gm5	PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2123911042.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE61B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//src/app/appMenuStore.jsh4jF	PcAppStore.exe, 00000019.00000003.2319072939.00000243DE5F1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2265540745.00000243DE5D7000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//app	PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6F3000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73398_66603950c621c.pngjADG	PcAppStore.exe, 00000019.00000003.2213964788.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2194018725.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2161017609.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2480513979.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2175532802.00000243DD764000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//src/app/appOffer.jsY_t	PcAppStore.exe, 00000019.00000003.2185124662.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2153457505.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2200980611.00000243DE642000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2169735497.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//srceed	PcAppStore.exe, 00000019.00000003.2052272122.00000243DE680000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g?	PcAppStore.exe, 00000019.00000002.2480513979.00000243DD680000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/images/front_img/appstore-menu/index_12/icon_search_write_right.pnghtm	PcAppStore.exe, 00000019.00000003.2323036588.00000243DE5C0000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2327275875.00000243DE5C1000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2517775813.00000243DE5BB000.00000004.00000020.00020000.00000000.sdmp	false		high
https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73400_666176fb273fb.png:Y	PcAppStore.exe, 00000019.00000003.2218340000.00000243DE640000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2106075584.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2310530511.00000243DE641000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2065801109.00000243DE63A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2199349275.00000243DE63F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//src/app/appMenuStore.jsy	PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6E7000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/3D06C8D42E9E79s	PcAppStore.exe, 00000019.00000003.2040442382.00000243DE5BE000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/hnd_c	PcAppStore.exe, 00000019.00000003.2194018725.00000243DD706000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD700000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD708000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD708000.00000004.00000020.00020000.00000000.sdmp	false		high
https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73424_66a3b3e271152.pngjson	PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//appstore-menu/607144	PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/pXjIim	PcAppStore.exe, 00000019.00000003.2255293270.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//src/app/appWindow.js4Qw/u	PcAppStore.exe, 00000019.00000002.2531109155.00000243DE641000.00000004.00000020.00020000.00000000.sdmp	false		high
https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73326_663e2383827ed.jpgype	PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//src/app/appSearchMenu.js0	PcAppStore.exe, 00000019.00000002.2480513979.00000243DD6E7000.00000004.00000020.00020000.00000000.sdmp	false		high
https://repcdn.pcapp.store/pcapp/images/3rdparty/application/images/apps_73406_6671309e0b993.pngtml	PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2255293270.00000243DD771000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2311918504.00000243DE6D1000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/images/front_img/appstore-menu/index_12/icon_search_write_right.pngR	PcAppStore.exe, 00000019.00000003.2316173992.00000243DE8EB000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2559138153.00000243DE8F4000.00000004.00000020.00020000.00000000.sdmp	false		high
https://delivery.pcapp.store/download.php?&src=mini_installer&file=1&mini_ver=ersion=fa.2001g&src=pc	Setup.exe, 0000000C.00000002.1849044659.0000000000436000.00000004.00000001.01000000.0000000B.sdmp	false	Avira URL Cloud: safe	unknown
https://pcapp.store//src/app/appMenuStore.js06b	PcAppStore.exe, 00000019.00000003.2319072939.00000243DE623000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000002.2526219866.00000243DE623000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//images/front_img/appstore-settings/index_5/icon_check.pngight.png621c.png	PcAppStore.exe, 00000019.00000002.2544975001.00000243DE6DF000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/yMy8A5	PcAppStore.exe, 00000019.00000003.2255293270.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2241778546.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2213964788.00000243DD76B000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2090395532.00000243DD73C000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2137757222.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp, PcAppStore.exe, 00000019.00000003.2303670890.00000243DD76A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store//src/app/appStore.jswGgoNC	PcAppStore.exe, 00000019.00000002.2556135345.00000243DE73A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/fa_version.php?guid=%ws&res=link&nocache=%d	nsgC284.tmp, 00000017.00000002.1906161066.0000000002A6F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/es	nsgC284.tmp, 00000017.00000002.1914130327.00000000039D3000.00000004.00000020.00020000.00000000.sdmp	false		high
https://pcapp.store/XMgMAo	PcAppStore.exe, 00000019.00000003.2218492823.00000243DE6F1000.00000004.00000020.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.78	google.com	United States	15169	GOOGLEUS	false
18.173.205.91	d74queuslupub.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
207.246.91.177	pcapp.store	United States	20473	AS-CHOOPAUS	false
74.125.206.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
162.159.61.3	unknown	United States	13335	CLOUDFLARENETUS	false
147.182.211.77	ev.pcapp.store	United States	27555	BV-PUBLIC-ASNUS	false
159.223.101.159	unknown	United States	46118	CELANESE-US	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
172.64.41.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false
104.248.126.225	unknown	United States	14061	DIGITALOCEAN-ASNUS	false
142.250.185.66	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.34	td.doubleclick.net	United States	15169	GOOGLEUS	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
195.181.170.18	unknown	United Kingdom	60068	CDN77GB	false
79.127.206.234	unknown	Czech Republic	9080	GINCzechRepublicEUCZ	false
167.99.235.203	unknown	United States	14061	DIGITALOCEAN-ASNUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
212.102.56.178	unknown	Italy	60068	CDN77GB	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
37.19.194.80	1715720427.rsc.cdn77.org	Ukraine	31343	INTERTELECOMUA	false
169.150.255.184	1645886859.rsc.cdn77.org	United States	2711	SPIRITTEL-ASUS	false
169.150.255.181	1285660440.rsc.cdn77.org	United States	2711	SPIRITTEL-ASUS	false
142.250.185.98	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.17
192.168.2.24

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1583304
Start date and time:	2025-01-02 12:14:27 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	46
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	1
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	Setup.exe.7z
Detection:	MAL
Classification:	mal64.spyw.evad.mine.win7Z@48/287@45/25
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 2 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, audiodg.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 4.175.87.197, 192.229.221.95, 2.22.50.144, 13.85.23.206, 40.69.42.241, 142.250.185.206, 173.194.76.84, 142.250.186.35, 142.250.185.174, 142.250.186.170, 142.250.184.227, 142.250.181.232, 142.250.185.110, 142.250.185.168, 142.250.185.238, 172.217.16.206, 13.107.42.16, 142.250.184.234, 142.250.181.227, 172.217.18.110, 142.250.186.163, 142.250.181.238, 34.104.35.123, 142.250.186.174, 172.217.23.110, 142.251.32.99, 142.250.65.195, 184.28.90.27, 40.126.32.138, 13.107.5.88, 2.23.209.150
Excluded domains from analysis (whitelisted): config.edge.skype.com.trafficmanager.net, slscr.update.microsoft.com, clientservices.googleapis.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, login.live.com, www.googletagmanager.com, config-edge-skype.l-0007.l-msedge.net, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, l-0007.l-msedge.net, config.edge.skype.com, glb.sls.prod.dcat.dsp.trafficmanager.net, www.bing.com, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, fonts.gstatic.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, l-0007.config.skype.com, evoke-windowsservices-tas.msedge.net, clients.l.google.com
Execution Graph export aborted for target msedgewebview2.exe, PID 3848 because it is empty
Execution Graph export aborted for target msedgewebview2.exe, PID 4860 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtEnumerateValueKey calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
06:14:59	API Interceptor	1x Sleep call for process: OpenWith.exe modified
06:16:16	API Interceptor	518x Sleep call for process: Watchdog.exe modified
06:16:17	API Interceptor	220x Sleep call for process: explorer.exe modified
06:16:31	API Interceptor	1x Sleep call for process: PcAppStore.exe modified

LLM Input / Output

Input	Output
URL: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://pcapp.store Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://pcapp.store
URL: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We're done, it's in your Start Menu", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Model: Joe Sandbox AI	{ "brands": [ "PC App Store" ] }
	{ "brands": [ "PC App Store" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
162.159.61.3	over.ps1	Get hash	malicious	Vidar	Browse
	MJhe4xWsnR.msi	Get hash	malicious	Unknown	Browse
	MJhe4xWsnR.msi	Get hash	malicious	Unknown	Browse
	6684V5n83w.exe	Get hash	malicious	Vidar	Browse
	Bp4LoSXw83.lnk	Get hash	malicious	Unknown	Browse
	BHgwhz3lGN.exe	Get hash	malicious	Vidar	Browse
	sysmonconfig.xml	Get hash	malicious	Unknown	Browse
	Tool_Unlock_v1.2.exe	Get hash	malicious	Vidar	Browse
	FLKCAS1DzH.bat	Get hash	malicious	Unknown	Browse
	T4qO1i2Jav.exe	Get hash	malicious	LummaC Stealer	Browse
18.173.205.91	Setup.exe	Get hash	malicious	Unknown	Browse
	https://desertgarprodentalbdenmontessori.sharefile.com/public/share/web-sc0171e76f26940ab83813f90c639bcc9	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	https://premierbb.sharefile.com/public/share/web-189361297164461c	Get hash	malicious	EvilProxy, HTMLPhisher	Browse
	https://u1404228.ct.sendgrid.net/ls/click?upn=u001.53NsXfgUBOeYzK87Mt8UmmFmJrZ7XUeaM2H1JJzIOlLD8XdRMGUjLjiETSkkNSOO1aPcOhsB-2B6p58337PPTvLBJHf93ZwdhKuc0pYJ3CCFhPzGYkRFXax0jGvIeRFmcP5G0BUyJ6YhdCuxj2rmKfEA3sfYg2UNxl72w1Me3oPfdrF6jbhGk315PA9TABMIUQaw-2BWiKWUThNlxL-2FiIJdoH5tiTQT-2Bm8o6f2DtPJqJqYyOmKsC6Z8r8BDMH-2BRyR0DPAbc1o4jsJAeLDJ31LwWjsFQYr3zFK5cIf8Mbd-2BRzOeXFDSMm6es3Y0fepvpPG5r7pfagssMFSYnyu8MHsVv5hRcIKJqjAZyLx1ckeV-2FaCznPfw8naJb82iSt3TNueNL1vH7DevWmKVRPxk4wZ5wzTJXKbWW9anlXuh-2BQXFzp8R8-2BdEEizEjCv3UcDuHMQ1pDH865wy4DUZnYMpZjJQJPawcQswhgRnWgvPzhIRyQE-2Bc-3DkIeO_CR4Iv1KReyG-2BUTiHEM2iSrmxUTGCd7nll-2F8pyW4fRHUIiL68JldL5hjEvlqIxpWk9hPYxNH8eo9VRHfVERALBwpMyAhjDc4FUwScFs2ucRUabaJ73tdO-2FPebairfMf4xwZ2dpDlmkqO5pmgc1gE0gGghSpi3dDGJNhz4YymAGUOPzRzAYltzk0Ba7IAVZeXH7Jn8rume2KIoU57-2Fl62ae-2FaTXSu1TIVQ6Migf-2F6NGXqO6vztNaikiQe23mzDzfi19JJ-2FVN5j6ZPVhD34lLHzKpdiifzixAZur7VZCR5Hc24MfYQGTYVbJWBIhMdpT2lgG-2Bg-2FTIWWIZlY-2Fzm-2BK3i-2F0Q-3D-3D	Get hash	malicious	Unknown	Browse
207.246.91.177	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
147.182.211.77	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1645886859.rsc.cdn77.org	https://www.fsist.com.br	Get hash	malicious	Unknown	Browse	37.19.194.80
	https://pivotanimator.net/Download.php	Get hash	malicious	Unknown	Browse	212.102.56.179
	nso7806.exe	Get hash	malicious	Unknown	Browse	89.187.177.16
	MDE_File_Sample_ba40401128d2ff2734a7e554120b7de438870654.zip	Get hash	malicious	Unknown	Browse	37.19.206.5
	http://pcapp.store	Get hash	malicious	Unknown	Browse	195.181.170.19
	http://pcapp.store	Get hash	malicious	Unknown	Browse	195.181.175.40
	https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwj85-Cx0Pz-AhV5FVkFHezeDZcQFnoECCUQAQ&url=https%3A%2F%2Fwww.dltk-teach.com%2Frhymes%2Fmacdonald%2Fmlyrics.htm&usg=AOvVaw0mYQOAG6hFsIBU_fVcAryo	Get hash	malicious	Unknown	Browse	156.146.33.140
	https://pcapp.store/	Get hash	malicious	Unknown	Browse	195.181.170.19
	https://pcapp.store	Get hash	malicious	Unknown	Browse	138.199.20.248
chrome.cloudflare-dns.com	over.ps1	Get hash	malicious	Vidar	Browse	162.159.61.3
	MJhe4xWsnR.msi	Get hash	malicious	Unknown	Browse	162.159.61.3
	MJhe4xWsnR.msi	Get hash	malicious	Unknown	Browse	172.64.41.3
	6684V5n83w.exe	Get hash	malicious	Vidar	Browse	162.159.61.3
	Bp4LoSXw83.lnk	Get hash	malicious	Unknown	Browse	172.64.41.3
	BHgwhz3lGN.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	sysmonconfig.xml	Get hash	malicious	Unknown	Browse	172.64.41.3
	Tool_Unlock_v1.2.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	FLKCAS1DzH.bat	Get hash	malicious	Unknown	Browse	172.64.41.3
	JA7cOAGHym.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
1715720427.rsc.cdn77.org	Setup.exe (1).zip	Get hash	malicious	Unknown	Browse	79.127.138.14
	Setup.exe	Get hash	malicious	Unknown	Browse	207.211.211.27
	SetupEngine.exe	Get hash	malicious	Unknown	Browse	207.211.211.27
	https://veryfast.io	Get hash	malicious	Unknown	Browse	169.150.255.183
	https://veryfast.io	Get hash	malicious	Unknown	Browse	195.181.170.18
	Setup.exe	Get hash	malicious	Unknown	Browse	195.181.170.18
	tKr6T60C1r.exe	Get hash	malicious	Unknown	Browse	207.211.211.27
	https://pivotanimator.net/Download.php	Get hash	malicious	Unknown	Browse	156.146.33.14
	Setup.exe	Get hash	malicious	Unknown	Browse	138.199.37.37
	Setup (1).exe	Get hash	malicious	Unknown	Browse	195.181.170.19

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MIT-GATEWAYSUS	https://tr171139818.amoliani.com/c/mm14r39/e-v_xxa-/imz77nt3nps	Get hash	malicious	Unknown	Browse	18.66.102.51
	Hilix.m68k.elf	Get hash	malicious	Mirai	Browse	19.163.152.168
	armv7l.elf	Get hash	malicious	Unknown	Browse	19.202.146.225
	armv4l.elf	Get hash	malicious	Unknown	Browse	19.139.236.143
	https://bitl.to/3Y0B	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	18.66.147.49
	loligang.sh4.elf	Get hash	malicious	Mirai	Browse	19.113.215.117
	loligang.mips.elf	Get hash	malicious	Mirai	Browse	18.28.227.234
	loligang.ppc.elf	Get hash	malicious	Mirai	Browse	18.121.92.187
	loligang.x86.elf	Get hash	malicious	Mirai	Browse	18.20.161.29
	http://tracking.b2bmktvault.com/tracking/click?d=qPk_c18mu4tAnpVkjkvM74XnWEgCEJFMr0kmnRaZVETZIbfUm-V7axMnjqAoCLnqzaVyNRK36FUkPva8vnzGVvH9cqu1JpLb-vxN3FkjjYhK51_3JrkS14Hcuqb1FOJE1bnSPADYUAMl8knPwYz7btXcOUX9DY4_AjytTbLRGEQ0R8vUhh6vaa-KBtd0YdWGVJFQli_mKczqrYpzYk33dCMwBXQR8R8u2JajJsC51OFcIlRSs_l3i1d9MQf5ZYWuxV_Ytx1pTi2iUY6P97JH0U81	Get hash	malicious	Unknown	Browse	18.172.112.78
CLOUDFLARENETUS	http://www.johnlewis-partnerships.com	Get hash	malicious	Unknown	Browse	104.18.43.2
	https://gldkzr-lpqw.buzz/script/ut.js?cb%5C=1735764124690	Get hash	malicious	Unknown	Browse	104.21.0.170
	1.ps1	Get hash	malicious	CobaltStrike, Metasploit	Browse	104.21.96.1
	random(4).exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.129.178
	inv#12180.exe	Get hash	malicious	FormBook	Browse	172.67.182.198
	dGhlYXB0Z3JvdXA=-free.exe	Get hash	malicious	Unknown	Browse	188.114.97.3
	dGhlYXB0Z3JvdXA=-free.exe	Get hash	malicious	Unknown	Browse	188.114.97.3
	176.113.115.170.ps1	Get hash	malicious	LummaC	Browse	172.67.157.254
	CRf9KBk4ra.exe	Get hash	malicious	DCRat	Browse	172.67.19.24
	http://www.rr8844.com	Get hash	malicious	Unknown	Browse	188.114.96.3
BV-PUBLIC-ASNUS	telnet.arm.elf	Get hash	malicious	Unknown	Browse	147.183.60.227
	jew.arm7.elf	Get hash	malicious	Mirai	Browse	147.182.242.33
	https://nahud.com/mailwizz-2.2.7/latest/index.php/campaigns/jm929ck1nc903/track-url/wh75022djq6fe/88db1e075fc0ca4d21e7c4fe4c14b76f34a46190	Get hash	malicious	Unknown	Browse	147.182.192.12
	botx.spc.elf	Get hash	malicious	Mirai	Browse	147.182.217.57
	pjyhwsdgkl.elf	Get hash	malicious	Unknown	Browse	147.182.254.38
	loligang.arm7.elf	Get hash	malicious	Mirai	Browse	147.182.230.49
	Setup.exe	Get hash	malicious	Unknown	Browse	147.182.211.77
	Setup.exe	Get hash	malicious	Unknown	Browse	147.182.211.77
	Setup.exe	Get hash	malicious	Unknown	Browse	147.182.211.77
	botnet.spc.elf	Get hash	malicious	Mirai, Moobot	Browse	147.182.229.60
AS-CHOOPAUS	Hilix.x86.elf	Get hash	malicious	Mirai	Browse	45.63.53.202
	Hilix.mips.elf	Get hash	malicious	Mirai	Browse	45.63.53.238
	kJsfHgzi7N.exe	Get hash	malicious	XWorm	Browse	192.248.185.253
	DF2.exe	Get hash	malicious	Unknown	Browse	192.248.182.81
	setup.msi	Get hash	malicious	Unknown	Browse	45.77.249.79
	http://parrottalks.info	Get hash	malicious	Unknown	Browse	149.28.124.84
	botx.mips.elf	Get hash	malicious	Mirai	Browse	149.253.144.7
	db0fa4b8db0333367e9bda3ab68b8042.x86.elf	Get hash	malicious	Mirai, Gafgyt	Browse	78.141.232.165
	3OQL58yflv.exe	Get hash	malicious	Metasploit	Browse	202.182.125.24
	armv5l.elf	Get hash	malicious	Unknown	Browse	44.174.62.96

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	176.113.115.170.ps1	Get hash	malicious	LummaC	Browse	207.246.91.177 147.182.211.77
	ETVk1yP43q.exe	Get hash	malicious	AZORult	Browse	207.246.91.177 147.182.211.77
	UhsjR3ZFTD.exe	Get hash	malicious	LummaC	Browse	207.246.91.177 147.182.211.77
	KRNL.exe	Get hash	malicious	LummaC	Browse	207.246.91.177 147.182.211.77
	Setup.exe	Get hash	malicious	LummaC	Browse	207.246.91.177 147.182.211.77
	SET_UP.exe	Get hash	malicious	LummaC	Browse	207.246.91.177 147.182.211.77
	web44.mp4.hta	Get hash	malicious	LummaC	Browse	207.246.91.177 147.182.211.77
	Setup.exe	Get hash	malicious	LummaC	Browse	207.246.91.177 147.182.211.77
	qnUFsmyxMm.exe	Get hash	malicious	LummaC	Browse	207.246.91.177 147.182.211.77
	Gz1bBIg2Tw.exe	Get hash	malicious	LummaC	Browse	207.246.91.177 147.182.211.77
37f463bf4616ecd445d4a1937da06e19	45631.exe	Get hash	malicious	Nitol	Browse	195.181.170.18 18.173.205.91 207.246.91.177 169.150.255.181
	45631.exe	Get hash	malicious	Unknown	Browse	195.181.170.18 18.173.205.91 207.246.91.177 169.150.255.181
	1734098836319.exe	Get hash	malicious	BlackMoon	Browse	195.181.170.18 18.173.205.91 207.246.91.177 169.150.255.181
	ETVk1yP43q.exe	Get hash	malicious	AZORult	Browse	195.181.170.18 18.173.205.91 207.246.91.177 169.150.255.181
	16oApcahEa.exe	Get hash	malicious	Babuk, Djvu	Browse	195.181.170.18 18.173.205.91 207.246.91.177 169.150.255.181
	6a7e35.msi	Get hash	malicious	Unknown	Browse	195.181.170.18 18.173.205.91 207.246.91.177 169.150.255.181
	ipmsg5.6.18_installer.exe	Get hash	malicious	Unknown	Browse	195.181.170.18 18.173.205.91 207.246.91.177 169.150.255.181
	OXoeX1Ii3x.exe	Get hash	malicious	Unknown	Browse	195.181.170.18 18.173.205.91 207.246.91.177 169.150.255.181
	OXoeX1Ii3x.exe	Get hash	malicious	Unknown	Browse	195.181.170.18 18.173.205.91 207.246.91.177 169.150.255.181
	0000000000000000.exe	Get hash	malicious	Nitol	Browse	195.181.170.18 18.173.205.91 207.246.91.177 169.150.255.181

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\nsbD001.tmp\Math.dll	Setup.exe (1).zip	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	2278
Entropy (8bit):	3.8426106390212933
Encrypted:	false
SSDEEP:	48:uiTrlKxrgxvqxl9Il8u6DGEXR50wfX+YPE5d1rc:mbYYDGXwfX+YMa
MD5:	AC81CD11E3CFD128465B75271CA1D5DC
SHA1:	72AD2F3B0FAE401B9AD4295CCE22DFCEB29DC813
SHA-256:	28773D4C24AF5755240795900B342E19C4F29A39B06392E6C0DD1DC35E708C9C
SHA-512:	DBC443F21ABE3512AD14F64D81A53F2AB1C942CBF6402449754E546561C2468D2C3C1F32052F7AD2FF0BB917D301F6FAE63C30C9D0E14B5120170E9902A7A526
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".W.i.p.w.W.M.+.N.H.l.b.C.D.m.s.Z.p.8.S.O.s.j.h.t.F.B.s.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.B.C.g.K.B.B.d.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.P.N.T.q.7.e.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	2684
Entropy (8bit):	3.898771579149913
Encrypted:	false
SSDEEP:	48:uiTrlKx68Wa7xeJxl9Il8uSaz+yTjvNJ+mHq2erD6lSxf5JWwXd/vc:a0Yrl3v73q2eriSJ5kwi
MD5:	732F5AC74AEA1213DDAA4BE6A1CCE2B1
SHA1:	2995431D37BC86A1D36C7E6B85990CACE32D6E97
SHA-256:	5974F1FF30E7C59FD090D9C0E2D6B7E14A8BD9EE6C51DEB5033865405C1F3D0D
SHA-512:	26AE69DA9CFF014D41E04BBE4BFB9C6B6F096607ADB1F1043F4E367A75F57BAE360A775B5CD76E2B69056D13F813BE690D78705FDAC7C6354ED9A631F85FE933
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".6.N.3.U.y.9.n.A.U.E.q.s.5.u.9.6.E./.o.g.0.E./.V.J.A.g.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".B.G.3./.P.9.l.7.3.A.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.P.N.T.q.7.e.

C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000018.db

Download File

Process:	C:\Windows\explorer.exe
File Type:	data
Category:	dropped
Size (bytes):	112680
Entropy (8bit):	4.024240577879958
Encrypted:	false
SSDEEP:	768:4lkXkVGjwYaFRjk0DCkKAUB0NXLtcoQQpjQZwq0fR1v4ETqk7mGypme2p3kRhvmi:LkdYTkKzBYC1hei5GtnptnF7KiBE
MD5:	E664A77D83202E3E9DAECEDFA71890C2
SHA1:	C560CEEAAE3759573FDCF4A9C5450EF2F87D162B
SHA-256:	246D08E34E618AB2CE9BE173C72916EBF8C5A68AB3F6661E9B3D9C8BBF78DD6D
SHA-512:	BA9ADA7FE23CEAF9C3E6FBE030C75BDF339874231C9DED0E7BD9E382D92062411E49015C9590D20137E2199E831AB192B894B4A1D2783C6E1D3E5C78E0550D93
Malicious:	false
Preview:	....h... ...(...x.......P...........x..._.......d...h...................].......e.n.-.C.H.;.e.n.-.G.B..............................P.O. .:i.....+00.../C:\...................P.1...........Users.<............................................U.s.e.r.s.....T.1...........user..>............................................t.o.r.r.e.s.....V.1...........AppData.@............................................A.p.p.D.a.t.a.....V.1...........Roaming.@............................................R.o.a.m.i.n.g.....\.1...........Microsoft.D............................................M.i.c.r.o.s.o.f.t.....V.1...........Windows.@............................................W.i.n.d.o.w.s.....`.1...........Start Menu..F............................................S.t.a.r.t. .M.e.n.u......................(..........P.O. .:i.....+00.../C:\...................P.1...........Users.<............................................U.s.e.r.s.....T.1...........user..>...........................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\apps_73377_663ce6da92b28[1].jpg

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 249x126, components 3
Category:	dropped
Size (bytes):	83447
Entropy (8bit):	7.92494577174252
Encrypted:	false
SSDEEP:	1536:Gjy/rCbBBlD7TXDITSFPtUI6JWB8E2F3c0WfHvr5b8t5iHdizi:01/TkT+D6rRFM0WvD5bC5iHR
MD5:	EE755B13ADEABA5325E4A1686ECCB9E7
SHA1:	83E0D8420118A8398A066D78854BA667FB46D2D2
SHA-256:	73C44811E9DF68994B11A1D6BAB09E74934CA20BD545E66701329608DE1E4560
SHA-512:	4BF3F7619BE80B88DF95A4C01084FE2DA585B85976F629110B1682D2A75001D6587A801B55D5FA98BA486FBE97617697706C7896DD9D5A5C9EEA8853F1FFC24F
Malicious:	false
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................~.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...~.z..=.Px....\|v...6.........G...(.]GO..luH....O.to.^..R..;......>"..kR.G).V.nq...Rq.(.\........F.~.g..q'..{...<...s_.3zjt.8.c_.eyL.'B.<-WW%.]\|.......a.b!Nr..,E......%..y.x.].n.A.iz..em....X...7ht.X<C.....h1\. .}fMCD{{+K.e."k(\|.....(..Q...g...:u(.._...R..('.#....f....:.5.<-..i.y>w.5.\|5...>2UV....y...5.M....a.J5......m.O.#.....f.4-wZ.m..Z.[.<..{g.Y..........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\apps_73400_666176fb273fb[1].png

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	PNG image data, 480 x 280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	234721
Entropy (8bit):	7.992429568773012
Encrypted:	true
SSDEEP:	6144:eSKMqLNOUdDiS6vu8iWZD79tsZeFQciqVPWQHpapu:0hLV8upETFQVqVPHpaM
MD5:	A28214A3689AFB5B8EB74B788525A33F
SHA1:	AA407E609E657E432FBB16F0506AC8D26AE85BA1
SHA-256:	A920AF2D91C52CE95238E1A9C3DE6B888C59FB0204806DF8F080DAE6C6D96628
SHA-512:	7634375146B30BC504DC60E02DED259B79EC7A3A60A7DCF36743631E411CF2D9A9529C67B31A731872667A7CAF76F3D2F7D4BB9AB6D92DA9CA5D987AA3B57865
Malicious:	false
Preview:	.PNG........IHDR...............%.....pHYs.................IDATx.\|.w.d[v.............}w..@7.. ...@Q......8.iI....H....h..a..@..~m..U......>#2.5..wN.G.....D...6...>....b.}.#.cp....N.......l....,4....{\|.\...a......".u.{.B....s`.`.b.D....y....f.\.R.Q.Q.....!.R....u...<O..Z...\w...>o...s&.....(U..~...j..z..&`s.R!...w..\|x........Q.l........P...].Jk^n..}...Y.KW...3....s.@5.......4......).......e..=3.z..ln....:.."..?...9.'../..k%..O................}.N....j....f`{....@_/.._..7._.k.....0;........?..u....._..8x.V6.+..o.;...#.....2....ex..........#...r.....:..g..."....Z]......)(.@.h..H..C.b....2...L..4\..6...)..V. ."s=.y{..i/.8./a.}.E.S...+.]..^xp.VV..Q(.C.b..#Y..%7....`.....s..r..z......h.....E..;.J{..........Y.(I.z.0.@{qr......Q..b..Tw........%.q..5..g?...0;.k.....=.....7..v..]0....ryx...m....N.......i.].[w..n.....}l... ....7%.^..52..3>...W6.}.._\|I...W.U./\|.....^.L.<_.l.a`....iMb`g.rY...t..\..-..B.#..Hs..Ioy@i..W..!...81,..Yw*.....=lI....l.<.5..X.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\icon_check[1].png

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	PNG image data, 21 x 17, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	314
Entropy (8bit):	6.436194254572056
Encrypted:	false
SSDEEP:	6:6v/lhPKYen3P5iTh84kt+lMyBbZkBFKUixbB6qQLRAbI1roVp:6v/7yP/5ohpLsFKUSb+y8o7
MD5:	3A3135420B1F7EE409515017EDBD56EE
SHA1:	7DFC6BC492645181F9FECC966BE6D48A47A0BD38
SHA-256:	535F2E3D527823E7A9A1C75F8F205B1B6C43BF6445DFA6CA56DF7D8DD12AFBDB
SHA-512:	A9C387383EF0A24BBA1B7E31F352D334BD15EE6D8C7D0EA6D2C0B85DFC2F2886EFFBFFE77B5FDB2C27D8374887C15B28DC60408671B982C313678B2D572CF26C
Malicious:	false
Preview:	.PNG........IHDR..............X.....ZPLTE...0..@..0..8..0..5..4..6..6..8..5..8..7..6..6..6..6..5..5..7..6..4..5..5..6..6..5..6..6..5X.g....tRNS... 00@PP_``p.....................rIDAT..u.Y.. ......5.E................c....b....(...9...".7M.X.UDq...gJ:....uW.^h.u....i.H....[."..Oi..y../...v.f......IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\icon_search_write_right[1].png

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	322
Entropy (8bit):	6.7841964696720645
Encrypted:	false
SSDEEP:	6:6v/lhP6+k2/6TsR/nb1Qy878gDETdgG5wmdSDjda9muJNLiRlVp:6v/7n/6Ts/nb1QyJISd5BYDha9ZKRl7
MD5:	24388A494BAEC90D9EF6EAB6E28515B7
SHA1:	8C56A9FD3EDADA619639DD8E6F572E8BA3FAC268
SHA-256:	F5094981B78535EE74C4F5001BF8350B9086EFAAE28AE05605408BC3F1820BBB
SHA-512:	0764D6C90628E28AC72EDC278F102F8457BEBABDB3977B9888A8D653A64E45D23E2C45530A8DED4F2E9A5CFE8FCEFBF5D62E237F49CB6AF6CFC414126B2BA42D
Malicious:	false
Preview:	.PNG........IHDR.............;mG.....pHYs.................sRGB.........gAMA......a.....IDATx...... .E.S..$....Z..P$..$L...u.....#......K~.p...^.28....2..5.$..M..,.N,.`...5..Y$..gH..(..H......~..E.D....C.&.S=WV.2yP."4."..z..6.nC...........K..<. ......@..-.g.C...i]..q.../.xH2B...W."+..'..K....{....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\in_background_auto_update_img[1].htm

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	162
Entropy (8bit):	4.43530643106624
Encrypted:	false
SSDEEP:	3:qVoB3tUROGclXqyvXboAcMBXqWSZUXqXlIVLLP61IwcWWGu:q43tISl6kXiMIWSU6XlI5LP8IpfGu
MD5:	4F8E702CC244EC5D4DE32740C0ECBD97
SHA1:	3ADB1F02D5B6054DE0046E367C1D687B6CDF7AFF
SHA-256:	9E17CB15DD75BBBD5DBB984EDA674863C3B10AB72613CF8A39A00C3E11A8492A
SHA-512:	21047FEA5269FEE75A2A187AA09316519E35068CB2F2F76CFAF371E5224445E9D5C98497BD76FB9608D2B73E9DAC1A3F5BFADFDC4623C479D53ECF93D81D3C9F
Malicious:	false
Preview:	<html>..<head><title>301 Moved Permanently</title></head>..<body>..<center><h1>301 Moved Permanently</h1></center>..<hr><center>nginx</center>..</body>..</html>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\logo-light[1].svg

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3133
Entropy (8bit):	4.812749338362716
Encrypted:	false
SSDEEP:	48:ffemGUFL7emGUUFgahZFgah2L7n2cLWxlCBHtaAcwH4MHrrwe4MH+BjXkE:nemDNemDUFgahZFgah6BwQlc
MD5:	B99EA1348ED2A5B6F3A5A651B4750BD4
SHA1:	2F831AB906DF76FB5C54D112C9703CA7F483CCA0
SHA-256:	559CA1FE097385EF0F486B85A4DB8E0A1D024FEB3A7D277B69B2DF75ECBBC138
SHA-512:	CC03F25F90B955696CE9C0A07477F16566E013F97FCA7090C2C70D059C167154241DEBA75C2AFEA180E9EA786EA4AB29A1CC5B71126C7762DB6D78892AA83C47
Malicious:	false
Preview:	<svg width="90" height="90" viewBox="0 0 90 90" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M0 32C0 20.7989 0 15.1984 2.17987 10.9202C4.09734 7.15695 7.15695 4.09734 10.9202 2.17987C15.1984 0 20.799 0 32 0H58C69.201 0 74.8016 0 79.0798 2.17987C82.843 4.09734 85.9027 7.15695 87.8201 10.9202C90 15.1984 90 20.799 90 32V58C90 69.201 90 74.8016 87.8201 79.0798C85.9027 82.843 82.843 85.9027 79.0798 87.8201C74.8016 90 69.201 90 58 90H32C20.7989 90 15.1984 90 10.9202 87.8201C7.15695 85.9027 4.09734 82.843 2.17987 79.0798C0 74.8016 0 69.201 0 58V32Z" fill="url(#paint0_linear_2080_831)"/>.<path d="M0 32C0 20.7989 0 15.1984 2.17987 10.9202C4.09734 7.15695 7.15695 4.09734 10.9202 2.17987C15.1984 0 20.799 0 32 0H58C69.201 0 74.8016 0 79.0798 2.17987C82.843 4.09734 85.9027 7.15695 87.8201 10.9202C90 15.1984 90 20.799 90 32V58C90 69.201 90 74.8016 87.8201 79.0798C85.9027 82.843 82.843 85.9027 79.0798 87.8201C74.8016 90 69.201 90 58 90H32C20.7989 90 15.1984 90 10.9202 87.8201C7.15695 85.9

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\p[1].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\p[2].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\p[3].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\p[4].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\p[5].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\p[6].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\p[7].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\p[8].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\96LGQ1XY\apps_73394_663ce7758e4ec[1].jpg

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 249x126, components 3
Category:	dropped
Size (bytes):	62594
Entropy (8bit):	7.939956103030076
Encrypted:	false
SSDEEP:	1536:GhjJWGScRQyIyfcYTyTNZX4qisc/pllMeEux+yfY:0j/niyXp4AZsIpZH+QY
MD5:	99024BC9D17BC0EE957CD439108C1EBE
SHA1:	CFE3AB7FBBC95FB9B2F8375CFF71D12972348ED9
SHA-256:	5A696B7A31275BC467B10590141C3B70D0A3B3ECAAFE122109AA55140014C78D
SHA-512:	B5B5218E35208B022A99E4DFC6A1E44A97A1F2F85EDABFF56ECECE42F233AEF4F3E03A2A7FF9FDB384C784B7D8AFF6A2F062D2576077F45F64D085880188BA78
Malicious:	false
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................~.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....^.......[.mV.5.....HF.Mo..{&.Z....;".Y.<,jI.:..<...EZ.I[M.N.OM...9..mj..s...?.u.._.5.C......l..a..=.{.w.....&..f......N......#1.L.(..i.eX......a..[U.d....?z.a.>#..u.[K...]i.Y..2.)-"......Y.Ig..HQ.l..F.R&;...8.(...O.........p.`.d...j1..K.o/.......>+.X.4.I.u.O0.X....XEab...t..'uN...V>.........k....H?..,....+@.R.F....Y...K.-.v{..Bf.D'..........b1..F...v.G.+:2

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\96LGQ1XY\apps_73398_66603950c621c[1].png

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	PNG image data, 480 x 280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	183507
Entropy (8bit):	7.9938591241504
Encrypted:	true
SSDEEP:	3072:r/Usgc0QGoozmn0xiIga/8HFB8oaKA37CrdK2yWZxmgIYsdGnUWO6ybChCZEWxvG:DUjcFpoi0xi3lFqgHC8xmeabNiWMp
MD5:	2E7D8EB14E6BADEF25369EF05F04FFFC
SHA1:	6D371C63DE9B677EEAEA5A159FD49FAEFB2EA673
SHA-256:	48BF7FB003C70333C7A0AA9FF5A26146EF87FE0C301057DA76504EDEF82065F7
SHA-512:	FE288FF2CB68A12E552249D6D8A64D93882A68B5445F206995CABCA6A360871E84FA9C95E0A8CE09DC1B01E8ABD0BFE6AEC1BC86C1866648ED251784A7CC81AE
Malicious:	false
Preview:	.PNG........IHDR...............%.....pHYs................IDATx...y.m[~.}~s...}..6.o.{U%.$J.d..Lc....q%....w.....QHCT..pF.......8.G...c.16..F....P.........^.3...\k.....U..}.nV3.......?.OF.,.(.{........A@.\|]>?.x....t].T.....a..v.c..c.i.k.r.8.z.>`...8g..v;m.....+m^..00..=W.&.._.7.S..B..H....O..0..ljle!,.U..Hz......1.q...........>..&.9.......q:6Qt..=1B......}......kK.V....C.?....X.f[Q9...........u.Z9.G..]C.....3Q./..BXN/..o.....8=.....A8.;F.0rjT.......>..ch..S.c3.z......j..)B.".CG..U....~..8.{F.p..4.'...G.n......sOb.9...0.]?.@.:..Y..F..._.r."..Yy>.;.<M.c...g.x....#^}..w_\|.{{..9g.[.?..7../..._....-..U...?....t.}Q"1(......1FB..n.p..1.g.g.2t#}7...u.K..x.._.X.ME...Gb..v=...i...x\..o9.!F.....g-1.b...:.y..,.$..yY...$F.g.;(.3..2o.U_.w....mUei7..#...w..a.2....9J.w.....I..G.....@$.....6.>a...W......[~.{.....C.VT..SR..G....t.L.$-...Xa.<]"....t..Q..N.7n.G.T.c..a.p.3.@]+..k..D......!".!`...%...q..!b.....r.a..f..HQ.U.+y..k.8U7.I.G.1D.1.....`)d....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\96LGQ1XY\apps_73406_6671309e0b993[1].png

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	PNG image data, 480 x 280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	187314
Entropy (8bit):	7.973332127753762
Encrypted:	false
SSDEEP:	3072:CiJXRzh6W7i2W1csgVhygjkbrPeVW4W3KdTrvC2cabjwFiWtB/QlQFYq2GAybdUL:CiJXRzsW7yc9yYgv+nt/iiWv/HAy5qFN
MD5:	F5C3741BFB4B535D69765D82350ECDEA
SHA1:	AFC0D990DF50142B19C15F77CD9817C222A47D48
SHA-256:	D15B3FDB00818B6590D59E48A08B5BF76B30ED0355261942F7A64308A6F035A1
SHA-512:	387A2C0D1C751C19FA1E0FD810EC8AE1E0EB29AAF04535D3553294F3DB462B40D04A48A44192EE5D01BE0C5858A4F17020DFE75DFC61B4BC72014063A0AD1C4E
Malicious:	false
Preview:	.PNG........IHDR...............%...4rcaBX..4rjumb....jumdc2pa.........8.q.c2pa...4Ljumb...Mjumdc2ma.........8.q.adobe:urn:uuid:46d7b01a-2d78-42c3-8710-ba291b2c91df.....jumb...)jumdc2as.........8.q.c2pa.assertions.....jumb...&jumdcbor.........8.q.c2pa.actions.....cbor.gactions..factionkc2pa.editedmsoftwareAgentmAdobe FireflyqdigitalSourceTypexShttp://cv.iptc.org/newscodes/digitalsourcetype/compositeWithTrainedAlgorithmicMedia....jumb...(jumdcbor.........8.q.c2pa.hash.data....{cbor.jexclusions..estart.!flength.4~dnamenjumbf manifestcalgfsha256dhashX .9..D..NK._W..b..P'.?z.4Jn.!M..cpadH...........4jumb...$jumdc2cl.........8.q.c2pa.claim.....cbor.hdc:titleoGenerated Imageidc:formatiimage/pngjinstanceIDx,xmp:iid:2fa5a26e-1966-45da-9bc3-57d19c5a4bbeoclaim_generatorx6Adobe Photoshop/25.9.0 adobe_c2pa/0.9.3 c2pa-rs/0.31.0tclaim_generator_info..dnameoAdobe Photoshopgversionf25.9.0ocom.adobe.buildx.20240428.m.2603 2d135fa win.isignaturex.self#jumbf=c2pa.signaturejassertions..curlx'self#jumbf=c2

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\96LGQ1XY\icon_check[1].htm

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	162
Entropy (8bit):	4.43530643106624
Encrypted:	false
SSDEEP:	3:qVoB3tUROGclXqyvXboAcMBXqWSZUXqXlIVLLP61IwcWWGu:q43tISl6kXiMIWSU6XlI5LP8IpfGu
MD5:	4F8E702CC244EC5D4DE32740C0ECBD97
SHA1:	3ADB1F02D5B6054DE0046E367C1D687B6CDF7AFF
SHA-256:	9E17CB15DD75BBBD5DBB984EDA674863C3B10AB72613CF8A39A00C3E11A8492A
SHA-512:	21047FEA5269FEE75A2A187AA09316519E35068CB2F2F76CFAF371E5224445E9D5C98497BD76FB9608D2B73E9DAC1A3F5BFADFDC4623C479D53ECF93D81D3C9F
Malicious:	false
Preview:	<html>..<head><title>301 Moved Permanently</title></head>..<body>..<center><h1>301 Moved Permanently</h1></center>..<hr><center>nginx</center>..</body>..</html>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\96LGQ1XY\in_background_auto_update_img[1].htm

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	162
Entropy (8bit):	4.43530643106624
Encrypted:	false
SSDEEP:	3:qVoB3tUROGclXqyvXboAcMBXqWSZUXqXlIVLLP61IwcWWGu:q43tISl6kXiMIWSU6XlI5LP8IpfGu
MD5:	4F8E702CC244EC5D4DE32740C0ECBD97
SHA1:	3ADB1F02D5B6054DE0046E367C1D687B6CDF7AFF
SHA-256:	9E17CB15DD75BBBD5DBB984EDA674863C3B10AB72613CF8A39A00C3E11A8492A
SHA-512:	21047FEA5269FEE75A2A187AA09316519E35068CB2F2F76CFAF371E5224445E9D5C98497BD76FB9608D2B73E9DAC1A3F5BFADFDC4623C479D53ECF93D81D3C9F
Malicious:	false
Preview:	<html>..<head><title>301 Moved Permanently</title></head>..<body>..<center><h1>301 Moved Permanently</h1></center>..<hr><center>nginx</center>..</body>..</html>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\96LGQ1XY\in_background_auto_update_img[1].png

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	PNG image data, 490 x 140, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11907
Entropy (8bit):	7.943848672567413
Encrypted:	false
SSDEEP:	192:zZR77SSlsXp7h9PKr6L1KJ9yRh/+AogjkisWttJkuzTCFvm9e4t4L6swiagy7EPZ:psV0e1j+AoGsWtxWqCJHHNi0
MD5:	35491E88F6F53FF50394C619887771B9
SHA1:	8A7E28EE13C14CB2238B9B43E40A626760E17A10
SHA-256:	C9AF01C7D48655AE50059734B8756F4AD6BBFA411C4A2238CE44E465F67CCB5C
SHA-512:	FFADC5E05FBBC604E472EEDA5784EA924C57E08E0A668DCA9849D45E5EE1324D7D8AA125F67A4EBEA8CCD7FF4ABA896D03FB117CE4D3595601FFA9806E87B0D4
Malicious:	false
Preview:	.PNG........IHDR....................JIDATx..}p..}.b......l.`...cp.p..$....M...$...6.I.o...i...N.f...L.G.M..8.f...0..,$1..........3.X....=.s........+..~f4..=.y?.w~..9.i.c.Q'..B.<2..'..B.."A-..B...j!..".HP.!..9F.Z.!..1..B.!D....B.!r....B..c$...B..#A-..B...j!..".HP.!..9F.Z.!..1..B.!D....B.!r....B..c$...B..#A-..B...j!..".HP.!..9F.Z.!..1..B.!D....B.!r....B..c$...B..#A-..B...j!..".HP.!..9F.Z.!..17...2........&wS.m..^..r..x......kC/9!..b..r..m... ..=.GA@g.j..7...I`.!..I..RP..y.k.....^....kCn.....wB.!..`...E.q9.}......q-7..z._Z\|.......T0o.....7...~......+.n....Y.q.+.5....IW.O..~o.....Y...].Y....v.....~w..{.../..?..g..y...?...x..g...'....zA...o...7o..........R......W)...k........._..[{....\|..?..?.Y..?......O.`.{<..j..dtt.......Q-...c_..S.Zz<G.R?.so.....H...}.I..o}....cuiy......_y.}...s---..O~5..g.wB.Q.......k..z@X.....t..._.qn.]w.A..D..<......@.,.=....>.v.u.{.....s...4..ou.>......7....o.-.X.Tz.......Y..?.G..'...r.......f.r...x..s./..9sJ.#t...'..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\96LGQ1XY\p[1].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\96LGQ1XY\p[2].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\96LGQ1XY\p[3].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\96LGQ1XY\p[4].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\96LGQ1XY\p[5].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\96LGQ1XY\p[6].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\96LGQ1XY\p[7].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\96LGQ1XY\p[8].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\96LGQ1XY\p[9].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\GO30WR0E\apps_73326_663e2383827ed[1].jpg

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 249x126, components 3
Category:	dropped
Size (bytes):	47131
Entropy (8bit):	7.931779753061097
Encrypted:	false
SSDEEP:	768:G+icWueyhK021sTDjaLhazFDvSU1DhTC6PNljl4NwfcMVB6e7MdKBun10N8SXpzR:G8WueMjas/GLc19TWCOWMdt6N8ApVH
MD5:	0B80B598C0453F86C3447CD6A353F728
SHA1:	DCEEAAAAEF8911A3E7FF06BBCA1EC011E024B629
SHA-256:	EFDE12638068531699B66A5498E233FE0F19EAEB53FB093AA2C58F4A0479B758
SHA-512:	2CAD81B08AD06EF5BE25D18A7AA5EB05E247FC075866F6A075017CFD8E9CDF73F911AB7072F0B431E14D62A7F8CBB8BEC6182588E90B02A28B4A1A28A25D8641
Malicious:	false
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................~.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....,M...X.q.:c.?_..Z..d.-........?..7.....o~..}.7.# rA.....<...\.0.]....{...V...m....E...p{9..lW;.......F.b.....>....@.....7..B...].7....`.v..\.*../..q..'..\HN4o.{.cX.......i..b.O....).....7....E#.....[..r.wC..%..?\...7....i;..R...:_E}.....K-....[.TV9.I...=#..O........U?...h.........?(.....'..$...q...8.B...........J.n..F.....#....GC.foQ......}........_....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\GO30WR0E\apps_73424_66a3b3e271152[1].png

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	PNG image data, 470 x 260, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	191508
Entropy (8bit):	7.993635250876462
Encrypted:	true
SSDEEP:	3072:hW0FuVWD5TRox5zpE7Nz5Y5w5RDU7zM/QtoD6jKsi/P2BYjDEDYGiNFr0qhy:Fu2TR8x4Nz5RgXFiGsff4YGQFQL
MD5:	1E835E5C660C739D3E264C484007B1D5
SHA1:	D86D2543E8A99EE7158E6250D7C83520628C79F9
SHA-256:	8802F73FDC711AF2D31367EF3CE4DE7744D650A15E65CB90E344E7980805B51D
SHA-512:	3AE6D78589F4C13F66DA840D52EFB012D9AE47C122FDA777F05125EE6F729CFD7CB13E12DF296FBB672432946C7A3B4F238C9FEF5FE302BB6F76CA5A764AE763
Malicious:	false
Preview:	.PNG........IHDR................~....pHYs.................sRGB.........gAMA......a....IDATx.....$.U...U.s....G.4....r....h0`.\|6\|p.KN6.`...G.eK.,+Y.H.49..s...w.>..:#..r...<*y\|..Pa.Wx...L.x.x.x.x.x.x.x../9t.~.~.~.~.~.~.~...............u.............._x.nX_?^?^?^?^?^?....#..>.J..}...R..?.Tn.R.[.K}.j.y.._.K....c.._.3K.....Z.Y?..\.6..4......j....<...?.X..._i=........._.W{m......).?......r......da..\.\|..c....g..h.v........\|.9j?..9....y.3....=...+.....^...\|...gt].a....zT.y..^........?.._1..4.K.Z.g..k...L.._i.k..j...;.W;G..\...W..ZU..............k.............U......{....-...z.......p..\|...u....w.....y.b].^..Z..R.P..~\|_....8;K}f.1._YHK......J..^..?.R.\....x-...s.W:.R2~..~\~..]...f@k...a...9~.c.q\|.g.q..G..e.......k.._.._I~.v.W..W3.?.=...z5.s...C.~..E.J..J.t5%w...C"..g^.+........."....>....R.v).p..S....-u....W{...P...>.j..Z...y.j..R..?.<.+).WR>?.Ay.s..jc.Z.....u.zM~.....k..^.j.m..x..X{......R...+.W....x....Q{....._.~.6...Y.~.3.t.....,..2.7..v..yDW...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\GO30WR0E\icon_search_write_right[1].htm

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	162
Entropy (8bit):	4.43530643106624
Encrypted:	false
SSDEEP:	3:qVoB3tUROGclXqyvXboAcMBXqWSZUXqXlIVLLP61IwcWWGu:q43tISl6kXiMIWSU6XlI5LP8IpfGu
MD5:	4F8E702CC244EC5D4DE32740C0ECBD97
SHA1:	3ADB1F02D5B6054DE0046E367C1D687B6CDF7AFF
SHA-256:	9E17CB15DD75BBBD5DBB984EDA674863C3B10AB72613CF8A39A00C3E11A8492A
SHA-512:	21047FEA5269FEE75A2A187AA09316519E35068CB2F2F76CFAF371E5224445E9D5C98497BD76FB9608D2B73E9DAC1A3F5BFADFDC4623C479D53ECF93D81D3C9F
Malicious:	false
Preview:	<html>..<head><title>301 Moved Permanently</title></head>..<body>..<center><h1>301 Moved Permanently</h1></center>..<hr><center>nginx</center>..</body>..</html>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\GO30WR0E\in_background_img[1].htm

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	162
Entropy (8bit):	4.43530643106624
Encrypted:	false
SSDEEP:	3:qVoB3tUROGclXqyvXboAcMBXqWSZUXqXlIVLLP61IwcWWGu:q43tISl6kXiMIWSU6XlI5LP8IpfGu
MD5:	4F8E702CC244EC5D4DE32740C0ECBD97
SHA1:	3ADB1F02D5B6054DE0046E367C1D687B6CDF7AFF
SHA-256:	9E17CB15DD75BBBD5DBB984EDA674863C3B10AB72613CF8A39A00C3E11A8492A
SHA-512:	21047FEA5269FEE75A2A187AA09316519E35068CB2F2F76CFAF371E5224445E9D5C98497BD76FB9608D2B73E9DAC1A3F5BFADFDC4623C479D53ECF93D81D3C9F
Malicious:	false
Preview:	<html>..<head><title>301 Moved Permanently</title></head>..<body>..<center><h1>301 Moved Permanently</h1></center>..<hr><center>nginx</center>..</body>..</html>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\GO30WR0E\pFXDYH92I.gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\GO30WR0E\p[10].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\GO30WR0E\p[1].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\GO30WR0E\p[2].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\GO30WR0E\p[3].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\GO30WR0E\p[4].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\GO30WR0E\p[5].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\GO30WR0E\p[6].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\GO30WR0E\p[7].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\GO30WR0E\p[8].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\GO30WR0E\p[9].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NB937L4Q\apps_73356_663ce796de577[1].jpg

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 249x126, components 3
Category:	dropped
Size (bytes):	51724
Entropy (8bit):	7.940662493791096
Encrypted:	false
SSDEEP:	1536:GmgX+s4EgDmSLidL1wOWuuPXkra9GynvpL9FVe33:O54EgiFyuykragMvxReH
MD5:	9799622A270F0D1ED5E7C7640992E94D
SHA1:	712500076805CD81B2891D97492BA0DCA4023572
SHA-256:	8C10DC4E40B3C35C760E10880371FBA2222C2872DA1F480598EAF41809ABDB0C
SHA-512:	0B3732CF637BF85535F84897E1B5AFA5271EE342CD63111CADE654EA49ED34E6F7B495071410675EB2D3BA98DBDA06849E6383980E71695E874B087B1C432F3D
Malicious:	false
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................~.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...\|S..o.:.._Owsu4..r....,...ZE....)... 8....7....g......3...U.Rs.'7XznM...F..Q\|..#................nW....B.#9.cW.QE).1..ukU..)NRz....^._..Ip.4P..Qy.ne.YR\........Ym..e....c+TX.QS..:t....RS.ex.FQ..e...T.56.....l+...P.J.X.O...!N...+...y......N.....>...z.....(...f.7...C>./..m..Q.F..}.7-..m.6....RY.E&#...."10...C...]...q...\|..r.JQ.j3..9Z.j....iu...lE..'Fn.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NB937L4Q\apps_73401_66684ff6b31a4[1].png

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	PNG image data, 480 x 280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	106708
Entropy (8bit):	7.992752550018408
Encrypted:	true
SSDEEP:	1536:s6tcPzbflX/dTw/ItVG3YXS5JSH+xsJvWwESbhx/XOX8+EHX3eNwhEKVNs/JKBSi:sZ7bfZ/1EItCY9YS5Vx/XwE7xs/JKEin
MD5:	D04AB43AA1F8D1575DCA31D23E4D0182
SHA1:	CE5EC5C3A22636A789CB98A9AC2F2C46D36CE0C6
SHA-256:	3A1F9BEE190EBDEAD1C6518E90AE275CFF5E8322BD11F41BCEE8D7EAB0022C50
SHA-512:	6E70F12AF4379F623BE8ADB178A6F2908AFEFAF823A5CB211B9FBA02C91D399D1EF9476AB5E7E735EE12A9A3028FBC9A99EEFAF43D6561FC7AA7E5E15E7397EE
Malicious:	false
Preview:	.PNG........IHDR...............%.....pHYs.................IDATx..u.eG..?........=!DI..H.........].-...A..-...A.@....I23....n..[...._..LfB.y..[..{.S.d....{k..G...N....4..)......o..q.s..)&....a..-cU.....>~i.6........o..tND..,NK\........(...`.nl.'Tv_Q. .:...L..O5.b..X..y.... ...=`...`W.i-.4...'....W..;.<B.kZ.D..K3..>..8a7.n1....i......o.YH...0.,...&....%B..t.r.w!g...qG.\.5a.I..}...pO...C........!..F.c........x@0Q.{E...p.~*..v.J...&..k.$t...~..xsy...[.?(.>............^.....[3..=!.O......9.....N..H....;.....}0<`...........t>..+.....T;....,...D.;...E..$.v,.....]....D7..a/..bx..0LyQ.U .....pbO)t..;....o..i@.=\.....E.........y/.{)......a...{m..D\|.....e..\-=..O.>{..<!.F...I....,<..^,....cH.BG...X....j....4....L.P...v.......N./jS.d.0.aW.oQ..a..J.{P.m.s.....y.I.>LA..4..S...8.)._.......c`..g...Q...\|'.r.d!....B'.R:y.`.....=...\|E.........0.9........kN~a.8......\|f.8..F.~.....\|..9..A..=a.....d'S....S.....e..OW.....Z-].&..v......i.3z......a\..~

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NB937L4Q\in_background_auto_update_img[1].htm

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	162
Entropy (8bit):	4.43530643106624
Encrypted:	false
SSDEEP:	3:qVoB3tUROGclXqyvXboAcMBXqWSZUXqXlIVLLP61IwcWWGu:q43tISl6kXiMIWSU6XlI5LP8IpfGu
MD5:	4F8E702CC244EC5D4DE32740C0ECBD97
SHA1:	3ADB1F02D5B6054DE0046E367C1D687B6CDF7AFF
SHA-256:	9E17CB15DD75BBBD5DBB984EDA674863C3B10AB72613CF8A39A00C3E11A8492A
SHA-512:	21047FEA5269FEE75A2A187AA09316519E35068CB2F2F76CFAF371E5224445E9D5C98497BD76FB9608D2B73E9DAC1A3F5BFADFDC4623C479D53ECF93D81D3C9F
Malicious:	false
Preview:	<html>..<head><title>301 Moved Permanently</title></head>..<body>..<center><h1>301 Moved Permanently</h1></center>..<hr><center>nginx</center>..</body>..</html>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NB937L4Q\in_background_auto_update_img[1].png

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	PNG image data, 490 x 140, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11907
Entropy (8bit):	7.943848672567413
Encrypted:	false
SSDEEP:	192:zZR77SSlsXp7h9PKr6L1KJ9yRh/+AogjkisWttJkuzTCFvm9e4t4L6swiagy7EPZ:psV0e1j+AoGsWtxWqCJHHNi0
MD5:	35491E88F6F53FF50394C619887771B9
SHA1:	8A7E28EE13C14CB2238B9B43E40A626760E17A10
SHA-256:	C9AF01C7D48655AE50059734B8756F4AD6BBFA411C4A2238CE44E465F67CCB5C
SHA-512:	FFADC5E05FBBC604E472EEDA5784EA924C57E08E0A668DCA9849D45E5EE1324D7D8AA125F67A4EBEA8CCD7FF4ABA896D03FB117CE4D3595601FFA9806E87B0D4
Malicious:	false
Preview:	.PNG........IHDR....................JIDATx..}p..}.b......l.`...cp.p..$....M...$...6.I.o...i...N.f...L.G.M..8.f...0..,$1..........3.X....=.s........+..~f4..=.y?.w~..9.i.c.Q'..B.<2..'..B.."A-..B...j!..".HP.!..9F.Z.!..1..B.!D....B.!r....B..c$...B..#A-..B...j!..".HP.!..9F.Z.!..1..B.!D....B.!r....B..c$...B..#A-..B...j!..".HP.!..9F.Z.!..1..B.!D....B.!r....B..c$...B..#A-..B...j!..".HP.!..9F.Z.!..17...2........&wS.m..^..r..x......kC/9!..b..r..m... ..=.GA@g.j..7...I`.!..I..RP..y.k.....^....kCn.....wB.!..`...E.q9.}......q-7..z._Z\|.......T0o.....7...~......+.n....Y.q.+.5....IW.O..~o.....Y...].Y....v.....~w..{.../..?..g..y...?...x..g...'....zA...o...7o..........R......W)...k........._..[{....\|..?..?.Y..?......O.`.{<..j..dtt.......Q-...c_..S.Zz<G.R?.so.....H...}.I..o}....cuiy......_y.}...s---..O~5..g.wB.Q.......k..z@X.....t..._.qn.]w.A..D..<......@.,.=....>.v.u.{.....s...4..ou.>......7....o.-.X.Tz.......Y..?.G..'...r.......f.r...x..s./..9sJ.#t...'..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NB937L4Q\in_background_img[1].htm

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	162
Entropy (8bit):	4.43530643106624
Encrypted:	false
SSDEEP:	3:qVoB3tUROGclXqyvXboAcMBXqWSZUXqXlIVLLP61IwcWWGu:q43tISl6kXiMIWSU6XlI5LP8IpfGu
MD5:	4F8E702CC244EC5D4DE32740C0ECBD97
SHA1:	3ADB1F02D5B6054DE0046E367C1D687B6CDF7AFF
SHA-256:	9E17CB15DD75BBBD5DBB984EDA674863C3B10AB72613CF8A39A00C3E11A8492A
SHA-512:	21047FEA5269FEE75A2A187AA09316519E35068CB2F2F76CFAF371E5224445E9D5C98497BD76FB9608D2B73E9DAC1A3F5BFADFDC4623C479D53ECF93D81D3C9F
Malicious:	false
Preview:	<html>..<head><title>301 Moved Permanently</title></head>..<body>..<center><h1>301 Moved Permanently</h1></center>..<hr><center>nginx</center>..</body>..</html>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NB937L4Q\in_background_img[1].png

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	PNG image data, 490 x 140, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8035
Entropy (8bit):	7.915436310548169
Encrypted:	false
SSDEEP:	192:mILTm2E2cgqnk3DMwEu73ubv0/L2rnuq+XS:BTmn2lakTMeL2n
MD5:	E5D970BBAAE6659BB9F51FD206C4C4EE
SHA1:	80B4A5557BC1BB74BAD6800A37D3CB16698808FA
SHA-256:	C9E15ECB3967704F7EE510DE908DD08D79063EA60C86A00835519F6ABF645920
SHA-512:	A8B53F961525A9E44D45D07457742282D26E9512B6CFD3985F203A84304450AFA7D0B2093F97E40B03774D93F8D13E94AC3E971DC0350318BC58A548EF953DC7
Malicious:	false
Preview:	.PNG........IHDR....................IDATx...l..y.O.....q..$v.vB.46...aM4%....-..].*...6...t.h.t...h-.....LcS....j..IG........q.v"'..._ ;....s_....a...~..k.{..s..=..<.9........!..B..#..B.!.B.&..B<.BM.!.x....B....5!...1.jB.!.c(..B..P..!....P.B.!.C.&..B<.BM.!.x....B....5!...1.jB.!.c(..B..P..!....P.B.!.C.&..B<.BM.!.x....B....5!...1.jB.!.c(..B..P..!....P.B.!.C.&..B<.BM.!.x....B....5!...1.jB.!.c(..B..P..!....P.B.!.C.&..B<.BM.!.x....B....5!...1.jB.!.c(..B..P..!....P.B.!.C.&..B<.BM.!.x....B....5!...1...YP.1..o6..W.K2...\|...G.......>.m\|..c..u.1y.GV.....'N..d..C.!...o.z.x.......N....L....X........mG.w......a.\|..DQ....6...On.?;>t..\|.Y....H.......Er.o..wc.j]a...yH..z..+...;o.e.x..r..A..[.....J......_..h...l.....<.....?....Qv.<(.K...^.b.K.'.....aJq.}?...c~...3.>qe.9..O..=iw.........BHZ....:n6...j>b..,l..\|..Sf..13~.)S....B.BK^ v.\|.............u.a.Q\|...7.....z..7.9%.[....H,w....y.s.C.....l........Y..>..;.\|.s..0 ..[.-.`.Q..qy.:..yG.Rf....b.+V.4el\./..E.p..l.rx

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NB937L4Q\logo-light[1].htm

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	162
Entropy (8bit):	4.43530643106624
Encrypted:	false
SSDEEP:	3:qVoB3tUROGclXqyvXboAcMBXqWSZUXqXlIVLLP61IwcWWGu:q43tISl6kXiMIWSU6XlI5LP8IpfGu
MD5:	4F8E702CC244EC5D4DE32740C0ECBD97
SHA1:	3ADB1F02D5B6054DE0046E367C1D687B6CDF7AFF
SHA-256:	9E17CB15DD75BBBD5DBB984EDA674863C3B10AB72613CF8A39A00C3E11A8492A
SHA-512:	21047FEA5269FEE75A2A187AA09316519E35068CB2F2F76CFAF371E5224445E9D5C98497BD76FB9608D2B73E9DAC1A3F5BFADFDC4623C479D53ECF93D81D3C9F
Malicious:	false
Preview:	<html>..<head><title>301 Moved Permanently</title></head>..<body>..<center><h1>301 Moved Permanently</h1></center>..<hr><center>nginx</center>..</body>..</html>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NB937L4Q\p[1].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NB937L4Q\p[2].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NB937L4Q\p[3].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NB937L4Q\p[4].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NB937L4Q\p[5].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NB937L4Q\p[6].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NB937L4Q\p[7].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NB937L4Q\p[8].gif

Download File

Process:	C:\Users\user\PCAppStore\Watchdog.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Temp\e6893d00-7d47-42a0-b7d3-8af19f012c0b.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	PNG image data, 490 x 140, 8-bit/color RGBA, non-interlaced
Category:	modified
Size (bytes):	11907
Entropy (8bit):	7.943848672567413
Encrypted:	false
SSDEEP:	192:zZR77SSlsXp7h9PKr6L1KJ9yRh/+AogjkisWttJkuzTCFvm9e4t4L6swiagy7EPZ:psV0e1j+AoGsWtxWqCJHHNi0
MD5:	35491E88F6F53FF50394C619887771B9
SHA1:	8A7E28EE13C14CB2238B9B43E40A626760E17A10
SHA-256:	C9AF01C7D48655AE50059734B8756F4AD6BBFA411C4A2238CE44E465F67CCB5C
SHA-512:	FFADC5E05FBBC604E472EEDA5784EA924C57E08E0A668DCA9849D45E5EE1324D7D8AA125F67A4EBEA8CCD7FF4ABA896D03FB117CE4D3595601FFA9806E87B0D4
Malicious:	false
Preview:	.PNG........IHDR....................JIDATx..}p..}.b......l.`...cp.p..$....M...$...6.I.o...i...N.f...L.G.M..8.f...0..,$1..........3.X....=.s........+..~f4..=.y?.w~..9.i.c.Q'..B.<2..'..B.."A-..B...j!..".HP.!..9F.Z.!..1..B.!D....B.!r....B..c$...B..#A-..B...j!..".HP.!..9F.Z.!..1..B.!D....B.!r....B..c$...B..#A-..B...j!..".HP.!..9F.Z.!..1..B.!D....B.!r....B..c$...B..#A-..B...j!..".HP.!..9F.Z.!..17...2........&wS.m..^..r..x......kC/9!..b..r..m... ..=.GA@g.j..7...I`.!..I..RP..y.k.....^....kCn.....wB.!..`...E.q9.}......q-7..z._Z\|.......T0o.....7...~......+.n....Y.q.+.5....IW.O..~o.....Y...].Y....v.....~w..{.../..?..g..y...?...x..g...'....zA...o...7o..........R......W)...k........._..[{....\|..?..?.Y..?......O.`.{<..j..dtt.......Q-...c_..S.Zz<G.R?.so.....H...}.I..o}....cuiy......_y.}...s---..O~5..g.wB.Q.......k..z@X.....t..._.qn.]w.A..D..<......@.,.=....>.v.u.{.....s...4..ou.>......7....o.-.X.Tz.......Y..?.G..'...r.......f.r...x..s./..9sJ.#t...'..

C:\Users\user\AppData\Local\Temp\nsbD001.tmp\Math.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsgC284.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	69120
Entropy (8bit):	6.024967061017882
Encrypted:	false
SSDEEP:	1536:GUZ9QC7V7IGMp2ZmtSX5p9IeJXlSM2tS:T97WSth5lwt
MD5:	85428CF1F140E5023F4C9D179B704702
SHA1:	1B51213DDBAEDFFFB7E7F098F172F1D4E5C9EFBA
SHA-256:	8D9A23DD2004B68C0D2E64E6C6AD330D0C648BFFE2B9F619A1E9760EF978207A
SHA-512:	DFE7F9F3030485CAF30EC631424120030C3985DF778993342A371BF1724FA84AA885B4E466C6F6B356D99CC24E564B9C702C7BCDD33052172E0794C2FDECCE59
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: Setup.exe (1).zip, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........w.................F.........................5.....5....:6....Rich...........PE..L.....Oa...........!................KG....................................................@.............................B.......(....................................................................................................................text...b........................... ..`.rdata..R...........................@..@.data............2..................@....reloc..............................@..B................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsbD001.tmp\NSISFastLib.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsgC284.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	140288
Entropy (8bit):	6.334087823000165
Encrypted:	false
SSDEEP:	3072:H5dnvmOEATceozVDkRasOCdUFZrR7beB2SK0XCC+W/ST+BeXZQUC5:ZdnvmsTceZUtCdUFZr9b4KznC5
MD5:	9C7A4D75F08D40AD6F5250DF6739C1B8
SHA1:	793749511C61B00A793D0AEA487E366256DD1B95
SHA-256:	6EB17C527C9E7F7FEA1FDB2EA152E957B50A56796E53CE1E5946B165B82DEAEF
SHA-512:	E85235307B85FFD3AAB76FF6290BEE0B3B9FD74C61A812B5355FE7B854D4C6B77BD521E52638D28E249A43D9EC7AA6F2670AF2B1C671091492C7FE19D6F9A4E6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$......../.iTN.:TN.:TN.:.6.;^N.:.6.;.N.:.6.;@N.:.6.;UN.:...;AN.:...;DN.:...;{N.:.6.;_N.:TN.:'N.:B..;QN.:B..;UN.:B.%:UN.:TNM:UN.:B..;UN.:RichTN.:........................PE..L...z..f...........!...(.x...................................................`..............................................x...x....0..X....................@......0...............................p...@............................................text...0v.......x.................. ..`.rdata..\~...........\|..............@..@.data...............................@....rsrc...X....0......................@..@.reloc.......@......................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsbD001.tmp\System.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsgC284.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	5.814115788739565
Encrypted:	false
SSDEEP:	192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
MD5:	CFF85C549D536F651D4FB8387F1976F2
SHA1:	D41CE3A5FF609DF9CF5C7E207D3B59BF8A48530E
SHA-256:	8DC562CDA7217A3A52DB898243DE3E2ED68B80E62DDCB8619545ED0B4E7F65A8
SHA-512:	531D6328DAF3B86D85556016D299798FA06FEFC81604185108A342D000E203094C8C12226A12BD6E1F89B0DB501FB66F827B610D460B933BD4AB936AC2FD8A88
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......qr.5.D.5.D.5.D...J.2.D.5.E.!.D.....2.D.a0t.1.D.V1n.4.D..3@.4.D.Rich5.D.........PE..L.....Oa...........!....."..................@...............................p............@..........................B.......@..P............................`.......................................................@..X............................text.... .......".................. ..`.rdata..c....@.......&..............@..@.data...x....P.......*..............@....reloc.......`.......,..............@..B................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsbD001.tmp\image.gif

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsgC284.tmp
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	997
Entropy (8bit):	4.188896534234179
Encrypted:	false
SSDEEP:	12:2E5KZbHOjOruFw6MLxENScRVar7FC53tK1Oqd3Aa0n:tAlHOjOX60ENvRVZKbEn
MD5:	1636218C14C357455B5C872982E2A047
SHA1:	21FBD1308AF7AD25352667583A8DC340B0847DBC
SHA-256:	9B8B6285BF65F086E08701EEE04E57F2586E973A49C5A38660C9C6502A807045
SHA-512:	837FA6BCBE69A3728F5CB4C25C35C1D13E84B11232FC5279A91F21341892AD0E36003D86962C8AB1A056D3BEEB2652C754D51D6EC7EEE0E0EBFE19CD93FB5CB0
Malicious:	false
Preview:	GIF89a............P..........4q...5j...O..F.].......................o..._.....5y.t........\....K>}...g..t....X...B..ET....t~....go..Jx...........\|..U!f.\|....>u.M.........w>..+r...\|...A{.....t...E...b.8}....d....A.....R..y..l...w....G5u...{....t.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!..NETSCAPE2.0.....!.......,...............H..A....`pp....~.xR......d.......,...D...)2 .1.....N` R......(@......,8RDA../..XB....P.F .....#...b`F...#8p......<\.`.........A....n\|.CH...........+... .E.....d`.@......;

C:\Users\user\AppData\Local\Temp\nsbD001.tmp\inetc.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsgC284.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	39424
Entropy (8bit):	4.684597989866362
Encrypted:	false
SSDEEP:	384:njt65uI9oYzcCaHjl9Cb4I1f0AGhrHXoREnRxtIpH/u0abJ2v2DW9O9tk8ZwkpwD:noHtNQoRSIwTJB6Q/kPyBp6
MD5:	A35CDC9CF1D17216C0AB8C5282488EAD
SHA1:	ED8E8091A924343AD8791D85E2733C14839F0D36
SHA-256:	A793929232AFB78B1C5B2F45D82094098BCF01523159FAD1032147D8D5F9C4DF
SHA-512:	0F15B00D0BF2AABD194302E599D69962147B4B3EF99E5A5F8D5797A7A56FD75DD9DB0A667CFBA9C758E6F0DAB9CED126A9B43948935FE37FC31D96278A842BDF
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........&.[.H.[.H.[.H.O.I.R.H.[.I...H...M.Y.H...L.Z.H...H.Z.H.....Z.H...J.Z.H.Rich[.H.................PE..L...n..c...........!.....T.........._........p............................... ............@..........................x......D...d...............................t....w..8...............................................D............................text....S.......T.................. ..`.rdata.......p.......X..............@..@.data....i...........d..............@....idata..A............v..............@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsbD001.tmp\nsJSON.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsgC284.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	24064
Entropy (8bit):	5.819708895488079
Encrypted:	false
SSDEEP:	384:n7U5CiIZ1ZC2RvhrTfldNuwQ5pk+BISivMyyOgqCoRUj+OvHxOuofnykhVQJrTU:YoZ1ZnhrTfldqk7Yyy94RxOcVQJrT
MD5:	F4D89D9A2A3E2F164AEA3E93864905C9
SHA1:	4D4E05EE5E4E77A0631A3DD064C171BA2E227D4A
SHA-256:	64B3EFDF3DE54E338D4DB96B549A7BDB7237BB88A82A0A63AEF570327A78A6FB
SHA-512:	DBDA3FE7CA22C23D2D0F2A5D9D415A96112E2965081582C7A42C139A55C5D861A27F0BD919504DE4F82C59CF7D1B97F95ED5A55E87D574635AFDB7EB2D8CADF2
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......U.'..fI_.fI_.fI_3.H^.fI_.fH_?fI_.8M^.fI_.8I^.fI_.8._.fI_.8K^.fI_Rich.fI_........PE..L...`..Z...........!.....>..........E........P............................................@..........................X......@Z..P....p..........................H....X...............................................P...............................text...W<.......>.................. ..`.rdata.......P.......B..............@..@.data...@....`.......R..............@....rsrc........p.......T..............@..@.reloc..H............X..............@..B........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\NSISFastLib.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe\Setup.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	140288
Entropy (8bit):	6.334087823000165
Encrypted:	false
SSDEEP:	3072:H5dnvmOEATceozVDkRasOCdUFZrR7beB2SK0XCC+W/ST+BeXZQUC5:ZdnvmsTceZUtCdUFZr9b4KznC5
MD5:	9C7A4D75F08D40AD6F5250DF6739C1B8
SHA1:	793749511C61B00A793D0AEA487E366256DD1B95
SHA-256:	6EB17C527C9E7F7FEA1FDB2EA152E957B50A56796E53CE1E5946B165B82DEAEF
SHA-512:	E85235307B85FFD3AAB76FF6290BEE0B3B9FD74C61A812B5355FE7B854D4C6B77BD521E52638D28E249A43D9EC7AA6F2670AF2B1C671091492C7FE19D6F9A4E6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$......../.iTN.:TN.:TN.:.6.;^N.:.6.;.N.:.6.;@N.:.6.;UN.:...;AN.:...;DN.:...;{N.:.6.;_N.:TN.:'N.:B..;QN.:B..;UN.:B.%:UN.:TNM:UN.:B..;UN.:RichTN.:........................PE..L...z..f...........!...(.x...................................................`..............................................x...x....0..X....................@......0...............................p...@............................................text...0v.......x.................. ..`.rdata..\~...........\|..............@..@.data...............................@....rsrc...X....0......................@..@.reloc.......@......................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\System.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe\Setup.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	5.814115788739565
Encrypted:	false
SSDEEP:	192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
MD5:	CFF85C549D536F651D4FB8387F1976F2
SHA1:	D41CE3A5FF609DF9CF5C7E207D3B59BF8A48530E
SHA-256:	8DC562CDA7217A3A52DB898243DE3E2ED68B80E62DDCB8619545ED0B4E7F65A8
SHA-512:	531D6328DAF3B86D85556016D299798FA06FEFC81604185108A342D000E203094C8C12226A12BD6E1F89B0DB501FB66F827B610D460B933BD4AB936AC2FD8A88
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......qr.5.D.5.D.5.D...J.2.D.5.E.!.D.....2.D.a0t.1.D.V1n.4.D..3@.4.D.Rich5.D.........PE..L.....Oa...........!....."..................@...............................p............@..........................B.......@..P............................`.......................................................@..X............................text.... .......".................. ..`.rdata..c....@.......&..............@..@.data...x....P.......*..............@....reloc.......`.......,..............@..B................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\image.gif

Download File

Process:	C:\Users\user\Desktop\Setup.exe\Setup.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	997
Entropy (8bit):	4.188896534234179
Encrypted:	false
SSDEEP:	12:2E5KZbHOjOruFw6MLxENScRVar7FC53tK1Oqd3Aa0n:tAlHOjOX60ENvRVZKbEn
MD5:	1636218C14C357455B5C872982E2A047
SHA1:	21FBD1308AF7AD25352667583A8DC340B0847DBC
SHA-256:	9B8B6285BF65F086E08701EEE04E57F2586E973A49C5A38660C9C6502A807045
SHA-512:	837FA6BCBE69A3728F5CB4C25C35C1D13E84B11232FC5279A91F21341892AD0E36003D86962C8AB1A056D3BEEB2652C754D51D6EC7EEE0E0EBFE19CD93FB5CB0
Malicious:	false
Preview:	GIF89a............P..........4q...5j...O..F.].......................o..._.....5y.t........\....K>}...g..t....X...B..ET....t~....go..Jx...........\|..U!f.\|....>u.M.........w>..+r...\|...A{.....t...E...b.8}....d....A.....R..y..l...w....G5u...{....t.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!..NETSCAPE2.0.....!.......,...............H..A....`pp....~.xR......d.......,...D...)2 .1.....N` R......(@......,8RDA../..XB....P.F .....#...b`F...#8p......<\.`.........A....n\|.CH...........+... .E.....d`.@......;

C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\inetc.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe\Setup.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	39424
Entropy (8bit):	4.684597989866362
Encrypted:	false
SSDEEP:	384:njt65uI9oYzcCaHjl9Cb4I1f0AGhrHXoREnRxtIpH/u0abJ2v2DW9O9tk8ZwkpwD:noHtNQoRSIwTJB6Q/kPyBp6
MD5:	A35CDC9CF1D17216C0AB8C5282488EAD
SHA1:	ED8E8091A924343AD8791D85E2733C14839F0D36
SHA-256:	A793929232AFB78B1C5B2F45D82094098BCF01523159FAD1032147D8D5F9C4DF
SHA-512:	0F15B00D0BF2AABD194302E599D69962147B4B3EF99E5A5F8D5797A7A56FD75DD9DB0A667CFBA9C758E6F0DAB9CED126A9B43948935FE37FC31D96278A842BDF
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........&.[.H.[.H.[.H.O.I.R.H.[.I...H...M.Y.H...L.Z.H...H.Z.H.....Z.H...J.Z.H.Rich[.H.................PE..L...n..c...........!.....T.........._........p............................... ............@..........................x......D...d...............................t....w..8...............................................D............................text....S.......T.................. ..`.rdata.......p.......X..............@..@.data....i...........d..............@....idata..A............v..............@..@.rsrc...............................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\modern-wizard.bmp

Download File

Process:	C:\Users\user\Desktop\Setup.exe\Setup.exe
File Type:	PC bitmap, Windows 3.x format, 164 x 314 x 4, image size 26376, resolution 2834 x 2834 px/m, cbSize 26494, bits offset 118
Category:	dropped
Size (bytes):	26494
Entropy (8bit):	1.9568109962493656
Encrypted:	false
SSDEEP:	24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5:	CBE40FD2B1EC96DAEDC65DA172D90022
SHA1:	366C216220AA4329DFF6C485FD0E9B0F4F0A7944
SHA-256:	3AD2DC318056D0A2024AF1804EA741146CFC18CC404649A44610CBF8B2056CF2
SHA-512:	62990CB16E37B6B4EFF6AB03571C3A82DCAA21A1D393C3CB01D81F62287777FB0B4B27F8852B5FA71BC975FEAB5BAA486D33F2C58660210E115DE7E2BD34EA63
Malicious:	false
Preview:	BM~g......v...(.......:............g..................................................................................DDD@@@@DDDDDD@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@DDDDDDDDDD@@@@DDDDDDDDD@@@@@@..DDD....DDDDDD........................................DDDDDDDDDD....DDDDDDDDD........DD@@@@DDDDDD@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@DDDDDDDDD@@@@DDDDDDDDDD@@@@@@D..DD....DDDDDDD......................................DDDDDDDDDD....DDDDDDDDDD......D..D@@@@@DDDDDD@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@DDDDDDDDDD@@@@DDDDDDDDDD@@@@@DDD..D.....DDDDDD......................................DDDDDDDDD.....DDDDDDDDD......DDD..@@@@@DDDDDD@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@DDDDDDDDDD@@@@DDDDDDDDDD@@@@@@DDDD.......DDDDDD.....................................DDDDDDDDDD....DDDDDDDDDD.....DDDDD..@@@@@DDDDDD@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@DDDDDDDDDD@@@@DDDDDDDDD@@@@@@DDDDDD.......DDDDDD....................................DDDDDDDDD....DDDDDDDDDD......DDDDDD..@@@@DDDDDD@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\nsDialogs.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe\Setup.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	9728
Entropy (8bit):	5.158136237602734
Encrypted:	false
SSDEEP:	96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
MD5:	6C3F8C94D0727894D706940A8A980543
SHA1:	0D1BCAD901BE377F38D579AAFC0C41C0EF8DCEFD
SHA-256:	56B96ADD1978B1ABBA286F7F8982B0EFBE007D4A48B3DED6A4D408E01D753FE2
SHA-512:	2094F0E4BB7C806A5FF27F83A1D572A5512D979EEFDA3345BAFF27D2C89E828F68466D08C3CA250DA11B01FC0407A21743037C25E94FBE688566DD7DEAEBD355
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......\|..c8O`08O`08O`08Oa0.O`0.@=05O`0llP0=O`0.If09O`0.od09O`0Rich8O`0........PE..L.....Oa...........!.........0......g........0............................................@..........................6..k....0.......p...............................................................................0...............................text............................... ..`.rdata..{....0......................@..@.data...h!...@......................@....rsrc........p....... ..............@..@.reloc..~............"..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsgAB41.tmp\nsJSON.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe\Setup.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	24064
Entropy (8bit):	5.819708895488079
Encrypted:	false
SSDEEP:	384:n7U5CiIZ1ZC2RvhrTfldNuwQ5pk+BISivMyyOgqCoRUj+OvHxOuofnykhVQJrTU:YoZ1ZnhrTfldqk7Yyy94RxOcVQJrT
MD5:	F4D89D9A2A3E2F164AEA3E93864905C9
SHA1:	4D4E05EE5E4E77A0631A3DD064C171BA2E227D4A
SHA-256:	64B3EFDF3DE54E338D4DB96B549A7BDB7237BB88A82A0A63AEF570327A78A6FB
SHA-512:	DBDA3FE7CA22C23D2D0F2A5D9D415A96112E2965081582C7A42C139A55C5D861A27F0BD919504DE4F82C59CF7D1B97F95ED5A55E87D574635AFDB7EB2D8CADF2
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......U.'..fI_.fI_.fI_3.H^.fI_.fH_?fI_.8M^.fI_.8I^.fI_.8._.fI_.8K^.fI_Rich.fI_........PE..L...`..Z...........!.....>..........E........P............................................@..........................X......@Z..P....p..........................H....X...............................................P...............................text...W<.......>.................. ..`.rdata.......P.......B..............@..@.data...@....`.......R..............@....rsrc........p.......T..............@..@.reloc..H............X..............@..B........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsgC284.tmp

Download File

Process:	C:\Users\user\Desktop\Setup.exe\Setup.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Category:	dropped
Size (bytes):	1339288
Entropy (8bit):	7.986427196735331
Encrypted:	false
SSDEEP:	24576:AYtao4p1sdzcG+pUmJ6G964FpD+9SlBakNNeRM5geuNHxq3jjIyoNol:htucznk6G3FjlckDwneAxqQNM
MD5:	0ABEFE193A5575A9C273105CD50CFB25
SHA1:	1DEEA0A305F8F7832DB3C6A57B8A289EC9346B6B
SHA-256:	908A355A371A06D3B45427E22DFA1658AC07B401C11DF21D51D9E70DB992F6B3
SHA-512:	975B23C02E6B37047B7EC61082C67C95C8DF463400950FA38C21B6E17E97C77748134826675556D2F13A6A81ED9CB71C81E1485A47DD4BB4A1A7492581858B28
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 33%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1...Pf..Pf..Pf._9..Pf..Pg.LPf._;..Pf.sV..Pf..V`..Pf.Rich.Pf.........................PE..L.....Oa.................h...*......@6............@..........................`......$.....@.........................................................@F..X)...........................................................................................text...vf.......h.................. ..`.rdata...............l..............@..@.data...x...........................@....ndata... ...............................rsrc...............................@..@................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\nsvCFE0.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsgC284.tmp
File Type:	DIY-Thermocam raw data (Lepton 3.x), scale 0-0, spot sensor temperature 0.000000, unit celsius, color scheme 0, calibration: offset 0.000000, slope 8589934592.000000
Category:	dropped
Size (bytes):	5053699
Entropy (8bit):	6.125164641429676
Encrypted:	false
SSDEEP:	49152:9GS5I+itp3g4/5k9BHjnUsF0BaqnSb1pTb3+bGtkRRqnJPeKeatH0:9GuNwQNNYG+Sb6okRyWcW
MD5:	C713B294131BFFD44EAF36A851F1F12A
SHA1:	C705306C0E1BEECED31327BBFC0F107C4EC4373D
SHA-256:	A593F314AE6E4D7AF7DACBFDF86CA06E5A772DD7D3E33846AE4A43C660A1C661
SHA-512:	AED487266EB1D6B1496FC2C5642062FBA985A28D2D12BDC94D4821E85350A58C1A05C3EFC351CA457CACD7912AF304418056E40BF64009D3D4648BD6E47F2E13
Malicious:	false
Preview:	L.......,.......,.......D...]...p...............................................................................S...........................................................................................................................................................................3................&..................................................................................................................................j.......................l...................................................................................................................Y......."...................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\temp

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsgC284.tmp
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 2 10:16:10 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9977457552790936
Encrypted:	false
SSDEEP:	48:8rQdpTm7jbHyidAKZdA1JehwiZUklqehGy+3:8ru0Qdy
MD5:	D778D5BEC10E75125D68302DFABE5A21
SHA1:	C2231FADD74E947C72CB5E77442EB432E8861BDD
SHA-256:	477CD507887A1373FFBABECFA741C15740BFEAE9F530C70BC0A4BD920F77EF15
SHA-512:	EA96A1F443E802281CDDFF521BEF494CDFAC9E6FFABD9466BF8FD87C3AF33432B38617A41BB79FF523FADDDD77AD482FB79DC394475628D12C37566386A46AF4
Malicious:	false
Preview:	L..................F.@.. ...$+.,....f.8..]......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I"Z.Y....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V"Z.Z....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V"Z.Z....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V"Z.Z...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V"Z.Z...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 2 10:16:10 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.015980674162336
Encrypted:	false
SSDEEP:	48:8NQdpTm7jbHyidAKZdA10eh/iZUkAQkqehNy+2:8Nu069QQy
MD5:	27EA934B3EFA8EC4F8FF3053C3841DD7
SHA1:	E7427A62C05403BCB6B26FE4821EC57426A03737
SHA-256:	C38C98B1901302A13CC94F94181E3737CE4EDB9E0F756274D8335F3ECAD6F5A5
SHA-512:	B261F0FA9F4BB108B871F56FE16EB0E8192943AD3FBE1FDBC7FA523C4C3C816E8319ED104A46AA48CF05E374930D131AFAD568779F0E2CAC6A6B881B34F8FF5C
Malicious:	false
Preview:	L..................F.@.. ...$+.,......+..]......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I"Z.Y....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V"Z.Z....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V"Z.Z....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V"Z.Z...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V"Z.Z...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.022009730630303
Encrypted:	false
SSDEEP:	48:8eQdpTm7jjHyidAKZdA14tIeh7sFiZUkmgqeh7sHy+BX:8eu0qnxy
MD5:	E1686048C76A09B75956964385EDF55D
SHA1:	C6DAD16C68EAB9FD229AF67AA7FFC4D311AFF46F
SHA-256:	2C3BE94DE18411E61F4E0BFBD2785E0EAEB1046005B63885A4B448B25911EECD
SHA-512:	D123D5F801D7F6C8461B2890606B03D54BFFFA5874EAD37567A5D60CF8C50F39BDF0CB17A6E366AE5ED069704D86808C58CE14EA177D70D9F1AE56F1A8FB6158
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I"Z.Y....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V"Z.Z....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V"Z.Z....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V"Z.Z...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 2 10:16:10 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.0133486757370544
Encrypted:	false
SSDEEP:	48:84QdpTm7jbHyidAKZdA1behDiZUkwqehJy+R:84u0xfy
MD5:	66F6F73B89049693192BB33120E095DB
SHA1:	0F3A02DFF6DD58267E4803B65157E4DAC0E43170
SHA-256:	F043D0FCDF7C47C0B332CC82F434288B2A3CE512F0D01FE65E2CD7F82DAF9315
SHA-512:	6CFCE0FDC3B48141C5B1D21FF1F99F578DD71571C65C511B36DD28562FAA25334BA5AF2A82FEF2AD6E4FCBDBDD7F99054583B07AD1EB65B31FD7A03DCA2A5FC9
Malicious:	false
Preview:	L..................F.@.. ...$+.,....@.$..]......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I"Z.Y....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V"Z.Z....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V"Z.Z....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V"Z.Z...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V"Z.Z...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 2 10:16:10 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.002112920868161
Encrypted:	false
SSDEEP:	48:8vQdpTm7jbHyidAKZdA1VehBiZUk1W1qehLy+C:8vu0R9ry
MD5:	B89FA0D21D587486EB98C1019BC96061
SHA1:	E82DB4DCD23C764ED8B8B04CB724F4B2A6874ABC
SHA-256:	DBC162DC27365F598856D316CA2458EDC8FD17D04AC2C0CB6CEB9BE8AB8D155F
SHA-512:	A1D81F11974909ED392561655A27571CBBB7A85C34AA93710276862986038E8E1A80ECDDDC30AA846CA68EF2FAA552DE74714BFF65C8726FF84FD08693D13CB8
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....^2..]......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I"Z.Y....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V"Z.Z....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V"Z.Z....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V"Z.Z...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V"Z.Z...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 2 10:16:10 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.013190253041647
Encrypted:	false
SSDEEP:	48:85z/QdpTm7jbHyidAKZdA1duT6ehOuTbbiZUk5OjqehOuTbxy+yT+:8J/u0BTTTbxWOvTbxy7T
MD5:	E59D77049BC49FDB780BB3CCD97133DC
SHA1:	F48636C68C50F8066B95242129343725DF3E68B4
SHA-256:	A17A76C783DC90E5D0A99E0174512B8CAAF19A4E4D8AC44E87E0DFC3FD8DA561
SHA-512:	58E5A03E43408326B95EDEE3C921D3641E4C6786BF91D4C227329643C533D6A4638EED65D4ED898C94EDD7639E59229A6FF6748F3C22C9630B8DAFBA5878FC7F
Malicious:	false
Preview:	L..................F.@.. ...$+.,....-....]......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I"Z.Y....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V"Z.Z....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V"Z.Z....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V"Z.Z...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V"Z.Z...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsgC284.tmp
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Wed Nov 13 07:33:04 2024, mtime=Thu Jan 2 10:16:16 2025, atime=Wed Nov 13 07:33:04 2024, length=3561304, window=hide
Category:	dropped
Size (bytes):	1862
Entropy (8bit):	3.4805230898667516
Encrypted:	false
SSDEEP:	24:8ZUyjXPTs4ABj6R7xwtkkpiO/7BDqygm:8ayrPTo1k1Opijyg
MD5:	7DB1698D6728D56A019EC9E346307515
SHA1:	E987B0E752ADAA155FC669439FBF2562201A32BC
SHA-256:	9D1CA80BE5E41A0DBFC714A9DFFA5A9EDE30EFCC22E13712B30BF08B9DB9222B
SHA-512:	324016A1D65B78F164A77E1608467066B8F2403F5505B17A08FCECD0B0163BF86FA87DFDBE3CC37C47BBD480CB0E79F086C729A77FC2C0901E86FFD91B2FB7B4
Malicious:	false
Preview:	L..................F.@.. .... ...5..G....]... ...5..XW6.....................0.:..DG..Yr?.D..U..k0.&...&......&..9...n...].......]......t...CFSF..1....."Z.Z..PCAPPS~1....t.Y^...H.g.3..(.....gVA.G..k...F......"Z.Z"Z.Z...........................l..P.C.A.p.p.S.t.o.r.e...D.j.2.XW6.mY"D .PCAPPS~1.EXE..N......mY"D"Z.Z..............................P.c.A.p.p.S.t.o.r.e...e.x.e.......X...............-.......W..................C:\Users\user\PCAppStore\PcAppStore.exe..+.....\.....\.....\.....\.....\.....\.P.C.A.p.p.S.t.o.r.e.\.P.c.A.p.p.S.t.o.r.e...e.x.e...C.:.\.U.s.e.r.s.\.t.o.r.r.e.s.\.P.C.A.p.p.S.t.o.r.e.../.i.n.i.t. .d.e.f.a.u.l.t. .s.h.o.w.M.).C.:.\.U.s.e.r.s.\.t.o.r.r.e.s.\.P.C.A.p.p.S.t.o.r.e.\.p.c.a.p.p.s.t.o.r.e...i.c.o.........%USERPROFILE%\PCAppStore\pcappstore.ico.........................................................................................................................................................................................................................

C:\Users\user\Desktop\Setup.exe\Setup.exe

Download File

Process:	C:\Program Files\7-Zip\7zG.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Category:	dropped
Size (bytes):	205424
Entropy (8bit):	7.69413463133292
Encrypted:	false
SSDEEP:	3072:UbG7N2kDTHUpouUB0sm0PvktrGPzy5n+/mGCK8izuG2okB2h4l591BBgkU4UF:UbE/HUcasr8Gry5nmQiiGz4z9TJUxF
MD5:	D4E4F0B0432D6EB4E61518AF4F839905
SHA1:	C26C7105A33921D9985CB5F14482954A4EEC0C81
SHA-256:	060BBA658926E37D6BF06555049CE0B6652137073418575F16629A75BEA91454
SHA-512:	9AF214C6B2E6AFF092C895CAEBD70D732F086AB59A89D445624A2BD6FDDACDC0BA37C0E813EED3F207652DAA18764CAE2198886A0D22DC6FAD65F32836C87CC9
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1...Pf..Pf..Pf._9..Pf..Pg.LPf._;..Pf.sV..Pf..V`..Pf.Rich.Pf.........................PE..L...Z.Oa.................j..........-5............@..........................P.......9....@.............................................................h)...........................................................................................text....h.......j.................. ..`.rdata...............n..............@..@.data...............................@....ndata...`...`...........................rsrc...............................@..@................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\AutoUpdater.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsgC284.tmp
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	601944
Entropy (8bit):	6.427448654052367
Encrypted:	false
SSDEEP:	12288:cYnWC7sQB/cA4nLrtkWemCn9Y8yxXXauI:Z7sDLRkWeRndyxXXaV
MD5:	455C3750F7A751F26A5D676B505F0A0D
SHA1:	572B46B9C52A8751A4B0F26BA9D225EF20DC498C
SHA-256:	0EF046168B07BDC7452BAC5B4CFC7C937203F70C5D30020252F3CCC5E8FC9E05
SHA-512:	FA552AC1067DFA9826C0437F62C047AD6320E904EF4A3EF71C8136D5C7EF0B031CF15E964F09E31BEDD282C22BFDB0C9C0F3BEB4F97A5CE6952F7760A900BFDE
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..............................f....f....f...............g.....gH.... ....g....Rich...........PE..d....c4g.........."....).......................@.............................P....../.....`.................................................P...........h....P..PR......X)...@......P...T.......................(.......@............................................text............................... ..`.rdata...m.......n..................@..@.data....<....... ..................@....pdata..PR...P...T... ..............@..@.rsrc...h............t..............@..@.reloc.......@......................@..B................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\PcAppStore.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsgC284.tmp
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	3561304
Entropy (8bit):	6.002681783361559
Encrypted:	false
SSDEEP:	24576:MHXg4DP7/bh3hKqZyTn21/nQIFFuogHNYvYffa5TbiN28w97k8XTQIsy73hz4nFq:M3g4/5k9BHjnUsF0BaqnSb1pTb3+bD
MD5:	0BA9718F1D8FBFFD130565A2BC568140
SHA1:	DA7EBDC29532412CB0FA6300491566C2285BA24B
SHA-256:	97C416C5DF871B7C73FCEAB76467005EED69C2C6FFFC9D9F6F769A890FF0ED28
SHA-512:	9EF99A26D057B91CF32BD6DE23846392BCD37138B16A986CD0450181519EFCE3368A4C4BE043DEA8D3EE4B5C63D4273111EE76BAD91994A8F16FBA405599F8ED
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 5%
Preview:	MZ......................@...................................0...........!..L.!This program cannot be run in DOS mode....$.........g...O..O..O...N3..O.3.N...O..O..O.3.N..O.3.N...O...N..O...N..O...N..O...N...O..O6..O..O..O.2.N..O.2.N..O.2.O..O..O..O.2.N..ORich..O........................PE..d....d4g.........."....).............&........@.............................07.....8.6...`..................................................0......P6.......3..V....6.X)....7.\,...U..p....................W..(....S..@...........................................text...>......................... ..`.rdata..>.........................@..@.data.........0..4....0.............@....pdata...V....3..X....3.............@..@.rsrc........P6......Z5.............@..@.reloc..\,....7.......6.............@..B................................................................................................................................................................................................

C:\Users\user\PCAppStore\ReadMe.txt

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsgC284.tmp
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	146
Entropy (8bit):	4.577360416859904
Encrypted:	false
SSDEEP:	3:TKPyFfliFRNAl2sIaRjyM1KOTxLELMZ4MKLJF8EelYq8AsXJVVWM4v:TyyFflmSssI+j1NLELM6MKn8EquZVVCv
MD5:	2845450EA9D938CFEA9809CA0C827F12
SHA1:	8DE2189530DA5923365436C37E4C55C500AC3FBF
SHA-256:	7FDADB3CA5B81C6D1C58A20610921BF89D63DC65B77BE982F422C6FD2A13F166
SHA-512:	7D19FE6E9DD51BB880FD6FBB7EE126C8078771EE5166D53F312B04D117CE2897CBB6DFB5E5627314C3CF8B56F7A2BBF5B9D38258E7912B0AC5D420B611B7C363
Malicious:	false
Preview:	Fhis folder contains the PC App Store for Microsoft Windows.....For additional information, please visit https://pcapp.store/?p=lpd_appstore-faq..

C:\Users\user\PCAppStore\Temp\tempPOSTData

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsgC284.tmp
File Type:	JSON data
Category:	dropped
Size (bytes):	2368
Entropy (8bit):	5.135711144005194
Encrypted:	false
SSDEEP:	48:YZ1HdRyDF98Ep6aZMqr8ZPfo1yfT7bmvfGFYRn0ef0rE+yJWHvreSYkM9Xp8m889:oNd8dASMtZPA4/aHGFI0eqpyJWHvreSK
MD5:	259FDB4E92DA40BC9AA01D4C45B5982C
SHA1:	3071F7D0122891AAA9535B67FF0AEDCED773AC64
SHA-256:	F8B6011817FBE1AC7F6BAAFB72A355E36CFA51C287715B9ED1B44AAF36BF3110
SHA-512:	4399FF51340BFF525D8759E485B8B6C8B838FF67F76B0E92D661162384E3CDBB27E42377C0AA2B014A49C500FEAB2048FC2FB971723E475D10662A90F03B342B
Malicious:	false
Preview:	{"system_stats":{"os_name":"Microsoft+Windows+10+Pro","os_installdate":"20231003095718%2E000000%2B060","os_processes":"100","os_architecture":"64-bit","os_virtmem":"8387636","os_mem":"4193332","cpu_name":"Intel%28R%29+Core%28TM%292+CPU+6600+%40+2%2E40+GHz","cpu_maxclock":"2000","cpu_cores":"4","cpu_logicalproc":"4","pc_vendor":"VMware%2C+Inc%2E","pc_version":"None","gpu_name":"2YSPKRWS","gpu_ram":"0","gpu_bitsperpixel":"32","gpu_x":"1280","gpu_y":"1024","disk_name":"ZU4SORKW+SCSI+Disk+Device","disk_size":"412300001200","sec_as":"","sec_av":"Windows+Defender","sec_fw":"","bios_releasedate":"20230522000000%2E000000%2B000"},"pcapps":{"0":"7-Zip+23%2E01+%28x64%29","1":"Mozilla+Firefox+%28x64+en-US%29","2":"Mozilla+Maintenance+Service","3":"Microsoft+Office+Professional+Plus+2019+-+en-us","4":"Microsoft+Visual+C%2B%2B+2022+X64+Additional+Runtime+-+14%2E36%2E32532","5":"Microsoft+Update+Health+Tools","6":"Office+16+Click-to-Run+Licensing+Component","7":"Office+16+Click-to-Run+Extensibility+C

C:\Users\user\PCAppStore\Temp\tempPOSTResponse

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsgC284.tmp
File Type:	JSON data
Category:	dropped
Size (bytes):	73
Entropy (8bit):	4.089026662492467
Encrypted:	false
SSDEEP:	3:YGVE8fptxgDQLRv6zjQJNRvUXZ5:YGFRt9IoNaZ5
MD5:	3024A54E0C352ABE5EB5F753CA4828DA
SHA1:	DF0206851654405C8E5C2D3BC96FB536B8C2DCBF
SHA-256:	3CD0A703506C7394D6115D9FF721516560894358AEF07459F30D8930DF6C3B61
SHA-512:	D9D44051DF56B29AA596EE38463B781DBE27F917F7DAE1B2420122616DA108520429DDA58C75C7E6B2D41093F83C5A4BAE96024885AF3956F23A3CE5BD3F9358
Malicious:	false
Preview:	{"cpg":"default","inst_excl":null,"inst_addon":null,"inst_advanced":null}

C:\Users\user\PCAppStore\Uninstaller.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsgC284.tmp
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Category:	dropped
Size (bytes):	109144
Entropy (8bit):	7.1990929921196845
Encrypted:	false
SSDEEP:	3072:DfY/TU9fE9PEtulB0sm0ViluBnqVQTUtB7:TYa6Pas5pwQIT
MD5:	5A2FBAC594BAA404BFF1BB22260234F3
SHA1:	0590F1437C0E2F30B2F782E4E5FB8196B9CF2B84
SHA-256:	F06B42AD92C0BEC7B07F2FD7C0A03D62C0912A0FF2168DAC9391E86AC82EF721
SHA-512:	CD124FC4F7D3F655A85193C5BAAE58679A4B948DB48EFA2A6DDF780AC6A4DA3F9D0823B3FD3EAE0D9B5B598D985B633026C5672B30AAC7AFD3589B4B6308EA65
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 29%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1...Pf..Pf..Pf._9..Pf..Pg.LPf._;..Pf.sV..Pf..V`..Pf.Rich.Pf.........................PE..L.....Oa.................h...*......@6............@..........................`......sg....@.............................................................X)...........................................................................................text...vf.......h.................. ..`.rdata...............l..............@..@.data...x...........................@....ndata... ...............................rsrc...............................@..@................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\4b6acda4-b4a7-4d46-9e9f-703272e1a480.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2054
Entropy (8bit):	5.467260285492229
Encrypted:	false
SSDEEP:	48:YDEFMsFiHC0afoX60K5nXXHB+adrx0BIZzWRjT6BG/d2a:PNkC1foK0cnB/yuZSjT6I4a
MD5:	DDA0D3351FA307619F1B6CD3C7545004
SHA1:	626DC6EC8CBA7C198450EE326FE2EB84A54D7694
SHA-256:	F359AEEF408D039A63E403837C10C79FBEF096147B07A3BFA627A9C875A5EE3D
SHA-512:	570E33105474BB6D23D1D4EEB6A0B693BD369A3AB77E2687C540B862025F5EC731EB233C0C35FF31B741D94CA4187489F1C9F88A928D0A4913C0BA6320F22E53
Malicious:	false
Preview:	{"dual_engine":{"ie_to_edge":{"redirection_mode":0}},"edge":{"tab_stabs":{"closed_without_unfreeze_never_unfrozen":0,"closed_without_unfreeze_previously_unfrozen":0,"discard_without_unfreeze_never_unfrozen":0,"discard_without_unfreeze_previously_unfrozen":0},"tab_stats":{"frozen_daily":0,"unfrozen_daily":0}},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAA81Ort5ryISYkW3Smy278mEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAABfkcQCJG0eqq3Es+CT0e1ekvYlg2bXf7sfJ19pP9o1QAAAAAAOgAAAAAIAACAAAACQbAyTsTuOo5ZZJEFR+pVrJgvflBUw0D373R1RH0DMuTAAAADAiNjx8M/P8F+UWWvPHb+1ACYWJ9NrRlA5TJrfS/daM8wZ6CFQJHksdNMK0IX6vkFAAAAAPTcBDc2rLUhShGtDNAjnauivwopCdw0czWrFJddHY0jra/H2aCsS8ws7TMMXEHlXCEXNW56qZ/2RKArmahyB0w=="},"policy":{"last_statistics_update":"13380290186638985"},"profile":{"info_cache":{},"profile_counts_reported":"13380290186702096","profiles_order":[]},

C:\Users\user\PCAppStore\UserData\EBWebView\67618700-3074-4099-a2bd-148f23f55a39.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2901
Entropy (8bit):	5.3010872111948775
Encrypted:	false
SSDEEP:	48:YDEFMsFiHGS0afoX603p8QSh/cIgwLURMYXylVotoWM5K1DXeHB+adrx0BIZzWRH:PNkGS1foK058rh/cI9URoDotodrB/yuy
MD5:	575619420E932C8E577712DD2734C96D
SHA1:	26FA072B27D26267BCC3404E8D904C5D4C4C2FAA
SHA-256:	BA5B60B54206B185F22F38B2A4CC408612AD80B923127F35999C227A6BA24D59
SHA-512:	9841B6B81B56724CF834A672C6F9236253D7F1F180ADDA96D45748020BD0062D2ED8D497C69C58B1A1A2C4B6EAA8BC35DB18D33F40ABD3D8EE5EEDA19BCC2DA6
Malicious:	false
Preview:	{"dual_engine":{"ie_to_edge":{"redirection_mode":0}},"edge":{"tab_stabs":{"closed_without_unfreeze_never_unfrozen":0,"closed_without_unfreeze_previously_unfrozen":0,"discard_without_unfreeze_never_unfrozen":0,"discard_without_unfreeze_previously_unfrozen":0},"tab_stats":{"frozen_daily":0,"unfrozen_daily":0}},"fre":{"oem_bookmarks_set":true},"hardware_acceleration_mode_previous":true,"legacy":{"profile":{"name":{"migrated":true}}},"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAA81Ort5ryISYkW3Smy278mEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAABfkcQCJG0eqq3Es+CT0e1ekvYlg2bXf7sfJ19pP9o1QAAAAAAOgAAAAAIAACAAAACQbAyTsTuOo5ZZJEFR+pVrJgvflBUw0D373R1RH0DMuTAAAADAiNjx8M/P8F+UWWvPHb+1ACYWJ9NrRlA5TJrfS/daM8wZ6CFQJHksdNMK0IX6vkFAAAAAPTcBDc2rLUhShGtDNAjnauivwopCdw0czWrFJddHY0jra/H2aCsS8ws7TMMXEHlXCEXNW56qZ/2RKArmahyB0w=="},"policy":{"last_statistics_update":"13380290186638985"},"profile":{"info_cache":{"Default":{"avatar_icon":"chrome://t

C:\Users\user\PCAppStore\UserData\EBWebView\7e17f61b-f53e-4577-8f83-f131c319044c.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	951
Entropy (8bit):	5.707942524856008
Encrypted:	false
SSDEEP:	24:YKWJu5rrtnOXu0wywRcBIaeCqWOoPbvXftQQRCYfYg:YqfoX6GBIZzojv6B0
MD5:	8BC70F0F884B46E945CF9B1C38E09530
SHA1:	FB7D0C46E20F957A48C176F054FB1DEBB696E7D7
SHA-256:	CF3804F02A53072AAD878E89287C7A8B94D36AD8D3BFF19DF11CC1247027CD9C
SHA-512:	4017BA53CC30F40763F80014AA481F55B9A38E7FABC2F1531522609A9D6160E54CC460D82BCF5DABDD757CE3A61B69869AC55B89E4767ABAB37453F349415AFC
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAA81Ort5ryISYkW3Smy278mEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAABfkcQCJG0eqq3Es+CT0e1ekvYlg2bXf7sfJ19pP9o1QAAAAAAOgAAAAAIAACAAAACQbAyTsTuOo5ZZJEFR+pVrJgvflBUw0D373R1RH0DMuTAAAADAiNjx8M/P8F+UWWvPHb+1ACYWJ9NrRlA5TJrfS/daM8wZ6CFQJHksdNMK0IX6vkFAAAAAPTcBDc2rLUhShGtDNAjnauivwopCdw0czWrFJddHY0jra/H2aCsS8ws7TMMXEHlXCEXNW56qZ/2RKArmahyB0w=="},"uninstall_metrics":{"installation_date2":"1735816586"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":4643,"pseudo_low_entropy_source":1314,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13380290186483072","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\PCAppStore\UserData\EBWebView\Crashpad\settings.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	280
Entropy (8bit):	1.8873942837026092
Encrypted:	false
SSDEEP:	3:FiWWltlY2dFll///NEjYb1gmlx/ll:o1Y2fPfCmlZl
MD5:	6271A2E4D68A186F3E47F03C2BA7E4AB
SHA1:	7C36B928BCB0F5EE4420DAE9D115BB37AF31C601
SHA-256:	73C4A3A89A2745256DEF72DFD0B21368D0B008B7ADBBDCDFA5406711906776F0
SHA-512:	113D6694CEEDC22826B5EF3E296CBE8617BB540BEC873DB977BD1DC64C506E55222A132082C3832503051473EE4C4AA4F1734FC1996161B1B74B123F4502023C
Malicious:	false
Preview:	sdPC......................U.1.I..{)Yx.................................................................................................................................................................................................{F3017226-FE2A-4295-8BDF-00C3A9A7E4C.}C:........

C:\Users\user\PCAppStore\UserData\EBWebView\Crashpad\throttle_store.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	20
Entropy (8bit):	3.6219280948873624
Encrypted:	false
SSDEEP:	3:8g6Vvn:8g6Vv
MD5:	9E4E94633B73F4A7680240A0FFD6CD2C
SHA1:	E68E02453CE22736169A56FDB59043D33668368F
SHA-256:	41C91A9C93D76295746A149DCE7EBB3B9EE2CB551D84365FFF108E59A61CC304
SHA-512:	193011A756B2368956C71A9A3AE8BC9537D99F52218F124B2E64545EEB5227861D372639052B74D0DD956CB33CA72A9107E069F1EF332B9645044849D14AF337
Malicious:	false
Preview:	level=none expiry=0.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	45056
Entropy (8bit):	0.27421124570985683
Encrypted:	false
SSDEEP:	24:dr+a3BiY5h5oga7H40W145tpvjKYfaowQPUf9S3lgPk/9TiP5beUq7pME63xd7Hv:D3x5LS7H9dFDLwQMvu2
MD5:	A377D9954AB7271847F88028535E9C1A
SHA1:	87DC5953B5A7CC8A8448A66D27A8CD6F9973C3CD
SHA-256:	FE656165D4CDFEC7D5E1A756B7201C5C77FBF1DC9C85F92C7A760241BD2252FB
SHA-512:	A397F3DB068CBFE4F43774BCF994E848814D2059809079D6A93C1B047E907136C3366104BF2F94FCCFAA2777BB68139FCF43610B4A5C7263835E26E881093B96
Malicious:	false
Preview:	............$...%.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.3452540411410724
Encrypted:	false
SSDEEP:	96:hq/Sdsp9CZ2FexyRM9Awna1K2+QpCdlx4kAugrXNR8SH:hg4sWZCOWIAwnaZ+GCvx4jrXNR8S
MD5:	7F0B33F5550970AA2916B823676477C6
SHA1:	76659C0B3080E01184D57FA465DDEE737920E2ED
SHA-256:	FB6DD565C030E7762C586FD00FFEB600ED7C256CCAFB996643CA2B97E58FDF17
SHA-512:	E0249E32AE29F5171AD687E9156EA4C952A98FB003846C98A0C0B80C9796F87DBE9952D09745C8E9996CD910DAFD0258355AEBFB7A2885FFE6632B4884EF75A6
Malicious:	false
Preview:	................:.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	1056768
Entropy (8bit):	1.1562898041215863
Encrypted:	false
SSDEEP:	768:72kJtdiJtyMJti12kJtaMJtwiJtuiJtsiJtK2iJt2ZiJt4uiJtnMJtbJMJt0iJte:3Qx
MD5:	B2D831127B6FC682932EAD9C8608BA28
SHA1:	F840906D42C90BB0D9C34E354817B4F3B4B7DDBB
SHA-256:	6031AF7DF018F45703386E0ED7DDC97604CEC8EE0DF5141F5DE539B5A8CD6C99
SHA-512:	993F83E53F500F1AF7D63F67E26486004108DE62C5D852AF2E4237FF9BA194D570B998D3530CEDB4F6C0640B54434E186526F5AA7E445C5227BA157A653F2787
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	4202496
Entropy (8bit):	0.06600073972660155
Encrypted:	false
SSDEEP:	192:S72v1umRyu9JZbtM7U6ZR77SSlsXp7h9PKr6L1KJ9yRh/+AogjkisWttJkuzTCFp:Sa1AyJtz0sV0e1j+AoGsWtxWqCJHHNi
MD5:	B7D095025C30750ED349F07DD51F6884
SHA1:	5184F85ECA2E9786AF860454A4A2353977941696
SHA-256:	F6ADE9C0D233B4724BC4C80FA45494199D8828F35E1381A739F95C33350EA4D9
SHA-512:	48193BE580358B1A1A704940EF504F6F6639651D2B921625942AF5B2809348036A6920783F09B5622C6B4EB418B05D8057780D9263B58A331AFAA39EE994C352
Malicious:	false
Preview:	................................................................................s.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	PNG image data, 470 x 290, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	44578
Entropy (8bit):	7.98251947477354
Encrypted:	false
SSDEEP:	768:KKMWZZdSpNAcUijWc/hNHhlgTE70EDPm/8xMzCiKJNWf2dDrap285BxdfX3hl:KKfZZ4jLWc/rHMgj8uMmSf2dDmlRRhl
MD5:	E0855F4D7F014155F14B1B189CBA7B5F
SHA1:	863925CA0612B8C7BED1F5E257782233BAE81F43
SHA-256:	FF6A86C9DBBB3D5A46216E1624DF5BD082A6E8DD5F853A7C1882C97B8B0BDB31
SHA-512:	060B48B42A203213C10ED065745E1526D0E8ECE1E7D4521162FF1375242193DAB2387365DF4DA673188A8273B777BFEF3DA59FF055AEF3A4950BA32C317FBA0D
Malicious:	false
Preview:	.PNG........IHDR.......".....D..U....pHYs.................sRGB.........gAMA......a.....IDATx..}..\E......d.@....lJ....\Q...P.......?........M...YE4A..@....HH .6Y..n....o....L&.>...{.V.....9uJ...zg.r...7..JHHHHHH...h.3.R/(G..Q".......`....b.....W..3.u.QBBBBBBB}....t.9..>.......j......_..........u.H:....vi.w&RMHHHHH....wD..........D........D".............#h.~...._x!...q..z...mL9.e..k.....w...\|...g...C.{n?>...8.._..#........N........J......[..N. .)....n....i.C....G./....3fX......B.u.%.X...I.>h.........."j_...-_nIj.!.S...~.;.<....8.._h......I'Y.sa..u.....1....c...M..m<v.U4..sm.co..........~.~..~.hs.v...XBBBB...+........;......!..-......}.b.QB.nc...#.g.!c.\|...V.. ln.mM:.T...y.V.N;...7.BM]\..:.3..<..,9.q.?..l......I.....H......[6z.X%@..F.. ....V..D...E@Y..6..cb..a..5..R=.(I..b.... ............D........<@hMs..1}h3j7!!!!a.@..+....`.d..H.A..La.....,....q......../@h{.2R.r9...dQ.m.r.5U$L....R.Oa....Y....T1`........W.....X.jT0....._5.......\|N

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_000002

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 249x126, components 3
Category:	dropped
Size (bytes):	47131
Entropy (8bit):	7.931779753061097
Encrypted:	false
SSDEEP:	768:G+icWueyhK021sTDjaLhazFDvSU1DhTC6PNljl4NwfcMVB6e7MdKBun10N8SXpzR:G8WueMjas/GLc19TWCOWMdt6N8ApVH
MD5:	0B80B598C0453F86C3447CD6A353F728
SHA1:	DCEEAAAAEF8911A3E7FF06BBCA1EC011E024B629
SHA-256:	EFDE12638068531699B66A5498E233FE0F19EAEB53FB093AA2C58F4A0479B758
SHA-512:	2CAD81B08AD06EF5BE25D18A7AA5EB05E247FC075866F6A075017CFD8E9CDF73F911AB7072F0B431E14D62A7F8CBB8BEC6182588E90B02A28B4A1A28A25D8641
Malicious:	false
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................~.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....,M...X.q.:c.?_..Z..d.-........?..7.....o~..}.7.# rA.....<...\.0.]....{...V...m....E...p{9..lW;.......F.b.....>....@.....7..B...].7....`.v..\.*../..q..'..\HN4o.{.cX.......i..b.O....).....7....E#.....[..r.wC..%..?\...7....i;..R...:_E}.....K-....[.TV9.I...=#..O........U?...h.........?(.....'..$...q...8.B...........J.n..F.....#....GC.foQ......}........_....

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_000003

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 249x126, components 3
Category:	dropped
Size (bytes):	51724
Entropy (8bit):	7.940662493791096
Encrypted:	false
SSDEEP:	1536:GmgX+s4EgDmSLidL1wOWuuPXkra9GynvpL9FVe33:O54EgiFyuykragMvxReH
MD5:	9799622A270F0D1ED5E7C7640992E94D
SHA1:	712500076805CD81B2891D97492BA0DCA4023572
SHA-256:	8C10DC4E40B3C35C760E10880371FBA2222C2872DA1F480598EAF41809ABDB0C
SHA-512:	0B3732CF637BF85535F84897E1B5AFA5271EE342CD63111CADE654EA49ED34E6F7B495071410675EB2D3BA98DBDA06849E6383980E71695E874B087B1C432F3D
Malicious:	false
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................~.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...\|S..o.:.._Owsu4..r....,...ZE....)... 8....7....g......3...U.Rs.'7XznM...F..Q\|..#................nW....B.#9.cW.QE).1..ukU..)NRz....^._..Ip.4P..Qy.ne.YR\........Ym..e....c+TX.QS..:t....RS.ex.FQ..e...T.56.....l+...P.J.X.O...!N...+...y......N.....>...z.....(...f.7...C>./..m..Q.F..}.7-..m.6....RY.E&#...."10...C...]...q...\|..r.JQ.j3..9Z.j....iu...lE..'Fn.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_000004

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	PNG image data, 480 x 280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	106708
Entropy (8bit):	7.992752550018408
Encrypted:	true
SSDEEP:	1536:s6tcPzbflX/dTw/ItVG3YXS5JSH+xsJvWwESbhx/XOX8+EHX3eNwhEKVNs/JKBSi:sZ7bfZ/1EItCY9YS5Vx/XwE7xs/JKEin
MD5:	D04AB43AA1F8D1575DCA31D23E4D0182
SHA1:	CE5EC5C3A22636A789CB98A9AC2F2C46D36CE0C6
SHA-256:	3A1F9BEE190EBDEAD1C6518E90AE275CFF5E8322BD11F41BCEE8D7EAB0022C50
SHA-512:	6E70F12AF4379F623BE8ADB178A6F2908AFEFAF823A5CB211B9FBA02C91D399D1EF9476AB5E7E735EE12A9A3028FBC9A99EEFAF43D6561FC7AA7E5E15E7397EE
Malicious:	false
Preview:	.PNG........IHDR...............%.....pHYs.................IDATx..u.eG..?........=!DI..H.........].-...A..-...A.@....I23....n..[...._..LfB.y..[..{.S.d....{k..G...N....4..)......o..q.s..)&....a..-cU.....>~i.6........o..tND..,NK\........(...`.nl.'Tv_Q. .:...L..O5.b..X..y.... ...=`...`W.i-.4...'....W..;.<B.kZ.D..K3..>..8a7.n1....i......o.YH...0.,...&....%B..t.r.w!g...qG.\.5a.I..}...pO...C........!..F.c........x@0Q.{E...p.~*..v.J...&..k.$t...~..xsy...[.?(.>............^.....[3..=!.O......9.....N..H....;.....}0<`...........t>..+.....T;....,...D.;...E..$.v,.....]....D7..a/..bx..0LyQ.U .....pbO)t..;....o..i@.=\.....E.........y/.{)......a...{m..D\|.....e..\-=..O.>{..<!.F...I....,<..^,....cH.BG...X....j....4....L.P...v.......N./jS.d.0.aW.oQ..a..J.{P.m.s.....y.I.>LA..4..S...8.)._.......c`..g...Q...\|'.r.d!....B'.R:y.`.....=...\|E.........0.9........kN~a.8......\|f.8..F.~.....\|..9..A..=a.....d'S....S.....e..OW.....Z-].&..v......i.3z......a\..~

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_000005

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	PNG image data, 480 x 280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	187314
Entropy (8bit):	7.973332127753762
Encrypted:	false
SSDEEP:	3072:CiJXRzh6W7i2W1csgVhygjkbrPeVW4W3KdTrvC2cabjwFiWtB/QlQFYq2GAybdUL:CiJXRzsW7yc9yYgv+nt/iiWv/HAy5qFN
MD5:	F5C3741BFB4B535D69765D82350ECDEA
SHA1:	AFC0D990DF50142B19C15F77CD9817C222A47D48
SHA-256:	D15B3FDB00818B6590D59E48A08B5BF76B30ED0355261942F7A64308A6F035A1
SHA-512:	387A2C0D1C751C19FA1E0FD810EC8AE1E0EB29AAF04535D3553294F3DB462B40D04A48A44192EE5D01BE0C5858A4F17020DFE75DFC61B4BC72014063A0AD1C4E
Malicious:	false
Preview:	.PNG........IHDR...............%...4rcaBX..4rjumb....jumdc2pa.........8.q.c2pa...4Ljumb...Mjumdc2ma.........8.q.adobe:urn:uuid:46d7b01a-2d78-42c3-8710-ba291b2c91df.....jumb...)jumdc2as.........8.q.c2pa.assertions.....jumb...&jumdcbor.........8.q.c2pa.actions.....cbor.gactions..factionkc2pa.editedmsoftwareAgentmAdobe FireflyqdigitalSourceTypexShttp://cv.iptc.org/newscodes/digitalsourcetype/compositeWithTrainedAlgorithmicMedia....jumb...(jumdcbor.........8.q.c2pa.hash.data....{cbor.jexclusions..estart.!flength.4~dnamenjumbf manifestcalgfsha256dhashX .9..D..NK._W..b..P'.?z.4Jn.!M..cpadH...........4jumb...$jumdc2cl.........8.q.c2pa.claim.....cbor.hdc:titleoGenerated Imageidc:formatiimage/pngjinstanceIDx,xmp:iid:2fa5a26e-1966-45da-9bc3-57d19c5a4bbeoclaim_generatorx6Adobe Photoshop/25.9.0 adobe_c2pa/0.9.3 c2pa-rs/0.31.0tclaim_generator_info..dnameoAdobe Photoshopgversionf25.9.0ocom.adobe.buildx.20240428.m.2603 2d135fa win.isignaturex.self#jumbf=c2pa.signaturejassertions..curlx'self#jumbf=c2

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_000006

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	PNG image data, 480 x 280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	183507
Entropy (8bit):	7.9938591241504
Encrypted:	true
SSDEEP:	3072:r/Usgc0QGoozmn0xiIga/8HFB8oaKA37CrdK2yWZxmgIYsdGnUWO6ybChCZEWxvG:DUjcFpoi0xi3lFqgHC8xmeabNiWMp
MD5:	2E7D8EB14E6BADEF25369EF05F04FFFC
SHA1:	6D371C63DE9B677EEAEA5A159FD49FAEFB2EA673
SHA-256:	48BF7FB003C70333C7A0AA9FF5A26146EF87FE0C301057DA76504EDEF82065F7
SHA-512:	FE288FF2CB68A12E552249D6D8A64D93882A68B5445F206995CABCA6A360871E84FA9C95E0A8CE09DC1B01E8ABD0BFE6AEC1BC86C1866648ED251784A7CC81AE
Malicious:	false
Preview:	.PNG........IHDR...............%.....pHYs................IDATx...y.m[~.}~s...}..6.o.{U%.$J.d..Lc....q%....w.....QHCT..pF.......8.G...c.16..F....P.........^.3...\k.....U..}.nV3.......?.OF.,.(.{........A@.\|]>?.x....t].T.....a..v.c..c.i.k.r.8.z.>`...8g..v;m.....+m^..00..=W.&.._.7.S..B..H....O..0..ljle!,.U..Hz......1.q...........>..&.9.......q:6Qt..=1B......}......kK.V....C.?....X.f[Q9...........u.Z9.G..]C.....3Q./..BXN/..o.....8=.....A8.;F.0rjT.......>..ch..S.c3.z......j..)B.".CG..U....~..8.{F.p..4.'...G.n......sOb.9...0.]?.@.:..Y..F..._.r."..Yy>.;.<M.c...g.x....#^}..w_\|.{{..9g.[.?..7../..._....-..U...?....t.}Q"1(......1FB..n.p..1.g.g.2t#}7...u.K..x.._.X.ME...Gb..v=...i...x\..o9.!F.....g-1.b...:.y..,.$..yY...$F.g.;(.3..2o.U_.w....mUei7..#...w..a.2....9J.w.....I..G.....@$.....6.>a...W......[~.{.....C.VT..SR..G....t.L.$-...Xa.<]"....t..Q..N.7n.G.T.c..a.p.3.@]+..k..D......!".!`...%...q..!b.....r.a..f..HQ.U.+y..k.8U7.I.G.1D.1.....`)d....

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_000007

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	PNG image data, 480 x 280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	234721
Entropy (8bit):	7.992429568773012
Encrypted:	true
SSDEEP:	6144:eSKMqLNOUdDiS6vu8iWZD79tsZeFQciqVPWQHpapu:0hLV8upETFQVqVPHpaM
MD5:	A28214A3689AFB5B8EB74B788525A33F
SHA1:	AA407E609E657E432FBB16F0506AC8D26AE85BA1
SHA-256:	A920AF2D91C52CE95238E1A9C3DE6B888C59FB0204806DF8F080DAE6C6D96628
SHA-512:	7634375146B30BC504DC60E02DED259B79EC7A3A60A7DCF36743631E411CF2D9A9529C67B31A731872667A7CAF76F3D2F7D4BB9AB6D92DA9CA5D987AA3B57865
Malicious:	false
Preview:	.PNG........IHDR...............%.....pHYs.................IDATx.\|.w.d[v.............}w..@7.. ...@Q......8.iI....H....h..a..@..~m..U......>#2.5..wN.G.....D...6...>....b.}.#.cp....N.......l....,4....{\|.\...a......".u.{.B....s`.`.b.D....y....f.\.R.Q.Q.....!.R....u...<O..Z...\w...>o...s&.....(U..~...j..z..&`s.R!...w..\|x........Q.l........P...].Jk^n..}...Y.KW...3....s.@5.......4......).......e..=3.z..ln....:.."..?...9.'../..k%..O................}.N....j....f`{....@_/.._..7._.k.....0;........?..u....._..8x.V6.+..o.;...#.....2....ex..........#...r.....:..g..."....Z]......)(.@.h..H..C.b....2...L..4\..6...)..V. ."s=.y{..i/.8./a.}.E.S...+.]..^xp.VV..Q(.C.b..#Y..%7....`.....s..r..z......h.....E..;.J{..........Y.(I.z.0.@{qr......Q..b..Tw........%.q..5..g?...0;.k.....=.....7..v..]0....ryx...m....N.......i.].[w..n.....}l... ....7%.^..52..3>...W6.}.._\|I...W.U./\|.....^.L.<_.l.a`....iMb`g.rY...t..\..-..B.#..Hs..Ioy@i..W..!...81,..Yw*.....=lI....l.<.5..X.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_000008

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	WebM
Category:	dropped
Size (bytes):	426038
Entropy (8bit):	7.992685126661242
Encrypted:	true
SSDEEP:	6144:bbswg5UGhOWIEFFM66hSJGPkoWCB10jMnj59oOQj37SuNMTIwntEEcay:hg+gOehgMM0wj5+TMcfXay
MD5:	78B151F06A4E0F5C23EE128BF779C507
SHA1:	9B4EEE484605FA7CD4A3FCB41DDC140354615F48
SHA-256:	9760D9BDE7FDFEAE010DE3E38EE6F2851F5B0B9F1974228CF69A296FD5F2BE34
SHA-512:	0AAED169ECF34227AEF3FCE5EA608B2F9471BC991C3DE555ABA867A209E6C71F7CD45E5458D03F80AC521ABDF045642CD94C0A95D3A030CB856490B2859A21A5
Malicious:	false
Preview:	.E..B...B...B..B..B..webmB...B....S.g.........M.t.M..S...I.fS...M..S...T.kS...M..S...T.gS...&M..S...S.kS.............X.........................................................................................I.f....B@M..Lavf60.3.100WA.Lavf60.3.100D..@.......T.k........B..s...D.h..$..."...eng..V_VP9...#....U............U..U...U....T.gA$ss.c..g.E..MAJOR_BRANDD..mp42g.E..MINOR_VERSIOND..0g.E..COMPATIBLE_BRANDSD..mp42mp41g.E..ENCODERD..Lavf60.3.100ss@.c..c...D.h..$g.E..HANDLER_NAMED...Mainconcept Video Media Handlerg.E..VENDOR_IDD..[0][0][0][0]g.E..ENCODERD..Lavc60.3.100 libvpx-vp9g.E..DURATIOND..00:00:10.000000000...C.u#..... N......I.B..P.6.8$..D..X....^...x...w......./.......{.....?f..ty..Y.{o..S....._......'......<KuS......Cz?E.w.a.)..#}...5....E....(...........4....@BQ......G[.Z\|.....]/..p....ngG4..QQ..!...Y...mi..q.Z..g!."....%X..L....r?.....C.s.......J.a....,D.[.......m..*.5n....S...i.........o...q...........lg..;...UCIb.y..DY.Y./....]....>...X...

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_000009

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	WebM
Category:	dropped
Size (bytes):	135327
Entropy (8bit):	7.969363003546897
Encrypted:	false
SSDEEP:	3072:NbXRbUiMooyvG0wsjamOYQvIZumDXD3P/M2KOLM3d7oWgaf:NbXKRuG0DjGVvIVDXzUX7ozaf
MD5:	A4A5D6083A0BA509F88C56EA55CBDD57
SHA1:	A74440C76DA72D4E2417772C4A6163A3DA012884
SHA-256:	2CA43C332C15B56083F41589F049FDCAB333675E2E0D75E84BB94F756BC64EDA
SHA-512:	A0F22E04596754E2C49D01C58E40829D9965008DF659EB9AF42E2942D5D003E741F71113C1552FA4F71BDC96921835FA2CE47E87D16A6D6698F602446FBECE74
Malicious:	false
Preview:	.E..B...B...B..B..B..webmB...B....S.g.......o.M.t.M..S...I.fS...M..S...T.kS...M..S...T.gS...&M..S...S.kS....F........X.........................................................................................I.f....B@M..Lavf60.3.100WA.Lavf60.3.100D..@.@......T.k........B..s. u..z......"...eng..V_VP9...#....U............U..U...U....T.gA$ss.c..g.E..MAJOR_BRANDD..mp42g.E..MINOR_VERSIOND..0g.E..COMPATIBLE_BRANDSD..mp42mp41g.E..ENCODERD..Lavf60.3.100ss@.c..c. u..z...g.E..HANDLER_NAMED...Mainconcept Video Media Handlerg.E..VENDOR_IDD..[0][0][0][0]g.E..ENCODERD..Lavc60.3.100 libvpx-vp9g.E..DURATIOND..00:00:08.000000000...C.u!.3...T......I.B..P.6.8$..D......../.?w.{....m..v..k7..........._.z\.A.1.`.1nu..]./...R.Zn...6..;......J....JC.....V)....,......]....d`....K"......~L...<..s...D....[.<.Dn..gv.....8...Yo.wtDN%..i.i..{u..W3...bm..". .1.h-.>Q..3..:T...v.XU...3-.$.......h...l;.7...C.F. &..U.g3.uQh>e.i+`....t..D.'..G..p.r9?2sd.hS..._...3l,FUq....hg.+..

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_00000a

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	PNG image data, 470 x 260, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	191508
Entropy (8bit):	7.993635250876462
Encrypted:	true
SSDEEP:	3072:hW0FuVWD5TRox5zpE7Nz5Y5w5RDU7zM/QtoD6jKsi/P2BYjDEDYGiNFr0qhy:Fu2TR8x4Nz5RgXFiGsff4YGQFQL
MD5:	1E835E5C660C739D3E264C484007B1D5
SHA1:	D86D2543E8A99EE7158E6250D7C83520628C79F9
SHA-256:	8802F73FDC711AF2D31367EF3CE4DE7744D650A15E65CB90E344E7980805B51D
SHA-512:	3AE6D78589F4C13F66DA840D52EFB012D9AE47C122FDA777F05125EE6F729CFD7CB13E12DF296FBB672432946C7A3B4F238C9FEF5FE302BB6F76CA5A764AE763
Malicious:	false
Preview:	.PNG........IHDR................~....pHYs.................sRGB.........gAMA......a....IDATx.....$.U...U.s....G.4....r....h0`.\|6\|p.KN6.`...G.eK.,+Y.H.49..s...w.>..:#..r...<*y\|..Pa.Wx...L.x.x.x.x.x.x.x../9t.~.~.~.~.~.~.~...............u.............._x.nX_?^?^?^?^?^?....#..>.J..}...R..?.Tn.R.[.K}.j.y.._.K....c.._.3K.....Z.Y?..\.6..4......j....<...?.X..._i=........._.W{m......).?......r......da..\.\|..c....g..h.v........\|.9j?..9....y.3....=...+.....^...\|...gt].a....zT.y..^........?.._1..4.K.Z.g..k...L.._i.k..j...;.W;G..\...W..ZU..............k.............U......{....-...z.......p..\|...u....w.....y.b].^..Z..R.P..~\|_....8;K}f.1._YHK......J..^..?.R.\....x-...s.W:.R2~..~\~..]...f@k...a...9~.c.q\|.g.q..G..e.......k.._.._I~.v.W..W3.?.=...z5.s...C.~..E.J..J.t5%w...C"..g^.+........."....>....R.v).p..S....-u....W{...P...>.j..Z...y.j..R..?.<.+).WR>?.Ay.s..jc.Z.....u.zM~.....k..^.j.m..x..X{......R...+.W....x....Q{....._.~.6...Y.~.3.t.....,..2.7..v..yDW...

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_00000b

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 249x126, components 3
Category:	dropped
Size (bytes):	62594
Entropy (8bit):	7.939956103030076
Encrypted:	false
SSDEEP:	1536:GhjJWGScRQyIyfcYTyTNZX4qisc/pllMeEux+yfY:0j/niyXp4AZsIpZH+QY
MD5:	99024BC9D17BC0EE957CD439108C1EBE
SHA1:	CFE3AB7FBBC95FB9B2F8375CFF71D12972348ED9
SHA-256:	5A696B7A31275BC467B10590141C3B70D0A3B3ECAAFE122109AA55140014C78D
SHA-512:	B5B5218E35208B022A99E4DFC6A1E44A97A1F2F85EDABFF56ECECE42F233AEF4F3E03A2A7FF9FDB384C784B7D8AFF6A2F062D2576077F45F64D085880188BA78
Malicious:	false
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................~.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....^.......[.mV.5.....HF.Mo..{&.Z....;".Y.<,jI.:..<...EZ.I[M.N.OM...9..mj..s...?.u.._.5.C......l..a..=.{.w.....&..f......N......#1.L.(..i.eX......a..[U.d....?z.a.>#..u.[K...]i.Y..2.)-"......Y.Ig..HQ.l..F.R&;...8.(...O.........p.`.d...j1..K.o/.......>+.X.4.I.u.O0.X....XEab...t..'uN...V>.........k....H?..,....+@.R.F....Y...K.-.v{..Bf.D'..........b1..F...v.G.+:2

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_00000c

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 249x126, components 3
Category:	dropped
Size (bytes):	83447
Entropy (8bit):	7.92494577174252
Encrypted:	false
SSDEEP:	1536:Gjy/rCbBBlD7TXDITSFPtUI6JWB8E2F3c0WfHvr5b8t5iHdizi:01/TkT+D6rRFM0WvD5bC5iHR
MD5:	EE755B13ADEABA5325E4A1686ECCB9E7
SHA1:	83E0D8420118A8398A066D78854BA667FB46D2D2
SHA-256:	73C44811E9DF68994B11A1D6BAB09E74934CA20BD545E66701329608DE1E4560
SHA-512:	4BF3F7619BE80B88DF95A4C01084FE2DA585B85976F629110B1682D2A75001D6587A801B55D5FA98BA486FBE97617697706C7896DD9D5A5C9EEA8853F1FFC24F
Malicious:	false
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................~.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...~.z..=.Px....\|v...6.........G...(.]GO..luH....O.to.^..R..;......>"..kR.G).V.nq...Rq.(.\........F.~.g..q'..{...<...s_.3zjt.8.c_.eyL.'B.<-WW%.]\|.......a.b!Nr..,E......%..y.x.].n.A.iz..em....X...7ht.X<C.....h1\. .}fMCD{{+K.e."k(\|.....(..Q...g...:u(.._...R..('.#....f....:.5.<-..i.y>w.5.\|5...>2UV....y...5.M....a.J5......m.O.#.....f.4-wZ.m..Z.[.<..{g.Y..........

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_00000d

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	WebM
Category:	dropped
Size (bytes):	528855
Entropy (8bit):	7.994812425529568
Encrypted:	true
SSDEEP:	12288:I2JeJH964kdDPfHGVj329dDdEEvmh7vGQgrFjrYOxVNAKpO8eJLsSA:3+d64kdLP1REEvmh7vG1FjrDFAUCLsSA
MD5:	CCA340197220E96581D6ACA8F94927E0
SHA1:	F31CBC430ED7661698A5B0E2EF63C2E0716193EA
SHA-256:	26F2CCE66AEDC8DAEE96AA03A5F980CCFFDBC216D2E7E5BAD81D3A5B5D8E5C5F
SHA-512:	8091DD259E2FA23877D0341BEDB3AFB9A25F94669309E2C913BF2B9A4E769C35759BFDB6B0E4AC8591231F95E1187E86B15E60DB6220F9E7D8A11A370325B0C0
Malicious:	false
Preview:	.E..B...B...B..B..B..webmB...B....S.g.........M.t.M..S...I.fS...M..S...T.kS...M..S...T.gS...&M..S...S.kS....k........X.........................................................................................I.f....B@M..Lavf60.3.100WA.Lavf60.3.100D..@.......T.k........B..s..+l......"...eng..V_VP9...#....U............U..U...U....T.gA$ss.c..g.E..MAJOR_BRANDD..mp42g.E..MINOR_VERSIOND..0g.E..COMPATIBLE_BRANDSD..mp42mp41g.E..ENCODERD..Lavf60.3.100ss@.c..c..+l...g.E..HANDLER_NAMED...Mainconcept Video Media Handlerg.E..VENDOR_IDD..[0][0][0][0]g.E..ENCODERD..Lavc60.3.100 libvpx-vp9g.E..DURATIOND..00:00:10.000000000...C.u#..... ].....I.B..P.6.8$..D......>......Q.......t.=..:.../.~..;..?.......{oG.~........\...:^.s..z:.....}...V...;.....)...).U..Ec.V.../b>^..8...1...m.k...@...V.O..I......x`.0.jmw<....c&9...90...5.ZU.}..g..( ..f....c..n.`G..@kH..n....7..xNV/\i.....E..JS..n.Qae...RP....c.=..8j;..22..5Q.....=BN..').i/..Ug.x.-...v...'.........m....UR

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_00000e

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	WebM
Category:	dropped
Size (bytes):	580323
Entropy (8bit):	7.995577376709763
Encrypted:	true
SSDEEP:	12288:KjlUTFF+u3WjUif28G0SPdsgxja464GzQ0mwXWNY8k:Kj+FF+u3WjSCEds+57GzQXwkYv
MD5:	62D07E6FA53AEACFF39ED59E694F8500
SHA1:	8217AB28D92BC9081DD67B87A373B340564B68BF
SHA-256:	33BFCA0D1A96173E565831BCEF1789CD01EF97386D97DD4155F3F05410433979
SHA-512:	FE4AAEBA8DAC2123623A37AB0E4E4D81E953C0B47C1D031B86BBE5942E3FE6292CC231E3CD3F0B5A0C53DBA9EAA494CE6B86DA59F670DF8CCFCF8D054B9F484D
Malicious:	false
Preview:	.E..B...B...B..B..B..webmB...B....S.g........M.t.M..S...I.fS...M..S...T.kS...M..S...T.gS....M..S...S.kS............X.........................................................................................I.f.*...B@M..Lavf60.3.100WA.Lavf60.3.100D..@.......T.k@.........R..s...)E..k..."...eng..V_VP9...#..bZ...........U..U...U...U...U...U...U...........Y..s............"...eng..A_OPUSV..c..V.............@.p.....bd. c..OpusHead..8.........T.gA.ss.c..g.E..MAJOR_BRANDD..mp42g.E..MINOR_VERSIOND..0g.E..COMPATIBLE_BRANDSD..mp42mp41g.E..ENCODERD..Lavf60.3.100ss@.c..c...)E..kg.E..HANDLER_NAMED...Mainconcept Video Media Handlerg.E..VENDOR_IDD..[0][0][0][0]g.E..ENCODERD..Lavc60.3.100 libvpx-vp9g.E..DURATIOND..00:00:10.000000000..ss@.c..c.........g.E..HANDLER_NAMED..#Mainconcept MP4 Sound Media Handlerg.E..VENDOR_IDD..[0][0][0][0]g.E..ENCODERD..Lavc60.3.100 libopusg.E..DURATIOND..00:00:10.013000000...C.u$.............. j.....I.B@.P.6.8$..D..p\|......c.N...G.~..[.\|

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_00000f

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48444, version 1.0
Category:	dropped
Size (bytes):	48444
Entropy (8bit):	7.995593685409469
Encrypted:	true
SSDEEP:	768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1
MD5:	8E433C0592F77BEB6DC527D7B90BE120
SHA1:	D7402416753AE1BB4CBD4B10D33A0C10517838BD
SHA-256:	F052EE44C3728DFD23ABA8A4567150BC314D23903026FBB6AD089422C2DF56AF
SHA-512:	5E90F48B923BB95AEB49691D03DADE8825C119B2FA28977EA170C41548900F4E0165E2869F97C7A9380D7FF8FF331A1DA855500E5F7B0DFD2B9ABD77A386BBF3
Malicious:	false
Preview:	wOF2.......<.......l..............................`...\..p?HVAR.m?MVAR^.`?STAT.N'&..>/l........>....0....6.$.... ........[..A.2v.6......$..e...w"../.L.p:......Tpc..8@.[5......d#d.xw..o.O3-.....%..>...%..)~p.K.J.H..S...s..z..Wa.. 0\..J.....BL;V..-.L...j....^.9..HO l..,..6.v....?....x.....m..;....a![zif...Ur...Q..P.&.I1..:n.p...j~..h...9.!....@.<.bl\|.Y?h..B.j/..rH.S%/~.^D...6..D.4G...y....Y.....=/o..W..5ryo.d?.gA]..?...1V..S......7ZJ...f....mBG[0eW....y..%B}..]? ...,sR<.y~.~.}.%.!..,X.....`...R..^....S.....u.?k.v.k..U.u..M..`!...b!..X)P...y{.........n..T+6...R......L...x}...g...].g"WT.b..h ....X...=;{w...QO.s..w..@.(,..........{.........1..@...(...\.......9..2.h9P.G........K.Dp...F..4W..ui.u...G...s..x7.?..tg..D..O.sA..t.t.4..~..e\...X.....T..kf.qfX..=^_....g"....De...x[J..A..).G.YUhR.....0.l..#&3.'.K.............$I.Pp.../.s.<@...r=..S......d..P.S.B.w.~X..ZK....h J.`A.bv,=.....>1.Ev.^..U.A. ....EU..].........dw..!$.A`..B.._.....Z~..!..J..l]r.m}m..

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_000010

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	WebM
Category:	dropped
Size (bytes):	513086
Entropy (8bit):	7.995293430794177
Encrypted:	true
SSDEEP:	12288:Y9iWCuB45E0dMjk2kiHuPxFHrKIYfg/W6SpXfDIaXnYA/p:GiWCue5EQikCCF+B4/NYLIOYsp
MD5:	457442C95842E19E6ACA17D451148620
SHA1:	AC7565494CDDAF1FD99AB3B27FF71F8AD3716D2B
SHA-256:	8FE7289E77A9393A85514009D489C3CBF73DB5713ED2CD88D6263B5D4377B15A
SHA-512:	13A4C99BC8669032BACCF0E78957E21A9BC745C10DA1E716AB79FF38508F18800CDC0D149272802035E6B83ACA069C9A3FB39B96FB63EA206F34CA866E15B6C7
Malicious:	false
Preview:	.E..B...B...B..B..B..webmB...B....S.g.........M.t.M..S...I.fS...M..S...T.kS...M..S...T.gS...&M..S...S.kS.............X.........................................................................................I.f....B@M..Lavf60.3.100WA.Lavf60.3.100D..@.......T.k........B..s.f.....v...."...eng..V_VP9...#....U............U..U...U....T.gA$ss.c..g.E..MAJOR_BRANDD..mp42g.E..MINOR_VERSIOND..0g.E..COMPATIBLE_BRANDSD..mp42mp41g.E..ENCODERD..Lavf60.3.100ss@.c..c.f.....v.g.E..HANDLER_NAMED...Mainconcept Video Media Handlerg.E..VENDOR_IDD..[0][0][0][0]g.E..ENCODERD..Lavc60.3.100 libvpx-vp9g.E..DURATIOND..00:00:10.000000000...C.u"w(... .......I.B..P.6.8$..D......>..sW}..~/......_..>0?.._....g......../.g......!.]G......w.W.'.z.o._....s....H.OJu..N...?..~......u...=GH..i.rOp..w.5~.f...f....w.i^..Q.q.2.. .....D.z..g..l^..U.&)y'....d..KZ.0g/.F...OU...V."..5.$.HG....qw.n...p...{H..S.$.K..Ys..+g.}.r......\........g.....UUz.x....#..."zU...n.F.3...K.Z..f..}..`..p...VL.Y

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_000011

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	WebM
Category:	dropped
Size (bytes):	242574
Entropy (8bit):	7.9884092282506876
Encrypted:	false
SSDEEP:	6144:kVXXefALZfdg91EqfP8TSRZtNgGWJXHZ4A7wMt6VDm:4+gZKpP+SFNyJX54Ow3VDm
MD5:	C522383E2C644E952E333CAF8B0957BD
SHA1:	E7D2929D17A184CA007C00F5277316A9DEA64342
SHA-256:	DC72CFAB231BA78E19052468AC64DC203E1D13A65FE656A582B33887EC12E403
SHA-512:	DD8C84B5F747ED3EFAB597A1183BFDE15CF0D595C34DBFFF088E4A7CC0EA9CB46F33BDF1EC8FC96AC7873F2C5D07F0D308128F6AE02670DA9091FBB4224505AD
Malicious:	false
Preview:	.E..B...B...B..B..B..webmB...B....S.g.......^.M.t.M..S...I.fS...M..S...T.kS...M..S...T.gS...&M..S...S.kS....5........X.........................................................................................I.f....B@M..Lavf60.3.100WA.Lavf60.3.100D..@.@......T.k........B..s.`..Q0.<..."...eng..V_VP9...#....U............U..U...U....T.gA$ss.c..g.E..MAJOR_BRANDD..mp42g.E..MINOR_VERSIOND..0g.E..COMPATIBLE_BRANDSD..mp42mp41g.E..ENCODERD..Lavf60.3.100ss@.c..c.`..Q0.<.g.E..HANDLER_NAMED...Mainconcept Video Media Handlerg.E..VENDOR_IDD..[0][0][0][0]g.E..ENCODERD..Lavc60.3.100 libvpx-vp9g.E..DURATIOND..00:00:08.000000000...C.u".9... M$.....I.B..P.6.8$..D......>..m..g...G....q_..C..Ow...g..\n....'.....Q..~.wt......P...7...'.....\|L...?$._..lOxO..[.7........'......l...}d.]...t2.9..,U.....re#....o....P.)......Gzg..x{.,".f2D..z..K...m`?..*.."vx............'....sPW.....".....b..)xH.Y..:G..Q..........D.AUt\|.....{.u:.o..-o.-d~S.?:F.R...4.c..B...1:.......U[.........\E....1

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_000012

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	WebM
Category:	dropped
Size (bytes):	450924
Entropy (8bit):	7.996662345383313
Encrypted:	true
SSDEEP:	12288:m6Wz0zawXBUbMxP4D9GODNN8jbRDh/9jxyZZaOh+q:PWzQBU4Pi5DNABPjxihb
MD5:	A0F485260FF734AFC556ACD03AB8F409
SHA1:	C3E2145F496795A32C0DACCC3A3C24479D11CC8E
SHA-256:	1A0E3609DFD70E0EA2B81266D30304255896412F506B41C2159D6EDB266292AD
SHA-512:	65E6F33178F272A86C80BB313C999FCC9DF22426470FBE026637F8E5F25A7F81705484DB96B25201FA19EE8178139448770369DA766DC4C0943773CD223ACDFA
Malicious:	false
Preview:	.E..B...B...B..B..B..webmB...B....S.g.......<.M.t.M..S...I.fS...M..S...T.kS...M..S...T.gS...6M..S...S.kS.............X.........................................................................................I.f....B@M..Lavf60.3.100WA.Lavf60.3.100D..@.......T.k........R..s....>.DM..."...eng..V_VP9...#....U...........U..U...U...U...U...U...U....T.gA$ss.c..g.E..MAJOR_BRANDD..mp42g.E..MINOR_VERSIOND..0g.E..COMPATIBLE_BRANDSD..mp42mp41g.E..ENCODERD..Lavf60.3.100ss@.c..c....>.DM.g.E..HANDLER_NAMED...Mainconcept Video Media Handlerg.E..VENDOR_IDD..[0][0][0][0]g.E..ENCODERD..Lavc60.3.100 libvpx-vp9g.E..DURATIOND..00:00:10.000000000...C.u#._... l.....I.B`...v.8$..D..`...>.l.......5..............._..m.............O....}...'.....................O...........o..g....~O........~/.H..{...w.>O..>..{.o...>......?].:...~..>.._Q.]G.y_t.c..w.~.V.w..t.$....~.{}..9...4..1...'.o..2.j...V...x.{...~..# .O..@h...f.....U.....:...J[]lDwu..xC.t ....a..KUAt.N.s.....K...3}......

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_000013

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	WebM
Category:	dropped
Size (bytes):	143389
Entropy (8bit):	7.9695489092973
Encrypted:	false
SSDEEP:	3072:Q31WWPBCzc5KA8salwKGsTmQgjvdXhYRgleHptgexbFY:0WW0zOKA8H3GiavkR3eepFY
MD5:	1D60AD759AF6C335D5AE8CE56B52FE93
SHA1:	E5CB45D3FB90FBAA6BE26279D97A4D608649BBFC
SHA-256:	FE2F3C97800C6619014B18FD8148A308681880D1F74FB668E8219E3B77C41A7A
SHA-512:	9E26751AF8A6AA42782145542E11C9278FB6B1F7D3A55038E68A3A6DBE5005C2563169BE5EEEB826DA6B499B60D0456FF7A91829AECD86FFFCBDBA04D3523FB1
Malicious:	false
Preview:	.E..B...B...B..B..B..webmB...B....S.g....../..M.t.M..S...I.fS...M..S...T.kS...M..S...T.gS...&M..S...S.kS.../.........X.........................................................................................I.f....B@M..Lavf60.3.100WA.Lavf60.3.100D..@.@......T.k........B..s..34W../.."...eng..V_VP9...#....U............U..U...U....T.gA$ss.c..g.E..MAJOR_BRANDD..mp42g.E..MINOR_VERSIOND..0g.E..COMPATIBLE_BRANDSD..mp42mp41g.E..ENCODERD..Lavf60.3.100ss@.c..c..34W../.g.E..HANDLER_NAMED...Mainconcept Video Media Handlerg.E..VENDOR_IDD..[0][0][0][0]g.E..ENCODERD..Lavc60.3.100 libvpx-vp9g.E..DURATIOND..00:00:08.000000000...C.u!uk... y.....I.B..P.6.8$..D........j.'........_.../.?.....{..~..................?.....}........_..._K...._........2..+(.k..\m.2.....b._...\.\|...`...B/zm...R.W...-z.e^.z...R&.-n...3.rk...`..E...o..f...4..T....8.f...z..Q....z$.Z.[Sy.Q...dwa....4..qe....5...w..^B.@..ww....8..3V.q...%.,...x!..c....L.."."!L....g4S...&u..&.;(G?...i...PQM;T..3....

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_000014

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	WebM
Category:	dropped
Size (bytes):	1048576
Entropy (8bit):	7.9994539885785265
Encrypted:	true
SSDEEP:	24576:GN1opAMbdZxfe7Kqej7jBp8J3oA2bbabEeSvU3:G7opAMbj1e7K5HcoA2bGZiw
MD5:	15EDBB4D85CF503917A877D894FA0A18
SHA1:	45B9165E1A659C3AABECAAF3EF8672F10541EE17
SHA-256:	6B99A2C0C946D59D80A1D56F795C61059CEC833C904AAF6397EEBD21D8129D8A
SHA-512:	4DC82A722CEDBB945177FDE76AA5F5990F81AA6CC09988949340FFC1C7ECE507508B6B5F239C22388C39716CBE4BDB48D88B2FDE257B8F40CDFED695A060326F
Malicious:	false
Preview:	.E..B...B...B..B..B..webmB...B....S.g.........M.t.M..S...I.fS...M..S...T.kS...M..S...T.gS...&M..S...S.kS....q........X.........................................................................................I.f.*...B@M..Lavf60.3.100WA.Lavf60.3.100D..@.@......T.k........B..s..m..^B...."...eng..V_VP9...#....U............U..U...U....T.gA$ss.c..g.E..MAJOR_BRANDD..mp42g.E..MINOR_VERSIOND..0g.E..COMPATIBLE_BRANDSD..mp42mp41g.E..ENCODERD..Lavf60.3.100ss@.c..c..m..^B.g.E..HANDLER_NAMED...Mainconcept Video Media Handlerg.E..VENDOR_IDD..[0][0][0][0]g.E..ENCODERD..Lavc60.3.100 libvpx-vp9g.E..DURATIOND..00:00:08.000000000...C.u,4.... ......I.B..P.6.8$..D..X.#._...............'.....q.....}o../.......o..s..........5......O._.'.......'.._.........{...........~..........m..........._...>i../]....~.t.u.=w../..{.g..}........'..?..u..=/..<.V.Q.w..r;.t...ww....o...}7........7.._........o...A...T......w.....~.1%........Q.(.\|......E.(.S....P....J7.r._&s..,.=......@.-._..

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\f_000015

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	231882
Entropy (8bit):	7.998142939335245
Encrypted:	true
SSDEEP:	6144:CGpF4+aBxr5w41eDpm+wuh6ZCfIxxcJRXD8YA:CGpFTaD1wHVviZt4JJ8R
MD5:	4393178FDE78E0DE538B9154B2DD114B
SHA1:	46711E308CCF378745D2FB6EBE662954FBBF3900
SHA-256:	330A6E3EF4ECFBB43C45A02C8418B55695BA8951B49EB20DA93A7C91160004FF
SHA-512:	C903B216D51E3CED2387427411BC81B6E40AEF0B8EDF0B8B75970B16E85B1655A743EE52564C143A071EE00611C9375B97E1437E0B1433401C6800698C20129E
Malicious:	false
Preview:	m.>.T..y.0..t)s....\|S_.....LG])....m_..F...3.{...u.\|4@{.}..%....'b.....>.z.2.....-..<7......{...u.../.BB..;"... .=...@...J!#Q....w..OW.........U.C..I....z}...`.a@..L.......a.MDb..:g....F{".^W..V^(nv......g.H`.^..8uQy.3l8...jP6...F.....-3.,%....(.Ei..?.8.......99.X..6.$......U(q..m..d.@7K..)0.....3...n\|"...u..x.?...V'..S.bw..;M../............y}..E..\.z8.Q...v..O...I..q[x.....}j.h....\|...a}..`.SQ4....N.t{F..$n...../.f..7.%....G..s$......._...;!..c2.];@.0q..I..=...d.^y.Ke..{%z:\|...K..-.7.{..[..U....]+?Fid......45..c]>...."...(.%}IZz......>..jD.i.1.2V.....Zz.DD.`..0.aNn4~......r.....ly...0X.H.6....gL.H.....%0~...:....3g.P...#NW.b.,..=..l.f}Y.q.0...8.J9........JT...HC#..=.H...oF.e.TLu.......U.x9...,.I..."..C&........w..I..}.C%0.4.....C2..m&.,.i`...i..g..G..,=....E$.D}_\.:..$_j......1..8~.....8'.>.J.s...fu......q\|.......9.p".vk..G..%.5"..M.;r........}=A.w.(8.y.SC......s..d....v....ZG.....>...V....H....(......V.y.C..^.u..K.L.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Cache\Cache_Data\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	524656
Entropy (8bit):	5.027445846313988E-4
Encrypted:	false
SSDEEP:	3:Lsulxbq:Lsj
MD5:	8403281C52AB3D22A350B5C88E8269E2
SHA1:	43C6B0126EFCB56DA579BB4DBB341B3ED142EE3F
SHA-256:	DE5032FE455C36D822FC5CC969FD1C64C31716A657936833B69A6194C1BDD9AA
SHA-512:	A74D10515CCFEC8748D93701A4FF446C86AEA8488A3AAAE70CC212C2EE98DE7283D1A3C80EA92395387B8EEA24768CE0660EA56F690206CB0CB655B2CD4815DC
Malicious:	false
Preview:	.........................................?..M./.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Code Cache\js\0276b33621821189_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	210
Entropy (8bit):	5.1675033124033956
Encrypted:	false
SSDEEP:	3:m+lTBz8RzYq8AsX7VVKokzwl8AsXXm5ktPlFpPt/lO/t36DWLPzDv6A+ymBQl/:m0OYquLVVKo6CuHm6tP/plItBXp+1K/
MD5:	C2E2A0CF04BB2D8E66C92A55DAE7B261
SHA1:	782C89BD0F7EB5DB08F078089A688EB7E77EA3E9
SHA-256:	AA52109A9E2F2070408E4314805E76C88B0FC9B54657EC948F350932369F539B
SHA-512:	5F79954F7A15955591CB78BE119D3F6D62B2EDD05C3241B1B6C92E50104454DC93F3693B630910088DDBAF59CD4347DBB72799202C37A49BB4F36190B106FF87
Malicious:	false
Preview:	0\r..m......F......Q...._keyhttps://pcapp.store/src/app/appSearchMenu.js .https://pcapp.store/.A..Eo...................2.M./.........Z.............a..........z...eak\|....*.....f...".[\.A..Eo........8y$.......

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Code Cache\js\5118d4b64eafcfe3_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	209
Entropy (8bit):	5.070720672629412
Encrypted:	false
SSDEEP:	3:m+ltIG2K8RzYq8AsX7VVKwsDRl8AsXXm5ktaPsC/pPt/lZ2V5EHMox6P5mQ1l:mK2nYquLVVKwsDTuHm6tKzplySsm+4W
MD5:	FCB9821A074EED714062CCBCE6F42014
SHA1:	C965229526E4EACAC5B760D7635148BA0F0F1DEC
SHA-256:	ED657E86A46300103BF1D72DC12940AA6F0B67506B87D919A5EEFF9D05349435
SHA-512:	3E3D1898621DFF26C4309B284D13520E8983192F3B329B35A7A31F33174DAA4105AE51C2F767D7C8FEF4C49F82D09532EE337F6E1391C1535CF6C87341C6CC75
Malicious:	false
Preview:	0\r..m......E.....#....._keyhttps://pcapp.store/src/app/appMenuStore.js .https://pcapp.store/.A..Eo...................e.M./.........Z...........N.a........pSpJ+>...IU`.....a..!......A..Eo......#..t$.......

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Code Cache\js\8281fcfdae193bde_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	206
Entropy (8bit):	5.152340943215406
Encrypted:	false
SSDEEP:	6:m4gPYquLVVKoYJuHm6t8lFplPXKOqrz34+:ak9Nm6KnG3P
MD5:	9FB2892D9C1ABDC3057240CD769DBF17
SHA1:	EAF42B06CD6447F0B465454B178EEFE8DF7920BE
SHA-256:	A9688E1115ACFBC3B84879F229B1987B56F8F09A790FDA2100A4AB3708158856
SHA-512:	5FF535EBF56013DCDB33F41CF9624DCDD22B66F68DE6423AA84B912874F50A0F15EBAF97D7AA1C09CDFB335B1A6F7CE817F5B017C594535FB1CC18318DE58B8A
Malicious:	false
Preview:	0\r..m......B....d.I...._keyhttps://pcapp.store/src/app/appWindow.js .https://pcapp.store/.A..Eo.....................M./.........Z.............a.....F.wI..rPP>.....1......o~.5..=.A..Eo..........$.......

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Code Cache\js\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.1431558784658327
Encrypted:	false
SSDEEP:	3:m+l:m
MD5:	54CB446F628B2EA4A5BCE5769910512E
SHA1:	C27CA848427FE87F5CF4D0E0E3CD57151B0D820D
SHA-256:	FBCFE23A2ECB82B7100C50811691DDE0A33AA3DA8D176BE9882A9DB485DC0F2D
SHA-512:	8F6ED2E91AED9BD415789B1DBE591E7EAB29F3F1B48FDFA5E864D7BF4AE554ACC5D82B4097A770DABC228523253623E4296C5023CF48252E1B94382C43123CB0
Malicious:	false
Preview:	0\r..m..................

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Code Cache\js\index-dir\temp-index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	120
Entropy (8bit):	4.162744920746109
Encrypted:	false
SSDEEP:	3:q0T95/lN9TnlXxHeb0fx+HHnAh2x+Ha2orl:q0TxlxHm8yHAhpa2ox
MD5:	08BAAC8EE749C38AA92957203B4FC78B
SHA1:	8D16CEAED0267469C02AB253718949B48AAC1405
SHA-256:	B2F0B2906D51A491B14AF7C8F4B7BC415B3E71ECB07CC331573DA81B3D147DD8
SHA-512:	CEFB6685278BCDFA6C80BF768F7EE66B7EAB1062D61C7F8DAD27BA32C3CD2AAF62F02CC8D8A74EC1DD9F898821D18502C255E0FD71702DDC0656946BEFB89A7A
Malicious:	false
Preview:	p.......oy retne...........................!6.v....M./...........N...Q.?.M./..........;.......?.M./.........h..M./.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Code Cache\js\index-dir\the-real-index (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	120
Entropy (8bit):	4.162744920746109
Encrypted:	false
SSDEEP:	3:q0T95/lN9TnlXxHeb0fx+HHnAh2x+Ha2orl:q0TxlxHm8yHAhpa2ox
MD5:	08BAAC8EE749C38AA92957203B4FC78B
SHA1:	8D16CEAED0267469C02AB253718949B48AAC1405
SHA-256:	B2F0B2906D51A491B14AF7C8F4B7BC415B3E71ECB07CC331573DA81B3D147DD8
SHA-512:	CEFB6685278BCDFA6C80BF768F7EE66B7EAB1062D61C7F8DAD27BA32C3CD2AAF62F02CC8D8A74EC1DD9F898821D18502C255E0FD71702DDC0656946BEFB89A7A
Malicious:	false
Preview:	p.......oy retne...........................!6.v....M./...........N...Q.?.M./..........;.......?.M./.........h..M./.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RF616aa8.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	120
Entropy (8bit):	4.162744920746109
Encrypted:	false
SSDEEP:	3:q0T95/lN9TnlXxHeb0fx+HHnAh2x+Ha2orl:q0TxlxHm8yHAhpa2ox
MD5:	08BAAC8EE749C38AA92957203B4FC78B
SHA1:	8D16CEAED0267469C02AB253718949B48AAC1405
SHA-256:	B2F0B2906D51A491B14AF7C8F4B7BC415B3E71ECB07CC331573DA81B3D147DD8
SHA-512:	CEFB6685278BCDFA6C80BF768F7EE66B7EAB1062D61C7F8DAD27BA32C3CD2AAF62F02CC8D8A74EC1DD9F898821D18502C255E0FD71702DDC0656946BEFB89A7A
Malicious:	false
Preview:	p.......oy retne...........................!6.v....M./...........N...Q.?.M./..........;.......?.M./.........h..M./.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Code Cache\wasm\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.1431558784658327
Encrypted:	false
SSDEEP:	3:m+l:m
MD5:	54CB446F628B2EA4A5BCE5769910512E
SHA1:	C27CA848427FE87F5CF4D0E0E3CD57151B0D820D
SHA-256:	FBCFE23A2ECB82B7100C50811691DDE0A33AA3DA8D176BE9882A9DB485DC0F2D
SHA-512:	8F6ED2E91AED9BD415789B1DBE591E7EAB29F3F1B48FDFA5E864D7BF4AE554ACC5D82B4097A770DABC228523253623E4296C5023CF48252E1B94382C43123CB0
Malicious:	false
Preview:	0\r..m..................

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Code Cache\wasm\index-dir\temp-index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	2.9972243200613975
Encrypted:	false
SSDEEP:	3:M7lE0E2yxTln:Mmbp
MD5:	B8DB8190B1B54653AA01AA3530750D45
SHA1:	D25355225BFE028227A8C2DF5FFBD188C2F60259
SHA-256:	5A0EFDEE8DBCE8E0014EDEDFEE9C7549B3950ED5D8F1B2596384AD3C56C9A90A
SHA-512:	988FB805459EB2C3D5768D8EE0B1234839FB8AD95779E27779E97623B72393299E11229F3F732332DFB8EF628392FB19CA45937C9F7C28E082A42651CB7B9041
Malicious:	false
Preview:	(...Q7A.oy retne..........................M./.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Code Cache\wasm\index-dir\the-real-index (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	2.9972243200613975
Encrypted:	false
SSDEEP:	3:M7lE0E2yxTln:Mmbp
MD5:	B8DB8190B1B54653AA01AA3530750D45
SHA1:	D25355225BFE028227A8C2DF5FFBD188C2F60259
SHA-256:	5A0EFDEE8DBCE8E0014EDEDFEE9C7549B3950ED5D8F1B2596384AD3C56C9A90A
SHA-512:	988FB805459EB2C3D5768D8EE0B1234839FB8AD95779E27779E97623B72393299E11229F3F732332DFB8EF628392FB19CA45937C9F7C28E082A42651CB7B9041
Malicious:	false
Preview:	(...Q7A.oy retne..........................M./.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\DawnCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\Default\DawnCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\Default\DawnCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\Default\DawnCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\Default\DawnCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNlO1j/:Ls3O1b
MD5:	0886A298E7442A70F3B8464CB3BF84AA
SHA1:	8AC8E6817329F3412A5F49466338BC7EE6C94AA5
SHA-256:	D632C3E532FAFD04289B9F38D8BD32810D7F4FD9B128F8F59684034082702632
SHA-512:	2AC3EC63CCFF244842E12C0C2C59DFCEA74EFD7C6A8F29C6512042F260C268148ACB56D0AAD88BC16BAFC6A9FD8AC736BD8AB19A931FD17F6E37ECCD9E6BCB51
Malicious:	false
Preview:	........................................L...M./.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Extension Rules\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Extension Rules\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Extension Rules\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Extension Scripts\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Extension Scripts\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Extension Scripts\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Extension State\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Extension State\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Extension State\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\PCAppStore\UserData\EBWebView\Default\GPUCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\Default\GPUCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\Default\GPUCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\Default\GPUCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\Default\GPUCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNlUMX:Ls3UMX
MD5:	CF405D1EF4A43346A88BA457D91101C3
SHA1:	BBEA23D4D381645D1608635593D05A85FD6F1812
SHA-256:	366A0B8087A597CC3E7FA9BEE558A0D455E46B022F58DA664B9C1173701263A1
SHA-512:	2766B7827B131AF397F373B8B1A67A97B066C20AF63EC0C37E7AD9AFBD6F07C84312FE68F4FEC33EE4F0640B33A09470A36276CC645772AF6865E447441BB70B
Malicious:	false
Preview:	.........................................\..M./.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Local Storage\leveldb\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Local Storage\leveldb\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Local Storage\leveldb\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Network\14b0f5cc-5a4e-40a3-81c9-20ec7f04c020.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Network\30f96f8a-f3c1-4c90-86ae-86161cfb8325.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Network\9823ae84-5efe-4b74-a9d3-bc10ad99f7c2.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	59
Entropy (8bit):	4.619434150836742
Encrypted:	false
SSDEEP:	3:YLbkVKJq0nMb1KKqk1Yn:YHkVKJTnMRKXk1Yn
MD5:	78BFCECB05ED1904EDCE3B60CB5C7E62
SHA1:	BF77A7461DE9D41D12AA88FBA056BA758793D9CE
SHA-256:	C257F929CFF0E4380BF08D9F36F310753F7B1CCB5CB2AB811B52760DD8CB9572
SHA-512:	2420DFF6EB853F5E1856CDAB99561A896EA0743FCFF3E04B37CB87EDDF063770608A30C6FFB0319E5D353B0132C5F8135B7082488E425666B2C22B753A6A4D73
Malicious:	false
Preview:	{"net":{"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Network\SCT Auditing Pending Reports~RF610da4.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Network\SCT Auditing Pending Reports~RF610e11.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Network\a1332152-2cd0-4e49-ad46-1ace8e663e89.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	59
Entropy (8bit):	4.619434150836742
Encrypted:	false
SSDEEP:	3:YLbkVKJq0nMb1KKqk1Yn:YHkVKJTnMRKXk1Yn
MD5:	78BFCECB05ED1904EDCE3B60CB5C7E62
SHA1:	BF77A7461DE9D41D12AA88FBA056BA758793D9CE
SHA-256:	C257F929CFF0E4380BF08D9F36F310753F7B1CCB5CB2AB811B52760DD8CB9572
SHA-512:	2420DFF6EB853F5E1856CDAB99561A896EA0743FCFF3E04B37CB87EDDF063770608A30C6FFB0319E5D353B0132C5F8135B7082488E425666B2C22B753A6A4D73
Malicious:	false
Preview:	{"net":{"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Network\a192bbbb-b499-448d-9db9-67a4e33c47a1.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6163
Entropy (8bit):	4.821784373936706
Encrypted:	false
SSDEEP:	96:stA/kXs13lb94G8zjR85eh6Cb7/x+6Mhmuecl6OdAeUXa2MR7K:st0YsaGkF88bV+Fh62AWPhK
MD5:	F8234990E4E834F7F071A6ED5269AA98
SHA1:	D486448FCCF92793757492F3D16ECD127364291E
SHA-256:	64D02B2D2018F83985886733579CD02018503A42F3307F144246AD874B7F98BC
SHA-512:	90D80221A5CC3C7EA356FA03307DCBE0CA8377E8B7FA4B77B171E75DCC3A4F2B1D93548E38DCFA1D3D4D3DF48F36816891F3A44C82F89858943F0B9402E004D4
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13380290187243073","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":140,"browser_content_container_width":490,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13380290187165996","domain_diversity":{"last_reporting_timestamp":"13380290187243173"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data":

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Preferences~RF616886.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6163
Entropy (8bit):	4.821784373936706
Encrypted:	false
SSDEEP:	96:stA/kXs13lb94G8zjR85eh6Cb7/x+6Mhmuecl6OdAeUXa2MR7K:st0YsaGkF88bV+Fh62AWPhK
MD5:	F8234990E4E834F7F071A6ED5269AA98
SHA1:	D486448FCCF92793757492F3D16ECD127364291E
SHA-256:	64D02B2D2018F83985886733579CD02018503A42F3307F144246AD874B7F98BC
SHA-512:	90D80221A5CC3C7EA356FA03307DCBE0CA8377E8B7FA4B77B171E75DCC3A4F2B1D93548E38DCFA1D3D4D3DF48F36816891F3A44C82F89858943F0B9402E004D4
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13380290187243073","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":140,"browser_content_container_width":490,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13380290187165996","domain_diversity":{"last_reporting_timestamp":"13380290187243173"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data":

C:\Users\user\PCAppStore\UserData\EBWebView\Default\PreferredApps

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	4.051821770808046
Encrypted:	false
SSDEEP:	3:YVXADAEvTLSJ:Y9AcEvHSJ
MD5:	2B432FEF211C69C745ACA86DE4F8E4AB
SHA1:	4B92DA8D4C0188CF2409500ADCD2200444A82FCC
SHA-256:	42B55D126D1E640B1ED7A6BDCB9A46C81DF461FA7E131F4F8C7108C2C61C14DE
SHA-512:	948502DE4DC89A7E9D2E1660451FCD0F44FD3816072924A44F145D821D0363233CC92A377DBA3A0A9F849E3C17B1893070025C369C8120083A622D025FE1EACF
Malicious:	false
Preview:	{"preferred_apps":[],"version":1}

C:\Users\user\PCAppStore\UserData\EBWebView\Default\README

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	182
Entropy (8bit):	4.2629097520179995
Encrypted:	false
SSDEEP:	3:RGXKRjg0QwVIWRKXECSAV6jDyhjgHGAW+LB2Z4MKLFE1SwhiFAfXQmWyKBPMwRgK:z3frsUpAQQgHGwB26MK8Sw06fXQmWtRT
MD5:	643E00B0186AA80523F8A6BED550A925
SHA1:	EC4056125D6F1A8890FFE01BFFC973C2F6ABD115
SHA-256:	A0C9ABAE18599F0A65FC654AD36251F6330794BEA66B718A09D8B297F3E38E87
SHA-512:	D91A934EAF7D9D669B8AD4452234DE6B23D15237CB4D251F2C78C8339CEE7B4F9BA6B8597E35FE8C81B3D6F64AE707C68FF492903C0EDC3E4BAF2C6B747E247D
Malicious:	false
Preview:	Microsoft Edge settings and storage represent user-selected preferences and information and MUST not be extracted, overwritten or modified except through Microsoft Edge defined APIs.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Secure Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6780
Entropy (8bit):	5.580527686189723
Encrypted:	false
SSDEEP:	96:vfixPlf/ROoBpkF5d1yif7VaTEv9V5h5pg5vezodIU8Y/SpsA5IOrMn3YPo0MG6L:C5rSZ9l5OSpFIOAn3go0iu0
MD5:	888B002EA1CCE3757416A58F15DD4F09
SHA1:	3A6E3BD0FB203BA71253F6767700DD2789E42E28
SHA-256:	1DAA1727F2EBDA7124B2DF5F21AB174BB6232055B2D9E95C3CCEB8A7454F08FF
SHA-512:	41F0B4A71C85CB144D91C52221CA24B6E0A77C942C7CDC5AE365E3BE5A05F2D69B9E51921B6F0D6C8ACCFC7B14B21915C11B6FB524B2CCCE2E0CE13EC85837C8
Malicious:	false
Preview:	{"extensions":{"settings":{"dgiklkfkllikcanfonkcabmbdfmgleag":{"active_permissions":{"api":[],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13380290186774472","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13380290186774472","location":5,"manifest":{"content_capabilities":{"include_globs":["https://excel.officeapps.live.com/","https://onenote.officeapps.live.com/","https://powerpoint.officeapps.live.com/","https://word-edit.officeapps.live.com/","https://excel.officeapps.live.com.mcas.ms/","https://onenote.officeapps.live.com.mcas.ms/","https://word-edit.officeapps.live.com.mcas.ms/","https://excel.partner.officewebapps.cn/","https://onenote.partner.officewebapps.cn/","https://powerpoint.partner.officewebapps.cn/","https://word-edit.partner.officewebapps.cn/","https://excel.gov.online.office365.us/","

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Session Storage\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Session Storage\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Session Storage\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Site Characteristics Database\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Site Characteristics Database\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Site Characteristics Database\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Sync Data\LevelDB\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Sync Data\LevelDB\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\PCAppStore\UserData\EBWebView\Default\a665818c-42d1-45e6-af79-fdf2205c56cf.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6780
Entropy (8bit):	5.580527686189723
Encrypted:	false
SSDEEP:	96:vfixPlf/ROoBpkF5d1yif7VaTEv9V5h5pg5vezodIU8Y/SpsA5IOrMn3YPo0MG6L:C5rSZ9l5OSpFIOAn3go0iu0
MD5:	888B002EA1CCE3757416A58F15DD4F09
SHA1:	3A6E3BD0FB203BA71253F6767700DD2789E42E28
SHA-256:	1DAA1727F2EBDA7124B2DF5F21AB174BB6232055B2D9E95C3CCEB8A7454F08FF
SHA-512:	41F0B4A71C85CB144D91C52221CA24B6E0A77C942C7CDC5AE365E3BE5A05F2D69B9E51921B6F0D6C8ACCFC7B14B21915C11B6FB524B2CCCE2E0CE13EC85837C8
Malicious:	false
Preview:	{"extensions":{"settings":{"dgiklkfkllikcanfonkcabmbdfmgleag":{"active_permissions":{"api":[],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13380290186774472","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13380290186774472","location":5,"manifest":{"content_capabilities":{"include_globs":["https://excel.officeapps.live.com/","https://onenote.officeapps.live.com/","https://powerpoint.officeapps.live.com/","https://word-edit.officeapps.live.com/","https://excel.officeapps.live.com.mcas.ms/","https://onenote.officeapps.live.com.mcas.ms/","https://word-edit.officeapps.live.com.mcas.ms/","https://excel.partner.officewebapps.cn/","https://onenote.partner.officewebapps.cn/","https://powerpoint.partner.officewebapps.cn/","https://word-edit.partner.officewebapps.cn/","https://excel.gov.online.office365.us/","

C:\Users\user\PCAppStore\UserData\EBWebView\Default\dfadcd8c-414d-42c7-bf93-594b487f6eb2.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6165
Entropy (8bit):	4.823294424760745
Encrypted:	false
SSDEEP:	96:stA/rXs13lb94G8zjR85eh6Cb7/x+6MhmuecJkApAeUt2MR7K:st0LsaGkF88bV+FVkqARPhK
MD5:	7EF57FC7BF126783A387F7A7D0D05BA2
SHA1:	F12DD56EDAB93CD0BD1B1E8FDBC95C3727D67CBB
SHA-256:	A01FC550C2319F6055310032AD50DED1061163B66C756A9D7403C589FEFBCDFA
SHA-512:	727A4D61B4ACF1DB4E52783AF74DAF166A8F8041F665AF04AFD6CD59225F81A90D2D5E3E93AF698C5094215A0BE394324BD42EDB9C6DF7DC27431AC3E48F62FB
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13380290187243073","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":640,"browser_content_container_width":500,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13380290187165996","domain_diversity":{"last_reporting_timestamp":"13380290187243173"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data":

C:\Users\user\PCAppStore\UserData\EBWebView\Default\f599b6dc-4f9f-42e4-9f96-a2aa9cc8d695.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6163
Entropy (8bit):	4.821784373936706
Encrypted:	false
SSDEEP:	96:stA/kXs13lb94G8zjR85eh6Cb7/x+6Mhmuecl6OdAeUXa2MR7K:st0YsaGkF88bV+Fh62AWPhK
MD5:	F8234990E4E834F7F071A6ED5269AA98
SHA1:	D486448FCCF92793757492F3D16ECD127364291E
SHA-256:	64D02B2D2018F83985886733579CD02018503A42F3307F144246AD874B7F98BC
SHA-512:	90D80221A5CC3C7EA356FA03307DCBE0CA8377E8B7FA4B77B171E75DCC3A4F2B1D93548E38DCFA1D3D4D3DF48F36816891F3A44C82F89858943F0B9402E004D4
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13380290187243073","alternate_error_pages":{"backup":true,"enabled":false},"autocomplete":{"retention_policy_last_version":117},"autofill":{"autostuff_enabled":false,"credit_card_enabled":false,"custom_data_enabled":false,"custom_data_fill_enabled":false,"custom_data_identify_info_from_form_enabled":false,"custom_data_save_enabled":false},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false},"browser_content_container_height":140,"browser_content_container_width":490,"browser_content_container_x":0,"browser_content_container_y":0,"countryid_at_install":17224,"credentials_enable_service":false,"dips_timer_last_update":"13380290187165996","domain_diversity":{"last_reporting_timestamp":"13380290187243173"},"dual_engine":{"consumer_mode":{"ie_user":false},"consumer_site_list_with_ie_entries":false,"consumer_sitelist_location":"","consumer_sitelist_version":"","external_consumer_shared_cookie_data":

C:\Users\user\PCAppStore\UserData\EBWebView\Default\shared_proto_db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\shared_proto_db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\shared_proto_db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\PCAppStore\UserData\EBWebView\Default\shared_proto_db\metadata\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\shared_proto_db\metadata\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\PCAppStore\UserData\EBWebView\Default\shared_proto_db\metadata\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\PCAppStore\UserData\EBWebView\GrShaderCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\GrShaderCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\GrShaderCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\GrShaderCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\GrShaderCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNlnKlt:Ls3nKX
MD5:	98D1A9306B2981A66C7D4FBFFFA75E27
SHA1:	16EB6D80FDAE2B0584C14D9430F93FF6B579285B
SHA-256:	4DBD5DC0AB8285A39E48DAA29AF55BC4A2D6CF51CF4DAE69172C255607EB0AEF
SHA-512:	F3212295FBAC00524801E306B1A16010B8AF4B93A923E90A2C121989361AD52BCB8B31D381E17B0A06939E9E0BDB16B4AF19AB9522A7B6A3ADDC807964CD8DFC
Malicious:	false
Preview:	.........................................D..M./.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\GraphiteDawnCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\GraphiteDawnCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\GraphiteDawnCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\GraphiteDawnCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\GraphiteDawnCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNlqX:Ls3K
MD5:	B01DF45D6FF1A2AA8B059A358AB7343B
SHA1:	718A155B23649458D3379C93E6F1EE53C08B00EB
SHA-256:	6D058439188030F73460969A19FF624DD0AD66CD11D2134E740C9B1F8F84922E
SHA-512:	DFA194E5CC0427D662141CA6E41C074D66A6700A5C327FADF85148681B38FCE01EFC63D57454C555FE0777E499B3B2089FDE4B9825C565F2D4E4F045478FE881
Malicious:	false
Preview:	........................................r]..M./.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\Last Version

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.7192945256669794
Encrypted:	false
SSDEEP:	3:NYLFRQI:ap2I
MD5:	BF16C04B916ACE92DB941EBB1AF3CB18
SHA1:	FA8DAEAE881F91F61EE0EE21BE5156255429AA8A
SHA-256:	7FC23C9028A316EC0AC25B09B5B0D61A1D21E58DFCF84C2A5F5B529129729098
SHA-512:	F0B7DF5517596B38D57C57B5777E008D6229AB5B1841BBE74602C77EEA2252BF644B8650C7642BD466213F62E15CC7AB5A95B28E26D3907260ED1B96A74B65FB
Malicious:	false
Preview:	117.0.2045.47

C:\Users\user\PCAppStore\UserData\EBWebView\Local State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	951
Entropy (8bit):	5.707942524856008
Encrypted:	false
SSDEEP:	24:YKWJu5rrtnOXu0wywRcBIaeCqWOoPbvXftQQRCYfYg:YqfoX6GBIZzojv6B0
MD5:	8BC70F0F884B46E945CF9B1C38E09530
SHA1:	FB7D0C46E20F957A48C176F054FB1DEBB696E7D7
SHA-256:	CF3804F02A53072AAD878E89287C7A8B94D36AD8D3BFF19DF11CC1247027CD9C
SHA-512:	4017BA53CC30F40763F80014AA481F55B9A38E7FABC2F1531522609A9D6160E54CC460D82BCF5DABDD757CE3A61B69869AC55B89E4767ABAB37453F349415AFC
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAA81Ort5ryISYkW3Smy278mEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAABfkcQCJG0eqq3Es+CT0e1ekvYlg2bXf7sfJ19pP9o1QAAAAAAOgAAAAAIAACAAAACQbAyTsTuOo5ZZJEFR+pVrJgvflBUw0D373R1RH0DMuTAAAADAiNjx8M/P8F+UWWvPHb+1ACYWJ9NrRlA5TJrfS/daM8wZ6CFQJHksdNMK0IX6vkFAAAAAPTcBDc2rLUhShGtDNAjnauivwopCdw0czWrFJddHY0jra/H2aCsS8ws7TMMXEHlXCEXNW56qZ/2RKArmahyB0w=="},"uninstall_metrics":{"installation_date2":"1735816586"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":4643,"pseudo_low_entropy_source":1314,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13380290186483072","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\PCAppStore\UserData\EBWebView\Local State~RF610b23.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	951
Entropy (8bit):	5.707942524856008
Encrypted:	false
SSDEEP:	24:YKWJu5rrtnOXu0wywRcBIaeCqWOoPbvXftQQRCYfYg:YqfoX6GBIZzojv6B0
MD5:	8BC70F0F884B46E945CF9B1C38E09530
SHA1:	FB7D0C46E20F957A48C176F054FB1DEBB696E7D7
SHA-256:	CF3804F02A53072AAD878E89287C7A8B94D36AD8D3BFF19DF11CC1247027CD9C
SHA-512:	4017BA53CC30F40763F80014AA481F55B9A38E7FABC2F1531522609A9D6160E54CC460D82BCF5DABDD757CE3A61B69869AC55B89E4767ABAB37453F349415AFC
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAA81Ort5ryISYkW3Smy278mEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAABfkcQCJG0eqq3Es+CT0e1ekvYlg2bXf7sfJ19pP9o1QAAAAAAOgAAAAAIAACAAAACQbAyTsTuOo5ZZJEFR+pVrJgvflBUw0D373R1RH0DMuTAAAADAiNjx8M/P8F+UWWvPHb+1ACYWJ9NrRlA5TJrfS/daM8wZ6CFQJHksdNMK0IX6vkFAAAAAPTcBDc2rLUhShGtDNAjnauivwopCdw0czWrFJddHY0jra/H2aCsS8ws7TMMXEHlXCEXNW56qZ/2RKArmahyB0w=="},"uninstall_metrics":{"installation_date2":"1735816586"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":4643,"pseudo_low_entropy_source":1314,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13380290186483072","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\PCAppStore\UserData\EBWebView\Local State~RF610b81.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	951
Entropy (8bit):	5.707942524856008
Encrypted:	false
SSDEEP:	24:YKWJu5rrtnOXu0wywRcBIaeCqWOoPbvXftQQRCYfYg:YqfoX6GBIZzojv6B0
MD5:	8BC70F0F884B46E945CF9B1C38E09530
SHA1:	FB7D0C46E20F957A48C176F054FB1DEBB696E7D7
SHA-256:	CF3804F02A53072AAD878E89287C7A8B94D36AD8D3BFF19DF11CC1247027CD9C
SHA-512:	4017BA53CC30F40763F80014AA481F55B9A38E7FABC2F1531522609A9D6160E54CC460D82BCF5DABDD757CE3A61B69869AC55B89E4767ABAB37453F349415AFC
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAA81Ort5ryISYkW3Smy278mEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAABfkcQCJG0eqq3Es+CT0e1ekvYlg2bXf7sfJ19pP9o1QAAAAAAOgAAAAAIAACAAAACQbAyTsTuOo5ZZJEFR+pVrJgvflBUw0D373R1RH0DMuTAAAADAiNjx8M/P8F+UWWvPHb+1ACYWJ9NrRlA5TJrfS/daM8wZ6CFQJHksdNMK0IX6vkFAAAAAPTcBDc2rLUhShGtDNAjnauivwopCdw0czWrFJddHY0jra/H2aCsS8ws7TMMXEHlXCEXNW56qZ/2RKArmahyB0w=="},"uninstall_metrics":{"installation_date2":"1735816586"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":4643,"pseudo_low_entropy_source":1314,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13380290186483072","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\PCAppStore\UserData\EBWebView\Local State~RF613291.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	951
Entropy (8bit):	5.707942524856008
Encrypted:	false
SSDEEP:	24:YKWJu5rrtnOXu0wywRcBIaeCqWOoPbvXftQQRCYfYg:YqfoX6GBIZzojv6B0
MD5:	8BC70F0F884B46E945CF9B1C38E09530
SHA1:	FB7D0C46E20F957A48C176F054FB1DEBB696E7D7
SHA-256:	CF3804F02A53072AAD878E89287C7A8B94D36AD8D3BFF19DF11CC1247027CD9C
SHA-512:	4017BA53CC30F40763F80014AA481F55B9A38E7FABC2F1531522609A9D6160E54CC460D82BCF5DABDD757CE3A61B69869AC55B89E4767ABAB37453F349415AFC
Malicious:	false
Preview:	{"os_crypt":{"audit_enabled":true,"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAA81Ort5ryISYkW3Smy278mEAAAAB4AAABNAGkAYwByAG8AcwBvAGYAdAAgAEUAZABnAGUAAAAQZgAAAAEAACAAAABfkcQCJG0eqq3Es+CT0e1ekvYlg2bXf7sfJ19pP9o1QAAAAAAOgAAAAAIAACAAAACQbAyTsTuOo5ZZJEFR+pVrJgvflBUw0D373R1RH0DMuTAAAADAiNjx8M/P8F+UWWvPHb+1ACYWJ9NrRlA5TJrfS/daM8wZ6CFQJHksdNMK0IX6vkFAAAAAPTcBDc2rLUhShGtDNAjnauivwopCdw0czWrFJddHY0jra/H2aCsS8ws7TMMXEHlXCEXNW56qZ/2RKArmahyB0w=="},"uninstall_metrics":{"installation_date2":"1735816586"},"user_experience_metrics":{"client_id2":"{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}C:\\Users\\user0s:92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A","diagnostics":{"last_data_collection_level_on_launch":1},"low_entropy_source3":4643,"pseudo_low_entropy_source":1314,"reset_client_id_deterministic":true,"stability":{"browser_last_live_timestamp":"13380290186483072","stats_buildtime":"1695934310","stats_version":"117.0.2045.47-64","system_crash_count":0}}}

C:\Users\user\PCAppStore\UserData\EBWebView\ShaderCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\ShaderCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\ShaderCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\ShaderCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\ShaderCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNla12xa/:Ls3a12M
MD5:	5C86D87DAE098BF997EAD8F94ECA6406
SHA1:	22FB6580D9679C5C79070FB4F25FFE8AA9AA6674
SHA-256:	62359760460774542885A92F580355029ADFEAC42C06B3BB1230220281EC6F44
SHA-512:	C379CCE7E0AC6BA545B109D38BB5D88B5E77FA6FC368019C3774A306C21B6C9EA763ABA814BE502914ECF3DA0A6D7E1E9839A7A80D101D103D12A948F872F6E9
Malicious:	false
Preview:	............................................M./.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\UserData\EBWebView\Variations

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.3751917412896075
Encrypted:	false
SSDEEP:	3:YQ3JYq9xSs0dMEJAELJ2rjozQan:YQ3Kq9X0dMgAEwjM
MD5:	961E3604F228B0D10541EBF921500C86
SHA1:	6E00570D9F78D9CFEBE67D4DA5EFE546543949A7
SHA-256:	F7B24F2EB3D5EB0550527490395D2F61C3D2FE74BB9CB345197DAD81B58B5FED
SHA-512:	535F930AFD2EF50282715C7E48859CC2D7B354FF4E6C156B94D5A2815F589B33189FFEDFCAF4456525283E993087F9F560D84CFCF497D189AB8101510A09C472
Malicious:	false
Preview:	{"user_experience_metrics.stability.exited_cleanly":false,"variations_crash_streak":0}

C:\Users\user\PCAppStore\UserData\EBWebView\c2660c4e-efd9-42a0-8bba-b25e95ae48aa.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16280
Entropy (8bit):	6.067557260722904
Encrypted:	false
SSDEEP:	384:dtMkaMJH2m8qVT8IeQ0I5t0b9MEFBNBSRvOZO4SUFI7:XMkbJrT8IeQc5AO4UF8
MD5:	881B3FC8B9B5C6B8B6C50533F22FE30B
SHA1:	B4FFF183DD70CB19EFE7731203D3D6E6E778C274
SHA-256:	A5A28408B13AC1E3F9C9527ECE4CDC44EF4A29F30614ECA163A98EE4E35DCDFC
SHA-512:	C8C3063A3E6F3DEBD4C4C52645125EEEDADB42705CA70FFAB3553523FA7A2D49C52A8B2C04A52BB15BCD0E85DA3961D9DE459D20A2F280AE3A008EDA6A2CD2D2
Malicious:	false
Preview:	{"domain_actions_config":"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

C:\Users\user\PCAppStore\Watchdog.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsgC284.tmp
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	293720
Entropy (8bit):	6.344992787823237
Encrypted:	false
SSDEEP:	3072:XmTGizQ8x11SwEpAgNQlTkGixObSY1QNwfeaa1m3XXz7pzGgQd3zsobxZDRaY0W7:vizpzqISWawfVj3nzdGjsYtasOM
MD5:	646EB11A93F5B255A528B46AAE2A4465
SHA1:	48B2712FD81C0A5AEB8C1C5F29A4CC101D336DAA
SHA-256:	5017C3955873A9E8C1A6BC9073385E319019935A59B4F3E436D0CC9F6449C3F0
SHA-512:	17D08F234D435163EC55439CDC40A08F5002C1BA2B6E2E376C34D0540575EFA49F2201DD670F4DC8929FB83F20B71279F515E0A9107DE3C625BF9D0CF437F9E9
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 3%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........P^...^...^.......[..............T...N...W...N...N...N...`.......S...^...........\......._...^.m._......._...Rich^...........................PE..d....c4g.........."....).............2.........@.....................................g....`.................................................@...x.......h........2...R..X)...........N..p....................P..(...@M..@............................................text............................... ..`.rdata..v...........................@..@.data....%..........................@....pdata...2.......4..................@..@.rsrc...h...........................@..@.reloc...............J..............@..B................................................................................................................................................................................................................................

C:\Users\user\PCAppStore\cache\1241034969

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	ASCII text, with very long lines (377)
Category:	dropped
Size (bytes):	106128
Entropy (8bit):	4.723400271657163
Encrypted:	false
SSDEEP:	3072:DYEKnrK50n8OXEZ44WJV+r1wPwB4VjZW/Fq:MEKnrK508tZ44WJV+r1wPwmVjZIq
MD5:	A63BDF80F9B4CEA5B9EC085AB3EC3838
SHA1:	4F2DF8A1E2DACA2FD9130742DB6286134A7D27C6
SHA-256:	A5DD296CE5635CB4218F233328F043B6E353ADF0146F4799EC8B91B78B9D031E
SHA-512:	B4E67494A1461ED11F5E78B861C570578C246AF67E4793940F43413569E92C81405449C357DDDA04F18FD6A42C218F649CC1B37036C89B29A556599DE417CC2F
Malicious:	false
Preview:	function _OverloadYield(e, d) {. this.v = e, this.k = d;.}.function _applyDecoratedDescriptor(i, e, r, n, l) {. var a = {};. return Object.keys(n).forEach(function (i) {. a[i] = n[i];. }), a.enumerable = !!a.enumerable, a.configurable = !!a.configurable, ("value" in a \|\| a.initializer) && (a.writable = !0), a = r.slice().reverse().reduce(function (r, n) {. return n(i, e, r) \|\| r;. }, a), l && void 0 !== a.initializer && (a.value = a.initializer ? a.initializer.call(l) : void 0, a.initializer = void 0), void 0 === a.initializer ? (Object.defineProperty(i, e, a), null) : a;.}.function _applyDecs2311(e, t, n, r, o, i) {. var a,. c,. u,. s,. f,. l,. p,. d = Symbol.metadata \|\| Symbol.for("Symbol.metadata"),. m = Object.defineProperty,. h = Object.create,. y = [h(null), h(null)],. v = t.length;. function g(t, n, r) {. return function (o, i) {. n && (i = o, o = e);. for (var a = 0; a < t.length; a++) i = t[a].apply(o, r ? [i] : []);.

C:\Users\user\PCAppStore\cache\1330411217

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	ASCII text, with very long lines (377)
Category:	dropped
Size (bytes):	107074
Entropy (8bit):	4.7438128637075
Encrypted:	false
SSDEEP:	1536:2g5Sqa3XEF+skJejrMnOIdcE/S+LXj1+EukqQqoql5+ZPq+DbLr+PWCohJVWLbOs:DYEKnrK50n8OXEZ44WJV+r1wPwB4VjZK
MD5:	36F2F7B3F54A84A80BAFA353FF99BB5D
SHA1:	2DDAC2ACD17910BEBABD6A744002E4AC1FF683EB
SHA-256:	77EE1E4FABEB2C65D4965404D420D70A54DB5FF0A75612ECCF6DA8ED12380978
SHA-512:	35235E14ECEC977C9DEDA45396BD9B2501C0130CF78CDAC45B93775149FC4BF777AED80BB395EA9861D968C41C57481A4909D3A3C0D5538FB45BDF66E1C1BABA
Malicious:	false
Preview:	function _OverloadYield(e, d) {. this.v = e, this.k = d;.}.function _applyDecoratedDescriptor(i, e, r, n, l) {. var a = {};. return Object.keys(n).forEach(function (i) {. a[i] = n[i];. }), a.enumerable = !!a.enumerable, a.configurable = !!a.configurable, ("value" in a \|\| a.initializer) && (a.writable = !0), a = r.slice().reverse().reduce(function (r, n) {. return n(i, e, r) \|\| r;. }, a), l && void 0 !== a.initializer && (a.value = a.initializer ? a.initializer.call(l) : void 0, a.initializer = void 0), void 0 === a.initializer ? (Object.defineProperty(i, e, a), null) : a;.}.function _applyDecs2311(e, t, n, r, o, i) {. var a,. c,. u,. s,. f,. l,. p,. d = Symbol.metadata \|\| Symbol.for("Symbol.metadata"),. m = Object.defineProperty,. h = Object.create,. y = [h(null), h(null)],. v = t.length;. function g(t, n, r) {. return function (o, i) {. n && (i = o, o = e);. for (var a = 0; a < t.length; a++) i = t[a].apply(o, r ? [i] : []);.

C:\Users\user\PCAppStore\cache\1457091700

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	8628
Entropy (8bit):	4.720674046204065
Encrypted:	false
SSDEEP:	192:nJUVFdi/FeytH42FzuJ/97jJ875n7xZUP4tDEVEC48chvhyS:mFGFdfF8J875/UP4lEuCg
MD5:	B5BAC36F0546DECC0F93CC1BBD68177E
SHA1:	7219BDAF01241ADF528802EB4F4F3C01E219B86D
SHA-256:	C4FDF5B5504FAED784D8D085C4B6B8E002E08C5003B630F2023609792C00024F
SHA-512:	E3FF444B4F1AC25FBFE6DF0BCC5AA4E6580B73A8C5775FCF91DDC86BD46F234158AF12449BD3EB6CC29B9282E2705A1DA11A477D4A39DC320F8AE5207E974C40
Malicious:	false
Preview:	.<!DOCTYPE html>.<html lang="en" style="">. <head>. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.. <meta http-equiv="X-UA-Compatible" content="ie=11" />. <meta. name="viewport". content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no". />. <meta name="viewport" content="width=device-width, initial-scale=1.0" /> -->. <title>Search menu here</title>. <style>. * {. margin: 0;. padding: 0;. box-sizing: border-box;. cursor: default;. }.. html {. scrollbar-base-color: #514f4f;. scrollbar-face-color: #fbfbfb;. scrollbar-shadow-color: #fbfbfb;. scrollbar-3dlight-color: #fbfbfb;. scrollbar-highlight-color: #514f4f;. scrollbar-track-color: #514f4f;. scrollbar-arrow-color: #fbfbfb;. /* overflow: hidden; /. }.. body {. font-family: "Roboto", sans-serif; / Roboto */. font-weight: 400;.

C:\Users\user\PCAppStore\cache\156372016

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3133
Entropy (8bit):	4.812749338362716
Encrypted:	false
SSDEEP:	48:ffemGUFL7emGUUFgahZFgah2L7n2cLWxlCBHtaAcwH4MHrrwe4MH+BjXkE:nemDNemDUFgahZFgah6BwQlc
MD5:	B99EA1348ED2A5B6F3A5A651B4750BD4
SHA1:	2F831AB906DF76FB5C54D112C9703CA7F483CCA0
SHA-256:	559CA1FE097385EF0F486B85A4DB8E0A1D024FEB3A7D277B69B2DF75ECBBC138
SHA-512:	CC03F25F90B955696CE9C0A07477F16566E013F97FCA7090C2C70D059C167154241DEBA75C2AFEA180E9EA786EA4AB29A1CC5B71126C7762DB6D78892AA83C47
Malicious:	false
Preview:	<svg width="90" height="90" viewBox="0 0 90 90" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M0 32C0 20.7989 0 15.1984 2.17987 10.9202C4.09734 7.15695 7.15695 4.09734 10.9202 2.17987C15.1984 0 20.799 0 32 0H58C69.201 0 74.8016 0 79.0798 2.17987C82.843 4.09734 85.9027 7.15695 87.8201 10.9202C90 15.1984 90 20.799 90 32V58C90 69.201 90 74.8016 87.8201 79.0798C85.9027 82.843 82.843 85.9027 79.0798 87.8201C74.8016 90 69.201 90 58 90H32C20.7989 90 15.1984 90 10.9202 87.8201C7.15695 85.9027 4.09734 82.843 2.17987 79.0798C0 74.8016 0 69.201 0 58V32Z" fill="url(#paint0_linear_2080_831)"/>.<path d="M0 32C0 20.7989 0 15.1984 2.17987 10.9202C4.09734 7.15695 7.15695 4.09734 10.9202 2.17987C15.1984 0 20.799 0 32 0H58C69.201 0 74.8016 0 79.0798 2.17987C82.843 4.09734 85.9027 7.15695 87.8201 10.9202C90 15.1984 90 20.799 90 32V58C90 69.201 90 74.8016 87.8201 79.0798C85.9027 82.843 82.843 85.9027 79.0798 87.8201C74.8016 90 69.201 90 58 90H32C20.7989 90 15.1984 90 10.9202 87.8201C7.15695 85.9

C:\Users\user\PCAppStore\cache\1579430509.html

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	HTML document, ASCII text, with very long lines (403)
Category:	dropped
Size (bytes):	412522
Entropy (8bit):	4.852934716208424
Encrypted:	false
SSDEEP:	6144:8RgLsdEKnrK508tZ44WJV+r1wPwmVjZ+39N+mVdFXpNdFOBA/f9+EKnrK508tZ4b:AV+vmVji/f9wV+vmVjNuV+46h3N5
MD5:	0107CA1933FC0333C47C95F0747A133E
SHA1:	AF66CAE08FB1C8BDBCC739BD5B49BEDB5E68925A
SHA-256:	302DDE102FAEA8B08036355C33A6CB3EB0F8F73A8B4EE73BBEA14A044361328E
SHA-512:	B6E15BB7DDCE9D32EEBFE0279E915BE812BE0F5351FD9613415F2BF5B2AB5017CC4763B84EE0005C9024FA02D6C4B2AE2889D080BD90A82EAAA4D9B9689151DF
Malicious:	false
Preview:	<!DOCTYPE html>.<html lang="en">..<head>...<meta charset="UTF-8">...<meta name="viewport" content="width=device-width, initial-scale=1.0">...<title>Document</title>..</head>..<body>.....<style>*{margin:0;padding:0;-webkit-box-sizing:border-box;box-sizing:border-box}body{font-family:"Roboto",sans-serif;color:#000}img{max-width:100%;-webkit-user-drag:none;-khtml-user-drag:none;-moz-user-drag:none;-o-user-drag:none;user-drag:none}.main-container{width:100%;height:100%}.d-none{display:none !important}.app{width:100%;height:100%}.app__img{display:block;width:100%;height:100%}</style>...<div class="main-container" id="main_container"></div>.....<script>var makePostRequest = function (url, data, callback) {. var httpRequest = new XMLHttpRequest();.. if (!httpRequest) {. console.log("Giving up :( Cannot create an XMLHTTP instance");. return false;. }. httpRequest.onreadystatechange = function () {. if (. httpRequest.readyState === XMLHttpRequest.DONE \|\|. httpRequest.read

C:\Users\user\PCAppStore\cache\158023311

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 249x126, components 3
Category:	dropped
Size (bytes):	62594
Entropy (8bit):	7.939956103030076
Encrypted:	false
SSDEEP:	1536:GhjJWGScRQyIyfcYTyTNZX4qisc/pllMeEux+yfY:0j/niyXp4AZsIpZH+QY
MD5:	99024BC9D17BC0EE957CD439108C1EBE
SHA1:	CFE3AB7FBBC95FB9B2F8375CFF71D12972348ED9
SHA-256:	5A696B7A31275BC467B10590141C3B70D0A3B3ECAAFE122109AA55140014C78D
SHA-512:	B5B5218E35208B022A99E4DFC6A1E44A97A1F2F85EDABFF56ECECE42F233AEF4F3E03A2A7FF9FDB384C784B7D8AFF6A2F062D2576077F45F64D085880188BA78
Malicious:	false
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................~.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....^.......[.mV.5.....HF.Mo..{&.Z....;".Y.<,jI.:..<...EZ.I[M.N.OM...9..mj..s...?.u.._.5.C......l..a..=.{.w.....&..f......N......#1.L.(..i.eX......a..[U.d....?z.a.>#..u.[K...]i.Y..2.)-"......Y.Ig..HQ.l..F.R&;...8.(...O.........p.`.d...j1..K.o/.......>+.X.4.I.u.O0.X....XEab...t..'uN...V>.........k....H?..,....+@.R.F....Y...K.-.v{..Bf.D'..........b1..F...v.G.+:2

C:\Users\user\PCAppStore\cache\1707440702

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	PNG image data, 480 x 280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	183507
Entropy (8bit):	7.9938591241504
Encrypted:	true
SSDEEP:	3072:r/Usgc0QGoozmn0xiIga/8HFB8oaKA37CrdK2yWZxmgIYsdGnUWO6ybChCZEWxvG:DUjcFpoi0xi3lFqgHC8xmeabNiWMp
MD5:	2E7D8EB14E6BADEF25369EF05F04FFFC
SHA1:	6D371C63DE9B677EEAEA5A159FD49FAEFB2EA673
SHA-256:	48BF7FB003C70333C7A0AA9FF5A26146EF87FE0C301057DA76504EDEF82065F7
SHA-512:	FE288FF2CB68A12E552249D6D8A64D93882A68B5445F206995CABCA6A360871E84FA9C95E0A8CE09DC1B01E8ABD0BFE6AEC1BC86C1866648ED251784A7CC81AE
Malicious:	false
Preview:	.PNG........IHDR...............%.....pHYs................IDATx...y.m[~.}~s...}..6.o.{U%.$J.d..Lc....q%....w.....QHCT..pF.......8.G...c.16..F....P.........^.3...\k.....U..}.nV3.......?.OF.,.(.{........A@.\|]>?.x....t].T.....a..v.c..c.i.k.r.8.z.>`...8g..v;m.....+m^..00..=W.&.._.7.S..B..H....O..0..ljle!,.U..Hz......1.q...........>..&.9.......q:6Qt..=1B......}......kK.V....C.?....X.f[Q9...........u.Z9.G..]C.....3Q./..BXN/..o.....8=.....A8.;F.0rjT.......>..ch..S.c3.z......j..)B.".CG..U....~..8.{F.p..4.'...G.n......sOb.9...0.]?.@.:..Y..F..._.r."..Yy>.;.<M.c...g.x....#^}..w_\|.{{..9g.[.?..7../..._....-..U...?....t.}Q"1(......1FB..n.p..1.g.g.2t#}7...u.K..x.._.X.ME...Gb..v=...i...x\..o9.!F.....g-1.b...:.y..,.$..yY...$F.g.;(.3..2o.U_.w....mUei7..#...w..a.2....9J.w.....I..G.....@$.....6.>a...W......[~.{.....C.VT..SR..G....t.L.$-...Xa.<]"....t..Q..N.7n.G.T.c..a.p.3.@]+..k..D......!".!`...%...q..!b.....r.a..f..HQ.U.+y..k.8U7.I.G.1D.1.....`)d....

C:\Users\user\PCAppStore\cache\187682786

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	PNG image data, 21 x 17, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	314
Entropy (8bit):	6.436194254572056
Encrypted:	false
SSDEEP:	6:6v/lhPKYen3P5iTh84kt+lMyBbZkBFKUixbB6qQLRAbI1roVp:6v/7yP/5ohpLsFKUSb+y8o7
MD5:	3A3135420B1F7EE409515017EDBD56EE
SHA1:	7DFC6BC492645181F9FECC966BE6D48A47A0BD38
SHA-256:	535F2E3D527823E7A9A1C75F8F205B1B6C43BF6445DFA6CA56DF7D8DD12AFBDB
SHA-512:	A9C387383EF0A24BBA1B7E31F352D334BD15EE6D8C7D0EA6D2C0B85DFC2F2886EFFBFFE77B5FDB2C27D8374887C15B28DC60408671B982C313678B2D572CF26C
Malicious:	false
Preview:	.PNG........IHDR..............X.....ZPLTE...0..@..0..8..0..5..4..6..6..8..5..8..7..6..6..6..6..5..5..7..6..4..5..5..6..6..5..6..6..5X.g....tRNS... 00@PP_``p.....................rIDAT..u.Y.. ......5.E................c....b....(...9...".7M.X.UDq...gJ:....uW.^h.u....i.H....[."..Oi..y../...v.f......IEND.B`.

C:\Users\user\PCAppStore\cache\20317828

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	ASCII text, with very long lines (377)
Category:	dropped
Size (bytes):	106619
Entropy (8bit):	4.69857745363363
Encrypted:	false
SSDEEP:	1536:2g5Sqa3XEF+skJejrMnOIdcE/S+LXj1+EukqQqoql5+ZPq+DbLr+PWCohJVWLbOZ:DYEKnrK50n8OXEZ44WJV+r1wPwB4VjZD
MD5:	5D8BBC3C6AE68258B8ACE98EA6DA3C81
SHA1:	CC9244FD119CA910B4ACE5103059EE6CF3C20992
SHA-256:	58DE2BF77EAB0B1D54B272132C0A582B0F41C1A9EBCB9BF85AD6BC901AA422CB
SHA-512:	3BBC817979886003D742FB8ED74ABBE475E0642F1D77F4A9F30857E119AB649A3AF0EB3A4C6BFB0D442308B8A316DF100354F292710EAAAE7C849F5935531085
Malicious:	false
Preview:	function _OverloadYield(e, d) {. this.v = e, this.k = d;.}.function _applyDecoratedDescriptor(i, e, r, n, l) {. var a = {};. return Object.keys(n).forEach(function (i) {. a[i] = n[i];. }), a.enumerable = !!a.enumerable, a.configurable = !!a.configurable, ("value" in a \|\| a.initializer) && (a.writable = !0), a = r.slice().reverse().reduce(function (r, n) {. return n(i, e, r) \|\| r;. }, a), l && void 0 !== a.initializer && (a.value = a.initializer ? a.initializer.call(l) : void 0, a.initializer = void 0), void 0 === a.initializer ? (Object.defineProperty(i, e, a), null) : a;.}.function _applyDecs2311(e, t, n, r, o, i) {. var a,. c,. u,. s,. f,. l,. p,. d = Symbol.metadata \|\| Symbol.for("Symbol.metadata"),. m = Object.defineProperty,. h = Object.create,. y = [h(null), h(null)],. v = t.length;. function g(t, n, r) {. return function (o, i) {. n && (i = o, o = e);. for (var a = 0; a < t.length; a++) i = t[a].apply(o, r ? [i] : []);.

C:\Users\user\PCAppStore\cache\2138117525

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	PNG image data, 470 x 260, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	191508
Entropy (8bit):	7.993635250876462
Encrypted:	true
SSDEEP:	3072:hW0FuVWD5TRox5zpE7Nz5Y5w5RDU7zM/QtoD6jKsi/P2BYjDEDYGiNFr0qhy:Fu2TR8x4Nz5RgXFiGsff4YGQFQL
MD5:	1E835E5C660C739D3E264C484007B1D5
SHA1:	D86D2543E8A99EE7158E6250D7C83520628C79F9
SHA-256:	8802F73FDC711AF2D31367EF3CE4DE7744D650A15E65CB90E344E7980805B51D
SHA-512:	3AE6D78589F4C13F66DA840D52EFB012D9AE47C122FDA777F05125EE6F729CFD7CB13E12DF296FBB672432946C7A3B4F238C9FEF5FE302BB6F76CA5A764AE763
Malicious:	false
Preview:	.PNG........IHDR................~....pHYs.................sRGB.........gAMA......a....IDATx.....$.U...U.s....G.4....r....h0`.\|6\|p.KN6.`...G.eK.,+Y.H.49..s...w.>..:#..r...<*y\|..Pa.Wx...L.x.x.x.x.x.x.x../9t.~.~.~.~.~.~.~...............u.............._x.nX_?^?^?^?^?^?....#..>.J..}...R..?.Tn.R.[.K}.j.y.._.K....c.._.3K.....Z.Y?..\.6..4......j....<...?.X..._i=........._.W{m......).?......r......da..\.\|..c....g..h.v........\|.9j?..9....y.3....=...+.....^...\|...gt].a....zT.y..^........?.._1..4.K.Z.g..k...L.._i.k..j...;.W;G..\...W..ZU..............k.............U......{....-...z.......p..\|...u....w.....y.b].^..Z..R.P..~\|_....8;K}f.1._YHK......J..^..?.R.\....x-...s.W:.R2~..~\~..]...f@k...a...9~.c.q\|.g.q..G..e.......k.._.._I~.v.W..W3.?.=...z5.s...C.~..E.J..J.t5%w...C"..g^.+........."....>....R.v).p..S....-u....W{...P...>.j..Z...y.j..R..?.<.+).WR>?.Ay.s..jc.Z.....u.zM~.....k..^.j.m..x..X{......R...+.W....x....Q{....._.~.6...Y.~.3.t.....,..2.7..v..yDW...

C:\Users\user\PCAppStore\cache\2187156021

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 249x126, components 3
Category:	dropped
Size (bytes):	47131
Entropy (8bit):	7.931779753061097
Encrypted:	false
SSDEEP:	768:G+icWueyhK021sTDjaLhazFDvSU1DhTC6PNljl4NwfcMVB6e7MdKBun10N8SXpzR:G8WueMjas/GLc19TWCOWMdt6N8ApVH
MD5:	0B80B598C0453F86C3447CD6A353F728
SHA1:	DCEEAAAAEF8911A3E7FF06BBCA1EC011E024B629
SHA-256:	EFDE12638068531699B66A5498E233FE0F19EAEB53FB093AA2C58F4A0479B758
SHA-512:	2CAD81B08AD06EF5BE25D18A7AA5EB05E247FC075866F6A075017CFD8E9CDF73F911AB7072F0B431E14D62A7F8CBB8BEC6182588E90B02A28B4A1A28A25D8641
Malicious:	false
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................~.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....,M...X.q.:c.?_..Z..d.-........?..7.....o~..}.7.# rA.....<...\.0.]....{...V...m....E...p{9..lW;.......F.b.....>....@.....7..B...].7....`.v..\.*../..q..'..\HN4o.{.cX.......i..b.O....).....7....E#.....[..r.wC..%..?\...7....i;..R...:_E}.....K-....[.TV9.I...=#..O........U?...h.........?(.....'..$...q...8.B...........J.n..F.....#....GC.foQ......}........_....

C:\Users\user\PCAppStore\cache\2374866827

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	PNG image data, 490 x 140, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8035
Entropy (8bit):	7.915436310548169
Encrypted:	false
SSDEEP:	192:mILTm2E2cgqnk3DMwEu73ubv0/L2rnuq+XS:BTmn2lakTMeL2n
MD5:	E5D970BBAAE6659BB9F51FD206C4C4EE
SHA1:	80B4A5557BC1BB74BAD6800A37D3CB16698808FA
SHA-256:	C9E15ECB3967704F7EE510DE908DD08D79063EA60C86A00835519F6ABF645920
SHA-512:	A8B53F961525A9E44D45D07457742282D26E9512B6CFD3985F203A84304450AFA7D0B2093F97E40B03774D93F8D13E94AC3E971DC0350318BC58A548EF953DC7
Malicious:	false
Preview:	.PNG........IHDR....................IDATx...l..y.O.....q..$v.vB.46...aM4%....-..].*...6...t.h.t...h-.....LcS....j..IG........q.v"'..._ ;....s_....a...~..k.{..s..=..<.9........!..B..#..B.!.B.&..B<.BM.!.x....B....5!...1.jB.!.c(..B..P..!....P.B.!.C.&..B<.BM.!.x....B....5!...1.jB.!.c(..B..P..!....P.B.!.C.&..B<.BM.!.x....B....5!...1.jB.!.c(..B..P..!....P.B.!.C.&..B<.BM.!.x....B....5!...1.jB.!.c(..B..P..!....P.B.!.C.&..B<.BM.!.x....B....5!...1.jB.!.c(..B..P..!....P.B.!.C.&..B<.BM.!.x....B....5!...1...YP.1..o6..W.K2...\|...G.......>.m\|..c..u.1y.GV.....'N..d..C.!...o.z.x.......N....L....X........mG.w......a.\|..DQ....6...On.?;>t..\|.Y....H.......Er.o..wc.j]a...yH..z..+...;o.e.x..r..A..[.....J......_..h...l.....<.....?....Qv.<(.K...^.b.K.'.....aJq.}?...c~...3.>qe.9..O..=iw.........BHZ....:n6...j>b..,l..\|..Sf..13~.)S....B.BK^ v.\|.............u.a.Q\|...7.....z..7.9%.[....H,w....y.s.C.....l........Y..>..;.\|.s..0 ..[.-.`.Q..qy.:..yG.Rf....b.+V.4el\./..E.p..l.rx

C:\Users\user\PCAppStore\cache\2470428374

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	322
Entropy (8bit):	6.7841964696720645
Encrypted:	false
SSDEEP:	6:6v/lhP6+k2/6TsR/nb1Qy878gDETdgG5wmdSDjda9muJNLiRlVp:6v/7n/6Ts/nb1QyJISd5BYDha9ZKRl7
MD5:	24388A494BAEC90D9EF6EAB6E28515B7
SHA1:	8C56A9FD3EDADA619639DD8E6F572E8BA3FAC268
SHA-256:	F5094981B78535EE74C4F5001BF8350B9086EFAAE28AE05605408BC3F1820BBB
SHA-512:	0764D6C90628E28AC72EDC278F102F8457BEBABDB3977B9888A8D653A64E45D23E2C45530A8DED4F2E9A5CFE8FCEFBF5D62E237F49CB6AF6CFC414126B2BA42D
Malicious:	false
Preview:	.PNG........IHDR.............;mG.....pHYs.................sRGB.........gAMA......a.....IDATx...... .E.S..$....Z..P$..$L...u.....#......K~.p...^.28....2..5.$..M..,.N,.`...5..Y$..gH..(..H......~..E.D....C.&.S=WV.2yP."4."..z..6.nC...........K..<. ......@..-.g.C...i]..q.../.xH2B...W."+..'..K....{....IEND.B`.

C:\Users\user\PCAppStore\cache\2501046628

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	ASCII text, with very long lines (377)
Category:	dropped
Size (bytes):	102176
Entropy (8bit):	4.715850843423195
Encrypted:	false
SSDEEP:	1536:2g5Sqa3XEF+skJejrMnOIdcE/S+LXj1+EukqQqoql5+ZPq+DbLr+PWCohJVWLbOx:DYEKnrK50n8OXEZ44WJV+r1wPwB4VjZH
MD5:	92544FEAE9C13F4852CB3473EA8FBD90
SHA1:	27AFA17EB66DC0B94E6B9B4C2EA4CA9016E016D0
SHA-256:	6A66AC4AAC577FA98CF4854849B5D6BA27F6E33F119D7917DED4E587477AFE6A
SHA-512:	099CB463B200A2ADBFEF3E9B470822862F1F5464146C423578C1C2BB2111BE13998112224BE5A67685CE06B52F26CBDFBFCBAD3AC83E373378710484648549DB
Malicious:	false
Preview:	function _OverloadYield(e, d) {. this.v = e, this.k = d;.}.function _applyDecoratedDescriptor(i, e, r, n, l) {. var a = {};. return Object.keys(n).forEach(function (i) {. a[i] = n[i];. }), a.enumerable = !!a.enumerable, a.configurable = !!a.configurable, ("value" in a \|\| a.initializer) && (a.writable = !0), a = r.slice().reverse().reduce(function (r, n) {. return n(i, e, r) \|\| r;. }, a), l && void 0 !== a.initializer && (a.value = a.initializer ? a.initializer.call(l) : void 0, a.initializer = void 0), void 0 === a.initializer ? (Object.defineProperty(i, e, a), null) : a;.}.function _applyDecs2311(e, t, n, r, o, i) {. var a,. c,. u,. s,. f,. l,. p,. d = Symbol.metadata \|\| Symbol.for("Symbol.metadata"),. m = Object.defineProperty,. h = Object.create,. y = [h(null), h(null)],. v = t.length;. function g(t, n, r) {. return function (o, i) {. n && (i = o, o = e);. for (var a = 0; a < t.length; a++) i = t[a].apply(o, r ? [i] : []);.

C:\Users\user\PCAppStore\cache\2842487985

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 249x126, components 3
Category:	dropped
Size (bytes):	51724
Entropy (8bit):	7.940662493791096
Encrypted:	false
SSDEEP:	1536:GmgX+s4EgDmSLidL1wOWuuPXkra9GynvpL9FVe33:O54EgiFyuykragMvxReH
MD5:	9799622A270F0D1ED5E7C7640992E94D
SHA1:	712500076805CD81B2891D97492BA0DCA4023572
SHA-256:	8C10DC4E40B3C35C760E10880371FBA2222C2872DA1F480598EAF41809ABDB0C
SHA-512:	0B3732CF637BF85535F84897E1B5AFA5271EE342CD63111CADE654EA49ED34E6F7B495071410675EB2D3BA98DBDA06849E6383980E71695E874B087B1C432F3D
Malicious:	false
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................~.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...\|S..o.:.._Owsu4..r....,...ZE....)... 8....7....g......3...U.Rs.'7XznM...F..Q\|..#................nW....B.#9.cW.QE).1..ukU..)NRz....^._..Ip.4P..Qy.ne.YR\........Ym..e....c+TX.QS..:t....RS.ex.FQ..e...T.56.....l+...P.J.X.O...!N...+...y......N.....>...z.....(...f.7...C>./..m..Q.F..}.7-..m.6....RY.E&#...."10...C...]...q...\|..r.JQ.j3..9Z.j....iu...lE..'Fn.

C:\Users\user\PCAppStore\cache\2853893880

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	ASCII text, with very long lines (377)
Category:	dropped
Size (bytes):	98483
Entropy (8bit):	4.705382025821522
Encrypted:	false
SSDEEP:	1536:2g5Sqa3XEF+skJejrMnOIdcE/S+LXj1+EukqQqoql5+ZPq+DbLr+PWCohJVWLbOn:DYEKnrK50n8OXEZ44WJV+r1wPwB4VjZl
MD5:	3F64A40C0A2AC3912D0E1C2AE87CA0E8
SHA1:	51E2A836AA57A8DBAF41A640EC506D61C459FFF6
SHA-256:	369A131B0558269EEB6258D3A4D216E681C1BA9A6C1ACE4783D5A0D84F7B1E21
SHA-512:	2628A60FD4C77C16608F2957C3DF21AFB86C9FDE2AE2907D55EEFA2D76E63D744FAA1F4BCD71D8A46DA798303A7E11AD9CE74B9BA7B378913089987A6F59A1DB
Malicious:	false
Preview:	function _OverloadYield(e, d) {. this.v = e, this.k = d;.}.function _applyDecoratedDescriptor(i, e, r, n, l) {. var a = {};. return Object.keys(n).forEach(function (i) {. a[i] = n[i];. }), a.enumerable = !!a.enumerable, a.configurable = !!a.configurable, ("value" in a \|\| a.initializer) && (a.writable = !0), a = r.slice().reverse().reduce(function (r, n) {. return n(i, e, r) \|\| r;. }, a), l && void 0 !== a.initializer && (a.value = a.initializer ? a.initializer.call(l) : void 0, a.initializer = void 0), void 0 === a.initializer ? (Object.defineProperty(i, e, a), null) : a;.}.function _applyDecs2311(e, t, n, r, o, i) {. var a,. c,. u,. s,. f,. l,. p,. d = Symbol.metadata \|\| Symbol.for("Symbol.metadata"),. m = Object.defineProperty,. h = Object.create,. y = [h(null), h(null)],. v = t.length;. function g(t, n, r) {. return function (o, i) {. n && (i = o, o = e);. for (var a = 0; a < t.length; a++) i = t[a].apply(o, r ? [i] : []);.

C:\Users\user\PCAppStore\cache\2887297582

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	ASCII text, with very long lines (377)
Category:	dropped
Size (bytes):	105015
Entropy (8bit):	4.721274537184803
Encrypted:	false
SSDEEP:	3072:DYEKnrK50n8OXEZ44WJV+r1wPwB4VjZ2IVF:MEKnrK508tZ44WJV+r1wPwmVjZ2K
MD5:	6D2556899BCBAF2980AEF5A608D2B25F
SHA1:	0EC7D17320CAA9B5BB617A2FD98D6A8091D602EC
SHA-256:	D3174FDCCADE5CF1A73A54FAD98603BB1BACFAACF310FCB94B9AB94EF072E4DF
SHA-512:	987CCA3E7757FEC3C4AEED36CCE3CC3CD133F631D88BE4F0A2C09A7D746C7C2EFE1B061D4CACA632F70D21961819BFF941EA428C23136769985D505DED4EE3A7
Malicious:	false
Preview:	function _OverloadYield(e, d) {. this.v = e, this.k = d;.}.function _applyDecoratedDescriptor(i, e, r, n, l) {. var a = {};. return Object.keys(n).forEach(function (i) {. a[i] = n[i];. }), a.enumerable = !!a.enumerable, a.configurable = !!a.configurable, ("value" in a \|\| a.initializer) && (a.writable = !0), a = r.slice().reverse().reduce(function (r, n) {. return n(i, e, r) \|\| r;. }, a), l && void 0 !== a.initializer && (a.value = a.initializer ? a.initializer.call(l) : void 0, a.initializer = void 0), void 0 === a.initializer ? (Object.defineProperty(i, e, a), null) : a;.}.function _applyDecs2311(e, t, n, r, o, i) {. var a,. c,. u,. s,. f,. l,. p,. d = Symbol.metadata \|\| Symbol.for("Symbol.metadata"),. m = Object.defineProperty,. h = Object.create,. y = [h(null), h(null)],. v = t.length;. function g(t, n, r) {. return function (o, i) {. n && (i = o, o = e);. for (var a = 0; a < t.length; a++) i = t[a].apply(o, r ? [i] : []);.

C:\Users\user\PCAppStore\cache\2915023414

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	PNG image data, 480 x 280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	234721
Entropy (8bit):	7.992429568773012
Encrypted:	true
SSDEEP:	6144:eSKMqLNOUdDiS6vu8iWZD79tsZeFQciqVPWQHpapu:0hLV8upETFQVqVPHpaM
MD5:	A28214A3689AFB5B8EB74B788525A33F
SHA1:	AA407E609E657E432FBB16F0506AC8D26AE85BA1
SHA-256:	A920AF2D91C52CE95238E1A9C3DE6B888C59FB0204806DF8F080DAE6C6D96628
SHA-512:	7634375146B30BC504DC60E02DED259B79EC7A3A60A7DCF36743631E411CF2D9A9529C67B31A731872667A7CAF76F3D2F7D4BB9AB6D92DA9CA5D987AA3B57865
Malicious:	false
Preview:	.PNG........IHDR...............%.....pHYs.................IDATx.\|.w.d[v.............}w..@7.. ...@Q......8.iI....H....h..a..@..~m..U......>#2.5..wN.G.....D...6...>....b.}.#.cp....N.......l....,4....{\|.\...a......".u.{.B....s`.`.b.D....y....f.\.R.Q.Q.....!.R....u...<O..Z...\w...>o...s&.....(U..~...j..z..&`s.R!...w..\|x........Q.l........P...].Jk^n..}...Y.KW...3....s.@5.......4......).......e..=3.z..ln....:.."..?...9.'../..k%..O................}.N....j....f`{....@_/.._..7._.k.....0;........?..u....._..8x.V6.+..o.;...#.....2....ex..........#...r.....:..g..."....Z]......)(.@.h..H..C.b....2...L..4\..6...)..V. ."s=.y{..i/.8./a.}.E.S...+.]..^xp.VV..Q(.C.b..#Y..%7....`.....s..r..z......h.....E..;.J{..........Y.(I.z.0.@{qr......Q..b..Tw........%.q..5..g?...0;.k.....=.....7..v..]0....ryx...m....N.......i.].[w..n.....}l... ....7%.^..52..3>...W6.}.._\|I...W.U./\|.....^.L.<_.l.a`....iMb`g.rY...t..\..-..B.#..Hs..Ioy@i..W..!...81,..Yw*.....=lI....l.<.5..X.

C:\Users\user\PCAppStore\cache\3033284208

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	PNG image data, 490 x 140, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11907
Entropy (8bit):	7.943848672567413
Encrypted:	false
SSDEEP:	192:zZR77SSlsXp7h9PKr6L1KJ9yRh/+AogjkisWttJkuzTCFvm9e4t4L6swiagy7EPZ:psV0e1j+AoGsWtxWqCJHHNi0
MD5:	35491E88F6F53FF50394C619887771B9
SHA1:	8A7E28EE13C14CB2238B9B43E40A626760E17A10
SHA-256:	C9AF01C7D48655AE50059734B8756F4AD6BBFA411C4A2238CE44E465F67CCB5C
SHA-512:	FFADC5E05FBBC604E472EEDA5784EA924C57E08E0A668DCA9849D45E5EE1324D7D8AA125F67A4EBEA8CCD7FF4ABA896D03FB117CE4D3595601FFA9806E87B0D4
Malicious:	false
Preview:	.PNG........IHDR....................JIDATx..}p..}.b......l.`...cp.p..$....M...$...6.I.o...i...N.f...L.G.M..8.f...0..,$1..........3.X....=.s........+..~f4..=.y?.w~..9.i.c.Q'..B.<2..'..B.."A-..B...j!..".HP.!..9F.Z.!..1..B.!D....B.!r....B..c$...B..#A-..B...j!..".HP.!..9F.Z.!..1..B.!D....B.!r....B..c$...B..#A-..B...j!..".HP.!..9F.Z.!..1..B.!D....B.!r....B..c$...B..#A-..B...j!..".HP.!..9F.Z.!..17...2........&wS.m..^..r..x......kC/9!..b..r..m... ..=.GA@g.j..7...I`.!..I..RP..y.k.....^....kCn.....wB.!..`...E.q9.}......q-7..z._Z\|.......T0o.....7...~......+.n....Y.q.+.5....IW.O..~o.....Y...].Y....v.....~w..{.../..?..g..y...?...x..g...'....zA...o...7o..........R......W)...k........._..[{....\|..?..?.Y..?......O.`.{<..j..dtt.......Q-...c_..S.Zz<G.R?.so.....H...}.I..o}....cuiy......_y.}...s---..O~5..g.wB.Q.......k..z@X.....t..._.qn.]w.A..D..<......@.,.=....>.v.u.{.....s...4..ou.>......7....o.-.X.Tz.......Y..?.G..'...r.......f.r...x..s./..9sJ.#t...'..

C:\Users\user\PCAppStore\cache\3228385555

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	PNG image data, 480 x 280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	187314
Entropy (8bit):	7.973332127753762
Encrypted:	false
SSDEEP:	3072:CiJXRzh6W7i2W1csgVhygjkbrPeVW4W3KdTrvC2cabjwFiWtB/QlQFYq2GAybdUL:CiJXRzsW7yc9yYgv+nt/iiWv/HAy5qFN
MD5:	F5C3741BFB4B535D69765D82350ECDEA
SHA1:	AFC0D990DF50142B19C15F77CD9817C222A47D48
SHA-256:	D15B3FDB00818B6590D59E48A08B5BF76B30ED0355261942F7A64308A6F035A1
SHA-512:	387A2C0D1C751C19FA1E0FD810EC8AE1E0EB29AAF04535D3553294F3DB462B40D04A48A44192EE5D01BE0C5858A4F17020DFE75DFC61B4BC72014063A0AD1C4E
Malicious:	false
Preview:	.PNG........IHDR...............%...4rcaBX..4rjumb....jumdc2pa.........8.q.c2pa...4Ljumb...Mjumdc2ma.........8.q.adobe:urn:uuid:46d7b01a-2d78-42c3-8710-ba291b2c91df.....jumb...)jumdc2as.........8.q.c2pa.assertions.....jumb...&jumdcbor.........8.q.c2pa.actions.....cbor.gactions..factionkc2pa.editedmsoftwareAgentmAdobe FireflyqdigitalSourceTypexShttp://cv.iptc.org/newscodes/digitalsourcetype/compositeWithTrainedAlgorithmicMedia....jumb...(jumdcbor.........8.q.c2pa.hash.data....{cbor.jexclusions..estart.!flength.4~dnamenjumbf manifestcalgfsha256dhashX .9..D..NK._W..b..P'.?z.4Jn.!M..cpadH...........4jumb...$jumdc2cl.........8.q.c2pa.claim.....cbor.hdc:titleoGenerated Imageidc:formatiimage/pngjinstanceIDx,xmp:iid:2fa5a26e-1966-45da-9bc3-57d19c5a4bbeoclaim_generatorx6Adobe Photoshop/25.9.0 adobe_c2pa/0.9.3 c2pa-rs/0.31.0tclaim_generator_info..dnameoAdobe Photoshopgversionf25.9.0ocom.adobe.buildx.20240428.m.2603 2d135fa win.isignaturex.self#jumbf=c2pa.signaturejassertions..curlx'self#jumbf=c2

C:\Users\user\PCAppStore\cache\3305714660.html

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (6727)
Category:	dropped
Size (bytes):	59703
Entropy (8bit):	5.046451844864823
Encrypted:	false
SSDEEP:	1536:duBHSPXXMj1KRyBT3fDsxZkBudcbEPa9IApYPa6dyfG//qmWN4v5dOHBp4vM3DmA:duBHSPXXMj1KRgLsxZKm0I1s
MD5:	96504083651C1FB3889729F03D239CA5
SHA1:	1FC4A89991729B57AA9A4F3C74D974522D527B20
SHA-256:	CE086701906A61950EF8ED4E2BEADC52AC43869B094D6665B7C2D0F9CE299D72
SHA-512:	A460952B7C225A101162A2FD274A2C92538A041E4BB54FF4D51F0ED639F5FB0F951F028B268EF5953A8133EE48D233F01FE0655CC1ADF376697287F83EE51049
Malicious:	false
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8"/>. <meta http-equiv="X-UA-Compatible" content="IE=edge"/>. <meta name="viewport" content="width=device-width, initial-scale=1.0"/>. <title>PCAppStore</title>. <style>. /* If the user has Windows 11 for the body and html tags added the classes. start-menu-html--windows-11. start-menu-body--windows-11 /.. / The classes light-theme or dark-theme are added to the HTML tag depending on the selected Windows theme /. {. margin: 0;. padding: 0;. box-sizing: border-box;. }.. html {. overflow: hidden;. --sm-primary-text-color: #000;. --sm-secondary-text-color: #fff;. --sm-product-hover-border: rgb(255 255 255 / 70%);. --sm-product-bg: #efefef;. --sm-search-btn-background: #FCFCFC;. --sm-search-btn-color: #5D6F7A;. --sm-search

C:\Users\user\PCAppStore\cache\3536133131

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	ASCII text, with very long lines (377)
Category:	dropped
Size (bytes):	103937
Entropy (8bit):	4.691111405208922
Encrypted:	false
SSDEEP:	1536:2g5Sqa3XEF+skJejrMnOIdcE/S+LXj1+EukqQqoql5+ZPq+DbLr+PWCohJVWLbO+:DYEKnrK50n8OXEZ44WJV+r1wPwB4VjZ4
MD5:	DEF2586A0074702E298E143C16EC48FC
SHA1:	204F3B4C139B86A040C43D539AB857FCAD2B6893
SHA-256:	2F031305BA0378EB49E5783ACBEEB57261D7A2BD9935B455224546296E784B5E
SHA-512:	7FFA6905E9F7AD6326F3117E12A9D3C2FB867619A542A6F8B76CDC167CAC260D8F5FD7D2E47215A8FEB104014F5B59E202B22D364653598DD039D2710E27B96E
Malicious:	false
Preview:	function _OverloadYield(e, d) {. this.v = e, this.k = d;.}.function _applyDecoratedDescriptor(i, e, r, n, l) {. var a = {};. return Object.keys(n).forEach(function (i) {. a[i] = n[i];. }), a.enumerable = !!a.enumerable, a.configurable = !!a.configurable, ("value" in a \|\| a.initializer) && (a.writable = !0), a = r.slice().reverse().reduce(function (r, n) {. return n(i, e, r) \|\| r;. }, a), l && void 0 !== a.initializer && (a.value = a.initializer ? a.initializer.call(l) : void 0, a.initializer = void 0), void 0 === a.initializer ? (Object.defineProperty(i, e, a), null) : a;.}.function _applyDecs2311(e, t, n, r, o, i) {. var a,. c,. u,. s,. f,. l,. p,. d = Symbol.metadata \|\| Symbol.for("Symbol.metadata"),. m = Object.defineProperty,. h = Object.create,. y = [h(null), h(null)],. v = t.length;. function g(t, n, r) {. return function (o, i) {. n && (i = o, o = e);. for (var a = 0; a < t.length; a++) i = t[a].apply(o, r ? [i] : []);.

C:\Users\user\PCAppStore\cache\3888965095.html

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	HTML document, ASCII text, with very long lines (65162)
Category:	dropped
Size (bytes):	238414
Entropy (8bit):	5.186306350982028
Encrypted:	false
SSDEEP:	6144:EUwuFH/jY82oUbuoLoRgLsArU3wAom0oXZ441V+46hQv:uuV+46hO
MD5:	20ABDCCFC0FB75017B223C7B1505F322
SHA1:	A8804D3A681CE893CBB0199327977F8654CECD78
SHA-256:	0026045C69E5DAE06E7C90FC7D489D3D5D5413C9A33D7F30BAF4E7429A2793DB
SHA-512:	3E5415162FA79D4891BDADA972D7C966DB8DE8B8C2EC9FB25B4FFFCFB9EBCEB6AA9137213DF93691B46ECA46C672FFC3B719F91D30F366AD033E8ABD7B982BA7
Malicious:	false
Preview:	<!DOCTYPE html>.<html lang="en">..<head>...<meta charset="UTF-8">...<meta name="viewport" content="width=device-width, initial-scale=1.0">...<title>Search menu</title>..</head>..<body>.....<style>/!. Bootstrap Grid v5.3.3 (https://getbootstrap.com/). * Copyright 2011-2024 The Bootstrap Authors. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). /@import"https://fonts.googleapis.com/css2?family=Inter:wght@100..900&display=swap";.container,.container-fluid,.container-lg,.container-md,.container-sm,.container-xl,.container-xxl{--bs-gutter-x:1.5rem;--bs-gutter-y:0;width:100%;padding-right:calc(var(--bs-gutter-x).5);padding-left:calc(var(--bs-gutter-x)*.5);margin-right:auto;margin-left:auto}@media(min-width: 576px){.container,.container-sm{max-width:540px}}@media(min-width: 768px){.container,.container-md,.container-sm{max-width:720px}}@media(min-width: 992px){.container,.container-lg,.container-md,.container-sm{max-width:960px}}@media(min-width: 1200px){.conta

C:\Users\user\PCAppStore\cache\630607144

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	77
Entropy (8bit):	4.659453834294149
Encrypted:	false
SSDEEP:	3:YWR48Ht+WgHfeMIGcE9KSLDrdoKeRj1:YWy22/3IuPnoRR
MD5:	9611DA66BFFA489FE6CBCE593B68E05B
SHA1:	144071BEBA3AE025C379DC1B84EADE4E990D6712
SHA-256:	B346AD6E0153C6776459F14D451123098D076B28089F0C5C1F96D8C138F4B872
SHA-512:	BDB5622E0E1881372B3BFA07BBF6E8FE6163D1994AC3FCC80205FFB050B749BBCD575F9FE2ABA585DD7CF8EE8BCF9E2D1D15AFA6AEAD45453151DCD271146747
Malicious:	false
Preview:	{"state":"ok","result":{"html":"<script>nw.Window.get().close();<\/script>"}}

C:\Users\user\PCAppStore\cache\735677694

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	PNG image data, 490 x 140, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11907
Entropy (8bit):	7.943848672567413
Encrypted:	false
SSDEEP:	192:zZR77SSlsXp7h9PKr6L1KJ9yRh/+AogjkisWttJkuzTCFvm9e4t4L6swiagy7EPZ:psV0e1j+AoGsWtxWqCJHHNi0
MD5:	35491E88F6F53FF50394C619887771B9
SHA1:	8A7E28EE13C14CB2238B9B43E40A626760E17A10
SHA-256:	C9AF01C7D48655AE50059734B8756F4AD6BBFA411C4A2238CE44E465F67CCB5C
SHA-512:	FFADC5E05FBBC604E472EEDA5784EA924C57E08E0A668DCA9849D45E5EE1324D7D8AA125F67A4EBEA8CCD7FF4ABA896D03FB117CE4D3595601FFA9806E87B0D4
Malicious:	false
Preview:	.PNG........IHDR....................JIDATx..}p..}.b......l.`...cp.p..$....M...$...6.I.o...i...N.f...L.G.M..8.f...0..,$1..........3.X....=.s........+..~f4..=.y?.w~..9.i.c.Q'..B.<2..'..B.."A-..B...j!..".HP.!..9F.Z.!..1..B.!D....B.!r....B..c$...B..#A-..B...j!..".HP.!..9F.Z.!..1..B.!D....B.!r....B..c$...B..#A-..B...j!..".HP.!..9F.Z.!..1..B.!D....B.!r....B..c$...B..#A-..B...j!..".HP.!..9F.Z.!..17...2........&wS.m..^..r..x......kC/9!..b..r..m... ..=.GA@g.j..7...I`.!..I..RP..y.k.....^....kCn.....wB.!..`...E.q9.}......q-7..z._Z\|.......T0o.....7...~......+.n....Y.q.+.5....IW.O..~o.....Y...].Y....v.....~w..{.../..?..g..y...?...x..g...'....zA...o...7o..........R......W)...k........._..[{....\|..?..?.Y..?......O.`.{<..j..dtt.......Q-...c_..S.Zz<G.R?.so.....H...}.I..o}....cuiy......_y.}...s---..O~5..g.wB.Q.......k..z@X.....t..._.qn.]w.A..D..<......@.,.=....>.v.u.{.....s...4..ou.>......7....o.-.X.Tz.......Y..?.G..'...r.......f.r...x..s./..9sJ.#t...'..

C:\Users\user\PCAppStore\cache\781484456

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	PNG image data, 480 x 280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	106708
Entropy (8bit):	7.992752550018408
Encrypted:	true
SSDEEP:	1536:s6tcPzbflX/dTw/ItVG3YXS5JSH+xsJvWwESbhx/XOX8+EHX3eNwhEKVNs/JKBSi:sZ7bfZ/1EItCY9YS5Vx/XwE7xs/JKEin
MD5:	D04AB43AA1F8D1575DCA31D23E4D0182
SHA1:	CE5EC5C3A22636A789CB98A9AC2F2C46D36CE0C6
SHA-256:	3A1F9BEE190EBDEAD1C6518E90AE275CFF5E8322BD11F41BCEE8D7EAB0022C50
SHA-512:	6E70F12AF4379F623BE8ADB178A6F2908AFEFAF823A5CB211B9FBA02C91D399D1EF9476AB5E7E735EE12A9A3028FBC9A99EEFAF43D6561FC7AA7E5E15E7397EE
Malicious:	false
Preview:	.PNG........IHDR...............%.....pHYs.................IDATx..u.eG..?........=!DI..H.........].-...A..-...A.@....I23....n..[...._..LfB.y..[..{.S.d....{k..G...N....4..)......o..q.s..)&....a..-cU.....>~i.6........o..tND..,NK\........(...`.nl.'Tv_Q. .:...L..O5.b..X..y.... ...=`...`W.i-.4...'....W..;.<B.kZ.D..K3..>..8a7.n1....i......o.YH...0.,...&....%B..t.r.w!g...qG.\.5a.I..}...pO...C........!..F.c........x@0Q.{E...p.~*..v.J...&..k.$t...~..xsy...[.?(.>............^.....[3..=!.O......9.....N..H....;.....}0<`...........t>..+.....T;....,...D.;...E..$.v,.....]....D7..a/..bx..0LyQ.U .....pbO)t..;....o..i@.=\.....E.........y/.{)......a...{m..D\|.....e..\-=..O.>{..<!.F...I....,<..^,....cH.BG...X....j....4....L.P...v.......N./jS.d.0.aW.oQ..a..J.{P.m.s.....y.I.>LA..4..S...8.)._.......c`..g...Q...\|'.r.d!....B'.R:y.`.....=...\|E.........0.9........kN~a.8......\|f.8..F.~.....\|..9..A..=a.....d'S....S.....e..OW.....Z-].&..v......i.3z......a\..~

C:\Users\user\PCAppStore\cache\790025917

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 249x126, components 3
Category:	dropped
Size (bytes):	83447
Entropy (8bit):	7.92494577174252
Encrypted:	false
SSDEEP:	1536:Gjy/rCbBBlD7TXDITSFPtUI6JWB8E2F3c0WfHvr5b8t5iHdizi:01/TkT+D6rRFM0WvD5bC5iHR
MD5:	EE755B13ADEABA5325E4A1686ECCB9E7
SHA1:	83E0D8420118A8398A066D78854BA667FB46D2D2
SHA-256:	73C44811E9DF68994B11A1D6BAB09E74934CA20BD545E66701329608DE1E4560
SHA-512:	4BF3F7619BE80B88DF95A4C01084FE2DA585B85976F629110B1682D2A75001D6587A801B55D5FA98BA486FBE97617697706C7896DD9D5A5C9EEA8853F1FFC24F
Malicious:	false
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................~.................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...~.z..=.Px....\|v...6.........G...(.]GO..luH....O.to.^..R..;......>"..kR.G).V.nq...Rq.(.\........F.~.g..q'..{...<...s_.3zjt.8.c_.eyL.'B.<-WW%.]\|.......a.b!Nr..,E......%..y.x.].n.A.iz..em....X...7ht.X<C.....h1\. .}fMCD{{+K.e."k(\|.....(..Q...g...:u(.._...R..('.#....f....:.5.<-..i.y>w.5.\|5...>2UV....y...5.M....a.J5......m.O.#.....f.4-wZ.m..Z.[.<..{g.Y..........

C:\Users\user\PCAppStore\cache\857287286

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	ASCII text, with very long lines (377)
Category:	dropped
Size (bytes):	183086
Entropy (8bit):	4.730720340279208
Encrypted:	false
SSDEEP:	3072:DYEKnrK50n8OXEZ44WJV+r1wPwB4VjZ+39N+mVdFXpNdFOBS8u/f9U:MEKnrK508tZ44WJV+r1wPwmVjZ+39N+h
MD5:	56914C871C8C4F06345805A87E86F020
SHA1:	C066698F8D1FCC1EE09B971C6BF0F5C3A1CA4D4E
SHA-256:	979BF82262227D0E3AFD8E2BF982A6B61F4DDC8995E0E6B088B94C2BFD64BA47
SHA-512:	138BA63E1A3AE291C42BD19B4DA583FC85E346E7F410C24105313EF7EAC82DB9AA44D8614CEC567D4B1459C79B4AD0AFFC5AC6D21652E92F0C251EB019DA4459
Malicious:	false
Preview:	function _OverloadYield(e, d) {. this.v = e, this.k = d;.}.function _applyDecoratedDescriptor(i, e, r, n, l) {. var a = {};. return Object.keys(n).forEach(function (i) {. a[i] = n[i];. }), a.enumerable = !!a.enumerable, a.configurable = !!a.configurable, ("value" in a \|\| a.initializer) && (a.writable = !0), a = r.slice().reverse().reduce(function (r, n) {. return n(i, e, r) \|\| r;. }, a), l && void 0 !== a.initializer && (a.value = a.initializer ? a.initializer.call(l) : void 0, a.initializer = void 0), void 0 === a.initializer ? (Object.defineProperty(i, e, a), null) : a;.}.function _applyDecs2311(e, t, n, r, o, i) {. var a,. c,. u,. s,. f,. l,. p,. d = Symbol.metadata \|\| Symbol.for("Symbol.metadata"),. m = Object.defineProperty,. h = Object.create,. y = [h(null), h(null)],. v = t.length;. function g(t, n, r) {. return function (o, i) {. n && (i = o, o = e);. for (var a = 0; a < t.length; a++) i = t[a].apply(o, r ? [i] : []);.

C:\Users\user\PCAppStore\cache\883685831

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	8628
Entropy (8bit):	4.720674046204065
Encrypted:	false
SSDEEP:	192:nJUVFdi/FeytH42FzuJ/97jJ875n7xZUP4tDEVEC48chvhyS:mFGFdfF8J875/UP4lEuCg
MD5:	B5BAC36F0546DECC0F93CC1BBD68177E
SHA1:	7219BDAF01241ADF528802EB4F4F3C01E219B86D
SHA-256:	C4FDF5B5504FAED784D8D085C4B6B8E002E08C5003B630F2023609792C00024F
SHA-512:	E3FF444B4F1AC25FBFE6DF0BCC5AA4E6580B73A8C5775FCF91DDC86BD46F234158AF12449BD3EB6CC29B9282E2705A1DA11A477D4A39DC320F8AE5207E974C40
Malicious:	false
Preview:	.<!DOCTYPE html>.<html lang="en" style="">. <head>. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.. <meta http-equiv="X-UA-Compatible" content="ie=11" />. <meta. name="viewport". content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no". />. <meta name="viewport" content="width=device-width, initial-scale=1.0" /> -->. <title>Search menu here</title>. <style>. * {. margin: 0;. padding: 0;. box-sizing: border-box;. cursor: default;. }.. html {. scrollbar-base-color: #514f4f;. scrollbar-face-color: #fbfbfb;. scrollbar-shadow-color: #fbfbfb;. scrollbar-3dlight-color: #fbfbfb;. scrollbar-highlight-color: #514f4f;. scrollbar-track-color: #514f4f;. scrollbar-arrow-color: #fbfbfb;. /* overflow: hidden; /. }.. body {. font-family: "Roboto", sans-serif; / Roboto */. font-weight: 400;.

C:\Users\user\PCAppStore\cache\cache_setup.json

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	ASCII text, with very long lines (9812), with no line terminators
Category:	modified
Size (bytes):	9812
Entropy (8bit):	5.633357290672661
Encrypted:	false
SSDEEP:	96:z9Do1X4JiJNhnz3JlY7KO30cUfb+4VvrJEuG3LMHlgo2c7IR4zUb6D7SSr4cb4rd:G9eeNhz3vek+kLG3oFhQyU5AQz5n
MD5:	42716BC10B68B971CD20F9634F0DA454
SHA1:	FE609FAF3143509E18CFE74C528C743B64385615
SHA-256:	C08A36293500D58639CE813A408995992E2DF9EA2A229ACC4A61657AC4530ED7
SHA-512:	77CB250BB0FC498EE2A8EF8F880B00BFFBFB62CD02D4A94FF67E42030705A3BD2B8FD592655FB965E9E63F49DFF92C67DEA3D49770AFCC9985AA02111612B0C0
Malicious:	false
Preview:	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

C:\Users\user\PCAppStore\cache\windows_setup.json

Download File

Process:	C:\Users\user\PCAppStore\PcAppStore.exe
File Type:	ASCII text, with very long lines (1000), with no line terminators
Category:	dropped
Size (bytes):	1000
Entropy (8bit):	5.542850783363727
Encrypted:	false
SSDEEP:	24:jgsCchjVjwXA8zyqYJkh7ik7ze+ZXkSTtd2OAKlKis83A1:jgzcLjv8vIc7ikHXXk66KlKiM1
MD5:	604A16C2F70E17055F76C7C7F1222E10
SHA1:	B2B4994FC365487AF6FCFDB4527315E131847C70
SHA-256:	22869AE1E6B271D1056C0E842BCA7F67AA499042570700AF1CC911ECD9E78199
SHA-512:	5E9889B8B319F82CEA3EAE37301D5DE924C4DB003AED2C0CA7BB4427C628F26573BA28435545361BA5606679BA6723AB1A9AFA34A9AB9C48BC0F728AC8B44AC2
Malicious:	false
Preview:	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

C:\Users\user\PCAppStore\pcappstore.ico

Download File

Process:	C:\Users\user\AppData\Local\Temp\nsgC284.tmp
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	32038
Entropy (8bit):	5.431378038504933
Encrypted:	false
SSDEEP:	384:UGauOOFjcJlokq0Wbn3P3U9VA0N5YPWRss7o3nkrk:jPFwq0WbfU9VA0sp
MD5:	EE33610B997D7705364AD909CF5D7909
SHA1:	0093B630BF297952E7FEE78ED21F8BF812E9B436
SHA-256:	11C2CA92834C4BEE2A331B3DAF14679B4B9D7DD32430FEF702B503A8CE96F8B1
SHA-512:	B2ADD74DF99BE5CD012AB767DF0274E87E5D9C35D360E3FF71C13C3880857C72B24DF0CDF1EF5123F006F603E6A5C87556B52646B305ABDD65D0A4F685C58A41
Malicious:	false
Preview:	............ .h...F... .... .........00.... ..%..V...@@.... .(B...:..(....... ..... ................................g...................................................g.......g...........................................................g....................................................................................................................................................................................................................................................................................................................................v..x................x..x.............................~..c..T..............T..c...........................W..\|'..V..................U..\|'..W........................)..w.......................x...)........................}...~.......................~...}.............................~...........................~..............................~..w..........................w..~.......

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4815), with no line terminators
Category:	downloaded
Size (bytes):	4815
Entropy (8bit):	5.850255693200834
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTaoBJ3UCzKrd:12cV9sT3AW7NIz3BJ3UkKrd
MD5:	203932D0D2E24BA55618B6F29CD89932
SHA1:	7945C9C2F335207CFBFC0531A246225BE812FF22
SHA-256:	4E3E401D296F4682D519631E34A90699F330765E39493B589B15FBF4870277DD
SHA-512:	E41A55D7A769E59A4278BA845AAFEE09060549C6D4001655DC3BBC09CC6A59F8D58C4690E064EAB14BA0FF87A13CA614F5F2385C40E189622200F18633503737
Malicious:	false
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/858128210/?random=1735816571816&cv=11&fst=1735816571816&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dconversion&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4734), with no line terminators
Category:	dropped
Size (bytes):	4734
Entropy (8bit):	5.839470696930209
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTaAJAUCzK3:12cV9sT3AW7NIzxJAUkK3
MD5:	B1C00B701C732AB994EA3ED03C5C8EE5
SHA1:	BE624F4293D4C535657F6B0C4C6B5DA2BF5A83D2
SHA-256:	E3D26CC16216E1EE68E15F31EC8A0C9CAC868AC0D013449B950AAC17A1F66952
SHA-512:	934792FBF0C5FE197AA133758AFB9C85EED9154FC6B1914745A2EE6F7881CA6D97E9C60981C857E986D0CF38E1E8428B018386B8002BFD762167A8098752AEE3
Malicious:	false
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14408)
Category:	downloaded
Size (bytes):	449191
Entropy (8bit):	5.629268106509304
Encrypted:	false
SSDEEP:	6144:N4PAi2YnsmQ8M7Z1HcRCrZHe5NAoEZMf3//xfFpuT+boj3:GPJym9M77Hc81e5a8js3
MD5:	8EF98EB457654259946FED1CC12CE60C
SHA1:	1C75E177B07A7ECC33602C262013B16BAF8DA639
SHA-256:	56446F439A6F941FA1FABB36FF06395CEA349E8E098342C4596BB5EDF2A0176D
SHA-512:	8B48B8043172BB629BED8B67E4D9E3482C54175D0FFEFD7A27335340B8701771911F600E94F0AFD82B25660AD05CB8133FF694170EBA068CDA2F36BF8FE5517A
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-VFQWFX3X1C
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":39,"vtp_rules":["list","pcapp\\.store","pcappstore\\.download"],"tag_id":11},{"function":"__ogt_ga_send","priority":29,"vtp_value":true,"tag_id":13},{"function":"__ogt_referral_exclusion","priority":29,"vtp_includeConditions":["list","veryfast\\.io"],"tag_id":14},{"function":"__ogt_session_timeout","priority":29,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":15},{"function":"__ogt_1p_data_v2","priority":29,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionTy

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14408)
Category:	downloaded
Size (bytes):	449217
Entropy (8bit):	5.629306005484193
Encrypted:	false
SSDEEP:	6144:N4PAi2YnsmQ8MTZ1HcRCrZHe5NAoEZMf3/SxfFpuT+bojt:GPJym9MT7Hc81e5aBjst
MD5:	29450D576BA586729194F3F6171278AD
SHA1:	E299C48862A5EB5AD73C4F3FC289DD8423536A80
SHA-256:	4C75116E7DC01F861E5A7D31FA762D465374FC996E8E2512A65AEDBB02FCA90D
SHA-512:	4D0236CD54091B5C5F60DB6715E91688173010F43DDA4729D365D70B2EE34105417B0C2C8580905DEED5B0AA6AAC662D230EA342B5575461B15A41EEBE831B5D
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-VFQWFX3X1C&l=dataLayer&cx=c&gtm=45be4cc1v9103256652za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":39,"vtp_rules":["list","pcapp\\.store","pcappstore\\.download"],"tag_id":11},{"function":"__ogt_ga_send","priority":29,"vtp_value":true,"tag_id":13},{"function":"__ogt_referral_exclusion","priority":29,"vtp_includeConditions":["list","veryfast\\.io"],"tag_id":14},{"function":"__ogt_session_timeout","priority":29,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":15},{"function":"__ogt_1p_data_v2","priority":29,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionTy

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4715), with no line terminators
Category:	downloaded
Size (bytes):	4715
Entropy (8bit):	5.831246190328423
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTaAJAUCzKYi:12cV9sT3AW7NIzxJAUkKF
MD5:	EE0A003B13179CFD83B16DC9326BF3FC
SHA1:	6A1C7BA93DCFDC55300EDF0BE061C7212ACFD6D1
SHA-256:	E27D65C95D89846EFBDB0E5CEB2777D7CFA35A5AD7015AF7603CD4E8AEF2FA11
SHA-512:	7BE8300EDD428F7BA67CCD621F9E7E288BDA1C19DC6CD451751B5C3677FC140407545E843A3C8DFB6DA2053045C0977643ABD248C096A65AE922DD0BD5658952
Malicious:	false
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/858128210/?random=1735816571802&cv=11&fst=1735816571802&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15885), with no line terminators
Category:	downloaded
Size (bytes):	15885
Entropy (8bit):	5.57852350778465
Encrypted:	false
SSDEEP:	384:yAFgP8+LFT+l8mFM+F8X8LnFlu8A0/51/b08gr8hL89Cj8tm8078Nu/y18IN8w7c:gxamM5GsLFk83/v/I8o818k8I8c88/Eu
MD5:	1E3D4E336BA53CC2CFE3DEA7BC5FB417
SHA1:	A38CDF0992896DDCF3B5D2F5B6D0E41D59B1B0C3
SHA-256:	7B42F64D280C9D3B21BDF82E2CA78C09E5BCA9B6FF0588998CBC86243426D223
SHA-512:	25B3ADA2922CA736EB262E44040E6410A0A832C9C8E0049CD18FE058900C956AD1952E73EE05DABD551514DAE92CDDD7A0413B8B74160636A301EE143B609FCB
Malicious:	false
URL:	https://td.doubleclick.net/td/rul/858128210?random=1735816571802&cv=11&fst=1735816571802&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s1589823288.1735816572","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s1589823288.1735816572\u0026ig_key=1sNHMxNTg5ODIzMjg4LjE3MzU4MTY1NzI!2sZ54CfQ!3sAAptDV4qMzhE","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1s_R7Omg!2sZ54CfQ!3sAAptDV4qMzhE"],"userBiddingSignals":[["596093288","475816165","7896384790","7904283812","7904705661"],null,1735816573034901],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adf

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7410
Entropy (8bit):	4.440225293496907
Encrypted:	false
SSDEEP:	192:6ZKqHiIPAqy0JviDla8w9miUDt1R94ExJ4NrKw1KSs0za:6ZxoqUla8HR94ExJ4NWw1K302
MD5:	2CBB3A4955B0C4EE9ADE91266AEE50A2
SHA1:	F4A7287ED6CE028BFF8E073FAD691C593099C1B3
SHA-256:	189F44B079D9299F16CD11E54C7E6A8E7E336998DF6A23A25444DBC5A7050DDD
SHA-512:	67FF6AC6A29FC39B9936315146A054605B671D22D1F4B09BE28B70201457739C84F795D050D871E9004F71FC0970CBC3E04F870488B68A5FA5F3C482C22E7511
Malicious:	false
URL:	https://repository.pcapp.store/pcapp/images/front_img/lp/lpd_installing_r2/img/done_cursor_icon.svg
Preview:	<svg width="107" height="109" viewBox="0 0 107 109" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="click_icon" filter="url(#filter0_d_539_286)"><g id="Group"><path id="Vector" d="M78.8563 41.6141C78.9042 41.5662 78.9521 41.5662 78.9521 41.5183C79 41.4704 79 41.4225 79 41.3746C79 41.3268 79 41.2789 79 41.1831C79 41.0873 78.9521 41.0394 78.9042 40.9437C78.8563 40.8479 78.8085 40.8 78.7127 40.7042C78.6648 40.6084 78.569 40.5606 78.4732 40.5127C78.3775 40.4648 78.2817 40.369 78.1859 40.3211L31.1606 17.1437C31.0648 17.0958 31.0169 17.0958 30.9211 17.0479C30.8254 17 30.7775 17 30.6817 17C30.5859 17 30.4901 17 30.3944 17C30.2986 17 30.2028 17 30.107 17C30.0113 17 29.9634 17.0479 29.9155 17.0958C29.8676 17.1437 29.8197 17.1437 29.7718 17.1916C29.7239 17.2394 29.7239 17.2873 29.6761 17.3352L28 23.8V23.8479V23.8958V23.9437V23.9915L35.8535 67.2817C35.8535 67.4253 35.9014 67.5211 35.9972 67.6169C36.0451 67.7127 36.1408 67.8084 36.2366 67.9042C36.3324 68 36.4282 68.0958 36.5718 68.1437C36.66

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3030
Entropy (8bit):	4.881732391363463
Encrypted:	false
SSDEEP:	48:fHL2FgahZFgahDFgah2LCn2cLin2LHtkrwDMHrrwMMH+BjXkE:aFgahZFgahDFgahhuEc
MD5:	23DF6F3E1D5A1DB5A782F3F71FAC80CE
SHA1:	AB96966996D0EB3DD9A1353A59417FACAC966DA2
SHA-256:	8540F6C7F6B27F81F7F2AB35969886E5CEB3C00E5F16BD83C9F8FD831C7BA05D
SHA-512:	A557FAC738CD3CAD73B9FD3FA1B8833FFE433E226193621CA6E20CA0629CD4EC683F08C8FA1B475429D2E70F6CC30CE7D2738CAADC704A63FF601931B1B12B66
Malicious:	false
URL:	https://repository.pcapp.store/pcapp/images/front_img/logo/logo-dark.svg
Preview:	<svg width="90" height="90" viewBox="0 0 90 90" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect width="90" height="90" rx="20" fill="url(#paint0_linear_2257_92)"/>.<path d="M30.4698 20.7178C30.4698 16.4554 27.0144 13.0001 22.7521 13.0001C18.4897 13.0001 15.0344 16.4554 15.0344 20.7178V31.2499C15.0344 44.611 25.8694 58.2779 44.9999 58.2779C63.1725 58.2779 74.9655 44.5999 74.9655 31.2499V20.7178C74.9655 16.4554 71.5101 13.0001 67.2478 13.0001C62.9854 13.0001 59.5301 16.4554 59.5301 20.7178V31.2499C59.5301 36.0404 54.6819 43.8426 44.9999 43.8426C35.318 43.8426 30.4698 36.0404 30.4698 31.2499V20.7178Z" fill="#1B86F2"/>.<path d="M30.4698 20.7178C30.4698 16.4554 27.0144 13.0001 22.7521 13.0001C18.4897 13.0001 15.0344 16.4554 15.0344 20.7178V31.2499C15.0344 44.611 25.8694 58.2779 44.9999 58.2779C63.1725 58.2779 74.9655 44.5999 74.9655 31.2499V20.7178C74.9655 16.4554 71.5101 13.0001 67.2478 13.0001C62.9854 13.0001 59.5301 16.4554 59.5301 20.7178V31.2499C59.5301 36.0404 54.6819 43.8426 44

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3969)
Category:	dropped
Size (bytes):	296777
Entropy (8bit):	5.560066237029997
Encrypted:	false
SSDEEP:	3072:49FitgcnsmIj4e+g0kemYasxzuZ1IwPcRCr5jR7i5NAXrkEZMf3/4Q2mN/M1:KYnsmQ4sZ1HcRCrdRe5NAoEZMf3/45
MD5:	67054E1F397149482AD6C79F20A143FD
SHA1:	58D427BC3E7E4B636F63121A36F999730E5D292A
SHA-256:	2E94A170F75FFC99129AAF0EF2F7FDD5439EDF6B60749A6DA1F7D5C43D50020E
SHA-512:	DD05B50D0BC8D9C09EF422B065974BB29950756CEEB255E03FDB2DA81CC3B55703F8603241AA11CE755D29815EB207C155AFB4D430558B2620D367138735DB2A
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-858128210","tag_id":16},{"function":"__ogt_cps","priority":6,"vtp_cpsMode":"ALL","tag_id":8},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3969)
Category:	downloaded
Size (bytes):	296777
Entropy (8bit):	5.559987742567806
Encrypted:	false
SSDEEP:	3072:49FitgcnsmIj4w+g0kemYasxzuZ1IwPcRCr5jR7i5NAXrkEZMf3/4Q2mN/M1:KYnsmQ4iZ1HcRCrdRe5NAoEZMf3/45
MD5:	A67392287DF4C982459C9A9B8B730AB3
SHA1:	C969C6CD0DDEEA7E492D34719A343E4C9C1EF94E
SHA-256:	540081C5764443ED324F81F8D9BBE502425BEA8E6CCA6F2DBE3E33D18E1EE183
SHA-512:	95D236501743B597098C7C9516A9621C4DC76AFFFE2725F9826409456E3FC8359FDC35AE33CD5AF00C9FDFA4ED9D8CD51E028D37C509BE587D7675F4BE407E70
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=AW-858128210
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-858128210","tag_id":16},{"function":"__ogt_cps","priority":6,"vtp_cpsMode":"ALL","tag_id":8},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4735), with no line terminators
Category:	dropped
Size (bytes):	4735
Entropy (8bit):	5.8422934219481455
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTa0JWUCzKRj:12cV9sT3AW7NIzJJWUkKRj
MD5:	2770FCA1CE5FECD1BF9096170D286751
SHA1:	97503756196EC94C166074AF24269EADDB1E6813
SHA-256:	A503733761E3260FD57CA6622EF4C45D64266DB682859FDCACD7A75234831963
SHA-512:	21F25E80AD668FEE25491D5FC41C94F2B8EEF011A71E424A9BBACF271D5033677F3A0EB2E163D19691AB12885A56A288DAAC25DAA29F76DFE4D9ACFBF08BD225
Malicious:	false
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7410
Entropy (8bit):	4.440225293496907
Encrypted:	false
SSDEEP:	192:6ZKqHiIPAqy0JviDla8w9miUDt1R94ExJ4NrKw1KSs0za:6ZxoqUla8HR94ExJ4NWw1K302
MD5:	2CBB3A4955B0C4EE9ADE91266AEE50A2
SHA1:	F4A7287ED6CE028BFF8E073FAD691C593099C1B3
SHA-256:	189F44B079D9299F16CD11E54C7E6A8E7E336998DF6A23A25444DBC5A7050DDD
SHA-512:	67FF6AC6A29FC39B9936315146A054605B671D22D1F4B09BE28B70201457739C84F795D050D871E9004F71FC0970CBC3E04F870488B68A5FA5F3C482C22E7511
Malicious:	false
Preview:	<svg width="107" height="109" viewBox="0 0 107 109" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="click_icon" filter="url(#filter0_d_539_286)"><g id="Group"><path id="Vector" d="M78.8563 41.6141C78.9042 41.5662 78.9521 41.5662 78.9521 41.5183C79 41.4704 79 41.4225 79 41.3746C79 41.3268 79 41.2789 79 41.1831C79 41.0873 78.9521 41.0394 78.9042 40.9437C78.8563 40.8479 78.8085 40.8 78.7127 40.7042C78.6648 40.6084 78.569 40.5606 78.4732 40.5127C78.3775 40.4648 78.2817 40.369 78.1859 40.3211L31.1606 17.1437C31.0648 17.0958 31.0169 17.0958 30.9211 17.0479C30.8254 17 30.7775 17 30.6817 17C30.5859 17 30.4901 17 30.3944 17C30.2986 17 30.2028 17 30.107 17C30.0113 17 29.9634 17.0479 29.9155 17.0958C29.8676 17.1437 29.8197 17.1437 29.7718 17.1916C29.7239 17.2394 29.7239 17.2873 29.6761 17.3352L28 23.8V23.8479V23.8958V23.9437V23.9915L35.8535 67.2817C35.8535 67.4253 35.9014 67.5211 35.9972 67.6169C36.0451 67.7127 36.1408 67.8084 36.2366 67.9042C36.3324 68 36.4282 68.0958 36.5718 68.1437C36.66

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3030
Entropy (8bit):	4.881732391363463
Encrypted:	false
SSDEEP:	48:fHL2FgahZFgahDFgah2LCn2cLin2LHtkrwDMHrrwMMH+BjXkE:aFgahZFgahDFgahhuEc
MD5:	23DF6F3E1D5A1DB5A782F3F71FAC80CE
SHA1:	AB96966996D0EB3DD9A1353A59417FACAC966DA2
SHA-256:	8540F6C7F6B27F81F7F2AB35969886E5CEB3C00E5F16BD83C9F8FD831C7BA05D
SHA-512:	A557FAC738CD3CAD73B9FD3FA1B8833FFE433E226193621CA6E20CA0629CD4EC683F08C8FA1B475429D2E70F6CC30CE7D2738CAADC704A63FF601931B1B12B66
Malicious:	false
Preview:	<svg width="90" height="90" viewBox="0 0 90 90" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect width="90" height="90" rx="20" fill="url(#paint0_linear_2257_92)"/>.<path d="M30.4698 20.7178C30.4698 16.4554 27.0144 13.0001 22.7521 13.0001C18.4897 13.0001 15.0344 16.4554 15.0344 20.7178V31.2499C15.0344 44.611 25.8694 58.2779 44.9999 58.2779C63.1725 58.2779 74.9655 44.5999 74.9655 31.2499V20.7178C74.9655 16.4554 71.5101 13.0001 67.2478 13.0001C62.9854 13.0001 59.5301 16.4554 59.5301 20.7178V31.2499C59.5301 36.0404 54.6819 43.8426 44.9999 43.8426C35.318 43.8426 30.4698 36.0404 30.4698 31.2499V20.7178Z" fill="#1B86F2"/>.<path d="M30.4698 20.7178C30.4698 16.4554 27.0144 13.0001 22.7521 13.0001C18.4897 13.0001 15.0344 16.4554 15.0344 20.7178V31.2499C15.0344 44.611 25.8694 58.2779 44.9999 58.2779C63.1725 58.2779 74.9655 44.5999 74.9655 31.2499V20.7178C74.9655 16.4554 71.5101 13.0001 67.2478 13.0001C62.9854 13.0001 59.5301 16.4554 59.5301 20.7178V31.2499C59.5301 36.0404 54.6819 43.8426 44

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48444, version 1.0
Category:	downloaded
Size (bytes):	48444
Entropy (8bit):	7.995593685409469
Encrypted:	true
SSDEEP:	768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1
MD5:	8E433C0592F77BEB6DC527D7B90BE120
SHA1:	D7402416753AE1BB4CBD4B10D33A0C10517838BD
SHA-256:	F052EE44C3728DFD23ABA8A4567150BC314D23903026FBB6AD089422C2DF56AF
SHA-512:	5E90F48B923BB95AEB49691D03DADE8825C119B2FA28977EA170C41548900F4E0165E2869F97C7A9380D7FF8FF331A1DA855500E5F7B0DFD2B9ABD77A386BBF3
Malicious:	false
URL:	https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2
Preview:	wOF2.......<.......l..............................`...\..p?HVAR.m?MVAR^.`?STAT.N'&..>/l........>....0....6.$.... ........[..A.2v.6......$..e...w"../.L.p:......Tpc..8@.[5......d#d.xw..o.O3-.....%..>...%..)~p.K.J.H..S...s..z..Wa.. 0\..J.....BL;V..-.L...j....^.9..HO l..,..6.v....?....x.....m..;....a![zif...Ur...Q..P.&.I1..:n.p...j~..h...9.!....@.<.bl\|.Y?h..B.j/..rH.S%/~.^D...6..D.4G...y....Y.....=/o..W..5ryo.d?.gA]..?...1V..S......7ZJ...f....mBG[0eW....y..%B}..]? ...,sR<.y~.~.}.%.!..,X.....`...R..^....S.....u.?k.v.k..U.u..M..`!...b!..X)P...y{.........n..T+6...R......L...x}...g...].g"WT.b..h ....X...=;{w...QO.s..w..@.(,..........{.........1..@...(...\.......9..2.h9P.G........K.Dp...F..4W..ui.u...G...s..x7.?..tg..D..O.sA..t.t.4..~..e\...X.....T..kf.qfX..=^_....g"....De...x[J..A..).G.YUhR.....0.l..#&3.'.K.............$I.Pp.../.s.<@...r=..S......d..P.S.B.w.~X..ZK....h J.`A.bv,=.....>1.Ev.^..U.A. ....EU..].........dw..!$.A`..B.._.....Z~..!..J..l]r.m}m..

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3628
Entropy (8bit):	4.6859343360858
Encrypted:	false
SSDEEP:	96:kBXy40c2tYR+hxd4lJ9IUavRUJTUqUrUfjS4lJ50GvmT4Uiz:qAwexd4lv3avyJYvArVlJ50GvnUiz
MD5:	EE8B3C30DF90D2D7459DD6D7F7067C14
SHA1:	6D07CBC5AE2E46F3D5ECD299B293F04CD045E633
SHA-256:	CE6182A6D356B7F6D0A6B2BE83FC373AB7DE807D0B92342ABFF28CAEF5A6028A
SHA-512:	5FDAB68224793B1979550E6425BAB1607E2B2902025178C0C7217F6CEBFC767248B62C3404C2F9D5D5F595CC9EC370775E2C3E1F16E631C10764DA063B5DC53C
Malicious:	false
Preview:	<svg width="132" height="132" viewBox="0 0 132 132" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Group 1296"><g id="Rectangle 302" filter="url(#filter0_d_539_279)"><path d="M16 12.5C16 10.0147 18.0147 8 20.5 8H111.5C113.985 8 116 10.0147 116 12.5V103.5C116 105.985 113.985 108 111.5 108H20.5C18.0147 108 16 105.985 16 103.5V12.5Z" fill="white"/></g><g id="icon"><path id="Vector" d="M81.8943 54.2335C77.1424 54.2335 72.3905 54.2335 67.6386 54.2335C66.7256 54.2335 66.7256 54.2335 66.7256 53.3679C66.7256 46.483 66.7256 39.6183 66.7256 32.7334C66.7256 31.8678 66.7256 31.8879 67.5764 31.7671C70.9172 31.3041 74.2373 30.8209 77.5782 30.3579C81.417 29.8144 85.2352 29.291 89.074 28.7676C91.4188 28.4455 93.7637 28.1032 96.0877 27.7811C97.1253 27.6402 97.1253 27.6402 97.1253 28.6468C97.1253 36.8402 97.1253 45.0537 97.1253 53.2471C97.1253 54.2335 97.1253 54.2335 96.1085 54.2335C91.3566 54.2335 86.6254 54.2335 81.8943 54.2335Z" fill="#3683F7"/><path id="Vector_2" d="M81.9151 60.0742C86.7292 6

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4833), with no line terminators
Category:	dropped
Size (bytes):	4833
Entropy (8bit):	5.855556986523243
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTaoBJ3UCzKrPL:12cV9sT3AW7NIz3BJ3UkKrPL
MD5:	014B674AE22A9996CB01D93F8B41E1EF
SHA1:	46FE713C66087F1E2DA59C120F249279E3637021
SHA-256:	9E152893D3867BDC7CF42459BD54C31671DF34952C0FB929A089037A3A355082
SHA-512:	570C307E585B18A05C47F75F0AF43E3E9FC4DE2EC408737EB84C8C387A40D42DBCE715FEEFE847344778883CCC31C366CCC6BA93F46A5AFF2FCAF98ECE4DA349
Malicious:	false
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2499
Entropy (8bit):	5.4636477793325495
Encrypted:	false
SSDEEP:	48:ejO4aAujO4aFuFZjjO4aNjO4a73rjO4awNjO4aQJc+uXjO4aWN0xD:aO4aAqO4aEFZHO4adO4a73vO4aoO4aQt
MD5:	382991778933FB8F5697DEB2EE26A0ED
SHA1:	6CDED0C76F01EA3C3C6DB8128B5CF59063A92C78
SHA-256:	0919FF36779EEF85FA50AF4B94FB2D496A765612B7C5EDD31BA69EA1F4136736
SHA-512:	FC05BAFD9EB747B7060B8C730E8A467CFD0A0311622B325E5EB74A1083D3A7B8897396CF4FE310E7567EAA1B5A951AB3906F57E57671F2852A18ED1AD0E7E2C9
Malicious:	false
URL:	https://fonts.googleapis.com/css2?family=Inter:wght@100..900&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 100 900;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 100 900;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 100 900;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 100 900;. f

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1223)
Category:	downloaded
Size (bytes):	19500
Entropy (8bit):	5.498773117154881
Encrypted:	false
SSDEEP:	384:vclH09vODrdbmuL4Uq9XrnUWGXKsYWo19+EXenkjuBXog/U716uSxuE4h9aeBGB8:UBqmDrlmuL4DrUWahYWIQEXenyu/U8uP
MD5:	C95E13C6D4A9E7826F721ACD6CA6E8D6
SHA1:	7A96E3AA1F2ABAD2E1AA605AA043D05535716537
SHA-256:	36CD1F4E41872C8D5536DF9207FA9A7715E83C98AD5E2C8319C7BF3E89BC16D3
SHA-512:	C3955F6BD35813A60CF05625E0FA383598C2CEA93AE0C15B03B743CDA612BF8AF3BDCD570D8E1A12281BBF506E251C8E6E12F9F37D824F7CC09CA2940B941693
Malicious:	false
URL:	https://www.googletagmanager.com/static/service_worker/4cc0/sw.js?origin=https%3A%2F%2Fpcapp.store
Preview:	'use strict';var aa=function(a){function b(d){return a.next(d)}function c(d){return a.throw(d)}return new Promise(function(d,e){function f(g){g.done?d(g.value):Promise.resolve(g.value).then(b,c).then(f,e)}f(a.next())})},h=function(a){return aa(a())};/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self;var r,x;a:{for(var ba=["CLOSURE_FLAGS"],A=n,B=0;B<ba.length;B++)if(A=A[ba[B]],A==null){x=null;break a}x=A}var ca=x&&x[610401301];r=ca!=null?ca:!1;var E;const da=n.navigator;E=da?da.userAgentData\|\|null:null;function F(a){return r?E?E.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function G(a){var b;a:{const c=n.navigator;if(c){const d=c.userAgent;if(d){b=d;break a}}b=""}return b.indexOf(a)!=-1};function H(){return r?!!E&&E.brands.length>0:!1}function I(){return H()?F("Chromium"):(G("Chrome")\|\|G("CriOS"))&&!(H()?0:G("Edge"))\|\|G("Silk")};!G("Android")\|\|I();I();G("Safari")&&(I()\|\|(H()?0:G("Coast"))\|\|(H()?0:G("Opera"))\|\|(H()?0:G("Edge"))\|\|(

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16090), with no line terminators
Category:	downloaded
Size (bytes):	16090
Entropy (8bit):	5.5841429090936545
Encrypted:	false
SSDEEP:	384:yAFgP/+FFT+l8LnFl+L8X8mFMu/y08g18I0/5r/sL/Uj/gm/F7/Nu8A1/bN/178G:vbamLFQYsM1/N8i8P/p/M/I/V/1/88Cj
MD5:	89EF28FB0D80D0EC5F3B8806B819C7E6
SHA1:	D489BA6CECF08B0ACBEF3E28024878D746E4B179
SHA-256:	2D00A8EBCE3E6F69ED2AB7770E8A0BD18F2FEF65BC5FEA3D23F3FA8BAF2C4A7A
SHA-512:	022A1FD4221221C1D8B69A192E545D0A11454F171D13B0FC55D35286590E618AFC801146923BE927CB8697054D8B0D637426F45DE5843FEEC5BEAEF95934D7A8
Malicious:	false
URL:	https://td.doubleclick.net/td/rul/858128210?random=1735816571816&cv=11&fst=1735816571816&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dconversion
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s1589823288.1735816572","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s1589823288.1735816572\u0026ig_key=1sNHMxNTg5ODIzMjg4LjE3MzU4MTY1NzI!2sZ54CfQ!3sAAptDV4qMzhE","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1s_R7Omg!2sZ54CfQ!3sAAptDV4qMzhE"],"userBiddingSignals":[["596093288","475816165","7896384790","7904705661","7904283812"],null,1735816573058526],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adf

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14408)
Category:	dropped
Size (bytes):	449217
Entropy (8bit):	5.6293241411151245
Encrypted:	false
SSDEEP:	6144:N4PAi2YnsmQ8MLZ1HcRCrZHe5NAoEZMf3/SxfFpuT+bojt:GPJym9ML7Hc81e5aBjst
MD5:	052C7AC7887BD3A861E50248B82E31AE
SHA1:	2FC7D82B5B10E40F5E77BFCC4A5EAB35FE6367EF
SHA-256:	57CD31D36074CC5E8948A71CE9C9B9676F3E0E778E5F79969D0222A4A0C30FDE
SHA-512:	24E335EBD056874EA1EA82EB7A7628F70532BCDC83FDA00AD722B606837E1D24D93EF1F053C625BAD9DEC8092B93A24B84D2994DBE710ADB3F4B607100A76DA4
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":39,"vtp_rules":["list","pcapp\\.store","pcappstore\\.download"],"tag_id":11},{"function":"__ogt_ga_send","priority":29,"vtp_value":true,"tag_id":13},{"function":"__ogt_referral_exclusion","priority":29,"vtp_includeConditions":["list","veryfast\\.io"],"tag_id":14},{"function":"__ogt_session_timeout","priority":29,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":15},{"function":"__ogt_1p_data_v2","priority":29,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionTy

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15885), with no line terminators
Category:	downloaded
Size (bytes):	15885
Entropy (8bit):	5.578436301578676
Encrypted:	false
SSDEEP:	384:yAFgPU+LFM+F8XFT+l8m8LnFluFK0/51/b0FUrFeLFkjFqmFR7F8u/y1FfNFs7/8:cx5G1amVLFkFV/v/IFkFWFYFTFZFl/Et
MD5:	0E411D6F192007A61A0ACEC79377C84D
SHA1:	83D5F3635D49BAE42D1EFC9F10ACAAD7A3152F6C
SHA-256:	6DB17BF2E4A5DAEA1830F1CC0AAF7365B9222191D2AE6FD11291A5BAE0C26018
SHA-512:	9D825D5F69F65E25C73989908446E31E6712D6CA566235D472FA60BABCFE6A9A49C3A6CE4BA9542A450387D009E5633B357EF85027B439F09D958A7C7842B828
Malicious:	false
URL:	https://td.doubleclick.net/td/rul/858128210?random=1735816571776&cv=11&fst=1735816571776&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s1589823288.1735816572","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s1589823288.1735816572\u0026ig_key=1sNHMxNTg5ODIzMjg4LjE3MzU4MTY1NzI!2sZ54CfQ!3sAAptDV4qMzhE","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1s_R7Omg!2sZ54CfQ!3sAAptDV4qMzhE"],"userBiddingSignals":[["7904705661","7904283812","596093288","7896384790","475816165"],null,1735816573031690],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adf

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14408)
Category:	dropped
Size (bytes):	449191
Entropy (8bit):	5.629256634904904
Encrypted:	false
SSDEEP:	6144:N4PAi2YnsmQ8MjZ1HcRCrZHe5NAoEZMf3//xfFpuT+boj3:GPJym9Mj7Hc81e5a8js3
MD5:	80B646B32E913878DF820F1F0F37FFAD
SHA1:	D1A1388F0BA0F5BBD8649B463EDC3E54A583641B
SHA-256:	542683092D3C5D0BBC300AC5205C9BA31934FD112B87FC2B35B09540C4DDDA0E
SHA-512:	10855F67283BC2F6E6ABD7DDB71B1874EE7BFEB623271C97200ABA10285DD67D49806BA3A186B3E1EE676E63D11BD50D62BD14E3A2A7B266E1A985247357D8AA
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":39,"vtp_rules":["list","pcapp\\.store","pcappstore\\.download"],"tag_id":11},{"function":"__ogt_ga_send","priority":29,"vtp_value":true,"tag_id":13},{"function":"__ogt_referral_exclusion","priority":29,"vtp_includeConditions":["list","veryfast\\.io"],"tag_id":14},{"function":"__ogt_session_timeout","priority":29,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":15},{"function":"__ogt_1p_data_v2","priority":29,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionTy

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	3501
Entropy (8bit):	5.383873370647921
Encrypted:	false
SSDEEP:	96:EI5cZUiKliCJ86U+QTEVWfeLwTauSEegdkZ5edOIC:EI5hiWNJ8kQTEVWfeUauRfdkZ5edO1
MD5:	147FD3B00C22BA9C939712E9213C24CA
SHA1:	3B48369B86FA0574F35379AACD1F42CC9C98A52B
SHA-256:	70F5B11C1870CF90201A6D5F770CA318A3FA5827C74A8765EDE22B487F7D4532
SHA-512:	E8419A71232EDAC8FD131446777F7D034B3171EFE07B3267479B439E4982650DB65A0D1DDC9F516315D5ED1B01ECFD2F7EB55D75D44AA51EE0AD494D441586D2
Malicious:	false
URL:	https://www.googletagmanager.com/static/service_worker/4cc0/sw_iframe.html?origin=https%3A%2F%2Fpcapp.store
Preview:	<!DOCTYPE html>.<html>.<head>. <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon">.</head>.<body>. <script>.'use strict';class m{constructor(a){this.j=a;this.g={};this.h={};this.i=0;this.id=String(Math.floor(Number.MAX_SAFE_INTEGERMath.random()))}}function n(a){return a.performance&&a.performance.now()\|\|Date.now()}.var p=function(a,b){class d{constructor(c,g,f){this.failureType=c;this.data=g;this.g=f;this.h=new m(n(f))}s(c,g){const f=c.clientId;if(c.type===0){c.isDead=!0;var e=this.h,h=n(this.g);e.g[f]==null&&(e.g[f]=0,e.h[f]=h,e.i++);e.g[f]++;c.stats={targetId:e.id,clientCount:e.i,totalLifeMs:Math.round(h-e.j),heartbeatCount:e.g[f],clientLifeMs:Math.round(h-e.h[f])}}c.failure={failureType:this.failureType,data:this.data};g(c)}}return new d(5,a,b)};/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0.*/.let q=globalThis.trustedTypes,r;function t(){let a=null;if(!q)return a;try{const b=d=>d;a=q.createPolicy("goog#html",{createHTML:b,createScript:b,crea

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4718), with no line terminators
Category:	downloaded
Size (bytes):	4718
Entropy (8bit):	5.833549149269994
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTa0JWUCzKZ:12cV9sT3AW7NIzJJWUkKZ
MD5:	90BE64465DE6CFC55FC4864FFFC5B134
SHA1:	202FE5CC06F8576A8FB72101F877C92CA901C01B
SHA-256:	76C056EE86775C20543D69D121E6CB15FFF00DD20D20567ACE3E4B1CE8D46AA0
SHA-512:	9EAE7E2D03B1F26B0DEE388474B39C1763ABEA711BA5FABE861D1892CACF34BDF48557641BD4A7D8C591E9E22E81E0D0B7B50DB3B7890B5242F6FEAEDD9C8E72
Malicious:	false
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/858128210/?random=1735816571776&cv=11&fst=1735816571776&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-VFQWFX3X1C&gacid=1340293989.1735816572&gtm=45je4cc1v898645365za200zb9103256652&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=1886245849
Preview:	<html></html>

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3628
Entropy (8bit):	4.6859343360858
Encrypted:	false
SSDEEP:	96:kBXy40c2tYR+hxd4lJ9IUavRUJTUqUrUfjS4lJ50GvmT4Uiz:qAwexd4lv3avyJYvArVlJ50GvnUiz
MD5:	EE8B3C30DF90D2D7459DD6D7F7067C14
SHA1:	6D07CBC5AE2E46F3D5ECD299B293F04CD045E633
SHA-256:	CE6182A6D356B7F6D0A6B2BE83FC373AB7DE807D0B92342ABFF28CAEF5A6028A
SHA-512:	5FDAB68224793B1979550E6425BAB1607E2B2902025178C0C7217F6CEBFC767248B62C3404C2F9D5D5F595CC9EC370775E2C3E1F16E631C10764DA063B5DC53C
Malicious:	false
URL:	https://repository.pcapp.store/pcapp/images/front_img/lp/lpd_installing_r2/img/done_windows_icon.svg
Preview:	<svg width="132" height="132" viewBox="0 0 132 132" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Group 1296"><g id="Rectangle 302" filter="url(#filter0_d_539_279)"><path d="M16 12.5C16 10.0147 18.0147 8 20.5 8H111.5C113.985 8 116 10.0147 116 12.5V103.5C116 105.985 113.985 108 111.5 108H20.5C18.0147 108 16 105.985 16 103.5V12.5Z" fill="white"/></g><g id="icon"><path id="Vector" d="M81.8943 54.2335C77.1424 54.2335 72.3905 54.2335 67.6386 54.2335C66.7256 54.2335 66.7256 54.2335 66.7256 53.3679C66.7256 46.483 66.7256 39.6183 66.7256 32.7334C66.7256 31.8678 66.7256 31.8879 67.5764 31.7671C70.9172 31.3041 74.2373 30.8209 77.5782 30.3579C81.417 29.8144 85.2352 29.291 89.074 28.7676C91.4188 28.4455 93.7637 28.1032 96.0877 27.7811C97.1253 27.6402 97.1253 27.6402 97.1253 28.6468C97.1253 36.8402 97.1253 45.0537 97.1253 53.2471C97.1253 54.2335 97.1253 54.2335 96.1085 54.2335C91.3566 54.2335 86.6254 54.2335 81.8943 54.2335Z" fill="#3683F7"/><path id="Vector_2" d="M81.9151 60.0742C86.7292 6

Static File Info

General

File type:	7-zip archive data, version 0.4
Entropy (8bit):	7.998884598138237
TrID:	7-Zip compressed archive (6006/1) 100.00%
File name:	Setup.exe.7z
File size:	161'226 bytes
MD5:	87d0a861b1235be65f22ad5463990bc4
SHA1:	61337d2d65349d120cd670064dacfe54b0407893
SHA256:	7cd634dcbaf6fb4e5376bfbe975828238644770e411e1f63fef47a5b352e2d7e
SHA512:	9369274c1177c382e575c819309f71f172854cb16c2a59035c064466355c463e090d8c9597c6945c0f4758f72766fcfbca1b41547708c9c8cdad22cf1b21ae7b
SSDEEP:	3072:SuNbbUpbo6bxeZF0XK2xczycasNBB3YKCOjmW33RE5Y1m7YF1QxuW0wD+iUZ7k6o:SsJueJDR+KrZRSYYYiuW0viU7o
TLSH:	ABF31218BCD773860D5F19FD8551C5F1C63FA3E6F203250E2E6C8769862422B6A8C99B
File Content Preview:	7z..'.......@u......j...........T..j.J.]u..Q...p..5t.D;..U.N......:......[.X...%..i..*:.=.E.+..ec.[.....G..i..k...z....A..e.r.._.~.!.._<7W......OmW.E..............L.d.w~.....X.."...0&f.[......\|.....uG.v..,.....:..`.xS......#1............s.I:.........<.x..

File Icon


Icon Hash:	74f0e4e4e4e4e0e4

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-02T12:16:17.988643+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49795	207.246.91.177	443	TCP
2025-01-02T12:16:25.712515+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49805	207.246.91.177	443	TCP
2025-01-02T12:16:26.143595+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49806	207.246.91.177	443	TCP
2025-01-02T12:16:27.322354+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49810	207.246.91.177	443	TCP
2025-01-02T12:16:28.941957+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49820	207.246.91.177	443	TCP
2025-01-02T12:16:30.577225+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49828	207.246.91.177	443	TCP
2025-01-02T12:16:31.477934+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49838	207.246.91.177	443	TCP
2025-01-02T12:16:32.188436+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49851	207.246.91.177	443	TCP
2025-01-02T12:16:32.533218+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49854	207.246.91.177	443	TCP
2025-01-02T12:16:32.672024+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49855	207.246.91.177	443	TCP
2025-01-02T12:16:32.681379+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49852	207.246.91.177	443	TCP
2025-01-02T12:16:33.009377+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49859	207.246.91.177	443	TCP
2025-01-02T12:16:33.057019+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49857	195.181.170.18	443	TCP
2025-01-02T12:16:33.081061+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49856	195.181.170.18	443	TCP
2025-01-02T12:16:34.947195+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49865	207.246.91.177	443	TCP
2025-01-02T12:16:34.949936+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49864	207.246.91.177	443	TCP
2025-01-02T12:16:35.286298+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49877	207.246.91.177	443	TCP
2025-01-02T12:16:35.332317+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49876	207.246.91.177	443	TCP
2025-01-02T12:16:36.545013+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49879	195.181.170.18	443	TCP
2025-01-02T12:16:36.566993+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49878	195.181.170.18	443	TCP
2025-01-02T12:16:41.284319+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49884	207.246.91.177	443	TCP
2025-01-02T12:16:41.285350+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49883	207.246.91.177	443	TCP
2025-01-02T12:16:41.727304+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49893	207.246.91.177	443	TCP
2025-01-02T12:16:43.509805+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49895	207.246.91.177	443	TCP
2025-01-02T12:16:43.581572+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49894	195.181.170.18	443	TCP
2025-01-02T12:16:43.585902+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49892	195.181.170.18	443	TCP
2025-01-02T12:16:45.226813+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49899	207.246.91.177	443	TCP
2025-01-02T12:16:45.580727+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49904	207.246.91.177	443	TCP
2025-01-02T12:16:46.665057+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49901	207.246.91.177	443	TCP
2025-01-02T12:16:46.726444+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49902	195.181.170.18	443	TCP
2025-01-02T12:16:46.733601+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49903	195.181.170.18	443	TCP
2025-01-02T12:16:46.983867+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49907	207.246.91.177	443	TCP
2025-01-02T12:16:47.083288+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49906	207.246.91.177	443	TCP
2025-01-02T12:16:48.223720+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49909	207.246.91.177	443	TCP
2025-01-02T12:16:48.301623+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49911	195.181.170.18	443	TCP
2025-01-02T12:16:48.683666+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49914	207.246.91.177	443	TCP
2025-01-02T12:16:49.025744+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49916	207.246.91.177	443	TCP
2025-01-02T12:16:50.438589+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49917	207.246.91.177	443	TCP
2025-01-02T12:16:50.768726+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49920	207.246.91.177	443	TCP
2025-01-02T12:16:50.928320+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49919	207.246.91.177	443	TCP
2025-01-02T12:16:51.084625+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49921	207.246.91.177	443	TCP
2025-01-02T12:16:53.051595+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49923	207.246.91.177	443	TCP
2025-01-02T12:16:53.413506+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49928	147.182.211.77	443	TCP
2025-01-02T12:16:55.218395+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49927	207.246.91.177	443	TCP
2025-01-02T12:16:55.251466+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49929	207.246.91.177	443	TCP
2025-01-02T12:16:55.705159+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49934	207.246.91.177	80	TCP
2025-01-02T12:16:55.800879+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49934	207.246.91.177	80	TCP
2025-01-02T12:16:55.825075+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49932	207.246.91.177	443	TCP
2025-01-02T12:16:56.358667+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49935	207.246.91.177	443	TCP
2025-01-02T12:16:56.387574+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.17	49936	207.246.91.177	443	TCP
2025-01-02T12:16:56.686209+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49938	147.182.211.77	443	TCP
2025-01-02T12:16:58.249156+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49946	207.246.91.177	443	TCP
2025-01-02T12:17:02.197969+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49950	207.246.91.177	443	TCP
2025-01-02T12:17:03.835629+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49952	207.246.91.177	443	TCP
2025-01-02T12:17:04.546785+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.17	49953	207.246.91.177	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 2, 2025 12:14:57.526873112 CET	49677	443	192.168.2.17	204.79.197.200
Jan 2, 2025 12:14:57.526876926 CET	49678	443	192.168.2.17	204.79.197.200
Jan 2, 2025 12:14:57.526876926 CET	49676	443	192.168.2.17	204.79.197.200
Jan 2, 2025 12:15:10.433331966 CET	49675	443	192.168.2.17	204.79.197.203
Jan 2, 2025 12:15:10.736807108 CET	49675	443	192.168.2.17	204.79.197.203
Jan 2, 2025 12:15:11.343813896 CET	49675	443	192.168.2.17	204.79.197.203
Jan 2, 2025 12:15:12.557817936 CET	49675	443	192.168.2.17	204.79.197.203
Jan 2, 2025 12:15:14.586313963 CET	49680	443	192.168.2.17	20.189.173.13
Jan 2, 2025 12:15:14.888853073 CET	49680	443	192.168.2.17	20.189.173.13
Jan 2, 2025 12:15:14.968816996 CET	49675	443	192.168.2.17	204.79.197.203
Jan 2, 2025 12:15:15.494859934 CET	49680	443	192.168.2.17	20.189.173.13
Jan 2, 2025 12:15:16.706876993 CET	49680	443	192.168.2.17	20.189.173.13
Jan 2, 2025 12:15:19.121903896 CET	49680	443	192.168.2.17	20.189.173.13
Jan 2, 2025 12:15:19.781889915 CET	49675	443	192.168.2.17	204.79.197.203
Jan 2, 2025 12:15:23.032108068 CET	49682	80	192.168.2.17	192.229.211.108
Jan 2, 2025 12:15:23.334877014 CET	49682	80	192.168.2.17	192.229.211.108
Jan 2, 2025 12:15:23.927062988 CET	49680	443	192.168.2.17	20.189.173.13
Jan 2, 2025 12:15:23.942922115 CET	49682	80	192.168.2.17	192.229.211.108
Jan 2, 2025 12:15:25.158015013 CET	49682	80	192.168.2.17	192.229.211.108
Jan 2, 2025 12:15:27.568933964 CET	49682	80	192.168.2.17	192.229.211.108
Jan 2, 2025 12:15:29.389929056 CET	49675	443	192.168.2.17	204.79.197.203
Jan 2, 2025 12:15:32.377928019 CET	49682	80	192.168.2.17	192.229.211.108
Jan 2, 2025 12:15:33.529989958 CET	49680	443	192.168.2.17	20.189.173.13
Jan 2, 2025 12:15:41.980021000 CET	49682	80	192.168.2.17	192.229.211.108
Jan 2, 2025 12:16:03.930358887 CET	49691	443	192.168.2.17	204.79.197.200
Jan 2, 2025 12:16:03.935322046 CET	443	49691	204.79.197.200	192.168.2.17
Jan 2, 2025 12:16:03.986455917 CET	49707	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:03.986510038 CET	443	49707	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:03.986582041 CET	49707	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:04.003211975 CET	49707	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:04.003230095 CET	443	49707	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:04.028624058 CET	443	49691	204.79.197.200	192.168.2.17
Jan 2, 2025 12:16:04.028707981 CET	49691	443	192.168.2.17	204.79.197.200
Jan 2, 2025 12:16:04.030153990 CET	49691	443	192.168.2.17	204.79.197.200
Jan 2, 2025 12:16:04.030189991 CET	49691	443	192.168.2.17	204.79.197.200
Jan 2, 2025 12:16:04.030422926 CET	49691	443	192.168.2.17	204.79.197.200
Jan 2, 2025 12:16:04.030606031 CET	49691	443	192.168.2.17	204.79.197.200
Jan 2, 2025 12:16:04.030673027 CET	49691	443	192.168.2.17	204.79.197.200
Jan 2, 2025 12:16:04.034904003 CET	443	49691	204.79.197.200	192.168.2.17
Jan 2, 2025 12:16:04.034954071 CET	443	49691	204.79.197.200	192.168.2.17
Jan 2, 2025 12:16:04.035206079 CET	443	49691	204.79.197.200	192.168.2.17
Jan 2, 2025 12:16:04.035362005 CET	443	49691	204.79.197.200	192.168.2.17
Jan 2, 2025 12:16:04.035377979 CET	443	49691	204.79.197.200	192.168.2.17
Jan 2, 2025 12:16:04.035437107 CET	443	49691	204.79.197.200	192.168.2.17
Jan 2, 2025 12:16:04.126895905 CET	443	49691	204.79.197.200	192.168.2.17
Jan 2, 2025 12:16:04.126966953 CET	49691	443	192.168.2.17	204.79.197.200
Jan 2, 2025 12:16:04.260761976 CET	443	49691	204.79.197.200	192.168.2.17
Jan 2, 2025 12:16:04.260896921 CET	49691	443	192.168.2.17	204.79.197.200
Jan 2, 2025 12:16:04.467222929 CET	443	49707	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:04.467319012 CET	49707	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:04.525099993 CET	49707	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:04.525127888 CET	443	49707	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:04.525474072 CET	443	49707	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:04.525556087 CET	49707	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:04.528372049 CET	49707	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:04.528436899 CET	49707	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:04.528479099 CET	443	49707	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:04.714164972 CET	443	49707	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:04.714231968 CET	49707	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:04.714248896 CET	443	49707	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:04.714272976 CET	443	49707	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:04.714288950 CET	49707	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:04.714332104 CET	49707	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:04.717145920 CET	49707	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:04.717161894 CET	443	49707	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:04.778879881 CET	49710	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:04.778938055 CET	443	49710	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:04.779062986 CET	49710	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:04.779295921 CET	49710	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:04.779316902 CET	443	49710	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:05.239268064 CET	443	49710	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:05.239367008 CET	49710	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:05.239919901 CET	49710	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:05.239929914 CET	443	49710	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:05.240102053 CET	49710	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:05.240106106 CET	443	49710	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:05.367995024 CET	443	49710	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:05.368072033 CET	443	49710	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:05.368097067 CET	49710	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:05.368150949 CET	49710	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:05.370096922 CET	49710	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:05.370119095 CET	443	49710	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:07.125000954 CET	49713	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:07.125040054 CET	443	49713	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:07.125340939 CET	49713	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:07.125624895 CET	49713	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:07.125639915 CET	443	49713	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:07.586384058 CET	443	49713	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:07.586484909 CET	49713	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:07.587029934 CET	49713	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:07.587040901 CET	443	49713	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:07.587199926 CET	49713	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:07.587207079 CET	443	49713	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:07.711643934 CET	443	49713	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:07.711713076 CET	443	49713	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:07.711730957 CET	49713	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:07.711771965 CET	49713	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:07.713536978 CET	49713	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:07.713558912 CET	443	49713	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:08.014601946 CET	49714	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:08.014668941 CET	443	49714	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:08.014827967 CET	49714	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:08.015120983 CET	49714	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:08.015136003 CET	443	49714	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:08.471482038 CET	443	49714	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:08.471574068 CET	49714	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:08.472043991 CET	49714	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:08.472053051 CET	443	49714	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:08.472281933 CET	49714	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:08.472286940 CET	443	49714	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:08.596729994 CET	443	49714	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:08.596801043 CET	443	49714	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:08.596817017 CET	49714	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:08.596843958 CET	49714	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:08.598648071 CET	49714	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:08.598666906 CET	443	49714	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:08.701392889 CET	49716	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:08.701447010 CET	443	49716	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:08.701654911 CET	49716	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:08.701927900 CET	49716	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:08.701941967 CET	443	49716	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:08.889611006 CET	49720	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:08.889616966 CET	443	49720	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:08.889673948 CET	49720	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:08.891369104 CET	49720	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:08.891385078 CET	443	49720	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:09.159385920 CET	443	49716	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:09.159815073 CET	49716	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:09.160350084 CET	49716	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:09.160361052 CET	443	49716	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:09.160533905 CET	49716	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:09.160540104 CET	443	49716	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:09.286024094 CET	443	49716	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:09.286133051 CET	49716	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:09.286138058 CET	443	49716	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:09.286201954 CET	49716	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:09.288320065 CET	49716	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:09.288340092 CET	443	49716	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:09.348170996 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:09.348222971 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:09.348309040 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:09.350047112 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:09.350063086 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:09.373265028 CET	443	49720	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:09.376406908 CET	49720	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:09.376426935 CET	443	49720	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:09.377630949 CET	443	49720	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:09.377720118 CET	49720	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:09.394397974 CET	49720	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:09.394685030 CET	49720	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:09.394709110 CET	443	49720	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:09.436129093 CET	49720	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:09.436156034 CET	443	49720	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:09.484132051 CET	49720	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:09.520252943 CET	443	49720	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:09.520318031 CET	443	49720	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:09.520541906 CET	49720	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:09.522341013 CET	49720	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:09.522361040 CET	443	49720	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:09.522382021 CET	49720	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:09.522413969 CET	49720	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:09.523264885 CET	49724	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:09.523317099 CET	443	49724	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:09.523430109 CET	49724	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:09.523744106 CET	49724	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:09.523756027 CET	443	49724	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:09.990206003 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:09.990289927 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:09.994565010 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:09.994580030 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:09.994865894 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:09.994934082 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:09.995346069 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:09.996057987 CET	443	49724	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:09.996316910 CET	49724	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:09.996345043 CET	443	49724	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:09.996711969 CET	443	49724	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:09.997077942 CET	49724	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:09.997143030 CET	443	49724	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:09.997230053 CET	49724	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.039334059 CET	443	49724	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.039335966 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.174067020 CET	443	49724	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.174092054 CET	443	49724	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.174132109 CET	443	49724	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.174168110 CET	49724	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.174196959 CET	443	49724	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.174216032 CET	49724	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.174259901 CET	49724	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.186255932 CET	49726	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.186286926 CET	443	49726	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.186479092 CET	49726	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.186546087 CET	49727	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.186587095 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.186659098 CET	49727	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.186918974 CET	49728	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.186928034 CET	443	49728	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.187006950 CET	49728	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.187251091 CET	49726	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.187263966 CET	443	49726	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.187561035 CET	49727	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.187583923 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.187758923 CET	49728	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.187772036 CET	443	49728	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.259993076 CET	443	49724	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.260042906 CET	443	49724	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.260077953 CET	443	49724	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.260082960 CET	49724	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.260148048 CET	49724	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.260334969 CET	49724	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.260349035 CET	443	49724	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.301120996 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.301145077 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.301161051 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.301192999 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.301227093 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.301239014 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.301286936 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.377120018 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.377165079 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.377207041 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.377228975 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.377252102 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.377264977 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.408179998 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.408205032 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.408257961 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.408277035 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.408318043 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.408334970 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.449784994 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.449810028 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.449865103 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.449877024 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.449904919 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.449919939 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.481960058 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.481980085 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.482050896 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.482069969 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.482114077 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.505597115 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.505640030 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.505681038 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.505696058 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.505726099 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.505736113 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.530249119 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.530272007 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.530328989 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.530344009 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.530383110 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.530383110 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.548425913 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.548453093 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.548505068 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.548522949 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.548549891 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.548562050 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.561820030 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.561837912 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.561913967 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.561928034 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.561990976 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.575216055 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.575241089 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.575292110 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.575300932 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.575335979 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.575342894 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.585890055 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.585911989 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.585958958 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.585969925 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.585999012 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.586016893 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.598377943 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.598400116 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.598443031 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.598455906 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.598467112 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.598491907 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.610517025 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.610537052 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.610580921 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.610591888 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.610624075 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.610624075 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.620109081 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.620142937 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.620183945 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.620193005 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.620215893 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.620234966 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.631386995 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.631407022 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.631468058 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.631475925 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.631553888 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.640156984 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.640177965 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.640409946 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.640419960 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.640465975 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.641079903 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.641374111 CET	49727	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.641381979 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.641827106 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.642317057 CET	443	49726	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.642404079 CET	49727	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.642462015 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.642591000 CET	49726	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.642611980 CET	443	49726	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.642723083 CET	49727	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.643351078 CET	443	49726	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.643822908 CET	49726	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.643963099 CET	49726	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.643968105 CET	443	49726	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.643982887 CET	443	49726	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.649825096 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.649842978 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.649893999 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.649910927 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.649930954 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.649964094 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.661659956 CET	443	49728	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.661887884 CET	49728	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.661895990 CET	443	49728	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.662528038 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.662544012 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.662623882 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.662635088 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.662686110 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.663346052 CET	443	49728	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.663405895 CET	49728	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.663738966 CET	49728	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.663810015 CET	443	49728	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.663873911 CET	49728	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.672645092 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.672663927 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.672740936 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.672748089 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.672831059 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.683278084 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.683305025 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.683353901 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.683366060 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.683396101 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.683412075 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.687333107 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.690113068 CET	49726	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.695271015 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.695329905 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.695367098 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.695382118 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.695405006 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.695427895 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.705120087 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.705138922 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.705202103 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.705212116 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.705302000 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.706193924 CET	49728	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.706204891 CET	443	49728	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.716298103 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.716336966 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.716378927 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.716399908 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.716437101 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.716451883 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.726849079 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.726866961 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.726946115 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.726953030 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.727000952 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.735155106 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.735171080 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.735238075 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.735245943 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.735300064 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.742288113 CET	443	49726	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.742434978 CET	443	49726	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.742482901 CET	49726	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.742785931 CET	49726	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.742805958 CET	443	49726	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.742815971 CET	49726	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.743089914 CET	49726	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.744072914 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.744096041 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.744174004 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.744184971 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.744287968 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.754118919 CET	49728	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.756062031 CET	49731	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:10.756104946 CET	443	49731	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:10.756237984 CET	49731	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:10.756428003 CET	49731	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:10.756442070 CET	443	49731	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:10.759442091 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.759460926 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.759526014 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.759536028 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.759694099 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.770050049 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.770071030 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.770164013 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.770173073 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.770212889 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.782075882 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.782098055 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.782162905 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.782171011 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.782226086 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.791359901 CET	443	49728	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.791482925 CET	443	49728	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.791543007 CET	49728	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.791898012 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.791915894 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.791944027 CET	49728	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.791958094 CET	443	49728	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.791976929 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.791985035 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.792042971 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.793134928 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.793162107 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.793453932 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.793678999 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.793693066 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.803165913 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.803191900 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.803246975 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.803252935 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.803283930 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.803303003 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.809089899 CET	49733	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:10.809137106 CET	443	49733	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:10.809199095 CET	49733	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:10.809396982 CET	49733	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:10.809411049 CET	443	49733	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:10.813649893 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.813668013 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.813741922 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.813749075 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.813800097 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.822161913 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.822180986 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.822232008 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.822237968 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.822272062 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.822292089 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.831027031 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.831044912 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.831125975 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.831132889 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.831206083 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.846318007 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.846340895 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.846385002 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.846393108 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.846429110 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.856931925 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.856966019 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.857009888 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.857026100 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.857058048 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.857089996 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.861162901 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.861190081 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.861205101 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.861263037 CET	49727	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.861277103 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.861335039 CET	49727	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.862656116 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.862680912 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.862736940 CET	49727	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.862741947 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.863722086 CET	49734	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.863739967 CET	443	49734	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.863831043 CET	49734	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.864111900 CET	49734	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.864123106 CET	443	49734	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.868865967 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.868901014 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.868943930 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.868949890 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.868979931 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.869010925 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.878648043 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.878665924 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.878724098 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.878731012 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.878793955 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.889991999 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.890023947 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.890088081 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.890096903 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.890121937 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.890147924 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.900643110 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.900680065 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.900718927 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.900727987 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.900758028 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.900774956 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.905034065 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.905061007 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.905107021 CET	49727	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.905116081 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.905148029 CET	49727	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.908863068 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.908898115 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.908955097 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.908970118 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.909017086 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.917781115 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.917802095 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.917876959 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.917889118 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.917947054 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.933358908 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.933377981 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.933444023 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.933464050 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.933486938 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.933495998 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.943630934 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.943650007 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.943736076 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.943746090 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.943800926 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.948734045 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.948761940 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.948801994 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.948817968 CET	49727	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.948827982 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.948852062 CET	49727	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.948878050 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.948879004 CET	49727	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.948945999 CET	49727	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.949140072 CET	49727	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:10.949152946 CET	443	49727	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:10.955705881 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.955733061 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.955812931 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.955833912 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.955919027 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.965931892 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.965953112 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.966022968 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.966036081 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.966109037 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.976741076 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.976759911 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.976835012 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.976841927 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.976908922 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.987633944 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.987665892 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.987713099 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.987723112 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.987755060 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.987768888 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.995852947 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.995871067 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.995922089 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:10.995929956 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:10.995975971 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.007390976 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.007421970 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.007972956 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.007982969 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.008090973 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.020637035 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.020665884 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.020720959 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.020729065 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.020757914 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.020776987 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.030713081 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.030739069 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.030781984 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.030792952 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.030827999 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.030843019 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.042603970 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.042625904 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.042687893 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.042710066 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.042732954 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.042757988 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.052301884 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.052320004 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.052398920 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.052409887 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.052488089 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.063819885 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.063844919 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.063920975 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.063935995 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.063988924 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.074304104 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.074345112 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.074384928 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.074400902 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.074444056 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.082673073 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.082698107 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.082753897 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.082762957 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.082792044 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.082806110 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.094327927 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.094372988 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.094408989 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.094418049 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.094468117 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.107352018 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.107386112 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.107472897 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.107495070 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.107520103 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.107533932 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.117376089 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.117399931 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.117455006 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.117466927 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.117494106 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.117508888 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.129528046 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.129549980 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.129611969 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.129621983 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.129666090 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.129693031 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.133963108 CET	49738	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.134021997 CET	443	49738	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.134147882 CET	49738	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.135714054 CET	49738	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.135735989 CET	443	49738	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.139177084 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.139200926 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.139291048 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.139291048 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.139302015 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.139378071 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.150579929 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.150605917 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.150655031 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.150662899 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.150718927 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.160979986 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.161005020 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.161056995 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.161078930 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.161113977 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.161138058 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.169397116 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.169429064 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.169495106 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.169507980 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.169549942 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.180866957 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.180888891 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.180951118 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.180960894 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.180998087 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.181011915 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.194232941 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.194257021 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.194309950 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.194324017 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.194346905 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.194365978 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.204118967 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.204140902 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.204185963 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.204196930 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.204222918 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.204241991 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.216195107 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.216217041 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.216264009 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.216272116 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.216295958 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.216317892 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.226309061 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.226352930 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.226380110 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.226387024 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.226422071 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.226444960 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.237767935 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.237792015 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.237859964 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.237879038 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.237891912 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.237916946 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.256356001 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.256385088 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.256443977 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.256453991 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.256483078 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.256504059 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.257941961 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.257963896 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.257997036 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.258153915 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.258160114 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.258200884 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.258943081 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.259228945 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.259242058 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.259875059 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.260282993 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.260405064 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.260478020 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.267498016 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.267519951 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.267573118 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.267582893 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.267607927 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.267623901 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.267939091 CET	443	49733	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:11.268208027 CET	49733	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:11.268227100 CET	443	49733	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:11.269578934 CET	443	49733	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:11.269649982 CET	49733	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:11.269953966 CET	49733	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:11.270060062 CET	443	49733	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:11.270072937 CET	49733	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:11.289757013 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.289783955 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.289850950 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.289865971 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.289900064 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.289918900 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.303343058 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.311337948 CET	443	49733	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:11.323180914 CET	49733	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:11.323195934 CET	443	49733	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:11.324259996 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.324286938 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.324337959 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.324356079 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.324397087 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.333606005 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.333631992 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.333692074 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.333699942 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.333743095 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.334728956 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.334778070 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.334803104 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.334808111 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.334839106 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.334855080 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.335825920 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.335846901 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.335901976 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.335910082 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.335936069 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.335947990 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.343280077 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.343332052 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.343347073 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.343358994 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.343385935 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.343408108 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.343951941 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.343971014 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.344038963 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.344046116 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.344084978 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.349354029 CET	443	49734	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.349596977 CET	49734	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.349607944 CET	443	49734	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.350032091 CET	443	49734	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.350435972 CET	49734	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.350507021 CET	443	49734	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.350796938 CET	49734	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.354103088 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.354155064 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.354176044 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.354198933 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.354212999 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.354245901 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.354263067 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.354367971 CET	49723	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:11.354382992 CET	443	49723	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:11.371113062 CET	49733	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:11.395332098 CET	443	49734	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.395544052 CET	443	49733	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:11.395647049 CET	443	49733	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:11.395735025 CET	49733	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:11.396759987 CET	49733	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:11.396776915 CET	443	49733	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:11.399292946 CET	49739	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:11.399333954 CET	443	49739	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:11.399583101 CET	49739	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:11.399858952 CET	49739	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:11.399873018 CET	443	49739	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:11.439498901 CET	443	49731	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:11.439820051 CET	49731	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:11.439831018 CET	443	49731	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:11.441036940 CET	443	49731	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:11.441112041 CET	49731	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:11.442224026 CET	49731	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:11.442389965 CET	443	49731	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:11.442399979 CET	49731	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:11.447320938 CET	443	49734	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.447385073 CET	443	49734	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.447496891 CET	49734	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.447753906 CET	49734	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.447753906 CET	49734	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.447767019 CET	443	49734	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.447849035 CET	49734	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.448959112 CET	49740	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:11.448981047 CET	443	49740	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:11.449119091 CET	49740	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:11.449330091 CET	49740	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:11.449342012 CET	443	49740	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:11.474848032 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.474863052 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.474914074 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.474945068 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.474953890 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.475001097 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.475001097 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.475238085 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.475260973 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.475337029 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.475337029 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.475343943 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.483334064 CET	443	49731	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:11.497098923 CET	49731	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:11.497108936 CET	443	49731	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:11.521090984 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.521122932 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.521178007 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.521193027 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.521280050 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.545141935 CET	49731	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:11.562063932 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.562086105 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.562480927 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.562489033 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.562685966 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.562933922 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.562951088 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.563031912 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.563039064 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.563174963 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.564697981 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.564714909 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.564810991 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.564873934 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.564882994 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.564898014 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.564918995 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.565011978 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.565324068 CET	49732	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.565330982 CET	443	49732	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.569850922 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:11.569890976 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:11.570008993 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:11.570401907 CET	49742	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.570429087 CET	443	49742	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.570564985 CET	49742	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.571012974 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:11.571036100 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:11.571321964 CET	49742	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.571331978 CET	443	49742	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.586067915 CET	49743	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.586116076 CET	443	49743	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.586476088 CET	49743	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.586833000 CET	49743	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.586848974 CET	443	49743	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.601576090 CET	49744	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.601596117 CET	443	49744	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.601753950 CET	49744	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.602793932 CET	49744	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.602806091 CET	443	49744	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.605262995 CET	443	49738	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.605695963 CET	49738	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.605716944 CET	443	49738	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.606761932 CET	443	49738	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.607023954 CET	49738	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.607256889 CET	49738	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.607256889 CET	49738	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.607269049 CET	443	49738	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.607332945 CET	443	49738	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.656136990 CET	49738	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.656153917 CET	443	49738	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.707803011 CET	49738	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.717463970 CET	443	49731	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:11.717489958 CET	443	49731	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:11.717573881 CET	443	49731	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:11.717600107 CET	49731	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:11.717869043 CET	49731	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:11.777775049 CET	49731	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:11.777784109 CET	443	49731	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:11.798443079 CET	443	49738	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.798532009 CET	443	49738	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.803929090 CET	49738	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.814635038 CET	49738	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:11.814661026 CET	443	49738	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:11.844425917 CET	49745	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:11.844468117 CET	443	49745	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:11.844819069 CET	49745	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:11.844975948 CET	49745	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:11.844991922 CET	443	49745	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:11.854892015 CET	49746	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:11.854928017 CET	443	49746	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:11.856333017 CET	49746	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:11.856700897 CET	49746	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:11.856715918 CET	443	49746	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:11.866767883 CET	443	49739	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:11.866894007 CET	49739	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:11.867351055 CET	49739	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:11.867361069 CET	443	49739	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:11.868783951 CET	49739	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:11.868791103 CET	443	49739	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:11.994462967 CET	443	49739	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:11.994545937 CET	443	49739	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:11.994584084 CET	49739	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:11.994626045 CET	49739	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:11.996479034 CET	49739	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:11.996499062 CET	443	49739	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:12.033754110 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.033977985 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.033989906 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.034346104 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.034733057 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.034792900 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.034856081 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.043848038 CET	443	49742	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.044181108 CET	49742	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.044205904 CET	443	49742	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.044600964 CET	443	49742	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.046952009 CET	49742	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.047087908 CET	443	49742	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.047122002 CET	49742	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.052901983 CET	49747	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:12.052936077 CET	443	49747	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:12.055891991 CET	49747	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:12.056168079 CET	49747	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:12.056179047 CET	443	49747	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:12.075325012 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.078953981 CET	443	49743	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.079786062 CET	49743	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.079813004 CET	443	49743	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.081326962 CET	443	49743	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.081707001 CET	49743	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.081873894 CET	49743	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.081878901 CET	443	49743	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.081933975 CET	443	49743	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.083861113 CET	443	49740	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:12.084202051 CET	49740	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:12.084211111 CET	443	49740	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:12.084686041 CET	443	49740	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:12.087629080 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.088226080 CET	49740	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:12.088335991 CET	443	49740	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:12.088445902 CET	49740	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:12.091331005 CET	443	49742	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.102231979 CET	49742	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.117021084 CET	443	49744	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.117511988 CET	49744	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.117520094 CET	443	49744	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.121165037 CET	443	49744	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.121280909 CET	49744	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.121588945 CET	49744	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.121725082 CET	49744	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.121730089 CET	443	49744	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.121769905 CET	443	49744	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.131337881 CET	443	49740	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:12.134129047 CET	49743	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.166143894 CET	49744	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.166150093 CET	443	49744	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.214188099 CET	49744	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.219861031 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.219881058 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.219887972 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.219921112 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.219935894 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.219949007 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.219959021 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.219959021 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.219969988 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.220026016 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.220026016 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.222448111 CET	443	49742	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.222529888 CET	443	49742	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.222843885 CET	49742	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.222923994 CET	49742	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.222935915 CET	443	49742	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.232487917 CET	443	49744	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.232594967 CET	443	49744	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.232995987 CET	49744	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.234430075 CET	49744	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.234430075 CET	49744	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.234441042 CET	443	49744	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.238418102 CET	49744	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.244605064 CET	49749	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:12.244618893 CET	443	49749	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:12.244895935 CET	49749	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:12.245165110 CET	49749	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:12.245172977 CET	443	49749	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:12.253068924 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.253086090 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.253276110 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.253288031 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.273562908 CET	49750	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:12.273607969 CET	443	49750	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:12.273806095 CET	49750	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:12.273896933 CET	49750	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:12.273910999 CET	443	49750	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:12.285231113 CET	443	49743	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.285412073 CET	443	49743	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.286226034 CET	49743	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.286524057 CET	49743	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:12.286537886 CET	443	49743	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:12.289149046 CET	49751	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.289191961 CET	443	49751	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.289345026 CET	49751	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.289495945 CET	49751	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.289530039 CET	443	49751	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.294276953 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.294554949 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.294564962 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.294610023 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.294637918 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.294645071 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.294665098 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.294939041 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.295250893 CET	49752	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.295288086 CET	443	49752	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.296996117 CET	49753	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.297022104 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.297033072 CET	49752	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.297089100 CET	49753	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.297619104 CET	49753	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.297621012 CET	49754	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.297631979 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.297648907 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.297951937 CET	49752	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.297964096 CET	443	49752	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.297991037 CET	49754	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.299124002 CET	49754	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.299134016 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.299135923 CET	49756	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:12.299150944 CET	443	49756	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:12.299387932 CET	49756	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:12.299696922 CET	49756	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:12.299705982 CET	443	49756	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:12.302052975 CET	49757	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.302076101 CET	443	49757	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.302246094 CET	49757	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.303347111 CET	49757	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.303358078 CET	443	49757	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.310246944 CET	49758	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:12.310255051 CET	443	49758	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:12.310333967 CET	49758	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:12.310508966 CET	49759	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.310523033 CET	443	49759	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.310832024 CET	49759	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.311522007 CET	49759	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.311534882 CET	443	49759	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.312100887 CET	49758	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:12.312112093 CET	443	49758	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:12.314169884 CET	49760	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.314179897 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.314323902 CET	49760	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.318797112 CET	49760	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.318814039 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.326478004 CET	443	49745	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.327213049 CET	49745	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.327233076 CET	443	49745	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.327639103 CET	443	49745	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.330384016 CET	49745	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.330384016 CET	49745	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.330467939 CET	443	49745	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.341381073 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.341403008 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.341499090 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.341499090 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.341511011 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.341764927 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.342319012 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.342334986 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.342403889 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.342403889 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.342411041 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.342523098 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.344075918 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.344093084 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.344153881 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.344162941 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.344234943 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.344265938 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.344269991 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.344289064 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.344314098 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.344362020 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.344362020 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.364073992 CET	443	49740	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:12.364120960 CET	443	49740	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:12.364198923 CET	443	49740	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:12.364207983 CET	49740	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:12.364301920 CET	49740	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:12.365223885 CET	49740	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:12.365231991 CET	443	49740	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:12.374140024 CET	49745	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.415503979 CET	49763	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:12.415515900 CET	443	49763	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:12.415617943 CET	49763	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:12.415996075 CET	49763	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:12.416007042 CET	443	49763	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:12.445533991 CET	49764	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.445575953 CET	443	49764	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.445888042 CET	49764	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.446209908 CET	49764	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.446223021 CET	443	49764	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.447693110 CET	49766	443	192.168.2.17	74.125.206.157
Jan 2, 2025 12:16:12.447720051 CET	443	49766	74.125.206.157	192.168.2.17
Jan 2, 2025 12:16:12.449899912 CET	49766	443	192.168.2.17	74.125.206.157
Jan 2, 2025 12:16:12.450059891 CET	49766	443	192.168.2.17	74.125.206.157
Jan 2, 2025 12:16:12.450074911 CET	443	49766	74.125.206.157	192.168.2.17
Jan 2, 2025 12:16:12.457669973 CET	443	49745	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.457762003 CET	443	49745	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.457844019 CET	49745	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.460035086 CET	49745	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.460048914 CET	443	49745	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.461791039 CET	49767	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.461807013 CET	443	49767	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.462081909 CET	49767	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.462081909 CET	49767	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.462105036 CET	443	49767	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.490195990 CET	443	49746	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:12.490566015 CET	49746	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:12.490581989 CET	443	49746	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:12.491658926 CET	443	49746	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:12.492001057 CET	49746	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:12.492223978 CET	49746	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:12.492223978 CET	49746	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:12.492291927 CET	443	49746	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:12.519727945 CET	443	49747	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:12.519819975 CET	49747	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:12.521303892 CET	49747	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:12.521311045 CET	443	49747	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:12.521621943 CET	49747	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:12.521626949 CET	443	49747	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:12.546118021 CET	49746	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:12.546133995 CET	443	49746	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:12.568361998 CET	49768	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:12.568381071 CET	443	49768	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:12.568461895 CET	49768	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:12.570996046 CET	49768	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:12.571007967 CET	443	49768	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:12.593146086 CET	49746	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:12.646879911 CET	443	49747	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:12.646964073 CET	49747	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:12.646970987 CET	443	49747	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:12.646986008 CET	443	49747	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:12.647012949 CET	49747	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:12.647059917 CET	49747	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:12.648693085 CET	49747	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:12.648708105 CET	443	49747	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:12.656179905 CET	49741	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.656192064 CET	443	49741	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.756962061 CET	443	49757	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.761559010 CET	49757	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.761569023 CET	443	49757	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.762015104 CET	443	49757	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.762443066 CET	49757	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.762517929 CET	443	49757	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.762718916 CET	49757	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.773977995 CET	443	49746	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:12.773998976 CET	443	49746	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:12.774151087 CET	49746	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:12.774171114 CET	443	49746	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:12.774235964 CET	49746	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:12.774240971 CET	443	49746	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:12.774271965 CET	443	49746	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:12.774315119 CET	49746	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:12.775713921 CET	49746	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:12.775733948 CET	443	49746	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:12.807337046 CET	443	49757	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.885071039 CET	443	49757	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.885143995 CET	443	49757	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.885190964 CET	49757	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.885601997 CET	49757	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.885616064 CET	443	49757	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.906635046 CET	443	49750	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:12.906883001 CET	49750	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:12.906913042 CET	443	49750	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:12.908090115 CET	443	49750	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:12.908122063 CET	443	49749	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:12.908154964 CET	49750	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:12.908787966 CET	49749	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:12.908797979 CET	443	49749	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:12.909174919 CET	443	49749	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:12.909212112 CET	49750	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:12.909281015 CET	443	49750	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:12.909521103 CET	49749	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:12.909585953 CET	443	49749	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:12.909607887 CET	49750	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:12.909615040 CET	443	49750	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:12.909784079 CET	49749	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:12.916681051 CET	443	49767	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.916945934 CET	49767	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.916973114 CET	443	49767	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.917325020 CET	443	49767	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.917609930 CET	49767	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.917676926 CET	443	49767	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.917737961 CET	49767	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:12.922415018 CET	443	49751	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.922625065 CET	49751	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.922638893 CET	443	49751	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.923686028 CET	443	49751	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.923748016 CET	49751	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.924701929 CET	49751	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.924762964 CET	443	49751	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.924865007 CET	49751	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.924870968 CET	443	49751	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.926342964 CET	443	49752	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.926747084 CET	49752	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.926773071 CET	443	49752	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.927273035 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.927479982 CET	49753	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.927489996 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.927880049 CET	443	49752	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.927944899 CET	49752	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.928275108 CET	49752	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.928337097 CET	443	49752	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.928405046 CET	49752	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.928412914 CET	443	49752	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.928539038 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.928633928 CET	49753	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.929497004 CET	49753	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.929569006 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.929640055 CET	49753	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.929646015 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.933737040 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.933923960 CET	49754	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.933933973 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.934976101 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.935048103 CET	49754	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.935336113 CET	49754	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.935401917 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.935451984 CET	49754	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.935457945 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.942045927 CET	443	49759	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.943331957 CET	49759	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.943339109 CET	443	49759	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.944375992 CET	443	49759	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.944434881 CET	49759	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.944772005 CET	49759	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.944828987 CET	443	49759	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.944966078 CET	49759	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.944972992 CET	443	49759	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:12.951329947 CET	443	49749	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:12.955365896 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.955636978 CET	49760	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.955648899 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.956675053 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.956742048 CET	49760	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.957032919 CET	49760	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.957093000 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.957135916 CET	49750	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:12.958828926 CET	49760	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.958837986 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:12.963325024 CET	443	49767	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:12.968055010 CET	443	49758	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:12.968283892 CET	49758	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:12.968295097 CET	443	49758	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:12.968696117 CET	443	49758	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:12.968750954 CET	49758	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:12.969408035 CET	443	49758	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:12.969460011 CET	49758	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:12.970375061 CET	49758	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:12.970437050 CET	443	49758	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:12.970515966 CET	49758	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:12.970523119 CET	443	49758	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:12.972117901 CET	49751	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.972134113 CET	49752	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.972161055 CET	49753	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.988188028 CET	49759	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:12.988537073 CET	49754	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:12.988549948 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.004134893 CET	49760	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.020703077 CET	49758	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:13.024312019 CET	443	49756	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:13.024597883 CET	49756	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:13.024606943 CET	443	49756	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:13.025048018 CET	443	49756	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:13.025120020 CET	49756	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:13.025780916 CET	443	49756	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:13.025840998 CET	49756	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:13.026108027 CET	49756	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:13.026180983 CET	443	49756	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:13.026309013 CET	49756	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:13.026314020 CET	443	49756	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:13.030855894 CET	443	49768	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:13.030941963 CET	49768	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:13.037451982 CET	49768	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:13.037468910 CET	443	49768	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:13.037542105 CET	49754	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.037700891 CET	443	49768	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:13.037760019 CET	49768	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:13.039952993 CET	49768	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:13.041281939 CET	443	49767	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:13.041356087 CET	443	49767	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:13.041409016 CET	49767	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:13.042469978 CET	49767	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:13.042495966 CET	443	49767	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:13.058796883 CET	443	49763	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:13.059005976 CET	49763	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:13.059015989 CET	443	49763	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:13.060142994 CET	443	49763	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:13.060200930 CET	49763	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:13.060535908 CET	49763	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:13.060600042 CET	443	49763	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:13.060678959 CET	49763	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:13.060686111 CET	443	49763	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:13.066483021 CET	443	49766	74.125.206.157	192.168.2.17
Jan 2, 2025 12:16:13.066679001 CET	49766	443	192.168.2.17	74.125.206.157
Jan 2, 2025 12:16:13.066703081 CET	443	49766	74.125.206.157	192.168.2.17
Jan 2, 2025 12:16:13.067147970 CET	49756	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:13.067739010 CET	443	49766	74.125.206.157	192.168.2.17
Jan 2, 2025 12:16:13.067806005 CET	49766	443	192.168.2.17	74.125.206.157
Jan 2, 2025 12:16:13.071614027 CET	49766	443	192.168.2.17	74.125.206.157
Jan 2, 2025 12:16:13.071687937 CET	443	49766	74.125.206.157	192.168.2.17
Jan 2, 2025 12:16:13.071785927 CET	49766	443	192.168.2.17	74.125.206.157
Jan 2, 2025 12:16:13.071794033 CET	443	49766	74.125.206.157	192.168.2.17
Jan 2, 2025 12:16:13.074423075 CET	443	49764	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.074613094 CET	49764	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.074620962 CET	443	49764	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.075980902 CET	443	49764	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.076050997 CET	49764	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.076368093 CET	49764	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.076430082 CET	443	49764	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.076492071 CET	49764	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.076498985 CET	443	49764	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.083333015 CET	443	49768	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:13.114126921 CET	49763	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:13.114243984 CET	49766	443	192.168.2.17	74.125.206.157
Jan 2, 2025 12:16:13.129127026 CET	49764	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.131171942 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.131221056 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.131259918 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.131294012 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.131330967 CET	49753	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.131330967 CET	49753	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.131342888 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.135042906 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.135090113 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.135121107 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.135139942 CET	49754	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.135149956 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.135162115 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.135189056 CET	49754	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.137195110 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.137228012 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.137250900 CET	49753	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.137263060 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.137306929 CET	49753	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.137312889 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.141055107 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.141107082 CET	49754	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.141113997 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.141123056 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.141156912 CET	49754	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.141166925 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.143476009 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.143523932 CET	49753	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.143532038 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.147361994 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.147411108 CET	49754	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.147420883 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.149765015 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.149816036 CET	49753	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.149821043 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.153647900 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.153697968 CET	49754	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.153706074 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.156126022 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.156188011 CET	49753	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.156264067 CET	49753	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.156275988 CET	443	49753	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.159954071 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.160007954 CET	49754	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.160111904 CET	49754	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.160119057 CET	443	49754	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.169061899 CET	443	49768	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:13.169115067 CET	49768	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:13.169133902 CET	443	49768	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:13.169146061 CET	443	49768	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:13.169169903 CET	49768	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:13.169198990 CET	49768	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:13.179414988 CET	49768	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:13.179429054 CET	443	49768	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:13.180141926 CET	443	49750	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.180208921 CET	443	49750	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.180253029 CET	49750	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.180676937 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.180721998 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.180759907 CET	49760	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.180764914 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.180778980 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.180839062 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.180864096 CET	49760	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.180871964 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.180911064 CET	49760	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.181674004 CET	49750	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.181689024 CET	443	49750	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.186358929 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.186475992 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.186518908 CET	49760	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.186528921 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.190423012 CET	443	49749	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:13.190454006 CET	443	49749	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:13.190517902 CET	49749	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:13.190537930 CET	443	49749	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:13.192809105 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.192858934 CET	49760	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.192867994 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.194749117 CET	443	49749	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:13.194806099 CET	49749	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:13.196504116 CET	49749	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:13.196528912 CET	443	49749	37.19.194.80	192.168.2.17
Jan 2, 2025 12:16:13.196552992 CET	49749	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:13.196582079 CET	49749	443	192.168.2.17	37.19.194.80
Jan 2, 2025 12:16:13.199002028 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.199050903 CET	49760	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.199059010 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.201653957 CET	443	49751	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.201695919 CET	443	49751	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.201726913 CET	443	49751	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.201756001 CET	443	49751	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.201755047 CET	49751	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:13.201782942 CET	443	49751	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.201792002 CET	49751	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:13.202020884 CET	443	49751	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.202058077 CET	49751	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:13.203723907 CET	49751	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:13.203736067 CET	443	49751	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.205424070 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.205471992 CET	49760	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.210454941 CET	443	49752	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.210499048 CET	443	49752	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.210532904 CET	443	49752	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.210551023 CET	49752	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:13.210561037 CET	443	49752	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.210572004 CET	443	49752	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.210613966 CET	49752	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:13.210628986 CET	443	49752	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.210669994 CET	49752	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:13.210690975 CET	443	49752	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.210751057 CET	443	49752	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.210791111 CET	49752	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:13.212176085 CET	49760	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.212183952 CET	443	49760	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.216648102 CET	49752	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:13.216665030 CET	443	49752	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.219683886 CET	49769	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:13.219706059 CET	443	49769	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:13.219780922 CET	49769	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:13.220037937 CET	49769	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:13.220047951 CET	443	49769	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:13.227670908 CET	443	49759	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.227714062 CET	443	49759	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.227756023 CET	443	49759	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.227793932 CET	443	49759	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.227829933 CET	49759	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:13.227829933 CET	49759	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:13.227844000 CET	443	49759	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.227915049 CET	443	49759	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.228013039 CET	49759	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:13.228661060 CET	49759	443	192.168.2.17	142.250.185.66
Jan 2, 2025 12:16:13.228672028 CET	443	49759	142.250.185.66	192.168.2.17
Jan 2, 2025 12:16:13.233036041 CET	49770	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.233084917 CET	443	49770	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.233159065 CET	49770	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.233376026 CET	49770	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.233390093 CET	443	49770	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.249936104 CET	443	49758	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:13.250211000 CET	443	49758	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:13.250258923 CET	49758	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:13.250277042 CET	443	49758	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:13.250304937 CET	49758	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:13.250305891 CET	49758	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:13.250323057 CET	49758	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:13.251446009 CET	49771	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.251482010 CET	443	49771	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.251549006 CET	49771	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.251743078 CET	49771	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.251754999 CET	443	49771	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.266650915 CET	49775	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:13.266684055 CET	443	49775	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:13.266742945 CET	49775	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:13.267003059 CET	49775	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:13.267019987 CET	443	49775	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:13.282881021 CET	49776	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.282896042 CET	443	49776	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.282964945 CET	49776	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.283024073 CET	49777	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.283045053 CET	443	49777	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.283082008 CET	49778	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.283094883 CET	443	49778	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.283123016 CET	49777	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.283174992 CET	49778	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.283315897 CET	49776	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.283327103 CET	443	49776	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.283423901 CET	49777	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.283441067 CET	443	49777	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.283632040 CET	49778	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.283643961 CET	443	49778	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.302561998 CET	443	49756	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:13.302766085 CET	443	49756	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:13.302814960 CET	49756	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:13.303417921 CET	49756	443	192.168.2.17	142.250.185.78
Jan 2, 2025 12:16:13.303428888 CET	443	49756	142.250.185.78	192.168.2.17
Jan 2, 2025 12:16:13.305824041 CET	49780	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.305869102 CET	443	49780	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.305943012 CET	49780	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.306148052 CET	49780	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.306171894 CET	443	49780	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.330322981 CET	443	49766	74.125.206.157	192.168.2.17
Jan 2, 2025 12:16:13.330391884 CET	443	49766	74.125.206.157	192.168.2.17
Jan 2, 2025 12:16:13.330436945 CET	49766	443	192.168.2.17	74.125.206.157
Jan 2, 2025 12:16:13.330653906 CET	49766	443	192.168.2.17	74.125.206.157
Jan 2, 2025 12:16:13.330672026 CET	443	49766	74.125.206.157	192.168.2.17
Jan 2, 2025 12:16:13.330684900 CET	49766	443	192.168.2.17	74.125.206.157
Jan 2, 2025 12:16:13.330729008 CET	49766	443	192.168.2.17	74.125.206.157
Jan 2, 2025 12:16:13.356668949 CET	443	49764	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.356822014 CET	443	49764	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.356872082 CET	49764	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.358035088 CET	49764	443	192.168.2.17	142.250.186.34
Jan 2, 2025 12:16:13.358045101 CET	443	49764	142.250.186.34	192.168.2.17
Jan 2, 2025 12:16:13.363425970 CET	443	49763	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:13.363447905 CET	443	49763	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:13.363496065 CET	49763	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:13.363512039 CET	443	49763	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:13.363524914 CET	443	49763	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:13.363559961 CET	49763	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:13.373991013 CET	49763	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:13.374006033 CET	443	49763	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:13.675668001 CET	443	49769	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:13.675765038 CET	49769	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:13.678611040 CET	49769	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:13.678611040 CET	49769	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:13.678616047 CET	443	49769	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:13.678628922 CET	443	49769	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:13.683701992 CET	49781	443	192.168.2.17	142.250.184.228
Jan 2, 2025 12:16:13.683741093 CET	443	49781	142.250.184.228	192.168.2.17
Jan 2, 2025 12:16:13.684246063 CET	49781	443	192.168.2.17	142.250.184.228
Jan 2, 2025 12:16:13.684427023 CET	49781	443	192.168.2.17	142.250.184.228
Jan 2, 2025 12:16:13.684442043 CET	443	49781	142.250.184.228	192.168.2.17
Jan 2, 2025 12:16:13.803679943 CET	443	49769	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:13.803755045 CET	443	49769	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:13.803755999 CET	49769	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:13.804176092 CET	49769	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:13.807952881 CET	49769	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:13.807972908 CET	443	49769	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:13.861479044 CET	443	49770	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.861746073 CET	49770	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.861769915 CET	443	49770	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.862113953 CET	443	49770	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.862540007 CET	49770	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.862672091 CET	443	49770	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.862854004 CET	49770	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.862865925 CET	443	49770	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.877290010 CET	49783	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:13.877331972 CET	443	49783	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:13.877434969 CET	49783	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:13.877656937 CET	49783	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:13.877671003 CET	443	49783	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:13.879033089 CET	443	49771	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.879540920 CET	49771	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.879551888 CET	443	49771	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.879890919 CET	443	49771	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.880554914 CET	49771	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.880623102 CET	443	49771	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.880722046 CET	49771	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.880739927 CET	443	49771	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.910243034 CET	443	49776	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.910856962 CET	443	49778	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.911432028 CET	49776	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.911442041 CET	443	49776	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.912244081 CET	49778	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.912260056 CET	443	49778	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.912594080 CET	443	49776	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.912847042 CET	49776	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.913247108 CET	49776	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.913316965 CET	443	49776	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.913424969 CET	443	49778	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.913512945 CET	49778	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.913512945 CET	49776	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.913526058 CET	443	49776	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.913907051 CET	49778	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.913907051 CET	49778	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.913921118 CET	443	49778	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.913979053 CET	443	49778	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.920213938 CET	443	49775	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:13.920583963 CET	49775	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:13.920617104 CET	443	49775	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:13.920998096 CET	443	49775	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:13.921456099 CET	49775	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:13.921456099 CET	49775	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:13.921519041 CET	443	49775	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:13.934148073 CET	49771	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.937417030 CET	443	49780	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.937802076 CET	49780	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.937819004 CET	443	49780	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.938837051 CET	443	49780	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.938904047 CET	443	49777	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.938941956 CET	49780	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.939323902 CET	49780	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.939323902 CET	49780	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.939342976 CET	443	49780	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.939383984 CET	443	49780	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.939507008 CET	49777	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.939518929 CET	443	49777	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.940618992 CET	443	49777	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.940815926 CET	49777	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.940968990 CET	49777	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.941082001 CET	443	49777	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.941179037 CET	49777	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.966156960 CET	49778	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.966162920 CET	49775	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:13.966173887 CET	443	49778	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.966200113 CET	49776	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.982357025 CET	49780	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:13.982366085 CET	443	49780	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:13.983339071 CET	443	49777	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:13.998166084 CET	49777	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:13.998174906 CET	443	49777	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.014147997 CET	49778	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:14.044733047 CET	49780	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:14.045157909 CET	49777	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:14.057492018 CET	443	49770	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:14.057831049 CET	443	49770	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:14.057904959 CET	49770	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:14.061286926 CET	49770	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:14.061306000 CET	443	49770	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:14.073854923 CET	443	49771	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:14.074016094 CET	443	49771	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:14.074131966 CET	49771	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:14.074394941 CET	49771	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:14.074415922 CET	443	49771	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:14.075886011 CET	49784	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.075987101 CET	443	49784	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.076190948 CET	49784	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.078186035 CET	49784	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.078198910 CET	443	49784	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.079502106 CET	49785	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.079536915 CET	443	49785	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.080684900 CET	49785	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.080887079 CET	49785	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.080899000 CET	443	49785	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.134596109 CET	443	49780	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:14.134676933 CET	443	49780	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:14.134860992 CET	49780	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:14.135376930 CET	49780	443	192.168.2.17	142.250.186.164
Jan 2, 2025 12:16:14.135397911 CET	443	49780	142.250.186.164	192.168.2.17
Jan 2, 2025 12:16:14.141357899 CET	49786	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:14.141421080 CET	443	49786	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:14.141588926 CET	49786	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:14.142877102 CET	49786	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:14.142894030 CET	443	49786	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:14.191696882 CET	49787	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.191750050 CET	443	49787	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.191940069 CET	49787	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.193418026 CET	49787	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.193432093 CET	443	49787	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.196506977 CET	443	49776	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.196561098 CET	443	49776	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.196603060 CET	443	49776	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.196659088 CET	49776	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:14.196681023 CET	443	49776	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.196773052 CET	443	49776	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.196813107 CET	49776	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:14.196820974 CET	443	49776	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.196908951 CET	443	49776	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.196945906 CET	49776	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:14.198596001 CET	49776	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:14.198678017 CET	443	49778	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.198723078 CET	443	49778	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.198771000 CET	443	49778	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.198797941 CET	443	49778	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.198976994 CET	443	49778	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.199080944 CET	49778	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:14.202193975 CET	49778	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:14.202338934 CET	443	49775	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:14.202366114 CET	443	49775	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:14.202373981 CET	443	49775	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:14.202418089 CET	443	49775	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:14.202449083 CET	49775	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:14.202656031 CET	49775	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:14.210671902 CET	49776	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:14.210686922 CET	443	49776	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.210906029 CET	49775	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:14.210928917 CET	443	49775	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:14.211121082 CET	49778	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:14.211127996 CET	443	49778	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.231230021 CET	443	49777	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.231288910 CET	443	49777	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.231336117 CET	443	49777	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.231369972 CET	443	49777	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.231381893 CET	49777	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:14.231389046 CET	443	49777	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.231618881 CET	49777	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:14.231627941 CET	443	49777	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.231817007 CET	443	49777	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.231853962 CET	49777	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:14.233985901 CET	49777	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:14.233985901 CET	49777	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:14.321269035 CET	443	49781	142.250.184.228	192.168.2.17
Jan 2, 2025 12:16:14.323909998 CET	49781	443	192.168.2.17	142.250.184.228
Jan 2, 2025 12:16:14.323925972 CET	443	49781	142.250.184.228	192.168.2.17
Jan 2, 2025 12:16:14.325030088 CET	443	49781	142.250.184.228	192.168.2.17
Jan 2, 2025 12:16:14.325153112 CET	49781	443	192.168.2.17	142.250.184.228
Jan 2, 2025 12:16:14.326598883 CET	49781	443	192.168.2.17	142.250.184.228
Jan 2, 2025 12:16:14.326702118 CET	443	49781	142.250.184.228	192.168.2.17
Jan 2, 2025 12:16:14.335000038 CET	443	49783	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:14.336430073 CET	49783	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:14.338979006 CET	49783	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:14.338987112 CET	443	49783	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:14.339458942 CET	49783	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:14.339463949 CET	443	49783	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:14.379374027 CET	49781	443	192.168.2.17	142.250.184.228
Jan 2, 2025 12:16:14.379395962 CET	443	49781	142.250.184.228	192.168.2.17
Jan 2, 2025 12:16:14.427191973 CET	49781	443	192.168.2.17	142.250.184.228
Jan 2, 2025 12:16:14.466537952 CET	443	49783	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:14.466602087 CET	443	49783	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:14.474070072 CET	49783	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:14.539129019 CET	49777	443	192.168.2.17	142.250.185.98
Jan 2, 2025 12:16:14.539144039 CET	443	49777	142.250.185.98	192.168.2.17
Jan 2, 2025 12:16:14.596412897 CET	443	49786	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:14.618621111 CET	49783	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:14.618639946 CET	443	49783	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:14.623570919 CET	49786	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:14.623584986 CET	443	49786	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:14.623970985 CET	443	49786	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:14.667103052 CET	49786	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:14.702353001 CET	443	49784	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.706067085 CET	49786	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:14.706238031 CET	443	49786	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:14.706459045 CET	49784	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.706475973 CET	443	49784	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.706593037 CET	49786	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:14.707623959 CET	443	49784	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.707680941 CET	49784	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.709213972 CET	49784	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.709285021 CET	443	49784	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.709450006 CET	49784	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.709459066 CET	443	49784	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.717665911 CET	443	49785	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.717916965 CET	49785	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.717936993 CET	443	49785	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.719078064 CET	443	49785	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.719131947 CET	49785	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.719738960 CET	49785	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.719816923 CET	443	49785	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.719862938 CET	49785	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.744868994 CET	49788	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:14.744921923 CET	443	49788	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:14.745012999 CET	49788	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:14.745280981 CET	49788	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:14.745296001 CET	443	49788	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:14.751328945 CET	443	49786	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:14.762787104 CET	49784	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.763021946 CET	49785	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.763036966 CET	443	49785	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.809221029 CET	49785	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.828995943 CET	443	49787	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.829257965 CET	49787	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.829269886 CET	443	49787	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.830312967 CET	443	49787	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.830378056 CET	49787	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.830718040 CET	49787	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.830775976 CET	443	49787	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.830988884 CET	49787	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.830995083 CET	443	49787	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.863948107 CET	443	49786	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:14.863972902 CET	443	49786	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:14.864017010 CET	49786	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:14.864026070 CET	443	49786	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:14.864042997 CET	443	49786	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:14.864063025 CET	49786	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:14.864110947 CET	49786	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:14.864635944 CET	49786	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:14.864650011 CET	443	49786	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:14.868266106 CET	49789	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:14.868299007 CET	443	49789	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:14.868402004 CET	49789	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:14.868890047 CET	49789	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:14.868905067 CET	443	49789	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:14.873132944 CET	49787	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.983086109 CET	443	49784	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.983258963 CET	443	49784	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:14.983316898 CET	49784	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.983728886 CET	49784	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:14.983746052 CET	443	49784	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:15.006680012 CET	443	49785	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:15.006797075 CET	443	49785	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:15.006848097 CET	49785	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:15.007575035 CET	49785	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:15.007591963 CET	443	49785	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:15.112289906 CET	443	49787	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:15.113086939 CET	443	49787	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:15.113143921 CET	49787	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:15.113289118 CET	49787	443	192.168.2.17	172.217.18.4
Jan 2, 2025 12:16:15.113305092 CET	443	49787	172.217.18.4	192.168.2.17
Jan 2, 2025 12:16:15.200967073 CET	443	49788	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:15.201100111 CET	49788	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:15.201438904 CET	49788	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:15.201447964 CET	443	49788	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:15.201617956 CET	49788	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:15.201623917 CET	443	49788	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:15.328315020 CET	443	49788	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:15.328387022 CET	443	49788	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:15.328397036 CET	49788	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:15.328438044 CET	49788	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:15.329297066 CET	49788	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:15.329314947 CET	443	49788	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:15.330374002 CET	443	49789	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:15.330621004 CET	49789	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:15.330634117 CET	443	49789	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:15.330998898 CET	443	49789	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:15.331309080 CET	49789	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:15.331379890 CET	443	49789	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:15.331446886 CET	49789	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:15.379323006 CET	443	49789	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:15.456314087 CET	443	49789	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:15.456342936 CET	443	49789	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:15.456389904 CET	49789	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:15.456401110 CET	443	49789	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:15.456417084 CET	443	49789	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:15.456438065 CET	49789	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:15.456470013 CET	49789	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:15.456988096 CET	49789	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:15.457005978 CET	443	49789	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:16.124897957 CET	49790	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:16.124947071 CET	443	49790	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:16.125077009 CET	49790	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:16.125371933 CET	49790	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:16.125387907 CET	443	49790	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:16.581110954 CET	443	49790	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:16.581324100 CET	49790	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:16.582870007 CET	49790	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:16.582881927 CET	443	49790	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:16.584006071 CET	49790	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:16.584012985 CET	443	49790	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:16.584513903 CET	49790	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:16.584522009 CET	443	49790	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:16.586904049 CET	49791	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:16.586961985 CET	443	49791	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:16.587032080 CET	49791	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:16.587368011 CET	49791	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:16.587383032 CET	443	49791	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:16.771250963 CET	443	49790	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:16.771327972 CET	443	49790	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:16.771336079 CET	49790	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:16.771447897 CET	49790	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:16.775494099 CET	49790	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:16.775507927 CET	443	49790	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:17.061697006 CET	443	49791	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:17.061995983 CET	49791	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:17.062025070 CET	443	49791	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:17.062433004 CET	443	49791	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:17.062932968 CET	49791	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:17.062994957 CET	443	49791	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:17.063196898 CET	49791	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:17.103338003 CET	443	49791	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:17.203558922 CET	443	49791	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:17.203639984 CET	443	49791	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:17.203706980 CET	49791	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:17.204061031 CET	49791	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:17.204080105 CET	443	49791	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:17.207039118 CET	49792	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:17.207086086 CET	443	49792	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:17.207160950 CET	49792	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:17.207374096 CET	49792	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:17.207389116 CET	443	49792	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:17.376714945 CET	49793	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:17.376751900 CET	443	49793	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:17.376856089 CET	49793	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:17.377192974 CET	49793	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:17.377204895 CET	443	49793	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:17.524373055 CET	49795	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:17.524396896 CET	443	49795	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:17.524492979 CET	49795	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:17.526323080 CET	49795	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:17.526334047 CET	443	49795	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:17.539729118 CET	49796	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:17.539772034 CET	443	49796	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:17.539846897 CET	49796	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:17.542665958 CET	49796	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:17.542681932 CET	443	49796	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:17.680996895 CET	443	49792	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:17.736164093 CET	49792	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:17.841680050 CET	443	49793	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:17.842025995 CET	49793	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:17.859334946 CET	49792	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:17.859358072 CET	443	49792	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:17.859906912 CET	443	49792	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:17.862159014 CET	49793	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:17.862179995 CET	443	49793	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:17.862416029 CET	49793	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:17.862421036 CET	443	49793	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:17.862809896 CET	49792	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:17.862880945 CET	443	49792	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:17.864737988 CET	49792	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:17.907337904 CET	443	49792	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:17.988559008 CET	443	49795	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:17.988642931 CET	49795	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:17.989525080 CET	443	49793	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:17.989618063 CET	443	49793	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:17.989634037 CET	49793	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:17.989667892 CET	49793	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:17.991317987 CET	49795	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:17.991328001 CET	443	49795	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:17.991585016 CET	443	49795	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:17.991888046 CET	443	49792	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:17.991966963 CET	443	49792	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:17.992037058 CET	49792	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:17.992826939 CET	49793	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:17.992841005 CET	443	49793	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:17.996283054 CET	49792	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:17.996299028 CET	443	49792	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:18.037164927 CET	49795	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:18.068985939 CET	49795	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:18.111330986 CET	443	49795	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:18.187880039 CET	443	49795	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:18.187968016 CET	443	49795	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:18.188018084 CET	49795	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:18.188312054 CET	49795	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:18.188327074 CET	443	49795	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:18.287089109 CET	443	49796	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:18.287168980 CET	49796	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:18.348628998 CET	49796	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:18.348653078 CET	443	49796	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:18.349015951 CET	443	49796	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:18.349070072 CET	49796	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:18.350919008 CET	49796	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:18.391340017 CET	443	49796	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:18.849185944 CET	443	49796	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:18.849266052 CET	49796	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:18.849298000 CET	443	49796	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:18.849339962 CET	49796	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:18.849421024 CET	443	49796	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:18.849479914 CET	443	49796	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:18.849533081 CET	49796	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:18.851577997 CET	49796	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:18.851598024 CET	443	49796	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:19.059910059 CET	49797	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:19.059933901 CET	443	49797	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:19.060216904 CET	49797	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:19.060811043 CET	49797	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:19.060828924 CET	443	49797	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:19.795847893 CET	443	49797	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:19.795938015 CET	49797	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:19.796477079 CET	49797	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:19.796482086 CET	443	49797	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:19.798135042 CET	49797	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:19.798142910 CET	443	49797	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:20.069653988 CET	443	49797	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:20.069720984 CET	49797	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:20.069741011 CET	443	49797	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:20.069757938 CET	443	49797	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:20.069803953 CET	49797	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:20.071275949 CET	49797	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:20.071291924 CET	443	49797	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:20.248940945 CET	49798	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:20.248989105 CET	443	49798	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:20.249073982 CET	49798	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:20.249330044 CET	49798	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:20.249347925 CET	443	49798	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:20.972804070 CET	443	49798	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:20.972901106 CET	49798	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:20.973349094 CET	49798	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:20.973359108 CET	443	49798	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:20.974759102 CET	49798	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:20.974764109 CET	443	49798	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:21.245798111 CET	443	49798	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:21.245882034 CET	49798	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:21.245903015 CET	443	49798	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:21.245914936 CET	443	49798	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:21.246068954 CET	49798	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:21.246654987 CET	49798	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:21.246675014 CET	443	49798	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:21.436374903 CET	49799	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:21.436418056 CET	443	49799	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:21.436563969 CET	49799	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:21.436970949 CET	49799	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:21.436980963 CET	443	49799	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:21.591065884 CET	49800	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:21.591114044 CET	443	49800	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:21.593950987 CET	49800	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:21.595993996 CET	49800	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:21.596010923 CET	443	49800	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:22.078051090 CET	443	49800	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:22.078368902 CET	49800	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:22.078381062 CET	443	49800	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:22.078775883 CET	443	49800	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:22.079137087 CET	49800	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:22.079217911 CET	443	49800	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:22.079329967 CET	49800	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:22.127327919 CET	443	49800	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:22.182931900 CET	443	49799	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:22.183007002 CET	49799	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:22.183557987 CET	49799	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:22.183566093 CET	443	49799	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:22.185009003 CET	49799	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:22.185019970 CET	443	49799	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:22.262623072 CET	443	49800	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:22.262739897 CET	443	49800	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:22.262804985 CET	49800	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:22.263633966 CET	49800	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:22.263654947 CET	443	49800	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:22.266350031 CET	49801	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:22.266398907 CET	443	49801	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:22.266505003 CET	49801	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:22.266724110 CET	49801	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:22.266740084 CET	443	49801	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:22.458085060 CET	443	49799	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:22.458179951 CET	49799	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:22.458190918 CET	443	49799	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:22.458273888 CET	443	49799	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:22.458300114 CET	49799	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:22.458324909 CET	49799	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:22.459199905 CET	49799	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:22.459211111 CET	443	49799	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:22.676034927 CET	49802	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:22.676079035 CET	443	49802	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:22.676271915 CET	49802	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:22.676610947 CET	49802	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:22.676628113 CET	443	49802	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:22.740758896 CET	443	49801	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:22.741069078 CET	49801	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:22.741090059 CET	443	49801	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:22.741506100 CET	443	49801	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:22.741803885 CET	49801	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:22.741966009 CET	49801	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:22.742389917 CET	443	49801	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:22.786298037 CET	49801	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:22.886012077 CET	443	49801	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:22.886101961 CET	443	49801	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:22.886188030 CET	49801	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:22.886696100 CET	49801	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:22.886720896 CET	443	49801	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:23.421952009 CET	443	49802	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:23.422086000 CET	49802	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:23.422538042 CET	49802	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:23.422545910 CET	443	49802	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:23.423854113 CET	49802	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:23.423860073 CET	443	49802	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:23.706115007 CET	443	49802	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:23.706218958 CET	49802	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:23.706226110 CET	443	49802	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:23.706268072 CET	49802	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:23.708014965 CET	49802	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:23.708028078 CET	443	49802	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:23.884607077 CET	49803	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:23.884650946 CET	443	49803	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:23.884788036 CET	49803	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:23.885030031 CET	49803	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:23.885046005 CET	443	49803	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:24.249063969 CET	443	49781	142.250.184.228	192.168.2.17
Jan 2, 2025 12:16:24.249165058 CET	443	49781	142.250.184.228	192.168.2.17
Jan 2, 2025 12:16:24.249274969 CET	49781	443	192.168.2.17	142.250.184.228
Jan 2, 2025 12:16:24.609477043 CET	443	49803	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:24.609541893 CET	49803	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:24.609982014 CET	49803	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:24.609989882 CET	443	49803	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:24.610209942 CET	49803	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:24.610215902 CET	443	49803	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:24.882019997 CET	443	49803	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:24.882118940 CET	49803	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:24.882134914 CET	443	49803	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:24.882158041 CET	443	49803	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:24.882168055 CET	49803	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:24.882189035 CET	49803	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:24.882853031 CET	49803	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:24.882868052 CET	443	49803	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:25.073402882 CET	49804	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:25.073446989 CET	443	49804	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:25.073527098 CET	49804	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:25.073818922 CET	49804	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:25.073833942 CET	443	49804	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:25.187630892 CET	49781	443	192.168.2.17	142.250.184.228
Jan 2, 2025 12:16:25.187659979 CET	443	49781	142.250.184.228	192.168.2.17
Jan 2, 2025 12:16:25.251224041 CET	49805	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:25.251262903 CET	443	49805	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:25.251344919 CET	49805	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:25.251527071 CET	49805	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:25.251540899 CET	443	49805	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:25.255505085 CET	49806	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:25.255538940 CET	443	49806	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:25.255605936 CET	49806	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:25.256078959 CET	49806	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:25.256091118 CET	443	49806	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:25.711901903 CET	443	49805	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:25.712515116 CET	49805	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:25.712552071 CET	443	49805	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:25.713066101 CET	49805	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:25.713072062 CET	443	49805	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:25.713557005 CET	443	49806	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:25.713630915 CET	49806	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:25.716469049 CET	49806	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:25.716476917 CET	443	49806	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:25.716846943 CET	443	49806	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:25.716900110 CET	49806	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:25.717257023 CET	49806	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:25.763329029 CET	443	49806	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:25.786871910 CET	443	49804	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:25.786940098 CET	49804	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:25.787436962 CET	49804	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:25.787445068 CET	443	49804	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:25.788912058 CET	49804	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:25.788918018 CET	443	49804	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:25.840970039 CET	443	49805	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:25.841048002 CET	443	49805	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:25.841145992 CET	49805	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:25.841185093 CET	49805	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:25.841200113 CET	443	49805	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:26.057718039 CET	443	49804	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:26.057804108 CET	49804	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:26.057831049 CET	443	49804	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:26.057848930 CET	443	49804	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:26.057878971 CET	49804	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:26.057908058 CET	49804	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:26.058690071 CET	49804	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:26.058706045 CET	443	49804	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:26.143625975 CET	443	49806	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:26.143642902 CET	443	49806	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:26.143717051 CET	443	49806	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:26.143716097 CET	49806	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:26.143764973 CET	49806	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:26.150019884 CET	49806	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:26.150047064 CET	443	49806	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:26.241115093 CET	49807	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:26.241168976 CET	443	49807	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:26.241313934 CET	49807	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:26.241466999 CET	49807	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:26.241508007 CET	443	49807	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:26.241566896 CET	49807	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:26.250747919 CET	49808	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:26.250782967 CET	443	49808	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:26.251127005 CET	49808	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:26.251418114 CET	49808	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:26.251435041 CET	443	49808	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:26.585875034 CET	49809	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:26.585912943 CET	443	49809	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:26.586133003 CET	49809	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:26.586527109 CET	49809	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:26.586536884 CET	443	49809	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:26.843452930 CET	49810	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:26.843487024 CET	443	49810	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:26.843661070 CET	49810	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:26.843916893 CET	49810	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:26.843930006 CET	443	49810	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:26.968856096 CET	443	49808	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:26.968925953 CET	49808	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:26.969476938 CET	49808	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:26.969486952 CET	443	49808	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:26.969866991 CET	49808	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:26.969873905 CET	443	49808	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:27.043827057 CET	443	49809	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:27.044361115 CET	49809	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:27.044372082 CET	443	49809	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:27.044728994 CET	443	49809	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:27.045078039 CET	49809	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:27.045133114 CET	443	49809	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:27.045404911 CET	49809	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:27.087332964 CET	443	49809	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:27.197221994 CET	443	49809	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:27.197318077 CET	443	49809	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:27.197405100 CET	49809	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:27.198822021 CET	49809	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:27.198837042 CET	443	49809	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:27.240228891 CET	443	49808	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:27.240335941 CET	443	49808	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:27.240370035 CET	49808	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:27.240396976 CET	49808	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:27.261384010 CET	49808	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:27.261414051 CET	443	49808	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:27.266098976 CET	49811	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:27.266135931 CET	443	49811	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:27.266205072 CET	49811	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:27.270313025 CET	49811	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:27.270329952 CET	443	49811	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:27.321590900 CET	443	49810	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:27.322354078 CET	49810	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:27.322374105 CET	443	49810	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:27.323257923 CET	49810	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:27.323263884 CET	443	49810	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:27.451651096 CET	443	49810	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:27.451711893 CET	443	49810	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:27.451782942 CET	49810	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:27.451901913 CET	49810	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:27.451917887 CET	443	49810	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:27.534363031 CET	49812	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:27.534404993 CET	443	49812	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:27.534540892 CET	49812	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:27.534765005 CET	49812	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:27.534779072 CET	443	49812	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:27.737575054 CET	49813	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:27.737617016 CET	443	49813	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:27.737900019 CET	49813	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:27.738048077 CET	49813	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:27.738081932 CET	443	49813	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:27.738132954 CET	49813	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:27.743053913 CET	443	49811	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:27.743623972 CET	49811	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:27.743650913 CET	443	49811	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:27.744055033 CET	443	49811	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:27.744970083 CET	49811	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:27.745044947 CET	443	49811	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:27.747083902 CET	49811	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:27.787338972 CET	443	49811	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:27.809556007 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:27.809593916 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:27.809766054 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:27.814052105 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:27.814083099 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:27.877548933 CET	443	49811	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:27.877628088 CET	443	49811	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:27.878808022 CET	49811	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:27.878885031 CET	49811	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:27.878907919 CET	443	49811	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.081017971 CET	49816	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:28.081064939 CET	443	49816	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:28.081137896 CET	49816	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:28.085870981 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.085925102 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.085983992 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.086330891 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.086345911 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.087779999 CET	49816	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:28.087830067 CET	443	49816	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:28.087894917 CET	49816	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:28.216614008 CET	49818	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:28.216639042 CET	443	49818	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:28.216722965 CET	49818	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:28.216878891 CET	49818	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:28.216928005 CET	443	49818	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:28.216981888 CET	49818	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:28.257751942 CET	443	49812	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:28.257824898 CET	49812	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:28.262357950 CET	49812	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:28.262367010 CET	443	49812	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:28.267267942 CET	49812	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:28.267278910 CET	443	49812	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:28.268560886 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.268573046 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.268677950 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.269090891 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.269100904 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.281486034 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.282030106 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.282046080 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.283114910 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.283193111 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.287391901 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.287472963 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.287998915 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.288007975 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.334233046 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.463752031 CET	49820	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:28.463819027 CET	443	49820	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:28.463890076 CET	49820	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:28.464139938 CET	49820	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:28.464155912 CET	443	49820	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:28.510719061 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.510746956 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.510755062 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.510768890 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.510799885 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.510807037 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.510824919 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.510862112 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.510885000 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.529104948 CET	443	49812	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:28.529217958 CET	443	49812	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:28.529287100 CET	49812	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:28.530129910 CET	49812	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:28.530147076 CET	443	49812	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:28.531348944 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.531378031 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.531420946 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.531429052 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.531452894 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.531476021 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.533025026 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.533042908 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.533097029 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.533103943 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.533178091 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.551994085 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.553886890 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.553900003 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.555011988 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.555073977 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.555593014 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.555653095 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.555824041 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.555830956 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.606481075 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.619184017 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.619215965 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.619256020 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.619282961 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.619307041 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.619318962 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.620531082 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.620548964 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.620604038 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.620623112 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.620811939 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.621537924 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.621556997 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.621609926 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.621620893 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.621774912 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.622948885 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.622967958 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.623037100 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.623058081 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.623418093 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.707705975 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.707742929 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.707806110 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.707834959 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.707851887 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.707871914 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.708242893 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.708257914 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.708311081 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.708319902 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.708741903 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.708842039 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.708858967 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.708947897 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.708947897 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.708956003 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.709093094 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.709676027 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.709692001 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.709737062 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.709744930 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.709796906 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.710577011 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.710593939 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.710633993 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.710644007 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.710664034 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.710688114 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.711373091 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.711395025 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.711433887 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.711442947 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.711462975 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.711481094 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.725323915 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.725711107 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.725747108 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.726835966 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.726891994 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.727533102 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.727602959 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.728082895 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.728099108 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.736412048 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.736433983 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.736440897 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.736478090 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.736486912 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.736489058 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.736502886 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.736521006 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.736541033 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.736558914 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.780227900 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.783787012 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.783818007 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.783870935 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.783880949 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.783929110 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.787873030 CET	49821	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:28.787923098 CET	443	49821	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:28.789308071 CET	49821	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:28.789552927 CET	49821	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:28.789577961 CET	443	49821	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:28.795742035 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.795800924 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.795811892 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.795819998 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.795845985 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.795927048 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.796124935 CET	49815	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.796138048 CET	443	49815	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.813539028 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.813570023 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.813632011 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.813673019 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.813688993 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.813827038 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.823945045 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.823965073 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.824013948 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.824033976 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.824064016 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.824079990 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.862606049 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.862637043 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.862644911 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.862668991 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.862682104 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.862688065 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.862693071 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.862718105 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.862735033 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.862754107 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.933953047 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.934010983 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.934031010 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.934062958 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.934088945 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.934088945 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.935395956 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.935620070 CET	49817	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.935636044 CET	443	49817	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.941056967 CET	443	49820	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:28.941956997 CET	49820	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:28.941982985 CET	443	49820	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:28.943814039 CET	49820	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:28.943825006 CET	443	49820	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:28.946043968 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.946068048 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.946135044 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.946146965 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.946204901 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.949316025 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.949337006 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.949415922 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:28.949438095 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:28.949600935 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.031728029 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.031760931 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.031887054 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.031887054 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.031914949 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.032186031 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.032591105 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.032618046 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.032685041 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.032691956 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.032773972 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.033467054 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.033489943 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.033539057 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.033545971 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.033581972 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.036214113 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.036240101 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.036302090 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.036323071 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.036349058 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.036365986 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.071875095 CET	443	49820	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:29.071966887 CET	443	49820	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:29.072242975 CET	49820	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:29.072380066 CET	49820	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:29.072397947 CET	443	49820	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:29.118408918 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.118434906 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.118496895 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.118521929 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.118557930 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.118803024 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.118820906 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.118870020 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.118879080 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.118916035 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.119247913 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.119266987 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.119327068 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.119333029 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.119370937 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.119595051 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.119609118 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.119668961 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.119676113 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.119714022 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.120091915 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.120105982 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.120173931 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.120182037 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.120271921 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.120495081 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.120512009 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.120541096 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.120547056 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.120577097 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.120594025 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.120944023 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.120966911 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.121006966 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.121016026 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.121052027 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.154499054 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.205282927 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.205302954 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.205360889 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.205389977 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.205410004 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.205436945 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.205696106 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.205709934 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.205776930 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.205785990 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.205826044 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.206083059 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.206099033 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.206162930 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.206173897 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.206193924 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.206206083 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.206212044 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.206240892 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.206240892 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.206249952 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.206273079 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.206300020 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.206548929 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.206573963 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.206639051 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.206648111 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.206688881 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.207001925 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.207016945 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.207079887 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.207089901 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.207129955 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.207194090 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.207209110 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.207252026 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.207258940 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.207292080 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.291327953 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.291348934 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.291409969 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.291419983 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.291459084 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.291631937 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.291647911 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.291676998 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.291681051 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.291698933 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.291713953 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.291982889 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.291997910 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.292058945 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.292067051 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.292117119 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.292355061 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.292370081 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.292398930 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.292403936 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.292412996 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.292428017 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.292459011 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.292464972 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.292486906 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.292524099 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.292857885 CET	49819	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.292874098 CET	443	49819	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.567446947 CET	443	49821	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:29.567517042 CET	49821	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:29.568136930 CET	49821	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:29.568151951 CET	443	49821	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:29.570220947 CET	49821	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:29.570235014 CET	443	49821	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:29.727555990 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.727596998 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.727684021 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.728056908 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.728108883 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.728202105 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.728431940 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.728455067 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.728626013 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.728640079 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.782227039 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.782270908 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.782371044 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.783830881 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.783845901 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.792860985 CET	49825	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:29.792898893 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:29.793144941 CET	49825	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:29.793368101 CET	49825	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:29.793380976 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:29.842783928 CET	443	49821	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:29.842850924 CET	49821	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:29.842869043 CET	443	49821	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:29.842915058 CET	49821	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:29.843787909 CET	49821	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:29.843811989 CET	443	49821	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:29.861088037 CET	49826	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.861133099 CET	443	49826	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.861226082 CET	49826	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.861448050 CET	49826	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.861462116 CET	443	49826	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.900187969 CET	49827	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.900230885 CET	443	49827	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:29.900306940 CET	49827	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.900661945 CET	49827	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:29.900674105 CET	443	49827	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.086498022 CET	49828	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:30.086544037 CET	443	49828	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:30.086642981 CET	49828	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:30.086863041 CET	49828	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:30.086878061 CET	443	49828	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:30.198153019 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.198559999 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.198581934 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.199644089 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.199707985 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.200314999 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.200377941 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.200472116 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.200478077 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.203277111 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.203701019 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.203732014 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.204761982 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.204822063 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.205159903 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.205219030 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.205326080 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.205333948 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.211087942 CET	49829	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:30.211137056 CET	443	49829	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:30.211234093 CET	49829	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:30.211532116 CET	49829	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:30.211545944 CET	443	49829	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:30.245289087 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.245358944 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.255426884 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.255707026 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.255724907 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.256795883 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.256866932 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.257205963 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.257266998 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.257448912 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.303335905 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.309204102 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.309216022 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.319627047 CET	443	49826	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.319881916 CET	49826	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.319894075 CET	443	49826	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.321000099 CET	443	49826	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.321099043 CET	49826	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.321432114 CET	49826	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.321499109 CET	443	49826	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.321604967 CET	49826	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.321613073 CET	443	49826	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.356236935 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.364520073 CET	443	49827	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.365535021 CET	49827	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.365551949 CET	443	49827	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.366580963 CET	443	49827	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.366643906 CET	49827	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.367113113 CET	49827	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.367163897 CET	443	49827	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.367358923 CET	49827	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.372255087 CET	49826	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.415334940 CET	443	49827	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.417743921 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.417769909 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.417779922 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.417790890 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.417824030 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.417846918 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.417860031 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.417893887 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.417915106 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.418610096 CET	443	49826	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.418690920 CET	443	49826	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.418760061 CET	49826	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.418975115 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.418993950 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.419061899 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.419069052 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.419110060 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.419219971 CET	49827	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.419235945 CET	443	49827	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.420284986 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.420325041 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.420587063 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.420654058 CET	49826	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.420665026 CET	443	49826	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.421161890 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.421175003 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.431421041 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.431441069 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.431449890 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.431458950 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.431476116 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.431512117 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.431544065 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.431557894 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.431593895 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.431883097 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.431898117 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.431915998 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.431960106 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.431965113 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.431988955 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.432275057 CET	49825	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:30.432282925 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.433456898 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.433520079 CET	49825	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:30.434622049 CET	49825	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:30.434698105 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.434832096 CET	49825	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:30.444768906 CET	49832	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:30.444807053 CET	443	49832	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:30.444879055 CET	49832	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:30.445102930 CET	49832	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:30.445117950 CET	443	49832	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:30.461674929 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.461699009 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.461801052 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.461801052 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.461812973 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.467195988 CET	49827	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.476840019 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.476866007 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.476946115 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.476960897 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.479331017 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.483202934 CET	49825	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:30.483208895 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.483894110 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.483922005 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.483930111 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.483942986 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.483949900 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.483952999 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.483977079 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.483999968 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.484025002 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.484030008 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.484044075 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.484910011 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.484946012 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.484970093 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.484987974 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.484994888 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.485027075 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.487116098 CET	443	49827	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.487180948 CET	443	49827	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.488229036 CET	49827	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.490889072 CET	49827	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.490905046 CET	443	49827	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.506006002 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.506026983 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.506133080 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.506150007 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.507754087 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.507793903 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.507806063 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.507829905 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.507843971 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.507858038 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.507875919 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.507875919 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.508774996 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.508790970 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.508856058 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.508863926 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.522633076 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.522655010 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.522716999 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.522727013 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.523629904 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.523650885 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.523679018 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.523691893 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.523698092 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.523742914 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.524660110 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.524674892 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.524733067 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.524739981 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.525437117 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.525485992 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.525490999 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.525521994 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.525562048 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.528708935 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.528727055 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.528769016 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.528781891 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.528800011 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.531233072 CET	49825	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:30.549285889 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.549319029 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.549380064 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.549398899 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.549417973 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.575407982 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.575429916 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.575454950 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.575468063 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.575480938 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.575509071 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.576488018 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.576514959 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.576528072 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.576541901 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.576545000 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.576556921 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.576572895 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.576598883 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.576693058 CET	443	49828	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:30.577224970 CET	49828	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:30.577248096 CET	443	49828	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:30.577502012 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.577518940 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.577553034 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.577557087 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.577564001 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.577589035 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.577620983 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.577625990 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.577637911 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.577678919 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.577755928 CET	49828	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:30.577760935 CET	443	49828	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:30.588756084 CET	49823	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.588787079 CET	443	49823	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.589230061 CET	49824	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.589245081 CET	443	49824	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.593374014 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.593390942 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.593431950 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.593461037 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.593472958 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.593489885 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.595184088 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.595221043 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.595231056 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.595257998 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.595263958 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.595271111 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.595335007 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.596295118 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.596312046 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.596347094 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.596407890 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.596407890 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.596422911 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.597887993 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.597908020 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.597944021 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.597956896 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.597969055 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.597995043 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.598017931 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.598030090 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.598073959 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.598422050 CET	49822	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.598433018 CET	443	49822	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.709342957 CET	443	49828	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:30.709513903 CET	443	49828	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:30.709588051 CET	49828	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:30.709625006 CET	49828	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:30.709645033 CET	443	49828	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:30.740969896 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.740993977 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.741002083 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.741038084 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.741051912 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.741060972 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.741071939 CET	49825	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:30.741094112 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.741107941 CET	49825	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:30.741138935 CET	49825	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:30.812525988 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.812536955 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.812587976 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.812621117 CET	49825	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:30.812654018 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.812669992 CET	49825	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:30.812690020 CET	49825	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:30.844237089 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.844283104 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.844327927 CET	49825	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:30.844367027 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.844387054 CET	49825	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:30.844458103 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.844532967 CET	49825	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:30.844753027 CET	49825	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:30.844769001 CET	443	49825	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:30.872838974 CET	49833	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.872925043 CET	443	49833	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.873018026 CET	49833	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.873364925 CET	49833	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.873389006 CET	443	49833	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.877892971 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.878418922 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.878434896 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.879585028 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.879659891 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.880765915 CET	49834	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.880798101 CET	443	49834	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.880924940 CET	49834	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.881290913 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.881378889 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.881619930 CET	49834	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.881628036 CET	443	49834	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.881890059 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:30.881901026 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:30.927462101 CET	443	49829	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:30.927604914 CET	49829	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:30.928075075 CET	49829	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:30.928090096 CET	443	49829	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:30.929544926 CET	49829	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:30.929549932 CET	443	49829	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:30.930224895 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.002388954 CET	49835	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.002435923 CET	443	49835	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.002511978 CET	49835	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.003732920 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.003808975 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.003933907 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.005157948 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.005204916 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.005259991 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.005709887 CET	49835	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.005724907 CET	443	49835	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.006198883 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.006208897 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.007769108 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.007797956 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.011789083 CET	49838	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:31.011807919 CET	443	49838	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:31.011874914 CET	49838	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:31.012310982 CET	49839	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.012340069 CET	443	49839	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.012371063 CET	49838	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:31.012379885 CET	443	49838	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:31.012403965 CET	49839	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.013722897 CET	49839	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.013735056 CET	443	49839	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.015088081 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.015125990 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.015330076 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.016439915 CET	49841	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.016483068 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.016554117 CET	49841	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.017364025 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.017373085 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.017581940 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.017689943 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.017700911 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.017894983 CET	49841	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.017920971 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.018096924 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.018107891 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.049945116 CET	49843	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.049985886 CET	443	49843	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.050084114 CET	49843	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.050534964 CET	49843	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.050549030 CET	443	49843	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.052165985 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.052196980 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.052764893 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.052985907 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.053000927 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.079524994 CET	443	49832	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.079866886 CET	49832	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.079885960 CET	443	49832	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.081020117 CET	443	49832	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.081084013 CET	49832	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.082750082 CET	49832	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.082820892 CET	443	49832	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.083102942 CET	49832	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.083111048 CET	443	49832	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.098249912 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.098289013 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.098299026 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.098319054 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.098354101 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.098356009 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.098370075 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.098417044 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.098417044 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.099457979 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.099478006 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.099549055 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.099549055 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.099558115 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.135234118 CET	49832	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.145745993 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.145775080 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.145844936 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.145862103 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.145903111 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.186583042 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.186600924 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.186670065 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.186685085 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.186686993 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.187649965 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.187670946 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.187709093 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.187709093 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.187719107 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.187753916 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.187781096 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.188822031 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.188844919 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.188908100 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.188915968 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.198807001 CET	443	49829	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:31.198878050 CET	49829	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:31.198903084 CET	443	49829	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:31.198924065 CET	443	49829	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:31.198966980 CET	49829	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:31.200109005 CET	49829	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:31.200125933 CET	443	49829	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:31.231281042 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.233365059 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.233376026 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.233405113 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.233545065 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.233545065 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.233560085 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.233604908 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.273973942 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.274003029 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.274075985 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.274084091 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.274131060 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.274156094 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.274391890 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.274414062 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.274470091 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.274478912 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.275243044 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.275269985 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.275331020 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.275340080 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.275350094 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.275825977 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.276041985 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.276066065 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.276110888 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.276113033 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.276125908 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.276139975 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.276180983 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.276180983 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.276189089 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.276237011 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.276288986 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.288536072 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.337001085 CET	443	49833	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.343723059 CET	443	49834	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.357095957 CET	443	49832	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.357125044 CET	443	49832	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.357198000 CET	443	49832	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.357218027 CET	49832	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.357274055 CET	49832	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.386435032 CET	49833	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.386435032 CET	49834	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.405314922 CET	49833	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.405328989 CET	443	49833	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.406563044 CET	443	49833	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.406636953 CET	49833	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.406807899 CET	49834	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.406817913 CET	443	49834	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.407980919 CET	443	49834	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.408056974 CET	49834	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.420522928 CET	49833	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.420651913 CET	443	49833	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.421094894 CET	49834	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.421171904 CET	443	49834	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.421212912 CET	49831	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.421235085 CET	443	49831	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.422276974 CET	49833	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.422290087 CET	443	49833	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.422451019 CET	49834	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.422458887 CET	443	49834	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.436429977 CET	49832	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.436450958 CET	443	49832	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.438754082 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.438780069 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.438900948 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.439131975 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.439143896 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.465234041 CET	49833	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.465235949 CET	49834	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.477850914 CET	443	49838	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:31.477933884 CET	49838	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:31.479253054 CET	49838	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:31.479259968 CET	443	49838	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:31.479525089 CET	443	49838	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:31.480396032 CET	49838	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:31.488393068 CET	443	49835	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.489713907 CET	49835	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.489722967 CET	443	49835	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.490758896 CET	443	49835	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.490818024 CET	49835	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.491167068 CET	49835	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.491229057 CET	443	49835	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.491370916 CET	49835	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.509192944 CET	49846	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:31.509222984 CET	443	49846	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:31.509340048 CET	49846	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:31.509577990 CET	49846	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:31.509593964 CET	443	49846	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:31.518862009 CET	443	49833	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.518940926 CET	443	49833	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.519049883 CET	49833	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.519817114 CET	49833	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.519824982 CET	443	49833	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.522000074 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.522010088 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.522083998 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.522325039 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.522339106 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.523339033 CET	443	49838	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:31.539336920 CET	443	49835	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.542490005 CET	443	49834	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.542507887 CET	443	49834	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.542576075 CET	49834	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.542587042 CET	443	49834	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.542614937 CET	443	49834	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.542644024 CET	49834	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.542664051 CET	49834	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.544219017 CET	49835	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.544239998 CET	443	49835	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.550730944 CET	49834	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.550744057 CET	443	49834	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.585865974 CET	49848	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:31.585907936 CET	443	49848	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:31.585992098 CET	49848	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:31.586261034 CET	49848	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:31.586275101 CET	443	49848	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:31.592233896 CET	49835	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.604424953 CET	443	49838	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:31.604494095 CET	443	49838	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:31.604542971 CET	49838	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:31.604634047 CET	49838	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:31.604650974 CET	443	49838	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:31.615895987 CET	443	49835	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.615984917 CET	443	49835	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.616380930 CET	49835	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.617063999 CET	49835	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:31.617070913 CET	443	49835	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:31.619703054 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.619740009 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.619918108 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.620153904 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.620166063 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.642496109 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.642791986 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.642818928 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.644006014 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.644073963 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.644527912 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.644790888 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.644797087 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.645026922 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.649017096 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.649255991 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.649270058 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.650298119 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.650362968 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.650655985 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.650703907 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.650816917 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.650823116 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.655343056 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.655576944 CET	49841	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.655586004 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.656632900 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.656703949 CET	49841	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.657058001 CET	49841	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.657124043 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.657231092 CET	49841	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.657236099 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.660578012 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.661844015 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.661859035 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.662919998 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.662990093 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.663279057 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.663336992 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.663403034 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.663537979 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.663554907 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.663660049 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.663671017 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.664597988 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.664666891 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.665040016 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.665101051 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.665262938 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.665271044 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.674964905 CET	443	49839	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.676045895 CET	49839	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.676063061 CET	443	49839	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.677398920 CET	443	49839	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.677457094 CET	49839	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.677830935 CET	49839	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.677894115 CET	443	49839	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.678026915 CET	49839	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.678035021 CET	443	49839	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.684684992 CET	443	49843	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.684964895 CET	49843	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.684978962 CET	443	49843	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.686033964 CET	443	49843	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.686117887 CET	49843	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.686523914 CET	49843	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.686583996 CET	443	49843	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.686683893 CET	49843	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.686691999 CET	443	49843	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.687220097 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.687246084 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.695708036 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.696007013 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.696019888 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.697084904 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.697159052 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.697510958 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.697572947 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.697767019 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.697773933 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.703222990 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.703233004 CET	49841	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.718239069 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.718239069 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.718285084 CET	49839	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.719196081 CET	49851	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:31.719230890 CET	443	49851	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:31.719329119 CET	49851	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:31.719542027 CET	49851	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:31.719551086 CET	443	49851	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:31.734224081 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.735032082 CET	49843	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.750247955 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.957133055 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.957161903 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.957169056 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.957184076 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.957190990 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.957195997 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.957231998 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.957273006 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.957288027 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.957319021 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.966762066 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.966787100 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.966794968 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.966806889 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.966814041 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.966820002 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.966845989 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.966860056 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.966875076 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.966901064 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.969804049 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.969830990 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.969841003 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.969862938 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.969890118 CET	49841	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.969896078 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.969922066 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.969935894 CET	49841	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.969935894 CET	49841	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.969961882 CET	49841	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.974442005 CET	443	49843	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.974462032 CET	443	49843	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.974467993 CET	443	49843	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.974498034 CET	443	49843	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.974543095 CET	49843	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.974574089 CET	443	49843	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.974590063 CET	49843	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.974590063 CET	443	49843	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:31.974613905 CET	49843	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.974646091 CET	49843	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:31.978746891 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.978769064 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.978777885 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.978796959 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.978802919 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.978807926 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.978811026 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.978830099 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.978830099 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.978841066 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.978842974 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.978854895 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.978862047 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.978866100 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.978868008 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.978888988 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.978888988 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.978902102 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:31.978930950 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:31.978987932 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.007031918 CET	443	49839	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.007050991 CET	443	49839	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.007057905 CET	443	49839	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.007085085 CET	443	49839	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.007111073 CET	443	49839	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.008378029 CET	49839	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.008392096 CET	443	49839	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.008445978 CET	49839	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.014789104 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.014812946 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.014821053 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.014854908 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.014870882 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.014879942 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.014882088 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.014897108 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.014910936 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.014935970 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.014960051 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.028274059 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.028295040 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.028364897 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.028384924 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.028485060 CET	49843	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.028496027 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.028522968 CET	443	49843	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.036442995 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.036464930 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.036514997 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.036521912 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.036557913 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.036572933 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.047837973 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.047858000 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.047919989 CET	49841	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.047944069 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.048002958 CET	49841	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.048130989 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.048162937 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.048202038 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.048223019 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.048233986 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.048293114 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.051296949 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.051328897 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.051368952 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.051377058 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.051419973 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.051419973 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.061125994 CET	443	49848	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:32.062103987 CET	49848	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:32.062117100 CET	443	49848	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:32.062530994 CET	443	49848	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:32.062916994 CET	49848	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:32.062988997 CET	443	49848	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:32.063119888 CET	49848	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:32.065927982 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.065958023 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.066020012 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.066032887 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.066063881 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.066083908 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.066226006 CET	443	49839	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.066257000 CET	443	49839	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.066281080 CET	49839	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.066294909 CET	443	49839	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.066313028 CET	49839	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.066339970 CET	49839	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.071752071 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.071788073 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.072356939 CET	49853	80	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.072403908 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.072454929 CET	49854	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.072463036 CET	443	49854	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.072514057 CET	49854	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.072619915 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.072630882 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.072809935 CET	49854	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.072819948 CET	443	49854	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.073532104 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.073549032 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.073601961 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.073776960 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.073788881 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.073982954 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.074001074 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.074052095 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.074057102 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.074088097 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.074103117 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.077147007 CET	80	49853	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.077245951 CET	49853	80	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.078522921 CET	49853	80	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.079015970 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.079032898 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.079117060 CET	49841	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.079129934 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.079214096 CET	49841	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.083424091 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.083451033 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.083479881 CET	80	49853	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.083497047 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.083509922 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.083554983 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.083571911 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.085542917 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.085573912 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.085678101 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.085678101 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.085690975 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.085756063 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.088839054 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.088860989 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.088923931 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.088932991 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.088989019 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.088989019 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.097796917 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.097846985 CET	49841	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.097856998 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.097871065 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.097915888 CET	49841	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.098063946 CET	443	49839	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.098098040 CET	443	49839	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.098117113 CET	443	49839	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.098118067 CET	49839	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.098145008 CET	49839	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.098160028 CET	49839	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.102813959 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.103333950 CET	443	49848	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:32.104619980 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.104692936 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.104765892 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.104824066 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.106667995 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:32.106709957 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:32.106750965 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:32.106786013 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:32.106794119 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:32.106889963 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:32.107100010 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:32.107115984 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:32.107145071 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:32.107156038 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:32.108798981 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.108824015 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.108891964 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.108903885 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.108957052 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.120217085 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.120239973 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.120366096 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.120378971 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.120423079 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.124594927 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.124625921 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.124681950 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.124691963 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.124732018 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.124752998 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.126588106 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.126616955 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.126662016 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.126672029 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.126714945 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.126714945 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.134363890 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.134383917 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.134474039 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.134506941 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.134563923 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.136495113 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.136522055 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.136576891 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.136604071 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.136620998 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.136903048 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.148271084 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.155774117 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.155805111 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.155857086 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.155867100 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.155910015 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.155910015 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.159110069 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.159142017 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.159223080 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.159223080 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.159231901 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.159619093 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.164680958 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.164702892 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.164762020 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.164773941 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.164813042 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.164829969 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.174603939 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.174622059 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.174696922 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.174711943 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.174921989 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.175964117 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.175995111 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.176043034 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.176055908 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.176084995 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.176104069 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.176877975 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.176948071 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.176953077 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.176965952 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.177010059 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.180649042 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.180658102 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.180681944 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.180740118 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.180747986 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.180789948 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.180818081 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.181629896 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.181647062 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.181689024 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.181698084 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.181719065 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.181747913 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.183196068 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.183217049 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.183269024 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.183278084 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.183320045 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.183320045 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.185014963 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.187500000 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.187527895 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.187558889 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.187568903 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.187587976 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.187608957 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.187871933 CET	443	49851	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.188436031 CET	49851	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.188457012 CET	443	49851	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.188962936 CET	49851	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.188967943 CET	443	49851	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.199016094 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.199043989 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.199146032 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.199153900 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.199194908 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.199194908 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.202905893 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.202927113 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.202982903 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.203008890 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.203056097 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.203238010 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.203254938 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.203330040 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.203339100 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.203351974 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.203387976 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.213695049 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.213722944 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.213758945 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.213768959 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.213799000 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.213814974 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.217152119 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.217185020 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.217293024 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.217293024 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.217314959 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.217468977 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.217484951 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.217535973 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.217550039 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.217587948 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.217597008 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.220877886 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.220900059 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.220932961 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.220954895 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.220968008 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.221023083 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.222203016 CET	443	49846	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:32.222270966 CET	49846	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:32.222668886 CET	49846	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:32.222680092 CET	443	49846	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:32.225270033 CET	49846	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:32.225275040 CET	443	49846	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:32.227364063 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.228236914 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.228601933 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.228619099 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.228683949 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.228693962 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.228961945 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.236711025 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.236726999 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.236836910 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.236846924 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.236898899 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.237072945 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.237098932 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.237154961 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.237163067 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.237173080 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.237221956 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.241825104 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.241847038 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.241894960 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.241905928 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.241930962 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.241945028 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.241954088 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.241971016 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.242017031 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.242024899 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.242073059 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.243915081 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.243971109 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.243988991 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.243999958 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.244038105 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.247703075 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.247719049 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.247826099 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.247836113 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.248266935 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.251271963 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.251298904 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.251403093 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.251403093 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.251414061 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.251497030 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.253321886 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.253341913 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.253438950 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.253448009 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.253499985 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.264720917 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.264739037 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.264800072 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.264807940 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.264863968 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.264941931 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.264960051 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.265026093 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.265033960 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.265094995 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.265841007 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.265897989 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.265918970 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.265964985 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.267869949 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.267889023 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.267949104 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.267959118 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.268007994 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.270576954 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.272454977 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.272484064 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.272522926 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.272535086 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.272563934 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.272578955 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.279463053 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.279494047 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.279536009 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.279582977 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.279593945 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.279680967 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.283766031 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.283828020 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.284053087 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.284218073 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.284507990 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.284523964 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.284524918 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.284534931 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.284564018 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.284571886 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.284604073 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.284616947 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.284643888 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.284970045 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.284976959 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.285489082 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.285496950 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.285739899 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.285754919 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.285794973 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.286077976 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.286135912 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.286602974 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.286654949 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.292208910 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.292241096 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.292282104 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.292289972 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.292306900 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.292329073 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.295773983 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.295795918 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.295838118 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.295849085 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.295876980 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.295892954 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.299408913 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.299460888 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.299469948 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.299483061 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.299526930 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.302503109 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.302520990 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.302563906 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.302572966 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.302614927 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.314088106 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.314110041 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.314162970 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.314173937 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.314210892 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.317738056 CET	443	49851	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.317830086 CET	443	49851	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.317922115 CET	49851	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.318007946 CET	49851	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.318028927 CET	443	49851	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.330610037 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.330630064 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.330682993 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.330692053 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.330745935 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.333231926 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.333250046 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.333293915 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.333302021 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.333334923 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.333353996 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.335894108 CET	443	49848	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:32.335983992 CET	443	49848	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:32.336042881 CET	49848	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:32.337219000 CET	49848	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:32.337234974 CET	443	49848	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:32.339973927 CET	49858	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:32.340018034 CET	443	49858	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:32.340097904 CET	49858	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:32.340421915 CET	49858	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:32.340437889 CET	443	49858	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:32.342509031 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.342530012 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.342590094 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.342605114 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.342648029 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.353452921 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.353473902 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.353538990 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.353549957 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.353627920 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.363713980 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.363730907 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.363785982 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.363794088 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.364121914 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.374743938 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.374768019 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.374834061 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.374844074 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.374900103 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.387470007 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.387492895 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.387562990 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.387573004 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.387614965 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.397367001 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.397389889 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.397568941 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.397603035 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.398060083 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.408313036 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.408339024 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.408385038 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.408396006 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.408432007 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.408457994 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.419771910 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.419805050 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.419848919 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.419857979 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.419892073 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.419900894 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.426621914 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.426641941 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.426687956 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.426697969 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.426742077 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.426762104 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.432945967 CET	49839	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.432976007 CET	443	49839	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.441385031 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.441404104 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.441461086 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.441471100 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.441523075 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.452569962 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.452596903 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.452629089 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.452637911 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.452671051 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.452689886 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.456542969 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.456640005 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.456690073 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.469693899 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.469799042 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.470506907 CET	49841	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.470529079 CET	443	49841	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.471340895 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.471486092 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.471682072 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.471813917 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.471848965 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.471879959 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.472410917 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.472518921 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.492218971 CET	443	49846	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:32.492326975 CET	443	49846	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:32.492392063 CET	49846	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:32.493335962 CET	49846	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:32.493355989 CET	443	49846	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:32.516247988 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.516247988 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.516272068 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.516292095 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.516294003 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.516309977 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.533121109 CET	443	49854	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.533217907 CET	49854	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.534436941 CET	49854	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.534449100 CET	443	49854	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.534682989 CET	443	49854	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.535442114 CET	49854	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.539120913 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.539299011 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.539572954 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.539582014 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.539743900 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.539748907 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.542098045 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.542160034 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.542490005 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.542495966 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.542639971 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.542645931 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.548830032 CET	80	49853	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.549951077 CET	49859	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.549982071 CET	443	49859	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.550134897 CET	49859	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.550497055 CET	49859	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.550508976 CET	443	49859	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.564209938 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.564239025 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.564239025 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.579333067 CET	443	49854	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.596240997 CET	49853	80	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.658956051 CET	443	49854	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.659014940 CET	443	49854	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.659070015 CET	49854	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.659178019 CET	49854	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.659193039 CET	443	49854	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.672087908 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.672116995 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.672137022 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.672173023 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.672199011 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.672209024 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.672256947 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.681418896 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.681442022 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.681457043 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.681535959 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.681556940 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.681612968 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.742526054 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:32.742615938 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:32.746154070 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:32.746166945 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:32.746411085 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:32.746469021 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:32.746879101 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:32.758898020 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.758927107 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.758985996 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.759000063 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.759027958 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.759040117 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.760838032 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.760855913 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.760936975 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.760943890 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.760982990 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.762404919 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:32.762487888 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:32.765028000 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:32.765039921 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:32.765284061 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:32.765342951 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:32.765690088 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:32.766124010 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.766144037 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.766238928 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.766252995 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.766385078 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.767771006 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.767797947 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.767836094 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.767848969 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.767860889 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.767888069 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.787338018 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:32.797964096 CET	443	49858	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:32.798232079 CET	49858	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:32.798249960 CET	443	49858	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:32.798602104 CET	443	49858	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:32.798970938 CET	49858	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:32.799041033 CET	443	49858	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:32.799145937 CET	49858	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:32.811327934 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:32.816884995 CET	49837	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.816914082 CET	443	49837	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.820768118 CET	49860	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:32.820806980 CET	443	49860	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:32.820908070 CET	49860	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:32.821109056 CET	49860	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:32.821125031 CET	443	49860	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:32.833388090 CET	49842	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.833406925 CET	443	49842	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.834167957 CET	49836	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.834192991 CET	443	49836	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.835092068 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.835161924 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.835545063 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:32.836538076 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.836574078 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.836688995 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.838540077 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:32.838560104 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:32.839339018 CET	443	49858	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:32.844773054 CET	49862	443	192.168.2.17	172.64.41.3
Jan 2, 2025 12:16:32.844799995 CET	443	49862	172.64.41.3	192.168.2.17
Jan 2, 2025 12:16:32.844927073 CET	49862	443	192.168.2.17	172.64.41.3
Jan 2, 2025 12:16:32.845267057 CET	49862	443	192.168.2.17	172.64.41.3
Jan 2, 2025 12:16:32.845285892 CET	443	49862	172.64.41.3	192.168.2.17
Jan 2, 2025 12:16:32.845381975 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.845405102 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.845472097 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.845498085 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.845699072 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.847001076 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.847018003 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.847078085 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.847084999 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.847129107 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.849677086 CET	49863	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:32.849697113 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.849703074 CET	443	49863	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:32.849714041 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.849767923 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.849773884 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.849791050 CET	49863	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:32.849812984 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.849853992 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.849859953 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.849880934 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.849890947 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.849891901 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.849924088 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.850050926 CET	49863	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:32.850068092 CET	443	49863	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:32.850081921 CET	49855	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.850090027 CET	443	49855	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.850605965 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.850640059 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.850784063 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.851037025 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.851049900 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.854635000 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.854657888 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.854712009 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.854741096 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.854763985 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.856144905 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.857774019 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.857799053 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.857841015 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.857851028 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.857882977 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.857908964 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.858212948 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.858283997 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.858299017 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.858341932 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.858356953 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.858366966 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.858388901 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.858400106 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.858405113 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.858448982 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.858607054 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.858623028 CET	443	49852	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.858681917 CET	49852	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.859121084 CET	49865	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.859143019 CET	443	49865	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.859782934 CET	49865	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.859987020 CET	49865	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:32.859998941 CET	443	49865	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:32.879328966 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.879328012 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.879334927 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:32.933613062 CET	443	49858	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:32.933729887 CET	443	49858	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:32.933782101 CET	49858	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:32.934331894 CET	49858	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:32.934350014 CET	443	49858	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:33.009299994 CET	443	49859	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:33.009377003 CET	49859	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:33.010893106 CET	49859	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:33.010911942 CET	443	49859	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:33.011177063 CET	443	49859	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:33.039854050 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.039882898 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.039890051 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.039904118 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.039911032 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.039921045 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.039942026 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.039957047 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.039973021 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.040004015 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.046255112 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.046318054 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.046338081 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.046356916 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.046375990 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.046396017 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.046403885 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.046413898 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.046444893 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.046444893 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.046459913 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.046489954 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.046768904 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.046791077 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.046811104 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.046835899 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.046843052 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.046847105 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.046875954 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.046890020 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.046907902 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.046933889 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.056251049 CET	49859	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:33.057065010 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.057111979 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.057132959 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.057212114 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.057228088 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.057270050 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.057295084 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.081111908 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.081151009 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.081171989 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.081175089 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.081197977 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.081212044 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.081254959 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.127826929 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.127851963 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.127911091 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.127924919 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.127952099 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.127965927 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.129399061 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.129415989 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.129439116 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.129467964 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.129482985 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.129507065 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.129519939 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.136267900 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.136276960 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.136298895 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.136326075 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.136334896 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.136342049 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.136349916 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.136360884 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.136373997 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.136393070 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.136409998 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.136409998 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.136413097 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.136436939 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.136441946 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.136481047 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.151274920 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.151304007 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.151352882 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.151370049 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.151392937 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.151426077 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.163949013 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.163975000 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.164030075 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.164038897 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.164067030 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.164087057 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.165725946 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.165755033 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.165803909 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.165822029 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.165843010 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.165874958 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.168807983 CET	49840	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.168831110 CET	443	49840	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.171299934 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.171361923 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.171423912 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.172029972 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.172072887 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.172092915 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.172132969 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.172159910 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.172173023 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.172183990 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.172235012 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.172295094 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.172318935 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.172605991 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.172629118 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.172635078 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.172641993 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.172665119 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.172669888 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.172698975 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.172713041 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.188096046 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.188138962 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.188185930 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.188196898 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.188241959 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.198152065 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.198183060 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.198247910 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.198259115 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.198293924 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.198314905 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.199867010 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.199903965 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.199963093 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.199973106 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.200009108 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.200023890 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.210283995 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.210336924 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.210378885 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.210402966 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.210417032 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.210442066 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.212933064 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.212953091 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.213006973 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.213013887 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.213107109 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.225918055 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.225951910 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.225994110 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.226002932 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.226047039 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.226069927 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.228012085 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.228044033 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.228089094 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.228113890 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.228131056 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.228163958 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.229760885 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.229789972 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.229840994 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.229847908 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.229887962 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.229902983 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.235852957 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.235872984 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.235958099 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.235977888 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.236021996 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.236562967 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.236579895 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.236629963 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.236635923 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.236665010 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.236684084 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.252345085 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.252370119 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.252428055 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.252444029 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.252474070 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.252495050 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.256814957 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.256866932 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.256937981 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.256954908 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.256966114 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.258141041 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.258575916 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.258604050 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.258656979 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.258667946 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.258694887 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.258712053 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.264709949 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.264727116 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.264807940 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.264832973 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.264863014 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.264883995 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.266450882 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.266474009 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.266530037 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.266535044 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.266567945 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.266586065 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.277693987 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.277714014 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.277798891 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.277815104 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.277914047 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.278522968 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.278558016 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.278616905 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.278625011 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.278651953 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.278723955 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.279151917 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.279186964 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.279242039 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.279247999 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.279278994 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.279299021 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.285531044 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.285547018 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.285610914 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.285617113 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.285655975 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.295944929 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.295978069 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.296025991 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.296040058 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.296087980 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.296087980 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.296422958 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.296444893 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.296492100 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.296497107 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.296533108 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.296554089 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.298331976 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.298363924 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.298405886 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.298414946 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.298459053 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.298459053 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.299493074 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.299509048 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.299557924 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.299565077 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.299602985 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.304337978 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.304353952 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.304430008 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.304435968 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.304481983 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.307260990 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.307284117 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.307354927 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.307359934 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.307399035 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.308810949 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.308861971 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.308866024 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.308881044 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.308921099 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.309379101 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.309412003 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.309454918 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.309459925 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.309492111 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.309510946 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.310290098 CET	443	49863	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:33.311022043 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.311043024 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.311073065 CET	443	49862	172.64.41.3	192.168.2.17
Jan 2, 2025 12:16:33.311105013 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.311116934 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.311132908 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.311177969 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.313416004 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:33.313477039 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:33.318259001 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.318290949 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.318337917 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.318350077 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.318398952 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.318398952 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.318594933 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.318627119 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.318653107 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.318658113 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.318682909 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.318701029 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.319211960 CET	443	49865	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:33.319262028 CET	49865	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:33.319602966 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.319633007 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.319677114 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.319681883 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.319706917 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.319727898 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.321300983 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.321330070 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.321386099 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.321399927 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.321412086 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.321446896 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.328922987 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.328942060 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.329008102 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.329014063 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.329046965 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.329061031 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.331918001 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.331945896 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.331990957 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.331995964 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.332037926 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.332060099 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.332793951 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.332828999 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.332879066 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.332891941 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.332935095 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.332935095 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.333730936 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.333753109 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.333805084 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.333821058 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.333834887 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.333859921 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.336059093 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.336118937 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.336126089 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.336149931 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.336170912 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.336200953 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.343276978 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.343327045 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.343364954 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.343377113 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.343411922 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.343446970 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.345302105 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.345319033 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.345402002 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.345402002 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.345412970 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.345596075 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.345757961 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.345776081 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.345833063 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.345840931 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.345902920 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.354217052 CET	49863	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:33.354393005 CET	49862	443	192.168.2.17	172.64.41.3
Jan 2, 2025 12:16:33.357146025 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.357163906 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.357312918 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.357325077 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.357400894 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.357543945 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.357574940 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.357631922 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.357640028 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.357681990 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.357681990 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.358880997 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.358900070 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.358952045 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.358958006 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.359038115 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.361857891 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.361933947 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.361934900 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:33.362096071 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:33.366380930 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.366408110 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.366435051 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.366451979 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.366492033 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.366492033 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.370523930 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.370539904 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.370589972 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.370600939 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.370635033 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.375262976 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.375281096 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.375334978 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.375348091 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.375368118 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.375387907 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.385492086 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.385524035 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.385561943 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.385571003 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.385598898 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.385613918 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.396959066 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.396981001 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.397041082 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.397054911 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.397088051 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.397844076 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.397867918 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.397942066 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.397955894 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.397979021 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.398015022 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.398395061 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.398412943 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.398469925 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.398475885 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.398513079 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.399847984 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.399866104 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.399925947 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.399931908 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.399967909 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.408162117 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.408183098 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.408230066 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.408246040 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.408281088 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.408297062 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.408703089 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.408721924 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.408783913 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.408790112 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.408885956 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.418767929 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.418792963 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.418834925 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.418848991 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.418867111 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.418891907 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.421313047 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.421334028 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.421369076 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.421376944 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.421407938 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.421426058 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.426506042 CET	49863	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:33.426522970 CET	443	49863	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:33.426702976 CET	49862	443	192.168.2.17	172.64.41.3
Jan 2, 2025 12:16:33.426713943 CET	443	49862	172.64.41.3	192.168.2.17
Jan 2, 2025 12:16:33.427687883 CET	443	49863	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:33.427777052 CET	49863	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:33.427829981 CET	443	49862	172.64.41.3	192.168.2.17
Jan 2, 2025 12:16:33.427953959 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.427999020 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.428003073 CET	49862	443	192.168.2.17	172.64.41.3
Jan 2, 2025 12:16:33.428105116 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.429117918 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.429142952 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.429227114 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.429234982 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.429266930 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.429266930 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.429310083 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.429323912 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.438097000 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.438113928 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.438199997 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.438210964 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.438276052 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.440416098 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.440437078 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.440567970 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.440579891 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.440639019 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.451350927 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.451379061 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.451462030 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.451472998 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.451507092 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.451507092 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.451545954 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.451565027 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.451598883 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.451607943 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.451628923 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.451648951 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.454293013 CET	49863	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:33.454416037 CET	443	49863	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:33.454632044 CET	49863	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:33.454648018 CET	443	49863	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:33.455398083 CET	49862	443	192.168.2.17	172.64.41.3
Jan 2, 2025 12:16:33.455611944 CET	49862	443	192.168.2.17	172.64.41.3
Jan 2, 2025 12:16:33.456351042 CET	443	49862	172.64.41.3	192.168.2.17
Jan 2, 2025 12:16:33.459188938 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.459212065 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.459271908 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.459276915 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.459325075 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.459336042 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.462246895 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.462270975 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.462307930 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.462320089 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.462338924 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.462372065 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.470213890 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.470230103 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.470609903 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.470617056 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.470674038 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.471961975 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.471995115 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.472083092 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.472083092 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.472093105 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.472177029 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.473284960 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.474546909 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.474565029 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.475646973 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.475733995 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.476449966 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.476521969 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.476959944 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.476968050 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.480478048 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.480509996 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.480545998 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.480556011 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.480596066 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.480596066 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.488837957 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.488868952 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.488962889 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.488974094 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.488989115 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.489036083 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.490257978 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.490273952 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.490334034 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.490343094 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.490381956 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.491143942 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.491159916 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.491241932 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.491246939 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.491290092 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.497152090 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.497168064 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.497279882 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.497287035 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.497339964 CET	49862	443	192.168.2.17	172.64.41.3
Jan 2, 2025 12:16:33.497351885 CET	443	49862	172.64.41.3	192.168.2.17
Jan 2, 2025 12:16:33.497400045 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.499265909 CET	49863	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:33.505712986 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.505748987 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.505832911 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.505832911 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.505844116 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.505884886 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.513694048 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.513710976 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.513772964 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.513787031 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.513813972 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.513840914 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.515568972 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.515597105 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.515650988 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.515662909 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.515706062 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.515706062 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.527481079 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.527554989 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.527611017 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.527622938 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.527657032 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.527657032 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.528243065 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.530483007 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.530504942 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.530559063 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.530577898 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.530618906 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.534101963 CET	443	49860	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:33.534558058 CET	49860	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:33.538750887 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.538778067 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.538809061 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.538830042 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.538865089 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.538913012 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.539036036 CET	49860	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:33.539046049 CET	443	49860	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:33.540887117 CET	49860	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:33.540891886 CET	443	49860	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:33.543823004 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.543863058 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.543880939 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.543899059 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.543927908 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.543946981 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.544337034 CET	49862	443	192.168.2.17	172.64.41.3
Jan 2, 2025 12:16:33.549462080 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.549484015 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.549539089 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.549539089 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.549547911 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.549909115 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.551528931 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.551548004 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.551578045 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.551585913 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.551606894 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.551625013 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.554166079 CET	443	49863	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:33.554241896 CET	443	49863	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:33.554291010 CET	49863	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:33.556813955 CET	443	49862	172.64.41.3	192.168.2.17
Jan 2, 2025 12:16:33.556873083 CET	443	49862	172.64.41.3	192.168.2.17
Jan 2, 2025 12:16:33.556948900 CET	49862	443	192.168.2.17	172.64.41.3
Jan 2, 2025 12:16:33.559372902 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.559393883 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.559441090 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.559449911 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.559674025 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.560853004 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.560914993 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.560918093 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.561031103 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.564558983 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.564577103 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.564625978 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.564634085 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.564667940 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.582374096 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.582401991 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.582494020 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.582520008 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.582568884 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.583373070 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.583394051 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.583437920 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.583448887 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.583492994 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.589456081 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.589477062 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.589540005 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.589551926 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.589590073 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.606106997 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.606131077 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.606206894 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.606214046 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.606264114 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.623017073 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.623044968 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.623079062 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.623086929 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.623117924 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.623142004 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.627446890 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.627521992 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.627526999 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.627542019 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:33.627593994 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:33.687242031 CET	49862	443	192.168.2.17	172.64.41.3
Jan 2, 2025 12:16:33.687273979 CET	443	49862	172.64.41.3	192.168.2.17
Jan 2, 2025 12:16:33.687800884 CET	49863	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:33.687835932 CET	443	49863	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:33.693474054 CET	49869	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:33.693521023 CET	443	49869	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:33.693625927 CET	49869	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:33.694226027 CET	49870	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:33.694277048 CET	443	49870	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:33.694324970 CET	49870	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:33.694499969 CET	49869	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:33.694515944 CET	443	49869	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:33.694675922 CET	49870	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:33.694689035 CET	443	49870	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:33.789046049 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.789071083 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.789078951 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.789117098 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.789129019 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.789136887 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.789140940 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.789156914 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.789222002 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.804541111 CET	443	49860	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:33.804605007 CET	443	49860	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:33.804687977 CET	49860	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:33.816020966 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.821655989 CET	49860	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:33.821672916 CET	443	49860	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:33.826411009 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.829449892 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.829458952 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.829611063 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.829624891 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.830691099 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.830749989 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.831238985 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.831289053 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.842075109 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.842187881 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.842464924 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.842549086 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.862428904 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.862452984 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.862493038 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.862509012 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.862530947 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.862562895 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.893261909 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.893282890 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.893316031 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.893326044 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.899939060 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.899964094 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.900012970 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.900023937 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.900059938 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.900077105 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.933007956 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.933023930 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.933096886 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.933109999 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.933156967 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.941272974 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.941293955 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.962426901 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.962445021 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.962519884 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.962531090 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.962574005 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.989542961 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.989559889 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.989634991 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:33.989648104 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:33.989722967 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.007591009 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.007778883 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.010567904 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.010585070 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.010648966 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.010663033 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.010714054 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.032239914 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.032254934 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.032320976 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.032336950 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.032385111 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.041924953 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.042413950 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.043270111 CET	49871	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.043289900 CET	443	49871	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.043814898 CET	49872	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.043845892 CET	443	49872	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.043859959 CET	49871	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.043896914 CET	49872	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.044092894 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.044639111 CET	49844	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.044652939 CET	443	49844	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.045603991 CET	49871	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.045619011 CET	443	49871	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.045799971 CET	49872	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.045813084 CET	443	49872	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.047358990 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.047377110 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.047435999 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.047456026 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.047511101 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.051333904 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.051336050 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.057779074 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.057796001 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.057859898 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.057883024 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.057931900 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.070094109 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.070111036 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.070184946 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.070209026 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.070257902 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.078094006 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.078135014 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.078192949 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.078208923 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.078224897 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.078259945 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.078277111 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.081444025 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.130240917 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.147356987 CET	443	49869	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.158230066 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.158253908 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.159293890 CET	49869	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.159331083 CET	443	49869	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.159495115 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.159569025 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.159624100 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.160439968 CET	443	49869	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.160511971 CET	49869	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.160995960 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.161076069 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.161448956 CET	49869	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.161516905 CET	443	49869	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.161770105 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.161788940 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.161849976 CET	49869	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.161856890 CET	443	49869	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.174149990 CET	443	49870	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.176068068 CET	49870	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.176079988 CET	443	49870	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.177114964 CET	443	49870	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.177186966 CET	49870	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.177778006 CET	49870	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.177838087 CET	443	49870	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.178073883 CET	49870	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.178083897 CET	443	49870	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.210227013 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.211234093 CET	49869	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.212538958 CET	49873	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:34.212574005 CET	443	49873	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:34.212683916 CET	49873	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:34.212982893 CET	49873	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:34.212992907 CET	443	49873	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:34.214095116 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.214119911 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.214127064 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.214143991 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.214164972 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.214170933 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.214190960 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.214215040 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.214240074 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.214258909 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.215949059 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.215996027 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.216005087 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.216046095 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.216051102 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.216059923 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.216072083 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.216092110 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.216106892 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.216135025 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.226217031 CET	49870	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.299468994 CET	443	49869	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.299534082 CET	443	49869	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.299653053 CET	49869	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.303200006 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.303210974 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.303231001 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.303267002 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.303288937 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.303323984 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.303332090 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.305175066 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.305185080 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.305216074 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.305278063 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.305278063 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.305300951 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.305345058 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.306133032 CET	443	49870	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.306209087 CET	443	49870	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.306262970 CET	49870	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.340847969 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.340868950 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.340950012 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.340965033 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.341027975 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.343215942 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.343233109 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.343291998 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.343302011 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.343724966 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.375818968 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.375850916 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.375897884 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.375905991 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.375932932 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.375947952 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.376002073 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.382754087 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.382772923 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.382834911 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.382848978 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.382920980 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.397605896 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.397634983 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.397641897 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.397670984 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.397686958 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.397699118 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.397701979 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.397733927 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.397757053 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.397881985 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.405417919 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.405432940 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.405527115 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.405539989 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.405597925 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.410171986 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.410223961 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.410233021 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.410257101 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.410299063 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.441591024 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.442837000 CET	49869	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.442867994 CET	443	49869	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.443650961 CET	49870	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.443670034 CET	443	49870	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.444170952 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:34.444210052 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:34.444314957 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:34.445704937 CET	49847	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.445715904 CET	443	49847	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.467955112 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.467979908 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.468024969 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.468041897 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.468067884 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.468092918 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.497178078 CET	443	49872	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.501247883 CET	443	49871	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.504569054 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.504592896 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.504630089 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.504658937 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.504677057 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.504702091 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.539639950 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.539664984 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.539721012 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.539745092 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.539788008 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.545279026 CET	49871	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.554389000 CET	49872	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.568662882 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.568686962 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.568754911 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.568789005 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.568837881 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.597341061 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.597373009 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.597430944 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.597469091 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.597487926 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.597563028 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.616463900 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.616497993 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.616528034 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.616565943 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.616579056 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.616761923 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.637037039 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.637059927 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.637099981 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.637137890 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.637156963 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.637211084 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.643214941 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:34.643234968 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:34.644042969 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:34.644088984 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:34.644181013 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:34.645792007 CET	49872	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.645817041 CET	443	49872	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.646114111 CET	49871	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.646136999 CET	443	49871	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.647106886 CET	443	49872	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.647121906 CET	443	49872	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.647216082 CET	49872	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.647326946 CET	443	49871	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.647392035 CET	49871	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.649621010 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.649643898 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.649709940 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.649729013 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.649774075 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.660134077 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.660157919 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.660229921 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.660264015 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.660279036 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.660307884 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.672334909 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.672359943 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.672400951 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.672430992 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.672446012 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.672511101 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.686363935 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.686381102 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.686439037 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.686451912 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.686511040 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.697772980 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.697793007 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.697865009 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.697881937 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.697925091 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.708662987 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.708678961 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.708735943 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.708746910 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.708792925 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.717369080 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.717390060 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.717422962 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.717432022 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.717475891 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.717495918 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.727058887 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.727077007 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.727129936 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.727140903 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.727166891 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.727188110 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.737199068 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.737215996 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.737266064 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.737296104 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.737310886 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.737343073 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.743693113 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.743716002 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.743746996 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.743755102 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.743782997 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.743825912 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.758846998 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.758869886 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.758938074 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.758949041 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.758995056 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.773890018 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.773915052 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.773967981 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.773977995 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.774015903 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.774030924 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.785304070 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.785320997 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.785367012 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.785376072 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.785418034 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.794250011 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.794265032 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.794334888 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.794352055 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.794408083 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.804899931 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.804922104 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.804971933 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.804980040 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.805027008 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.812942028 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.812958002 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.813026905 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.813035965 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.813076973 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.816147089 CET	49865	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:34.816163063 CET	443	49865	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:34.816196918 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:34.816227913 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:34.816478014 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:34.816483021 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:34.816539049 CET	49865	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:34.816545010 CET	443	49865	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:34.816709995 CET	49859	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:34.818608999 CET	49876	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:34.818645000 CET	443	49876	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:34.818871021 CET	49876	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:34.819197893 CET	49876	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:34.819214106 CET	443	49876	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:34.820305109 CET	49877	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:34.820342064 CET	443	49877	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:34.820393085 CET	49877	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:34.820523024 CET	49857	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:34.820559978 CET	443	49857	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:34.820756912 CET	49877	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:34.820770979 CET	443	49877	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:34.820794106 CET	49856	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:34.820822001 CET	443	49856	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:34.820992947 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:34.821024895 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:34.821084023 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:34.821263075 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:34.821284056 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:34.821289062 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:34.821295977 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:34.821341038 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:34.821455956 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:34.821470022 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:34.822482109 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.822499037 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.822568893 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.822581053 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.822622061 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.824073076 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:34.824093103 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:34.825309992 CET	49872	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.825429916 CET	443	49872	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.825656891 CET	49871	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.825762033 CET	443	49871	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.826632977 CET	49861	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.826642990 CET	443	49861	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.830837965 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.830854893 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.830905914 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.830914974 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.830974102 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.846358061 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.846376896 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.846432924 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.846441031 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.846486092 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.859335899 CET	443	49859	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:34.861555099 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.861568928 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.861633062 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.861641884 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.861716032 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.872765064 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.872781038 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.872849941 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.872858047 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.872927904 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.875236034 CET	49871	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.875261068 CET	443	49871	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.875273943 CET	49872	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.875284910 CET	443	49872	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.881783009 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.881808043 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.881858110 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.881865978 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.881926060 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.881926060 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.891397953 CET	49880	443	192.168.2.17	167.99.235.203
Jan 2, 2025 12:16:34.891450882 CET	443	49880	167.99.235.203	192.168.2.17
Jan 2, 2025 12:16:34.891572952 CET	49880	443	192.168.2.17	167.99.235.203
Jan 2, 2025 12:16:34.892337084 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:34.892379045 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:34.892481089 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:34.892518997 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.892537117 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.892596006 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.892605066 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.892644882 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.892714024 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.892748117 CET	49866	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.892780066 CET	443	49866	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.892785072 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.892791033 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.892815113 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:34.892853975 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.892899036 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.893235922 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:34.894129038 CET	49880	443	192.168.2.17	167.99.235.203
Jan 2, 2025 12:16:34.894146919 CET	443	49880	167.99.235.203	192.168.2.17
Jan 2, 2025 12:16:34.894304037 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:34.894320011 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:34.922241926 CET	49872	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.922271013 CET	49871	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.927047014 CET	443	49873	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:34.927113056 CET	49873	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:34.927650928 CET	49873	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:34.927655935 CET	443	49873	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:34.928977013 CET	49873	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:34.928982973 CET	443	49873	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:34.942195892 CET	49867	443	192.168.2.17	169.150.255.184
Jan 2, 2025 12:16:34.942224026 CET	443	49867	169.150.255.184	192.168.2.17
Jan 2, 2025 12:16:34.947220087 CET	443	49865	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:34.947246075 CET	443	49865	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:34.947335005 CET	443	49865	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:34.947336912 CET	49865	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:34.947390079 CET	49865	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:34.949966908 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:34.949990034 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:34.950022936 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:34.950047016 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:34.950063944 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:34.950082064 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:34.950112104 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:35.035835981 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.035861969 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.035907984 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:35.035919905 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.035942078 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:35.035959959 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:35.038319111 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.038333893 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.038394928 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:35.038402081 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.038444042 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:35.099289894 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.104017973 CET	443	49859	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.104085922 CET	443	49859	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.104152918 CET	49859	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:35.120898962 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.120924950 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.120990992 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:35.121011019 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.121061087 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:35.121756077 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.121773958 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.121824026 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:35.121830940 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.121906996 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:35.122446060 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.122462034 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.122514009 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:35.122519016 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.122561932 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.122570038 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:35.122574091 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.122611046 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:35.122617960 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.122629881 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.122653961 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:35.122682095 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:35.140273094 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.198242903 CET	443	49873	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:35.198322058 CET	49873	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:35.198331118 CET	443	49873	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:35.198348045 CET	443	49873	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:35.198399067 CET	49873	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:35.199110031 CET	49873	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:35.199125051 CET	443	49873	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:35.277379036 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.277395964 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.277851105 CET	49849	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:35.277873993 CET	443	49849	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:35.278022051 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.278023005 CET	443	49876	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.279072046 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.279149055 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.286187887 CET	443	49877	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.286298037 CET	49877	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:35.287570953 CET	49877	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:35.287584066 CET	443	49877	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.287986994 CET	443	49877	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:35.318702936 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.319338083 CET	49845	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:35.319367886 CET	443	49845	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:35.332317114 CET	49876	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:35.332843065 CET	49877	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:35.346690893 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.348176956 CET	443	49880	167.99.235.203	192.168.2.17
Jan 2, 2025 12:16:35.396264076 CET	49880	443	192.168.2.17	167.99.235.203
Jan 2, 2025 12:16:35.396286964 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.460949898 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:35.461045027 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:35.475852013 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:35.475959063 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:35.478001118 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.478023052 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.478661060 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.478812933 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.479337931 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.479419947 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.480011940 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.480019093 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.480211973 CET	49880	443	192.168.2.17	167.99.235.203
Jan 2, 2025 12:16:35.480221033 CET	443	49880	167.99.235.203	192.168.2.17
Jan 2, 2025 12:16:35.481188059 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.481254101 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.481548071 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.481636047 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.481765032 CET	443	49880	167.99.235.203	192.168.2.17
Jan 2, 2025 12:16:35.481770992 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.481792927 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.481815100 CET	49880	443	192.168.2.17	167.99.235.203
Jan 2, 2025 12:16:35.482265949 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.482346058 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.482937098 CET	49880	443	192.168.2.17	167.99.235.203
Jan 2, 2025 12:16:35.483115911 CET	443	49880	167.99.235.203	192.168.2.17
Jan 2, 2025 12:16:35.483127117 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.483136892 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.483491898 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.483504057 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.483700991 CET	49880	443	192.168.2.17	167.99.235.203
Jan 2, 2025 12:16:35.483707905 CET	443	49880	167.99.235.203	192.168.2.17
Jan 2, 2025 12:16:35.523267031 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.523822069 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.523833990 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.538268089 CET	49880	443	192.168.2.17	167.99.235.203
Jan 2, 2025 12:16:35.546789885 CET	49882	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:35.546844006 CET	443	49882	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:35.546940088 CET	49882	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:35.547219992 CET	49882	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:35.547234058 CET	443	49882	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:35.577945948 CET	443	49880	167.99.235.203	192.168.2.17
Jan 2, 2025 12:16:35.578044891 CET	443	49880	167.99.235.203	192.168.2.17
Jan 2, 2025 12:16:35.578108072 CET	49880	443	192.168.2.17	167.99.235.203
Jan 2, 2025 12:16:35.580845118 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.580864906 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.580878973 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.580893993 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.580897093 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.580919981 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.580930948 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.580943108 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.580955982 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.580992937 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.580992937 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.582612038 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.582631111 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.582633018 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.582639933 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.582654953 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.582664967 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.582672119 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.582679987 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.582686901 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.582689047 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.582693100 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.582698107 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.582704067 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.582710981 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.582734108 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.582746029 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.582756996 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.582766056 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.582777977 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.582835913 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.663764954 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.663785934 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.663850069 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.663862944 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.663908005 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.664056063 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.665400982 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.665410995 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.665420055 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.665425062 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.665462971 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.665473938 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.665524006 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.665534019 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.665543079 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.665543079 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.665585041 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.665621042 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.665642023 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.665678024 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.665685892 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.665715933 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.665715933 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.667036057 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.667052984 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.667109013 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.667115927 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.667308092 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.667330980 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.667396069 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.667416096 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.667416096 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.667422056 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.667838097 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.750251055 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.750269890 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.750363111 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.750382900 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.751491070 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.751566887 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.751589060 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.751641989 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.751651049 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.751708984 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.752005100 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.752034903 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.752069950 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.752079010 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.752104044 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.752130985 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.752321005 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.752372026 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.752490997 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.752553940 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.752968073 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.752985954 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.753031969 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.753041029 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.753056049 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.753108978 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.753330946 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.753346920 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.753473043 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.753479958 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.753551006 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.753650904 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.753669977 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.753715038 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.753722906 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.753737926 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.753766060 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.753880978 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.753895998 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.753954887 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.753964901 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.754034042 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.754287958 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.754302979 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.754385948 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.754385948 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.754393101 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.754618883 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.754640102 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.754664898 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.754671097 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.754689932 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.754693985 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.754709005 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.795861959 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.795890093 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.795955896 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.795970917 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.795970917 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.795980930 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.795984030 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.796010971 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.796019077 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.796041965 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.796045065 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.796051979 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.836796045 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.836816072 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.836880922 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.836895943 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.836910009 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.836931944 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.837477922 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.837492943 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.837551117 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.837559938 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.837630987 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.838191986 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.838207006 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.838279963 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.838287115 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.838376999 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.838674068 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.838689089 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.838735104 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.838742018 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.838773012 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.838787079 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.839225054 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.839247942 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.839282990 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.839292049 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.839320898 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.839329004 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.839490891 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.839512110 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.839561939 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.839567900 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.839833021 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.840261936 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.840276003 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.840322971 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.840338945 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.840342045 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.840346098 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.840373993 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.840380907 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.840404987 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.840405941 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.840490103 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.840873957 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.840889931 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.840929031 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.840956926 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.840958118 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.840962887 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.840984106 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.840991020 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.841007948 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.841022968 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.841028929 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.841327906 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.841341972 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.841403961 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.841403961 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.841412067 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.841461897 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.842201948 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.842219114 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.842298031 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.842303991 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.842348099 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.842370033 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.842407942 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.842430115 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.842437983 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.842536926 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.842971087 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.842993021 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.843043089 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.843050003 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.843096018 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.843600035 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.843624115 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.843674898 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.843682051 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.843717098 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.844125986 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.844144106 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.844203949 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.844211102 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.844257116 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.844464064 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.844481945 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.844535112 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.844542027 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.844583035 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.844762087 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.844783068 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.844842911 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.844849110 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.844897985 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.845568895 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.845582962 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.845664978 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.845671892 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.845727921 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.882700920 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.882719994 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.882777929 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.882786989 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.882857084 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.882874966 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.882899046 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.882908106 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.882916927 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.882940054 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.882956028 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.923454046 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.923527002 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.923532963 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.923543930 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.923580885 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.923599005 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.923599005 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.923655033 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.925210953 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.925285101 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.925332069 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.925393105 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.925420046 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.925537109 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.925658941 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.925674915 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.925729990 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.925740004 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.925777912 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.926361084 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.926381111 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.926434994 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.926453114 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.926467896 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.926490068 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.926497936 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.926531076 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.926558018 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.926564932 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.926594019 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.926615000 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.926984072 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.927005053 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.927066088 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.927084923 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.927129984 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.927192926 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.927225113 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.927258968 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.927265882 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.927288055 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.927342892 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.927820921 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.927836895 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.927891970 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.927900076 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.927982092 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.928313017 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.928328991 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.928397894 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.928411007 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.928452015 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.928469896 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.928508043 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.928514004 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.928528070 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.928539038 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.928543091 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.928915977 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.928931952 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.928997993 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.929003000 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.929178953 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.929236889 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.929245949 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.929378033 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.929435015 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.929493904 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.929508924 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.929565907 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.929572105 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.929815054 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.929836988 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.929878950 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.929884911 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.929951906 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.929951906 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.930232048 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.930246115 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.930325031 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.930330038 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.931303978 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.969830036 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.969851971 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.969894886 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.969906092 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:35.969928026 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.969953060 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.982544899 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.982742071 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:35.982896090 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.013010025 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.013029099 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.013094902 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.013108015 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.013422966 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.013442993 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.013485909 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.013495922 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.013516903 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.013547897 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.013714075 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.013729095 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.013776064 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.013783932 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.014092922 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.014188051 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.014209032 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.014261007 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.014292955 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.014312983 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.014341116 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.014358997 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.014389038 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.014545918 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.014568090 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.014616013 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.014626980 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.014674902 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.015008926 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.015024900 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.015070915 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.015080929 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.015106916 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.015121937 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.015471935 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.015490055 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.015542030 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.015552044 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.015573025 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.015593052 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.015594006 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.015642881 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.015666008 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.015671968 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.015697002 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.015713930 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.015733957 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.015784025 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.015985966 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.015999079 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.016031981 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.016053915 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.016083956 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.016375065 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.016398907 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.016474962 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.016474962 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.016485929 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.016786098 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.016798973 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.016876936 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.016876936 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.016885042 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.017101049 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.017117023 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.017159939 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.017165899 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.017187119 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.061286926 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.099880934 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.099900961 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.099994898 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.100008965 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.100043058 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.100063086 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.100119114 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.100123882 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.100337982 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.100352049 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.100413084 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.100419998 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.100701094 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.100719929 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.100780010 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.100780010 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.100791931 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.101454020 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.101469040 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.101582050 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.101589918 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.101665020 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.103158951 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.103173971 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.103260040 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.103267908 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.103446007 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.103462934 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.103534937 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.103534937 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.103543043 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.103766918 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.103806973 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.103822947 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.103889942 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.103894949 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.105350018 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.186316967 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.186346054 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.186407089 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.186424971 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.186459064 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.186503887 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.186554909 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.186568975 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.186630964 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.186638117 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.186961889 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.186980963 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.187021017 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.187026024 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.187068939 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.187068939 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.187462091 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.187477112 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.187527895 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.187534094 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.187568903 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.187568903 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.188086033 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.188103914 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.188189983 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.188195944 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.188652039 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.190002918 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.190018892 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.190102100 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.190108061 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.190284014 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.190299988 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.190330982 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.190336943 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.190351009 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.190412998 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.190412998 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.190619946 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.190634012 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.190699100 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.190704107 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.191412926 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.260031939 CET	443	49882	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:36.260109901 CET	49882	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:36.264688969 CET	49882	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:36.264702082 CET	443	49882	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:36.273339987 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.273360968 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.273466110 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.273466110 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.273480892 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.273590088 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.273787022 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.273803949 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.273916960 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.273924112 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.274146080 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.274277925 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.274293900 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.274493933 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.274497986 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.274746895 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.274786949 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.274805069 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.274810076 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.274837971 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.274876118 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.275778055 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.275793076 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.275856972 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.275856972 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.275862932 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.277225971 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.277247906 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.277307987 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.277307987 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.277316093 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.277349949 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.277534008 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.277549028 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.277617931 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.277617931 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.277623892 CET	49882	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:36.277630091 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.277631044 CET	443	49882	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:36.277717113 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.277856112 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.277869940 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.277997971 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.278004885 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.278784037 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.327824116 CET	49865	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.327857018 CET	443	49865	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.329715967 CET	49883	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.329752922 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.329758883 CET	443	49883	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.329771042 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.329839945 CET	49883	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.329933882 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.329962015 CET	49876	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.329972029 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.329979897 CET	443	49876	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.332683086 CET	49876	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.332689047 CET	443	49876	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.332904100 CET	49864	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.332904100 CET	49859	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.332925081 CET	443	49864	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.332940102 CET	443	49859	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.332957029 CET	49859	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.332963943 CET	443	49859	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.333467007 CET	49877	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.333545923 CET	49883	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.333559036 CET	443	49883	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.337027073 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.337034941 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.337104082 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.337110996 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.339042902 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.339083910 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.339854956 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.340588093 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.340603113 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.360019922 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.360044003 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.360117912 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.360129118 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.360368013 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.360388994 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.360424042 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.360429049 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.360452890 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.360496998 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.360766888 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.360781908 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.360882044 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.360888004 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.360950947 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.361078024 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.361092091 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.361161947 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.361166954 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.361258030 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.361958981 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.361975908 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.362044096 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.362044096 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.362051964 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.362173080 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.363614082 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.363645077 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.363702059 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.363707066 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.363770962 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.363965988 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.363986969 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.364041090 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.364048004 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.364074945 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.364074945 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.364311934 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.364336967 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.364381075 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.364387989 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.364428997 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.364428997 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.379331112 CET	443	49877	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.446970940 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.446996927 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.447077990 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.447094917 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.447150946 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.447412014 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.447434902 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.447520971 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.447527885 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.447540045 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.447606087 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.447626114 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.447643042 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.447655916 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.447668076 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.447698116 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.447716951 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.448009968 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.448024988 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.448071957 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.448080063 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.448112011 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.448112011 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.448807001 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.448827028 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.448887110 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.448893070 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.448906898 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.448990107 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.450508118 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.450522900 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.450618029 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.450623989 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.450690031 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.450850964 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.450866938 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.450918913 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.450925112 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.450942993 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.450988054 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.451335907 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.451358080 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.451411963 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.451417923 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.451438904 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.451453924 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.459264040 CET	443	49876	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.459347963 CET	443	49876	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.459424973 CET	49876	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.459506989 CET	49876	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.459521055 CET	443	49876	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.464144945 CET	443	49877	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.464236021 CET	443	49877	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.464298964 CET	49877	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.464400053 CET	49877	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.464420080 CET	443	49877	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.471020937 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.471052885 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.471148968 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.472044945 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.472055912 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.472352028 CET	49880	443	192.168.2.17	167.99.235.203
Jan 2, 2025 12:16:36.472382069 CET	443	49880	167.99.235.203	192.168.2.17
Jan 2, 2025 12:16:36.530422926 CET	443	49882	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:36.530515909 CET	49882	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:36.530536890 CET	443	49882	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:36.531061888 CET	49882	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:36.531418085 CET	49882	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:36.531436920 CET	443	49882	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:36.533838034 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.533860922 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.533930063 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.533940077 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.534013987 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.534032106 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.534076929 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.534081936 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.534104109 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.534123898 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.534393072 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.534406900 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.534471035 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.534475088 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.534925938 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.534943104 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.535021067 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.535021067 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.535027027 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.535074949 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.535831928 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.535845041 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.535900116 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.535911083 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.535991907 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.537381887 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.537395954 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.537445068 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.537451982 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.537492037 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.537519932 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.537689924 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.537703991 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.537777901 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.537784100 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.537821054 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.538069010 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.538085938 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.538124084 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.538130999 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.538151026 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.538163900 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.545066118 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.545088053 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.545103073 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.545130968 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.545159101 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.545171022 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.545232058 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.567003965 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.567029953 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.567044020 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.567065954 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.567096949 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.567105055 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.567146063 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.586395979 CET	49886	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:36.586432934 CET	443	49886	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:36.586539030 CET	49886	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:36.586858034 CET	49886	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:36.586870909 CET	443	49886	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:36.620754957 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.620784044 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.620855093 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.620867014 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.620898008 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.620923042 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.620929003 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.620958090 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.621007919 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.621014118 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.621040106 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.621057987 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.621083975 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.634555101 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.634577990 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.634655952 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.634684086 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.634727001 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.658734083 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.658751965 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.658802986 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.658818007 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.658875942 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.672595978 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.672611952 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.672674894 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.672687054 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.672734976 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.695449114 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.695470095 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.695516109 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.695524931 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.695591927 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.708849907 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.708865881 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.708934069 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.708950996 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.708996058 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.734313011 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.734333038 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.734374046 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.734389067 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.734421968 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.734446049 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.734721899 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.734743118 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.734802961 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.734812975 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.734853983 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.762423992 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.762444973 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.762511969 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.762523890 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.762574911 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.763547897 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.763570070 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.763612986 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.763626099 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.763649940 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.763659000 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.767621040 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.767673969 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.767685890 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.767699003 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.767736912 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.783283949 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.783302069 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.783348083 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.783356905 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.783392906 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.792969942 CET	443	49883	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.793030024 CET	49883	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.793600082 CET	49883	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.793611050 CET	443	49883	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.803956032 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.803972960 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.804038048 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.804050922 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.804126024 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.815668106 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.815737963 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.816138983 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:36.816148996 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:36.816963911 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.816988945 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.817025900 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.817037106 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.817060947 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.817081928 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.827476025 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.827491999 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.827558041 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.827567101 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.827601910 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.840881109 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.840895891 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.840948105 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.840959072 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.840991974 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.854166031 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.854183912 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.854245901 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.854255915 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.854296923 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.866257906 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.866272926 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.866329908 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.866338015 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.866379023 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.888036013 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.888052940 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.888103962 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.888124943 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.888144016 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.888161898 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.888175011 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.888242960 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:36.888264894 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.888293982 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:36.939105034 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.940215111 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:36.940232992 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.940483093 CET	49868	443	192.168.2.17	212.102.56.178
Jan 2, 2025 12:16:36.940516949 CET	443	49868	212.102.56.178	192.168.2.17
Jan 2, 2025 12:16:36.941365957 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:36.941416025 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.055443048 CET	443	49886	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:37.055711031 CET	49886	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:37.055728912 CET	443	49886	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:37.056081057 CET	443	49886	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:37.056565046 CET	49886	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:37.056632042 CET	443	49886	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:37.056776047 CET	49886	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:37.103322983 CET	443	49886	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:37.218533039 CET	443	49886	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:37.218636036 CET	443	49886	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:37.218791008 CET	49886	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:37.219063044 CET	49886	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:37.219084024 CET	443	49886	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:37.222162962 CET	49887	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:37.222215891 CET	443	49887	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:37.222419977 CET	49887	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:37.222532988 CET	49887	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:37.222543001 CET	443	49887	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:37.352638006 CET	49888	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:37.352695942 CET	443	49888	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:37.352777004 CET	49888	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:37.353044033 CET	49888	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:37.353059053 CET	443	49888	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:37.591420889 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.591634035 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.592087030 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.592103004 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.635283947 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.682914972 CET	443	49887	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:37.684360027 CET	49887	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:37.684376955 CET	443	49887	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:37.684811115 CET	443	49887	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:37.685254097 CET	49887	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:37.685326099 CET	443	49887	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:37.685605049 CET	49887	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:37.689259052 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.689287901 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.689296007 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.689320087 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.689348936 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.689353943 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.689373970 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.689397097 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.689409018 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.727334023 CET	443	49887	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:37.777501106 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.777540922 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.777568102 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.777580023 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.777610064 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.777632952 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.779055119 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.779073954 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.779141903 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.779150009 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.779236078 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.810483932 CET	443	49887	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:37.810580015 CET	443	49887	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:37.810697079 CET	49887	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:37.811119080 CET	49887	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:37.811136007 CET	443	49887	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:37.865926027 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.865952015 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.866019011 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.866034985 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.866076946 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.867624998 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.867650032 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.867691040 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.867697001 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.867721081 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.867739916 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.868740082 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.868756056 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.868804932 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.868812084 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.868859053 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.869530916 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.869548082 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.869606972 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.869612932 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.869669914 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.954741955 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.954776049 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.954828978 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.954838991 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.954884052 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.955101013 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.955141068 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.955157042 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.955163002 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.955198050 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:37.955203056 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:37.955238104 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:38.050945997 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:38.051687956 CET	49874	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:38.051723957 CET	443	49874	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:38.052112103 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:38.052190065 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:38.052572966 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:38.067655087 CET	443	49888	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:38.067734003 CET	49888	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:38.068232059 CET	49888	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:38.068249941 CET	443	49888	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:38.069571018 CET	49888	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:38.069583893 CET	443	49888	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:38.336781979 CET	443	49888	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:38.336850882 CET	443	49888	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:38.336859941 CET	49888	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:38.336899042 CET	49888	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:38.353533983 CET	49888	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:38.353552103 CET	443	49888	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:39.455302954 CET	49889	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:39.455357075 CET	443	49889	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:39.455442905 CET	49889	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:39.455708981 CET	49889	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:39.455723047 CET	443	49889	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:39.629460096 CET	49875	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:39.629481077 CET	443	49875	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:40.166292906 CET	443	49889	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:40.166367054 CET	49889	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:40.166964054 CET	49889	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:40.166975975 CET	443	49889	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:40.168541908 CET	49889	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:40.168551922 CET	443	49889	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:40.236238956 CET	49885	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:40.236269951 CET	443	49885	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:40.237485886 CET	49890	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:40.237525940 CET	443	49890	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:40.237591982 CET	49890	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:40.303586960 CET	49890	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:40.303621054 CET	443	49890	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:40.437334061 CET	443	49889	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:40.437427044 CET	443	49889	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:40.437449932 CET	49889	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:40.437498093 CET	49889	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:40.438884020 CET	49889	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:40.438904047 CET	443	49889	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:40.764964104 CET	443	49890	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:40.765324116 CET	49890	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:40.765341997 CET	443	49890	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:40.766416073 CET	443	49890	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:40.766510963 CET	49890	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:40.766925097 CET	49890	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:40.766988039 CET	443	49890	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:40.767287016 CET	49890	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:40.767297029 CET	443	49890	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:40.810411930 CET	49891	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:40.810467958 CET	443	49891	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:40.810574055 CET	49891	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:40.810904980 CET	49891	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:40.810920954 CET	443	49891	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:40.819338083 CET	49890	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:40.863311052 CET	443	49890	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:40.863394022 CET	443	49890	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:40.863666058 CET	49890	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:41.104264021 CET	49890	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:41.104311943 CET	443	49890	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:41.105737925 CET	49881	443	192.168.2.17	79.127.206.234
Jan 2, 2025 12:16:41.105763912 CET	443	49881	79.127.206.234	192.168.2.17
Jan 2, 2025 12:16:41.150310040 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.150362015 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.151562929 CET	49883	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.151588917 CET	49879	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:41.151595116 CET	443	49883	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.151622057 CET	443	49879	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:41.153470039 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:41.153527975 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:41.154191971 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:41.195450068 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:41.195491076 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:41.197495937 CET	49893	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.197556973 CET	443	49893	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.197643042 CET	49893	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.197918892 CET	49893	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.197932005 CET	443	49893	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.199453115 CET	49878	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:41.199474096 CET	443	49878	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:41.201775074 CET	49894	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:41.201793909 CET	443	49894	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:41.201911926 CET	49894	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:41.209988117 CET	49894	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:41.210009098 CET	443	49894	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:41.284336090 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.284368038 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.284384012 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.284446955 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.284486055 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.284498930 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.284529924 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.285386086 CET	443	49883	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.285434008 CET	49883	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.285450935 CET	443	49883	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.285469055 CET	443	49883	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.285505056 CET	49883	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.302925110 CET	49883	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.302951097 CET	443	49883	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.304783106 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.304819107 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.305077076 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.305901051 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.305912018 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.373817921 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.373842955 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.373891115 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.373914957 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.373938084 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.373955011 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.376039028 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.376056910 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.376105070 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.376111031 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.376147985 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.463902950 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.463928938 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.463975906 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.464004993 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.464024067 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.464042902 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.464659929 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.464680910 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.464735985 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.464742899 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.464772940 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.466120005 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.466182947 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.466187000 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.466198921 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.466247082 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.467086077 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.467112064 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.467143059 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.467148066 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.467180967 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.467195034 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.547591925 CET	443	49891	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:41.547652960 CET	49891	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:41.548110008 CET	49891	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:41.548115969 CET	443	49891	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:41.549551010 CET	49891	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:41.549557924 CET	443	49891	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:41.554282904 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.554369926 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.554392099 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.554445982 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.554770947 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.554786921 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.554832935 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.554841995 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.554877043 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.555809021 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.555824995 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.555874109 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.555881023 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.555906057 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.555926085 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.555941105 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.555958033 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.555985928 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.555990934 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.555999041 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.556015015 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.556039095 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.556042910 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.556067944 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.556081057 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.556159973 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.586129904 CET	49896	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:41.586172104 CET	443	49896	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:41.586419106 CET	49896	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:41.586678028 CET	49896	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:41.586684942 CET	443	49896	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:41.674436092 CET	443	49893	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.727303982 CET	49893	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.770447016 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.770507097 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.770977020 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:41.770993948 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:41.819622993 CET	443	49891	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:41.819700003 CET	49891	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:41.819705963 CET	443	49891	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:41.819761992 CET	49891	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:41.820808887 CET	49891	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:41.820823908 CET	443	49891	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:41.845685959 CET	443	49894	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:41.845750093 CET	49894	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:41.848566055 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:41.848807096 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:42.046699047 CET	443	49896	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:42.046971083 CET	49896	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:42.046984911 CET	443	49896	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:42.047370911 CET	443	49896	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:42.047877073 CET	49896	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:42.047955990 CET	443	49896	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:42.048023939 CET	49896	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:42.095330954 CET	443	49896	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:42.182060957 CET	443	49896	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:42.182163954 CET	443	49896	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:42.182219982 CET	49896	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:42.182754993 CET	49896	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:42.182769060 CET	443	49896	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:42.185724974 CET	49897	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:42.185780048 CET	443	49897	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:42.185899973 CET	49897	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:42.186114073 CET	49897	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:42.186125994 CET	443	49897	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:42.207084894 CET	49898	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:42.207128048 CET	443	49898	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:42.207221031 CET	49898	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:42.207696915 CET	49898	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:42.207710981 CET	443	49898	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:42.549168110 CET	80	49853	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:42.549269915 CET	49853	80	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:42.549326897 CET	49853	80	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:42.554131985 CET	80	49853	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:42.639163971 CET	443	49897	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:42.639921904 CET	49897	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:42.639940023 CET	443	49897	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:42.640307903 CET	443	49897	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:42.640638113 CET	49897	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:42.640702963 CET	443	49897	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:42.640798092 CET	49897	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:42.687339067 CET	443	49897	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:42.762772083 CET	443	49897	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:42.762868881 CET	443	49897	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:42.762918949 CET	49897	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:42.763487101 CET	49897	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:42.763505936 CET	443	49897	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:42.931833982 CET	443	49898	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:42.931919098 CET	49898	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:42.932378054 CET	49898	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:42.932385921 CET	443	49898	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:42.933821917 CET	49898	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:42.933830976 CET	443	49898	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:43.203794956 CET	443	49898	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:43.203902006 CET	443	49898	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:43.203922987 CET	49898	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:43.203948975 CET	49898	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:43.204910994 CET	49898	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:43.204931021 CET	443	49898	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:43.375087976 CET	49893	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.375122070 CET	443	49893	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.375444889 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.375458956 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.375605106 CET	49893	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.375610113 CET	443	49893	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.375627041 CET	49894	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.375646114 CET	443	49894	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.375724077 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.375735998 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.375946999 CET	49884	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.375966072 CET	443	49884	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.376574039 CET	49899	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.376611948 CET	443	49899	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.376696110 CET	49899	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.376884937 CET	49899	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.376900911 CET	443	49899	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.377254963 CET	49894	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.377262115 CET	443	49894	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.377295971 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.377300024 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.502141953 CET	443	49893	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.502233982 CET	443	49893	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.502289057 CET	49893	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.509820938 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.509848118 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.509862900 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.509931087 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.509943962 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.509996891 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.581592083 CET	443	49894	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.581620932 CET	443	49894	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.581636906 CET	443	49894	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.581681967 CET	49894	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.581701994 CET	49894	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.581708908 CET	443	49894	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.581759930 CET	49894	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.585925102 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.585949898 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.585973978 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.585989952 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.586005926 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.586024046 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.586072922 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.597438097 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.597465992 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.597513914 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.597524881 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.597573996 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.597587109 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.598690987 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.598709106 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.598759890 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.598767042 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.598813057 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.670819998 CET	443	49894	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.670876026 CET	443	49894	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.670958996 CET	49894	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.670975924 CET	443	49894	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.671010017 CET	49894	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.675839901 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.675868034 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.675920963 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.675930977 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.675972939 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.686525106 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.686552048 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.686594963 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.686604977 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.686633110 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.686652899 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.687047005 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.687064886 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.687113047 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.687124968 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.687170982 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.688205004 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.688222885 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.688288927 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.688297987 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.688344955 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.689085960 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.689158916 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.689167976 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.689184904 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.689207077 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.689254999 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.708134890 CET	443	49894	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.708154917 CET	443	49894	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.708236933 CET	49894	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.708256960 CET	443	49894	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.708314896 CET	49894	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.711937904 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.711957932 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.712243080 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.712255001 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.712294102 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.715253115 CET	443	49894	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.715327024 CET	49894	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.715333939 CET	443	49894	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.715348005 CET	443	49894	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.715367079 CET	49894	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.715399981 CET	49894	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.749596119 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.749615908 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.749697924 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.749711990 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.749749899 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.777772903 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.777790070 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.777849913 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.777869940 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.777906895 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.807382107 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.807400942 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.807476997 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.807503939 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.807548046 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.819854975 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.819943905 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:43.819976091 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.820000887 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:43.836218119 CET	443	49899	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:43.836565971 CET	49899	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.847510099 CET	49899	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:43.847523928 CET	443	49899	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:44.112731934 CET	49691	443	192.168.2.17	204.79.197.200
Jan 2, 2025 12:16:44.112864971 CET	49691	443	192.168.2.17	204.79.197.200
Jan 2, 2025 12:16:44.112899065 CET	49691	443	192.168.2.17	204.79.197.200
Jan 2, 2025 12:16:44.117667913 CET	443	49691	204.79.197.200	192.168.2.17
Jan 2, 2025 12:16:44.117681980 CET	443	49691	204.79.197.200	192.168.2.17
Jan 2, 2025 12:16:44.117789984 CET	443	49691	204.79.197.200	192.168.2.17
Jan 2, 2025 12:16:44.117799997 CET	443	49691	204.79.197.200	192.168.2.17
Jan 2, 2025 12:16:44.154376984 CET	49900	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:44.154428005 CET	443	49900	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:44.154510975 CET	49900	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:44.154798031 CET	49900	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:44.154808044 CET	443	49900	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:44.227643013 CET	443	49691	204.79.197.200	192.168.2.17
Jan 2, 2025 12:16:44.227729082 CET	49691	443	192.168.2.17	204.79.197.200
Jan 2, 2025 12:16:44.868283987 CET	443	49900	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:44.868355989 CET	49900	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:44.868798971 CET	49900	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:44.868810892 CET	443	49900	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:44.870032072 CET	49900	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:44.870038033 CET	443	49900	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:45.099467039 CET	49893	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:45.099514961 CET	443	49893	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:45.100183964 CET	49895	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:45.100192070 CET	443	49895	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:45.101178885 CET	49899	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:45.101219893 CET	443	49899	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:45.101253986 CET	49894	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:45.101284027 CET	443	49894	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:45.101675987 CET	49901	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:45.101717949 CET	443	49901	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:45.101783037 CET	49901	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:45.101816893 CET	49892	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:45.101826906 CET	443	49892	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:45.102024078 CET	49902	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:45.102072001 CET	443	49902	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:45.102461100 CET	49902	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:45.102668047 CET	49902	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:45.102689028 CET	443	49902	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:45.102962017 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:45.103001118 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:45.103046894 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:45.103146076 CET	49901	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:45.103156090 CET	443	49901	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:45.103519917 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:45.103533030 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:45.104338884 CET	49904	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:45.104348898 CET	443	49904	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:45.104417086 CET	49904	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:45.104674101 CET	49904	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:45.104686022 CET	443	49904	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:45.138582945 CET	443	49900	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:45.138638973 CET	49900	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:45.138653040 CET	443	49900	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:45.138701916 CET	49900	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:45.138708115 CET	443	49900	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:45.138724089 CET	443	49900	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:45.138755083 CET	49900	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:45.138786077 CET	49900	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:45.139512062 CET	49900	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:45.139527082 CET	443	49900	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:45.226854086 CET	443	49899	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:45.226919889 CET	49899	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:45.226938009 CET	443	49899	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:45.226952076 CET	443	49899	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:45.226984024 CET	49899	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:45.227010965 CET	49899	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:45.228013992 CET	49899	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:45.228030920 CET	443	49899	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:45.514688015 CET	49905	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:45.514749050 CET	443	49905	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:45.514844894 CET	49905	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:45.515080929 CET	49905	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:45.515095949 CET	443	49905	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:45.580615044 CET	443	49904	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:45.580727100 CET	49904	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:45.583596945 CET	49904	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:45.583611965 CET	443	49904	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:45.583875895 CET	443	49904	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:45.595118046 CET	443	49901	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:45.595179081 CET	49901	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:45.624335051 CET	49904	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:45.739252090 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:45.739331961 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:45.757066011 CET	443	49902	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:45.757190943 CET	49902	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.228645086 CET	443	49905	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:46.228725910 CET	49905	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:46.235780954 CET	49905	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:46.235805035 CET	443	49905	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:46.252742052 CET	49905	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:46.252774000 CET	443	49905	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:46.499254942 CET	443	49905	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:46.499375105 CET	443	49905	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:46.499463081 CET	49905	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:46.500391006 CET	49905	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:46.500411034 CET	443	49905	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:46.516381025 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.516403913 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.516447067 CET	49902	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.516479015 CET	49901	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.516484976 CET	443	49902	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.516493082 CET	443	49901	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.516601086 CET	49901	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.516604900 CET	443	49901	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.516921997 CET	49906	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.516948938 CET	443	49906	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.517013073 CET	49906	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.517188072 CET	49906	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.517199993 CET	443	49906	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.517394066 CET	49904	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.517976046 CET	49907	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.518022060 CET	443	49907	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.518109083 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.518115044 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.518146992 CET	49902	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.518156052 CET	443	49902	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.518189907 CET	49907	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.518309116 CET	49907	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.518322945 CET	443	49907	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.559351921 CET	443	49904	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.586196899 CET	49908	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:46.586241961 CET	443	49908	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:46.586318016 CET	49908	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:46.586534023 CET	49908	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:46.586543083 CET	443	49908	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:46.653621912 CET	443	49904	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.653707981 CET	443	49904	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.653845072 CET	49904	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.653901100 CET	49904	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.653917074 CET	443	49904	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.665092945 CET	443	49901	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.665179014 CET	443	49901	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.665225983 CET	49901	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.665292978 CET	49901	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.666359901 CET	49901	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.666383028 CET	443	49901	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.666847944 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.666898012 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.666979074 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.667162895 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.667179108 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.726468086 CET	443	49902	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.726492882 CET	443	49902	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.726509094 CET	443	49902	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.726536036 CET	49902	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.726564884 CET	443	49902	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.726581097 CET	49902	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.726643085 CET	49902	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.733630896 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.733663082 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.733678102 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.733707905 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.733738899 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.733747959 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.733797073 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.752686977 CET	49910	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:46.752752066 CET	443	49910	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:46.752981901 CET	49910	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:46.753216028 CET	49910	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:46.753228903 CET	443	49910	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:46.815685987 CET	443	49902	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.815717936 CET	443	49902	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.815783978 CET	49902	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.815805912 CET	443	49902	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.815833092 CET	49902	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.815851927 CET	49902	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.822799921 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.822829008 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.822880983 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.822909117 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.822926998 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.822942972 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.846612930 CET	443	49902	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.846648932 CET	443	49902	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.846695900 CET	443	49902	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.846698046 CET	49902	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.846730947 CET	49902	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.846755028 CET	49902	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.847028971 CET	49902	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.847043991 CET	443	49902	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.847527981 CET	49911	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.847552061 CET	443	49911	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.847626925 CET	49911	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.847914934 CET	49911	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.847929001 CET	443	49911	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.859514952 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.859539986 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.859607935 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.859637976 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.859649897 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.859865904 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.899148941 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.899178028 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.899247885 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.899260044 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.899311066 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.928733110 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.928755045 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.928859949 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.928904057 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.929002047 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.956264973 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.956288099 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.956362963 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.956377983 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.956420898 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.975142956 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.975169897 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.975239038 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.975251913 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.975317001 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.981504917 CET	443	49906	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.981571913 CET	49906	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.981976032 CET	49906	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.981982946 CET	443	49906	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.982146978 CET	49906	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.982152939 CET	443	49906	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.983455896 CET	443	49907	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.983866930 CET	49907	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.983906984 CET	443	49907	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.984309912 CET	49907	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:46.984318018 CET	443	49907	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:46.994836092 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.994865894 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.994918108 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.994926929 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:46.994961023 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:46.994985104 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:47.008075953 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:47.008102894 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:47.008147955 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:47.008156061 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:47.008198023 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:47.019309044 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:47.019354105 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:47.019393921 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:47.019402027 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:47.019454002 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:47.019469976 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:47.032253027 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:47.032286882 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:47.032339096 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:47.032346010 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:47.032367945 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:47.032393932 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:47.040872097 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:47.040901899 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:47.040945053 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:47.040951967 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:47.040980101 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:47.040991068 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:47.041002989 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:47.041032076 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:47.041218042 CET	49903	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:47.041234016 CET	443	49903	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:47.083303928 CET	443	49906	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:47.083386898 CET	443	49906	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:47.083461046 CET	49906	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:47.087142944 CET	443	49908	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:47.088841915 CET	49908	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:47.088870049 CET	443	49908	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:47.089247942 CET	443	49908	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:47.089706898 CET	49908	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:47.089776993 CET	443	49908	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:47.090039015 CET	49908	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:47.111975908 CET	443	49907	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:47.112045050 CET	443	49907	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:47.112111092 CET	49907	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:47.112179995 CET	49907	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:47.112198114 CET	443	49907	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:47.126497984 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:47.126571894 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:47.135334015 CET	443	49908	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:47.265202999 CET	443	49908	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:47.265296936 CET	443	49908	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:47.265388966 CET	49908	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:47.265769958 CET	49908	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:47.265798092 CET	443	49908	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:47.268707991 CET	49912	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:47.268752098 CET	443	49912	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:47.268858910 CET	49912	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:47.269077063 CET	49912	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:47.269093990 CET	443	49912	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:47.489283085 CET	443	49910	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:47.489348888 CET	49910	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:47.490050077 CET	49910	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:47.490067005 CET	443	49910	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:47.491354942 CET	49910	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:47.491362095 CET	443	49910	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:47.505239964 CET	443	49911	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:47.505330086 CET	49911	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:47.505752087 CET	49911	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:47.505764008 CET	443	49911	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:47.719458103 CET	443	49912	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:47.719746113 CET	49912	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:47.719763994 CET	443	49912	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:47.720119953 CET	443	49912	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:47.720426083 CET	49912	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:47.720484972 CET	443	49912	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:47.720552921 CET	49912	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:47.763468981 CET	443	49910	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:47.763557911 CET	443	49910	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:47.763556004 CET	49910	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:47.763606071 CET	49910	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:47.764358044 CET	49910	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:47.764378071 CET	443	49910	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:47.767334938 CET	443	49912	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:47.846420050 CET	443	49912	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:47.846525908 CET	443	49912	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:47.846595049 CET	49912	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:47.847089052 CET	49912	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:47.847105980 CET	443	49912	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:48.046406031 CET	49913	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:48.046444893 CET	443	49913	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:48.046570063 CET	49913	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:48.046786070 CET	49913	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:48.046797991 CET	443	49913	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:48.088618040 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.088650942 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.088886023 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.088891983 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.090023994 CET	49911	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:48.090055943 CET	443	49911	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:48.090470076 CET	49906	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.090502977 CET	443	49906	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.091032982 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.091051102 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.091223001 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.091414928 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.091428041 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.101597071 CET	49915	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:48.101632118 CET	443	49915	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:48.101761103 CET	49915	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:48.101978064 CET	49915	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:48.101994991 CET	443	49915	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:48.223737955 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.223762989 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.223778963 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.223803997 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.223830938 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.223843098 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.223890066 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.301644087 CET	443	49911	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:48.301672935 CET	443	49911	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:48.301687002 CET	443	49911	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:48.301734924 CET	49911	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:48.301779985 CET	49911	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:48.301790953 CET	443	49911	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:48.301868916 CET	49911	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:48.309021950 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.309051991 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.309113979 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.309148073 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.309166908 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.309181929 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.310722113 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.310748100 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.310792923 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.310801029 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.310828924 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.310858965 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.390918016 CET	443	49911	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:48.390947104 CET	443	49911	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:48.391006947 CET	49911	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:48.391020060 CET	443	49911	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:48.391056061 CET	49911	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:48.391068935 CET	49911	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:48.394263029 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.394289017 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.394392014 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.394421101 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.394565105 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.394884109 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.394934893 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.394973040 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.394984007 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.395008087 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.395021915 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.396353006 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.396373987 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.396420002 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.396450043 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.396465063 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.396487951 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.396502018 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.396506071 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.396548033 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.397085905 CET	49909	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.397104025 CET	443	49909	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.397726059 CET	49916	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.397772074 CET	443	49916	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.397839069 CET	49916	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.398041964 CET	49916	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.398061037 CET	443	49916	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.427438974 CET	443	49911	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:48.427464008 CET	443	49911	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:48.427525997 CET	49911	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:48.427539110 CET	443	49911	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:48.427561045 CET	49911	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:48.427582026 CET	49911	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:48.465163946 CET	443	49911	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:48.465270996 CET	443	49911	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:48.465282917 CET	49911	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:48.465361118 CET	49911	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:48.465728045 CET	49911	443	192.168.2.17	195.181.170.18
Jan 2, 2025 12:16:48.465745926 CET	443	49911	195.181.170.18	192.168.2.17
Jan 2, 2025 12:16:48.545046091 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.545141935 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.545578003 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.545593977 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.545759916 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.545764923 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.683672905 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.683701992 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.683718920 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.683788061 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.683834076 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.683845043 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.683901072 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.735491991 CET	443	49915	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:48.735680103 CET	49915	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:48.741693974 CET	49915	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:48.741710901 CET	443	49915	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:48.742006063 CET	443	49915	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:48.742141008 CET	49915	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:48.742569923 CET	49915	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:48.761089087 CET	443	49913	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:48.761187077 CET	49913	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:48.762293100 CET	49913	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:48.762306929 CET	443	49913	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:48.763900042 CET	49913	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:48.763907909 CET	443	49913	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:48.766225100 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.766251087 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.766319036 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.766328096 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.766361952 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.768001080 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.768023014 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.768084049 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.768090963 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.768142939 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.787332058 CET	443	49915	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:48.852056026 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.852082014 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.852206945 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.852226973 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.852282047 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.853483915 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.853502989 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.853549957 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.853554964 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.853585005 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.853604078 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.854502916 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.854522943 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.854571104 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.854578018 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.854583025 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.854610920 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.854613066 CET	443	49916	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.854629040 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.854634047 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.854646921 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.854662895 CET	49916	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.854686022 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.855401039 CET	49914	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.855417013 CET	443	49914	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.855746031 CET	49916	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.855758905 CET	443	49916	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.857753038 CET	49916	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.857758045 CET	443	49916	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.861080885 CET	49917	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.861119032 CET	443	49917	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:48.861182928 CET	49917	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.861668110 CET	49917	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:48.861679077 CET	443	49917	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:49.010795116 CET	443	49915	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:49.010854959 CET	49915	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:49.010869026 CET	443	49915	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:49.010881901 CET	443	49915	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:49.010930061 CET	49915	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:49.012128115 CET	49915	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:49.012140036 CET	443	49915	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:49.025765896 CET	443	49916	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:49.025788069 CET	443	49916	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:49.025806904 CET	443	49916	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:49.025837898 CET	49916	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:49.025871992 CET	49916	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:49.025878906 CET	443	49916	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:49.025933027 CET	49916	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:49.032453060 CET	443	49913	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:49.032520056 CET	443	49913	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:49.032522917 CET	49913	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:49.032610893 CET	49913	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:49.034236908 CET	49913	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:49.034245968 CET	443	49913	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:49.111674070 CET	443	49916	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:49.111696005 CET	443	49916	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:49.111772060 CET	49916	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:49.111779928 CET	443	49916	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:49.111821890 CET	49916	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:49.113861084 CET	443	49916	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:49.113883972 CET	443	49916	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:49.113933086 CET	49916	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:49.113940001 CET	443	49916	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:49.113982916 CET	49916	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:49.197681904 CET	443	49916	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:49.197722912 CET	443	49916	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:49.197757959 CET	49916	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:49.197757959 CET	443	49916	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:49.197804928 CET	49916	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:49.316797972 CET	443	49917	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:49.316863060 CET	49917	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:49.322568893 CET	49917	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:49.322576046 CET	443	49917	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:49.328038931 CET	49918	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:49.328074932 CET	443	49918	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:49.328161001 CET	49918	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:49.328341961 CET	49918	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:49.328355074 CET	443	49918	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:49.408565044 CET	443	49872	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:49.408644915 CET	443	49872	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:49.408708096 CET	49872	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:49.411431074 CET	443	49871	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:49.411499023 CET	443	49871	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:49.411545992 CET	49871	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:50.040586948 CET	443	49918	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:50.040734053 CET	49918	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:50.041101933 CET	49918	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:50.041109085 CET	443	49918	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:50.042361975 CET	49918	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:50.042367935 CET	443	49918	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:50.311105967 CET	443	49918	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:50.311183929 CET	49917	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.311183929 CET	49918	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:50.311206102 CET	443	49917	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.311213970 CET	443	49918	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:50.311260939 CET	49918	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:50.311356068 CET	49916	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.311398983 CET	443	49916	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.311956882 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.311964989 CET	49920	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.311996937 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.312004089 CET	443	49920	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.312081099 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.312196970 CET	49920	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.312200069 CET	49918	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:50.312208891 CET	443	49918	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:50.312288046 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.312297106 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.312558889 CET	49920	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.312571049 CET	443	49920	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.438616991 CET	443	49917	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.438692093 CET	49917	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.438697100 CET	443	49917	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.438754082 CET	49917	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.439722061 CET	49917	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.439738035 CET	443	49917	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.440316916 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.440356970 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.440427065 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.440642118 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.440659046 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.576316118 CET	49922	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:50.576335907 CET	443	49922	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:50.576738119 CET	49922	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:50.576953888 CET	49922	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:50.576965094 CET	443	49922	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:50.767704964 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.767785072 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.768233061 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.768240929 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.768381119 CET	443	49920	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.768419027 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.768424988 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.768726110 CET	49920	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.768771887 CET	443	49920	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.769167900 CET	49920	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.769174099 CET	443	49920	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.908018112 CET	443	49920	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.908088923 CET	443	49920	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.908171892 CET	49920	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.908245087 CET	49920	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.908269882 CET	443	49920	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.915380001 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.915446997 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.915833950 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.915841103 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.916024923 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.916029930 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.928345919 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.928370953 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.928390026 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.928410053 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.928442001 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:50.928450108 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:50.928488016 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.011841059 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.011872053 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.011945963 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.011961937 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.011986971 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.012006044 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.013096094 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.013113022 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.013180971 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.013190031 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.013268948 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.084641933 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.084666967 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.084685087 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.084728003 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.084764004 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.084770918 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.084829092 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.097667933 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.097691059 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.097755909 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.097770929 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.097819090 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.098995924 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.099013090 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.099097967 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.099106073 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.099190950 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.099937916 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.099953890 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.100013971 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.100022078 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.100126982 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.102021933 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.102040052 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.102112055 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.102119923 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.102232933 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.171565056 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.171581984 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.171647072 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.171658993 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.171700001 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.172595978 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.172610044 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.172679901 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.172688007 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.172729015 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.183809042 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.183829069 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.183873892 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.183887005 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.183917046 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.183933973 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.184281111 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.184297085 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.184350967 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.184357882 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.184401035 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.184653997 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.184672117 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.184717894 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.184726000 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.184747934 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.184761047 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.184953928 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.184971094 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.185029030 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.185036898 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.185079098 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.188206911 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.188224077 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.188290119 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.188297033 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.188358068 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.188649893 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.188667059 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.188718081 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.188725948 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.188770056 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.261748075 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.261776924 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.261861086 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.261873960 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.261915922 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.262428045 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.262445927 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.262502909 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.262510061 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.262551069 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.263478994 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.263494968 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.263684988 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.263691902 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.263772011 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.269777060 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.269797087 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.269875050 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.269885063 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.269896030 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.269918919 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.270088911 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.270104885 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.270143032 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.270149946 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.270169020 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.270190001 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.270359039 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.270375013 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.270410061 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.270417929 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.270446062 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.270466089 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.270684958 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.270733118 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.270759106 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.270764112 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.270792961 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.270807028 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.270930052 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.270952940 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.270988941 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.270998001 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.271015882 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.271039963 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.271294117 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.271310091 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.271343946 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.271351099 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.271370888 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.271385908 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.271522999 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.271542072 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.271579027 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.271585941 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.271603107 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.271620989 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.271919966 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.271941900 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.271970034 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.271976948 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.272000074 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.272018909 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.304991961 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.305025101 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.305092096 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.305104971 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.305145025 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.305160999 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.307770967 CET	443	49922	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:51.307878017 CET	49922	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:51.309756994 CET	49922	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:51.309762001 CET	443	49922	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:51.321974039 CET	49922	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:51.321980000 CET	443	49922	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:51.352530956 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.352551937 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.352667093 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.352675915 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.352722883 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.353693962 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.353709936 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.353768110 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.353775978 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.353821993 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.354687929 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.354702950 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.354765892 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.354772091 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.354814053 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.355885983 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.355901957 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.355952978 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.355959892 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.355999947 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.356765985 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.356781006 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.356836081 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.356843948 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.356890917 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.356981993 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.357007027 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.357096910 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.357108116 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.357183933 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.357206106 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.357259035 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.357268095 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.357311964 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.357311964 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.357445002 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.357465029 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.357522964 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.357532024 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.357774019 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.357794046 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.357846975 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.357871056 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.357871056 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.357880116 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.357903957 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.357923985 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.357971907 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.357971907 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.358546019 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.358573914 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.358603001 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.358611107 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.358633041 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.358652115 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.373290062 CET	49919	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.373307943 CET	443	49919	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.378114939 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.378148079 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.378235102 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.384948969 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.384960890 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.395386934 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.395405054 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.395481110 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.395493984 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.395538092 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.442322016 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.442369938 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.442401886 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.442409039 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.442447901 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.442466021 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.444922924 CET	49921	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.444937944 CET	443	49921	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.578721046 CET	443	49922	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:51.578793049 CET	49922	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:51.578802109 CET	443	49922	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:51.578851938 CET	49922	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:51.579777956 CET	49922	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:51.579788923 CET	443	49922	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:51.585803032 CET	49924	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:51.585853100 CET	443	49924	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:51.587896109 CET	49924	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:51.588138103 CET	49924	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:51.588152885 CET	443	49924	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:51.861597061 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:51.861682892 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.862123013 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:51.862129927 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:52.007940054 CET	49925	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:52.007982016 CET	443	49925	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:52.008110046 CET	49925	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:52.008354902 CET	49925	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:52.008367062 CET	443	49925	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:52.106379986 CET	443	49924	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:52.106642008 CET	49924	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:52.106657982 CET	443	49924	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:52.107028008 CET	443	49924	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:52.107331038 CET	49924	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:52.107393026 CET	443	49924	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:52.107474089 CET	49924	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:52.155329943 CET	443	49924	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:52.293534040 CET	443	49924	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:52.293606997 CET	443	49924	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:52.293694019 CET	49924	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:52.294843912 CET	49924	443	192.168.2.17	159.223.101.159
Jan 2, 2025 12:16:52.294859886 CET	443	49924	159.223.101.159	192.168.2.17
Jan 2, 2025 12:16:52.297744989 CET	49926	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:52.297769070 CET	443	49926	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:52.297857046 CET	49926	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:52.298059940 CET	49926	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:52.298070908 CET	443	49926	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:52.731306076 CET	443	49925	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:52.731373072 CET	49925	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:52.731813908 CET	49925	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:52.731818914 CET	443	49925	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:52.733107090 CET	49925	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:52.733112097 CET	443	49925	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:52.770853996 CET	443	49926	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:52.774364948 CET	49926	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:52.774373055 CET	443	49926	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:52.774821997 CET	443	49926	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:52.775141954 CET	49926	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:52.775274038 CET	443	49926	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:52.775279999 CET	49926	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:52.818357944 CET	49926	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:52.818362951 CET	443	49926	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:52.900352955 CET	443	49926	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:52.900407076 CET	443	49926	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:52.900542974 CET	49926	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:52.902173042 CET	49926	443	192.168.2.17	104.248.126.225
Jan 2, 2025 12:16:52.902188063 CET	443	49926	104.248.126.225	192.168.2.17
Jan 2, 2025 12:16:52.913758039 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:52.913789988 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:52.914752007 CET	49927	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:52.914797068 CET	443	49927	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:52.914866924 CET	49927	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:52.915709972 CET	49927	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:52.915721893 CET	443	49927	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:52.929811954 CET	49928	443	192.168.2.17	147.182.211.77
Jan 2, 2025 12:16:52.929833889 CET	443	49928	147.182.211.77	192.168.2.17
Jan 2, 2025 12:16:52.929893970 CET	49928	443	192.168.2.17	147.182.211.77
Jan 2, 2025 12:16:52.930200100 CET	49928	443	192.168.2.17	147.182.211.77
Jan 2, 2025 12:16:52.930211067 CET	443	49928	147.182.211.77	192.168.2.17
Jan 2, 2025 12:16:53.007774115 CET	443	49925	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:53.007862091 CET	443	49925	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:53.008086920 CET	49925	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:53.009139061 CET	49925	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:53.009161949 CET	443	49925	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:53.051620007 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.051651955 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.051671028 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.051688910 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.051724911 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.051737070 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.051758051 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.051788092 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.141707897 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.141741037 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.141793966 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.141813993 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.141835928 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.141860962 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.142611980 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.142628908 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.142693996 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.142700911 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.142749071 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.232341051 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.232366085 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.232430935 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.232453108 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.232494116 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.233392000 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.233408928 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.233463049 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.233469009 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.233519077 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.234359026 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.234378099 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.234412909 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.234417915 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.234450102 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.234467983 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.235222101 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.235285044 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.235291004 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.235317945 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.235342979 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.235368013 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.237215996 CET	49923	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.237236023 CET	443	49923	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.241413116 CET	49929	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.241456032 CET	443	49929	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.241532087 CET	49929	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.241718054 CET	49929	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.241730928 CET	443	49929	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.300707102 CET	49930	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:53.300735950 CET	443	49930	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:53.300816059 CET	49930	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:53.301040888 CET	49930	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:53.301048994 CET	443	49930	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:53.371901035 CET	443	49927	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.371982098 CET	49927	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.372376919 CET	49927	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.372390985 CET	443	49927	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.413429976 CET	443	49928	147.182.211.77	192.168.2.17
Jan 2, 2025 12:16:53.413506031 CET	49928	443	192.168.2.17	147.182.211.77
Jan 2, 2025 12:16:53.414962053 CET	49928	443	192.168.2.17	147.182.211.77
Jan 2, 2025 12:16:53.414968014 CET	443	49928	147.182.211.77	192.168.2.17
Jan 2, 2025 12:16:53.415208101 CET	443	49928	147.182.211.77	192.168.2.17
Jan 2, 2025 12:16:53.470344067 CET	49928	443	192.168.2.17	147.182.211.77
Jan 2, 2025 12:16:53.698092937 CET	443	49929	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:53.698420048 CET	49929	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.698811054 CET	49929	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:53.698818922 CET	443	49929	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:54.019247055 CET	443	49930	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:54.019335032 CET	49930	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:54.019835949 CET	49930	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:54.019841909 CET	443	49930	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:54.021133900 CET	49930	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:54.021140099 CET	443	49930	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:54.290328026 CET	443	49930	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:54.290400028 CET	49930	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:54.290406942 CET	443	49930	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:54.290426016 CET	443	49930	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:54.290451050 CET	49930	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:54.290478945 CET	49930	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:54.291621923 CET	49930	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:54.291635036 CET	443	49930	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:54.716252089 CET	49931	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:54.716283083 CET	443	49931	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:54.716371059 CET	49931	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:54.716622114 CET	49931	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:54.716636896 CET	443	49931	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:55.120608091 CET	49927	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.120640993 CET	443	49927	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.120703936 CET	49929	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.120719910 CET	443	49929	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.121071100 CET	49928	443	192.168.2.17	147.182.211.77
Jan 2, 2025 12:16:55.163331985 CET	443	49928	147.182.211.77	192.168.2.17
Jan 2, 2025 12:16:55.218432903 CET	443	49927	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.218503952 CET	49927	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.218518972 CET	443	49927	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.218532085 CET	443	49927	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.218560934 CET	49927	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.218584061 CET	49927	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.225764036 CET	49927	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.225785971 CET	443	49927	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.225805998 CET	443	49928	147.182.211.77	192.168.2.17
Jan 2, 2025 12:16:55.225881100 CET	443	49928	147.182.211.77	192.168.2.17
Jan 2, 2025 12:16:55.225922108 CET	49928	443	192.168.2.17	147.182.211.77
Jan 2, 2025 12:16:55.226037025 CET	49928	443	192.168.2.17	147.182.211.77
Jan 2, 2025 12:16:55.226042032 CET	443	49928	147.182.211.77	192.168.2.17
Jan 2, 2025 12:16:55.226455927 CET	49932	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.226506948 CET	443	49932	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.226613998 CET	49932	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.226675034 CET	49933	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:55.226702929 CET	443	49933	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:55.226763010 CET	49933	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:55.226798058 CET	49932	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.226809978 CET	443	49932	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.226994991 CET	49933	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:55.227008104 CET	443	49933	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:55.251497030 CET	443	49929	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.251559019 CET	49929	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.251565933 CET	443	49929	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.251580954 CET	443	49929	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.251646042 CET	49929	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.252513885 CET	49929	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.252526999 CET	443	49929	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.252933979 CET	49934	80	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.257889032 CET	80	49934	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.257962942 CET	49934	80	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.258085012 CET	49934	80	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.263072968 CET	80	49934	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.441174030 CET	443	49931	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:55.441251993 CET	49931	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:55.441705942 CET	49931	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:55.441718102 CET	443	49931	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:55.443048954 CET	49931	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:55.443054914 CET	443	49931	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:55.686604977 CET	443	49932	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.686724901 CET	49932	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.687093973 CET	49932	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.687099934 CET	443	49932	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.687302113 CET	49932	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.687308073 CET	443	49932	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.705059052 CET	80	49934	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.705158949 CET	49934	80	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.705461979 CET	49934	80	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.710462093 CET	80	49934	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.713078976 CET	443	49931	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:55.713146925 CET	49931	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:55.713156939 CET	443	49931	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:55.713213921 CET	49931	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:55.714492083 CET	49931	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:55.714507103 CET	443	49931	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:55.800753117 CET	80	49934	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.800879002 CET	49934	80	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.801045895 CET	49934	80	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.801394939 CET	49935	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.801428080 CET	443	49935	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.801505089 CET	49935	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.801700115 CET	49935	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.801714897 CET	443	49935	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.806000948 CET	80	49934	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.806071997 CET	49934	80	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.825098038 CET	443	49932	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.825128078 CET	443	49932	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.825169086 CET	49932	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.825181007 CET	443	49932	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.825197935 CET	443	49932	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.825228930 CET	49932	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.825228930 CET	49932	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.825263023 CET	49932	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.826124907 CET	49932	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.826137066 CET	443	49932	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.826579094 CET	49936	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.826606989 CET	443	49936	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.826791048 CET	49936	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.826937914 CET	49936	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:55.826947927 CET	443	49936	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:55.870668888 CET	443	49933	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:55.870753050 CET	49933	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:55.871058941 CET	49933	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:55.871072054 CET	443	49933	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:55.871206999 CET	49933	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:55.871215105 CET	443	49933	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:56.064960003 CET	49937	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:56.065022945 CET	443	49937	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:56.065114021 CET	49937	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:56.065329075 CET	49937	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:56.065339088 CET	443	49937	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:56.163995028 CET	443	49933	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:56.164021969 CET	443	49933	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:56.164063931 CET	443	49933	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:56.164066076 CET	49933	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:56.164091110 CET	443	49933	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:56.164103031 CET	49933	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:56.164103985 CET	443	49933	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:56.164138079 CET	49933	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:56.164165020 CET	49933	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:56.166138887 CET	49933	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:56.166157007 CET	443	49933	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:56.232112885 CET	49938	443	192.168.2.17	147.182.211.77
Jan 2, 2025 12:16:56.232155085 CET	443	49938	147.182.211.77	192.168.2.17
Jan 2, 2025 12:16:56.232237101 CET	49938	443	192.168.2.17	147.182.211.77
Jan 2, 2025 12:16:56.232429028 CET	49938	443	192.168.2.17	147.182.211.77
Jan 2, 2025 12:16:56.232441902 CET	443	49938	147.182.211.77	192.168.2.17
Jan 2, 2025 12:16:56.257972956 CET	443	49935	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.258059025 CET	49935	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.258388042 CET	49935	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.258394957 CET	443	49935	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.258583069 CET	49935	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.258586884 CET	443	49935	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.287070990 CET	443	49936	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.287142038 CET	49936	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.287432909 CET	49936	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.287442923 CET	443	49936	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.287576914 CET	49936	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.287581921 CET	443	49936	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.358711958 CET	443	49935	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.358773947 CET	443	49935	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.358804941 CET	49935	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.358830929 CET	49935	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.366875887 CET	49935	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.366890907 CET	443	49935	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.367357016 CET	49939	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.367398024 CET	443	49939	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.367516041 CET	49939	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.367696047 CET	49939	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.367712021 CET	443	49939	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.367814064 CET	49940	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:56.367841005 CET	443	49940	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:56.367918015 CET	49940	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:56.368073940 CET	49940	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:56.368082047 CET	443	49940	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:56.387603045 CET	443	49936	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.387671947 CET	443	49936	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.387701988 CET	49936	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.387732029 CET	49936	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.396100998 CET	49936	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.396116018 CET	443	49936	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.396644115 CET	49941	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.396683931 CET	443	49941	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.396759987 CET	49941	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.396960020 CET	49941	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.396974087 CET	443	49941	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.397131920 CET	49942	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:56.397145033 CET	443	49942	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:56.397226095 CET	49942	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:56.397398949 CET	49942	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:56.397408962 CET	443	49942	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:56.685719013 CET	443	49938	147.182.211.77	192.168.2.17
Jan 2, 2025 12:16:56.686208963 CET	49938	443	192.168.2.17	147.182.211.77
Jan 2, 2025 12:16:56.686232090 CET	443	49938	147.182.211.77	192.168.2.17
Jan 2, 2025 12:16:56.686882019 CET	49938	443	192.168.2.17	147.182.211.77
Jan 2, 2025 12:16:56.686887026 CET	443	49938	147.182.211.77	192.168.2.17
Jan 2, 2025 12:16:56.775063992 CET	443	49937	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:56.775182962 CET	49937	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:56.775599957 CET	49937	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:56.775612116 CET	443	49937	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:56.777026892 CET	49937	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:56.777041912 CET	443	49937	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:56.789048910 CET	443	49938	147.182.211.77	192.168.2.17
Jan 2, 2025 12:16:56.789103031 CET	443	49938	147.182.211.77	192.168.2.17
Jan 2, 2025 12:16:56.789284945 CET	49938	443	192.168.2.17	147.182.211.77
Jan 2, 2025 12:16:56.789331913 CET	49938	443	192.168.2.17	147.182.211.77
Jan 2, 2025 12:16:56.842124939 CET	443	49939	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.842544079 CET	49939	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.842545033 CET	49939	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.842573881 CET	443	49939	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.842758894 CET	49939	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.842765093 CET	443	49939	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.862845898 CET	443	49941	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.862931013 CET	49941	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.863179922 CET	49941	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.863189936 CET	443	49941	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.863338947 CET	49941	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.863343954 CET	443	49941	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.942723989 CET	443	49939	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.942785025 CET	443	49939	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.942835093 CET	49939	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.942869902 CET	49939	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.950104952 CET	49939	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.950123072 CET	443	49939	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.964539051 CET	443	49941	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.964601994 CET	443	49941	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:56.964617014 CET	49941	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.964656115 CET	49941	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.971554041 CET	49941	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:56.971580029 CET	443	49941	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:57.030769110 CET	443	49940	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.030848026 CET	49940	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.031225920 CET	49940	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.031234980 CET	443	49940	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.031436920 CET	49940	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.031440973 CET	443	49940	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.041857958 CET	443	49942	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.041991949 CET	49942	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.042421103 CET	49942	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.042429924 CET	443	49942	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.042527914 CET	49942	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.042531967 CET	443	49942	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.044783115 CET	443	49937	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:57.044828892 CET	49937	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:57.044841051 CET	443	49937	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:57.044876099 CET	443	49937	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:57.044888020 CET	49937	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:57.044939041 CET	49937	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:57.049901009 CET	49937	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:57.049916983 CET	443	49937	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:57.311253071 CET	443	49940	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.311290026 CET	443	49940	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.311338902 CET	49940	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.311350107 CET	443	49940	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.311362982 CET	443	49940	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.311403036 CET	49940	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.311403036 CET	49940	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.313065052 CET	49940	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.313081026 CET	443	49940	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.313602924 CET	49943	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.313649893 CET	443	49943	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.313842058 CET	49943	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.314042091 CET	49943	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.314059019 CET	443	49943	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.320413113 CET	443	49942	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.320471048 CET	49942	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.320478916 CET	443	49942	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.320548058 CET	49942	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.321700096 CET	49942	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.321707010 CET	443	49942	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.322165966 CET	49944	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.322206974 CET	443	49944	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.322276115 CET	49944	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.322441101 CET	49944	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.322449923 CET	443	49944	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.353518963 CET	49945	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:57.353562117 CET	443	49945	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:57.353884935 CET	49945	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:57.354072094 CET	49945	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:57.354084015 CET	443	49945	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:57.793256044 CET	49946	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:57.793297052 CET	443	49946	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:57.793406963 CET	49946	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:57.793617010 CET	49946	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:57.793629885 CET	443	49946	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:57.962228060 CET	443	49944	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.962294102 CET	49944	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.962719917 CET	49944	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.962728024 CET	443	49944	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.962869883 CET	49944	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.962874889 CET	443	49944	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.968821049 CET	443	49943	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.968890905 CET	49943	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.969187021 CET	49943	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.969197989 CET	443	49943	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:57.969329119 CET	49943	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:57.969336033 CET	443	49943	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:58.101933956 CET	443	49945	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:58.102127075 CET	49945	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:58.102551937 CET	49945	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:58.102561951 CET	443	49945	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:58.103727102 CET	49945	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:58.103732109 CET	443	49945	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:58.245022058 CET	443	49944	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:58.245047092 CET	443	49944	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:58.245121956 CET	443	49944	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:58.245129108 CET	49944	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:58.245182991 CET	49944	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:58.246726990 CET	49944	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:58.246747971 CET	443	49944	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:58.248676062 CET	443	49946	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:58.249155998 CET	49946	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:16:58.249191999 CET	443	49946	207.246.91.177	192.168.2.17
Jan 2, 2025 12:16:58.265374899 CET	443	49943	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:58.265396118 CET	443	49943	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:58.265434980 CET	443	49943	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:58.265439987 CET	49943	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:58.265465975 CET	443	49943	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:58.265480042 CET	49943	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:58.265480042 CET	443	49943	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:58.265501976 CET	49943	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:58.265511036 CET	49943	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:58.266765118 CET	49943	443	192.168.2.17	169.150.255.181
Jan 2, 2025 12:16:58.266777039 CET	443	49943	169.150.255.181	192.168.2.17
Jan 2, 2025 12:16:58.378288984 CET	443	49945	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:58.378367901 CET	443	49945	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:58.378442049 CET	49945	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:58.379278898 CET	49945	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:58.379297972 CET	443	49945	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:58.680655956 CET	49947	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:58.680707932 CET	443	49947	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:58.680797100 CET	49947	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:58.681025982 CET	49947	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:58.681039095 CET	443	49947	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:59.404320955 CET	443	49947	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:59.404398918 CET	49947	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:59.404803991 CET	49947	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:59.404815912 CET	443	49947	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:59.406193018 CET	49947	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:59.406198978 CET	443	49947	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:59.677686930 CET	443	49947	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:59.677762032 CET	443	49947	18.173.205.91	192.168.2.17
Jan 2, 2025 12:16:59.677768946 CET	49947	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:59.677814007 CET	49947	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:59.679023027 CET	49947	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:16:59.679042101 CET	443	49947	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:00.109050989 CET	49948	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:00.109085083 CET	443	49948	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:00.109219074 CET	49948	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:00.109451056 CET	49948	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:00.109464884 CET	443	49948	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:00.303812981 CET	49946	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:00.303853035 CET	443	49946	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:00.426448107 CET	443	49946	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:00.426525116 CET	443	49946	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:00.426619053 CET	49946	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:00.426676035 CET	49946	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:00.426703930 CET	443	49946	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:00.822386980 CET	443	49948	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:00.822468996 CET	49948	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:00.822904110 CET	49948	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:00.822912931 CET	443	49948	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:00.824114084 CET	49948	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:00.824120998 CET	443	49948	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:01.092520952 CET	443	49948	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:01.092616081 CET	49948	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:01.092633009 CET	443	49948	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:01.092645884 CET	443	49948	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:01.092700005 CET	49948	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:01.093473911 CET	49948	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:01.093489885 CET	443	49948	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:01.444242954 CET	49949	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:01.444286108 CET	443	49949	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:01.444391012 CET	49949	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:01.444591045 CET	49949	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:01.444607973 CET	443	49949	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:01.729305983 CET	49950	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:01.729343891 CET	443	49950	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:01.729430914 CET	49950	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:01.729635954 CET	49950	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:01.729655027 CET	443	49950	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:02.157816887 CET	443	49949	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:02.157881975 CET	49949	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:02.158284903 CET	49949	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:02.158293009 CET	443	49949	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:02.159590960 CET	49949	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:02.159598112 CET	443	49949	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:02.197479010 CET	443	49950	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:02.197968960 CET	49950	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:02.198004961 CET	443	49950	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:02.198493004 CET	49950	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:02.198502064 CET	443	49950	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:02.326658010 CET	443	49950	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:02.326735020 CET	443	49950	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:02.326884985 CET	49950	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:02.326906919 CET	443	49950	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:02.430341005 CET	443	49949	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:02.430414915 CET	49949	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:02.430428028 CET	443	49949	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:02.430474043 CET	49949	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:02.431274891 CET	49949	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:02.431294918 CET	443	49949	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:02.793135881 CET	49951	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:02.793178082 CET	443	49951	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:02.793270111 CET	49951	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:02.793483973 CET	49951	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:02.793503046 CET	443	49951	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:03.339466095 CET	49952	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:03.339515924 CET	443	49952	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:03.339757919 CET	49952	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:03.339946985 CET	49952	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:03.339961052 CET	443	49952	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:03.517786026 CET	443	49951	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:03.517993927 CET	49951	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:03.518294096 CET	49951	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:03.518306017 CET	443	49951	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:03.519586086 CET	49951	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:03.519596100 CET	443	49951	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:03.791333914 CET	443	49951	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:03.791414976 CET	443	49951	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:03.791419983 CET	49951	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:03.791462898 CET	49951	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:03.792686939 CET	49951	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:03.792701006 CET	443	49951	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:03.835160017 CET	443	49952	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:03.835628986 CET	49952	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:03.835649967 CET	443	49952	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:03.836127996 CET	49952	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:03.836133003 CET	443	49952	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:03.966473103 CET	443	49952	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:03.966531038 CET	443	49952	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:03.966639996 CET	49952	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:03.966706991 CET	49952	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:03.966727018 CET	443	49952	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:04.079950094 CET	49953	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:04.079999924 CET	443	49953	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:04.080069065 CET	49953	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:04.080483913 CET	49953	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:04.080501080 CET	443	49953	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:04.164055109 CET	49954	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:04.164097071 CET	443	49954	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:04.164392948 CET	49954	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:04.164643049 CET	49954	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:04.164659977 CET	443	49954	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:04.546700954 CET	443	49953	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:04.546785116 CET	49953	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:04.556761980 CET	49953	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:04.556777954 CET	443	49953	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:04.557034016 CET	443	49953	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:04.562649965 CET	49953	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:04.607322931 CET	443	49953	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:04.696005106 CET	443	49953	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:04.696089983 CET	443	49953	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:04.696151018 CET	49953	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:04.696278095 CET	49953	443	192.168.2.17	207.246.91.177
Jan 2, 2025 12:17:04.696302891 CET	443	49953	207.246.91.177	192.168.2.17
Jan 2, 2025 12:17:04.882010937 CET	443	49954	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:04.882148981 CET	49954	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:04.882616043 CET	49954	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:04.882631063 CET	443	49954	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:04.884460926 CET	49954	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:04.884469986 CET	443	49954	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:05.153542995 CET	443	49954	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:05.153625965 CET	443	49954	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:05.153631926 CET	49954	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:05.153683901 CET	49954	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:05.154613018 CET	49954	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:05.154624939 CET	443	49954	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:05.524561882 CET	49955	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:05.524606943 CET	443	49955	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:05.524698973 CET	49955	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:05.524941921 CET	49955	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:05.524955988 CET	443	49955	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:06.261773109 CET	443	49955	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:06.261856079 CET	49955	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:06.262348890 CET	49955	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:06.262357950 CET	443	49955	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:06.263658047 CET	49955	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:06.263663054 CET	443	49955	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:06.536961079 CET	443	49955	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:06.537025928 CET	443	49955	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:06.537025928 CET	49955	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:06.537075996 CET	49955	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:06.538358927 CET	49955	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:06.538376093 CET	443	49955	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:06.915786028 CET	49956	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:06.915842056 CET	443	49956	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:06.915951967 CET	49956	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:06.916207075 CET	49956	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:06.916223049 CET	443	49956	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:07.662941933 CET	443	49956	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:07.663008928 CET	49956	443	192.168.2.17	18.173.205.91
Jan 2, 2025 12:17:13.731539965 CET	49958	443	192.168.2.17	142.250.184.228
Jan 2, 2025 12:17:13.731565952 CET	443	49958	142.250.184.228	192.168.2.17
Jan 2, 2025 12:17:13.731662989 CET	49958	443	192.168.2.17	142.250.184.228
Jan 2, 2025 12:17:13.731890917 CET	49958	443	192.168.2.17	142.250.184.228
Jan 2, 2025 12:17:13.731905937 CET	443	49958	142.250.184.228	192.168.2.17
Jan 2, 2025 12:17:14.491420031 CET	443	49958	142.250.184.228	192.168.2.17
Jan 2, 2025 12:17:14.491739988 CET	49958	443	192.168.2.17	142.250.184.228
Jan 2, 2025 12:17:14.491760969 CET	443	49958	142.250.184.228	192.168.2.17
Jan 2, 2025 12:17:14.492089033 CET	443	49958	142.250.184.228	192.168.2.17
Jan 2, 2025 12:17:14.492456913 CET	49958	443	192.168.2.17	142.250.184.228
Jan 2, 2025 12:17:14.492531061 CET	443	49958	142.250.184.228	192.168.2.17
Jan 2, 2025 12:17:14.541440010 CET	49958	443	192.168.2.17	142.250.184.228
Jan 2, 2025 12:17:24.439440012 CET	443	49958	142.250.184.228	192.168.2.17
Jan 2, 2025 12:17:24.439518929 CET	443	49958	142.250.184.228	192.168.2.17
Jan 2, 2025 12:17:24.439565897 CET	49958	443	192.168.2.17	142.250.184.228
Jan 2, 2025 12:17:25.201788902 CET	49958	443	192.168.2.17	142.250.184.228
Jan 2, 2025 12:17:25.201807976 CET	443	49958	142.250.184.228	192.168.2.17
Jan 2, 2025 12:17:34.422553062 CET	49871	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:17:34.422585964 CET	443	49871	162.159.61.3	192.168.2.17
Jan 2, 2025 12:17:34.422594070 CET	49872	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:17:34.422640085 CET	443	49872	162.159.61.3	192.168.2.17
Jan 2, 2025 12:17:37.476522923 CET	443	49956	18.173.205.91	192.168.2.17
Jan 2, 2025 12:17:37.476936102 CET	49956	443	192.168.2.17	18.173.205.91

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 2, 2025 12:16:03.972574949 CET	53229	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:03.979896069 CET	53	53229	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:08.859807968 CET	64642	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:08.860028028 CET	59630	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:08.868222952 CET	53	64642	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:08.868688107 CET	53	59630	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:08.874845982 CET	53	64956	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:08.885018110 CET	53	57480	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:09.330394983 CET	65381	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:09.340815067 CET	53	65381	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:09.867635012 CET	53	57661	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:10.192578077 CET	53	51339	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:10.744364023 CET	64774	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:10.744518042 CET	58898	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:10.753228903 CET	53	64774	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:10.755084038 CET	53	58898	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:10.795242071 CET	56833	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:10.795377970 CET	62594	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:10.802223921 CET	53	56833	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:10.808701992 CET	53	62594	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:10.871061087 CET	53	51192	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:11.843255997 CET	61579	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:11.843352079 CET	138	138	192.168.2.17	192.168.2.255
Jan 2, 2025 12:16:11.843425989 CET	53492	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:11.852777958 CET	53	53492	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:11.854291916 CET	53	61579	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:12.240885019 CET	53	55582	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:12.265227079 CET	54525	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:12.265566111 CET	57655	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:12.271934032 CET	53	54525	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:12.272610903 CET	53	57655	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:12.280625105 CET	63590	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:12.280625105 CET	52470	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:12.285161018 CET	53333	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:12.285161018 CET	55883	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:12.287725925 CET	53	52470	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:12.288621902 CET	53	63590	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:12.291681051 CET	57861	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:12.291681051 CET	56956	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:12.291871071 CET	53	55883	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:12.292440891 CET	53	53333	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:12.298238993 CET	53	56956	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:12.298257113 CET	53	57861	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:12.336927891 CET	53	61398	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:12.438441992 CET	52023	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:12.438649893 CET	54807	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:12.439815044 CET	56473	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:12.440109968 CET	50721	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:12.445211887 CET	53	52023	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:12.445357084 CET	53	54807	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:12.446809053 CET	53	50721	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:12.446991920 CET	53	56473	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:13.274979115 CET	54148	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:13.275248051 CET	52788	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:13.282340050 CET	53	52788	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:13.282464981 CET	53	54148	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:13.674736977 CET	62451	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:13.674736977 CET	52005	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:13.681765079 CET	53	62451	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:13.681858063 CET	53	52005	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:14.068238974 CET	54582	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:14.068533897 CET	52541	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:14.075102091 CET	53	54582	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:14.075109959 CET	53	52541	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:17.526074886 CET	65144	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:17.533688068 CET	53	65144	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:26.809647083 CET	53	54407	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:27.800092936 CET	64091	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:27.800401926 CET	64709	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:27.807115078 CET	53	64091	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:27.809010029 CET	53	64709	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:29.783014059 CET	64140	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:29.783427954 CET	57391	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:29.791060925 CET	53	57391	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:29.792325020 CET	53	64140	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:30.314620018 CET	53	57910	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:30.422763109 CET	58517	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:30.423022985 CET	64141	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:30.432194948 CET	53	58517	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:30.444159031 CET	53	64141	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:32.085349083 CET	58033	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:32.105248928 CET	53	58033	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:32.837143898 CET	56335	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:32.837378025 CET	50192	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:32.837817907 CET	56591	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:32.838068008 CET	63756	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:32.843875885 CET	53	56335	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:32.844016075 CET	53	50192	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:32.844758034 CET	53	63756	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:32.844935894 CET	53	56591	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:33.692588091 CET	52691	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.038983107 CET	52691	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.137859106 CET	443	52691	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.137881994 CET	443	52691	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.137895107 CET	443	52691	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.137907982 CET	443	52691	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.159091949 CET	52691	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.440834045 CET	52691	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.441323996 CET	52691	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.444803953 CET	52691	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.444983959 CET	52691	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.535254002 CET	443	52691	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.535274029 CET	443	52691	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.535303116 CET	443	52691	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.535317898 CET	443	52691	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.535326958 CET	443	52691	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.541064024 CET	443	52691	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.541467905 CET	443	52691	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.542661905 CET	443	52691	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.646526098 CET	52691	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.696861029 CET	52691	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.790910959 CET	443	52691	162.159.61.3	192.168.2.17
Jan 2, 2025 12:16:34.826164007 CET	52691	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:34.893948078 CET	52691	443	192.168.2.17	162.159.61.3
Jan 2, 2025 12:16:45.839270115 CET	53	50206	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:48.091758013 CET	52088	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:48.100750923 CET	53	52088	1.1.1.1	192.168.2.17
Jan 2, 2025 12:16:52.918287992 CET	51952	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:16:52.928847075 CET	53	51952	1.1.1.1	192.168.2.17
Jan 2, 2025 12:17:08.588336945 CET	53	64183	1.1.1.1	192.168.2.17
Jan 2, 2025 12:17:08.844264984 CET	53	51236	1.1.1.1	192.168.2.17
Jan 2, 2025 12:17:23.653068066 CET	63349	53	192.168.2.17	1.1.1.1
Jan 2, 2025 12:17:23.660269022 CET	53	63349	1.1.1.1	192.168.2.17
Jan 2, 2025 12:17:39.387358904 CET	53	57445	1.1.1.1	192.168.2.17

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 2, 2025 12:16:03.972574949 CET	192.168.2.17	1.1.1.1	0x2b1a	Standard query (0)	pcapp.store	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:08.859807968 CET	192.168.2.17	1.1.1.1	0x2fd3	Standard query (0)	pcapp.store	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:08.860028028 CET	192.168.2.17	1.1.1.1	0x9a40	Standard query (0)	pcapp.store	65	IN (0x0001)	false
Jan 2, 2025 12:16:09.330394983 CET	192.168.2.17	1.1.1.1	0x5ec7	Standard query (0)	delivery.pcapp.store	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:10.744364023 CET	192.168.2.17	1.1.1.1	0x45a4	Standard query (0)	repository.pcapp.store	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:10.744518042 CET	192.168.2.17	1.1.1.1	0xa590	Standard query (0)	repository.pcapp.store	65	IN (0x0001)	false
Jan 2, 2025 12:16:10.795242071 CET	192.168.2.17	1.1.1.1	0x9cd	Standard query (0)	pcapp.store	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:10.795377970 CET	192.168.2.17	1.1.1.1	0xb0c3	Standard query (0)	pcapp.store	65	IN (0x0001)	false
Jan 2, 2025 12:16:11.843255997 CET	192.168.2.17	1.1.1.1	0xc79	Standard query (0)	repository.pcapp.store	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:11.843425989 CET	192.168.2.17	1.1.1.1	0x9b4	Standard query (0)	repository.pcapp.store	65	IN (0x0001)	false
Jan 2, 2025 12:16:12.265227079 CET	192.168.2.17	1.1.1.1	0x6168	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:12.265566111 CET	192.168.2.17	1.1.1.1	0x6736	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 2, 2025 12:16:12.280625105 CET	192.168.2.17	1.1.1.1	0x7cd9	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:12.280625105 CET	192.168.2.17	1.1.1.1	0xcad0	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 2, 2025 12:16:12.285161018 CET	192.168.2.17	1.1.1.1	0x3ab7	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Jan 2, 2025 12:16:12.285161018 CET	192.168.2.17	1.1.1.1	0xfba1	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:12.291681051 CET	192.168.2.17	1.1.1.1	0x4101	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:12.291681051 CET	192.168.2.17	1.1.1.1	0xe63f	Standard query (0)	google.com	65	IN (0x0001)	false
Jan 2, 2025 12:16:12.438441992 CET	192.168.2.17	1.1.1.1	0x3a1a	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:12.438649893 CET	192.168.2.17	1.1.1.1	0x5a6d	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jan 2, 2025 12:16:12.439815044 CET	192.168.2.17	1.1.1.1	0x7ec8	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:12.440109968 CET	192.168.2.17	1.1.1.1	0x3aa0	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jan 2, 2025 12:16:13.274979115 CET	192.168.2.17	1.1.1.1	0xec2c	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:13.275248051 CET	192.168.2.17	1.1.1.1	0xb25b	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 2, 2025 12:16:13.674736977 CET	192.168.2.17	1.1.1.1	0xdd9c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 2, 2025 12:16:13.674736977 CET	192.168.2.17	1.1.1.1	0x14a9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:14.068238974 CET	192.168.2.17	1.1.1.1	0xd2c6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:14.068533897 CET	192.168.2.17	1.1.1.1	0xbf95	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 2, 2025 12:16:17.526074886 CET	192.168.2.17	1.1.1.1	0xe2ae	Standard query (0)	d74queuslupub.cloudfront.net	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:27.800092936 CET	192.168.2.17	1.1.1.1	0x235c	Standard query (0)	pcapp.store	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:27.800401926 CET	192.168.2.17	1.1.1.1	0xbb52	Standard query (0)	pcapp.store	65	IN (0x0001)	false
Jan 2, 2025 12:16:29.783014059 CET	192.168.2.17	1.1.1.1	0x1942	Standard query (0)	repcdn.pcapp.store	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:29.783427954 CET	192.168.2.17	1.1.1.1	0x9bbd	Standard query (0)	repcdn.pcapp.store	65	IN (0x0001)	false
Jan 2, 2025 12:16:30.422763109 CET	192.168.2.17	1.1.1.1	0x342e	Standard query (0)	repository.pcapp.store	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:30.423022985 CET	192.168.2.17	1.1.1.1	0x729	Standard query (0)	repository.pcapp.store	65	IN (0x0001)	false
Jan 2, 2025 12:16:32.085349083 CET	192.168.2.17	1.1.1.1	0x644e	Standard query (0)	repcdn.pcapp.store	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:32.837143898 CET	192.168.2.17	1.1.1.1	0x15f3	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:32.837378025 CET	192.168.2.17	1.1.1.1	0x6b53	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Jan 2, 2025 12:16:32.837817907 CET	192.168.2.17	1.1.1.1	0x6f2d	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:32.838068008 CET	192.168.2.17	1.1.1.1	0xc165	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Jan 2, 2025 12:16:48.091758013 CET	192.168.2.17	1.1.1.1	0x24e4	Standard query (0)	repository.pcapp.store	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:52.918287992 CET	192.168.2.17	1.1.1.1	0x9a6f	Standard query (0)	ev.pcapp.store	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:17:23.653068066 CET	192.168.2.17	1.1.1.1	0xb06	Standard query (0)	ev.pcapp.store	A (IP address)	IN (0x0001)	false
2025-01-02 11:16:34 UTC	192.168.2.17	162.159.61.3	0x0	Standard query (0)	repository.pcapp.store	65	IN (0x0001)	true
2025-01-02 11:16:34 UTC	192.168.2.17	162.159.61.3	0x0	Standard query (0)	repository.pcapp.store	A (IP address)	IN (0x0001)	true

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 2, 2025 12:16:03.979896069 CET	1.1.1.1	192.168.2.17	0x2b1a	No error (0)	pcapp.store		207.246.91.177	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:03.979896069 CET	1.1.1.1	192.168.2.17	0x2b1a	No error (0)	pcapp.store		159.203.177.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:03.979896069 CET	1.1.1.1	192.168.2.17	0x2b1a	No error (0)	pcapp.store		159.223.101.159	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:03.979896069 CET	1.1.1.1	192.168.2.17	0x2b1a	No error (0)	pcapp.store		159.223.126.41	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:03.979896069 CET	1.1.1.1	192.168.2.17	0x2b1a	No error (0)	pcapp.store		209.222.21.115	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:03.979896069 CET	1.1.1.1	192.168.2.17	0x2b1a	No error (0)	pcapp.store		167.99.235.203	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:03.979896069 CET	1.1.1.1	192.168.2.17	0x2b1a	No error (0)	pcapp.store		45.32.1.23	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:03.979896069 CET	1.1.1.1	192.168.2.17	0x2b1a	No error (0)	pcapp.store		64.176.203.93	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:03.979896069 CET	1.1.1.1	192.168.2.17	0x2b1a	No error (0)	pcapp.store		104.248.126.225	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:08.868222952 CET	1.1.1.1	192.168.2.17	0x2fd3	No error (0)	pcapp.store		159.223.101.159	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:08.868222952 CET	1.1.1.1	192.168.2.17	0x2fd3	No error (0)	pcapp.store		64.176.203.93	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:08.868222952 CET	1.1.1.1	192.168.2.17	0x2fd3	No error (0)	pcapp.store		159.223.126.41	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:08.868222952 CET	1.1.1.1	192.168.2.17	0x2fd3	No error (0)	pcapp.store		45.32.1.23	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:08.868222952 CET	1.1.1.1	192.168.2.17	0x2fd3	No error (0)	pcapp.store		104.248.126.225	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:08.868222952 CET	1.1.1.1	192.168.2.17	0x2fd3	No error (0)	pcapp.store		167.99.235.203	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:08.868222952 CET	1.1.1.1	192.168.2.17	0x2fd3	No error (0)	pcapp.store		207.246.91.177	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:08.868222952 CET	1.1.1.1	192.168.2.17	0x2fd3	No error (0)	pcapp.store		159.203.177.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:08.868222952 CET	1.1.1.1	192.168.2.17	0x2fd3	No error (0)	pcapp.store		209.222.21.115	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:09.340815067 CET	1.1.1.1	192.168.2.17	0x5ec7	No error (0)	delivery.pcapp.store	1285660440.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 2, 2025 12:16:09.340815067 CET	1.1.1.1	192.168.2.17	0x5ec7	No error (0)	1285660440.rsc.cdn77.org		169.150.255.181	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:09.340815067 CET	1.1.1.1	192.168.2.17	0x5ec7	No error (0)	1285660440.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:09.340815067 CET	1.1.1.1	192.168.2.17	0x5ec7	No error (0)	1285660440.rsc.cdn77.org		212.102.56.178	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:09.340815067 CET	1.1.1.1	192.168.2.17	0x5ec7	No error (0)	1285660440.rsc.cdn77.org		169.150.255.183	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:09.340815067 CET	1.1.1.1	192.168.2.17	0x5ec7	No error (0)	1285660440.rsc.cdn77.org		37.19.194.80	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:09.340815067 CET	1.1.1.1	192.168.2.17	0x5ec7	No error (0)	1285660440.rsc.cdn77.org		207.211.211.26	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:09.340815067 CET	1.1.1.1	192.168.2.17	0x5ec7	No error (0)	1285660440.rsc.cdn77.org		195.181.170.18	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:10.753228903 CET	1.1.1.1	192.168.2.17	0x45a4	No error (0)	repository.pcapp.store	1715720427.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 2, 2025 12:16:10.753228903 CET	1.1.1.1	192.168.2.17	0x45a4	No error (0)	1715720427.rsc.cdn77.org		37.19.194.80	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:10.753228903 CET	1.1.1.1	192.168.2.17	0x45a4	No error (0)	1715720427.rsc.cdn77.org		212.102.56.179	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:10.753228903 CET	1.1.1.1	192.168.2.17	0x45a4	No error (0)	1715720427.rsc.cdn77.org		195.181.170.18	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:10.753228903 CET	1.1.1.1	192.168.2.17	0x45a4	No error (0)	1715720427.rsc.cdn77.org		169.150.255.180	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:10.753228903 CET	1.1.1.1	192.168.2.17	0x45a4	No error (0)	1715720427.rsc.cdn77.org		207.211.211.27	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:10.753228903 CET	1.1.1.1	192.168.2.17	0x45a4	No error (0)	1715720427.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:10.753228903 CET	1.1.1.1	192.168.2.17	0x45a4	No error (0)	1715720427.rsc.cdn77.org		169.150.255.184	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:10.755084038 CET	1.1.1.1	192.168.2.17	0xa590	No error (0)	repository.pcapp.store	1715720427.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 2, 2025 12:16:10.802223921 CET	1.1.1.1	192.168.2.17	0x9cd	No error (0)	pcapp.store		104.248.126.225	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:10.802223921 CET	1.1.1.1	192.168.2.17	0x9cd	No error (0)	pcapp.store		159.223.101.159	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:10.802223921 CET	1.1.1.1	192.168.2.17	0x9cd	No error (0)	pcapp.store		207.246.91.177	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:10.802223921 CET	1.1.1.1	192.168.2.17	0x9cd	No error (0)	pcapp.store		167.99.235.203	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:10.802223921 CET	1.1.1.1	192.168.2.17	0x9cd	No error (0)	pcapp.store		64.176.203.93	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:10.802223921 CET	1.1.1.1	192.168.2.17	0x9cd	No error (0)	pcapp.store		159.223.126.41	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:10.802223921 CET	1.1.1.1	192.168.2.17	0x9cd	No error (0)	pcapp.store		209.222.21.115	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:10.802223921 CET	1.1.1.1	192.168.2.17	0x9cd	No error (0)	pcapp.store		159.203.177.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:10.802223921 CET	1.1.1.1	192.168.2.17	0x9cd	No error (0)	pcapp.store		45.32.1.23	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:11.852777958 CET	1.1.1.1	192.168.2.17	0x9b4	No error (0)	repository.pcapp.store	1715720427.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 2, 2025 12:16:11.854291916 CET	1.1.1.1	192.168.2.17	0xc79	No error (0)	repository.pcapp.store	1715720427.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 2, 2025 12:16:11.854291916 CET	1.1.1.1	192.168.2.17	0xc79	No error (0)	1715720427.rsc.cdn77.org		169.150.255.184	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:11.854291916 CET	1.1.1.1	192.168.2.17	0xc79	No error (0)	1715720427.rsc.cdn77.org		207.211.211.27	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:11.854291916 CET	1.1.1.1	192.168.2.17	0xc79	No error (0)	1715720427.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:11.854291916 CET	1.1.1.1	192.168.2.17	0xc79	No error (0)	1715720427.rsc.cdn77.org		169.150.255.181	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:11.854291916 CET	1.1.1.1	192.168.2.17	0xc79	No error (0)	1715720427.rsc.cdn77.org		195.181.170.19	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:11.854291916 CET	1.1.1.1	192.168.2.17	0xc79	No error (0)	1715720427.rsc.cdn77.org		212.102.56.178	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:11.854291916 CET	1.1.1.1	192.168.2.17	0xc79	No error (0)	1715720427.rsc.cdn77.org		37.19.194.81	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:12.271934032 CET	1.1.1.1	192.168.2.17	0x6168	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:12.272610903 CET	1.1.1.1	192.168.2.17	0x6736	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 2, 2025 12:16:12.287725925 CET	1.1.1.1	192.168.2.17	0xcad0	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 2, 2025 12:16:12.288621902 CET	1.1.1.1	192.168.2.17	0x7cd9	No error (0)	googleads.g.doubleclick.net		142.250.185.66	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:12.291871071 CET	1.1.1.1	192.168.2.17	0xfba1	No error (0)	td.doubleclick.net		142.250.186.34	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:12.298238993 CET	1.1.1.1	192.168.2.17	0xe63f	No error (0)	google.com			65	IN (0x0001)	false
Jan 2, 2025 12:16:12.298257113 CET	1.1.1.1	192.168.2.17	0x4101	No error (0)	google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:12.445211887 CET	1.1.1.1	192.168.2.17	0x3a1a	No error (0)	analytics.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:12.446991920 CET	1.1.1.1	192.168.2.17	0x7ec8	No error (0)	stats.g.doubleclick.net		74.125.206.157	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:12.446991920 CET	1.1.1.1	192.168.2.17	0x7ec8	No error (0)	stats.g.doubleclick.net		74.125.206.155	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:12.446991920 CET	1.1.1.1	192.168.2.17	0x7ec8	No error (0)	stats.g.doubleclick.net		74.125.206.156	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:12.446991920 CET	1.1.1.1	192.168.2.17	0x7ec8	No error (0)	stats.g.doubleclick.net		74.125.206.154	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:13.282340050 CET	1.1.1.1	192.168.2.17	0xb25b	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 2, 2025 12:16:13.282464981 CET	1.1.1.1	192.168.2.17	0xec2c	No error (0)	googleads.g.doubleclick.net		142.250.185.98	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:13.681765079 CET	1.1.1.1	192.168.2.17	0xdd9c	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 2, 2025 12:16:13.681858063 CET	1.1.1.1	192.168.2.17	0x14a9	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:14.075102091 CET	1.1.1.1	192.168.2.17	0xd2c6	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:14.075109959 CET	1.1.1.1	192.168.2.17	0xbf95	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 2, 2025 12:16:17.533688068 CET	1.1.1.1	192.168.2.17	0xe2ae	No error (0)	d74queuslupub.cloudfront.net		18.173.205.91	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:17.533688068 CET	1.1.1.1	192.168.2.17	0xe2ae	No error (0)	d74queuslupub.cloudfront.net		18.173.205.24	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:17.533688068 CET	1.1.1.1	192.168.2.17	0xe2ae	No error (0)	d74queuslupub.cloudfront.net		18.173.205.111	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:17.533688068 CET	1.1.1.1	192.168.2.17	0xe2ae	No error (0)	d74queuslupub.cloudfront.net		18.173.205.117	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:27.807115078 CET	1.1.1.1	192.168.2.17	0x235c	No error (0)	pcapp.store		104.248.126.225	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:27.807115078 CET	1.1.1.1	192.168.2.17	0x235c	No error (0)	pcapp.store		64.176.203.93	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:27.807115078 CET	1.1.1.1	192.168.2.17	0x235c	No error (0)	pcapp.store		159.223.126.41	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:27.807115078 CET	1.1.1.1	192.168.2.17	0x235c	No error (0)	pcapp.store		159.223.101.159	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:27.807115078 CET	1.1.1.1	192.168.2.17	0x235c	No error (0)	pcapp.store		45.32.1.23	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:27.807115078 CET	1.1.1.1	192.168.2.17	0x235c	No error (0)	pcapp.store		209.222.21.115	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:27.807115078 CET	1.1.1.1	192.168.2.17	0x235c	No error (0)	pcapp.store		159.203.177.96	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:27.807115078 CET	1.1.1.1	192.168.2.17	0x235c	No error (0)	pcapp.store		167.99.235.203	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:27.807115078 CET	1.1.1.1	192.168.2.17	0x235c	No error (0)	pcapp.store		207.246.91.177	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:29.791060925 CET	1.1.1.1	192.168.2.17	0x9bbd	No error (0)	repcdn.pcapp.store	1645886859.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 2, 2025 12:16:29.792325020 CET	1.1.1.1	192.168.2.17	0x1942	No error (0)	repcdn.pcapp.store	1645886859.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 2, 2025 12:16:29.792325020 CET	1.1.1.1	192.168.2.17	0x1942	No error (0)	1645886859.rsc.cdn77.org		169.150.255.184	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:29.792325020 CET	1.1.1.1	192.168.2.17	0x1942	No error (0)	1645886859.rsc.cdn77.org		195.181.170.19	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:29.792325020 CET	1.1.1.1	192.168.2.17	0x1942	No error (0)	1645886859.rsc.cdn77.org		37.19.194.80	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:29.792325020 CET	1.1.1.1	192.168.2.17	0x1942	No error (0)	1645886859.rsc.cdn77.org		195.181.175.40	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:29.792325020 CET	1.1.1.1	192.168.2.17	0x1942	No error (0)	1645886859.rsc.cdn77.org		207.211.211.27	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:29.792325020 CET	1.1.1.1	192.168.2.17	0x1942	No error (0)	1645886859.rsc.cdn77.org		212.102.56.179	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:29.792325020 CET	1.1.1.1	192.168.2.17	0x1942	No error (0)	1645886859.rsc.cdn77.org		169.150.255.180	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:30.432194948 CET	1.1.1.1	192.168.2.17	0x342e	No error (0)	repository.pcapp.store	1715720427.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 2, 2025 12:16:30.432194948 CET	1.1.1.1	192.168.2.17	0x342e	No error (0)	1715720427.rsc.cdn77.org		212.102.56.178	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:30.432194948 CET	1.1.1.1	192.168.2.17	0x342e	No error (0)	1715720427.rsc.cdn77.org		37.19.194.80	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:30.432194948 CET	1.1.1.1	192.168.2.17	0x342e	No error (0)	1715720427.rsc.cdn77.org		169.150.255.180	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:30.432194948 CET	1.1.1.1	192.168.2.17	0x342e	No error (0)	1715720427.rsc.cdn77.org		195.181.170.18	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:30.432194948 CET	1.1.1.1	192.168.2.17	0x342e	No error (0)	1715720427.rsc.cdn77.org		207.211.211.26	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:30.432194948 CET	1.1.1.1	192.168.2.17	0x342e	No error (0)	1715720427.rsc.cdn77.org		169.150.255.184	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:30.432194948 CET	1.1.1.1	192.168.2.17	0x342e	No error (0)	1715720427.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:30.444159031 CET	1.1.1.1	192.168.2.17	0x729	No error (0)	repository.pcapp.store	1715720427.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 2, 2025 12:16:32.105248928 CET	1.1.1.1	192.168.2.17	0x644e	No error (0)	repcdn.pcapp.store	1645886859.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 2, 2025 12:16:32.105248928 CET	1.1.1.1	192.168.2.17	0x644e	No error (0)	1645886859.rsc.cdn77.org		195.181.170.18	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:32.105248928 CET	1.1.1.1	192.168.2.17	0x644e	No error (0)	1645886859.rsc.cdn77.org		169.150.255.180	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:32.105248928 CET	1.1.1.1	192.168.2.17	0x644e	No error (0)	1645886859.rsc.cdn77.org		169.150.255.184	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:32.105248928 CET	1.1.1.1	192.168.2.17	0x644e	No error (0)	1645886859.rsc.cdn77.org		212.102.56.179	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:32.105248928 CET	1.1.1.1	192.168.2.17	0x644e	No error (0)	1645886859.rsc.cdn77.org		195.181.175.40	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:32.105248928 CET	1.1.1.1	192.168.2.17	0x644e	No error (0)	1645886859.rsc.cdn77.org		207.211.211.27	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:32.105248928 CET	1.1.1.1	192.168.2.17	0x644e	No error (0)	1645886859.rsc.cdn77.org		37.19.194.81	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:32.843875885 CET	1.1.1.1	192.168.2.17	0x15f3	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:32.843875885 CET	1.1.1.1	192.168.2.17	0x15f3	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:32.844016075 CET	1.1.1.1	192.168.2.17	0x6b53	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Jan 2, 2025 12:16:32.844758034 CET	1.1.1.1	192.168.2.17	0xc165	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Jan 2, 2025 12:16:32.844935894 CET	1.1.1.1	192.168.2.17	0x6f2d	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:32.844935894 CET	1.1.1.1	192.168.2.17	0x6f2d	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:48.100750923 CET	1.1.1.1	192.168.2.17	0x24e4	No error (0)	repository.pcapp.store	1715720427.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 2, 2025 12:16:48.100750923 CET	1.1.1.1	192.168.2.17	0x24e4	No error (0)	1715720427.rsc.cdn77.org		169.150.255.181	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:48.100750923 CET	1.1.1.1	192.168.2.17	0x24e4	No error (0)	1715720427.rsc.cdn77.org		37.19.194.81	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:48.100750923 CET	1.1.1.1	192.168.2.17	0x24e4	No error (0)	1715720427.rsc.cdn77.org		169.150.255.184	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:48.100750923 CET	1.1.1.1	192.168.2.17	0x24e4	No error (0)	1715720427.rsc.cdn77.org		212.102.56.179	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:48.100750923 CET	1.1.1.1	192.168.2.17	0x24e4	No error (0)	1715720427.rsc.cdn77.org		195.181.170.18	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:48.100750923 CET	1.1.1.1	192.168.2.17	0x24e4	No error (0)	1715720427.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:48.100750923 CET	1.1.1.1	192.168.2.17	0x24e4	No error (0)	1715720427.rsc.cdn77.org		207.211.211.26	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:16:52.928847075 CET	1.1.1.1	192.168.2.17	0x9a6f	No error (0)	ev.pcapp.store		147.182.211.77	A (IP address)	IN (0x0001)	false
Jan 2, 2025 12:17:23.660269022 CET	1.1.1.1	192.168.2.17	0xb06	No error (0)	ev.pcapp.store		147.182.211.77	A (IP address)	IN (0x0001)	false
2025-01-02 11:16:34 UTC	162.159.61.3	192.168.2.17	0x0	No error (0)	repository.pcapp.store	1715720427.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	true
2025-01-02 11:16:34 UTC	162.159.61.3	192.168.2.17	0x0	No error (0)	repository.pcapp.store	1715720427.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	true
2025-01-02 11:16:34 UTC	162.159.61.3	192.168.2.17	0x0	No error (0)	1715720427.rsc.cdn77.org		79.127.206.234	A (IP address)	IN (0x0001)	true
2025-01-02 11:16:34 UTC	162.159.61.3	192.168.2.17	0x0	No error (0)	1715720427.rsc.cdn77.org		79.127.206.207	A (IP address)	IN (0x0001)	true

HTTP Request Dependency Graph

pcapp.store

delivery.pcapp.store

https:

repository.pcapp.store

www.google.com

googleads.g.doubleclick.net

td.doubleclick.net

google.com

stats.g.doubleclick.net

repcdn.pcapp.store

d74queuslupub.cloudfront.net

chrome.cloudflare-dns.com

ev.pcapp.store

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49853	207.246.91.177	80	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
Jan 2, 2025 12:16:32.078522921 CET	196	OUT	GET /notify_app_v2.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&lastid=0&lasttime=0&end_v=fa.2001g&nocache=6364640 HTTP/1.1 Connection: Keep-Alive User-Agent: WinHTTP 1.0 Host: pcapp.store
Jan 2, 2025 12:16:32.548830032 CET	524	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 02 Jan 2025 11:16:32 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://pcapp.store/notify_app_v2.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&lastid=0&lasttime=0&end_v=fa.2001g&nocache=6364640 Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49934	207.246.91.177	80	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
Jan 2, 2025 12:16:55.258085012 CET	134	OUT	GET /images/front_img/appstore-hint/index_1/in_background_auto_update_img.png HTTP/1.1 Host: pcapp.store Cache-Control: no-cache
Jan 2, 2025 12:16:55.705059052 CET	486	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 02 Jan 2025 11:16:55 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://pcapp.store/images/front_img/appstore-hint/index_1/in_background_auto_update_img.png Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Jan 2, 2025 12:16:55.705461979 CET	122	OUT	GET /images/front_img/appstore-hint/index_1/in_background_img.png HTTP/1.1 Host: pcapp.store Cache-Control: no-cache
Jan 2, 2025 12:16:55.800753117 CET	474	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 02 Jan 2025 11:16:55 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://pcapp.store/images/front_img/appstore-hint/index_1/in_background_img.png Strict-Transport-Security: max-age=31536000; includeSubDomains Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49707	207.246.91.177	443	7064	C:\Users\user\Desktop\Setup.exe\Setup.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:04 UTC	260	OUT	POST /inst_cpg.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&version=fa.2001g&src=pcapp_mini&uc=16le HTTP/1.1 Content-Type: application/json User-Agent: NSIS_wininet Host: pcapp.store Content-Length: 4418 Cache-Control: no-cache
2025-01-02 11:16:04 UTC	4418	OUT	Data Raw: 7b 00 22 00 73 00 79 00 73 00 74 00 65 00 6d 00 5f 00 73 00 74 00 61 00 74 00 73 00 22 00 3a 00 7b 00 22 00 6f 00 73 00 5f 00 6e 00 61 00 6d 00 65 00 22 00 3a 00 22 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2b 00 57 00 69 00 6e 00 64 00 6f 00 77 00 73 00 2b 00 31 00 30 00 2b 00 50 00 72 00 6f 00 22 00 2c 00 22 00 6f 00 73 00 5f 00 69 00 6e 00 73 00 74 00 61 00 6c 00 6c 00 64 00 61 00 74 00 65 00 22 00 3a 00 22 00 32 00 30 00 32 00 33 00 31 00 30 00 30 00 33 00 30 00 39 00 35 00 37 00 31 00 38 00 25 00 32 00 45 00 30 00 30 00 30 00 30 00 30 00 30 00 25 00 32 00 42 00 30 00 36 00 30 00 22 00 2c 00 22 00 6f 00 73 00 5f 00 70 00 72 00 6f 00 63 00 65 00 73 00 73 00 65 00 73 00 22 00 3a 00 22 00 31 00 30 00 30 00 22 00 2c 00 22 00 6f 00 73 00 5f Data Ascii: {"system_stats":{"os_name":"Microsoft+Windows+10+Pro","os_installdate":"20231003095718%2E000000%2B060","os_processes":"100","os_
2025-01-02 11:16:04 UTC	509	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:04 UTC	229	IN	Data Raw: 64 61 0d 0a 7b 00 22 00 63 00 70 00 67 00 22 00 3a 00 22 00 64 00 65 00 66 00 61 00 75 00 6c 00 74 00 22 00 2c 00 22 00 69 00 6e 00 73 00 74 00 5f 00 65 00 78 00 63 00 6c 00 22 00 3a 00 6e 00 75 00 6c 00 6c 00 2c 00 22 00 69 00 6e 00 73 00 74 00 5f 00 61 00 64 00 64 00 6f 00 6e 00 22 00 3a 00 7b 00 22 00 65 00 75 00 6c 00 61 00 22 00 3a 00 22 00 73 00 6b 00 69 00 70 00 70 00 65 00 64 00 22 00 7d 00 2c 00 22 00 69 00 6e 00 73 00 74 00 5f 00 61 00 64 00 76 00 61 00 6e 00 63 00 65 00 64 00 22 00 3a 00 7b 00 22 00 70 00 61 00 74 00 68 00 22 00 3a 00 22 00 31 00 22 00 2c 00 22 00 73 00 74 00 61 00 72 00 74 00 75 00 70 00 22 00 3a 00 22 00 31 00 22 00 7d 00 7d 00 0d 0a 30 0d 0a 0d 0a Data Ascii: da{"cpg":"default","inst_excl":null,"inst_addon":{"eula":"skipped"},"inst_advanced":{"path":"1","startup":"1"}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49710	207.246.91.177	443	7064	C:\Users\user\Desktop\Setup.exe\Setup.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:05 UTC	264	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_mini_installer&evt_action=show_page&p=wel&_fcid=1734694685230875 HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-02 11:16:05 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:05 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49713	207.246.91.177	443	7064	C:\Users\user\Desktop\Setup.exe\Setup.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:07 UTC	271	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_mini_installer&evt_action=show_page&p=installing&_fcid=1734694685230875 HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-02 11:16:07 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:07 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49714	207.246.91.177	443	7064	C:\Users\user\Desktop\Setup.exe\Setup.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:08 UTC	265	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_mini_installer&evt_action=start&permision=&_fcid=1734694685230875 HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-02 11:16:08 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:08 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:08 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49716	207.246.91.177	443	7064	C:\Users\user\Desktop\Setup.exe\Setup.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:09 UTC	263	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_mini_installer&evt_action=download_start&_fcid=1734694685230875 HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-02 11:16:09 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:09 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49720	159.223.101.159	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:09 UTC	790	OUT	GET /installing.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&winver=19045&version=fa.2001g&nocache=20250102061607.239&_fcid=1734694685230875 HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:09 UTC	645	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Thu, 02 Jan 2025 11:16:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Pragma: no-cache Location: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49723	169.150.255.181	443	7064	C:\Users\user\Desktop\Setup.exe\Setup.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:09 UTC	186	OUT	GET /download.php?&src=mini_installer&file=1&mini_ver=fa.2001g HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: delivery.pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-02 11:16:10 UTC	801	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:10 GMT Content-Type: application/octet-stream Content-Length: 1339288 Connection: close Content-Description: File Transfer Content-Disposition: attachment; filename="Setup.exe" Expires: Thu, 02 Jan 2025 11:30:18 GMT Cache-Control: max-age=900 X-Frame-Options: SAMEORIGIN Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Strict-Transport-Security: max-age=31536000; includeSubDomains X-77-NZT: EggBqZb/swFBDAElE8IuAbc0AAAA X-77-NZT-Ray: f88df72e363a53827a7576673c8b5a0a X-77-Cache: HIT X-77-Age: 52 Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:10 UTC	15583	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 ad 31 08 81 e9 50 66 d2 e9 50 66 d2 e9 50 66 d2 2a 5f 39 d2 eb 50 66 d2 e9 50 67 d2 4c 50 66 d2 2a 5f 3b d2 e6 50 66 d2 bd 73 56 d2 e3 50 66 d2 2e 56 60 d2 e8 50 66 d2 52 69 63 68 e9 50 66 d2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 1f 9b 4f 61 00 00 00 00 00 00 00 00 e0 00 0f 01 0b 01 06 00 00 68 00 00 00 2a 02 00 00 08 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1PfPfPf_9PfPgLPf_;PfsVPf.V`PfRichPfPELOah*
2025-01-02 11:16:10 UTC	16384	IN	Data Raw: a1 20 27 42 00 8d 78 14 f6 07 20 0f 84 08 01 00 00 53 53 68 f0 00 00 00 68 0a 04 00 00 ff 75 08 ff 15 64 82 40 00 50 ff d6 8b 0f 83 e0 01 83 e1 fe 50 0b c8 89 0f e8 cc fc ff ff e8 ef 00 00 00 83 7d 0c 4e 0f 85 c0 00 00 00 68 e8 03 00 00 ff 75 08 ff 15 64 82 40 00 8b 7d 14 81 7f 08 0b 07 00 00 75 67 81 7f 0c 01 02 00 00 75 5e 8b 4f 1c 8b 57 18 89 4d f8 2b ca 81 f9 00 08 00 00 89 55 f4 c7 45 fc 00 82 42 00 73 41 8d 4d f4 51 53 68 4b 04 00 00 50 ff d6 8b 3d ec 81 40 00 68 02 7f 00 00 53 ff d7 50 ff 15 f0 81 40 00 6a 01 ff 75 fc ff 75 08 e8 9a 00 00 00 68 00 7f 00 00 53 ff d7 50 ff 15 f0 81 40 00 8b 7d 14 81 7f 08 00 07 00 00 75 48 81 7f 0c 00 01 00 00 75 3f 83 7f 10 0d 75 10 53 6a 01 68 11 01 00 00 ff 35 68 a2 42 00 ff d6 83 7f 10 1b 75 0c 53 53 6a 10 ff 35 Data Ascii: 'Bx SShhud@PP}Nhud@}ugu^OWM+UEBsAMQShKP=@hSP@juuhSP@}uHu?uSjh5hBuSSj5
2025-01-02 11:16:10 UTC	16384	IN	Data Raw: 6f 76 65 46 69 6c 65 57 00 0b 03 53 65 74 43 75 72 72 65 6e 74 44 69 72 65 63 74 6f 72 79 57 00 00 61 01 47 65 74 46 69 6c 65 41 74 74 72 69 62 75 74 65 73 57 00 00 1a 03 53 65 74 46 69 6c 65 41 74 74 72 69 62 75 74 65 73 57 00 00 56 03 53 6c 65 65 70 00 df 01 47 65 74 54 69 63 6b 43 6f 75 6e 74 00 00 56 00 43 72 65 61 74 65 46 69 6c 65 57 00 63 01 47 65 74 46 69 6c 65 53 69 7a 65 00 7e 01 47 65 74 4d 6f 64 75 6c 65 46 69 6c 65 4e 61 6d 65 57 00 00 42 01 47 65 74 43 75 72 72 65 6e 74 50 72 6f 63 65 73 73 00 b9 00 45 78 69 74 50 72 6f 63 65 73 73 00 46 00 43 6f 70 79 46 69 6c 65 57 00 14 03 53 65 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 72 69 61 62 6c 65 57 00 f4 01 47 65 74 57 69 6e 64 6f 77 73 44 69 72 65 63 74 6f 72 79 57 00 00 d6 01 47 65 74 54 65 6d Data Ascii: oveFileWSetCurrentDirectoryWaGetFileAttributesWSetFileAttributesWVSleepGetTickCountVCreateFileWcGetFileSize~GetModuleFileNameWBGetCurrentProcessExitProcessFCopyFileWSetEnvironmentVariableWGetWindowsDirectoryWGetTem
2025-01-02 11:16:10 UTC	16384	IN	Data Raw: ff ef ea e3 ff ef ea e3 fe ef eb e4 ff e9 c8 a7 ff e0 86 2c ff e4 7d 19 ff e6 7f 1a ff e6 7f 1a ff e6 7f 1a ff e6 7f 1a ff e6 7f 19 ff e6 80 1c ff ea ae 73 ff ee e5 d9 ff ee ea e4 ff ee e9 e3 ff ee ea e3 ff ef ea e3 ff ee e9 e3 ff ef ea e3 ff ee ea e3 fe ef ea e4 fe ee e9 e3 ff ee ea e4 ff ee e9 e3 ff ee e9 e3 ff ee ea e3 ff ee ea e3 ff ee ea e3 ff ee e9 e3 ff ee ea e3 ff ee ea e3 ff ee e9 e3 ff ef ea e4 fe ee e7 df ff ea b0 75 ff e6 7f 1b ff e6 7f 19 ff e6 7f 1a ff e6 7f 1a ff e6 7f 1a ff e6 7f 1a ff e3 7d 18 ff e0 84 2a ff e9 c5 a1 ff ef eb e5 ff ef ea e3 fe ee ea e3 ff ee ea e3 ff ef ea e4 fe ee e9 e3 ff ee e9 e3 ff ee e9 e3 ff ef ea e3 ff ee ea e3 ff ef ea e3 99 ef ea e4 74 ef ea e4 fe ef ea e3 ff ee ea e3 ff ef ea e3 ff ef ea e4 fe ef ea e3 ff ef ea Data Ascii: ,}su}*t
2025-01-02 11:16:10 UTC	16384	IN	Data Raw: ff ed e2 d6 ff e8 97 48 ff e6 7e 17 ff e6 7f 1a ff e6 7f 1a ff e3 7c 16 ff e2 a1 60 ff ee e9 e2 ff ee e9 e2 ff ee e9 e2 ff ed e9 e2 ff ee e9 e2 f4 ee e9 e2 e6 ee e9 e3 ff ee e9 e3 ff ee e9 e3 ff ee ea e4 ff e6 b4 82 ff e3 7d 18 ff e6 7f 1a ff e6 7f 1a ff e6 7d 16 ff e9 a6 63 ff ee e8 e0 ff ee e9 e3 ff ee e9 e3 ff ee e9 e2 ff ee e9 e3 ff ee e9 e3 ff ee e9 e3 ff ee e9 e2 ff ee e9 e3 ff ee e8 e0 ff e9 a7 65 ff e6 7d 16 ff e6 7f 1a ff e6 7f 1a ff e2 7c 17 ff e5 b3 80 ff ee ea e4 ff ee e9 e3 ff ee e9 e3 ff ee e9 e3 ff ee e9 e3 e6 ef ea e4 c9 ee ea e3 ff ef ea e3 ff ef ea e3 ff ef eb e5 ff ec db c9 ff e5 9a 50 ff e6 81 1e ff e6 80 1b ff e8 93 40 ff ed d3 b8 ff ef eb e5 ff ee ea e3 ff ee ea e3 ff ef ea e3 ff ef ea e3 ff ee ea e3 ff ee ea e3 ff ee ea e3 ff ee ea Data Ascii: H~\|`}}ce}\|P@
2025-01-02 11:16:10 UTC	16384	IN	Data Raw: 12 03 0e 11 7e 15 c1 66 aa 6f 92 64 b1 28 93 c1 6f dd 6b b4 e3 2a 55 ee 8e 61 f8 8b cd 44 e1 fa a5 8d 99 80 96 ba fe c7 4b 00 8e aa 4d 58 07 ae 60 24 8a ba 52 b9 82 b7 be 10 67 fb ec 70 ff bd ac 6c e6 aa 43 e7 82 a4 c8 ea 1d d2 7c 5c 3d 70 4c 0d a9 2e 3f 13 04 9c 49 59 4a 90 5c 16 8c f4 d6 04 d7 d9 a8 af fd 8a 57 93 b1 bf ac 10 ee 40 1f 6a 45 ed 40 2b 74 f3 92 47 22 27 4e 5d b1 a6 b9 5b 6b f1 b2 16 96 2b cf 55 c5 26 c7 6a c4 83 f5 80 ad 6a 3d 61 52 15 0b 77 a9 bf c2 31 9e 74 cf 20 d9 0d d8 77 ed 16 f4 09 2a 62 aa c6 6b d2 68 97 1a f7 6e 8a a9 16 92 88 cb 16 44 0b 8f 6f 5f f8 74 14 55 b7 00 6f 18 ce ca da 89 b3 d4 0d fa 4a cb 4c 59 24 92 99 08 70 65 69 5e 17 40 c9 32 4a 30 3e 1e 23 8a 16 90 6d b9 ae 3d 27 37 e1 6c 11 b9 08 bd 06 6b e3 ae 7f fb 04 84 04 ff Data Ascii: ~fod(okUaDKMX`$RgplC\|\=pL.?IYJ\W@jE@+tG"'N][k+U&jj=aRw1t wbkhnDo_tUoJLY$pei^@2J0>#m='7lk
2025-01-02 11:16:10 UTC	16384	IN	Data Raw: e4 d4 78 a3 bc cc 72 f9 47 34 29 a1 1f 67 27 c4 0d 37 90 01 9a a2 ca 5d 26 55 20 97 ad 31 c2 5f ad f9 ce 81 b8 46 29 1e b1 3e 2c 28 4f 48 92 b7 17 0b 8d b9 27 eb 56 bd ca e7 19 a1 59 b2 64 d8 34 88 46 bd ec 0e 49 73 26 01 3a a8 38 9d b9 88 29 2d cd a0 c8 af 66 9d aa a4 d2 18 47 b5 21 35 e5 34 b5 f8 28 1b e6 b0 ea 3a 1e 4f 65 95 57 12 6d 0a 5c b7 57 6f 72 4b a1 68 39 64 8b 89 cd 87 cf 2e da b0 b8 39 a6 bc 90 af 9f bf 9f 71 a3 d1 95 71 a3 d6 71 14 26 0e d0 ab 39 e6 27 f2 54 38 a4 cf 64 56 d5 3c 38 30 b7 aa 66 17 13 00 c3 2b 24 5c 84 62 ef 6d 95 9b 7c 71 8f f0 46 7f 58 55 ef a6 63 f0 24 6d e4 29 a4 33 1c 57 f4 ed 8c bd f6 ff 72 6e 9b cb f7 b8 bf 76 22 85 88 76 ad e3 b1 0b 77 d6 71 55 1c d7 d3 27 c0 04 ee ed 66 31 06 9b ce 16 49 6e c6 61 7f 95 cb 37 65 25 76 Data Ascii: xrG4)g'7]&U 1_F)>,(OH'VYd4FIs&:8)-fG!54(:OeWm\WorKh9d.9qqq&9'T8dV<80f+$\bm\|qFXUc$m)3Wrnv"vwqU'f1Ina7e%v
2025-01-02 11:16:10 UTC	16384	IN	Data Raw: c6 72 72 de 2f 86 0c 04 0d 11 b2 ea ef da 29 0e ab 37 8d 1b 68 bf 6f d6 4d 2c df 8f 9e be 7a 9e dc ed 34 61 7f 81 c2 51 fc f9 3d 15 bf 15 9c b4 1a c1 43 95 6d f0 e0 c8 d8 aa ac 20 33 9e 23 c9 ed 3c ae 44 e0 24 56 73 db 23 28 46 89 6a 1c a6 82 66 11 61 d6 5c 84 1f 01 5b 4b 20 b9 fa 39 ad 35 b7 ce 58 ea a4 d1 da fa 83 a5 1e 4e eb 04 01 e9 a0 63 81 5b 1f eb 33 53 f3 56 cd 8b 07 f4 63 fb de f3 20 ea 57 a4 59 60 83 e1 7d 65 69 c6 09 e6 07 33 76 da d1 83 0b 9b a4 05 27 30 3c e7 32 2c 96 5c ac a2 90 46 23 08 c3 ef 49 76 ab 56 a7 49 76 83 25 08 fb 3f a2 1b bf c1 af f2 0b a6 28 e3 5e 97 db 75 fa 9d b2 94 57 92 7a 0b 6d 09 c8 3f e2 df e4 33 e2 52 c8 a5 32 62 9d 09 4f d3 d3 09 66 b9 f5 6c b8 93 aa 2e 15 49 29 7c 48 db 5d 60 bb 56 d6 58 79 78 d2 b3 06 44 77 5d 90 3b Data Ascii: rr/)7hoM,z4aQ=Cm 3#<D$Vs#(Fjfa\[K 95XNc[3SVc WY`}ei3v'0<2,\F#IvVIv%?(^uWzm?3R2bOfl.I)\|H]`VXyxDw];
2025-01-02 11:16:10 UTC	16384	IN	Data Raw: ce 55 3b 07 4b 7c 76 3e 4f f9 f9 96 95 ff 51 83 f8 e8 79 98 ed b8 fb 03 c4 50 fa 99 19 e8 2f 6b 3d d7 76 ba d0 f2 ab 4d 36 2c 75 3b 17 90 32 37 7f f1 36 83 c2 cb ce b0 bd 8b a5 14 00 2f a0 ce 3c c3 0d ed 89 24 bb 74 95 9c 22 3e 42 47 3d 1b 66 a7 81 5a a1 aa 7b 10 6c 60 55 69 8d 84 05 4b 7b dd 58 fb a1 9c 98 7c 6b 58 4e e1 58 2b 8b f9 c7 27 f6 00 4c ba 2f e6 45 10 b4 92 5e fd 0a 0b 1c 6f a3 33 f1 04 09 6b 1c ed ca 40 a7 82 af 6a d5 fa 3a bc d2 4d 28 b5 6a c8 dc 01 47 66 f6 18 40 c0 2c dd 8e 55 85 2a 49 18 4f 06 8d 67 a8 55 3e 74 0d ae e2 ac 29 12 62 ae 41 6c 7e b1 e5 1b 29 cd 0b 3c 3d 4c ac 81 5c ab ec d9 fe 1a 8e 8a a2 65 41 fe 8d 17 8c 5d 10 9e 54 de f3 50 91 7d e8 62 89 da ae 1d e1 c9 5c 28 a2 3d 21 0c c6 67 71 29 7a 69 68 e4 e8 d6 ed 6a 60 11 14 d5 fe Data Ascii: U;K\|v>OQyP/k=vM6,u;276/<$t">BG=fZ{l`UiK{X\|kXNX+'L/E^o3k@j:M(jGf@,U*IOgU>t)bAl~)<=L\eA]TP}b\(=!gq)zihj`
2025-01-02 11:16:10 UTC	16384	IN	Data Raw: 81 d3 b2 2d 65 cf 57 51 d7 10 5a 7d da 83 ff 55 1c 37 5b 3b 23 5d f5 d4 c2 9a fc 16 fd 51 b1 1c 27 99 08 fa 80 d1 25 83 25 e4 c4 2c 23 de 15 4e 08 a5 0c 0a 28 42 76 2d 6f 43 28 91 89 b2 0f 64 7e ed f5 cb 60 a2 4c b9 b6 63 9a ad 88 7c d0 73 7a e3 4b c7 0c ad b0 35 29 53 00 4e 44 e7 bd 80 4a 4c 1c f7 fb d5 dd e9 28 ea 18 c2 6a b9 cb 58 1b 96 00 6f 0f 61 7d 8c 4b b8 64 61 df 4f 7c d8 7e bf ca 2b 7e 68 7a 39 dd e3 7c ba f8 b7 14 c7 0d 46 e6 e3 0c 74 0e 3a c7 7b 6c 15 ac 95 b1 11 b1 12 b2 62 1d 48 c1 7c b2 54 2d 3f 82 95 fd 32 f5 7a 57 07 72 2d 29 24 4f 13 66 be e7 a2 ed 22 31 99 be f0 e2 c6 fe dd 3d af 5f 37 c2 8f a1 f5 b5 8b bb b5 47 b2 7d 04 d4 17 1f fb 64 b5 9d 74 d6 84 74 17 b9 b9 44 3f 30 4e 70 00 96 50 3d e1 47 dc a3 dd 02 fa f8 36 21 d9 96 eb c7 95 ef Data Ascii: -eWQZ}U7[;#]Q'%%,#N(Bv-oC(d~`Lc\|szK5)SNDJL(jXoa}KdaO\|~+~hz9\|Ft:{lbH\|T-?2zWr-)$Of"1=_7G}dttD?0NpP=G6!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49724	159.223.101.159	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:09 UTC	770	OUT	GET /?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g HTTP/1.1 Host: pcapp.store Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:10 UTC	585	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Set-Cookie: srcr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:10 UTC	15799	IN	Data Raw: 31 65 33 62 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 50 50 20 53 54 4f 52 45 3a 20 49 6e 73 74 61 6c 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 6c 70 2f 61 70 70 73 74 6f 72 65 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0a Data Ascii: 1e3b<!doctype html><html lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <title>APP STORE: Installing</title> <link rel="icon" href="/lp/appstore/img/favicon.ico" />
2025-01-02 11:16:10 UTC	12902	IN	Data Raw: 61 72 20 72 65 61 64 43 6f 6f 6b 69 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 61 6d 65 45 51 20 3d 20 6e 61 6d 65 20 2b 20 22 3d 22 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 61 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 63 0d 0a 31 30 30 30 0d 0a 61 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 20 3d 20 63 61 5b 69 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 6c 65 20 28 63 2e 63 68 61 72 41 74 28 30 29 20 3d 3d 20 22 20 22 29 20 63 20 3d 20 63 2e 73 75 62 73 74 72 69 6e 67 28 31 2c Data Ascii: ar readCookie = function(name) { var nameEQ = name + "="; var ca = document.cookie.split(";"); for (var i = 0; i < c1000a.length; i++) { var c = ca[i]; while (c.charAt(0) == " ") c = c.substring(1,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49727	159.223.101.159	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:10 UTC	709	OUT	GET /lp/lpd_installing_r2/src/lpd_installing_r2.min.css?nocache=1731594251558 HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:10 UTC	350	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:10 GMT Content-Type: text/css Content-Length: 66265 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:10 UTC	16034	IN	Data Raw: 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 6d 61 69 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 7d 68 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 Data Ascii: /! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css /html{line-height:1.15;-webkit-text-size-adjust:100%}body{margin:0}main{display:block}h1{font-size:2em;margin:.67em 0}hr{-webkit-box-sizing:content-box;box-sizing:content-box;heigh
2025-01-02 11:16:10 UTC	16384	IN	Data Raw: 64 65 72 3a 38 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 39 3b 6f 72 64 65 72 3a 38 7d 2e 6f 72 64 65 72 2d 6c 67 2d 39 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 39 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 31 30 3b 6f 72 64 65 72 3a 39 7d 2e 6f 72 64 65 72 2d 6c 67 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 31 31 3b 6f 72 64 65 72 3a 31 30 7d 2e 6f 72 64 65 72 2d 6c 67 2d 31 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 31 32 3b 6f 72 64 65 72 3a 31 31 7d 2e 6f 72 64 65 72 2d 6c 67 Data Ascii: der:8;-webkit-box-ordinal-group:9;order:8}.order-lg-9{-ms-flex-order:9;-webkit-box-ordinal-group:10;order:9}.order-lg-10{-ms-flex-order:10;-webkit-box-ordinal-group:11;order:10}.order-lg-11{-ms-flex-order:11;-webkit-box-ordinal-group:12;order:11}.order-lg
2025-01-02 11:16:10 UTC	16384	IN	Data Raw: 69 66 79 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 6d 64 2d 61 72 6f 75 6e 64 7b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 64 69 73 74 72 69 62 75 74 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 61 72 6f 75 6e 64 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 6d 64 2d 73 74 61 72 74 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 61 6c 69 67 6e 2d 69 Data Ascii: ify !important;justify-content:space-between !important}.justify-content-md-around{-ms-flex-pack:distribute !important;justify-content:space-around !important}.align-items-md-start{-ms-flex-align:start !important;-webkit-box-align:start !important;align-i
2025-01-02 11:16:10 UTC	16384	IN	Data Raw: 73 6d 2d 6e 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 2d 73 6d 2d 6e 34 7b 6d 61 72 67 69 6e 3a 2d 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 73 6d 2d 6e 34 2c 2e 6d 79 2d 73 6d 2d 6e 34 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 72 2d 73 6d 2d 6e 34 2c 2e 6d 78 2d 73 6d 2d 6e 34 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 62 2d 73 6d 2d 6e 34 2c 2e 6d 79 2d 73 6d 2d 6e 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6c 2d 73 6d 2d 6e 34 2c 2e 6d 78 2d 73 6d 2d 6e 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 Data Ascii: sm-n3{margin-left:-1rem !important}.m-sm-n4{margin:-1.5rem !important}.mt-sm-n4,.my-sm-n4{margin-top:-1.5rem !important}.mr-sm-n4,.mx-sm-n4{margin-right:-1.5rem !important}.mb-sm-n4,.my-sm-n4{margin-bottom:-1.5rem !important}.ml-sm-n4,.mx-sm-n4{margin-lef
2025-01-02 11:16:10 UTC	1079	IN	Data Raw: 72 61 70 70 65 72 2d 64 79 6e 61 6d 69 63 5f 5f 74 69 74 6c 65 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 34 38 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 35 36 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 31 73 20 6c 69 6e 65 61 72 20 2e 35 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 31 73 20 6c 69 6e 65 61 72 20 2e 35 73 7d 2e 77 72 61 70 70 65 72 2d 64 79 6e 61 6d 69 63 5f 5f 73 75 62 74 69 74 6c 65 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 Data Ascii: rapper-dynamic__title{white-space:nowrap;font-weight:600;font-size:48px;line-height:56px;margin-bottom:10px;opacity:0;-webkit-transition:all 1s linear .5s;transition:all 1s linear .5s}.wrapper-dynamic__subtitle{white-space:nowrap;font-size:16px;line-heigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49726	159.223.101.159	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:10 UTC	746	OUT	GET /images/front_img/lp/lpd_installing_r2/img/done_windows_icon.svg HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:10 UTC	327	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 02 Jan 2025 11:16:10 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://repository.pcapp.store/pcapp/images/front_img/lp/lpd_installing_r2/img/done_windows_icon.svg Strict-Transport-Security: max-age=31536000; includeSubDomains
2025-01-02 11:16:10 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49728	159.223.101.159	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:10 UTC	634	OUT	GET /src/main.js HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:10 UTC	362	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:10 GMT Content-Type: application/javascript Content-Length: 234 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:10 UTC	234	IN	Data Raw: 69 66 20 28 74 79 70 65 6f 66 20 70 69 78 65 6c 45 76 65 6e 74 20 21 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 20 7b 0a 20 20 76 61 72 20 73 31 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 0a 20 20 20 20 73 30 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 0a 20 20 73 31 2e 73 72 63 20 3d 20 22 2f 73 72 63 2f 6d 61 69 6e 5f 63 6f 64 65 2e 6a 73 3f 6e 6f 63 61 63 68 65 3d 31 36 35 33 32 38 31 32 33 31 36 39 32 35 34 33 22 3b 0a 20 20 73 30 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 73 31 2c 20 73 30 29 3b 0a 7d 0a Data Ascii: if (typeof pixelEvent != "function") { var s1 = document.createElement("script"), s0 = document.getElementsByTagName("script")[0]; s1.src = "/src/main_code.js?nocache=1653281231692543"; s0.parentNode.insertBefore(s1, s0);}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49732	159.223.101.159	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:11 UTC	694	OUT	GET /lp/lpd_installing_r2/src/lpd_installing_r2.min.js?nocache=1731594251558 HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:11 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:11 GMT Content-Type: application/javascript Content-Length: 104857 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:11 UTC	16019	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 41 73 79 6e 63 47 65 6e 65 72 61 74 6f 72 28 65 29 20 7b 0a 20 20 76 61 72 20 72 2c 20 74 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 73 75 6d 65 28 72 2c 20 74 29 20 7b 0a 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 65 5b 72 5d 28 74 29 2c 0a 20 20 20 20 20 20 20 20 6f 20 3d 20 6e 2e 76 61 6c 75 65 2c 0a 20 20 20 20 20 20 20 20 75 20 3d 20 6f 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 4f 76 65 72 6c 6f 61 64 59 69 65 6c 64 3b 0a 20 20 20 20 20 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 75 20 3f 20 6f 2e 76 20 3a 20 6f 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 22 72 Data Ascii: function _AsyncGenerator(e) { var r, t; function resume(r, t) { try { var n = e[r](t), o = n.value, u = o instanceof _OverloadYield; Promise.resolve(u ? o.v : o).then(function (t) { if (u) { var i = "r
2025-01-02 11:16:11 UTC	16384	IN	Data Raw: 76 61 72 20 63 3b 0a 20 20 20 20 73 77 69 74 63 68 20 28 61 29 20 7b 0a 20 20 20 20 20 20 63 61 73 65 20 31 3a 0a 20 20 20 20 20 20 20 20 63 20 3d 20 22 61 63 63 65 73 73 6f 72 22 3b 0a 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 63 61 73 65 20 32 3a 0a 20 20 20 20 20 20 20 20 63 20 3d 20 22 6d 65 74 68 6f 64 22 3b 0a 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 63 61 73 65 20 33 3a 0a 20 20 20 20 20 20 20 20 63 20 3d 20 22 67 65 74 74 65 72 22 3b 0a 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 63 61 73 65 20 34 3a 0a 20 20 20 20 20 20 20 20 63 20 3d 20 22 73 65 74 74 65 72 22 3b 0a 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 64 65 66 61 75 6c 74 3a 0a 20 20 20 20 20 20 20 20 63 20 Data Ascii: var c; switch (a) { case 1: c = "accessor"; break; case 2: c = "method"; break; case 3: c = "getter"; break; case 4: c = "setter"; break; default: c
2025-01-02 11:16:11 UTC	16384	IN	Data Raw: 6c 6c 20 3a 20 6c 29 2c 0a 20 20 20 20 70 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 72 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6f 2c 0a 20 20 20 20 20 20 20 20 61 2c 0a 20 20 20 20 20 20 20 20 69 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 5f 63 68 65 63 6b 49 6e 52 48 53 28 74 29 20 3d 3d 3d 20 65 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 75 20 3d 20 6e 65 77 20 4d 61 70 28 29 3b 0a 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 20 26 26 20 69 2e 70 75 73 68 28 63 2e 62 69 6e 64 28 6e 75 6c 6c 2c 20 65 29 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 Data Ascii: ll : l), p = function (e, t, r, n) { var o, a, i = [], s = function (t) { return _checkInRHS(t) === e; }, u = new Map(); function l(e) { e && i.push(c.bind(null, e)); }
2025-01-02 11:16:11 UTC	16384	IN	Data Raw: 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 6e 76 6f 6b 65 28 22 74 68 72 6f 77 22 2c 20 74 2c 20 69 2c 20 61 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 20 3a 20 65 2e 72 65 73 6f 6c 76 65 28 68 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 75 2e 76 61 6c 75 65 20 3d 20 74 2c 20 69 28 75 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 6e 76 6f 6b 65 28 22 74 68 72 6f 77 22 2c 20 74 2c 20 69 2c 20 61 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 61 28 63 2e 61 72 67 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 76 61 72 20 72 3b 0a 20 20 20 20 6f 28 74 68 69 73 2c 20 22 5f 69 6e 76 6f Data Ascii: ) { invoke("throw", t, i, a); }) : e.resolve(h).then(function (t) { u.value = t, i(u); }, function (t) { return invoke("throw", t, i, a); }); } a(c.arg); } var r; o(this, "_invo
2025-01-02 11:16:11 UTC	16384	IN	Data Raw: 63 65 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 69 5d 20 21 3d 20 6e 75 6c 6c 20 3f 20 4f 62 6a 65 63 74 28 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 20 3a 20 7b 7d 3b 0a 20 20 20 20 76 61 72 20 6f 77 6e 4b 65 79 73 20 3d 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 6f 75 72 63 65 29 3b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 6f 77 6e 4b 65 79 73 2e 70 75 73 68 2e 61 70 70 6c 79 28 6f 77 6e 4b 65 79 73 2c 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 73 6f 75 72 63 65 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 20 28 73 79 6d 29 20 7b 0a 20 20 20 20 Data Ascii: ce = arguments[i] != null ? Object(arguments[i]) : {}; var ownKeys = Object.keys(source); if (typeof Object.getOwnPropertySymbols === 'function') { ownKeys.push.apply(ownKeys, Object.getOwnPropertySymbols(source).filter(function (sym) {
2025-01-02 11:16:11 UTC	16384	IN	Data Raw: 76 65 72 2c 20 64 65 73 63 72 69 70 74 6f 72 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 43 68 65 63 6b 50 72 69 76 61 74 65 53 74 61 74 69 63 41 63 63 65 73 73 28 72 65 63 65 69 76 65 72 2c 20 63 6c 61 73 73 43 6f 6e 73 74 72 75 63 74 6f 72 2c 20 72 65 74 75 72 6e 56 61 6c 75 65 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 5f 61 73 73 65 72 74 43 6c 61 73 73 42 72 61 6e 64 28 63 6c 61 73 73 43 6f 6e 73 74 72 75 63 74 6f 72 2c 20 72 65 63 65 69 76 65 72 2c 20 72 65 74 75 72 6e 56 61 6c 75 65 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 43 68 65 63 6b 50 72 69 76 61 74 65 53 74 61 74 69 63 46 69 65 6c 64 44 65 73 63 72 69 70 74 6f 72 28 64 65 73 63 72 69 70 74 6f 72 2c 20 61 63 74 69 6f 6e 29 20 7b 0a 20 20 69 66 20 28 64 65 73 63 Data Ascii: ver, descriptor);}function _classCheckPrivateStaticAccess(receiver, classConstructor, returnValue) { return _assertClassBrand(classConstructor, receiver, returnValue);}function _classCheckPrivateStaticFieldDescriptor(descriptor, action) { if (desc
2025-01-02 11:16:11 UTC	6918	IN	Data Raw: 69 6d 61 74 65 20 73 68 6f 72 74 63 75 74 22 0a 7d 2c 20 7b 0a 20 20 74 69 74 6c 65 3a 20 22 57 61 72 6d 69 6e 67 20 75 70 20 74 68 65 20 61 70 70 20 74 6f 61 73 74 65 72 22 2c 0a 20 20 73 75 62 74 69 74 6c 65 3a 20 22 62 65 63 61 75 73 65 20 66 72 65 73 68 20 61 70 70 73 20 61 72 65 20 74 68 65 20 62 65 73 74 20 61 70 70 73 22 0a 7d 2c 20 7b 0a 20 20 74 69 74 6c 65 3a 20 22 50 75 74 74 69 6e 67 20 74 68 65 20 61 70 70 73 20 74 68 72 6f 75 67 68 20 62 6f 6f 74 20 63 61 6d 70 22 2c 0a 20 20 73 75 62 74 69 74 6c 65 3a 20 22 74 68 65 79 27 6c 6c 20 63 6f 6d 65 20 6f 75 74 20 73 74 72 6f 6e 67 65 72 20 61 6e 64 20 66 61 73 74 65 72 22 0a 7d 2c 20 7b 0a 20 20 74 69 74 6c 65 3a 20 22 42 61 6c 61 6e 63 69 6e 67 20 74 68 65 20 61 70 70 20 75 6e 69 76 65 72 73 65 Data Ascii: imate shortcut"}, { title: "Warming up the app toaster", subtitle: "because fresh apps are the best apps"}, { title: "Putting the apps through boot camp", subtitle: "they'll come out stronger and faster"}, { title: "Balancing the app universe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49733	104.248.126.225	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:11 UTC	346	OUT	GET /src/main.js HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:11 UTC	362	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:11 GMT Content-Type: application/javascript Content-Length: 234 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:11 UTC	234	IN	Data Raw: 69 66 20 28 74 79 70 65 6f 66 20 70 69 78 65 6c 45 76 65 6e 74 20 21 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 20 7b 0a 20 20 76 61 72 20 73 31 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 0a 20 20 20 20 73 30 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 0a 20 20 73 31 2e 73 72 63 20 3d 20 22 2f 73 72 63 2f 6d 61 69 6e 5f 63 6f 64 65 2e 6a 73 3f 6e 6f 63 61 63 68 65 3d 31 36 35 33 32 38 31 32 33 31 36 39 32 35 34 33 22 3b 0a 20 20 73 30 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 73 31 2c 20 73 30 29 3b 0a 7d 0a Data Ascii: if (typeof pixelEvent != "function") { var s1 = document.createElement("script"), s0 = document.getElementsByTagName("script")[0]; s1.src = "/src/main_code.js?nocache=1653281231692543"; s0.parentNode.insertBefore(s1, s0);}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49734	159.223.101.159	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:11 UTC	718	OUT	GET /images/front_img/logo/logo-dark.svg HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:11 UTC	299	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 02 Jan 2025 11:16:11 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://repository.pcapp.store/pcapp/images/front_img/logo/logo-dark.svg Strict-Transport-Security: max-age=31536000; includeSubDomains
2025-01-02 11:16:11 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49731	37.19.194.80	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:11 UTC	645	OUT	GET /pcapp/images/front_img/lp/lpd_installing_r2/img/done_windows_icon.svg HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:11 UTC	642	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:11 GMT Content-Type: image/svg+xml Content-Length: 3628 Connection: close x-amz-id-2: WRgK1Io4+MvU/ydU83MrxmIn/9sZ3NO1HJcFvHefwq/1ZdYE78Mq+rqIxLdJVd31VFlMXGDobnI= x-amz-request-id: 72MB1RC30TM522RG Last-Modified: Fri, 15 Nov 2024 12:53:30 GMT ETag: "ee8b3c30df90d2d7459dd6d7f7067c14" x-amz-server-side-encryption: AES256 x-amz-version-id: sg0bjO.xEEZX7iRlW1PhUp5Qu9shLY6K X-77-NZT: EggBJRPCTwFBDAHUZjgRAbe+yQMA X-77-NZT-Ray: 0d1fa518c86ee0777b7576677f2e2d25 X-77-Cache: HIT X-77-Age: 248254 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:11 UTC	3628	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 32 22 20 68 65 69 67 68 74 3d 22 31 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 32 20 31 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 69 64 3d 22 47 72 6f 75 70 20 31 32 39 36 22 3e 3c 67 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 20 33 30 32 22 20 66 69 6c 74 65 72 3d 22 75 72 6c 28 23 66 69 6c 74 65 72 30 5f 64 5f 35 33 39 5f 32 37 39 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 36 20 31 32 2e 35 43 31 36 20 31 30 2e 30 31 34 37 20 31 38 2e 30 31 34 37 20 38 20 32 30 2e 35 20 38 48 31 31 31 2e 35 43 31 31 33 2e 39 38 35 20 38 20 31 31 36 20 31 30 2e 30 31 34 37 20 31 31 36 20 31 32 2e 35 Data Ascii: <svg width="132" height="132" viewBox="0 0 132 132" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Group 1296"><g id="Rectangle 302" filter="url(#filter0_d_539_279)"><path d="M16 12.5C16 10.0147 18.0147 8 20.5 8H111.5C113.985 8 116 10.0147 116 12.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49738	159.223.101.159	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:11 UTC	801	OUT	POST /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive Content-Length: 74 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Accept: / Origin: https://pcapp.store Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34
2025-01-02 11:16:11 UTC	74	OUT	Data Raw: 7b 22 63 22 3a 22 66 72 6f 6e 74 22 2c 22 61 22 3a 22 74 72 69 67 67 65 72 22 2c 22 70 22 3a 7b 22 74 22 3a 22 66 69 6e 69 73 68 49 6e 73 74 61 6c 6c 46 61 22 2c 22 77 73 22 3a 74 72 75 65 2c 22 61 64 64 22 3a 7b 7d 7d 7d Data Ascii: {"c":"front","a":"trigger","p":{"t":"finishInstallFa","ws":true,"add":{}}}
2025-01-02 11:16:11 UTC	551	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:11 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: https://pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:11 UTC	215	IN	Data Raw: 63 63 0d 0a 7b 22 73 74 61 74 65 22 3a 22 6f 6b 22 2c 22 72 65 73 75 6c 74 22 3a 22 5c 6e 20 20 67 74 61 67 28 27 65 76 65 6e 74 27 2c 20 27 63 6f 6e 76 65 72 73 69 6f 6e 27 2c 20 7b 5c 6e 20 20 20 20 20 20 27 73 65 6e 64 5f 74 6f 27 3a 20 27 41 57 2d 38 35 38 31 32 38 32 31 30 5c 2f 6b 54 61 46 43 49 75 71 30 59 59 5a 45 4e 4c 2d 6c 35 6b 44 27 2c 5c 6e 20 20 20 20 20 20 27 76 61 6c 75 65 27 3a 20 31 2e 30 2c 5c 6e 20 20 20 20 20 20 27 63 75 72 72 65 6e 63 79 27 3a 20 27 55 53 44 27 2c 5c 6e 20 20 20 20 20 20 27 61 77 5f 72 65 6d 61 72 6b 65 74 69 6e 67 5f 6f 6e 6c 79 27 3a 20 74 72 75 65 5c 6e 20 20 7d 29 3b 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: cc{"state":"ok","result":"\n gtag('event', 'conversion', {\n 'send_to': 'AW-858128210\/kTaFCIuq0YYZENL-l5kD',\n 'value': 1.0,\n 'currency': 'USD',\n 'aw_remarketing_only': true\n });"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49739	207.246.91.177	443	7064	C:\Users\user\Desktop\Setup.exe\Setup.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:11 UTC	306	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_mini_installer&evt_action=download_done&result=12345678-1234-5678-90AB-CDDEEFAABBCC&_fcid=1734694685230875 HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-02 11:16:11 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:11 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49741	104.248.126.225	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:12 UTC	481	OUT	GET /lp/lpd_installing_r2/src/lpd_installing_r2.min.js?nocache=1731594251558 HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34
2025-01-02 11:16:12 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:12 GMT Content-Type: application/javascript Content-Length: 104857 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:12 UTC	16019	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 41 73 79 6e 63 47 65 6e 65 72 61 74 6f 72 28 65 29 20 7b 0a 20 20 76 61 72 20 72 2c 20 74 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 73 75 6d 65 28 72 2c 20 74 29 20 7b 0a 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 65 5b 72 5d 28 74 29 2c 0a 20 20 20 20 20 20 20 20 6f 20 3d 20 6e 2e 76 61 6c 75 65 2c 0a 20 20 20 20 20 20 20 20 75 20 3d 20 6f 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 4f 76 65 72 6c 6f 61 64 59 69 65 6c 64 3b 0a 20 20 20 20 20 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 75 20 3f 20 6f 2e 76 20 3a 20 6f 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 22 72 Data Ascii: function _AsyncGenerator(e) { var r, t; function resume(r, t) { try { var n = e[r](t), o = n.value, u = o instanceof _OverloadYield; Promise.resolve(u ? o.v : o).then(function (t) { if (u) { var i = "r
2025-01-02 11:16:12 UTC	16384	IN	Data Raw: 76 61 72 20 63 3b 0a 20 20 20 20 73 77 69 74 63 68 20 28 61 29 20 7b 0a 20 20 20 20 20 20 63 61 73 65 20 31 3a 0a 20 20 20 20 20 20 20 20 63 20 3d 20 22 61 63 63 65 73 73 6f 72 22 3b 0a 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 63 61 73 65 20 32 3a 0a 20 20 20 20 20 20 20 20 63 20 3d 20 22 6d 65 74 68 6f 64 22 3b 0a 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 63 61 73 65 20 33 3a 0a 20 20 20 20 20 20 20 20 63 20 3d 20 22 67 65 74 74 65 72 22 3b 0a 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 63 61 73 65 20 34 3a 0a 20 20 20 20 20 20 20 20 63 20 3d 20 22 73 65 74 74 65 72 22 3b 0a 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 64 65 66 61 75 6c 74 3a 0a 20 20 20 20 20 20 20 20 63 20 Data Ascii: var c; switch (a) { case 1: c = "accessor"; break; case 2: c = "method"; break; case 3: c = "getter"; break; case 4: c = "setter"; break; default: c
2025-01-02 11:16:12 UTC	16384	IN	Data Raw: 6c 6c 20 3a 20 6c 29 2c 0a 20 20 20 20 70 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 72 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6f 2c 0a 20 20 20 20 20 20 20 20 61 2c 0a 20 20 20 20 20 20 20 20 69 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 5f 63 68 65 63 6b 49 6e 52 48 53 28 74 29 20 3d 3d 3d 20 65 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 75 20 3d 20 6e 65 77 20 4d 61 70 28 29 3b 0a 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 65 20 26 26 20 69 2e 70 75 73 68 28 63 2e 62 69 6e 64 28 6e 75 6c 6c 2c 20 65 29 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 Data Ascii: ll : l), p = function (e, t, r, n) { var o, a, i = [], s = function (t) { return _checkInRHS(t) === e; }, u = new Map(); function l(e) { e && i.push(c.bind(null, e)); }
2025-01-02 11:16:12 UTC	16384	IN	Data Raw: 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 6e 76 6f 6b 65 28 22 74 68 72 6f 77 22 2c 20 74 2c 20 69 2c 20 61 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 20 3a 20 65 2e 72 65 73 6f 6c 76 65 28 68 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 75 2e 76 61 6c 75 65 20 3d 20 74 2c 20 69 28 75 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 6e 76 6f 6b 65 28 22 74 68 72 6f 77 22 2c 20 74 2c 20 69 2c 20 61 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 61 28 63 2e 61 72 67 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 76 61 72 20 72 3b 0a 20 20 20 20 6f 28 74 68 69 73 2c 20 22 5f 69 6e 76 6f Data Ascii: ) { invoke("throw", t, i, a); }) : e.resolve(h).then(function (t) { u.value = t, i(u); }, function (t) { return invoke("throw", t, i, a); }); } a(c.arg); } var r; o(this, "_invo
2025-01-02 11:16:12 UTC	16384	IN	Data Raw: 63 65 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 69 5d 20 21 3d 20 6e 75 6c 6c 20 3f 20 4f 62 6a 65 63 74 28 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 20 3a 20 7b 7d 3b 0a 20 20 20 20 76 61 72 20 6f 77 6e 4b 65 79 73 20 3d 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 6f 75 72 63 65 29 3b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 6f 77 6e 4b 65 79 73 2e 70 75 73 68 2e 61 70 70 6c 79 28 6f 77 6e 4b 65 79 73 2c 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 73 6f 75 72 63 65 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 20 28 73 79 6d 29 20 7b 0a 20 20 20 20 Data Ascii: ce = arguments[i] != null ? Object(arguments[i]) : {}; var ownKeys = Object.keys(source); if (typeof Object.getOwnPropertySymbols === 'function') { ownKeys.push.apply(ownKeys, Object.getOwnPropertySymbols(source).filter(function (sym) {
2025-01-02 11:16:12 UTC	16384	IN	Data Raw: 76 65 72 2c 20 64 65 73 63 72 69 70 74 6f 72 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 43 68 65 63 6b 50 72 69 76 61 74 65 53 74 61 74 69 63 41 63 63 65 73 73 28 72 65 63 65 69 76 65 72 2c 20 63 6c 61 73 73 43 6f 6e 73 74 72 75 63 74 6f 72 2c 20 72 65 74 75 72 6e 56 61 6c 75 65 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 5f 61 73 73 65 72 74 43 6c 61 73 73 42 72 61 6e 64 28 63 6c 61 73 73 43 6f 6e 73 74 72 75 63 74 6f 72 2c 20 72 65 63 65 69 76 65 72 2c 20 72 65 74 75 72 6e 56 61 6c 75 65 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 43 68 65 63 6b 50 72 69 76 61 74 65 53 74 61 74 69 63 46 69 65 6c 64 44 65 73 63 72 69 70 74 6f 72 28 64 65 73 63 72 69 70 74 6f 72 2c 20 61 63 74 69 6f 6e 29 20 7b 0a 20 20 69 66 20 28 64 65 73 63 Data Ascii: ver, descriptor);}function _classCheckPrivateStaticAccess(receiver, classConstructor, returnValue) { return _assertClassBrand(classConstructor, receiver, returnValue);}function _classCheckPrivateStaticFieldDescriptor(descriptor, action) { if (desc
2025-01-02 11:16:12 UTC	6918	IN	Data Raw: 69 6d 61 74 65 20 73 68 6f 72 74 63 75 74 22 0a 7d 2c 20 7b 0a 20 20 74 69 74 6c 65 3a 20 22 57 61 72 6d 69 6e 67 20 75 70 20 74 68 65 20 61 70 70 20 74 6f 61 73 74 65 72 22 2c 0a 20 20 73 75 62 74 69 74 6c 65 3a 20 22 62 65 63 61 75 73 65 20 66 72 65 73 68 20 61 70 70 73 20 61 72 65 20 74 68 65 20 62 65 73 74 20 61 70 70 73 22 0a 7d 2c 20 7b 0a 20 20 74 69 74 6c 65 3a 20 22 50 75 74 74 69 6e 67 20 74 68 65 20 61 70 70 73 20 74 68 72 6f 75 67 68 20 62 6f 6f 74 20 63 61 6d 70 22 2c 0a 20 20 73 75 62 74 69 74 6c 65 3a 20 22 74 68 65 79 27 6c 6c 20 63 6f 6d 65 20 6f 75 74 20 73 74 72 6f 6e 67 65 72 20 61 6e 64 20 66 61 73 74 65 72 22 0a 7d 2c 20 7b 0a 20 20 74 69 74 6c 65 3a 20 22 42 61 6c 61 6e 63 69 6e 67 20 74 68 65 20 61 70 70 20 75 6e 69 76 65 72 73 65 Data Ascii: imate shortcut"}, { title: "Warming up the app toaster", subtitle: "because fresh apps are the best apps"}, { title: "Putting the apps through boot camp", subtitle: "they'll come out stronger and faster"}, { title: "Balancing the app universe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.17	49742	159.223.101.159	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:12 UTC	801	OUT	POST /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive Content-Length: 96 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Accept: / Origin: https://pcapp.store Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34
2025-01-02 11:16:12 UTC	96	OUT	Data Raw: 7b 22 63 22 3a 22 66 72 6f 6e 74 2f 69 6e 73 74 61 6c 6c 69 6e 67 22 2c 22 61 22 3a 22 69 6e 73 74 61 6c 6c 53 74 61 74 75 73 22 2c 22 70 22 3a 7b 22 67 75 69 64 22 3a 22 43 31 42 38 32 37 34 32 2d 32 32 36 37 2d 34 45 35 30 2d 38 42 31 45 2d 35 32 35 42 42 31 33 42 34 41 33 34 22 7d 7d Data Ascii: {"c":"front/installing","a":"installStatus","p":{"guid":"C1B82742-2267-4E50-8B1E-525BB13B4A34"}}
2025-01-02 11:16:12 UTC	551	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:12 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: https://pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:12 UTC	44	IN	Data Raw: 32 31 0d 0a 7b 22 73 74 61 74 65 22 3a 22 6f 6b 22 2c 22 72 65 73 75 6c 74 22 3a 22 6e 6f 20 69 6e 66 6f 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 21{"state":"ok","result":"no info"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49743	159.223.101.159	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:12 UTC	803	OUT	POST /pixelgif.php HTTP/1.1 Host: pcapp.store Connection: keep-alive Content-Length: 351 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Accept: / Origin: https://pcapp.store Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34
2025-01-02 11:16:12 UTC	351	OUT	Data Raw: 7b 22 65 76 74 5f 73 72 63 22 3a 22 77 65 62 22 2c 22 65 76 74 5f 61 63 74 69 6f 6e 22 3a 22 76 69 73 74 79 70 65 22 2c 22 67 70 75 22 3a 22 47 6f 6f 67 6c 65 2c 20 56 75 6c 6b 61 6e 20 31 2e 33 2e 30 20 28 53 77 69 66 74 53 68 61 64 65 72 20 44 65 76 69 63 65 20 28 53 75 62 7a 65 72 6f 29 20 28 30 78 30 30 30 30 43 30 44 45 29 29 2c 20 53 77 69 66 74 53 68 61 64 65 72 20 64 72 69 76 65 72 29 22 2c 22 68 65 69 67 68 74 22 3a 31 32 38 30 2c 22 77 69 64 74 68 22 3a 31 30 32 34 2c 22 62 72 6f 77 73 65 72 22 3a 22 43 48 22 2c 22 62 72 6f 77 73 65 72 76 65 72 22 3a 31 31 37 2c 22 6f 73 22 3a 22 31 30 22 2c 22 63 6f 6f 6b 69 65 73 22 3a 31 2c 22 6d 65 6d 6f 72 79 22 3a 38 2c 22 7a 6f 6f 6d 22 3a 31 30 30 2c 22 76 69 64 65 6f 5f 69 6e 70 75 74 22 3a 30 2c 22 61 Data Ascii: {"evt_src":"web","evt_action":"vistype","gpu":"Google, Vulkan 1.3.0 (SwiftShader Device (Subzero) (0x0000C0DE)), SwiftShader driver)","height":1280,"width":1024,"browser":"CH","browserver":117,"os":"10","cookies":1,"memory":8,"zoom":100,"video_input":0,"a
2025-01-02 11:16:12 UTC	498	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:12 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: https://pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:12 UTC	106	IN	Data Raw: 35 66 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 5fPNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49740	37.19.194.80	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:12 UTC	649	OUT	GET /pcapp/images/front_img/logo/logo-dark.svg HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875
2025-01-02 11:16:12 UTC	642	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:12 GMT Content-Type: image/svg+xml Content-Length: 3030 Connection: close x-amz-id-2: zpUwCq8YmUo8gLHVyVMkKAjvTPUfh43oUhTR1Q4EcGsu9GIN+pk2euvF2hiqdog1S/Ze4Fxg3NA= x-amz-request-id: B912Q5SFRV3STMG3 Last-Modified: Mon, 04 Nov 2024 16:03:18 GMT ETag: "23df6f3e1d5a1db5a782f3f71fac80ce" x-amz-server-side-encryption: AES256 x-amz-version-id: bkVwmlo6N4ysv9Cbs.Mwmy3K3.pEhNbN X-77-NZT: EggBJRPCTwFBDAGckiEfAbeeXQ0A X-77-NZT-Ray: 0d1fa518fc6e2b9a7c7576677eac4c10 X-77-Cache: HIT X-77-Age: 875934 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:12 UTC	3030	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 39 30 22 20 68 65 69 67 68 74 3d 22 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 30 20 39 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 39 30 22 20 68 65 69 67 68 74 3d 22 39 30 22 20 72 78 3d 22 32 30 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 5f 32 32 35 37 5f 39 32 29 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 30 2e 34 36 39 38 20 32 30 2e 37 31 37 38 43 33 30 2e 34 36 39 38 20 31 36 2e 34 35 35 34 20 32 37 2e 30 31 34 34 20 31 33 2e 30 30 30 31 20 32 32 2e 37 35 32 31 20 31 33 2e 30 30 30 31 43 31 38 2e 34 38 39 37 20 31 33 2e Data Ascii: <svg width="90" height="90" viewBox="0 0 90 90" fill="none" xmlns="http://www.w3.org/2000/svg"><rect width="90" height="90" rx="20" fill="url(#paint0_linear_2257_92)"/><path d="M30.4698 20.7178C30.4698 16.4554 27.0144 13.0001 22.7521 13.0001C18.4897 13.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49744	159.223.101.159	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:12 UTC	733	OUT	GET /images/front_img/lp/lpd_installing_r2/img/done_cursor_icon.svg HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/lp/lpd_installing_r2/src/lpd_installing_r2.min.css?nocache=1731594251558 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875
2025-01-02 11:16:12 UTC	326	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 02 Jan 2025 11:16:12 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://repository.pcapp.store/pcapp/images/front_img/lp/lpd_installing_r2/img/done_cursor_icon.svg Strict-Transport-Security: max-age=31536000; includeSubDomains
2025-01-02 11:16:12 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49745	104.248.126.225	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:12 UTC	421	OUT	GET /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34
2025-01-02 11:16:12 UTC	211	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 02 Jan 2025 11:16:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding
2025-01-02 11:16:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49746	169.150.255.184	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:12 UTC	490	OUT	GET /pcapp/images/front_img/lp/lpd_installing_r2/img/done_windows_icon.svg HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34
2025-01-02 11:16:12 UTC	642	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:12 GMT Content-Type: image/svg+xml Content-Length: 3628 Connection: close x-amz-id-2: WRgK1Io4+MvU/ydU83MrxmIn/9sZ3NO1HJcFvHefwq/1ZdYE78Mq+rqIxLdJVd31VFlMXGDobnI= x-amz-request-id: 72MB1RC30TM522RG Last-Modified: Fri, 15 Nov 2024 12:53:30 GMT ETag: "ee8b3c30df90d2d7459dd6d7f7067c14" x-amz-server-side-encryption: AES256 x-amz-version-id: sg0bjO.xEEZX7iRlW1PhUp5Qu9shLY6K X-77-NZT: EggBqZb/tgFBDAHUZjgRAbe/yQMA X-77-NZT-Ray: 15b3c71150966bee7c75766760a79128 X-77-Cache: HIT X-77-Age: 248255 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:12 UTC	3628	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 32 22 20 68 65 69 67 68 74 3d 22 31 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 32 20 31 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 69 64 3d 22 47 72 6f 75 70 20 31 32 39 36 22 3e 3c 67 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 20 33 30 32 22 20 66 69 6c 74 65 72 3d 22 75 72 6c 28 23 66 69 6c 74 65 72 30 5f 64 5f 35 33 39 5f 32 37 39 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 36 20 31 32 2e 35 43 31 36 20 31 30 2e 30 31 34 37 20 31 38 2e 30 31 34 37 20 38 20 32 30 2e 35 20 38 48 31 31 31 2e 35 43 31 31 33 2e 39 38 35 20 38 20 31 31 36 20 31 30 2e 30 31 34 37 20 31 31 36 20 31 32 2e 35 Data Ascii: <svg width="132" height="132" viewBox="0 0 132 132" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="Group 1296"><g id="Rectangle 302" filter="url(#filter0_d_539_279)"><path d="M16 12.5C16 10.0147 18.0147 8 20.5 8H111.5C113.985 8 116 10.0147 116 12.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	49747	207.246.91.177	443	7064	C:\Users\user\Desktop\Setup.exe\Setup.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:12 UTC	253	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_mini_installer&evt_action=done&_fcid=1734694685230875 HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-02 11:16:12 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:12 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	49757	104.248.126.225	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:12 UTC	457	OUT	GET /pixelgif.php HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572
2025-01-02 11:16:12 UTC	448	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:12 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:12 UTC	106	IN	Data Raw: 35 66 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 5fPNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	49750	142.250.186.164	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:12 UTC	987	OUT	POST /ccm/collect?en=page_view&dl=https%3A%2F%2Fpcapp.store%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=59253731.1735816572&dt=APP%20STORE%3A%20Installing&auid=1589823288.1735816572&navt=n&npa=0&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&tft=1735816571784&tfd=3519&apve=1 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pcapp.store X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:13 UTC	575	IN	HTTP/1.1 200 OK Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT Date: Thu, 02 Jan 2025 11:16:13 GMT Content-Type: text/plain Vary: Origin Vary: X-Origin Vary: Referer Server: scaffolding on HTTPServer2 Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://pcapp.store Access-Control-Expose-Headers: date,vary,vary,vary,server,content-length Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	49749	37.19.194.80	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:12 UTC	719	OUT	GET /pcapp/images/front_img/lp/lpd_installing_r2/img/done_cursor_icon.svg HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34
2025-01-02 11:16:13 UTC	642	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:13 GMT Content-Type: image/svg+xml Content-Length: 7410 Connection: close x-amz-id-2: /vodU20hccwvDsPC1P2wOv+ZNZLNehNXs5/Q77J1SDuOdsxM60ncotf/mfSbF1cG+m0OuA8iFsc= x-amz-request-id: 68RAJW6TAJW806VV Last-Modified: Fri, 15 Nov 2024 12:53:30 GMT ETag: "2cbb3a4955b0c4ee9ade91266aee50a2" x-amz-server-side-encryption: AES256 x-amz-version-id: nE.nBmv7ap5XrFhBdeBX4S.NOoZbBIk2 X-77-NZT: EggBJRPCTwFBDAHDta8GAbcQkw4A X-77-NZT-Ray: 0d1fa518532fe4c37d75766727f6d305 X-77-Cache: HIT X-77-Age: 955152 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:13 UTC	7410	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 37 22 20 68 65 69 67 68 74 3d 22 31 30 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 37 20 31 30 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 69 64 3d 22 63 6c 69 63 6b 5f 69 63 6f 6e 22 20 66 69 6c 74 65 72 3d 22 75 72 6c 28 23 66 69 6c 74 65 72 30 5f 64 5f 35 33 39 5f 32 38 36 29 22 3e 3c 67 20 69 64 3d 22 47 72 6f 75 70 22 3e 3c 70 61 74 68 20 69 64 3d 22 56 65 63 74 6f 72 22 20 64 3d 22 4d 37 38 2e 38 35 36 33 20 34 31 2e 36 31 34 31 43 37 38 2e 39 30 34 32 20 34 31 2e 35 36 36 32 20 37 38 2e 39 35 32 31 20 34 31 2e 35 36 36 32 20 37 38 2e 39 35 32 31 20 34 31 2e 35 31 38 33 43 37 39 20 34 Data Ascii: <svg width="107" height="109" viewBox="0 0 107 109" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="click_icon" filter="url(#filter0_d_539_286)"><g id="Group"><path id="Vector" d="M78.8563 41.6141C78.9042 41.5662 78.9521 41.5662 78.9521 41.5183C79 4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	49767	104.248.126.225	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:12 UTC	421	OUT	GET /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34
2025-01-02 11:16:13 UTC	211	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 02 Jan 2025 11:16:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding
2025-01-02 11:16:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	49751	142.250.185.66	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:12 UTC	1343	OUT	GET /pagead/viewthroughconversion/858128210/?random=1735816571776&cv=11&fst=1735816571776&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:13 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 Jan 2025 11:16:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 02-Jan-2025 11:31:13 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-02 11:16:13 UTC	548	IN	Data Raw: 31 32 36 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 126e(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&global
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 74 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 61 5b 62 5d 7d 7d 20 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 64 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 64 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 64 5b 30 5d 2c 67 3b 21 61 26 26 65 20 69 6e 20 71 3f 67 3d 71 3a 67 3d 6d 3b 66 6f 72 28 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 67 29 29 62 72 65 61 6b 20 61 3b 67 3d 67 5b 66 5d Data Ascii: ;function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 7d 3b 62 2e 73 72 63 3d 61 7d 3b 76 61 72 20 46 2c 47 3b 61 3a 7b 66 6f 72 28 76 61 72 20 48 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 49 3d 78 2c 4a 3d 30 3b 4a 3c 48 2e 6c 65 6e 67 74 68 3b 4a 2b 2b 29 69 66 28 49 3d 49 5b 48 5b 4a 5d 5d 2c 49 3d 3d 6e 75 6c 6c 29 7b 47 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 47 3d 49 7d 76 61 72 20 4b 3d 47 26 26 47 5b 36 31 30 34 30 31 33 30 31 5d 3b 46 3d 4b 21 3d 6e 75 6c 6c 3f 4b 3a 21 31 3b 76 61 72 20 4c 2c 4d 3d 78 2e 6e 61 76 69 67 61 74 6f 72 3b 4c 3d 4d 3f 4d 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 61 29 7b 72 65 74 75 72 6e 20 46 3f 4c Data Ascii: ror=function(){b.onerror=null};b.src=a};var F,G;a:{for(var H=["CLOSURE_FLAGS"],I=x,J=0;J<H.length;J++)if(I=I[H[J]],I==null){G=null;break a}G=I}var K=G&&G[610401301];F=K!=null?K:!1;var L,M=x.navigator;L=M?M.userAgentData\|\|null:null;function N(a){return F?L
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 45 28 64 5b 6c 2e 67 5d 29 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 70 2e 6f 6e 6c 6f 61 64 3d 65 3b 70 2e 73 72 63 3d 63 5b 66 2e 67 5d 7d 65 28 29 7d 76 61 72 20 56 3d 5b 22 73 73 5f 22 5d 2c 57 3d 73 7c 7c 78 3b 20 56 5b 30 5d 69 6e 20 57 7c 7c 74 79 70 65 6f 66 20 57 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 57 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 56 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 58 3b 56 2e 6c 65 6e 67 74 68 26 26 28 58 3d 56 2e 73 68 69 66 74 28 29 29 3b 29 56 2e 6c 65 6e 67 74 68 7c 7c 55 3d 3d 3d 76 6f 69 64 20 30 3f 57 5b 58 5d 26 26 57 5b 58 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 Data Ascii: rror=function(l){return function(){E(d[l.g])&&e()}}(f)));p.onload=e;p.src=c[f.g]}e()}var V=["ss_"],W=s\|\|x; V[0]in W\|\|typeof W.execScript=="undefined"\|\|W.execScript("var "+V[0]);for(var X;V.length&&(X=V.shift());)V.length\|\|U===void 0?W[X]&&W[X]!==Object.pr
2025-01-02 11:16:13 UTC	8	IN	Data Raw: 3b 7d 29 28 29 3b 0d 0a Data Ascii: ;})();
2025-01-02 11:16:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.17	49752	142.250.185.66	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:12 UTC	1341	OUT	GET /pagead/viewthroughconversion/858128210/?random=1735816571802&cv=11&fst=1735816571802&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:13 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 Jan 2025 11:16:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 02-Jan-2025 11:31:13 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-02 11:16:13 UTC	548	IN	Data Raw: 31 32 36 62 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 126b(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&global
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 74 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 61 5b 62 5d 7d 7d 20 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 64 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 64 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 64 5b 30 5d 2c 67 3b 21 61 26 26 65 20 69 6e 20 71 3f 67 3d 71 3a 67 3d 6d 3b 66 6f 72 28 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 67 29 29 62 72 65 61 6b 20 61 3b 67 3d 67 5b 66 5d Data Ascii: ;function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 7d 3b 62 2e 73 72 63 3d 61 7d 3b 76 61 72 20 46 2c 47 3b 61 3a 7b 66 6f 72 28 76 61 72 20 48 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 49 3d 78 2c 4a 3d 30 3b 4a 3c 48 2e 6c 65 6e 67 74 68 3b 4a 2b 2b 29 69 66 28 49 3d 49 5b 48 5b 4a 5d 5d 2c 49 3d 3d 6e 75 6c 6c 29 7b 47 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 47 3d 49 7d 76 61 72 20 4b 3d 47 26 26 47 5b 36 31 30 34 30 31 33 30 31 5d 3b 46 3d 4b 21 3d 6e 75 6c 6c 3f 4b 3a 21 31 3b 76 61 72 20 4c 2c 4d 3d 78 2e 6e 61 76 69 67 61 74 6f 72 3b 4c 3d 4d 3f 4d 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 61 29 7b 72 65 74 75 72 6e 20 46 3f 4c Data Ascii: ror=function(){b.onerror=null};b.src=a};var F,G;a:{for(var H=["CLOSURE_FLAGS"],I=x,J=0;J<H.length;J++)if(I=I[H[J]],I==null){G=null;break a}G=I}var K=G&&G[610401301];F=K!=null?K:!1;var L,M=x.navigator;L=M?M.userAgentData\|\|null:null;function N(a){return F?L
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 45 28 64 5b 6c 2e 67 5d 29 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 70 2e 6f 6e 6c 6f 61 64 3d 65 3b 70 2e 73 72 63 3d 63 5b 66 2e 67 5d 7d 65 28 29 7d 76 61 72 20 56 3d 5b 22 73 73 5f 22 5d 2c 57 3d 73 7c 7c 78 3b 20 56 5b 30 5d 69 6e 20 57 7c 7c 74 79 70 65 6f 66 20 57 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 57 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 56 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 58 3b 56 2e 6c 65 6e 67 74 68 26 26 28 58 3d 56 2e 73 68 69 66 74 28 29 29 3b 29 56 2e 6c 65 6e 67 74 68 7c 7c 55 3d 3d 3d 76 6f 69 64 20 30 3f 57 5b 58 5d 26 26 57 5b 58 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 Data Ascii: rror=function(l){return function(){E(d[l.g])&&e()}}(f)));p.onload=e;p.src=c[f.g]}e()}var V=["ss_"],W=s\|\|x; V[0]in W\|\|typeof W.execScript=="undefined"\|\|W.execScript("var "+V[0]);for(var X;V.length&&(X=V.shift());)V.length\|\|U===void 0?W[X]&&W[X]!==Object.pr
2025-01-02 11:16:13 UTC	5	IN	Data Raw: 28 29 3b 0d 0a Data Ascii: ();
2025-01-02 11:16:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.17	49753	142.250.186.34	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:12 UTC	1467	OUT	GET /td/rul/858128210?random=1735816571776&cv=11&fst=1735816571776&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:13 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 Jan 2025 11:16:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 02-Jan-2025 11:31:13 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-02 11:16:13 UTC	605	IN	Data Raw: 33 65 30 64 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 3e0d<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 34 73 31 35 38 39 38 32 33 32 38 38 2e 31 37 33 35 38 31 36 35 37 32 5c 75 30 30 32 36 69 67 5f 6b 65 79 3d 31 73 4e 48 4d 78 4e 54 67 35 4f 44 49 7a 4d 6a 67 34 4c 6a 45 33 4d 7a 55 34 4d 54 59 31 4e 7a 49 21 32 73 5a 35 34 43 66 51 21 33 73 41 41 70 74 44 56 34 71 4d 7a 68 45 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 5f 52 37 4f 6d 67 21 32 73 5a 35 34 43 66 51 21 33 73 41 41 70 74 44 56 34 71 4d 7a 68 45 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 Data Ascii: ate?ig_name=4s1589823288.1735816572\u0026ig_key=1sNHMxNTg5ODIzMjg4LjE3MzU4MTY1NzI!2sZ54CfQ!3sAAptDV4qMzhE","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1s_R7Omg!2sZ54CfQ!3sAAptDV4qMzhE"],"userBiddingSignals"
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 36 30 22 2c 22 31 22 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 34 37 35 38 31 36 31 36 35 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 64 71 66 2d 31 69 72 5a 42 62 41 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 34 37 35 38 31 36 31 36 35 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 36 37 38 36 34 31 31 32 35 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 32 32 33 39 32 33 34 32 31 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 Data Ascii: 60","1","20788079887",null,null,null,null,null,null,"475816165"],"adRenderId":"dqf-1irZBbA","buyerReportingId":"1j475816165!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=156786411258\u0026cr_id=682239234212\u0026cv_id=0\u0026for
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 38 32 32 33 39 32 33 34 32 31 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 34 37 35 38 31 36 31 36 35 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 35 36 37 38 36 34 31 31 32 35 38 22 2c 22 36 38 32 32 33 39 32 33 34 32 31 32 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 34 37 35 38 31 36 31 36 35 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 34 5a 74 7a 33 6d 78 61 Data Ascii: 82239234212\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j475816165!4s*2A","metadata":["156786411258","682239234212",null,"20788079887",null,null,null,null,null,null,"475816165"],"adRenderId":"4Ztz3mxa
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 6e 75 6c 6c 2c 22 35 39 36 30 39 33 32 38 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 4e 72 79 30 78 4c 76 6f 7a 69 63 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 37 39 32 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 38 37 36 36 38 32 30 34 31 31 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f Data Ascii: null,"596093288"],"adRenderId":"Nry0xLvozic","buyerReportingId":"1j596093288!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163766597928\u0026cr_id=688766820411\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 38 22 2c 22 36 38 38 37 36 36 38 32 30 34 31 34 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 35 39 36 30 39 33 32 38 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 71 6b 78 7a 71 54 67 50 4a 66 41 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 Data Ascii: AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j596093288!4s*2A","metadata":["163766597928","688766820414",null,"20788079887",null,null,null,null,null,null,"596093288"],"adRenderId":"qkxzqTgPJfA","buyerReportingId":"1j596093288!4s
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 37 39 32 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 38 37 36 36 38 32 30 34 35 30 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 Data Ascii: ,"buyerReportingId":"1j596093288!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163766597928\u0026cr_id=688766820450\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j596093288!4s
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 38 22 2c 22 36 38 38 39 31 37 32 30 33 39 39 38 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 35 39 36 30 39 33 32 38 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 72 6d 48 50 4d 41 51 5a 6c 36 73 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 Data Ascii: u0026seat=2\u0026rp_id=r1j596093288!4s2A","metadata":["163766597928","688917203998",null,"20788079887",null,null,null,null,null,null,"596093288"],"adRenderId":"rmHPMAQZl6s","buyerReportingId":"1j596093288!4s2A"},{"renderUrl":"https://tdsf.doubleclick.ne
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 37 39 32 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 38 37 36 36 38 32 30 34 31 31 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 34 37 35 38 31 36 31 36 35 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 38 22 2c 22 36 38 38 37 36 Data Ascii: "},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163766597928\u0026cr_id=688766820411\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j475816165!4s*2A","metadata":["163766597928","68876
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 38 22 2c 22 36 38 38 37 36 36 38 32 30 34 33 32 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 34 37 35 38 31 36 31 36 35 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 6b 31 4a 2d 39 50 41 4d 79 4a 55 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 34 37 35 38 31 36 31 36 35 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 37 39 32 38 5c 75 30 30 32 Data Ascii: ","metadata":["163766597928","688766820432",null,"20788079887",null,null,null,null,null,null,"475816165"],"adRenderId":"k1J-9PAMyJU","buyerReportingId":"1j475816165!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163766597928\u002

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.17	49754	142.250.186.34	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:12 UTC	1465	OUT	GET /td/rul/858128210?random=1735816571802&cv=11&fst=1735816571802&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:13 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 Jan 2025 11:16:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 02-Jan-2025 11:31:13 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-02 11:16:13 UTC	605	IN	Data Raw: 33 65 30 64 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 3e0d<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 34 73 31 35 38 39 38 32 33 32 38 38 2e 31 37 33 35 38 31 36 35 37 32 5c 75 30 30 32 36 69 67 5f 6b 65 79 3d 31 73 4e 48 4d 78 4e 54 67 35 4f 44 49 7a 4d 6a 67 34 4c 6a 45 33 4d 7a 55 34 4d 54 59 31 4e 7a 49 21 32 73 5a 35 34 43 66 51 21 33 73 41 41 70 74 44 56 34 71 4d 7a 68 45 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 5f 52 37 4f 6d 67 21 32 73 5a 35 34 43 66 51 21 33 73 41 41 70 74 44 56 34 71 4d 7a 68 45 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 Data Ascii: ate?ig_name=4s1589823288.1735816572\u0026ig_key=1sNHMxNTg5ODIzMjg4LjE3MzU4MTY1NzI!2sZ54CfQ!3sAAptDV4qMzhE","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1s_R7Omg!2sZ54CfQ!3sAAptDV4qMzhE"],"userBiddingSignals"
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 36 30 22 2c 22 31 22 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 35 39 36 30 39 33 32 38 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 48 68 33 56 49 38 73 69 45 49 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 36 37 38 36 34 31 31 32 35 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 32 32 33 39 32 33 34 32 31 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 Data Ascii: 60","1","20788079887",null,null,null,null,null,null,"596093288"],"adRenderId":"zHh3VI8siEI","buyerReportingId":"1j596093288!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=156786411258\u0026cr_id=682239234212\u0026cv_id=0\u0026for
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 38 32 32 33 39 32 33 34 32 31 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 35 36 37 38 36 34 31 31 32 35 38 22 2c 22 36 38 32 32 33 39 32 33 34 32 31 32 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 35 39 36 30 39 33 32 38 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 64 52 71 76 5f 49 50 63 Data Ascii: 82239234212\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j596093288!4s*2A","metadata":["156786411258","682239234212",null,"20788079887",null,null,null,null,null,null,"596093288"],"adRenderId":"dRqv_IPc
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 6e 75 6c 6c 2c 22 34 37 35 38 31 36 31 36 35 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 69 44 4a 6d 43 54 49 6c 68 4d 41 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 34 37 35 38 31 36 31 36 35 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 37 39 32 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 38 37 36 36 38 32 30 34 31 31 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f Data Ascii: null,"475816165"],"adRenderId":"iDJmCTIlhMA","buyerReportingId":"1j475816165!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163766597928\u0026cr_id=688766820411\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 34 37 35 38 31 36 31 36 35 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 38 22 2c 22 36 38 38 37 36 36 38 32 30 34 31 34 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 34 37 35 38 31 36 31 36 35 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 58 50 45 5f 55 66 49 54 71 6e 4d 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 34 37 35 38 31 36 31 36 35 21 34 73 Data Ascii: AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j475816165!4s*2A","metadata":["163766597928","688766820414",null,"20788079887",null,null,null,null,null,null,"475816165"],"adRenderId":"XPE_UfITqnM","buyerReportingId":"1j475816165!4s
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 34 37 35 38 31 36 31 36 35 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 37 39 32 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 38 37 36 36 38 32 30 34 35 30 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 34 37 35 38 31 36 31 36 35 21 34 73 Data Ascii: ,"buyerReportingId":"1j475816165!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163766597928\u0026cr_id=688766820450\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j475816165!4s
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 34 37 35 38 31 36 31 36 35 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 38 22 2c 22 36 38 38 39 31 37 32 30 33 39 39 38 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 34 37 35 38 31 36 31 36 35 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 41 6e 7a 41 78 57 33 37 59 4c 73 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 34 37 35 38 31 36 31 36 35 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 Data Ascii: u0026seat=2\u0026rp_id=r1j475816165!4s2A","metadata":["163766597928","688917203998",null,"20788079887",null,null,null,null,null,null,"475816165"],"adRenderId":"AnzAxW37YLs","buyerReportingId":"1j475816165!4s2A"},{"renderUrl":"https://tdsf.doubleclick.ne
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 37 39 32 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 38 37 36 36 38 32 30 34 31 31 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 38 22 2c 22 36 38 38 37 36 Data Ascii: "},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163766597928\u0026cr_id=688766820411\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j596093288!4s*2A","metadata":["163766597928","68876
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 38 22 2c 22 36 38 38 37 36 36 38 32 30 34 33 32 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 35 39 36 30 39 33 32 38 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 66 69 31 6e 49 6f 6a 34 72 4a 51 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 37 39 32 38 5c 75 30 30 32 Data Ascii: ","metadata":["163766597928","688766820432",null,"20788079887",null,null,null,null,null,null,"596093288"],"adRenderId":"fi1nIoj4rJQ","buyerReportingId":"1j596093288!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163766597928\u002

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.17	49759	142.250.185.66	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:12 UTC	1395	OUT	GET /pagead/viewthroughconversion/858128210/?random=1735816571816&cv=11&fst=1735816571816&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dconversion&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:13 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 Jan 2025 11:16:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 02-Jan-2025 11:31:13 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-02 11:16:13 UTC	548	IN	Data Raw: 31 32 63 66 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 12cf(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&global
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 74 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 61 5b 62 5d 7d 7d 20 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 64 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 64 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 64 5b 30 5d 2c 67 3b 21 61 26 26 65 20 69 6e 20 71 3f 67 3d 71 3a 67 3d 6d 3b 66 6f 72 28 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 67 29 29 62 72 65 61 6b 20 61 3b 67 3d 67 5b 66 5d Data Ascii: ;function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 7d 3b 62 2e 73 72 63 3d 61 7d 3b 76 61 72 20 46 2c 47 3b 61 3a 7b 66 6f 72 28 76 61 72 20 48 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 49 3d 78 2c 4a 3d 30 3b 4a 3c 48 2e 6c 65 6e 67 74 68 3b 4a 2b 2b 29 69 66 28 49 3d 49 5b 48 5b 4a 5d 5d 2c 49 3d 3d 6e 75 6c 6c 29 7b 47 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 47 3d 49 7d 76 61 72 20 4b 3d 47 26 26 47 5b 36 31 30 34 30 31 33 30 31 5d 3b 46 3d 4b 21 3d 6e 75 6c 6c 3f 4b 3a 21 31 3b 76 61 72 20 4c 2c 4d 3d 78 2e 6e 61 76 69 67 61 74 6f 72 3b 4c 3d 4d 3f 4d 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 61 29 7b 72 65 74 75 72 6e 20 46 3f 4c Data Ascii: ror=function(){b.onerror=null};b.src=a};var F,G;a:{for(var H=["CLOSURE_FLAGS"],I=x,J=0;J<H.length;J++)if(I=I[H[J]],I==null){G=null;break a}G=I}var K=G&&G[610401301];F=K!=null?K:!1;var L,M=x.navigator;L=M?M.userAgentData\|\|null:null;function N(a){return F?L
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 45 28 64 5b 6c 2e 67 5d 29 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 70 2e 6f 6e 6c 6f 61 64 3d 65 3b 70 2e 73 72 63 3d 63 5b 66 2e 67 5d 7d 65 28 29 7d 76 61 72 20 56 3d 5b 22 73 73 5f 22 5d 2c 57 3d 73 7c 7c 78 3b 20 56 5b 30 5d 69 6e 20 57 7c 7c 74 79 70 65 6f 66 20 57 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 57 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 56 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 58 3b 56 2e 6c 65 6e 67 74 68 26 26 28 58 3d 56 2e 73 68 69 66 74 28 29 29 3b 29 56 2e 6c 65 6e 67 74 68 7c 7c 55 3d 3d 3d 76 6f 69 64 20 30 3f 57 5b 58 5d 26 26 57 5b 58 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 Data Ascii: rror=function(l){return function(){E(d[l.g])&&e()}}(f)));p.onload=e;p.src=c[f.g]}e()}var V=["ss_"],W=s\|\|x; V[0]in W\|\|typeof W.execScript=="undefined"\|\|W.execScript("var "+V[0]);for(var X;V.length&&(X=V.shift());)V.length\|\|U===void 0?W[X]&&W[X]!==Object.pr
2025-01-02 11:16:13 UTC	105	IN	Data Raw: 47 77 43 61 37 4c 37 64 5f 37 55 68 47 57 4e 66 45 57 78 39 32 4d 59 74 67 6e 42 39 4a 57 38 58 2d 6c 49 76 55 51 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 32 36 38 38 37 39 39 37 31 33 5c 78 32 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 2c 20 5b 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: GwCa7L7d_7UhGWNfEWx92MYtgnB9JW8X-lIvUQ\x26random\x3d2688799713\x26rmt_tld\x3d0\x26ipr\x3dy'], []);})();
2025-01-02 11:16:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.17	49760	142.250.186.34	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:12 UTC	1519	OUT	GET /td/rul/858128210?random=1735816571816&cv=11&fst=1735816571816&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dconversion HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:13 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 Jan 2025 11:16:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 02-Jan-2025 11:31:13 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-02 11:16:13 UTC	605	IN	Data Raw: 33 65 64 61 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 3eda<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 34 73 31 35 38 39 38 32 33 32 38 38 2e 31 37 33 35 38 31 36 35 37 32 5c 75 30 30 32 36 69 67 5f 6b 65 79 3d 31 73 4e 48 4d 78 4e 54 67 35 4f 44 49 7a 4d 6a 67 34 4c 6a 45 33 4d 7a 55 34 4d 54 59 31 4e 7a 49 21 32 73 5a 35 34 43 66 51 21 33 73 41 41 70 74 44 56 34 71 4d 7a 68 45 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 5f 52 37 4f 6d 67 21 32 73 5a 35 34 43 66 51 21 33 73 41 41 70 74 44 56 34 71 4d 7a 68 45 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 Data Ascii: ate?ig_name=4s1589823288.1735816572\u0026ig_key=1sNHMxNTg5ODIzMjg4LjE3MzU4MTY1NzI!2sZ54CfQ!3sAAptDV4qMzhE","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1s_R7Omg!2sZ54CfQ!3sAAptDV4qMzhE"],"userBiddingSignals"
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 2c 22 31 22 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 35 39 36 30 39 33 32 38 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 48 68 33 56 49 38 73 69 45 49 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 36 37 38 36 34 31 31 32 35 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 32 32 33 39 32 33 34 32 31 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 Data Ascii: ,"1","20788079887",null,null,null,null,null,null,"596093288"],"adRenderId":"zHh3VI8siEI","buyerReportingId":"1j596093288!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=156786411258\u0026cr_id=682239234212\u0026cv_id=0\u0026format
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 72 5f 69 64 3d 36 38 32 32 33 39 32 33 34 32 31 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 35 36 37 38 36 34 31 31 32 35 38 22 2c 22 36 38 32 32 33 39 32 33 34 32 31 32 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 35 39 36 30 39 33 32 38 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 64 52 Data Ascii: r_id=682239234212\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j596093288!4s*2A","metadata":["156786411258","682239234212",null,"20788079887",null,null,null,null,null,null,"596093288"],"adRenderId":"dR
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 2c 6e 75 6c 6c 2c 22 37 39 30 34 32 38 33 38 31 32 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 76 68 68 79 4f 6d 63 57 65 65 41 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 37 39 30 34 32 38 33 38 31 32 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 37 39 32 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 38 37 36 36 38 32 30 34 31 31 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 Data Ascii: ,null,"7904283812"],"adRenderId":"vhhyOmcWeeA","buyerReportingId":"1j7904283812!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163766597928\u0026cr_id=688766820411\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${REND
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 37 39 30 34 32 38 33 38 31 32 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 38 22 2c 22 36 38 38 37 36 36 38 32 30 34 31 34 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 37 39 30 34 32 38 33 38 31 32 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 43 4e 35 5a 6a 41 65 53 45 2d 34 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 37 39 30 34 32 38 33 38 31 32 Data Ascii: AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j7904283812!4s*2A","metadata":["163766597928","688766820414",null,"20788079887",null,null,null,null,null,null,"7904283812"],"adRenderId":"CN5ZjAeSE-4","buyerReportingId":"1j7904283812
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 6e 6c 50 66 32 39 42 48 6a 63 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 37 39 30 34 32 38 33 38 31 32 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 37 39 32 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 38 37 36 36 38 32 30 34 35 30 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a Data Ascii: nlPf29BHjc","buyerReportingId":"1j7904283812!4s*2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163766597928\u0026cr_id=688766820450\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 37 39 30 34 32 38 33 38 31 32 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 38 22 2c 22 36 38 38 39 31 37 32 30 33 39 39 38 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 37 39 30 34 32 38 33 38 31 32 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 31 73 6b 64 5f 6a 49 43 6d 4a 55 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 37 39 30 34 32 38 33 38 31 32 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 Data Ascii: ${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j7904283812!4s2A","metadata":["163766597928","688917203998",null,"20788079887",null,null,null,null,null,null,"7904283812"],"adRenderId":"1skd_jICmJU","buyerReportingId":"1j7904283812!4s2A"},{"renderUrl":"https://t
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 31 36 35 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 37 39 32 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 38 37 36 36 38 32 30 34 31 31 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 72 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 Data Ascii: 165!4s2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=163766597928\u0026cr_id=688766820411\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=r1j596093288!4s2A","metadata":["16376659792
2025-01-02 11:16:13 UTC	1390	IN	Data Raw: 32 38 38 21 34 73 2a 32 41 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 36 33 37 36 36 35 39 37 39 32 38 22 2c 22 36 38 38 37 36 36 38 32 30 34 33 32 22 2c 6e 75 6c 6c 2c 22 32 30 37 38 38 30 37 39 38 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 35 39 36 30 39 33 32 38 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 66 69 31 6e 49 6f 6a 34 72 4a 51 22 2c 22 62 75 79 65 72 52 65 70 6f 72 74 69 6e 67 49 64 22 3a 22 31 6a 35 39 36 30 39 33 32 38 38 21 34 73 2a 32 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 36 33 37 36 36 35 39 Data Ascii: 288!4s2A","metadata":["163766597928","688766820432",null,"20788079887",null,null,null,null,null,null,"596093288"],"adRenderId":"fi1nIoj4rJQ","buyerReportingId":"1j596093288!4s2A"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=16376659

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.17	49758	142.250.185.78	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:12 UTC	1012	OUT	POST /ccm/form-data/858128210?gtm=45be4cc1pfv9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&npa=0&frm=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&em=tv.1 HTTP/1.1 Host: google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pcapp.store X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:13 UTC	840	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://pcapp.store Date: Thu, 02 Jan 2025 11:16:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:57:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgac:57:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.17	49756	142.250.185.78	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:13 UTC	1039	OUT	POST /ccm/form-data/858128210?gtm=45be4cc1pfv9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&label=kTaFCIuq0YYZENL-l5kD&npa=0&frm=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&em=tv.1 HTTP/1.1 Host: google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pcapp.store X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:13 UTC	840	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://pcapp.store Date: Thu, 02 Jan 2025 11:16:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:57:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgac:57:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.17	49768	207.246.91.177	443	7100	C:\Users\user\AppData\Local\Temp\nsgC284.tmp

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:13 UTC	245	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_installer&evt_action=internal&prev_v=fa.2001g HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-02 11:16:13 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:13 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.17	49763	169.150.255.184	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:13 UTC	497	OUT	GET /pcapp/images/front_img/logo/logo-dark.svg HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572
2025-01-02 11:16:13 UTC	642	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:13 GMT Content-Type: image/svg+xml Content-Length: 3030 Connection: close x-amz-id-2: zpUwCq8YmUo8gLHVyVMkKAjvTPUfh43oUhTR1Q4EcGsu9GIN+pk2euvF2hiqdog1S/Ze4Fxg3NA= x-amz-request-id: B912Q5SFRV3STMG3 Last-Modified: Mon, 04 Nov 2024 16:03:18 GMT ETag: "23df6f3e1d5a1db5a782f3f71fac80ce" x-amz-server-side-encryption: AES256 x-amz-version-id: bkVwmlo6N4ysv9Cbs.Mwmy3K3.pEhNbN X-77-NZT: EggBqZb/tgFBDAGckiEfAbefXQ0A X-77-NZT-Ray: 15b3c7117ab5330a7d7576678ac5d40e X-77-Cache: HIT X-77-Age: 875935 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:13 UTC	3030	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 39 30 22 20 68 65 69 67 68 74 3d 22 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 30 20 39 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 39 30 22 20 68 65 69 67 68 74 3d 22 39 30 22 20 72 78 3d 22 32 30 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 5f 32 32 35 37 5f 39 32 29 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 30 2e 34 36 39 38 20 32 30 2e 37 31 37 38 43 33 30 2e 34 36 39 38 20 31 36 2e 34 35 35 34 20 32 37 2e 30 31 34 34 20 31 33 2e 30 30 30 31 20 32 32 2e 37 35 32 31 20 31 33 2e 30 30 30 31 43 31 38 2e 34 38 39 37 20 31 33 2e Data Ascii: <svg width="90" height="90" viewBox="0 0 90 90" fill="none" xmlns="http://www.w3.org/2000/svg"><rect width="90" height="90" rx="20" fill="url(#paint0_linear_2257_92)"/><path d="M30.4698 20.7178C30.4698 16.4554 27.0144 13.0001 22.7521 13.0001C18.4897 13.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.17	49766	74.125.206.157	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:13 UTC	858	OUT	POST /g/collect?v=2&tid=G-VFQWFX3X1C&cid=1340293989.1735816572&gtm=45je4cc1v898645365za200zb9103256652&aip=1&dma=0&gcd=13l3l3l3l1l1&npa=0&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://pcapp.store X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:13 UTC	842	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://pcapp.store Date: Thu, 02 Jan 2025 11:16:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:111:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:111:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.17	49764	142.250.186.34	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:13 UTC	1000	OUT	GET /td/ga/rul?tid=G-VFQWFX3X1C&gacid=1340293989.1735816572&gtm=45je4cc1v898645365za200zb9103256652&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=1886245849 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:13 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 Jan 2025 11:16:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 02-Jan-2025 11:31:13 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-02 11:16:13 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2025-01-02 11:16:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.17	49769	207.246.91.177	443	7100	C:\Users\user\AppData\Local\Temp\nsgC284.tmp

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:13 UTC	237	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_installer&evt_action=start&permision= HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-02 11:16:13 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:13 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.17	49770	142.250.186.164	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:13 UTC	1471	OUT	GET /pagead/1p-user-list/858128210/?random=1735816571776&cv=11&fst=1735815600000&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dmk4GgMjvKAIoDN4SYbnV4XhwthxOhg&random=1908624295&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:14 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 Jan 2025 11:16:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-02 11:16:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.17	49771	142.250.186.164	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:13 UTC	1468	OUT	GET /pagead/1p-user-list/858128210/?random=1735816571802&cv=11&fst=1735815600000&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dAG3wmpq05OsD-IU_nNbOVmny0Gutfw&random=335870858&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:14 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 Jan 2025 11:16:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-02 11:16:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.17	49776	142.250.185.98	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:13 UTC	1212	OUT	GET /pagead/viewthroughconversion/858128210/?random=1735816571776&cv=11&fst=1735816571776&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-02 11:16:14 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 Jan 2025 11:16:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUl71YXFR3Soyy9JdrojwlZdowETRPyLyN-b-n2FwT9i0lSgj1cYMXyg67Ge; expires=Sat, 02-Jan-2027 11:16:14 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-02 11:16:14 UTC	379	IN	Data Raw: 31 32 37 66 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 127f(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&global
2025-01-02 11:16:14 UTC	1390	IN	Data Raw: 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 20 76 61 72 20 6d 3d 6b 28 74 68 69 73 29 2c 6e 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 71 3d 7b 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 74 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 Data Ascii: +b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==voi
2025-01-02 11:16:14 UTC	1390	IN	Data Raw: 66 65 74 63 68 28 61 2c 62 29 3b 69 66 28 63 29 72 65 74 75 72 6e 20 63 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 7d 7d 42 28 61 29 3b 72 65 74 75 72 6e 21 30 7d 20 66 75 6e 63 74 69 6f 6e 20 43 28 61 29 7b 76 61 72 20 62 3d 6e 65 77 20 49 6d 61 67 65 28 31 2c 31 29 3b 62 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 7d 3b 62 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 7d 3b 62 2e 73 72 63 3d 61 7d 3b 76 61 72 20 46 2c 47 3b 61 3a 7b 66 6f 72 28 76 61 72 20 48 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 49 3d 78 2c 4a 3d 30 Data Ascii: fetch(a,b);if(c)return c.then(function(){}).catch(function(){}),!0}catch(d){}}B(a);return!0} function C(a){var b=new Image(1,1);b.onload=function(){b.onload=null};b.onerror=function(){b.onerror=null};b.src=a};var F,G;a:{for(var H=["CLOSURE_FLAGS"],I=x,J=0
2025-01-02 11:16:14 UTC	1390	IN	Data Raw: 63 2e 6c 65 6e 67 74 68 3b 66 3d 7b 67 3a 66 2e 67 7d 2c 66 2e 67 2b 2b 29 7b 76 61 72 20 72 3d 4e 75 6d 62 65 72 28 54 28 63 5b 66 2e 67 5d 29 29 2c 70 3d 6e 75 6c 6c 3b 72 21 3d 3d 31 26 26 72 21 3d 3d 32 7c 7c 21 28 72 3d 61 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 67 6f 6f 67 5f 63 6f 6e 76 5f 69 66 72 61 6d 65 22 29 29 7c 7c 72 2e 73 72 63 7c 7c 28 70 3d 72 29 3b 70 7c 7c 28 70 3d 6e 65 77 20 49 6d 61 67 65 2c 64 26 26 64 5b 66 2e 67 5d 26 26 28 70 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 45 28 64 5b 6c 2e 67 5d 29 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 70 2e 6f 6e 6c 6f 61 64 3d 65 3b 70 2e 73 72 63 3d 63 5b 66 2e 67 5d 7d 65 28 29 7d 76 Data Ascii: c.length;f={g:f.g},f.g++){var r=Number(T(c[f.g])),p=null;r!==1&&r!==2\|\|!(r=a.document.getElementById("goog_conv_iframe"))\|\|r.src\|\|(p=r);p\|\|(p=new Image,d&&d[f.g]&&(p.onerror=function(l){return function(){E(d[l.g])&&e()}}(f)));p.onload=e;p.src=c[f.g]}e()}v
2025-01-02 11:16:14 UTC	194	IN	Data Raw: 65 6e 74 25 33 44 67 74 61 67 2e 63 6f 6e 66 69 67 5c 78 32 36 72 66 6d 74 5c 78 33 64 33 5c 78 32 36 66 6d 74 5c 78 33 64 33 5c 78 32 36 69 73 5f 76 74 63 5c 78 33 64 31 5c 78 32 36 63 69 64 5c 78 33 64 43 41 51 53 4b 51 43 61 37 4c 37 64 2d 6c 51 47 31 37 42 4e 53 38 39 76 45 31 78 4e 31 61 52 75 62 77 4a 7a 37 48 76 41 7a 33 78 34 53 30 48 38 72 5a 75 65 59 52 5a 52 71 6f 47 4e 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 33 37 30 39 31 39 32 33 31 5c 78 32 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 2c 20 5b 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: ent%3Dgtag.config\x26rfmt\x3d3\x26fmt\x3d3\x26is_vtc\x3d1\x26cid\x3dCAQSKQCa7L7d-lQG17BNS89vE1xN1aRubwJz7HvAz3x4S0H8rZueYRZRqoGN\x26random\x3d370919231\x26rmt_tld\x3d0\x26ipr\x3dy'], []);})();
2025-01-02 11:16:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.17	49778	142.250.185.98	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:13 UTC	1210	OUT	GET /pagead/viewthroughconversion/858128210/?random=1735816571802&cv=11&fst=1735816571802&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-02 11:16:14 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 Jan 2025 11:16:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUmyP0RlULNlb0digWWzWkHsqeT4aCTT1XlYwplpJjQkyt59qDL2OBfU3X2D; expires=Sat, 02-Jan-2027 11:16:14 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-02 11:16:14 UTC	379	IN	Data Raw: 31 32 37 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 127e(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&global
2025-01-02 11:16:14 UTC	1390	IN	Data Raw: 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 20 76 61 72 20 6d 3d 6b 28 74 68 69 73 29 2c 6e 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 71 3d 7b 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 74 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 Data Ascii: +b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==voi
2025-01-02 11:16:14 UTC	1390	IN	Data Raw: 66 65 74 63 68 28 61 2c 62 29 3b 69 66 28 63 29 72 65 74 75 72 6e 20 63 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 7d 7d 42 28 61 29 3b 72 65 74 75 72 6e 21 30 7d 20 66 75 6e 63 74 69 6f 6e 20 43 28 61 29 7b 76 61 72 20 62 3d 6e 65 77 20 49 6d 61 67 65 28 31 2c 31 29 3b 62 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 7d 3b 62 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 7d 3b 62 2e 73 72 63 3d 61 7d 3b 76 61 72 20 46 2c 47 3b 61 3a 7b 66 6f 72 28 76 61 72 20 48 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 49 3d 78 2c 4a 3d 30 Data Ascii: fetch(a,b);if(c)return c.then(function(){}).catch(function(){}),!0}catch(d){}}B(a);return!0} function C(a){var b=new Image(1,1);b.onload=function(){b.onload=null};b.onerror=function(){b.onerror=null};b.src=a};var F,G;a:{for(var H=["CLOSURE_FLAGS"],I=x,J=0
2025-01-02 11:16:14 UTC	1390	IN	Data Raw: 63 2e 6c 65 6e 67 74 68 3b 66 3d 7b 67 3a 66 2e 67 7d 2c 66 2e 67 2b 2b 29 7b 76 61 72 20 72 3d 4e 75 6d 62 65 72 28 54 28 63 5b 66 2e 67 5d 29 29 2c 70 3d 6e 75 6c 6c 3b 72 21 3d 3d 31 26 26 72 21 3d 3d 32 7c 7c 21 28 72 3d 61 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 67 6f 6f 67 5f 63 6f 6e 76 5f 69 66 72 61 6d 65 22 29 29 7c 7c 72 2e 73 72 63 7c 7c 28 70 3d 72 29 3b 70 7c 7c 28 70 3d 6e 65 77 20 49 6d 61 67 65 2c 64 26 26 64 5b 66 2e 67 5d 26 26 28 70 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 45 28 64 5b 6c 2e 67 5d 29 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 70 2e 6f 6e 6c 6f 61 64 3d 65 3b 70 2e 73 72 63 3d 63 5b 66 2e 67 5d 7d 65 28 29 7d 76 Data Ascii: c.length;f={g:f.g},f.g++){var r=Number(T(c[f.g])),p=null;r!==1&&r!==2\|\|!(r=a.document.getElementById("goog_conv_iframe"))\|\|r.src\|\|(p=r);p\|\|(p=new Image,d&&d[f.g]&&(p.onerror=function(l){return function(){E(d[l.g])&&e()}}(f)));p.onload=e;p.src=c[f.g]}e()}v
2025-01-02 11:16:14 UTC	193	IN	Data Raw: 65 6e 74 25 33 44 70 61 67 65 5f 76 69 65 77 5c 78 32 36 72 66 6d 74 5c 78 33 64 33 5c 78 32 36 66 6d 74 5c 78 33 64 33 5c 78 32 36 69 73 5f 76 74 63 5c 78 33 64 31 5c 78 32 36 63 69 64 5c 78 33 64 43 41 51 53 4b 51 43 61 37 4c 37 64 71 43 6e 6c 4f 69 33 77 46 7a 68 4b 70 79 67 54 48 31 6c 6b 57 37 37 58 7a 62 32 74 69 4c 34 51 75 65 79 5a 6c 61 50 62 39 36 5f 4e 38 4c 6c 53 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 31 36 37 36 32 39 35 32 33 38 5c 78 32 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 2c 20 5b 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: ent%3Dpage_view\x26rfmt\x3d3\x26fmt\x3d3\x26is_vtc\x3d1\x26cid\x3dCAQSKQCa7L7dqCnlOi3wFzhKpygTH1lkW77Xzb2tiL4QueyZlaPb96_N8LlS\x26random\x3d1676295238\x26rmt_tld\x3d0\x26ipr\x3dy'], []);})();
2025-01-02 11:16:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.17	49775	169.150.255.184	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:13 UTC	612	OUT	GET /pcapp/images/front_img/lp/lpd_installing_r2/img/done_cursor_icon.svg HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
2025-01-02 11:16:14 UTC	642	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:14 GMT Content-Type: image/svg+xml Content-Length: 7410 Connection: close x-amz-id-2: /vodU20hccwvDsPC1P2wOv+ZNZLNehNXs5/Q77J1SDuOdsxM60ncotf/mfSbF1cG+m0OuA8iFsc= x-amz-request-id: 68RAJW6TAJW806VV Last-Modified: Fri, 15 Nov 2024 12:53:30 GMT ETag: "2cbb3a4955b0c4ee9ade91266aee50a2" x-amz-server-side-encryption: AES256 x-amz-version-id: nE.nBmv7ap5XrFhBdeBX4S.NOoZbBIk2 X-77-NZT: EggBqZb/tgFBDAHDta8GAbcRkw4A X-77-NZT-Ray: 15b3c71143c1dd337e7576677fba9606 X-77-Cache: HIT X-77-Age: 955153 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:14 UTC	7410	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 37 22 20 68 65 69 67 68 74 3d 22 31 30 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 37 20 31 30 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 69 64 3d 22 63 6c 69 63 6b 5f 69 63 6f 6e 22 20 66 69 6c 74 65 72 3d 22 75 72 6c 28 23 66 69 6c 74 65 72 30 5f 64 5f 35 33 39 5f 32 38 36 29 22 3e 3c 67 20 69 64 3d 22 47 72 6f 75 70 22 3e 3c 70 61 74 68 20 69 64 3d 22 56 65 63 74 6f 72 22 20 64 3d 22 4d 37 38 2e 38 35 36 33 20 34 31 2e 36 31 34 31 43 37 38 2e 39 30 34 32 20 34 31 2e 35 36 36 32 20 37 38 2e 39 35 32 31 20 34 31 2e 35 36 36 32 20 37 38 2e 39 35 32 31 20 34 31 2e 35 31 38 33 43 37 39 20 34 Data Ascii: <svg width="107" height="109" viewBox="0 0 107 109" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="click_icon" filter="url(#filter0_d_539_286)"><g id="Group"><path id="Vector" d="M78.8563 41.6141C78.9042 41.5662 78.9521 41.5662 78.9521 41.5183C79 4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.17	49780	142.250.186.164	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:13 UTC	1523	OUT	GET /pagead/1p-user-list/858128210/?random=1735816571816&cv=11&fst=1735815600000&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dconversion&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7d_7UhGWNfEWx92MYtgnB9JW8X-lIvUQ&random=2688799713&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:14 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 Jan 2025 11:16:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-02 11:16:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.17	49777	142.250.185.98	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:13 UTC	1264	OUT	GET /pagead/viewthroughconversion/858128210/?random=1735816571816&cv=11&fst=1735816571816&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dconversion&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-02 11:16:14 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 Jan 2025 11:16:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUmUf3FeY7m59aLOAVQCDSIU603ClrB6ulxf6g9wrLiyEbMlK9uYZ3KkmFCs; expires=Sat, 02-Jan-2027 11:16:14 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-02 11:16:14 UTC	379	IN	Data Raw: 31 32 65 31 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 12e1(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&global
2025-01-02 11:16:14 UTC	1390	IN	Data Raw: 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 20 76 61 72 20 6d 3d 6b 28 74 68 69 73 29 2c 6e 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 71 3d 7b 7d 2c 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 63 3d 74 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 Data Ascii: +b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==voi
2025-01-02 11:16:14 UTC	1390	IN	Data Raw: 66 65 74 63 68 28 61 2c 62 29 3b 69 66 28 63 29 72 65 74 75 72 6e 20 63 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 7d 7d 42 28 61 29 3b 72 65 74 75 72 6e 21 30 7d 20 66 75 6e 63 74 69 6f 6e 20 43 28 61 29 7b 76 61 72 20 62 3d 6e 65 77 20 49 6d 61 67 65 28 31 2c 31 29 3b 62 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 7d 3b 62 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 7d 3b 62 2e 73 72 63 3d 61 7d 3b 76 61 72 20 46 2c 47 3b 61 3a 7b 66 6f 72 28 76 61 72 20 48 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 49 3d 78 2c 4a 3d 30 Data Ascii: fetch(a,b);if(c)return c.then(function(){}).catch(function(){}),!0}catch(d){}}B(a);return!0} function C(a){var b=new Image(1,1);b.onload=function(){b.onload=null};b.onerror=function(){b.onerror=null};b.src=a};var F,G;a:{for(var H=["CLOSURE_FLAGS"],I=x,J=0
2025-01-02 11:16:14 UTC	1390	IN	Data Raw: 63 2e 6c 65 6e 67 74 68 3b 66 3d 7b 67 3a 66 2e 67 7d 2c 66 2e 67 2b 2b 29 7b 76 61 72 20 72 3d 4e 75 6d 62 65 72 28 54 28 63 5b 66 2e 67 5d 29 29 2c 70 3d 6e 75 6c 6c 3b 72 21 3d 3d 31 26 26 72 21 3d 3d 32 7c 7c 21 28 72 3d 61 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 67 6f 6f 67 5f 63 6f 6e 76 5f 69 66 72 61 6d 65 22 29 29 7c 7c 72 2e 73 72 63 7c 7c 28 70 3d 72 29 3b 70 7c 7c 28 70 3d 6e 65 77 20 49 6d 61 67 65 2c 64 26 26 64 5b 66 2e 67 5d 26 26 28 70 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 45 28 64 5b 6c 2e 67 5d 29 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 70 2e 6f 6e 6c 6f 61 64 3d 65 3b 70 2e 73 72 63 3d 63 5b 66 2e 67 5d 7d 65 28 29 7d 76 Data Ascii: c.length;f={g:f.g},f.g++){var r=Number(T(c[f.g])),p=null;r!==1&&r!==2\|\|!(r=a.document.getElementById("goog_conv_iframe"))\|\|r.src\|\|(p=r);p\|\|(p=new Image,d&&d[f.g]&&(p.onerror=function(l){return function(){E(d[l.g])&&e()}}(f)));p.onload=e;p.src=c[f.g]}e()}v
2025-01-02 11:16:14 UTC	292	IN	Data Raw: 36 75 61 6d 62 5c 78 33 64 30 5c 78 32 36 75 61 6d 5c 78 33 64 5c 78 32 36 75 61 70 5c 78 33 64 57 69 6e 64 6f 77 73 5c 78 32 36 75 61 70 76 5c 78 33 64 31 30 2e 30 2e 30 5c 78 32 36 75 61 77 5c 78 33 64 30 5c 78 32 36 66 6c 65 64 67 65 5c 78 33 64 31 5c 78 32 36 64 61 74 61 5c 78 33 64 65 76 65 6e 74 25 33 44 63 6f 6e 76 65 72 73 69 6f 6e 5c 78 32 36 72 66 6d 74 5c 78 33 64 33 5c 78 32 36 66 6d 74 5c 78 33 64 33 5c 78 32 36 69 73 5f 76 74 63 5c 78 33 64 31 5c 78 32 36 63 69 64 5c 78 33 64 43 41 51 53 4b 51 43 61 37 4c 37 64 6b 32 65 74 4e 6f 51 39 4a 31 79 66 4c 51 30 79 64 53 65 54 65 79 6a 4e 56 59 79 75 5f 7a 45 34 4b 6a 61 6e 56 72 54 53 5a 48 65 49 72 55 7a 53 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 32 37 38 39 34 35 31 33 36 35 5c 78 32 36 72 6d Data Ascii: 6uamb\x3d0\x26uam\x3d\x26uap\x3dWindows\x26uapv\x3d10.0.0\x26uaw\x3d0\x26fledge\x3d1\x26data\x3devent%3Dconversion\x26rfmt\x3d3\x26fmt\x3d3\x26is_vtc\x3d1\x26cid\x3dCAQSKQCa7L7dk2etNoQ9J1yfLQ0ydSeTeyjNVYyu_zE4KjanVrTSZHeIrUzS\x26random\x3d2789451365\x26rm
2025-01-02 11:16:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.17	49783	207.246.91.177	443	7100	C:\Users\user\AppData\Local\Temp\nsgC284.tmp

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:14 UTC	275	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_installer&evt_action=installing&e=03000200-0400-0500-0006-000700080009&u=52 HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-02 11:16:14 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:14 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.17	49786	159.223.101.159	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:14 UTC	908	OUT	GET /lp/appstore/img/favicon.ico HTTP/1.1 Host: pcapp.store Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
2025-01-02 11:16:14 UTC	307	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:14 GMT Content-Type: image/x-icon Content-Length: 4286 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:14 UTC	4286	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 e3 dc d3 00 e2 dc d2 00 e4 db d4 00 e3 db d1 2d e2 da d1 8a e2 db d2 c9 e3 db d2 e6 e2 da d1 f3 e3 db d2 fd e2 db d2 ff e2 db d2 ff e2 db d2 ff e2 da d2 ff e2 da d2 ff e2 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e2 db d2 ff e3 db d2 ff e2 da d1 ff e2 da d1 ff e2 db d2 ff e2 da d1 fd e3 da d2 f4 e2 da d1 e6 e2 db d1 c9 e2 da d2 89 e2 db d2 2a e0 da d5 00 e3 dc d2 00 e2 dc d2 00 e3 dd d2 00 e1 de d2 02 e3 db d2 58 e3 db d2 d6 e3 db d2 fe e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 fe e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 Data Ascii: ( @ -*X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.17	49784	172.217.18.4	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:14 UTC	1240	OUT	GET /pagead/1p-user-list/858128210/?random=1735816571776&cv=11&fst=1735815600000&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dmk4GgMjvKAIoDN4SYbnV4XhwthxOhg&random=1908624295&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:14 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 Jan 2025 11:16:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-02 11:16:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.17	49785	172.217.18.4	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:14 UTC	1237	OUT	GET /pagead/1p-user-list/858128210/?random=1735816571802&cv=11&fst=1735815600000&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dAG3wmpq05OsD-IU_nNbOVmny0Gutfw&random=335870858&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:14 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 Jan 2025 11:16:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-02 11:16:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.17	49787	172.217.18.4	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:14 UTC	1292	OUT	GET /pagead/1p-user-list/858128210/?random=1735816571816&cv=11&fst=1735815600000&bg=ffffff&guid=ON&async=1&gtm=45be4cc1v9103256652za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fpcapp.store%2F%3Fp%3Dlpd_installing_r2%26guid%3DC1B82742-2267-4E50-8B1E-525BB13B4A34%26_fcid%3D1734694685230875%26_winver%3D19045%26version%3Dfa.2001g&label=kTaFCIuq0YYZENL-l5kD&hn=www.googleadservices.com&frm=0&tiba=APP%20STORE%3A%20Installing&value=1&currency_code=USD&npa=0&pscdl=noapi&auid=1589823288.1735816572&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dconversion&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7d_7UhGWNfEWx92MYtgnB9JW8X-lIvUQ&random=2688799713&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-02 11:16:15 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 02 Jan 2025 11:16:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-02 11:16:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.17	49788	207.246.91.177	443	7100	C:\Users\user\AppData\Local\Temp\nsgC284.tmp

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:15 UTC	255	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_installer&evt_action=localmac&addon[]=EC-F4-BB-FF-25-8B HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-02 11:16:15 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:15 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.17	49789	104.248.126.225	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:15 UTC	560	OUT	GET /lp/appstore/img/favicon.ico HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
2025-01-02 11:16:15 UTC	307	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:15 GMT Content-Type: image/x-icon Content-Length: 4286 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:15 UTC	4286	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 e3 dc d3 00 e2 dc d2 00 e4 db d4 00 e3 db d1 2d e2 da d1 8a e2 db d2 c9 e3 db d2 e6 e2 da d1 f3 e3 db d2 fd e2 db d2 ff e2 db d2 ff e2 db d2 ff e2 da d2 ff e2 da d2 ff e2 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e2 db d2 ff e3 db d2 ff e2 da d1 ff e2 da d1 ff e2 db d2 ff e2 da d1 fd e3 da d2 f4 e2 da d1 e6 e2 db d1 c9 e2 da d2 89 e2 db d2 2a e0 da d5 00 e3 dc d2 00 e2 dc d2 00 e3 dd d2 00 e1 de d2 02 e3 db d2 58 e3 db d2 d6 e3 db d2 fe e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 fe e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 Data Ascii: ( @ -*X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.17	49790	207.246.91.177	443	7100	C:\Users\user\AppData\Local\Temp\nsgC284.tmp

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:16 UTC	285	OUT	POST /inst_cpg.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&src=pcapp_full HTTP/1.1 Filename: tempPOSTData Content-Type: application/json User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Content-Length: 2368 Connection: Keep-Alive Cache-Control: no-cache
2025-01-02 11:16:16 UTC	2368	OUT	Data Raw: 7b 22 73 79 73 74 65 6d 5f 73 74 61 74 73 22 3a 7b 22 6f 73 5f 6e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2b 57 69 6e 64 6f 77 73 2b 31 30 2b 50 72 6f 22 2c 22 6f 73 5f 69 6e 73 74 61 6c 6c 64 61 74 65 22 3a 22 32 30 32 33 31 30 30 33 30 39 35 37 31 38 25 32 45 30 30 30 30 30 30 25 32 42 30 36 30 22 2c 22 6f 73 5f 70 72 6f 63 65 73 73 65 73 22 3a 22 31 30 30 22 2c 22 6f 73 5f 61 72 63 68 69 74 65 63 74 75 72 65 22 3a 22 36 34 2d 62 69 74 22 2c 22 6f 73 5f 76 69 72 74 6d 65 6d 22 3a 22 38 33 38 37 36 33 36 22 2c 22 6f 73 5f 6d 65 6d 22 3a 22 34 31 39 33 33 33 32 22 2c 22 63 70 75 5f 6e 61 6d 65 22 3a 22 49 6e 74 65 6c 25 32 38 52 25 32 39 2b 43 6f 72 65 25 32 38 54 4d 25 32 39 32 2b 43 50 55 2b 36 36 30 30 2b 25 34 30 2b 32 25 32 45 34 30 2b 47 48 7a Data Ascii: {"system_stats":{"os_name":"Microsoft+Windows+10+Pro","os_installdate":"20231003095718%2E000000%2B060","os_processes":"100","os_architecture":"64-bit","os_virtmem":"8387636","os_mem":"4193332","cpu_name":"Intel%28R%29+Core%28TM%292+CPU+6600+%40+2%2E40+GHz
2025-01-02 11:16:16 UTC	509	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:16 UTC	84	IN	Data Raw: 34 39 0d 0a 7b 22 63 70 67 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 69 6e 73 74 5f 65 78 63 6c 22 3a 6e 75 6c 6c 2c 22 69 6e 73 74 5f 61 64 64 6f 6e 22 3a 6e 75 6c 6c 2c 22 69 6e 73 74 5f 61 64 76 61 6e 63 65 64 22 3a 6e 75 6c 6c 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 49{"cpg":"default","inst_excl":null,"inst_addon":null,"inst_advanced":null}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.17	49791	159.223.101.159	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:17 UTC	924	OUT	POST /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive Content-Length: 96 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Accept: / Origin: https://pcapp.store Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
2025-01-02 11:16:17 UTC	96	OUT	Data Raw: 7b 22 63 22 3a 22 66 72 6f 6e 74 2f 69 6e 73 74 61 6c 6c 69 6e 67 22 2c 22 61 22 3a 22 69 6e 73 74 61 6c 6c 53 74 61 74 75 73 22 2c 22 70 22 3a 7b 22 67 75 69 64 22 3a 22 43 31 42 38 32 37 34 32 2d 32 32 36 37 2d 34 45 35 30 2d 38 42 31 45 2d 35 32 35 42 42 31 33 42 34 41 33 34 22 7d 7d Data Ascii: {"c":"front/installing","a":"installStatus","p":{"guid":"C1B82742-2267-4E50-8B1E-525BB13B4A34"}}
2025-01-02 11:16:17 UTC	551	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:17 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: https://pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:17 UTC	44	IN	Data Raw: 32 31 0d 0a 7b 22 73 74 61 74 65 22 3a 22 6f 6b 22 2c 22 72 65 73 75 6c 74 22 3a 22 6e 6f 20 69 6e 66 6f 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 21{"state":"ok","result":"no info"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.17	49793	207.246.91.177	443	7100	C:\Users\user\AppData\Local\Temp\nsgC284.tmp

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:17 UTC	238	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&inst_parent=&evt_src=fa_installer&evt_action=done HTTP/1.1 User-Agent: NSIS_Inetc (Mozilla) Host: pcapp.store Connection: Keep-Alive Cache-Control: no-cache
2025-01-02 11:16:17 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:17 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.17	49792	104.248.126.225	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:17 UTC	544	OUT	GET /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
2025-01-02 11:16:17 UTC	211	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 02 Jan 2025 11:16:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding
2025-01-02 11:16:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.17	49795	207.246.91.177	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:18 UTC	237	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_product&evt_action=channel&id=-3&eng_time=1735822737703&nocache=6350046 HTTP/1.1 Connection: Keep-Alive User-Agent: WinHTTP 1.0 Host: pcapp.store
2025-01-02 11:16:18 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:18 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.17	49796	18.173.205.91	443	2936	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:18 UTC	700	OUT	GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":0,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735822737&nocache=8570 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-02 11:16:18 UTC	476	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 02 Jan 2025 11:16:19 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: RefreshHit from cloudfront Via: 1.1 ea7cd71b17e29a29176686830f1a76c4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: zhn-1OEZMgghqVvGsACQEBgnKAB1O6EnHfB90QI7a4AKbyWsXKlloA==
2025-01-02 11:16:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.17	49797	18.173.205.91	443	2936	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:19 UTC	701	OUT	GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":1,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735824776&nocache=11904 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-02 11:16:20 UTC	477	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 02 Jan 2025 11:16:19 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 f41688bac877227b82b3347b2428d266.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: ESv0dRyNwFxbx51OSZrByye_K7JUxY9-10m0UcerQaxvDw28EQ2tug== Age: 1
2025-01-02 11:16:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.17	49798	18.173.205.91	443	2936	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:20 UTC	701	OUT	GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":2,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735826695&nocache=15039 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-02 11:16:21 UTC	477	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 02 Jan 2025 11:16:19 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 7f26f4279546775ace8410d89a15a960.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: Rvhpg8GtkdAMZIs05p_hA7lST4ibVO36m_vvZ7B7lvEkv05ZKkOtkQ== Age: 3
2025-01-02 11:16:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.17	49800	159.223.101.159	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:22 UTC	924	OUT	POST /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive Content-Length: 96 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Accept: / Origin: https://pcapp.store Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
2025-01-02 11:16:22 UTC	96	OUT	Data Raw: 7b 22 63 22 3a 22 66 72 6f 6e 74 2f 69 6e 73 74 61 6c 6c 69 6e 67 22 2c 22 61 22 3a 22 69 6e 73 74 61 6c 6c 53 74 61 74 75 73 22 2c 22 70 22 3a 7b 22 67 75 69 64 22 3a 22 43 31 42 38 32 37 34 32 2d 32 32 36 37 2d 34 45 35 30 2d 38 42 31 45 2d 35 32 35 42 42 31 33 42 34 41 33 34 22 7d 7d Data Ascii: {"c":"front/installing","a":"installStatus","p":{"guid":"C1B82742-2267-4E50-8B1E-525BB13B4A34"}}
2025-01-02 11:16:22 UTC	551	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:22 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: https://pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:22 UTC	44	IN	Data Raw: 32 31 0d 0a 7b 22 73 74 61 74 65 22 3a 22 6f 6b 22 2c 22 72 65 73 75 6c 74 22 3a 22 73 74 61 72 74 65 64 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 21{"state":"ok","result":"started"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.17	49799	18.173.205.91	443	2936	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:22 UTC	701	OUT	GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":3,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735828613&nocache=18174 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-02 11:16:22 UTC	477	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 02 Jan 2025 11:16:19 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 e787a68a5271d06ea7b7e56fa6886dc8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: h0SnEZqr1l4JWWwfQTv5bdL2R7rqRqEfMvDPfzkUeO0VRU1dsNSjWA== Age: 4
2025-01-02 11:16:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.17	49801	104.248.126.225	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:22 UTC	544	OUT	GET /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
2025-01-02 11:16:22 UTC	211	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 02 Jan 2025 11:16:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding
2025-01-02 11:16:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.17	49802	18.173.205.91	443	2936	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:23 UTC	701	OUT	GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":4,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735830532&nocache=21309 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-02 11:16:23 UTC	477	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 02 Jan 2025 11:16:19 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 b44afb2a44376871c20edb8c123ed47c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: yoVmAsrl8ZOiMlUs1AjQ1Th2fzeXoaf0-nznqPofIxZ8H_q4MklR8g== Age: 5
2025-01-02 11:16:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.17	49803	18.173.205.91	443	2936	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:24 UTC	701	OUT	GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":5,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735832451&nocache=24444 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-02 11:16:24 UTC	477	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 02 Jan 2025 11:16:19 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 ed5042a23d5905bfac08effe99f4b1ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: FC5TCQsSgO1JCVt6doXMK4k_cwgza-_b-OE5e21Juf3OYgVERI2MUA== Age: 6
2025-01-02 11:16:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.17	49805	207.246.91.177	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:25 UTC	263	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_product&evt_action=started&prnt=nsgC284.tmp&sys_lang=en-GB&eng_time=1735822745448&nocache=6357828 HTTP/1.1 Connection: Keep-Alive User-Agent: WinHTTP 1.0 Host: pcapp.store
2025-01-02 11:16:25 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:25 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.17	49806	207.246.91.177	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:25 UTC	150	OUT	GET /api/pcapp_engine.php?a=config&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g HTTP/1.1 Host: pcapp.store Cache-Control: no-cache
2025-01-02 11:16:26 UTC	501	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:26 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:26 UTC	2737	IN	Data Raw: 61 61 35 0d 0a 7b 22 73 74 61 74 69 63 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 6d 65 6e 75 5f 73 74 6f 72 65 22 2c 22 62 65 68 61 76 69 6f 72 5f 74 79 70 65 22 3a 22 70 72 69 6d 61 72 79 22 2c 22 69 6e 69 74 69 61 6c 5f 75 72 69 22 3a 22 5c 2f 61 70 70 73 74 6f 72 65 2d 6d 65 6e 75 5c 2f 22 2c 22 61 75 74 6f 4f 70 65 6e 22 3a 74 72 75 65 2c 22 68 69 64 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 6e 61 6d 65 22 3a 22 6d 65 6e 75 5f 73 65 61 72 63 68 22 2c 22 62 65 68 61 76 69 6f 72 5f 74 79 70 65 22 3a 22 70 72 69 6d 61 72 79 22 2c 22 69 6e 69 74 69 61 6c 5f 75 72 69 22 3a 22 5c 2f 73 65 61 72 63 68 2d 6d 65 6e 75 5c 2f 3f 61 3d 67 65 74 54 65 6d 70 6c 61 74 65 26 70 5b 74 6d 70 6c 54 79 70 65 5d 3d 73 65 61 72 63 68 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 6f 66 66 65 72 Data Ascii: aa5{"static":[{"name":"menu_store","behavior_type":"primary","initial_uri":"\/appstore-menu\/","autoOpen":true,"hide":false},{"name":"menu_search","behavior_type":"primary","initial_uri":"\/search-menu\/?a=getTemplate&p[tmplType]=search"},{"name":"offer

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.17	49804	18.173.205.91	443	2936	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:25 UTC	701	OUT	GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":6,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735834250&nocache=27383 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-02 11:16:26 UTC	477	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 02 Jan 2025 11:16:19 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 e23d0cd26e88be416569e15d7299b25c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: rexYPnfMEmHoEYiTNhHt1dk8lFqbDGa4cA8erKmNyHYKIOwjZ9wthg== Age: 7
2025-01-02 11:16:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.17	49808	18.173.205.91	443	2936	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:26 UTC	701	OUT	GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":7,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735836168&nocache=30518 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-02 11:16:27 UTC	477	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 02 Jan 2025 11:16:19 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 1876576d09e30dc7b468e90ff448f1f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: TxcdS9NNWZTaodK2mZbBMJjJWnECo2UmWPzUObT2i8gRIiKviDU1gg== Age: 9
2025-01-02 11:16:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.17	49809	159.223.101.159	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:27 UTC	924	OUT	POST /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive Content-Length: 96 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Accept: / Origin: https://pcapp.store Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
2025-01-02 11:16:27 UTC	96	OUT	Data Raw: 7b 22 63 22 3a 22 66 72 6f 6e 74 2f 69 6e 73 74 61 6c 6c 69 6e 67 22 2c 22 61 22 3a 22 69 6e 73 74 61 6c 6c 53 74 61 74 75 73 22 2c 22 70 22 3a 7b 22 67 75 69 64 22 3a 22 43 31 42 38 32 37 34 32 2d 32 32 36 37 2d 34 45 35 30 2d 38 42 31 45 2d 35 32 35 42 42 31 33 42 34 41 33 34 22 7d 7d Data Ascii: {"c":"front/installing","a":"installStatus","p":{"guid":"C1B82742-2267-4E50-8B1E-525BB13B4A34"}}
2025-01-02 11:16:27 UTC	551	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:27 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: https://pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:27 UTC	44	IN	Data Raw: 32 31 0d 0a 7b 22 73 74 61 74 65 22 3a 22 6f 6b 22 2c 22 72 65 73 75 6c 74 22 3a 22 73 74 61 72 74 65 64 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 21{"state":"ok","result":"started"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.17	49810	207.246.91.177	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:27 UTC	273	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_product&evt_action=webview_error&reason=failed_to_create_thread_hook&eng_time=1735822746632&nocache=6359421 HTTP/1.1 Connection: Keep-Alive User-Agent: WinHTTP 1.0 Host: pcapp.store
2025-01-02 11:16:27 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:27 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.17	49811	104.248.126.225	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:27 UTC	544	OUT	GET /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
2025-01-02 11:16:27 UTC	211	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 02 Jan 2025 11:16:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding
2025-01-02 11:16:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.17	49812	18.173.205.91	443	2936	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:28 UTC	699	OUT	GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":8,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735838087&nocache=885 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-02 11:16:28 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 02 Jan 2025 11:16:19 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 daf01c71790f42e645ae4024c607941e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: lyghxLbHGJH6GESHUoFk_u_xHRJprl3cbnbS5HqkTD3wzwpSe1SoKQ== Age: 10
2025-01-02 11:16:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.17	49815	104.248.126.225	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:28 UTC	665	OUT	GET /search-menu/?a=getTemplate&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&p[tmplType]=search&version=fa.2001g HTTP/1.1 Host: pcapp.store Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2025-01-02 11:16:28 UTC	509	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:28 UTC	15875	IN	Data Raw: 31 65 38 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 09 3c 74 69 74 6c 65 3e 53 65 61 72 63 68 20 6d 65 6e 75 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 09 09 09 3c 73 74 79 6c 65 3e 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 47 72 69 64 20 76 35 2e 33 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f Data Ascii: 1e87<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><title>Search menu</title></head><body><style>/! Bootstrap Grid v5.3.3 (https://getbootstrap.co
2025-01-02 11:16:28 UTC	16384	IN	Data Raw: 78 78 6c 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 6f 66 66 73 65 74 2d 78 78 6c 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 78 78 6c 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 78 78 6c 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 6f 66 66 73 65 74 2d 78 78 6c 2d 34 7b 6d 61 72 67 69 0d 0a 32 30 30 30 0d 0a 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 78 78 6c 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 78 78 6c 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 78 78 6c 2d Data Ascii: xxl-0{margin-left:0}.offset-xxl-1{margin-left:8.33333333%}.offset-xxl-2{margin-left:16.66666667%}.offset-xxl-3{margin-left:25%}.offset-xxl-4{margi2000n-left:33.33333333%}.offset-xxl-5{margin-left:41.66666667%}.offset-xxl-6{margin-left:50%}.offset-xxl-
2025-01-02 11:16:28 UTC	16384	IN	Data Raw: 2d 30 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 73 6d 2d 31 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 32 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 73 6d 2d 32 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 73 6d 2d 33 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 73 6d 2d 34 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 35 72 0d 0a 32 30 30 30 0d 0a 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 73 6d 2d 35 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 73 6d 2d 61 75 74 6f 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 Data Ascii: -0{margin-top:0 !important}.mt-sm-1{margin-top:.25rem !important}.mt-sm-2{margin-top:.5rem !important}.mt-sm-3{margin-top:1rem !important}.mt-sm-4{margin-top:1.5r2000em !important}.mt-sm-5{margin-top:3rem !important}.mt-sm-auto{margin-top:auto !import
2025-01-02 11:16:28 UTC	16384	IN	Data Raw: 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 6c 67 2d 73 74 72 65 74 63 68 7b 2d 6d 73 2d 66 6c 65 78 2d 6c 69 6e 65 2d 70 61 63 6b 3a 73 74 72 65 74 63 68 20 21 69 6d 70 6f 72 74 61 6e 74 3b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 73 74 72 65 74 63 68 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 6c 67 2d 61 75 74 6f 7b 2d 6d 73 2d 66 6c 65 78 2d 69 74 65 6d 2d 61 6c 69 67 6e 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 61 6c 69 67 6e 2d 73 65 6c 66 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 0d 0a 32 30 30 30 0d 0a 61 6c 69 67 6e 2d 73 65 6c 66 2d 6c 67 2d 73 74 61 72 74 7b 2d 6d 73 2d 66 6c 65 78 2d 69 74 65 6d 2d 61 6c 69 67 6e 3a 73 74 61 72 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 Data Ascii: ign-content-lg-stretch{-ms-flex-line-pack:stretch !important;align-content:stretch !important}.align-self-lg-auto{-ms-flex-item-align:auto !important;align-self:auto !important}.2000align-self-lg-start{-ms-flex-item-align:start !important;align-self:f
2025-01-02 11:16:28 UTC	16384	IN	Data Raw: 76 65 72 74 69 63 61 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 65 76 65 72 73 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 2d 72 65 76 65 72 73 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 2d 72 65 76 65 72 73 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 78 78 6c 2d 67 72 6f 77 2d 30 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 32 30 30 30 0d 0a 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 69 76 65 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 Data Ascii: vertical !important;-webkit-box-direction:reverse !important;-ms-flex-direction:column-reverse !important;flex-direction:column-reverse !important}.flex-xxl-grow-0{-webkit-box-flex:0 !important;2000-ms-flex-positive:0 !important;flex-grow:0 !important
2025-01-02 11:16:28 UTC	16384	IN	Data Raw: 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 70 78 7d 2e 73 65 61 72 63 68 2d 61 6e 73 77 65 72 5f 5f 69 6d 67 20 69 6d 67 2c 2e 73 65 61 72 63 68 2d 61 6e 73 77 65 72 5f 5f 69 6d 67 20 73 76 67 7b 77 69 64 74 68 3a 34 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 2e 73 65 61 72 63 68 2d 61 6e 73 77 65 72 5f 5f 69 6d 67 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 0d 0a 31 30 30 30 0d 0a 3a 62 6c 75 72 28 32 30 70 78 29 3b 66 69 6c 74 65 72 3a 62 6c 75 72 28 32 30 70 78 29 7d 2e 73 65 61 72 63 68 Data Ascii: overflow:hidden;margin-bottom:4px}.search-answer__img img,.search-answer__img svg{width:40px;border-radius:2px}.search-answer__img-background{position:absolute;top:0;left:0;width:100%;height:100%;-webkit-filter1000:blur(20px);filter:blur(20px)}.search
2025-01-02 11:16:28 UTC	16384	IN	Data Raw: 76 6f 69 64 20 30 29 3b 0a 7d 0a 5f 41 73 79 6e 63 47 65 6e 65 72 61 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 5b 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 26 26 20 53 79 6d 62 6f 6c 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 20 7c 7c 20 22 40 40 61 73 79 6e 63 49 74 65 72 61 74 6f 72 22 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 7d 2c 20 5f 41 73 79 6e 63 47 65 6e 65 72 61 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 65 78 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 22 6e 65 78 74 22 2c 20 65 29 3b 0a 7d 2c 20 5f 41 73 79 0d 0a 32 30 30 30 0d 0a 6e 63 47 65 6e 65 72 61 74 6f 72 2e 70 Data Ascii: void 0);}_AsyncGenerator.prototype["function" == typeof Symbol && Symbol.asyncIterator \|\| "@@asyncIterator"] = function () { return this;}, _AsyncGenerator.prototype.next = function (e) { return this._invoke("next", e);}, _Asy2000ncGenerator.p
2025-01-02 11:16:28 UTC	16384	IN	Data Raw: 22 29 2c 20 76 6f 69 64 20 30 20 21 3d 3d 20 74 2e 69 6e 69 74 20 26 26 20 61 73 73 65 72 74 43 61 6c 6c 61 62 6c 65 28 74 2e 69 6e 69 74 2c 20 22 61 63 63 65 73 73 6f 72 2e 69 6e 69 74 22 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 22 66 75 6e 63 74 69 6f 6e 22 20 21 3d 3d 20 72 29 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 28 30 20 3d 3d 3d 20 65 20 3f 20 22 66 69 65 6c 64 22 20 3a 20 31 30 20 3d 3d 3d 20 65 20 3f 20 22 63 6c 61 73 73 22 20 3a 20 22 6d 65 74 68 6f 64 22 29 20 2b 20 22 20 64 65 63 6f 72 61 74 6f 72 73 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 66 75 6e 63 74 69 6f 6e 20 6f 72 20 76 6f 69 64 20 30 22 29 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 61 70 70 6c 79 4d 65 6d 62 65 72 44 65 0d 0a 32 30 30 Data Ascii: "), void 0 !== t.init && assertCallable(t.init, "accessor.init"); } else if ("function" !== r) throw new TypeError((0 === e ? "field" : 10 === e ? "class" : "method") + " decorators must return a function or void 0"); } function applyMemberDe200
2025-01-02 11:16:28 UTC	16384	IN	Data Raw: 20 7b 0a 20 20 20 20 20 20 64 6f 6e 65 3a 20 21 31 2c 0a 20 20 20 20 20 20 76 61 6c 75 65 3a 20 6e 65 77 20 5f 4f 76 65 72 6c 6f 61 64 59 69 65 6c 64 28 72 2c 20 31 29 0a 20 20 20 20 7d 3b 0a 20 20 7d 0a 20 20 72 65 74 75 72 6e 20 65 5b 22 75 6e 64 65 66 69 6e 65 64 22 20 21 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 26 26 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 20 7c 7c 20 22 40 40 69 74 65 72 61 74 6f 72 22 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 20 20 7d 2c 20 65 2e 6e 65 78 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 6e 20 3f 20 28 6e 20 3d 20 21 31 2c 20 74 29 20 3a 20 70 75 6d 70 28 22 6e 65 78 74 22 2c 20 74 29 3b 0a 20 20 7d Data Ascii: { done: !1, value: new _OverloadYield(r, 1) }; } return e["undefined" != typeof Symbol && Symbol.iterator \|\| "@@iterator"] = function () { return this; }, e.next = function (t) { return n ? (n = !1, t) : pump("next", t); }
2025-01-02 11:16:28 UTC	16384	IN	Data Raw: 6f 63 29 20 72 65 74 75 72 6e 20 68 61 6e 64 6c 65 28 69 2e 63 61 74 63 68 4c 6f 63 2c 20 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 70 72 65 76 20 3c 20 69 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 20 72 65 74 75 72 6e 20 68 61 6e 64 6c 65 28 69 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 63 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 70 72 65 76 20 3c 20 69 2e 63 61 74 63 68 4c 6f 63 29 20 72 65 74 75 72 6e 20 68 61 6e 64 6c 65 28 69 2e 63 61 74 63 68 4c 6f 63 2c 20 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 75 29 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 Data Ascii: oc) return handle(i.catchLoc, !0); if (this.prev < i.finallyLoc) return handle(i.finallyLoc); } else if (c) { if (this.prev < i.catchLoc) return handle(i.catchLoc, !0); } else { if (!u) throw new Err

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.17	49817	104.248.126.225	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:28 UTC	634	OUT	GET /appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g HTTP/1.1 Host: pcapp.store Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2025-01-02 11:16:28 UTC	611	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Set-Cookie: finishInstallInApp=done; expires=Fri, 02-Jan-2026 11:16:28 GMT; Max-Age=31536000; path=/ Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:28 UTC	15773	IN	Data Raw: 31 65 32 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 43 41 70 70 53 74 6f 72 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 Data Ascii: 1e21<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"/> <meta http-equiv="X-UA-Compatible" content="IE=edge"/> <meta name="viewport" content="width=device-width, initial-scale=1.0"/> <title>PCAppStore</title> <style>
2025-01-02 11:16:28 UTC	16384	IN	Data Raw: 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 61 70 3a 20 31 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 32 35 70 78 0d 0a 32 30 30 30 0d 0a 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 32 35 33 Data Ascii: flex-direction: column; align-items: center; justify-content: center; gap: 10px; padding: 0 25px2000; opacity: 0; visibility: hidden; background: linear-gradient(253
2025-01-02 11:16:28 UTC	16384	IN	Data Raw: 20 69 66 20 28 65 6c 73 2e 6c 65 6e 67 74 68 29 20 7b 0a 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 65 6c 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 65 6c 73 5b 69 5d 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 63 75 72 72 65 6e 74 59 65 61 72 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 65 6c 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 63 75 72 72 65 6e 74 59 65 61 72 0d 0a 32 30 30 30 0d 0a 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d 0a 2f 2f 20 2d 2d 2d 20 3a 41 64 64 65 64 20 63 75 72 72 65 6e 74 20 79 65 61 72 20 2d 2d 2d 20 2f 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 21 2d 2d 20 46 69 6c 65 20 74 68 61 74 20 69 6e 63 6c 75 64 65 73 20 63 6f Data Ascii: if (els.length) { for (var i = 0; i < els.length; i++) { els[i].textContent = currentYear; } } else { els.textContent = currentYear2000; } }}// --- :Added current year --- //</script>... File that includes co
2025-01-02 11:16:28 UTC	11230	IN	Data Raw: 5c 5c 5c 2f 5c 5c 5c 2f 72 65 70 63 64 6e 2e 70 63 61 70 70 2e 73 74 6f 72 65 5c 5c 5c 2f 70 63 61 70 70 5c 5c 5c 2f 69 6d 61 67 65 73 5c 5c 5c 2f 33 72 64 70 61 72 74 79 5c 5c 5c 2f 61 70 70 6c 69 63 61 74 69 6f 6e 5c 5c 5c 2f 69 6d 61 67 65 73 5c 5c 5c 2f 61 70 70 73 5f 37 33 33 32 36 5f 36 36 33 65 32 33 38 33 38 32 37 65 64 2e 6a 70 67 5c 75 30 30 32 32 5c 75 30 30 35 44 2c 5c 75 30 30 32 32 6c 69 6e 6b 5c 75 30 30 32 32 5c 75 30 30 33 41 5c 75 30 30 32 32 68 74 74 70 73 5c 75 30 30 33 41 5c 5c 5c 2f 5c 5c 5c 2f 77 77 77 2e 0d 0a 32 30 30 30 0d 0a 6d 6f 62 69 5c 75 30 30 32 44 67 61 6d 65 7a 2e 63 6f 6d 5c 5c 5c 2f 70 6c 61 79 5c 5c 5c 2f 63 68 65 63 6b 65 72 73 5f 64 65 6c 75 78 65 5f 65 64 69 74 69 6f 6e 5c 75 30 30 33 46 63 5c 75 30 30 33 44 36 32 Data Ascii: \\\/\\\/repcdn.pcapp.store\\\/pcapp\\\/images\\\/3rdparty\\\/application\\\/images\\\/apps_73326_663e2383827ed.jpg\u0022\u005D,\u0022link\u0022\u003A\u0022https\u003A\\\/\\\/www.2000mobi\u002Dgamez.com\\\/play\\\/checkers_deluxe_edition\u003Fc\u003D62

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.17	49819	104.248.126.225	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:28 UTC	634	OUT	GET /appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g HTTP/1.1 Host: pcapp.store Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2025-01-02 11:16:28 UTC	509	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:28 UTC	15875	IN	Data Raw: 31 65 38 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 09 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 09 09 09 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 Data Ascii: 1e87<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><title>Document</title></head><body><style>*{margin:0;padding:0;-webkit-box-sizing:border-box;box-s
2025-01-02 11:16:28 UTC	16384	IN	Data Raw: 64 65 66 69 6e 65 64 22 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 62 28 4e 2c 20 28 6c 20 3f 20 22 66 69 65 6c 64 22 20 3a 20 22 6d 65 74 68 6f 64 22 29 20 2b 20 22 20 64 65 63 6f 72 61 74 6f 72 73 22 2c 20 22 72 65 74 75 72 6e 22 29 20 26 26 20 28 6c 20 3f 20 6b 2e 75 6e 73 68 69 66 74 28 4e 29 20 3a 20 50 5b 46 5d 20 3d 20 4e 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 6f 20 3c 20 32 20 26 26 20 75 2e 70 75 73 0d 0a 32 30 30 30 0d 0a 68 28 67 28 6b 2c 20 73 2c 20 31 29 2c 20 67 28 69 2c 20 73 2c 20 30 29 29 2c 20 6c 20 7c 7c 20 77 20 7c 7c 20 28 66 20 3f 20 44 20 3f 20 75 2e 73 70 6c 69 63 65 28 2d 31 2c 20 30 2c 20 49 28 22 67 65 74 22 2c 20 73 29 2c 20 49 28 22 73 65 74 22 2c 20 73 29 29 20 3a 20 75 2e 70 75 73 68 28 45 20 3f 20 Data Ascii: defined"); } else b(N, (l ? "field" : "method") + " decorators", "return") && (l ? k.unshift(N) : P[F] = N); } return o < 2 && u.pus2000h(g(k, s, 1), g(i, s, 0)), l \|\| w \|\| (f ? D ? u.splice(-1, 0, I("get", s), I("set", s)) : u.push(E ?
2025-01-02 11:16:28 UTC	16384	IN	Data Raw: 20 21 30 2c 0a 20 20 20 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 20 21 30 2c 0a 20 20 20 20 65 6e 75 6d 65 72 61 62 6c 65 3a 20 21 31 0a 20 20 7d 20 3a 20 22 67 65 74 22 20 3d 3d 3d 20 65 2e 6b 69 6e 64 20 3f 20 72 20 3d 20 7b 0a 20 20 20 20 67 65 74 3a 20 65 2e 76 61 6c 75 65 2c 0a 20 20 20 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 20 21 30 2c 0a 20 20 20 20 65 6e 75 6d 65 72 61 62 6c 65 3a 20 21 31 0a 20 20 7d 20 3a 20 22 73 65 74 22 20 3d 3d 3d 20 65 2e 6b 69 6e 64 20 3f 20 72 20 3d 20 7b 0a 20 20 20 0d 0a 32 30 30 30 0d 0a 20 73 65 74 3a 20 65 2e 76 61 6c 75 65 2c 0a 20 20 20 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 20 21 30 2c 0a 20 20 20 20 65 6e 75 6d 65 72 61 62 6c 65 3a 20 21 31 0a 20 20 7d 20 3a 20 22 66 69 65 6c 64 22 20 3d 3d 3d 20 65 2e 6b Data Ascii: !0, configurable: !0, enumerable: !1 } : "get" === e.kind ? r = { get: e.value, configurable: !0, enumerable: !1 } : "set" === e.kind ? r = { 2000 set: e.value, configurable: !0, enumerable: !1 } : "field" === e.k
2025-01-02 11:16:29 UTC	16384	IN	Data Raw: 6e 65 78 74 20 3d 20 69 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 65 20 2b 20 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 22 29 3b 0a 20 20 7d 0a 20 20 72 65 74 75 72 6e 20 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 50 72 6f 74 6f 74 79 70 65 2c 20 6f 28 67 2c 20 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 2c 20 7b 0a 20 20 20 20 76 61 6c 75 65 3a 20 47 65 0d 0a 32 30 30 30 0d 0a 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 50 72 6f 74 6f 74 79 70 65 2c 0a 20 20 20 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 20 21 30 0a 20 20 7d 29 2c 20 6f 28 47 65 6e 65 72 61 Data Ascii: next = i; } } throw new TypeError(typeof e + " is not iterable"); } return GeneratorFunction.prototype = GeneratorFunctionPrototype, o(g, "constructor", { value: Ge2000neratorFunctionPrototype, configurable: !0 }), o(Genera
2025-01-02 11:16:29 UTC	16384	IN	Data Raw: 65 74 61 64 61 74 61 20 7c 7c 20 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 53 79 6d 62 6f 6c 2e 6d 65 74 61 64 61 74 61 22 29 5d 20 3d 20 74 3b 0a 20 20 7d 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 6f 6c 64 5f 63 72 65 61 74 65 41 64 64 49 6e 69 74 69 61 6c 69 7a 65 72 4d 65 74 68 6f 64 28 65 2c 20 74 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 61 29 20 7b 0a 20 20 20 20 6f 6c 64 5f 61 73 73 65 72 74 4e 6f 74 46 69 6e 69 73 68 65 64 28 74 2c 20 22 61 64 64 49 6e 69 74 69 61 6c 69 7a 65 72 22 29 2c 20 6f 6c 64 5f 61 73 73 65 72 74 43 61 6c 6c 61 62 6c 65 28 61 2c 20 22 41 6e 20 69 6e 69 0d 0a 32 30 30 30 0d 0a 74 69 61 6c 69 7a 65 72 22 29 2c 20 65 2e 70 75 73 68 28 61 29 3b 0a 20 20 7d 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 6f 6c 64 5f 6d 65 Data Ascii: etadata \|\| Symbol.for("Symbol.metadata")] = t; }}function old_createAddInitializerMethod(e, t) { return function (a) { old_assertNotFinished(t, "addInitializer"), old_assertCallable(a, "An ini2000tializer"), e.push(a); };}function old_me
2025-01-02 11:16:29 UTC	16384	IN	Data Raw: 3d 20 66 29 2c 20 6f 20 3f 20 31 20 3d 3d 3d 20 61 20 3f 20 28 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 2e 67 65 74 2e 63 61 6c 6c 28 65 2c 20 74 29 3b 0a 20 20 20 20 7d 29 2c 20 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 2e 73 65 74 2e 63 61 6c 6c 28 65 2c 20 74 29 3b 0a 20 20 20 20 7d 29 29 20 3a 20 32 20 3d 3d 3d 20 61 20 3f 20 65 2e 70 75 73 68 28 66 29 20 3a 20 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 2e 63 61 6c 6c 28 65 2c 20 74 29 3b 0a 20 0d 0a 32 30 30 30 0d 0a 20 20 20 7d 29 20 3a 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 Data Ascii: = f), o ? 1 === a ? (e.push(function (e, t) { return f.get.call(e, t); }), e.push(function (e, t) { return f.set.call(e, t); })) : 2 === a ? e.push(f) : e.push(function (e, t) { return f.call(e, t); 2000 }) : Object.define
2025-01-02 11:16:29 UTC	16384	IN	Data Raw: 67 75 72 61 62 6c 65 20 3d 20 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 20 3d 20 21 30 2c 20 22 76 61 6c 75 65 22 20 69 6e 20 6e 20 26 26 20 28 6e 2e 77 72 69 74 61 62 6c 65 20 3d 20 21 30 29 2c 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 20 74 2c 20 6e 29 3b 0a 20 20 7d 0a 20 20 69 66 20 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 20 66 6f 72 20 28 76 61 72 20 61 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 72 29 2c 20 62 20 3d 20 30 3b 20 62 20 3c 20 61 2e 6c 65 6e 67 74 68 3b 20 62 2b 2b 29 20 7b 0a 20 20 20 20 76 61 72 20 69 20 3d 20 61 5b 62 5d 3b 0a 20 20 20 20 28 6e 20 3d 20 72 5b 69 5d 29 0d 0a 32 30 30 30 0d 0a 2e 63 6f 6e 66 Data Ascii: gurable = n.enumerable = !0, "value" in n && (n.writable = !0), Object.defineProperty(e, t, n); } if (Object.getOwnPropertySymbols) for (var a = Object.getOwnPropertySymbols(r), b = 0; b < a.length; b++) { var i = a[b]; (n = r[i])2000.conf
2025-01-02 11:16:29 UTC	16384	IN	Data Raw: 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 72 65 66 69 78 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3e 20 31 20 26 26 20 61 72 67 75 6d 65 6e 74 73 5b 31 5d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 31 5d 20 3a 20 22 22 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 62 6a 29 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 20 28 61 63 63 2c 20 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 65 77 4b 65 79 20 3d 20 70 72 65 66 69 78 20 3f 20 22 22 2e 63 6f 6e 63 61 74 28 70 72 65 66 69 78 2c 20 22 5b 22 29 2e 63 6f 6e 63 61 74 28 6b 65 79 2c 20 22 5d 22 29 20 3a 20 6b 65 79 3b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 41 72 72 61 79 2e Data Ascii: { var prefix = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : ""; return Object.keys(obj).reduce(function (acc, key) { var newKey = prefix ? "".concat(prefix, "[").concat(key, "]") : key; if (Array.
2025-01-02 11:16:29 UTC	16384	IN	Data Raw: 65 6f 66 20 68 65 69 67 68 74 20 21 3d 3d 20 22 6e 75 6d 62 65 72 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 50 61 72 61 6d 65 74 65 72 20 5c 22 68 65 69 67 68 74 5c 22 20 66 6f 72 20 41 70 70 57 69 6e 64 6f 77 2e 72 65 73 69 7a 65 42 79 20 73 68 6f 75 6c 64 20 68 61 76 65 20 74 79 70 65 20 6e 75 6d 62 65 72 20 69 6e 73 74 65 61 64 20 6f 66 20 22 2e 63 6f 6e 63 61 74 28 5f 74 79 70 65 6f 66 28 68 65 69 67 68 74 29 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 22 72 65 73 69 7a 65 5f 62 79 5f 77 69 6e 64 6f 77 22 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 3a 20 77 69 6e 64 6f 77 4e 61 6d 65 2c 0a 20 20 20 20 20 20 20 Data Ascii: eof height !== "number") { throw new Error("Parameter \"height\" for AppWindow.resizeBy should have type number instead of ".concat(_typeof(height))); } this.postMessage("resize_by_window", { target: windowName,
2025-01-02 11:16:29 UTC	16384	IN	Data Raw: 6c 29 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 66 69 6c 65 50 61 74 68 20 21 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 50 61 72 61 6d 65 74 65 72 20 5c 22 66 69 6c 65 50 61 74 68 5c 22 20 66 6f 72 20 41 70 70 57 69 6e 64 6f 77 2e 64 6f 77 6e 6c 6f 61 64 46 69 6c 65 20 73 68 6f 75 6c 64 20 68 61 76 65 20 74 79 70 65 20 73 74 72 69 6e 67 20 69 6e 73 74 65 61 64 20 6f 66 20 22 2e 63 6f 6e 63 61 74 28 5f 74 79 70 65 6f 66 28 66 69 6c 65 50 61 74 68 29 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 6e 61 6d 65 20 21 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0a 20 20 20 Data Ascii: l))); } if (typeof filePath !== "string") { throw new Error("Parameter \"filePath\" for AppWindow.downloadFile should have type string instead of ".concat(_typeof(filePath))); } if (typeof name !== "string") {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.17	49820	207.246.91.177	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:28 UTC	236	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_menu_search&evt_action=created&&eng_time=1735822747963&nocache=6361046 HTTP/1.1 Connection: Keep-Alive User-Agent: WinHTTP 1.0 Host: pcapp.store
2025-01-02 11:16:29 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:29 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.17	49821	18.173.205.91	443	2936	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:29 UTC	700	OUT	GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":9,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735840006&nocache=4020 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-02 11:16:29 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 02 Jan 2025 11:16:19 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 e23d0cd26e88be416569e15d7299b25c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: VzNmZyL1lBB5nLXreRuJx59vrraGBO2IGXsPibjhoupuNNdNWzNZXw== Age: 11
2025-01-02 11:16:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.17	49822	104.248.126.225	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:30 UTC	551	OUT	GET /src/app/appWindow.js HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pcapp.store/appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: finishInstallInApp=done
2025-01-02 11:16:30 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:30 GMT Content-Type: application/javascript Content-Length: 183086 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:30 UTC	16019	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 4f 76 65 72 6c 6f 61 64 59 69 65 6c 64 28 65 2c 20 64 29 20 7b 0a 20 20 74 68 69 73 2e 76 20 3d 20 65 2c 20 74 68 69 73 2e 6b 20 3d 20 64 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 61 70 70 6c 79 44 65 63 6f 72 61 74 65 64 44 65 73 63 72 69 70 74 6f 72 28 69 2c 20 65 2c 20 72 2c 20 6e 2c 20 6c 29 20 7b 0a 20 20 76 61 72 20 61 20 3d 20 7b 7d 3b 0a 20 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 69 29 20 7b 0a 20 20 20 20 61 5b 69 5d 20 3d 20 6e 5b 69 5d 3b 0a 20 20 7d 29 2c 20 61 2e 65 6e 75 6d 65 72 61 62 6c 65 20 3d 20 21 21 61 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 20 61 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 3d 20 21 21 61 2e 63 6f 6e 66 69 67 75 Data Ascii: function _OverloadYield(e, d) { this.v = e, this.k = d;}function _applyDecoratedDescriptor(i, e, r, n, l) { var a = {}; return Object.keys(n).forEach(function (i) { a[i] = n[i]; }), a.enumerable = !!a.enumerable, a.configurable = !!a.configu
2025-01-02 11:16:30 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 65 20 3d 20 6e 2e 65 6c 65 6d 65 6e 74 73 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 73 20 3d 20 30 3b 20 73 20 3c 20 65 2e 6c 65 6e 67 74 68 20 2d 20 31 3b 20 73 2b 2b 29 20 66 6f 72 20 28 76 61 72 20 61 20 3d 20 73 20 2b 20 31 3b 20 61 20 3c 20 65 2e 6c 65 6e 67 74 68 3b 20 61 2b 2b 29 20 69 66 20 28 65 5b 73 5d 2e 6b 65 79 20 3d 3d 3d 20 65 5b 61 5d 2e 6b 65 79 20 26 26 20 65 5b 73 5d 2e 70 6c 61 63 65 6d 65 6e 74 20 3d 3d 3d 20 65 5b 61 5d 2e 70 6c 61 63 65 6d 65 6e 74 29 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 44 75 70 6c 69 63 61 74 65 64 20 65 6c 65 6d 65 6e 74 20 28 22 20 2b 20 65 5b 73 5d 2e 6b 65 79 20 2b 20 22 29 22 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a Data Ascii: e = n.elements; for (var s = 0; s < e.length - 1; s++) for (var a = s + 1; a < e.length; a++) if (e[s].key === e[a].key && e[s].placement === e[a].placement) throw new TypeError("Duplicated element (" + e[s].key + ")"); } }
2025-01-02 11:16:30 UTC	16384	IN	Data Raw: 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 0a 20 20 20 20 76 20 3d 20 64 20 26 26 20 64 28 64 28 76 61 6c 75 65 73 28 5b 5d 29 29 29 3b 0a 20 20 76 20 26 26 20 76 20 21 3d 3d 20 72 20 26 26 20 6e 2e 63 61 6c 6c 28 76 2c 20 61 29 20 26 26 20 28 70 20 3d 20 76 29 3b 0a 20 20 76 61 72 20 67 20 3d 20 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 50 72 6f 74 6f 74 79 70 65 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 47 65 6e 65 72 61 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 70 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 64 65 66 69 6e 65 49 74 65 72 61 74 6f 72 4d 65 74 68 6f 64 73 28 74 29 20 7b 0a 20 20 20 20 5b 22 6e 65 78 74 22 2c 20 22 74 68 72 6f 77 22 2c 20 22 72 65 74 75 72 6e 22 5d 2e 66 6f 72 45 61 63 Data Ascii: getPrototypeOf, v = d && d(d(values([]))); v && v !== r && n.call(v, a) && (p = v); var g = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(p); function defineIteratorMethods(t) { ["next", "throw", "return"].forEac
2025-01-02 11:16:30 UTC	16384	IN	Data Raw: 5f 77 72 61 70 4e 61 74 69 76 65 53 75 70 65 72 28 74 29 20 7b 0a 20 20 76 61 72 20 72 20 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 4d 61 70 20 3f 20 6e 65 77 20 4d 61 70 28 29 20 3a 20 76 6f 69 64 20 30 3b 0a 20 20 72 65 74 75 72 6e 20 5f 77 72 61 70 4e 61 74 69 76 65 53 75 70 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 69 66 20 28 6e 75 6c 6c 20 3d 3d 3d 20 74 20 7c 7c 20 21 5f 69 73 4e 61 74 69 76 65 46 75 6e 63 74 69 6f 6e 28 74 29 29 20 72 65 74 75 72 6e 20 74 3b 0a 20 20 20 20 69 66 20 28 22 66 75 6e 63 74 69 6f 6e 22 20 21 3d 20 74 79 70 65 6f 66 20 74 29 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 Data Ascii: _wrapNativeSuper(t) { var r = "function" == typeof Map ? new Map() : void 0; return _wrapNativeSuper = function (t) { if (null === t \|\| !_isNativeFunction(t)) return t; if ("function" != typeof t) throw new TypeError("Super expression must eit
2025-01-02 11:16:30 UTC	16384	IN	Data Raw: 7c 7c 20 61 70 70 6c 79 44 65 63 73 32 32 30 33 46 61 63 74 6f 72 79 28 29 29 28 65 2c 20 74 2c 20 72 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 61 70 70 6c 79 44 65 63 73 32 32 30 33 52 46 61 63 74 6f 72 79 28 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 41 64 64 49 6e 69 74 69 61 6c 69 7a 65 72 4d 65 74 68 6f 64 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 72 29 20 7b 0a 20 20 20 20 20 20 21 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 2e 76 29 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 74 74 65 6d 70 74 65 64 20 74 6f 20 63 61 6c 6c 20 61 64 64 49 6e 69 74 69 61 6c 69 7a 65 72 20 61 66 74 65 72 20 64 65 63 6f 72 61 74 69 6f 6e 20 77 61 73 20 Data Ascii: \|\| applyDecs2203Factory())(e, t, r);}function applyDecs2203RFactory() { function createAddInitializerMethod(e, t) { return function (r) { !function (e, t) { if (e.v) throw Error("attempted to call addInitializer after decoration was
2025-01-02 11:16:30 UTC	16384	IN	Data Raw: 28 32 20 3d 3d 3d 20 6f 20 3f 20 77 5b 41 5d 20 3a 20 69 2e 63 61 6c 6c 2e 62 69 6e 64 28 77 5b 41 5d 29 29 20 3a 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 20 6e 2c 20 77 29 29 2c 20 50 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 20 53 79 6d 62 6f 6c 2e 6d 65 74 61 64 61 74 61 20 7c 7c 20 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 53 79 6d 62 6f 6c 2e 6d 65 74 61 64 61 74 61 22 29 2c 20 7b 0a 20 20 20 20 20 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 20 21 30 2c 0a 20 20 20 20 20 20 65 6e 75 6d 65 72 61 62 6c 65 3a 20 21 30 2c 0a 20 20 20 20 20 20 76 61 6c 75 65 3a 20 74 0a 20 20 20 20 7d 29 Data Ascii: (2 === o ? w[A] : i.call.bind(w[A])) : Object.defineProperty(e, n, w)), P; } function u(e, t) { return Object.defineProperty(e, Symbol.metadata \|\| Symbol.for("Symbol.metadata"), { configurable: !0, enumerable: !0, value: t })
2025-01-02 11:16:30 UTC	16384	IN	Data Raw: 73 2e 73 61 76 65 53 65 74 74 69 6e 67 73 2e 62 69 6e 64 28 74 68 69 73 29 3b 0a 20 20 20 20 74 68 69 73 2e 6f 70 65 6e 4f 66 66 65 72 42 79 55 72 6c 20 3d 20 74 68 69 73 2e 6f 70 65 6e 4f 66 66 65 72 42 79 55 72 6c 2e 62 69 6e 64 28 74 68 69 73 29 3b 0a 20 20 20 20 74 68 69 73 2e 6f 70 65 6e 4f 66 66 65 72 42 79 4f 69 64 20 3d 20 74 68 69 73 2e 6f 70 65 6e 4f 66 66 65 72 42 79 4f 69 64 2e 62 69 6e 64 28 74 68 69 73 29 3b 0a 20 20 20 20 74 68 69 73 2e 73 74 61 72 74 44 72 61 67 20 3d 20 74 68 69 73 2e 73 74 61 72 74 44 72 61 67 2e 62 69 6e 64 28 74 68 69 73 29 3b 0a 20 20 20 20 74 68 69 73 2e 72 65 6c 6f 61 64 41 70 70 20 3d 20 74 68 69 73 2e 72 65 6c 6f 61 64 41 70 70 2e 62 69 6e 64 28 74 68 69 73 29 3b 0a 20 20 20 20 74 68 69 73 2e 70 61 67 65 4c 6f 61 Data Ascii: s.saveSettings.bind(this); this.openOfferByUrl = this.openOfferByUrl.bind(this); this.openOfferByOid = this.openOfferByOid.bind(this); this.startDrag = this.startDrag.bind(this); this.reloadApp = this.reloadApp.bind(this); this.pageLoa
2025-01-02 11:16:30 UTC	16384	IN	Data Raw: 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 50 61 72 61 6d 65 74 65 72 20 5c 22 77 69 6e 64 6f 77 4e 61 6d 65 5c 22 20 66 6f 72 20 41 70 70 57 69 6e 64 6f 77 2e 6d 6f 76 65 54 6f 20 73 68 6f 75 6c 64 20 68 61 76 65 20 74 79 70 65 20 73 74 72 69 6e 67 20 69 6e 73 74 65 61 64 20 6f 66 20 22 2e 63 6f 6e 63 61 74 28 5f 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 4e 61 6d 65 29 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 78 20 21 3d 3d 20 22 6e 75 6d 62 65 72 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 50 61 72 61 6d 65 74 65 72 20 5c 22 78 5c 22 20 66 6f 72 20 41 70 70 57 69 6e 64 6f 77 2e 6d 6f 76 65 54 6f 20 Data Ascii: ) { throw new Error("Parameter \"windowName\" for AppWindow.moveTo should have type string instead of ".concat(_typeof(windowName))); } if (typeof x !== "number") { throw new Error("Parameter \"x\" for AppWindow.moveTo
2025-01-02 11:16:30 UTC	16384	IN	Data Raw: 33 20 26 26 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 3a 20 22 22 3b 0a 20 20 20 20 20 20 76 61 72 20 6f 69 64 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3e 20 34 20 26 26 20 61 72 67 75 6d 65 6e 74 73 5b 34 5d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 34 5d 20 3a 20 30 3b 0a 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 75 72 6c 20 21 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 50 61 72 61 6d 65 74 65 72 20 5c 22 75 72 6c 5c 22 20 66 6f 72 20 41 70 70 57 69 6e 64 6f 77 2e 64 6f 77 6e 6c Data Ascii: 3 && arguments[3] !== undefined ? arguments[3] : ""; var oid = arguments.length > 4 && arguments[4] !== undefined ? arguments[4] : 0; try { if (typeof url !== "string") { throw new Error("Parameter \"url\" for AppWindow.downl
2025-01-02 11:16:30 UTC	16384	IN	Data Raw: 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 31 5d 20 3a 20 74 72 75 65 3b 0a 20 20 20 20 20 20 76 61 72 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 49 63 6f 6e 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3e 20 32 20 26 26 20 61 72 67 75 6d 65 6e 74 73 5b 32 5d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 32 5d 20 3a 20 74 72 75 65 3b 0a 20 20 20 20 20 20 76 61 72 20 64 69 73 70 6c 61 79 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3e 20 33 20 26 26 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 3a 20 74 72 75 65 3b 0a 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: !== undefined ? arguments[1] : true; var notificationIcon = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : true; var display = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : true; try {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.17	49823	104.248.126.225	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:30 UTC	554	OUT	GET /src/app/appMenuStore.js HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pcapp.store/appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: finishInstallInApp=done
2025-01-02 11:16:30 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:30 GMT Content-Type: application/javascript Content-Length: 102176 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:30 UTC	16019	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 4f 76 65 72 6c 6f 61 64 59 69 65 6c 64 28 65 2c 20 64 29 20 7b 0a 20 20 74 68 69 73 2e 76 20 3d 20 65 2c 20 74 68 69 73 2e 6b 20 3d 20 64 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 61 70 70 6c 79 44 65 63 6f 72 61 74 65 64 44 65 73 63 72 69 70 74 6f 72 28 69 2c 20 65 2c 20 72 2c 20 6e 2c 20 6c 29 20 7b 0a 20 20 76 61 72 20 61 20 3d 20 7b 7d 3b 0a 20 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 69 29 20 7b 0a 20 20 20 20 61 5b 69 5d 20 3d 20 6e 5b 69 5d 3b 0a 20 20 7d 29 2c 20 61 2e 65 6e 75 6d 65 72 61 62 6c 65 20 3d 20 21 21 61 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 20 61 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 3d 20 21 21 61 2e 63 6f 6e 66 69 67 75 Data Ascii: function _OverloadYield(e, d) { this.v = e, this.k = d;}function _applyDecoratedDescriptor(i, e, r, n, l) { var a = {}; return Object.keys(n).forEach(function (i) { a[i] = n[i]; }), a.enumerable = !!a.enumerable, a.configurable = !!a.configu
2025-01-02 11:16:30 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 65 20 3d 20 6e 2e 65 6c 65 6d 65 6e 74 73 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 73 20 3d 20 30 3b 20 73 20 3c 20 65 2e 6c 65 6e 67 74 68 20 2d 20 31 3b 20 73 2b 2b 29 20 66 6f 72 20 28 76 61 72 20 61 20 3d 20 73 20 2b 20 31 3b 20 61 20 3c 20 65 2e 6c 65 6e 67 74 68 3b 20 61 2b 2b 29 20 69 66 20 28 65 5b 73 5d 2e 6b 65 79 20 3d 3d 3d 20 65 5b 61 5d 2e 6b 65 79 20 26 26 20 65 5b 73 5d 2e 70 6c 61 63 65 6d 65 6e 74 20 3d 3d 3d 20 65 5b 61 5d 2e 70 6c 61 63 65 6d 65 6e 74 29 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 44 75 70 6c 69 63 61 74 65 64 20 65 6c 65 6d 65 6e 74 20 28 22 20 2b 20 65 5b 73 5d 2e 6b 65 79 20 2b 20 22 29 22 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a Data Ascii: e = n.elements; for (var s = 0; s < e.length - 1; s++) for (var a = s + 1; a < e.length; a++) if (e[s].key === e[a].key && e[s].placement === e[a].placement) throw new TypeError("Duplicated element (" + e[s].key + ")"); } }
2025-01-02 11:16:30 UTC	16384	IN	Data Raw: 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 0a 20 20 20 20 76 20 3d 20 64 20 26 26 20 64 28 64 28 76 61 6c 75 65 73 28 5b 5d 29 29 29 3b 0a 20 20 76 20 26 26 20 76 20 21 3d 3d 20 72 20 26 26 20 6e 2e 63 61 6c 6c 28 76 2c 20 61 29 20 26 26 20 28 70 20 3d 20 76 29 3b 0a 20 20 76 61 72 20 67 20 3d 20 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 50 72 6f 74 6f 74 79 70 65 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 47 65 6e 65 72 61 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 70 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 64 65 66 69 6e 65 49 74 65 72 61 74 6f 72 4d 65 74 68 6f 64 73 28 74 29 20 7b 0a 20 20 20 20 5b 22 6e 65 78 74 22 2c 20 22 74 68 72 6f 77 22 2c 20 22 72 65 74 75 72 6e 22 5d 2e 66 6f 72 45 61 63 Data Ascii: getPrototypeOf, v = d && d(d(values([]))); v && v !== r && n.call(v, a) && (p = v); var g = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(p); function defineIteratorMethods(t) { ["next", "throw", "return"].forEac
2025-01-02 11:16:30 UTC	16384	IN	Data Raw: 5f 77 72 61 70 4e 61 74 69 76 65 53 75 70 65 72 28 74 29 20 7b 0a 20 20 76 61 72 20 72 20 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 4d 61 70 20 3f 20 6e 65 77 20 4d 61 70 28 29 20 3a 20 76 6f 69 64 20 30 3b 0a 20 20 72 65 74 75 72 6e 20 5f 77 72 61 70 4e 61 74 69 76 65 53 75 70 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 69 66 20 28 6e 75 6c 6c 20 3d 3d 3d 20 74 20 7c 7c 20 21 5f 69 73 4e 61 74 69 76 65 46 75 6e 63 74 69 6f 6e 28 74 29 29 20 72 65 74 75 72 6e 20 74 3b 0a 20 20 20 20 69 66 20 28 22 66 75 6e 63 74 69 6f 6e 22 20 21 3d 20 74 79 70 65 6f 66 20 74 29 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 Data Ascii: _wrapNativeSuper(t) { var r = "function" == typeof Map ? new Map() : void 0; return _wrapNativeSuper = function (t) { if (null === t \|\| !_isNativeFunction(t)) return t; if ("function" != typeof t) throw new TypeError("Super expression must eit
2025-01-02 11:16:30 UTC	16384	IN	Data Raw: 7c 7c 20 61 70 70 6c 79 44 65 63 73 32 32 30 33 46 61 63 74 6f 72 79 28 29 29 28 65 2c 20 74 2c 20 72 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 61 70 70 6c 79 44 65 63 73 32 32 30 33 52 46 61 63 74 6f 72 79 28 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 41 64 64 49 6e 69 74 69 61 6c 69 7a 65 72 4d 65 74 68 6f 64 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 72 29 20 7b 0a 20 20 20 20 20 20 21 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 2e 76 29 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 74 74 65 6d 70 74 65 64 20 74 6f 20 63 61 6c 6c 20 61 64 64 49 6e 69 74 69 61 6c 69 7a 65 72 20 61 66 74 65 72 20 64 65 63 6f 72 61 74 69 6f 6e 20 77 61 73 20 Data Ascii: \|\| applyDecs2203Factory())(e, t, r);}function applyDecs2203RFactory() { function createAddInitializerMethod(e, t) { return function (r) { !function (e, t) { if (e.v) throw Error("attempted to call addInitializer after decoration was
2025-01-02 11:16:30 UTC	16384	IN	Data Raw: 28 32 20 3d 3d 3d 20 6f 20 3f 20 77 5b 41 5d 20 3a 20 69 2e 63 61 6c 6c 2e 62 69 6e 64 28 77 5b 41 5d 29 29 20 3a 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 20 6e 2c 20 77 29 29 2c 20 50 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 20 53 79 6d 62 6f 6c 2e 6d 65 74 61 64 61 74 61 20 7c 7c 20 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 53 79 6d 62 6f 6c 2e 6d 65 74 61 64 61 74 61 22 29 2c 20 7b 0a 20 20 20 20 20 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 20 21 30 2c 0a 20 20 20 20 20 20 65 6e 75 6d 65 72 61 62 6c 65 3a 20 21 30 2c 0a 20 20 20 20 20 20 76 61 6c 75 65 3a 20 74 0a 20 20 20 20 7d 29 Data Ascii: (2 === o ? w[A] : i.call.bind(w[A])) : Object.defineProperty(e, n, w)), P; } function u(e, t) { return Object.defineProperty(e, Symbol.metadata \|\| Symbol.for("Symbol.metadata"), { configurable: !0, enumerable: !0, value: t })
2025-01-02 11:16:30 UTC	4237	IN	Data Raw: 3a 20 5f 45 56 45 4e 54 5f 53 52 43 2e 5f 2c 0a 20 20 20 20 20 20 20 20 65 76 74 5f 61 63 74 69 6f 6e 3a 20 22 6f 70 65 6e 5f 6c 69 6e 6b 22 2c 0a 20 20 20 20 20 20 20 20 67 75 69 64 3a 20 74 68 69 73 2e 67 75 69 64 2c 0a 20 20 20 20 20 20 20 20 76 65 72 73 69 6f 6e 3a 20 74 68 69 73 2e 76 65 72 73 69 6f 6e 2c 0a 20 20 20 20 20 20 20 20 6c 69 6e 6b 3a 20 6c 69 6e 6b 0a 20 20 20 20 20 20 7d 5d 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 2c 20 7b 0a 20 20 20 20 6b 65 79 3a 20 22 68 69 64 65 4d 65 6e 75 53 74 6f 72 65 22 2c 0a 20 20 20 20 76 61 6c 75 65 3a 20 66 75 6e 63 74 69 6f 6e 20 68 69 64 65 4d 65 6e 75 53 74 6f 72 65 28 29 20 7b 0a 20 20 20 20 20 20 74 68 69 73 2e 68 69 64 65 28 29 3b 0a 20 20 20 20 20 20 5f 73 75 70 65 72 50 72 6f 70 47 65 74 28 41 70 70 4d Data Ascii: : _EVENT_SRC._, evt_action: "open_link", guid: this.guid, version: this.version, link: link }]); } }, { key: "hideMenuStore", value: function hideMenuStore() { this.hide(); _superPropGet(AppM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.17	49824	104.248.126.225	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:30 UTC	610	OUT	GET /src/app/appSearchMenu.js HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pcapp.store/search-menu/?a=getTemplate&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&p[tmplType]=search&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: finishInstallInApp=done; _fcid=1735816589292045
2025-01-02 11:16:30 UTC	364	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:30 GMT Content-Type: application/javascript Content-Length: 98483 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:30 UTC	16020	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 4f 76 65 72 6c 6f 61 64 59 69 65 6c 64 28 65 2c 20 64 29 20 7b 0a 20 20 74 68 69 73 2e 76 20 3d 20 65 2c 20 74 68 69 73 2e 6b 20 3d 20 64 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 61 70 70 6c 79 44 65 63 6f 72 61 74 65 64 44 65 73 63 72 69 70 74 6f 72 28 69 2c 20 65 2c 20 72 2c 20 6e 2c 20 6c 29 20 7b 0a 20 20 76 61 72 20 61 20 3d 20 7b 7d 3b 0a 20 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 69 29 20 7b 0a 20 20 20 20 61 5b 69 5d 20 3d 20 6e 5b 69 5d 3b 0a 20 20 7d 29 2c 20 61 2e 65 6e 75 6d 65 72 61 62 6c 65 20 3d 20 21 21 61 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 20 61 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 3d 20 21 21 61 2e 63 6f 6e 66 69 67 75 Data Ascii: function _OverloadYield(e, d) { this.v = e, this.k = d;}function _applyDecoratedDescriptor(i, e, r, n, l) { var a = {}; return Object.keys(n).forEach(function (i) { a[i] = n[i]; }), a.enumerable = !!a.enumerable, a.configurable = !!a.configu
2025-01-02 11:16:30 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 65 20 3d 20 6e 2e 65 6c 65 6d 65 6e 74 73 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 73 20 3d 20 30 3b 20 73 20 3c 20 65 2e 6c 65 6e 67 74 68 20 2d 20 31 3b 20 73 2b 2b 29 20 66 6f 72 20 28 76 61 72 20 61 20 3d 20 73 20 2b 20 31 3b 20 61 20 3c 20 65 2e 6c 65 6e 67 74 68 3b 20 61 2b 2b 29 20 69 66 20 28 65 5b 73 5d 2e 6b 65 79 20 3d 3d 3d 20 65 5b 61 5d 2e 6b 65 79 20 26 26 20 65 5b 73 5d 2e 70 6c 61 63 65 6d 65 6e 74 20 3d 3d 3d 20 65 5b 61 5d 2e 70 6c 61 63 65 6d 65 6e 74 29 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 44 75 70 6c 69 63 61 74 65 64 20 65 6c 65 6d 65 6e 74 20 28 22 20 2b 20 65 5b 73 5d 2e 6b 65 79 20 2b 20 22 29 22 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 Data Ascii: e = n.elements; for (var s = 0; s < e.length - 1; s++) for (var a = s + 1; a < e.length; a++) if (e[s].key === e[a].key && e[s].placement === e[a].placement) throw new TypeError("Duplicated element (" + e[s].key + ")"); } }
2025-01-02 11:16:30 UTC	16384	IN	Data Raw: 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 0a 20 20 20 20 76 20 3d 20 64 20 26 26 20 64 28 64 28 76 61 6c 75 65 73 28 5b 5d 29 29 29 3b 0a 20 20 76 20 26 26 20 76 20 21 3d 3d 20 72 20 26 26 20 6e 2e 63 61 6c 6c 28 76 2c 20 61 29 20 26 26 20 28 70 20 3d 20 76 29 3b 0a 20 20 76 61 72 20 67 20 3d 20 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 50 72 6f 74 6f 74 79 70 65 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 47 65 6e 65 72 61 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 70 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 64 65 66 69 6e 65 49 74 65 72 61 74 6f 72 4d 65 74 68 6f 64 73 28 74 29 20 7b 0a 20 20 20 20 5b 22 6e 65 78 74 22 2c 20 22 74 68 72 6f 77 22 2c 20 22 72 65 74 75 72 6e 22 5d 2e 66 6f 72 45 61 63 68 Data Ascii: etPrototypeOf, v = d && d(d(values([]))); v && v !== r && n.call(v, a) && (p = v); var g = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(p); function defineIteratorMethods(t) { ["next", "throw", "return"].forEach
2025-01-02 11:16:30 UTC	16384	IN	Data Raw: 77 72 61 70 4e 61 74 69 76 65 53 75 70 65 72 28 74 29 20 7b 0a 20 20 76 61 72 20 72 20 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 4d 61 70 20 3f 20 6e 65 77 20 4d 61 70 28 29 20 3a 20 76 6f 69 64 20 30 3b 0a 20 20 72 65 74 75 72 6e 20 5f 77 72 61 70 4e 61 74 69 76 65 53 75 70 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 69 66 20 28 6e 75 6c 6c 20 3d 3d 3d 20 74 20 7c 7c 20 21 5f 69 73 4e 61 74 69 76 65 46 75 6e 63 74 69 6f 6e 28 74 29 29 20 72 65 74 75 72 6e 20 74 3b 0a 20 20 20 20 69 66 20 28 22 66 75 6e 63 74 69 6f 6e 22 20 21 3d 20 74 79 70 65 6f 66 20 74 29 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 Data Ascii: wrapNativeSuper(t) { var r = "function" == typeof Map ? new Map() : void 0; return _wrapNativeSuper = function (t) { if (null === t \|\| !_isNativeFunction(t)) return t; if ("function" != typeof t) throw new TypeError("Super expression must eith
2025-01-02 11:16:30 UTC	16384	IN	Data Raw: 7c 20 61 70 70 6c 79 44 65 63 73 32 32 30 33 46 61 63 74 6f 72 79 28 29 29 28 65 2c 20 74 2c 20 72 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 61 70 70 6c 79 44 65 63 73 32 32 30 33 52 46 61 63 74 6f 72 79 28 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 41 64 64 49 6e 69 74 69 61 6c 69 7a 65 72 4d 65 74 68 6f 64 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 72 29 20 7b 0a 20 20 20 20 20 20 21 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 2e 76 29 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 74 74 65 6d 70 74 65 64 20 74 6f 20 63 61 6c 6c 20 61 64 64 49 6e 69 74 69 61 6c 69 7a 65 72 20 61 66 74 65 72 20 64 65 63 6f 72 61 74 69 6f 6e 20 77 61 73 20 66 Data Ascii: \| applyDecs2203Factory())(e, t, r);}function applyDecs2203RFactory() { function createAddInitializerMethod(e, t) { return function (r) { !function (e, t) { if (e.v) throw Error("attempted to call addInitializer after decoration was f
2025-01-02 11:16:30 UTC	16384	IN	Data Raw: 32 20 3d 3d 3d 20 6f 20 3f 20 77 5b 41 5d 20 3a 20 69 2e 63 61 6c 6c 2e 62 69 6e 64 28 77 5b 41 5d 29 29 20 3a 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 20 6e 2c 20 77 29 29 2c 20 50 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 20 53 79 6d 62 6f 6c 2e 6d 65 74 61 64 61 74 61 20 7c 7c 20 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 53 79 6d 62 6f 6c 2e 6d 65 74 61 64 61 74 61 22 29 2c 20 7b 0a 20 20 20 20 20 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 20 21 30 2c 0a 20 20 20 20 20 20 65 6e 75 6d 65 72 61 62 6c 65 3a 20 21 30 2c 0a 20 20 20 20 20 20 76 61 6c 75 65 3a 20 74 0a 20 20 20 20 7d 29 3b Data Ascii: 2 === o ? w[A] : i.call.bind(w[A])) : Object.defineProperty(e, n, w)), P; } function u(e, t) { return Object.defineProperty(e, Symbol.metadata \|\| Symbol.for("Symbol.metadata"), { configurable: !0, enumerable: !0, value: t });
2025-01-02 11:16:30 UTC	543	IN	Data Raw: 22 2e 63 6f 6e 63 61 74 28 63 6f 6c 6f 72 69 7a 61 74 69 6f 6e 43 6f 6c 6f 72 29 3b 20 2f 2f 20 69 66 20 75 73 65 72 20 73 65 6c 65 63 74 65 64 20 73 70 65 63 69 61 6c 20 73 79 73 74 65 6d 20 63 6f 6c 6f 72 2c 20 73 65 74 20 69 74 0a 20 20 7d 0a 20 20 69 66 20 28 65 6e 61 62 6c 65 54 72 61 6e 73 70 61 72 65 6e 63 79 20 26 26 20 6c 69 67 68 74 54 68 65 6d 65 29 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 20 3d 20 22 22 2e 63 6f 6e 63 61 74 28 63 6f 6c 6f 72 2c 20 22 64 39 22 29 3b 20 2f 2f 20 64 39 20 3d 20 20 30 2e 38 35 20 6f 70 61 63 69 74 79 20 69 6e 20 72 67 62 61 0a 20 20 7d 20 65 6c 73 65 20 69 66 20 28 65 6e 61 62 6c 65 54 72 61 6e 73 70 61 72 65 6e 63 79 20 26 26 20 21 6c 69 67 68 74 54 68 65 6d 65 29 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 20 3d 20 22 22 2e Data Ascii: ".concat(colorizationColor); // if user selected special system color, set it } if (enableTransparency && lightTheme) { color = "".concat(color, "d9"); // d9 = 0.85 opacity in rgba } else if (enableTransparency && !lightTheme) { color = "".

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.17	49826	104.248.126.225	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:30 UTC	616	OUT	GET /images/front_img/logo/logo-light.svg HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: finishInstallInApp=done
2025-01-02 11:16:30 UTC	300	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 02 Jan 2025 11:16:30 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://repository.pcapp.store/pcapp/images/front_img/logo/logo-light.svg Strict-Transport-Security: max-age=31536000; includeSubDomains
2025-01-02 11:16:30 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.17	49827	104.248.126.225	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:30 UTC	849	OUT	GET /pixel.gif?evt_src=web&evt_action=new_fcid&ncrd=1735816589405&user-agent=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/117.0.0.0%20Safari/537.36%20Edg/117.0.2045.47%20PcApp/1.0.0.2001g HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: finishInstallInApp=done; _fcid=1735816589292045
2025-01-02 11:16:30 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:30 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.17	49825	169.150.255.184	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:30 UTC	521	OUT	GET /pcapp/images/3rdparty/offer_1515_win10.png HTTP/1.1 Host: repcdn.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2025-01-02 11:16:30 UTC	637	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:30 GMT Content-Type: application/octet-stream Content-Length: 44578 Connection: close x-amz-id-2: 1h7sOvvcyg3vwvyvvhURQixLf4zcmV/gXRB/F+HyaEYFWv2zXoIXVR1sX+bx0Ju8qLqODc4fJg0= x-amz-request-id: EGD2E2761A8GZCKX Last-Modified: Tue, 25 Jul 2023 13:30:53 GMT ETag: "e0855f4d7f014155f14b1b189cba7b5f" x-amz-server-side-encryption: AES256 x-amz-version-id: SzzS16XmEUTiwDpzzd7usPAzvOHjwybx X-77-NZT: EgwBqZb/tgHX9/QMAAwBnJIhHwH3sFMEAA X-77-NZT-Ray: 15b3c7110fb947478e7576670ef3cd24 X-77-Cache: HIT X-77-Age: 849143 Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:30 UTC	15747	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 d6 00 00 01 22 08 06 00 00 00 44 19 f3 55 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 ad b7 49 44 41 54 78 01 ed 7d 09 80 5c 45 b5 f6 a9 9e 99 cc 64 df 80 40 c2 0e 09 88 6c 4a e2 06 02 12 5c 51 84 e0 f6 50 d9 dc 9f b2 fb 14 f5 81 3f f8 de 13 9f 0f 10 d0 a7 cf 85 4d 05 15 12 59 45 34 41 96 a0 40 c2 be 9a b0 06 48 48 20 fb 36 59 a6 eb af af 6e 9d ba a7 aa 6f f7 f4 cc f4 4c 26 a1 3e b8 e9 ee 7b eb 56 d5 ad ee b9 df fd ce 39 75 4a 91 81 d6 7a 67 f3 72 b9 d9 f6 37 db 08 4a 48 48 48 48 48 48 e8 0a fe 68 b6 33 94 52 2f 28 47 aa 0f 51 22 d4 84 84 84 84 84 84 9e 60 a9 d9 de 0a 62 05 cb 1e f5 d8 95 Data Ascii: PNGIHDR"DUpHYssRGBgAMAaIDATx}\Ed@lJ\QP?MYE4A@HH 6YnoL&>{V9uJzgr7JHHHHHHh3R/(GQ"`b
2025-01-02 11:16:30 UTC	16384	IN	Data Raw: 03 de 09 b2 9d 68 89 36 9e ce a3 b5 20 cd d8 77 cb 9f 74 44 a0 7c cd 45 e6 65 57 0f fa db 3c 60 00 35 b7 34 d3 83 57 5f 4d 7f 3d e1 04 da a4 10 c4 da ab 99 97 b0 ee ea 3e c7 1d 67 df 63 31 f3 d9 97 5c d2 90 b2 09 5b 26 b0 3e ef 98 fd b2 28 45 44 0c ce eb 24 05 5a eb 88 11 34 e9 94 53 aa 1e 5f fe e2 8b b4 fc 85 17 3a ad 47 d6 37 c1 f4 61 c7 43 0e b1 ef 81 15 e6 fc 17 cd f9 73 6f b8 81 de 68 c0 38 60 03 ea f9 3e 12 24 9c cf b0 90 54 1d ad 28 a7 d4 88 42 22 a5 2a ef 75 65 31 5f 55 60 1b 76 fb d9 df ab 49 d8 8f b3 02 39 ed e5 0c 0d ef 74 a6 58 c5 5a ac 01 99 2b 5a 8f 28 df 8e 76 5a be a1 dd ee 6a 5d b3 94 06 5e fb 22 8d bc fe 66 43 b4 cd 34 c8 28 da d6 77 4d a2 b6 0f 4c 36 26 e4 09 c6 4f bb a7 23 c1 52 60 9a 8f 2f 31 ef 4a ae f2 b5 78 28 b0 41 60 8e b0 11 99 Data Ascii: h6 wtD\|EeW<`54W_M=>gc1\[&>(ED$Z4S_:G7aCsoh8`>$T(B"*ue1_U`vI9tXZ+Z(vZj]^"fC4(wML6&O#R`/1Jx(A`
2025-01-02 11:16:30 UTC	12447	IN	Data Raw: 29 cb 0c 4b dc 86 ca cd 11 d8 df 24 7a bf c9 89 15 7f 6c d2 ac 0a 15 08 73 51 0c 6b ba 35 7f 90 c3 a2 9b 6c d1 1f 7b 4c d6 8d 40 bd 37 6e a8 19 f8 63 e1 b7 c2 cd 0c 24 1f 07 6f 31 a6 4c 9b 66 6f 74 b8 51 f7 65 64 34 08 00 64 0e 22 c1 03 c8 30 73 b3 6b 6b 80 b9 16 f5 e2 7a f0 1d 41 a1 0f eb a9 7f d5 fc 60 f1 30 55 73 ea 87 f9 c1 83 d4 59 d1 75 0b ce 72 01 b3 35 a6 7b e0 7b 83 99 f5 45 f3 2a a3 6a 31 56 f0 49 16 f9 e4 61 46 c7 03 46 67 a8 77 ec 1b ae e0 40 cc e6 b7 08 c5 cd 0a d1 3e 08 98 fd b3 6a 3c f8 35 aa 6d b4 01 97 4d 3d 7f 17 9b 0d f2 fc 84 01 40 b0 7c 24 7b 55 f9 02 e0 4e d9 da 69 2a 0d 25 54 df 7a de 37 cb 4a 99 82 5e 46 6b 6d c4 f0 f0 3e 0a 6a ea 29 7c 3e 60 7e ef 08 95 09 36 7b a6 09 03 86 e2 74 83 3a 32 0b 17 29 52 9b e4 01 e6 5c 72 c4 5a 60 4a Data Ascii: )K$zlsQk5l{L@7nc$o1LfotQed4d"0skkzA`0UsYur5{{Ej1VIaFFgw@>j<5mM=@\|${UNi%Tz7J^Fkm>j)\|>`~6{t:2)R\rZ`J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.17	49828	207.246.91.177	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:30 UTC	273	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_product&evt_action=webview_error&reason=failed_to_create_thread_hook&eng_time=1735822747987&nocache=6362671 HTTP/1.1 Connection: Keep-Alive User-Agent: WinHTTP 1.0 Host: pcapp.store
2025-01-02 11:16:30 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:30 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.17	49831	104.248.126.225	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:30 UTC	606	OUT	GET /src/app/appWindow.js HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pcapp.store/search-menu/?a=getTemplate&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&p[tmplType]=search&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: finishInstallInApp=done; _fcid=1735816589292045
2025-01-02 11:16:31 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:30 GMT Content-Type: application/javascript Content-Length: 183086 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:31 UTC	16019	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 4f 76 65 72 6c 6f 61 64 59 69 65 6c 64 28 65 2c 20 64 29 20 7b 0a 20 20 74 68 69 73 2e 76 20 3d 20 65 2c 20 74 68 69 73 2e 6b 20 3d 20 64 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 61 70 70 6c 79 44 65 63 6f 72 61 74 65 64 44 65 73 63 72 69 70 74 6f 72 28 69 2c 20 65 2c 20 72 2c 20 6e 2c 20 6c 29 20 7b 0a 20 20 76 61 72 20 61 20 3d 20 7b 7d 3b 0a 20 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 69 29 20 7b 0a 20 20 20 20 61 5b 69 5d 20 3d 20 6e 5b 69 5d 3b 0a 20 20 7d 29 2c 20 61 2e 65 6e 75 6d 65 72 61 62 6c 65 20 3d 20 21 21 61 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 20 61 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 3d 20 21 21 61 2e 63 6f 6e 66 69 67 75 Data Ascii: function _OverloadYield(e, d) { this.v = e, this.k = d;}function _applyDecoratedDescriptor(i, e, r, n, l) { var a = {}; return Object.keys(n).forEach(function (i) { a[i] = n[i]; }), a.enumerable = !!a.enumerable, a.configurable = !!a.configu
2025-01-02 11:16:31 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 65 20 3d 20 6e 2e 65 6c 65 6d 65 6e 74 73 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 73 20 3d 20 30 3b 20 73 20 3c 20 65 2e 6c 65 6e 67 74 68 20 2d 20 31 3b 20 73 2b 2b 29 20 66 6f 72 20 28 76 61 72 20 61 20 3d 20 73 20 2b 20 31 3b 20 61 20 3c 20 65 2e 6c 65 6e 67 74 68 3b 20 61 2b 2b 29 20 69 66 20 28 65 5b 73 5d 2e 6b 65 79 20 3d 3d 3d 20 65 5b 61 5d 2e 6b 65 79 20 26 26 20 65 5b 73 5d 2e 70 6c 61 63 65 6d 65 6e 74 20 3d 3d 3d 20 65 5b 61 5d 2e 70 6c 61 63 65 6d 65 6e 74 29 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 44 75 70 6c 69 63 61 74 65 64 20 65 6c 65 6d 65 6e 74 20 28 22 20 2b 20 65 5b 73 5d 2e 6b 65 79 20 2b 20 22 29 22 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a Data Ascii: e = n.elements; for (var s = 0; s < e.length - 1; s++) for (var a = s + 1; a < e.length; a++) if (e[s].key === e[a].key && e[s].placement === e[a].placement) throw new TypeError("Duplicated element (" + e[s].key + ")"); } }
2025-01-02 11:16:31 UTC	16384	IN	Data Raw: 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 0a 20 20 20 20 76 20 3d 20 64 20 26 26 20 64 28 64 28 76 61 6c 75 65 73 28 5b 5d 29 29 29 3b 0a 20 20 76 20 26 26 20 76 20 21 3d 3d 20 72 20 26 26 20 6e 2e 63 61 6c 6c 28 76 2c 20 61 29 20 26 26 20 28 70 20 3d 20 76 29 3b 0a 20 20 76 61 72 20 67 20 3d 20 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 50 72 6f 74 6f 74 79 70 65 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 47 65 6e 65 72 61 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 70 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 64 65 66 69 6e 65 49 74 65 72 61 74 6f 72 4d 65 74 68 6f 64 73 28 74 29 20 7b 0a 20 20 20 20 5b 22 6e 65 78 74 22 2c 20 22 74 68 72 6f 77 22 2c 20 22 72 65 74 75 72 6e 22 5d 2e 66 6f 72 45 61 63 Data Ascii: getPrototypeOf, v = d && d(d(values([]))); v && v !== r && n.call(v, a) && (p = v); var g = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(p); function defineIteratorMethods(t) { ["next", "throw", "return"].forEac
2025-01-02 11:16:31 UTC	16384	IN	Data Raw: 5f 77 72 61 70 4e 61 74 69 76 65 53 75 70 65 72 28 74 29 20 7b 0a 20 20 76 61 72 20 72 20 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 4d 61 70 20 3f 20 6e 65 77 20 4d 61 70 28 29 20 3a 20 76 6f 69 64 20 30 3b 0a 20 20 72 65 74 75 72 6e 20 5f 77 72 61 70 4e 61 74 69 76 65 53 75 70 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 69 66 20 28 6e 75 6c 6c 20 3d 3d 3d 20 74 20 7c 7c 20 21 5f 69 73 4e 61 74 69 76 65 46 75 6e 63 74 69 6f 6e 28 74 29 29 20 72 65 74 75 72 6e 20 74 3b 0a 20 20 20 20 69 66 20 28 22 66 75 6e 63 74 69 6f 6e 22 20 21 3d 20 74 79 70 65 6f 66 20 74 29 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 Data Ascii: _wrapNativeSuper(t) { var r = "function" == typeof Map ? new Map() : void 0; return _wrapNativeSuper = function (t) { if (null === t \|\| !_isNativeFunction(t)) return t; if ("function" != typeof t) throw new TypeError("Super expression must eit
2025-01-02 11:16:31 UTC	16384	IN	Data Raw: 7c 7c 20 61 70 70 6c 79 44 65 63 73 32 32 30 33 46 61 63 74 6f 72 79 28 29 29 28 65 2c 20 74 2c 20 72 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 61 70 70 6c 79 44 65 63 73 32 32 30 33 52 46 61 63 74 6f 72 79 28 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 41 64 64 49 6e 69 74 69 61 6c 69 7a 65 72 4d 65 74 68 6f 64 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 72 29 20 7b 0a 20 20 20 20 20 20 21 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 2e 76 29 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 74 74 65 6d 70 74 65 64 20 74 6f 20 63 61 6c 6c 20 61 64 64 49 6e 69 74 69 61 6c 69 7a 65 72 20 61 66 74 65 72 20 64 65 63 6f 72 61 74 69 6f 6e 20 77 61 73 20 Data Ascii: \|\| applyDecs2203Factory())(e, t, r);}function applyDecs2203RFactory() { function createAddInitializerMethod(e, t) { return function (r) { !function (e, t) { if (e.v) throw Error("attempted to call addInitializer after decoration was
2025-01-02 11:16:31 UTC	16384	IN	Data Raw: 28 32 20 3d 3d 3d 20 6f 20 3f 20 77 5b 41 5d 20 3a 20 69 2e 63 61 6c 6c 2e 62 69 6e 64 28 77 5b 41 5d 29 29 20 3a 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 20 6e 2c 20 77 29 29 2c 20 50 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 20 53 79 6d 62 6f 6c 2e 6d 65 74 61 64 61 74 61 20 7c 7c 20 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 53 79 6d 62 6f 6c 2e 6d 65 74 61 64 61 74 61 22 29 2c 20 7b 0a 20 20 20 20 20 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 20 21 30 2c 0a 20 20 20 20 20 20 65 6e 75 6d 65 72 61 62 6c 65 3a 20 21 30 2c 0a 20 20 20 20 20 20 76 61 6c 75 65 3a 20 74 0a 20 20 20 20 7d 29 Data Ascii: (2 === o ? w[A] : i.call.bind(w[A])) : Object.defineProperty(e, n, w)), P; } function u(e, t) { return Object.defineProperty(e, Symbol.metadata \|\| Symbol.for("Symbol.metadata"), { configurable: !0, enumerable: !0, value: t })
2025-01-02 11:16:31 UTC	16384	IN	Data Raw: 73 2e 73 61 76 65 53 65 74 74 69 6e 67 73 2e 62 69 6e 64 28 74 68 69 73 29 3b 0a 20 20 20 20 74 68 69 73 2e 6f 70 65 6e 4f 66 66 65 72 42 79 55 72 6c 20 3d 20 74 68 69 73 2e 6f 70 65 6e 4f 66 66 65 72 42 79 55 72 6c 2e 62 69 6e 64 28 74 68 69 73 29 3b 0a 20 20 20 20 74 68 69 73 2e 6f 70 65 6e 4f 66 66 65 72 42 79 4f 69 64 20 3d 20 74 68 69 73 2e 6f 70 65 6e 4f 66 66 65 72 42 79 4f 69 64 2e 62 69 6e 64 28 74 68 69 73 29 3b 0a 20 20 20 20 74 68 69 73 2e 73 74 61 72 74 44 72 61 67 20 3d 20 74 68 69 73 2e 73 74 61 72 74 44 72 61 67 2e 62 69 6e 64 28 74 68 69 73 29 3b 0a 20 20 20 20 74 68 69 73 2e 72 65 6c 6f 61 64 41 70 70 20 3d 20 74 68 69 73 2e 72 65 6c 6f 61 64 41 70 70 2e 62 69 6e 64 28 74 68 69 73 29 3b 0a 20 20 20 20 74 68 69 73 2e 70 61 67 65 4c 6f 61 Data Ascii: s.saveSettings.bind(this); this.openOfferByUrl = this.openOfferByUrl.bind(this); this.openOfferByOid = this.openOfferByOid.bind(this); this.startDrag = this.startDrag.bind(this); this.reloadApp = this.reloadApp.bind(this); this.pageLoa
2025-01-02 11:16:31 UTC	16384	IN	Data Raw: 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 50 61 72 61 6d 65 74 65 72 20 5c 22 77 69 6e 64 6f 77 4e 61 6d 65 5c 22 20 66 6f 72 20 41 70 70 57 69 6e 64 6f 77 2e 6d 6f 76 65 54 6f 20 73 68 6f 75 6c 64 20 68 61 76 65 20 74 79 70 65 20 73 74 72 69 6e 67 20 69 6e 73 74 65 61 64 20 6f 66 20 22 2e 63 6f 6e 63 61 74 28 5f 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 4e 61 6d 65 29 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 78 20 21 3d 3d 20 22 6e 75 6d 62 65 72 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 50 61 72 61 6d 65 74 65 72 20 5c 22 78 5c 22 20 66 6f 72 20 41 70 70 57 69 6e 64 6f 77 2e 6d 6f 76 65 54 6f 20 Data Ascii: ) { throw new Error("Parameter \"windowName\" for AppWindow.moveTo should have type string instead of ".concat(_typeof(windowName))); } if (typeof x !== "number") { throw new Error("Parameter \"x\" for AppWindow.moveTo
2025-01-02 11:16:31 UTC	16384	IN	Data Raw: 33 20 26 26 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 3a 20 22 22 3b 0a 20 20 20 20 20 20 76 61 72 20 6f 69 64 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3e 20 34 20 26 26 20 61 72 67 75 6d 65 6e 74 73 5b 34 5d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 34 5d 20 3a 20 30 3b 0a 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 75 72 6c 20 21 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 50 61 72 61 6d 65 74 65 72 20 5c 22 75 72 6c 5c 22 20 66 6f 72 20 41 70 70 57 69 6e 64 6f 77 2e 64 6f 77 6e 6c Data Ascii: 3 && arguments[3] !== undefined ? arguments[3] : ""; var oid = arguments.length > 4 && arguments[4] !== undefined ? arguments[4] : 0; try { if (typeof url !== "string") { throw new Error("Parameter \"url\" for AppWindow.downl
2025-01-02 11:16:31 UTC	16384	IN	Data Raw: 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 31 5d 20 3a 20 74 72 75 65 3b 0a 20 20 20 20 20 20 76 61 72 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 49 63 6f 6e 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3e 20 32 20 26 26 20 61 72 67 75 6d 65 6e 74 73 5b 32 5d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 32 5d 20 3a 20 74 72 75 65 3b 0a 20 20 20 20 20 20 76 61 72 20 64 69 73 70 6c 61 79 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3e 20 33 20 26 26 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 3a 20 74 72 75 65 3b 0a 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: !== undefined ? arguments[1] : true; var notificationIcon = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : true; var display = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : true; try {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.17	49829	18.173.205.91	443	2936	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:30 UTC	701	OUT	GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":10,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735842164&nocache=7546 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-02 11:16:31 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 02 Jan 2025 11:16:19 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 506bffda4b1949c4425629ce0bdce052.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: -qWQctkqBOanW9FBy55UGsgE8HQOauU28CmOOyFt5dabTKiBkYP8pA== Age: 13
2025-01-02 11:16:31 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.17	49832	212.102.56.178	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:31 UTC	557	OUT	GET /pcapp/images/front_img/logo/logo-light.svg HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045
2025-01-02 11:16:31 UTC	648	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:31 GMT Content-Type: image/svg+xml Content-Length: 3133 Connection: close x-amz-id-2: N19JQuj35icMKCmHdL8WHz0XfwjZOROK4D5aR3dfFkGVLuEgKZ6FltszBFHpF1Q19bJOMFykYNA= x-amz-request-id: DZX5E76QX6N1JXKW Last-Modified: Fri, 25 Oct 2024 10:03:39 GMT ETag: "b99ea1348ed2a5b6f3a5a651b4750bd4" x-amz-server-side-encryption: AES256 x-amz-version-id: SMRUSHzcQUc1AQdQoZMJlRJHP.H4FUVX X-77-NZT: EgwB1GY4sQH3GpIOAAwBJRPCMQG3cXoOAA X-77-NZT-Ray: 1cb09c0e77aa8ae18f757667e2f61810 X-77-Cache: HIT X-77-Age: 954906 Vary: Accept-Encoding Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:31 UTC	3133	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 39 30 22 20 68 65 69 67 68 74 3d 22 39 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 30 20 39 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 30 20 33 32 43 30 20 32 30 2e 37 39 38 39 20 30 20 31 35 2e 31 39 38 34 20 32 2e 31 37 39 38 37 20 31 30 2e 39 32 30 32 43 34 2e 30 39 37 33 34 20 37 2e 31 35 36 39 35 20 37 2e 31 35 36 39 35 20 34 2e 30 39 37 33 34 20 31 30 2e 39 32 30 32 20 32 2e 31 37 39 38 37 43 31 35 2e 31 39 38 34 20 30 20 32 30 2e 37 39 39 20 30 20 33 32 20 30 48 35 38 43 36 39 2e 32 30 31 20 30 20 37 34 2e 38 30 31 36 20 30 20 37 39 2e 30 37 39 38 20 32 2e 31 37 39 38 Data Ascii: <svg width="90" height="90" viewBox="0 0 90 90" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M0 32C0 20.7989 0 15.1984 2.17987 10.9202C4.09734 7.15695 7.15695 4.09734 10.9202 2.17987C15.1984 0 20.799 0 32 0H58C69.201 0 74.8016 0 79.0798 2.1798

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.17	49833	104.248.126.225	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:31 UTC	676	OUT	GET /images/front_img/appstore-hint/index_1/in_background_auto_update_img.png HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: finishInstallInApp=done; _fcid=1735816589292045
2025-01-02 11:16:31 UTC	336	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 02 Jan 2025 11:16:31 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://repository.pcapp.store/pcapp/images/front_img/appstore-hint/index_1/in_background_auto_update_img.png Strict-Transport-Security: max-age=31536000; includeSubDomains
2025-01-02 11:16:31 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.17	49834	104.248.126.225	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:31 UTC	615	OUT	GET /favicon.ico HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/appstore-hint/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: finishInstallInApp=done; _fcid=1735816589292045
2025-01-02 11:16:31 UTC	307	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:31 GMT Content-Type: image/x-icon Content-Length: 4286 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:31 UTC	4286	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 e3 dc d3 00 e2 dc d2 00 e4 db d4 00 e3 db d1 2d e2 da d1 8a e2 db d2 c9 e3 db d2 e6 e2 da d1 f3 e3 db d2 fd e2 db d2 ff e2 db d2 ff e2 db d2 ff e2 da d2 ff e2 da d2 ff e2 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e2 db d2 ff e3 db d2 ff e2 da d1 ff e2 da d1 ff e2 db d2 ff e2 da d1 fd e3 da d2 f4 e2 da d1 e6 e2 db d1 c9 e2 da d2 89 e2 db d2 2a e0 da d5 00 e3 dc d2 00 e2 dc d2 00 e3 dd d2 00 e1 de d2 02 e3 db d2 58 e3 db d2 d6 e3 db d2 fe e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 fe e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 db d2 ff e3 Data Ascii: ( @ -*X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.17	49838	207.246.91.177	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:31 UTC	334	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_menu_store&evt_action=updated&evt_src=fa_menu_store&evt_action=updated&version=fa.2001g&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&eng_time=1735822751230&nocache=6363578 HTTP/1.1 Connection: Keep-Alive User-Agent: WinHTTP 1.0 Host: pcapp.store
2025-01-02 11:16:31 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:31 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:31 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.17	49835	104.248.126.225	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:31 UTC	907	OUT	GET /pixel.gif?evt_src=fa_menu_store&evt_action=internet_check&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&ncrd=1735816590497&user-agent=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64)%20AppleWebKit/537.36%20(KHTML,%20like%20Gecko)%20Chrome/117.0.0.0%20Safari/537.36%20Edg/117.0.2045.47%20PcApp/1.0.0.2001g HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: finishInstallInApp=done; _fcid=1735816589292045
2025-01-02 11:16:31 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:31 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:31 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.17	49836	169.150.255.184	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:31 UTC	580	OUT	GET /pcapp/images/3rdparty/application/images/apps_73398_66603950c621c.png HTTP/1.1 Host: repcdn.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045
2025-01-02 11:16:31 UTC	638	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:31 GMT Content-Type: application/octet-stream Content-Length: 183507 Connection: close x-amz-id-2: UCkfEZEf5WTcSR6R34UziR9njblbSRTwgMLC28NfgqUIOYw5T1aDvbqOGeqsJYebI4MRXwwMBbI= x-amz-request-id: BJYXHDZ3YQ3M26KD Last-Modified: Wed, 05 Jun 2024 10:09:21 GMT ETag: "2e7d8eb14e6badef25369ef05f04fffc" x-amz-server-side-encryption: AES256 x-amz-version-id: nb40YX_HgdoFek9MfARKhRXP3gOKtipH X-77-NZT: EgwBqZb/tgHXzfkMAAwBJRPCNAG3dYsGAA X-77-NZT-Ray: 15b3c711669632808f7576677141a431 X-77-Cache: HIT X-77-Age: 850381 Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:31 UTC	15746	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 18 08 06 00 00 00 84 15 25 e1 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 02 cc 85 49 44 41 54 78 9c ac fd 79 b4 6d 5b 7e d7 87 7d 7e 73 ce d5 ec 7d ce b9 e7 36 af 6f aa 7b 55 25 95 24 4a 94 64 02 b6 4c 63 90 c1 c8 c4 71 25 c1 18 db 18 77 98 0c 8f 04 db 89 51 48 43 54 19 f1 70 46 0c b6 c7 88 18 e0 90 88 38 96 47 e8 a2 98 11 8c 63 0c 31 36 09 16 46 06 0c 12 92 50 a9 fa e6 dd d7 dd ee dc b3 f7 5e cd 9c 33 7f fc e6 5c 6b ae b5 f7 b9 ef 55 c9 eb 8e 7d cf 6e 56 33 db df f7 d7 ff e4 d7 3f f7 4f 46 89 2c 8e 28 f3 7b 89 fa d9 1a e1 b0 ef e9 ba 01 41 40 80 7c 5d 3e 3f 9e 78 bf fe 0b c4 74 5d db 54 d4 9b 0a 02 88 81 61 f0 1c 76 1d 63 08 d4 95 63 b3 69 10 6b f4 72 1f 38 1c 7a Data Ascii: PNGIHDR%pHYsIDATxym[~}~s}6o{U%$JdLcq%wQHCTpF8Gc16FP^3\kU}nV3?OF,({A@\|]>?xt]Tavccikr8z
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 48 de ce a6 b8 6b 79 ff b9 3d 4b b5 55 c8 52 70 ba 44 01 58 35 04 31 89 ce cd a6 a2 ae dc ec 11 6c 60 38 74 74 7b 2d 58 bf 92 f9 99 05 eb 38 a5 31 8c 11 82 c4 c9 64 35 7b 17 e7 6b b2 a3 9c 3a 9a 65 c6 42 44 18 46 4f 77 ad 79 ba eb b6 9a d4 d1 31 cd 51 77 48 39 9d d7 62 f7 34 ee 2c 9e 35 7f bf 6c 43 19 26 46 54 e1 cc 55 8e 7a 5b 4d 40 1d a2 e6 73 1f bb 11 53 09 cd 99 ae a5 98 3a dd 75 03 fd a1 d7 61 92 d9 a7 67 35 3a f3 37 49 a1 95 29 08 44 c4 44 ea d6 b0 d9 58 9a 3a e2 5c a0 ae 55 4d 5d d7 91 ed 26 70 7e e6 39 df 06 ce 2e 3c 67 db c8 f9 59 e4 ec 3c 52 d7 51 67 30 42 df 5b 1e 5f 19 de 7d d7 f2 d6 db 86 37 df 32 bc fb 9e f0 e4 31 ec 0f c2 38 64 2f fc 65 bb b2 13 70 d3 54 d4 b5 82 6f 14 18 bb 81 dd a1 27 c6 40 d3 d4 b4 9b 66 ba d6 f7 21 81 f0 e9 10 a5 23 09 Data Ascii: Hky=KURpDX51l`8tt{-X81d5{k:eBDFOwy1QwH9b4,5lC&FTUz[M@sS:uag5:7I)DDX:\UM]&p~9.<gY<RQg0B[_}7218d/epTo'@f!#
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: aa fb 0e 6b 0c 4f 04 44 1c be 8f f4 7b e5 92 6c 4a be b0 dc 5f 27 a4 5f 80 54 01 68 ec 46 fa 6e 50 3b 04 1a 9a d1 0f 03 dd ce d0 6c eb 25 67 bc 18 2a 59 dd 7d 06 df 6e d7 27 55 9f 2c 1e bf b4 46 cb e2 93 36 4f a7 a4 2e c1 57 14 7c 35 7e 2e 4e b9 9d f3 a5 a3 d7 fe c7 30 03 83 88 12 b4 6e 3f 68 75 26 ab 2e 8a 6d 5b 61 d0 8a 23 87 dd 40 bb 55 9b 7c 04 0d 6d 32 30 ec 3d 53 51 f1 98 17 35 e4 04 1e 92 12 b6 1b 0b 61 8c bc f9 0d cb bb 6f 37 7c e9 0b 67 b4 db c0 61 6f 18 bc 50 d5 9e 5c b3 54 95 0d 85 43 44 8e e4 d7 15 95 ee af 19 73 40 ed 44 d9 96 a4 e6 80 f9 6a 75 cc 2a 38 df e9 6f 92 3c 44 93 d4 6f 9c e3 9d 6f 3c e6 dd 37 1f f3 e2 ab 77 39 70 40 ce ce 88 31 30 fc fe 1f 61 f7 a7 7e 82 d8 f7 9c fd 96 1f c2 fe af 7e 1f c3 ff e2 7f cd 5b ff de 8f d1 6e 2e 89 43 cf Data Ascii: kOD{lJ_'_ThFnP;l%gY}n'U,F6O.W\|5~.N0n?hu&.m[a#@U\|m20=SQ5ao7\|gaoP\TCDs@Dju8o<Doo<7w9p@10a~~[n.C
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: ae a0 b8 f6 3a f2 33 57 92 9d 38 46 76 f2 0a f2 d3 67 c8 af bd 1a 57 b7 ec bc f6 c7 31 df f0 4d 98 f3 17 98 64 19 ea 3f fe 27 16 1f fd 38 f9 55 67 b1 6d eb e3 03 8d 78 6e 86 ba bf 01 84 13 07 34 14 50 8e 29 1e 7c 88 51 d7 61 ff 27 cd 43 d0 34 00 c9 5c 0f c7 bd 28 0a de f8 c6 37 f2 d3 3f fd 53 dc 72 cb cd 4c 26 93 a4 52 51 6f d7 3d 71 e2 04 87 0f 1f e6 07 7e e0 07 f9 c4 27 3e ce d6 d6 d6 40 c5 ec 9c 8b ea e9 34 d6 b7 6d 3d 10 5b 09 bb ba ee ba eb a8 aa 6a 30 bf b0 0a a6 21 86 d4 ee ed c1 7c ce 7e b5 9f 97 41 50 6b 8d f6 11 03 4a 69 52 d0 bd fc b1 0c cc 4f 6f ac d7 b5 65 7f d3 c9 fa fb b6 2f ed b2 bd b3 cd 81 c3 1b fc af ff ec 55 fc f2 47 ff 19 ff e4 7b be 9e 51 51 f0 f1 dd 87 98 ce 16 51 48 58 f7 64 3b 94 92 fc 11 68 77 00 e2 9e a6 94 95 a4 af ed 93 db 12 Data Ascii: :3W8FvgW1Md?'8Ugmxn4P)\|Qa'C4\(7?SrL&RQo=q~'>@4m=[j0!\|~APkJiROoe/UG{QQQHXd;hw
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: d7 34 cf 79 0e 3c f8 00 b6 15 69 b7 a9 6b 4e 9f 39 c3 c9 93 27 a9 eb c5 50 5a 75 4b 1f 8c 8c 4b 5c 25 4e c0 20 da 1a 3d 37 ad fd 98 e2 82 26 41 c6 56 38 02 51 73 87 6c 57 a6 93 cc 75 d6 39 26 93 11 6f 7d eb 1f f3 37 ff b7 bf c1 ee 7c 9b 5c 17 d4 8b 05 38 29 e4 6e 8d 65 67 7b 97 e7 3c e7 39 8c c7 63 66 b3 85 57 5f 1b 4c db b1 b7 37 65 3c 1a f1 8a 57 bc 82 32 2f 99 cd e7 fd 5c 84 ff a4 6b 68 f8 5d 44 5d d5 77 3b 9c 8e fe 52 ae f7 7f 49 9f 6d 62 ff 5d 0f 1c 6e e5 e5 04 a6 6f 6d 89 c3 64 8d 06 b5 37 f4 74 2c 86 25 b9 65 c6 61 75 9d cb eb ec e0 9c 75 fd fe 0a e7 02 59 b6 b8 d5 67 c4 e6 bb 95 77 66 59 c6 e6 d6 06 af ff a1 3f e0 f7 df f2 41 4e 1f 38 24 43 17 da 3f 50 b7 89 f3 a6 53 2a 68 63 85 91 0c 7d 8b 68 2f 19 cf 74 8e 84 ef 20 30 1d 48 9f 90 2a 99 9f ae 35 Data Ascii: 4y<ikN9'PZuKK\%N =7&AV8QslWu9&o}7\|\8)neg{<9cfW_L7e<W2/\kh]D]w;RImb]nomd7t,%eauuYgwfY?AN8$C?PShc}h/t 0H5
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 08 18 9d e8 25 65 2c 28 25 61 e7 ba 03 25 60 30 53 48 5e 2c 04 09 47 d9 a6 93 d8 5f af f3 d2 66 8a d7 52 44 8f 66 ac 8c 11 51 19 17 68 86 e2 6b 9f b9 c6 5b de f7 b8 78 4d 36 a2 7f 09 23 1d 36 e4 3a 93 b0 d8 dc 2b 49 21 68 ab 23 12 34 e9 a7 c1 96 bc 79 fb 16 ef 7b e7 b7 f0 1d 9f f8 6e 3e f8 b9 7f c7 c5 e2 75 d2 a3 d9 f7 27 27 f9 c2 5a 29 ee 34 37 b9 32 bf ca ef 78 ef b7 f3 ab 1f fe 20 00 77 6e df a1 6d ba 58 77 eb 50 21 96 59 68 f1 56 04 79 a9 e8 99 97 42 00 ed fb 14 43 ef ba 8c 3d b4 10 10 40 4f 52 78 4a 04 7d 40 3c df 48 51 d9 73 44 c7 ef a4 1e bd a1 47 46 07 6c 2b 5e bf 6b 2d 4d dd 46 d0 53 88 06 95 ef e7 31 a1 90 e9 c3 ce 42 f7 38 ee bc 35 a8 27 8f ed bd 6d 1f 3d e3 71 fd b2 8f b9 ba a8 e8 93 f2 75 09 b8 95 c6 1b 11 dd 28 bc b7 b8 ce 73 61 ff 22 ce 7a Data Ascii: %e,(%a%`0SH^,G_fRDfQhk[xM6#6:+I!h#4y{n>u''Z)472x wnmXwP!YhVyBC=@ORxJ}@<HQsDGFl+^k-MFS1B85'm=qu(sa"z
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: be d1 6b 91 09 2b 28 85 8d d1 81 ba b1 12 7e 3e 03 0f be b2 a4 3d ea 98 17 8b de 6b ed 8d d9 d4 22 51 85 d1 69 a7 0f 46 95 9a 70 ab 85 bb 70 e1 c2 19 2e 9e dd e3 d5 57 0f d9 9e 29 69 a1 68 89 b2 40 42 c2 1e 87 76 5a ca bc 36 86 2d 87 97 e6 f0 23 e5 3b de a8 41 f4 ae 00 ea 9c 8f 0d eb 4f db c8 61 e3 27 d2 90 fe f1 39 bc b5 14 96 ab 82 a9 30 a9 0a b2 ad 39 db 3f 7c 11 fd cf ce 72 ed ef 7c 8a fd c3 8e ed 9d 45 d4 09 62 bc a5 39 30 db 39 dd 8d 15 7c 79 09 df bd e0 1b de f4 38 1f fa f0 a7 51 a9 ce 6d 3c ee fe 06 a7 ab 15 10 fe de 42 c3 d3 3b b0 1b c7 92 36 df a6 50 1b 0b 89 cd e7 9e 7e b6 40 0e 45 9e 13 62 03 8f b6 71 60 7d 9f 8f 75 9d a3 43 da 15 a2 a4 bb 58 39 cb a9 d7 1d b6 f3 b4 2b 4b 31 cf 25 62 a1 45 09 b7 0a 6c 6b f1 43 dd e6 29 1e 6c 7a cd f7 d1 87 93 Data Ascii: k+(~>=k"QiFpp.W)ih@BvZ6-#;AOa'909?\|r\|Eb909\|y8Qm<B;6P~@Ebq`}uCX9+K1%bElkC)lz
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 3b 63 eb f1 25 d2 d5 94 b3 3b d3 c6 55 30 58 75 2c 06 91 49 cc bd 19 1c c3 8d 2b 5b ec 6c af 33 3b 39 62 09 e1 f0 d4 65 58 57 f3 42 47 1f 28 ff c1 14 c2 32 3f 1e e1 7a 88 3f 8d 09 a6 ab 7f b0 39 e2 e6 7a c6 a6 d9 a0 b4 b5 ff a9 85 5f 4d 84 20 15 09 23 91 90 49 e5 12 79 9c 97 58 25 c9 de f8 10 7c f5 f3 e1 a5 43 b8 ab f9 17 ff f0 57 f8 f1 5f 7a 0b 8f 5e dd 42 9f 1d 61 66 13 30 b5 6f bb 6c 9d 21 a3 26 2e 54 80 64 77 05 cc 7b 1b 3e 40 f8 0f 8b 5d 38 a1 37 66 15 d6 3a 05 23 1d 08 ec d4 82 4b 12 44 b0 60 c9 44 3a c6 24 bd 15 b1 d9 9e d1 3e 9d 93 1b 04 e9 20 69 12 45 08 7f bf 6b 71 f0 6a 10 de 03 da 30 18 a4 08 20 91 82 e1 38 87 89 45 7b 4d b8 61 c2 c2 85 84 ce 28 fd 99 b0 f0 f9 7b 5b 4b a3 10 e1 ac df af eb 78 ff 37 63 eb b0 4d 8c 74 8e a0 52 08 d2 60 f9 f4 3d Data Ascii: ;c%;U0Xu,I+[l3;9beXWBG(2?z?9z_M #IyX%\|CW_z^Baf0ol!&.Tdw{>@]87f:#KD`D:$> iEkqj0 8E{Ma({[Kx7cMtR`=
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: e3 85 9f fb 6a ae 3e b2 c2 7b df 7b 8f d2 6a 06 32 e9 28 03 52 c2 fa d2 90 67 df 7c c4 5b 8e cf 79 de eb 36 78 e8 e1 21 d7 9e 78 a2 71 aa d6 87 f0 b1 df 3e e6 2d bf f5 09 9e 7c fa 3e 2f d8 da 61 47 2c 33 08 c8 5a 91 b1 c2 4e 34 d9 cb 72 06 d7 e1 43 ef 39 e4 c3 cf 3e c7 4a 3a 20 1b 68 3e bd 7b 87 0f 7d e2 93 bc ee 2f 3c c6 e5 47 d7 78 e6 63 f7 d1 d6 f4 76 a9 3b 93 5f da 18 30 79 fa 84 f7 ff eb 27 b9 fa c6 4d 9e f7 e2 55 be e4 eb 5e 08 b9 5f 18 e7 30 7b 16 fe e4 0f 9e e2 f7 de f4 41 c6 a3 8c 87 06 9b ac a9 21 aa 53 a1 c5 14 96 6c 33 61 f0 78 06 fb f0 9e 8f 3d 45 2a 15 a2 b6 28 1b 52 ae c7 53 13 33 5c f7 59 01 56 39 93 5f f9 fe 33 0e ee 6a 0e 67 13 6a 61 48 89 9d 9b 98 eb 0f 82 d8 9a 8b d1 16 a5 24 cf 7b e9 15 b2 01 cc 72 85 b1 6e 2c 23 4c 88 0b 4a 77 83 06 Data Ascii: j>{{j2(Rg\|[y6x!xq>-\|>/aG,3ZN4rC9>J: h>{}/<Gxcv;_0y'MU^_0{A!Sl3ax=E*(RS3\YV9_3jgjaH${rn,#LJw
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 14 88 50 00 62 c9 60 40 45 9b 26 25 42 15 04 84 21 2a 3e 82 30 9e c4 d2 5e 70 cc 6c 6b 71 da 62 a6 48 40 b8 82 55 d6 70 e5 70 bc f2 74 ab ea bf cc 28 a8 1c 2e 16 a5 b6 96 c1 57 b3 1a 00 e4 09 e3 de c1 bb 00 2b aa c1 e8 f8 46 33 ab 63 bd 48 3f 35 e3 5b 9e 4b 95 24 dd 72 05 b2 1d ba 82 de b4 06 9c fb 5e 32 54 41 08 be 32 0c 98 a1 60 a2 e3 6a 45 35 9c d4 60 8e a1 67 e9 6f 5a 9c bc ba 69 c9 3c 87 28 31 98 30 d3 63 85 01 9e 67 8e 73 d6 46 cb 3a 28 28 2b 85 38 0a 15 6c da 37 0a b0 c6 a3 e9 67 1c 9d 1a 71 d3 cd c7 b8 e5 ce 2b b8 ed ae e7 70 db 1d cf e0 a6 8b 97 70 ee dc 75 9c da 8c 68 0d ab d5 43 d0 70 5e c1 4b d9 bf a6 eb 85 16 f0 38 9d 17 f0 0d 1e b6 6f d0 6d 3a b1 82 30 5d 64 67 2c 97 35 47 71 46 17 4c 61 42 d2 e5 56 15 b5 73 bb 6d 60 37 ac 81 94 b4 61 2b 32 Data Ascii: Pb`@E&%B!*>0^plkqbH@Uppt(.W+F3cH?5[K$r^2TA2`jE5`goZi<(10cgsF:((+8l7gq+ppuhCp^K8om:0]dg,5GqFLaBVsm`7a+2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.17	49837	169.150.255.184	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:31 UTC	580	OUT	GET /pcapp/images/3rdparty/application/images/apps_73401_66684ff6b31a4.png HTTP/1.1 Host: repcdn.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045
2025-01-02 11:16:31 UTC	670	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:31 GMT Content-Type: application/octet-stream Content-Length: 106708 Connection: close x-amz-id-2: HlOKEV6/HPN4h/JHDPANCTOV9W54AEf27XOS/G+IqeiiKQPNiRvmMxUvkBIkvTKZxzyAW3LyijJAfuDO92++AnRHdSYiveh4KlShp7xVqms= x-amz-request-id: 4X8B3VD712T00X6S Last-Modified: Tue, 11 Jun 2024 13:24:07 GMT ETag: "d04ab43aa1f8d1575dca31d23e4d0182" x-amz-server-side-encryption: AES256 x-amz-version-id: VO.U0..ImXGmMlWFFQOoz_RIhZ1SdjcY X-77-NZT: EgwBqZb/tgH3i/cMAAwBJRPCNAG3/EcCAA X-77-NZT-Ray: 15b3c711e29556808f757667a25c0832 X-77-Cache: HIT X-77-Age: 849803 Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:31 UTC	15714	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 18 08 06 00 00 00 84 15 25 e1 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 01 a0 86 49 44 41 54 78 9c ec 9d 75 80 65 47 95 ff 3f a7 ee 93 ee 9e ee 9e 1e b7 8c c4 3d 21 44 49 80 10 48 90 e0 ee b6 b8 ec c2 2e b0 d8 0f 5d 82 2d 04 0b b2 41 16 82 2d 8b 2e 0e 41 e2 40 94 84 18 f1 49 32 33 19 d7 d6 f7 6e d5 ef 8f 92 5b f7 be fb ba 5f f7 f4 4c 66 42 2a e9 79 ef dd 5b 2e e7 7b ce a9 53 a7 64 f6 f1 0b 0c 7b 6b 90 a9 47 94 8e d3 4e b9 88 f1 c3 34 f6 ba 29 cd ab c3 02 f6 86 d1 6f db b7 d9 8b 71 c7 73 a2 b1 29 26 1e ff e7 c4 61 9c 04 2d 63 55 d6 ff e5 03 da 3e 7e 69 b2 36 11 f7 86 f1 f6 a1 a3 8e 6f 1f a9 74 4e 44 cf 8c 91 2c 4e 4b 5c 13 fa ca f6 ab 09 8f e3 28 0f 86 07 60 98 6e Data Ascii: PNGIHDR%pHYsIDATxueG?=!DIH.]-A-.A@I23n[_LfB*y[.{Sd{kGN4)oqs)&a-cU>~i6otND,NK\(`n
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: eb fc fc 1b bf e5 ef 57 de c6 bb bf f5 26 7e fa f5 5f f3 b5 8f ae e2 61 8f 3e 81 d1 91 51 ce 79 e7 97 38 eb bf df 45 ac 80 ee ed e9 e3 8c c3 5e c0 55 2b ff 87 c1 ed f7 50 ef b2 b7 05 0d 0e 6a 86 87 53 b6 0c 6e 61 bc 30 d6 18 45 75 8d b2 66 d5 18 97 8e ac a4 56 b7 9c d6 d0 b0 61 fb 3d 03 3c e1 cc 67 3a fa 67 30 cd 14 31 29 a6 d9 40 e9 06 20 dc 79 d7 3a 8e 7c c8 01 cc 9c d9 c5 bd ab 36 53 af 57 d8 b2 69 88 de 0d 6b a9 0f 6e a1 b9 fc 00 f6 5f b1 80 9f 3c f7 6d 28 11 b6 6e 1b e2 c9 f3 46 39 f4 9d af 65 fe 07 3e c5 f5 37 ad e2 d8 63 f7 65 c3 86 1d dc b7 6e 0b 87 f6 d5 ed 19 55 6c 1f f7 0c 8d a1 4c ca d8 50 13 46 c5 81 a8 ce 0c ad 3c b3 a6 c1 df 30 65 2d 8f dd 7e bf 57 eb 6a ec 7e af 96 70 1c ce 18 e7 aa 52 ec 16 83 f8 eb 28 b5 0e 17 0a 6b 3f 3f c5 38 43 41 0b Data Ascii: W&~_a>Qy8E^U+PjSna0EufVa=<g:g01)@ y:\|6SWikn_<m(nF9e>7cenUlLPF<0e-~Wj~pR(k??8CA
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 86 a3 0f ea e7 ab 47 25 1c 7b 40 1f cd 74 8c 2d 9b 41 da 58 68 07 f7 93 c6 30 ef 45 2f 62 e5 8f 7e cc 8c 9f fc 24 a7 8a aa 00 e9 2f 7f 09 ef 7f 7f 6e 2d a8 6a 06 c0 aa 56 0b 2a e4 1d 97 5e 42 df 5f af 6d 99 d2 1b 45 50 1f fa 0f ba 8f 3c 2a 62 a0 c8 c0 d7 d0 72 a9 8d 32 0d 92 66 c3 d6 23 51 fc 7d dd 75 6c dc bc 9e 79 73 16 c0 c0 2c c6 dc 7e f8 98 08 5d 03 f3 21 49 68 8c 8d 71 dd dd 7f e1 a0 85 15 ee 5a b5 c6 6a 7d b5 75 3b 3e ac 36 71 d7 3d b7 70 f4 a1 27 81 b1 ee 32 83 91 9f ef 93 12 40 19 57 40 d2 29 a3 a3 a3 8e 39 03 94 b1 4c 61 c5 2e 44 2d 62 9d 6d b8 a9 d7 b2 47 98 93 5c 22 c2 53 64 c6 94 b7 9c ce c0 d7 df 75 dd 62 53 11 4b bd 86 52 60 33 e8 c2 d2 2a 69 65 19 c8 14 df 47 0c 7f 56 7c 87 a0 1c 63 51 04 22 2d a9 e3 74 3a fe 1d 27 88 db 58 b2 7f 5c e8 f6 Data Ascii: G%{@t-AXh0E/b~$/n-jV^B_mEP<br2f#Q}ulys,~]!IhqZj}u;>6q=p'2@W@)9La.D-bmG\"SdubSKR`3*ieGV\|cQ"-t:'X\
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: fc fc bb 1a ee 3d 3a 64 ef 56 c5 fb 7e 76 8e ab 2e 98 4b c8 4f cd 8c 86 d7 bc 60 0f db 3e 74 8c 27 9e bf c0 69 3b 86 c1 e1 2b 56 2e 5e e5 27 08 b5 aa f9 a9 eb 7e 8a 1f fc fb 1f 40 1b 4d 25 15 3f fd f4 ff c2 f3 ff f8 eb f8 c6 5b 6b 66 3e fc 61 96 cf 3d 97 dd 6f 7a 23 6b f7 de 8b fa 9a af e3 ec f3 cf e3 be 73 2e e1 f8 9d 37 22 db 2f a2 05 d6 d6 1b 1a 5a db 37 8d 3b c0 02 e3 40 d9 58 73 bd 33 d7 69 f1 f5 35 28 ed 9c d2 b0 fb a2 91 16 8d b8 ab 1a 5d df 04 d3 a4 bd 0f d7 6a 51 f1 e0 0c a9 2a 07 c2 8a aa 1a 63 d4 88 a9 c3 87 a8 1f b9 89 5d 0b 8a 47 0f d4 1c 9b df c1 cb 7e e0 29 3c 7c cf a3 8c 8f 35 dc f2 0f 5f 02 60 66 6e 06 55 55 28 51 bc f7 9d 37 d0 8e 5a de fc 91 d7 33 3d 63 d7 b4 db 44 88 10 77 8f b3 c6 5e 29 e8 9f af 3b f7 45 3c eb c2 67 a3 92 09 a9 10 cc Data Ascii: =:dV~v.KO`>t'i;+V.^'~@M%?[kf>a=oz#ks.7"/Z7;@Xs3i5(]jQ*c]G~)<\|5_`fnUU(Q7Z3=cDw^);E<g
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: fa ca 17 26 34 82 e4 7f a4 88 d2 d7 56 25 f0 4a 12 35 fe cf fe 55 93 f2 b0 ff cb a3 17 ce 45 10 b4 d7 60 ca 4b d7 78 fd 5a ae 72 0b ba 6e 21 32 98 9b fd e3 35 5d 77 97 ae 75 a8 36 01 6c fd d6 87 70 60 06 9e c1 ba 6f 1e ac 47 f4 0a 44 d9 a3 04 18 60 0e 7e 94 ad 73 c2 e8 84 61 0c 34 06 ea c1 88 ba 26 1e bf d4 f7 68 a0 9e 87 f6 38 34 76 2d 75 8b b2 00 bc 1e f9 2e 7a bd 41 33 a0 1a e2 cc ed 16 8c 3c 53 b0 5b af 40 6a 40 b9 33 ab bd 67 78 65 79 86 18 09 17 43 78 67 15 11 60 24 89 c0 25 30 35 0d 6a 37 34 62 ff 01 73 02 6b 02 32 5e 62 74 d3 ef db 5d 39 6e 31 cc a0 18 87 7b 8b 35 b9 06 dc 30 a5 60 e6 fc 4b 08 c7 5e b6 3b 60 fd c3 d0 9e 6a f7 83 19 43 35 bf 8e c8 67 90 87 3e c6 89 ea 2c de fc b1 23 7c f0 d1 43 ec 78 dc a9 1c 5c 3f c2 68 38 72 f5 25 01 28 b7 5d c5 Data Ascii: &4V%J5UE`KxZrn!25]wu6lp`oGD`~sa4&h84v-u.zA3<S[@j@3gxeyCxg`$%05j74bsk2^bt]9n1{50`K^;`jC5g>,#\|Cx\?h8r%(]
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 57 0b c4 ed 29 60 cd ee eb 6b 96 70 c7 94 4d 92 06 dc a4 ac 94 1b 07 1a d6 16 41 bb 7d c3 2e 2f bf c5 17 fc 5d b5 62 17 d6 bd 04 a6 13 c0 73 da 71 e3 c0 c4 18 e1 5d 97 9f c5 59 d7 df ce d5 e3 17 b0 47 7f 0a 66 95 75 dc 3a b1 1f e6 1f 07 4b 0f 23 cd 32 bb af 13 76 cf 2e 20 7b af 84 ad 97 c2 be bf 83 fb fe 09 b6 34 f8 5b 90 c6 c7 4e e5 9f ff cf 07 79 e4 ea 33 60 ad 89 1a 70 da a4 cd 08 ea 71 b2 cc e3 c1 4c 32 00 b6 0c 4e 39 67 3c 4d bc d7 d0 71 be 0a 3e bb 67 96 eb 8e af d8 36 68 60 a9 81 3b 4f c0 f6 35 38 fe d6 cf 31 7c db e7 42 b1 47 46 b0 38 b6 71 6a cf 12 a6 dd dd c4 c3 ed 30 3e 98 20 8b 04 fa ec ee 86 c2 45 af e4 d2 4e 30 b7 8a b0 22 9c 9f 94 cd 4d 8f 6e be 51 fc 9c 96 78 f0 45 1a 3d e4 4d fe 14 9e ca 21 41 b8 6b 58 6c 2b 96 0e 5b 9e 9f 28 db d6 be 3c Data Ascii: W)`kpMA}./]bsq]YGfu:K#2v. {4[Ny3`pqL2N9g<Mq>g6h`;O581\|BGF8qj0> EN0"MnQxE=M!AkXl+[(<
2025-01-02 11:16:32 UTC	9074	IN	Data Raw: ac cd 05 22 17 9e 2a af ec 32 0b 8d 77 3d 71 96 75 f3 a9 43 7a c0 75 df 63 ae a2 94 c8 b9 1e 3b 0e 1e 28 4e 40 8d ce 6c e8 2f 50 c4 0b 7a 3d 40 44 45 ba ee e6 74 b7 7e 6b ef 45 fb eb 30 3d 1d d2 74 2d 6d 5c c0 a6 a7 a5 8b fd 10 6e 3e 72 e7 e8 c6 fa 08 53 14 83 d4 0a 5e e6 da dd 77 2d 6f 85 8f aa 7c 4d b1 96 a6 2b b3 a8 f9 58 1e 2d 7a a2 71 ea bc 21 9e e5 29 82 61 81 88 82 7a fd e7 af b5 7a 6f 69 27 6d 34 ad a2 75 28 43 cb f9 9b e5 24 00 64 53 29 fb af 08 16 7e 3b d7 16 d0 f7 05 36 81 6f bd 15 75 60 db 01 90 ba 80 6f 87 b0 30 e5 56 80 6f 45 53 b5 ca e2 46 69 12 4d e4 d1 cd ba 6a 61 71 b9 89 d9 e0 99 2f 64 5a 09 35 1e 41 eb 00 bc d8 2c 0d 71 b1 6a 58 4d 8a d5 c5 45 b2 55 a1 95 bf 34 7f d5 2a dc f0 76 76 de 7a 1d 7b 87 1a 34 e7 4e be 48 b4 47 e8 c3 b7 f9 0f Data Ascii: "2w=quCzuc;(N@l/Pz=@DEt~kE0=t-m\n>rS^w-o\|M+X-zq!)azzoi'm4u(C$dS)~;6ou`o0VoESFiMjaq/dZ5A,qjXMEU4vvz{4NHG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.17	49841	169.150.255.184	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:31 UTC	580	OUT	GET /pcapp/images/3rdparty/application/images/apps_73356_663ce796de577.jpg HTTP/1.1 Host: repcdn.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045
2025-01-02 11:16:31 UTC	637	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:31 GMT Content-Type: application/octet-stream Content-Length: 51724 Connection: close x-amz-id-2: jHmLKHA3THhddBFiQwFAu9/+nJ2OeRnaw3xJqzqGR5qKY+rRqSWs3fkySM8R2XSOlHtcaqdngJI= x-amz-request-id: 6K5NXTXDP1EQ841E Last-Modified: Thu, 09 May 2024 15:11:19 GMT ETag: "9799622a270f0d1ed5e7c7640992e94d" x-amz-server-side-encryption: AES256 x-amz-version-id: Mgd.dY73kbZdapczF7j3qiOailah9CrX X-77-NZT: EgwBqZb/tgHX0n4GAAwBisclxAG3Uj8CAA X-77-NZT-Ray: 15b3c711458dae808f757667354b6832 X-77-Cache: HIT X-77-Age: 425682 Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:31 UTC	15747	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 00 7e 00 f9 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFHHCC~}!1AQa"q2
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: cd 7e cb 4f 2e e5 5c f8 89 6d ab 84 1f fe 95 3f 9e b6 db f9 8e da b9 9f 33 e4 c3 43 bd a7 35 ff 00 a4 c3 f2 e6 f4 e5 34 27 b8 d3 ac 33 0a 4b 0a ec 00 bc 71 f2 ca 4e 71 90 bb 98 b1 03 96 7c 12 30 4e 01 15 d0 eb e1 b0 e9 c1 4a 11 51 b3 e5 8a f7 9b 7d 1c 62 db bd ba ca cf ab b5 ce 3a 54 b1 98 bf de 4a 9d 49 73 37 cb 39 e9 16 95 af 67 2b 45 2b bd a3 75 ba 5a a6 60 dc eb 79 24 5b c5 ff 00 03 94 ff 00 ec 8b fd 5f f0 ae 0a b9 8d ee a9 42 df de 9f e9 15 fa cb e4 7a d4 72 cd 13 ab 3f fb 76 0b ff 00 6e 7f a4 7e 67 38 de 69 1e 7b df 5c cb 2b 92 b7 10 c9 33 bd b9 2c 59 d6 58 62 27 64 1b 0f c8 16 15 54 64 90 09 01 68 d3 1e 1c 67 5e 55 25 2a b5 eb ce 52 6f da 53 9c e4 e9 75 92 a9 4e 0d da 9d 9a 50 4a 9a 51 94 65 ef 5d c2 36 f6 17 22 7e ca 38 5a 34 e1 14 a5 4a ac 29 c6 Data Ascii: ~O.\m?3C54'3KqNq\|0NJQ}b:TJIs79g+E+uZ`y$[_Bzr?vn~g8i{\+3,YXb'dTdhg^U%*RoSuNPJQe]6"~8Z4J)
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 39 8e 5b 92 55 c0 60 b2 f8 65 de df 09 5d d2 79 87 b2 af 99 b8 25 05 8e 8d 29 4a 0f a0 f8 5d f0 5f c0 bf 0c 3e ce da 6e b9 e2 df 12 dc 69 e6 61 a2 cb e3 4d 61 35 25 f0 fc 53 c5 71 6f 2c 7a 25 8d 9d 8e 97 a4 d8 3b db 5d 5c da 7d ad 2c 9f 50 16 77 37 36 69 76 b6 b7 57 10 cb f2 be 39 fd 32 fc 55 fa 40 60 63 93 71 2d 5e 1c e1 cc 82 6e 85 5c c3 24 e1 0c aa be 51 86 cf 31 58 6a b4 eb 61 f1 39 ee 27 19 8e cc f1 f9 8c a8 d7 a3 47 11 4f 0b 2c 6c 32 d8 62 a8 d1 c5 43 04 b1 34 28 d6 87 d7 78 0b f4 19 f0 57 e8 ef 9f 62 78 bb 84 f2 7c d7 3c e3 2a f4 6b e1 68 71 5f 15 63 30 79 9e 69 95 60 b1 34 dd 1c 46 0b 27 8e 0b 2f cb 70 98 1a 75 e8 37 87 ad 89 58 4a 99 8d 5c 34 a7 86 a9 8e 96 1e a5 4a 32 f7 13 32 b0 05 59 58 7a a9 ce 7f 2a fe 59 72 4d 36 9a 69 f5 4e eb f0 3f ad d5 Data Ascii: 9[U`e]y%)J]_>niaMa5%Sqo,z%;]\},Pw76ivW92U@`cq-^n\$Q1Xja9'GO,l2bC4(xWbx\|<khq_c0yi`4F'/pu7XJ\4J22YXzYrM6iN?
2025-01-02 11:16:32 UTC	3209	IN	Data Raw: ac 50 fe 75 f7 4b fc 8f cd 3f 8b df 05 ef bf 67 af 89 de 25 f8 72 fa ad a6 b1 a2 35 c4 ba ff 00 85 2e a0 33 8b b8 3c 3f a8 c8 92 da 58 ea d1 4d 04 31 47 a8 da c7 34 51 4c d6 92 5c 5b 4e e9 25 c2 3c 3e 60 81 3f c5 1f a5 8f 81 d5 7c 10 f1 27 19 91 47 31 c2 66 59 5e 3a 75 b1 79 25 5a 3e d9 62 e1 94 d5 94 6b e0 68 e6 50 a9 42 95 28 e3 b0 f8 7a f0 c3 57 96 1a a5 6a 35 65 47 db 41 d3 55 3d 95 3f e4 8c 26 2a 52 85 9f 4d ff 00 e0 6b df fa d0 e0 d6 77 1b 70 33 96 c1 c9 c6 06 09 c8 e0 e4 f0 07 38 eb 9c f1 83 fc b0 e9 ad 7a 69 a6 9e 6b 7e c7 a9 4e b3 77 dd 5b 6b 6b 76 da 5d 5a b2 b3 df 5d 92 b6 b7 58 1e 2f f0 87 85 fe 21 78 7b 50 f0 9f 8c 74 4b 3d 7b 40 d5 11 3e d9 a7 de a1 64 69 21 74 92 de e2 09 50 a5 c5 a5 ed ac a9 1c f6 97 d6 92 c3 77 69 3c 69 35 b4 d1 4a 8a e3 Data Ascii: PuK?g%r5.3<?XM1G4QL\[N%<>`?\|'G1fY^:uy%Z>bkhPB(zWj5eGAU=?&*RMkwp38zik~Nw[kkv]Z]X/!x{PtK={@>di!tPwi<i5J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.17	49840	169.150.255.184	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:31 UTC	580	OUT	GET /pcapp/images/3rdparty/application/images/apps_73400_666176fb273fb.png HTTP/1.1 Host: repcdn.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045
2025-01-02 11:16:31 UTC	638	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:31 GMT Content-Type: application/octet-stream Content-Length: 234721 Connection: close x-amz-id-2: 1+c9d+q2jGXPqMQ5jUz5YoUHCwzQmeSMk6hzTdm/f3Wk5NnRBsMCMkMAgg3xtqWevV8pipmHrEg= x-amz-request-id: J2XAWA3S5FH31FD4 Last-Modified: Thu, 06 Jun 2024 08:44:44 GMT ETag: "a28214a3689afb5b8eb74b788525a33f" x-amz-server-side-encryption: AES256 x-amz-version-id: w4BPUP3bfnxNvtOcY2OtNnFz11V.YgMM X-77-NZT: EgwBqZb/tgHXhoIOAAwBw7WvAgG3v9IDAA X-77-NZT-Ray: 15b3c7115b8dc6808f757667c393bd32 X-77-Cache: HIT X-77-Age: 950918 Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:31 UTC	15746	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 18 08 06 00 00 00 84 15 25 e1 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 03 94 93 49 44 41 54 78 9c 7c fd 77 94 64 5b 76 de 07 fe ae 09 9b 19 91 de 9b f2 de bf aa e7 7d 77 bf f6 40 37 d0 f0 20 09 12 82 40 51 8b 8b a4 a4 99 91 38 94 69 49 b3 96 a8 d1 48 1c 8a 14 9d 68 d0 02 61 08 d3 40 e3 b5 ef 7e 6d 9e f7 55 af bc af ac ac f4 3e 23 32 fc 35 f3 c7 77 4e dc a8 47 ae a9 b5 b2 d2 44 c4 bd e7 9e b3 cf 36 df fe f6 3e 0e fd c5 18 62 f0 7d 08 23 88 63 70 1c fe bd 7f 4e 0c ae 03 8e 07 c4 d0 6c 81 97 82 ee 2c 34 9a fa 8a d1 7b 7c df 5c a7 e3 f3 61 04 be a7 9f a3 10 22 c0 75 f5 7b 10 42 1c 81 e3 ea 73 60 c6 60 c6 62 fe 44 1c ea fe ae 79 cd f7 f5 f7 66 13 5c 0f 52 e6 be 51 0c Data Ascii: PNGIHDR%pHYsIDATx\|wd[v}w@7 @Q8iIHha@~mU>#25wNGD6>b}#cpNl,4{\|\a"u{Bs``bDyf\RQ
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 8e 3c 2d 5c 35 18 98 de a3 3e ad 3d a3 8a e4 72 19 d5 0d d7 76 92 63 ba 46 4d 0e ac a7 a0 6b 7f f0 21 fc db 3f 87 63 fb a5 c4 2e df 97 e1 ea 2d c8 09 1a 19 94 a7 5a aa e8 80 f0 ed 43 49 0d a8 25 37 f4 f7 c3 99 23 f0 f2 0f e0 d2 25 98 5d d1 86 4f a7 04 13 66 32 7a e6 d0 31 ac c9 8c e6 39 88 94 e3 da a9 6b 93 7a ae 36 7b 2e 2d a3 bb 6b 97 ea 80 0f 1f 56 4b ca 0f df 12 fc 3d 34 2e a8 70 69 55 0a af 54 91 52 c9 75 c1 85 ab 52 d4 c7 8e a9 57 ef ea 8a ea 79 27 77 c1 6f ff 65 f8 9d df d3 f1 8a 03 96 c8 83 1a 25 1c d9 a3 e7 fa 8b bf 50 44 9b cb 41 3d 4a 4a dc 76 aa f2 a0 27 86 d4 38 e1 d6 2c 5c b9 00 3f 79 4d 70 75 2e af e7 3a f7 98 36 7e 00 bc f0 bc a2 a4 3f 7f 19 3e ff 05 29 e0 5a 85 36 31 70 6c 44 91 46 1c 24 b2 da 4e ea 92 38 93 b1 55 90 71 c7 3e 72 c0 09 69 Data Ascii: <-\5>=rvcFMk!?c.-ZCI%7#%]Of2z19kz6{.-kVK=4.piUTRuRWy'woe%PDA=JJv'8,\?yMpu.:6~?>)Z61plDF$N8Uq>ri
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: fd e4 23 da f3 f6 80 95 28 36 87 96 64 cc 5e 89 68 1f 0c 53 ab eb 19 fd 54 52 e3 ef 79 86 d4 69 e7 c0 28 c6 28 32 6d 57 03 19 88 7c b7 29 cb 6a 4a 47 e5 0b d2 47 7b a7 04 43 d3 82 b9 59 d8 3a 28 87 a5 52 a3 dd 80 28 8a 95 3b ce e5 44 32 db 29 43 71 c2 20 62 b1 0c 6f dc 94 be ec 35 e4 47 d7 57 49 e0 e4 a8 ee 7d e3 86 d2 30 b9 bc aa 02 82 48 d1 70 2e 2f 9f d6 31 79 e5 e8 63 eb 6c 85 30 9d 81 a9 29 9a f7 6e cb c1 5e 5e 91 53 3d 50 94 be bd 77 9f ff 63 6f 9a ff b4 d1 82 c8 61 79 cf 14 7b 1c d8 d8 dc 66 76 65 99 3b 8b 8b 64 7c 9f 4a 20 82 6a da 71 a9 c6 50 c3 61 da 71 08 dc 90 bb 71 c8 41 e3 08 c6 c4 38 8e 43 84 47 c9 8b 71 70 70 81 5d f5 80 33 f5 16 03 1f 5e 66 ed ea 1d 6e 1c 3d cc b7 07 0a 7c 7f b4 9f f9 ae 3c b8 1e 99 f2 16 de 40 3f e1 d6 06 78 2e 6b 51 8b Data Ascii: #(6d^hSTRyi((2mW\|)jJGG{CY:(R(;D2)Cq bo5GWI}0Hp./1ycl0)n^^S=Pwcoay{fve;d\|J jqPaqqA8CGqpp]3^fn=\|<@?x.kQ
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 3c f6 a0 04 0d da 31 88 3d d2 62 4d 35 89 26 50 8e 38 17 57 c7 4f 53 31 a0 bf fe 6f e0 0f be 0d 4f 9e 14 11 8f 13 87 c5 50 79 92 52 10 38 a6 b0 63 6d 6b 7f 8c bc ba 76 15 8a 93 ba 7e 4d 10 89 a5 39 59 b7 99 ab c3 fa 7d e0 6b b6 e7 ae 09 c9 62 b1 5d d5 4a 75 20 c7 2b a1 6f aa a0 30 49 2a 87 ef c9 4e 79 06 e3 1e 34 ba 52 bf bc 7c 09 de 7c 43 ee 91 27 bb 95 c8 91 33 7b a5 5e b3 77 c0 fe 76 b8 f7 f9 4c ca ab ca 7d f8 29 51 0e 4b 12 79 4e 52 3b 70 f7 d3 39 26 90 73 f1 f2 86 9e d0 b4 b3 2b 65 96 95 55 e9 81 4f a6 72 5f 8b 42 14 c7 0e ac ca b5 e1 9c 23 b8 67 e8 20 e0 50 43 dd 65 6d b3 d9 58 9a c1 d4 05 31 b7 b7 e0 c4 51 f9 de 6e b7 ca 7a eb a1 6b 3d 74 b6 43 2b ca 61 2a 6a c6 be 80 5c ab af fd 17 b9 20 37 c3 b1 ac 51 63 64 5f bf 7d 5e 9c d5 07 1e 92 67 b9 ef 3a Data Ascii: <1=bM5&P8WOS1oOPyR8cmkv~M9Y}kb]Ju +o0INy4R\|\|C'3{^wvL})QKyNR;p9&s+eUOr_B#g PCemX1Qnzk=tC+aj\ 7Qcd_}^g:
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 39 63 52 06 9b 3d ea 9d 06 07 1a 11 45 3a 64 fd f0 0a 8d a6 26 99 1a 36 b7 7a 6c 6e df 21 9f 4e 58 3f b0 42 b3 dd 20 73 81 4a 61 0d a4 d2 07 5c e4 62 ef 6d 61 e8 36 6b 9c 3c b4 cc b1 b5 65 9a b5 1a 79 51 30 9e 8c c9 52 61 38 17 b9 c1 58 99 e6 94 e5 09 69 32 a1 59 8f 78 fc fe e3 28 a3 79 e3 bd 8b 2c af 2e d1 08 03 0a 5b 10 58 68 d5 42 a6 45 c6 ce 38 25 cb 8c 6c 2f 2d 73 7f bd 3e 75 ac 34 8d 50 a3 b4 e1 76 0e 69 a0 58 40 53 33 96 42 89 44 e5 00 d8 b4 96 ae 52 b4 51 4c 11 8a c8 10 d0 c6 b0 16 04 32 c1 56 43 58 58 82 49 c6 95 27 1f e0 d2 8d ab 82 32 9c 39 09 df f8 0e 3c 70 1f c7 7e e2 c7 d9 bf bb 09 bf fd 45 78 ff 3c 6c de e6 ea 70 04 d9 94 63 4f 3e 46 b8 bc cc 64 b0 cf f0 e5 57 61 7b 9b a7 7f f2 a7 68 1c 3c c8 78 7f 8f c5 64 42 18 68 ee 4e 87 f4 a2 98 38 0a Data Ascii: 9cR=E:d&6zln!NX?B sJa\bma6k<eyQ0Ra8Xi2Yx(y,.[XhBE8%l/-s>u4PviX@S3BDRQL2VCXXI'29<p~Ex<lpcO>FdWa{h<xdBhN8
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 9b 7c ee 0f 3f ce e1 f5 eb 3c ba 7e 99 17 43 8b 96 70 32 6a 39 7e 93 32 ef e8 48 83 4d 42 51 d9 06 a7 3c 2a 49 b0 d6 52 57 15 b5 17 e2 9c 94 1b 3c 3f 7d 6d ca df b8 7f 40 2f 53 94 18 46 a7 23 2e 5c dc 61 7d b5 cb 70 5a e2 5c c2 b7 77 87 dc 18 1b 5e b1 05 68 cb bc bd 6b 5e d3 8e 6b 48 ce 41 7b 50 68 ac 72 e0 15 9d 4e 06 fd 0e d6 2b ea aa a1 c9 c2 31 a7 29 e3 d9 04 8e 8f 49 1e b8 9f f6 d6 35 d8 39 03 47 43 98 4e 48 b2 0c 1e b8 5f 86 02 d8 16 32 4f 51 97 54 d6 71 fe d2 25 26 87 a7 9c cc 46 54 15 9c 5d ef 43 91 d3 db 5d e7 cb 56 bf 9c f1 d4 a1 d2 84 de fa 2a ba bb 0a d5 18 ea 31 58 45 73 3a a2 b1 0d 26 55 68 ad e9 e4 39 bd a2 43 9a 27 f8 a6 c4 8e 1c ba 93 d3 df 5a a3 bf 25 36 b6 6d 1b c0 0b a0 15 d6 ae c3 41 e3 f0 6d 83 af 6b 9a b2 c4 5a 47 55 56 4c c6 95 8c Data Ascii: \|?<~Cp2j9~2HMBQ<IRW<?}m@/SF#.\a}pZ\w^hk^kHA{PhrN+1)I59GCNH_2OQTq%&FT]C]V1XEs:&Uh9C'Z%6mAmkZGUVL
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 36 d7 07 dc 7e fe 25 3e f2 d1 8f 70 36 0b d7 24 96 14 e6 9c 00 47 e2 3d 59 9a 84 09 a1 cd bc 82 15 17 8e d5 8a 4a cb 3c 6a a3 34 5e cb 77 6d 64 2c 5f 9a 1a 72 93 c8 48 48 2d 36 b1 4e 35 2a 85 3f 9d 68 fe 64 68 b0 b3 29 b3 b2 a2 2e 67 1c 1d 9d c8 72 6a 5b a6 24 9c dd ec f3 a3 0f e4 3c b8 bb 42 b1 7b 89 5e af 47 1d 54 c9 a2 d8 43 aa 34 95 f2 24 68 36 f2 01 a7 27 fb 80 67 fb d2 65 6c dd 42 dd 52 d5 53 bc 71 bc ee 5a 4e 8f 4f e9 a7 99 28 7b a9 94 36 0c 6f a8 95 28 7a f5 0a 83 01 fe e7 1f fb 5f e1 ce 01 ac f5 a1 50 b8 4c c9 de 9f dd 65 75 2b 65 6b 7d 8d eb 37 8f f9 b5 8f 7f 8e e7 5e bb 4e d1 ed 70 e9 de 73 9c bb b4 c9 64 3c 65 74 3a c5 5a a9 88 c6 70 79 01 35 2b 3c 22 bb 19 d3 2d e1 53 5a 56 56 52 6e 4f 1a 7e f4 17 3f c1 cb 87 25 1f 5c cd 59 d1 ee 3f 88 6d 13 Data Ascii: 6~%>p6$G=YJ<j4^wmd,_rHH-6N5*?hdh).grj[$<B{^GTC4$h6'gelBRSqZNO({6o(z_PLeu+ek}7^Npsd<et:Zpy5+<"-SZVVRnO~?%\Y?m
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 6a 8f 4d a4 c5 bb cb c3 6f 9a 89 40 4f ad 12 46 5b d0 94 dd 6c 99 99 84 a2 72 41 92 58 b4 73 7e 32 4f 0b 9b ce 28 06 d7 86 a4 4c 2c 39 a3 1c f9 9c 87 fd f2 b0 f3 18 a4 95 4e 42 68 0a 51 ba 79 fe 77 a6 2e 94 93 d7 ae c2 d6 86 1c f7 b9 f7 c3 9b 6f cb 26 7a fc 24 ac 6c c0 c5 ab 12 62 3d b4 0f da 6d 69 58 ad 1d 09 c5 5d ee cb 35 3d fa a8 6d c8 6e e0 ed b3 32 fe c5 39 f1 7e c3 50 84 d3 37 5f 83 f5 75 38 7a 00 f6 1f 90 30 eb 5b 17 e0 de 16 1c de 07 a7 8e 8a f7 77 fd 2e dc d9 84 45 03 8f 2e cb f5 14 87 02 f6 58 df 16 20 98 63 15 24 b9 31 62 8d 93 76 57 e8 2f 8b 01 b4 fb 8c d1 ac f3 73 b6 fb 93 55 6e 49 06 2a 85 44 c9 fc 2e ce 8b 92 bc b7 29 a1 e4 56 4f 76 cf d0 86 be ab 36 7f 1b c7 02 c2 4a b3 3c 5e 25 d7 56 af c3 b3 4f 48 b9 d6 c6 b6 7c be b1 03 eb bb 12 b5 28 Data Ascii: jMo@OF[lrAXs~2O(L,9NBhQyw.o&z$lb=miX]5=mn29~P7_u8z0[w.E.X c$1bvW/sUnI*D.)VOv6J<^%VOH\|(
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 44 6c 47 25 25 4a c8 f3 a5 76 77 75 45 84 21 8e b0 38 ed 6c 8b e1 d0 eb 5b 10 56 20 d7 bc d6 12 43 c1 71 25 bc 5c 28 8a a7 55 0c 44 01 6a e0 c1 13 d0 5c 90 76 87 c3 ae 6c 1e c7 97 eb 9d 6f 8a c7 89 12 84 74 14 da d6 6c 21 54 02 be ef 91 93 10 65 38 41 09 a2 35 ce bf fe 12 5e a9 46 32 1a b2 de 8f b9 14 54 05 01 99 66 42 64 5f f0 c5 8b 0d 6d 78 26 f0 04 a5 9d d8 36 7f 64 d2 2c a2 dd 93 39 88 86 c2 d8 d5 a8 89 90 cc ef 55 b5 0c f7 da 62 14 94 cb 72 2c 65 24 5f 67 f3 c2 af 6e f6 58 1f 26 1c 6f 28 9c 72 89 62 a1 48 62 84 ac 20 8e 13 5c d7 65 ce 0f 79 ba 59 e1 55 7c 70 15 2f fc 67 9f e1 b9 c3 4b 6c f6 ba b8 9e 4f 9c 24 b4 5a 2d ba 9d 1e 19 86 ea fc 3e 9a 73 73 14 3c 8d eb 17 f0 92 08 27 8b 71 bc 5c 29 67 24 3b 5b 6c ed b4 b8 71 ef 2e 6f 5f bb cb ef 9e bb ce 17 Data Ascii: DlG%%JvwuE!8l[V Cq%$UDj\vlotl!Te8A5^F2TfBd_mx&6d,9Ubr,e$_gnX&o(rbHb \eyYU\|p/gKlO$Z->ss<'q$g$;[lq.o_
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 03 1f d4 13 99 59 1f 63 87 43 79 73 44 ce 7a fe 0d cc 2d 96 b0 58 a7 b9 a3 f0 00 1a 5e df 7a 42 71 64 41 2b 15 bc 2d 3f 97 17 ae f3 b2 ea 28 61 46 87 6b d5 d0 77 5c 47 77 21 fa 32 a1 1b 92 73 a1 0d 5f 2c 23 53 96 b3 9f 4f 7d 8a 39 97 5e 55 73 9e 78 88 08 b4 62 5a a6 34 ca e1 89 33 62 9c ae dd 12 b8 b9 1b 58 ce 9b 3b 62 8c 8f 2f 4b 04 7c 30 84 6b db 12 f9 1e 5f 91 c8 39 0e 65 48 d7 6e 49 24 bb be 0c 8f dd 0b 3b 7b 70 7d 27 94 5a 38 89 ce 96 17 64 e3 3c e8 c3 e5 9b 42 e8 6a 35 25 e2 d6 1a b2 92 d7 0e 47 dc b7 d8 a3 4a 12 06 94 78 3c ed 6e 8b c1 70 82 57 86 96 51 3c 1e 29 9e cc 55 10 09 c9 24 fa eb b6 24 67 3b 1a 87 46 06 4a 9e 81 d0 50 a1 ee 90 93 7a 29 45 42 09 49 a6 08 6c ee 48 c9 58 5b 13 e0 ea a6 e4 89 87 07 42 d2 d2 5a 10 80 d0 ce f1 b1 b3 27 b0 71 4c Data Ascii: YcCysDz-X^zBqdA+-?(aFkw\Gw!2s_,#SO}9^UsxbZ43bX;b/K\|0k_9eHnI$;{p}'Z8d<Bj5%GJx<npWQ<)U$$g;FJPz)EBIlHX[BZ'qL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.17	49842	169.150.255.184	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:31 UTC	580	OUT	GET /pcapp/images/3rdparty/application/images/apps_73406_6671309e0b993.png HTTP/1.1 Host: repcdn.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045
2025-01-02 11:16:31 UTC	638	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:31 GMT Content-Type: application/octet-stream Content-Length: 187314 Connection: close x-amz-id-2: Mkkwa1GFgviyn1Vd1CLhrifVHHLOaIeARH78MDASrTcykoeEQfwT08TqMcj8+JR6ZQShvSiUqMs= x-amz-request-id: BJYTQS25MF9W1J8R Last-Modified: Tue, 18 Jun 2024 07:00:47 GMT ETag: "f5c3741bfb4b535d69765d82350ecdea" x-amz-server-side-encryption: AES256 x-amz-version-id: m3PPFOng2dgqin4ezHTExEOsoi1h1fOw X-77-NZT: EgwBqZb/tgHXi/cMAAwBJRPCMQG3x0MCAA X-77-NZT-Ray: 15b3c7115b8dcf808f757667b1c2e232 X-77-Cache: HIT X-77-Age: 849803 Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:31 UTC	15746	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 18 08 06 00 00 00 84 15 25 e1 00 00 34 72 63 61 42 58 00 00 34 72 6a 75 6d 62 00 00 00 1e 6a 75 6d 64 63 32 70 61 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 00 00 00 34 4c 6a 75 6d 62 00 00 00 4d 6a 75 6d 64 63 32 6d 61 00 11 00 10 80 00 00 aa 00 38 9b 71 03 61 64 6f 62 65 3a 75 72 6e 3a 75 75 69 64 3a 34 36 64 37 62 30 31 61 2d 32 64 37 38 2d 34 32 63 33 2d 38 37 31 30 2d 62 61 32 39 31 62 32 63 39 31 64 66 00 00 00 01 b3 6a 75 6d 62 00 00 00 29 6a 75 6d 64 63 32 61 73 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 2e 61 73 73 65 72 74 69 6f 6e 73 00 00 00 00 d7 6a 75 6d 62 00 00 00 26 6a 75 6d 64 63 62 6f 72 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 2e 61 63 74 69 Data Ascii: PNGIHDR%4rcaBX4rjumbjumdc2pa8qc2pa4LjumbMjumdc2ma8qadobe:urn:uuid:46d7b01a-2d78-42c3-8710-ba291b2c91dfjumb)jumdc2as8qc2pa.assertionsjumb&jumdcbor8qc2pa.acti
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 9d 39 63 67 44 79 7c b2 20 25 e1 ed e5 b5 0d 61 b2 79 21 aa 90 12 5d bf a0 3b 3c e4 e0 c1 7b 1c bc ff 35 56 ef 7f 8d f4 e0 43 d2 f1 03 74 75 8c f4 87 74 fd 92 b4 ec e8 fb 05 7d bf a0 5b 74 f4 5d a6 cf 99 94 d2 f4 4f 12 29 1b ed 92 44 c8 4e c1 18 bf b2 42 0e 8e a8 87 f7 e8 4f 1e d1 9f 3e 61 71 fc 90 b4 3a 66 79 f0 db f0 fa 29 d7 e7 e7 d4 3a 98 95 44 42 4d 9f b0 fe 49 90 54 30 79 2b 31 3c 0e 44 76 be 24 13 6a 92 0c 90 24 d9 f9 93 b5 3c 09 fd 80 be 60 19 d4 29 d2 ec eb 45 d5 14 35 d1 84 a6 6a 90 54 a4 19 07 3b f3 4c ab bb 68 94 22 06 21 bd 64 9e 1c d9 dc 3c df 07 e1 99 18 09 40 10 32 54 45 b5 4c 8a 57 8d f9 12 d6 b1 b3 3c 2a 3b 94 b4 92 50 97 a1 d6 5e d0 40 8c 58 01 d1 70 9f 33 06 f2 85 a3 be e3 a8 c3 15 88 10 d6 81 7e 42 32 52 c5 a5 8d 9a c2 eb c6 81 36 b7 Data Ascii: 9cgDy\| %ay!];<{5VCtut}[t]O)DNBO>aq:fy):DBMIT0y+1<Dv$j$<`)E5jT;Lh"!d<@2TELW<*;P^@Xp3~B2R6
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 82 9f f2 4e 77 c8 4e 67 84 5f 53 fd 7c 64 97 f2 56 47 93 f9 2d 4a bf e2 b4 ac b9 3f 5e f1 59 be c7 b1 14 07 51 eb b3 4c a2 5f 2e 28 c5 d2 57 a2 a8 46 3c 4f 7c c2 19 01 61 b3 34 c6 f4 c1 c1 92 ed 36 f1 17 f5 1b fc 17 6f 2f f8 b9 8b 4b fe c5 87 1d 5d 9e b4 f1 94 ad 28 c4 c2 29 b6 57 97 1b fa 9c 5d f8 4a 2b 52 12 ef d2 ac 46 60 d9 77 9c af 47 d2 9b 2b de 7b 78 ec 16 92 c3 58 76 41 bc e3 43 72 65 44 a4 d1 72 d6 4d 93 42 37 df 8a b0 4d 94 c4 8e 73 a5 7a fe 6d 6c 3b 87 e0 95 9c 7c 45 8a a5 c1 98 b5 6c f5 9d e3 3e 9a 43 68 fb 98 ba 95 3f 53 b8 db 0b ab fb 21 ed dd 75 a6 77 ca 04 16 21 97 52 6a a0 28 2a d4 3a 20 db 4b d2 f6 92 6e b5 66 91 8e e9 ba c4 e0 74 7d ad 85 34 c2 c8 e4 eb 1a 24 ac 6c 5c b1 98 04 57 24 e8 44 a4 39 b8 8f 5a d5 d3 ab 12 16 ac 67 e5 44 cd 22 Data Ascii: NwNg_S\|dVG-J?^YQL_.(WF<O\|a46o/K]()W]J+RF`wG+{xXvACreDrMB7Mszml;\|El>Ch?S!uw!Rj(*: Knft}4$l\W$D9ZgD"
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: c5 62 c1 4f 3c 3a e2 9f fd c9 7b fc a1 9f 7d c0 1f fa d9 87 7c f3 c3 23 36 cb ca eb b3 81 ba 8e b4 a8 30 07 15 2b 2e 4d cb b1 26 4b 64 cc b4 de 77 94 b0 73 c3 6f 9b 2b 6d 87 93 0c 22 9e ce 24 c9 f2 82 7b e5 fa f5 19 2f 9e 0d 94 d5 cf b2 fa f8 0f 71 f8 d1 2f b1 7c f0 15 cb a5 ae 15 12 e4 2e 59 ae ea 62 49 ca 3d 9d 85 78 3b 30 88 c7 15 18 bd aa 45 59 af af d9 5e bd 41 df 7e 42 7d f1 9b d4 97 bf 8e be fa 2d ca fa 05 92 17 48 77 68 6d 0e 1f 73 48 b1 f0 cb 52 20 6b a3 7e 05 5a c0 9e 0a 74 5d 66 b9 58 d0 77 0a 64 7a 5e d8 96 8f 05 96 8b 9e 61 b4 fd 74 2d 9f 5d 29 40 ad 56 d9 ad aa 0b c8 ce 69 5e b5 1c e9 e6 b3 75 fc 9f 92 81 b5 75 2d da 5a 03 39 d3 0d 1b ce 3f fd 3e 4f 57 1f 59 f5 ab 61 f0 20 29 f5 f5 57 19 6b 65 bb d9 b0 ee 3a 50 a5 f6 0b 0f c2 c2 e3 34 2c a5 Data Ascii: bO<:{}\|#60+.M&Kdwso+m"${/q/\|.YbI=x;0EY^A~B}-HwhmsHR k~Zt]fXwdz^at-])@Vi^uu-Z9?>OWYa )Wke:P4,
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 3b 4c 67 33 7a db db 9c db 3f cf b9 fd 3d 86 fd 81 cf 4b 75 1e 2a f0 e4 f4 94 c3 7b f7 38 39 39 61 36 9f 33 9b cf 7d c4 6b 08 38 51 4d ed e0 24 41 c7 31 3a 44 42 9b aa 66 5e 55 9c 1a 1f b8 e5 9c 23 89 22 06 a3 11 9b a3 11 c3 a8 42 d9 94 cf 4d 2f f2 e8 70 c2 b6 9e 53 38 dd ee 13 2f 58 01 ce a2 64 44 9d 5d e2 ee d7 3e c5 c6 dd 67 99 9e ff a3 cc 36 de c3 bb de f5 6e ca 22 e7 ce dd 3b e4 8b c6 0c ee 19 57 92 c6 64 bd 8c f3 fb fb 9c db 3f cf dd 3b 77 f8 89 5f f9 65 7e e9 97 7e 89 9f fe e9 9f 46 4a 45 bf 9f 30 1e 1f 93 65 7d 1e 7e f8 1a a3 d1 88 7b f7 8e 28 cb 02 ad 23 92 24 6e f1 a7 81 80 6a e4 fd b4 b3 d9 9c 7b f7 0e 42 b9 b8 1e d6 ba a0 dd 46 18 e3 ad 03 3a 14 6c 90 52 07 74 20 d7 6a 18 67 90 a9 ce e1 11 bd 1a 44 25 13 70 b9 9b c3 04 17 c1 b7 7f cb 07 38 77 Data Ascii: ;Lg3z?=Ku*{899a63}k8QM$A1:DBf^U#"BM/pS8/XdD]>g6n";Wd?;w_e~~FJE0e}~{(#$nj{BF:lRt jgD%p8w
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 92 d0 18 82 9a f5 e6 9c ef 44 a3 c7 1a e3 40 48 be f3 83 1b 5c 3e 2f 38 bc 3b a3 ce ef a0 d4 16 18 bf 0b 65 b3 7e c2 02 6f 96 17 ce 93 43 29 35 5f fd dc 6f b2 b3 77 81 de f6 79 a6 93 1a 84 43 a7 23 84 a9 a8 ca 53 6a 29 d1 c9 08 29 23 ea 6a 8e c6 79 53 75 36 44 08 a8 f3 13 8a f1 5d e2 fe 36 32 8a b1 55 81 42 a2 e3 1e b6 ce a9 67 87 90 8f 51 e9 00 9d 0c d1 49 9f 3a f8 6e 5b 9b a8 b3 5e 1a 6c eb 62 fb 75 23 ac c5 98 6a a9 f9 08 0f ae 21 11 5e 88 0a 48 53 58 e3 99 b0 92 6b 01 75 5e b8 52 02 a4 f5 ef 3a 8a 14 42 96 20 7a 68 6d b9 74 41 70 e4 1c 1b ca 22 36 86 9c cc 33 d2 26 b7 5d eb 8e c0 e9 3b 61 82 35 c4 e2 42 0e b9 03 63 a9 fc 4b a1 08 fb c5 3a 47 9c 24 6c 6d 6f d1 eb f7 18 9f 9c 32 9b fa 52 9e b3 f9 9c e3 d3 13 fa c3 01 9b db 9b 6c 6c 6c 60 b1 1c 6d 5d 61 Data Ascii: D@H\>/8;e~oC)5_owyC#Sj))#jySu6D]62UBgQI:n[^lbu#j!^HSXku^R:B zhmtAp"63&];a5BcK:G$lmo2Rlll`m]a
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 1b ac b4 1b 0c fa 03 1f b9 a9 79 d5 5d e3 fc cd 07 97 b9 6e e1 20 77 bf fc 11 e0 4f 69 8a 56 31 9b 5b 1e 5b 98 95 b6 be 5e 80 cd 81 19 5e fd 86 09 de f3 9e 16 d7 03 1f 78 4f 9f 1f f8 cf 3b 91 d1 d3 98 dc 16 f9 d5 e1 05 01 63 b8 35 31 c6 eb 6e de cf fe c9 71 f2 34 a5 33 d0 9c 3e 99 f0 23 ff 6a 8a 6f fa 8e 9b f8 b9 ef ce f8 d9 8f fc 1e af bc eb 9b 39 fa be bf e4 ba 6b e7 80 07 21 ff 15 58 f9 12 a4 c7 40 5f 2c da fc 15 c8 47 65 6b 44 b9 cf 90 db 41 6d 87 78 0f 13 e3 07 79 d5 3d b7 f2 aa 7b 0e 02 df 08 fc 30 9f fd dc 47 79 ed 57 fd 63 06 cb 6f e0 bb fe 55 83 07 bf b0 4c b7 57 73 c1 7f 52 b0 b6 ae e9 76 72 fe d3 af 8d b1 ad 39 c1 77 df d7 e2 4f ce 5e 02 3e c1 3b df fe 5d fc c2 7f ff b7 ec dd de 04 be 08 f9 9f c0 ea 83 90 1e c5 9a e5 a2 0f 57 16 77 b6 ee 88 08 Data Ascii: y]n wOiV1[[^^xO;c51nq43>#jo9k!X@_,GekDAmxy={0GyWcoULWsRvr9wO^>;]Ww
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 3f c9 33 1a 89 45 83 19 14 74 60 ab 71 d9 74 ce 3d 5d 2a d6 a3 6f 75 24 9c fb 28 30 56 29 82 45 4c a2 84 f2 d1 d1 c2 6b b8 8e 29 0b e9 33 7e 85 2c 30 18 9c 3f d6 a5 a9 08 e9 04 89 40 e7 b5 ef 9f 81 82 1e 86 a0 5c 6b 25 ca 16 46 6c 4f a2 9d 00 b2 9e 64 0c 32 17 fd ac 0d 05 c4 e4 ff 2d e3 ad 72 86 2b b3 df 8d 7c ad b0 5a 84 df 4d b8 ae 7c 62 08 b6 15 42 d0 49 73 ba 99 26 0a e6 e8 0d 3c 69 f8 79 81 95 85 a9 05 51 5a 44 ac 3b 27 83 da 6c 2d 55 53 7f 39 c0 d6 16 e9 1f a2 ca ab 2d 64 c6 5f 57 7d 9b 0d 2f 2b 19 a9 8f 38 2f cc d0 eb 89 66 90 19 94 17 bd 36 9a 8a 6d 65 c4 2c 2f 3e b4 e5 44 1a 36 4e ea 10 13 76 dd 1f 7a 4d 38 f4 50 db 4b a1 c4 31 e1 e1 a0 02 8b db 46 fd 5c b3 92 e4 85 56 56 b1 dc 0f 3f 3e 48 31 a6 62 5e ab 7c 0f 7f 8f 7e 2f cc a4 56 8c 74 a4 94 32 Data Ascii: ?3Et`qt=]*ou$(0V)ELk)3~,0?@\k%FlOd2-r+\|ZM\|bBIs&<iyQZD;'l-US9-d_W}/+8/f6me,/>D6NvzM8PK1F\VV?>H1b^\|~/Vt2
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: df 30 9f 78 28 e6 6c 4f 12 53 63 ab 4c 38 a1 53 6e 1a af f2 e0 4f d7 f8 d0 e3 87 f8 9d 87 7b fc ec 4d 55 86 1a 96 29 48 8d 62 3c 4a 58 68 19 3e b1 bf ce 27 a8 23 c8 d8 d3 c8 b8 61 7d c6 75 eb 14 57 4e 76 b9 7c 34 63 cb 90 61 2a 81 5a e6 fa 90 0f 4c d8 07 ff 31 39 ec 46 9a 22 f3 95 4c 6d 1f bc 5a d8 1d 85 7c 7c 16 1e 7c a2 ca 17 9e 18 e6 63 0f 4b 66 b3 08 ab 17 8e f9 f9 9b 1b fc fe 3b 35 bf f4 91 e7 f9 c7 83 8a eb c6 25 cf 2c 6a 92 18 97 a6 dc 22 45 7f 28 e1 a9 f3 5d 0e 7c 38 63 fe 39 81 1a 2a e2 81 2e 8a 69 52 90 cb 86 e9 73 55 f6 3d bf c8 e8 50 44 a5 29 48 95 cd 15 bf bb 22 f9 dd 07 db 6c 1b 3b c2 93 ff 61 17 b7 fd 1e 3c 3c db 66 6b 14 53 17 75 12 93 50 8d ba 2c 9b 1e 5f 38 66 f8 c2 5f 0e f1 92 8d 0d de 79 55 8f 57 6e 69 73 e5 58 66 19 ac 54 21 70 07 56 Data Ascii: 0x(lOScL8SnO{MU)Hb<JXh>'#a}uWNv\|4caZL19F"LmZ\|\|\|cKf;5%,j"E(]\|8c9.iRsU=PD)H"l;a<<fkSuP,_8f_yUWnisXfT!pV
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: fb e9 e6 3b ae e7 6b f7 7f 0d 80 17 3b fb 6f cf a9 c4 fb d3 47 7a 4c eb d5 d2 be 54 ea 35 a0 47 2f 53 2c af 68 a4 53 3f 67 0c 4e 3e 62 5c 1d f5 9a f5 dc 16 74 80 9b b9 7e fd 4f d2 53 73 f9 9c 79 96 21 8e 47 68 77 4e 73 7e e1 b4 5d 2b 46 61 90 64 08 14 0b d4 ab 8d 00 3c 91 33 0d 06 8a d0 27 21 d8 b6 7e 27 47 0f 2f 30 9c 64 b4 52 4d 46 95 1a 97 b1 b5 72 17 13 13 63 d4 1b 09 22 1d e3 4b 8f fc 47 52 62 ae b9 7a 94 c6 d0 31 c6 b6 08 a6 76 d4 a9 d5 04 f5 8a 22 89 15 ed 76 8a 4a 35 d5 2a 24 91 63 38 23 a8 d4 ec 21 12 2e cd b1 c3 49 e4 2a 57 6f 7e 41 3b 82 67 fc b4 88 7c 73 84 eb 25 37 c2 05 54 2f c4 86 c2 58 e2 9e 4f af cf 18 a0 25 ca 68 46 86 62 1a 43 12 ad 9c 93 a7 6b c7 3f eb 1d 28 5d 2b f8 d0 d1 72 d6 06 77 e2 53 3e 94 3e 25 6c 98 2e d6 ed 71 1f 49 20 2c b3 Data Ascii: ;k;oGzLT5G/S,hS?gN>b\t~OSsy!GhwNs~]+Fad<3'!~'G/0dRMFrc"KGRbz1v"vJ5$c8#!.IWo~A;g\|s%7T/XO%hFbCk?(]+rwS>>%l.qI ,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.17	49839	169.150.255.184	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:31 UTC	580	OUT	GET /pcapp/images/3rdparty/application/images/apps_73326_663e2383827ed.jpg HTTP/1.1 Host: repcdn.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045
2025-01-02 11:16:31 UTC	669	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:31 GMT Content-Type: application/octet-stream Content-Length: 47131 Connection: close x-amz-id-2: cAHYME8md8Bazkz0QYvj6BeWuCGFsGhKtvM+XibtWntjFxtfgp0pRJYwkP78LghEcNRfW0wjsnPG/LWAEepukNLV8TZtymkelm+S+0Ym6xM= x-amz-request-id: B1JVXTGFBSRPGHGX Last-Modified: Fri, 10 May 2024 13:39:16 GMT ETag: "0b80b598c0453f86c3447cd6a353f728" x-amz-server-side-encryption: AES256 x-amz-version-id: yuVhc6InDBw20xL4_X4Wq2jOxA0ogR1F X-77-NZT: EgwBqZb/tgHXzfkMAAwBJRPCMQG3/EcCAA X-77-NZT-Ray: 15b3c711458d07818f757667e6619633 X-77-Cache: HIT X-77-Age: 850381 Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:31 UTC	15715	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 00 7e 00 f9 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFHHCC~}!1AQa"q2
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 11 77 24 8a f1 81 2c 9a a7 2a 2e ce f2 a7 d2 5f cb e4 ff 00 ae c7 97 cb 1a de f4 5f 25 4f b5 1b 69 27 dd 3d 3f 2d 3a f7 3a cb 2f 89 9e 2a d3 6d 57 4a d5 8b ea 7a 72 7e ec 5a 6a 10 db ea 16 ca a0 05 da b6 da 8c 17 29 12 aa 0c 2c 56 72 58 a0 04 f4 38 23 78 ca 32 57 8b ba ee 8c 64 a7 07 ef c5 a5 aa 5d 13 fc fe 4d 7e 64 32 f8 af c2 97 4d e6 4d e1 9d 14 48 79 6f 2f 46 9e c5 49 ef 88 ed 75 89 e3 f7 e1 54 67 a0 03 8a 66 6e 49 ee ac fb af f8 72 e4 1f 10 34 3d 31 77 69 5e 19 d0 20 b9 1c a4 cb e1 f8 a6 99 18 0f 95 a2 bb be d4 2e 4c 4e ad 83 bb ec 72 e4 f6 ed 41 27 f7 a1 ff 00 09 a6 a3 fd d6 ff 00 be 6d 3f f9 0a 80 3f b3 51 83 23 73 fd f3 f9 b7 3f 90 eb e9 cf 4e df c7 35 13 76 92 b2 e5 fc 5f 73 f6 7d a0 97 f8 3b ff 00 2e ff 00 e4 52 73 99 9f db 77 f5 ff 00 1a e3 a8 Data Ascii: w$,.__%Oi'=?-::/mWJzr~Zj),VrX8#x2Wd]M~d2MMHyo/FIuTgfnIr4=1wi^ .LNrA'm??Q#s?N5v_s};.Rsw
2025-01-02 11:16:32 UTC	15032	IN	Data Raw: eb a9 23 d4 3c 5f e3 fb 9f 0d e9 f6 7a ce b1 25 ed 8f c2 9d 32 2b 8b 1f b3 ae a3 2c 02 2e 28 e0 30 f5 33 da 3c 49 57 08 ea e6 f4 1f 3e 1f 13 56 ac aa 2a 15 6a e1 aa 51 94 e9 d0 6b 96 12 a9 09 ce a4 6f 1b 50 9c 52 a4 a9 da c7 1d 6c 0d 25 96 e6 39 54 f0 90 86 0e 9c 31 90 c1 aa 38 5a f0 53 74 33 1c 34 64 eb e2 63 59 7b 58 61 61 4e ad 2a 90 a6 ff 00 db 39 dc ea 49 a8 2b f7 d0 7e d3 ba 07 8d 7e 35 a6 a9 af f8 df 46 36 7a 0f c2 8f 8f 5e 09 f0 6e af e3 5f 19 fc 18 91 db c7 96 1e 1f fd 9e b5 98 6c 34 8f 11 6b b2 ea ff 00 0e 6f f5 ad 2b 5f f1 0e bf 1f 87 26 f1 be 9f 26 a7 15 a9 99 7c 67 a1 47 14 7a 9c 12 13 cc 31 98 be 25 c7 56 af 07 52 bc 72 ac 2d 18 c6 76 4e 94 23 51 4d c6 9d 93 8f bd 3a b1 94 5c a2 f9 ad 2e 74 d2 92 31 a7 93 e1 f0 99 46 17 07 4a d4 7d be 6b 87 Data Ascii: #<_z%2+,.(03<IW>VjQkoPRl%9T18ZSt34dcY{XaaN9I+~~5F6z^n_l4ko+_&&\|gGz1%VRr-vN#QM:\.t1FJ}k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.17	49843	212.102.56.178	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:31 UTC	593	OUT	GET /pcapp/images/front_img/appstore-hint/index_1/in_background_auto_update_img.png HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045
2025-01-02 11:16:31 UTC	622	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:31 GMT Content-Type: image/png Content-Length: 11907 Connection: close x-amz-id-2: YZt7Gf8DYr0mCmbdoY+hYrAXHWwMyU792dFynt3DTR8nAEeerPUArPpe6sltyuftYFx9hTuZ8RY= x-amz-request-id: 8EMGKJ5Q09TB9S09 Last-Modified: Mon, 26 Aug 2024 13:32:29 GMT ETag: "35491e88f6f53ff50394c619887771b9" x-amz-server-side-encryption: AES256 x-amz-version-id: .xTofxGOeoHOpYpgd9WYExmqj9SBcc4k X-77-NZT: EgwB1GY4sQHXoPsHAAwBw7WvBgG3QGIOAA X-77-NZT-Ray: 1cb09c0e1f75e1fd8f757667daef2034 X-77-Cache: HIT X-77-Age: 523168 Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:31 UTC	11907	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ea 00 00 00 8c 08 06 00 00 00 b3 b7 ea c9 00 00 2e 4a 49 44 41 54 78 01 ed 9d 7d 70 95 d7 7d e7 8f 62 a3 1a 89 17 11 8c 6c 10 60 09 0c d8 80 63 70 1d 70 0a db 85 24 c6 dd d4 99 a6 4d ba 9b 9d 24 cd cb cc 36 b3 49 b6 6f b3 a9 d3 69 ec c9 a4 d9 4e d2 66 d3 b8 b3 f1 4c f3 47 92 4d d3 cd be 38 9b 66 ea ec d4 30 09 cc 2c 24 31 de b1 e8 1a 1c 03 01 b1 80 00 0b 33 bc 58 12 0e 8a ad 3d 9f 73 ef ef ea dc 87 e7 de fb dc ab 2b e9 91 f8 7e 66 34 92 ee 3d cf 79 3f e7 77 7e bf df 39 e7 69 b9 63 ed b6 51 27 84 10 42 88 3c 32 fa 06 27 84 10 42 88 dc 22 41 2d 84 10 42 e4 18 09 6a 21 84 10 22 c7 48 50 0b 21 84 10 39 46 82 5a 08 21 84 c8 31 12 d4 42 08 21 44 8e 91 a0 16 42 08 21 72 8c 04 b5 10 42 08 91 63 24 a8 85 10 Data Ascii: PNGIHDR.JIDATx}p}bl`cpp$M$6IoiNfLGM8f0,$13X=s+~f4=y?w~9icQ'B<2'B"A-Bj!"HP!9FZ!1B!DB!rBc$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.17	49844	212.102.56.178	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:31 UTC	561	OUT	GET /pcapp/images/3rdparty/application/videos/solitaire_category_video_2_webm.webm HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept-Encoding: identity;q=1, ;q=0 Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://pcapp.store/ Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045 Range: bytes=0-
2025-01-02 11:16:32 UTC	699	IN	HTTP/1.1 206 Partial Content Date: Thu, 02 Jan 2025 11:16:31 GMT Content-Type: application/octet-stream Content-Length: 426038 Connection: close x-amz-id-2: eaKop/5AFBi1LlIk7UKJ2XiCe5Zl4yMZqA4l2faXX56pMHAVoyv9gESllOYQiOvb36hLbuyZBboZ3aa09+fx1sISEaWjWlAiA8XdtW+uhqs= x-amz-request-id: 4RVM0WREPG757WDF Last-Modified: Wed, 05 Jun 2024 08:26:23 GMT ETag: "78b151f06a4e0f5c23ee128bf779c507" x-amz-server-side-encryption: AES256 x-amz-version-id: FhPYoZ3WVLvsHVRr7FUN16uT7l8z0PW9 X-77-NZT: EgwB1GY4sQHXr18JAAwBJRPCNAH3XUAEAA X-77-NZT-Ray: 1cb09c0e2fa03dfe8f7576677698c834 X-77-Cache: HIT X-77-Age: 614319 Server: CDN77-Turbo X-77-POP: frankfurtDE Content-Range: bytes 0-426037/426038
2025-01-02 11:16:32 UTC	15685	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 02 42 85 81 02 18 53 80 67 01 00 00 00 00 06 80 06 11 4d 9b 74 bb 4d bb 8b 53 ab 84 15 49 a9 66 53 ac 81 a1 4d bb 8b 53 ab 84 16 54 ae 6b 53 ac 81 d6 4d bb 8c 53 ab 84 12 54 c3 67 53 ac 82 01 26 4d bb 8d 53 ab 84 1c 53 bb 6b 53 ac 83 06 7f ca ec 01 00 00 00 00 00 00 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 49 a9 66 b0 2a d7 b1 83 0f 42 40 4d 80 8c 4c 61 76 66 36 30 2e 33 2e 31 30 30 57 41 8c 4c 61 76 66 36 30 2e 33 2e 31 30 30 44 89 88 40 Data Ascii: EBBBBBwebmBBSgMtMSIfSMSTkSMSTgS&MSSkSXIf*B@MLavf60.3.100WALavf60.3.100D@
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: d2 83 84 77 95 c7 d2 6e fb 3a 29 f7 66 4e 4a f2 e7 2f f7 d4 a7 01 b6 54 49 7b e6 3a ec b9 f4 1b b3 04 e1 ee bd 57 e4 7e d3 07 cf 1b 36 74 e8 d3 cd f6 af 16 ad 97 75 fb 04 27 8b 3f b3 11 38 4d 84 12 c5 58 3c fe f9 ab 34 fb 33 19 1e 08 a2 96 a5 06 89 0e df 0b f0 af b0 d0 70 5a 3a 8c 93 ff 80 70 63 fd 5c 0f ff 96 36 2e a7 da 18 db 31 74 db c5 22 8f 12 99 fe ff 3c 99 50 65 2d 33 0a f1 61 f2 ef 6a e4 ab 7a e2 d2 b8 07 f2 2f fc ed 79 d9 79 c3 fa 42 84 f4 ce 5e 45 26 61 c1 91 be a7 ed 1d 5a e8 6f b1 8f 18 34 10 40 9c 58 27 1e 5e 02 1c 25 80 0f 5e e9 b0 4c 03 bf 9a 56 c8 96 64 aa 2b 13 01 2b 9a 7a a5 5b c9 43 c0 a8 7d ec b9 c2 e3 4a 19 04 1f 0a ef f9 ac cd e3 fe cf 08 6a fc 25 34 9b 1a 7e bc 21 fe a8 f3 01 2f 16 c5 7d 58 50 c0 2b c7 d9 b8 4b 60 5c d0 38 42 da 70 Data Ascii: wn:)fNJ/TI{:W~6tu'?8MX<43pZ:pc\6.1t"<Pe-3ajz/yyB^E&aZo4@X'^%^LVd++z[C}Jj%4~!/}XP+K`\8Bp
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: f0 6a 6f b5 bf 60 62 db ef 2d 0d 86 a1 94 83 d0 25 74 7b dc 92 65 40 46 07 58 ec 5c 50 67 ea 2f 53 cc e4 b2 a3 bc 5e e1 82 67 06 46 3a 4f 70 67 36 1c 30 bc 23 ff ac 5b fa 1d e3 37 9d b9 93 a7 67 79 6c df 53 66 e1 4f 7b 5b 3a 04 3e 97 18 97 d0 8d 95 9e d0 00 a3 4b 61 81 00 c8 00 86 00 40 92 f1 a1 39 04 00 14 73 b7 8a 27 80 56 3c 9d 0c 00 00 00 05 a2 7f 43 a8 db 99 0b 0c 89 b5 fe da 4d d8 a9 73 f4 9d 13 d1 85 76 a1 80 d9 3c 91 63 54 12 74 74 30 f6 03 5a 56 ae 6a 57 21 69 ba a0 ab b6 94 a1 d9 16 24 1e 1d f2 79 1b 71 9c f2 40 b5 ac 4e 1f b3 e2 7c ab 34 18 a4 56 34 cc 5a be 7c 63 34 ba 94 2b 0d 6f 1d ba 00 a5 30 73 59 85 c7 66 53 db 4a 32 c6 54 6f c1 a6 c8 e1 59 34 1d ea f3 0d 4d a8 a6 6a fd 3b f5 16 8f 83 af 38 82 f5 17 62 08 61 d4 18 23 da cb 0e 38 c3 a4 84 Data Ascii: jo`b-%t{e@FX\Pg/S^gF:Opg60#[7gylSfO{[:>Ka@9s'V<CMsv<cTtt0ZVjW!i$yq@N\|4V4Z\|c4+o0sYfSJ2ToY4Mj;8ba#8
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 4f c8 61 c9 92 3d dd 3c cd 72 2d 5a 62 de 22 04 f8 1f ac b1 3a 47 1b 65 08 71 6f 00 39 58 5a 54 86 f5 bb 66 b7 57 15 8c 01 6e 8d 60 a8 61 c3 7f 6e 8d 26 c9 b2 dd 18 b8 53 da 1b 9e 6c 6c 9c e3 15 3a c0 8a ee 74 7e 4b 8c a8 c3 76 fc 3b d2 af 71 bc 52 bf 35 65 b2 a3 9d cd c3 ff 56 c0 35 aa 15 35 16 84 89 e7 b5 f7 27 f5 80 3e a4 f0 3d d1 26 36 b3 df 7f 86 0d 09 ae 18 43 76 c7 5b f3 52 2a 8e 5f 4b df 74 90 d9 69 ae fc a3 82 02 42 67 28 aa e5 30 d4 dc 19 85 b2 05 f7 5d bb 04 b0 5a ac 7f d2 8b b4 d2 38 bb 35 de fe 48 6d 6b 85 9d 38 9a 1a 57 63 a9 42 82 3e e9 8a 6f fe b7 72 bc 1b e1 d7 f0 cf c3 f3 73 ae e4 59 61 89 c8 af 69 e7 d5 85 74 cd 63 bc e3 5d 99 58 7d 0b 45 b8 fd 9f 48 6b 71 64 95 77 2f e2 1e 39 3e 19 10 95 24 bf 18 bf fc ed 5a 30 a8 66 44 dc 0a c3 b9 80 Data Ascii: Oa=<r-Zb":Geqo9XZTfWn`an&Sll:t~Kv;qR5eV55'>=&6Cv[R*_KtiBg(0]Z85Hmk8WcB>orsYaitc]X}EHkqdw/9>$Z0fD
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 4f 78 8e 27 ec f5 d8 20 00 e6 12 0c ab 56 37 78 c4 65 60 14 84 ff 34 d7 dc 83 42 05 ff 8a 04 30 58 00 f2 32 f8 8d 29 36 5c 40 07 aa 3b 77 83 df 47 3f eb 4c a1 dd 11 4a 99 73 c6 a9 14 9f bd 74 44 ca c7 d3 b8 20 64 df ee 3b 10 31 3f 72 17 89 20 08 14 92 8f a1 82 83 c6 cb ec b4 00 22 14 01 04 07 9e f4 ac 0d bb cb 54 1c ae 71 d2 d9 9f 86 da 8c 0a 14 be b1 7b e7 07 e3 5e 2f 45 0a b3 fb 2e 37 94 0a fe 13 55 8c 9c 29 fc 1b 0b 18 02 92 f6 fb cc c8 4e 81 a0 a9 ad 3d 38 5a b4 7e 01 8e ac ba 02 3f b3 31 2b 9b fb f2 40 80 05 65 ab bd d6 0c a1 f3 16 66 52 2c f8 6c 8b a2 97 31 cc 34 0a 1e 8e 3c e7 eb 17 29 de 4a 9f 53 5c 20 bc 90 56 dd c9 55 76 d3 31 18 e7 9e 21 c7 8c fb b9 d6 20 5c b4 11 a5 44 5a 50 ca 08 14 6c b2 69 6c 80 0b 87 20 e9 cc 36 4a 5f e2 f4 b5 23 3d 1d b8 Data Ascii: Ox' V7xe`4B0X2)6\@;wG?LJstD d;1?r "Tq{^/E.7U)N=8Z~?1+@efR,l14<)JS\ VUv1! \DZPlil 6J_#=
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 12 3f 7e 39 35 09 a8 54 91 ad 83 e8 8a bc 25 06 bd 15 05 c3 b0 1a b0 cf 0d 7c ba 03 f7 85 54 f9 54 67 13 81 8c d6 f9 db dc f2 85 da 51 bc b0 4c 4d ec 2b 7a 3b 0e de a0 39 3d 16 1b 07 81 ad d8 aa f9 2e 96 96 a5 db e8 bd 9f f7 fa 07 cc 4c 54 e1 74 4b 20 20 42 f3 15 e7 4e d8 26 00 b3 49 2a 68 22 9f d0 b5 de f6 88 b4 45 93 b0 6a 5a fa 06 f7 d5 f0 4f 44 70 50 f7 c2 78 fe bb 1c fa 14 35 07 9f 6e 07 a7 4a 14 08 96 f4 db f4 13 58 3b 0b b5 12 9a cf c8 4b 28 bb e0 d6 b6 46 1c fd e2 f5 ed a5 30 02 76 dc 19 32 6a d1 35 50 54 9b 80 64 72 2a 5c 64 1f 84 bb d1 a7 08 44 c1 25 0c c8 22 21 2e 4a d8 8e a9 83 e9 7c b4 df 96 03 af 49 7c 77 4f 7d 1b ea 62 e4 a0 b2 0b 1f f6 c4 e1 b2 9a 8e e3 88 58 e2 5a 16 a6 df 10 ce 0b 4b 12 90 97 cb b2 52 fb bc 06 c0 a8 99 3e 87 6c be b9 8b Data Ascii: ?~95T%\|TTgQLM+z;9=.LTtK BN&Ih"EjZODpPx5nJX;K(F0v2j5PTdr\dD%"!.J\|I\|wO}bXZKR>l
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 32 b2 29 4e 98 06 0e d9 43 45 a9 fd 5c 94 f0 53 67 fd 98 41 87 70 62 69 b3 31 6d a1 ef d4 43 ef a7 d5 37 8b 67 6f 7f 48 49 1f 2c 2c 8c 9d a9 3d 28 1c be 8d c4 1c ec 09 2d e2 ff eb e7 b4 26 80 cf 89 ef 3a 93 e7 3b 89 a0 cd 11 de a1 76 0d c9 52 d0 f3 e5 22 be 47 36 9a c6 1b 53 e4 a4 3b 26 6b 73 98 e1 e2 9f 0e a7 e7 84 69 da e8 1a d4 c3 b5 e7 17 15 ce 36 38 1e db a1 80 0f dd 6b fc 93 d3 dd bb dd b2 2b 4f b5 7b 29 a4 13 64 e5 bb c2 a8 08 05 e4 d7 37 5c 6f 01 4f 91 36 a3 aa 09 0c 1e c9 e5 eb 30 16 38 5a 51 c2 c6 2d ea d6 d3 18 30 56 fa fd ca 1c c5 ce 4e c8 36 75 29 52 13 d4 67 c3 f0 ab fa 31 15 3c b8 1e fa 3a 4b a1 b7 ff 44 3e 90 6c a2 b0 a0 e1 a7 66 6f c6 cf 41 50 a1 52 d3 3e 2f 52 8e 6f ba 79 a0 0b 40 a6 e8 2f 39 ca f6 87 fb 1e 6d 50 fc 8e 84 88 eb 38 39 83 Data Ascii: 2)NCE\SgApbi1mC7goHI,,=(-&:;vR"G6S;&ksi68k+O{)d7\oO608ZQ-0VN6u)Rg1<:KD>lfoAPR>/Roy@/9mP89
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: f4 57 38 95 85 cd 07 ce 15 e8 ab ee b1 31 77 c3 67 f8 fd 51 2b 71 6b b4 f2 88 9e 76 af 9d c3 4e 0d 69 b8 4f ce 57 22 f1 ee 02 0c eb 95 b8 22 29 1c d5 1f 1b 21 63 b4 28 7e 8e f5 79 3f 31 ab 2c 40 57 05 59 7a eb 0e a2 ef 7a a7 3e c3 8d 89 0a bc 07 87 9c 9a c9 63 ce ef 48 e9 31 82 cb 20 05 1d 08 b2 17 fc 00 a3 40 a0 81 06 1f 00 86 00 40 92 f1 41 3e 04 00 06 70 00 00 00 00 00 49 5b be be de b0 3b 3c 02 b9 c4 81 da e0 0e 17 85 53 3f f4 3a 92 e9 10 5c 59 40 b6 6a 1d 3f 58 11 68 b0 2b 53 91 2d d7 3b 0d dd cb dd 6f a4 d8 6e f2 aa f0 ff c7 cd 70 59 b3 1d eb 4d f2 30 68 ff 74 d5 c0 f5 88 c7 c1 d8 00 7c 13 58 01 77 d6 89 06 21 ef f4 6a 08 19 39 81 3b 82 f4 67 d5 11 87 d8 ae d1 00 50 d7 26 ba 01 4f bd fe 26 56 fd ac 9c 19 92 06 37 85 80 26 dc 9f 51 0c 58 97 db 65 b4 Data Ascii: W81wgQ+qkvNiOW"")!c(~y?1,@WYzz>cH1 @@A>pI[;<S?:\Y@j?Xh+S-;onpYM0ht\|Xw!j9;gP&O&V7&QXe
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 05 f0 20 5c ce 9e 92 69 c2 94 76 82 33 6c a2 44 60 24 98 d8 b1 c7 bf 36 90 86 36 21 70 50 09 84 98 9d a5 99 16 90 5b d8 7d a8 00 7c fb 06 88 42 08 b0 93 11 4f da d0 88 4d 83 4a 61 ed eb 04 cf 08 bd 40 f8 8e 42 cf a4 07 fe 5c 37 4e 04 b4 84 be d3 e5 67 2f df 36 72 92 85 cd 58 67 10 a2 41 17 96 6a e3 f2 f4 6e fa c3 88 29 13 bb a0 46 9f 3f 4f 1b ee bc 43 1a 49 d2 63 b1 06 79 1e 4c 6d db 88 62 da 81 d6 a4 be 60 0e 8a 97 79 c8 aa d7 9f 5c 60 90 b0 00 0b 1f 1a 37 32 f6 15 d5 50 1e 7c 8e 5d 5c 61 b2 5c a3 f4 24 4b 2f 83 4b 9e 81 dd d5 4f 58 e2 ef 67 33 4f 17 09 89 6b 35 73 3d f0 97 2f 81 6f 17 d6 4e d1 64 df ab 9d dd a7 19 12 a0 b9 d8 f0 a2 ee 31 85 84 49 03 2a 59 76 7b 71 2c c5 fe 1f ae 2d 3e 62 e4 5d 16 6b 3d 78 ba 4f 13 2c be 42 fd d5 83 2c 28 ec ec cf df bd Data Ascii: \iv3lD`$66!pP[}\|BOMJa@B\7Ng/6rXgAjn)F?OCIcyLmb`y\`72P\|]\a\$K/KOXg3Ok5s=/oNd1I*Yv{q,->b]k=xO,B,(
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 76 67 60 72 4d 4b e1 a2 60 b4 81 f0 8a 79 b4 65 d7 42 64 2a 3e 85 c2 f1 3a 49 35 34 7d 58 7d 9d 69 4f 68 a9 a4 cb 6c 5f 4c df 91 da 29 b8 c8 ba 90 10 a0 58 08 d6 6c 01 a1 37 93 06 7d 75 c2 3a 04 68 d5 78 28 89 d9 09 24 f4 7e ca 58 61 4e 0a c7 a8 22 a1 7e 49 72 a6 e7 9a fc 85 3e 00 ad cb f2 86 15 f9 b6 c4 de 07 7c 54 22 8f 11 92 0c 6c 74 c6 0b 62 0c c8 14 12 41 a7 92 62 65 b4 ee 43 f6 03 b4 3e 0f 7c 98 f3 5d 83 a9 3f 96 87 48 26 52 c3 6b 7d ac 77 98 63 a1 a0 ba d6 91 9e d1 90 83 c1 7a 1e d8 d8 f6 c6 90 a0 0f 97 08 1f 0c 27 ab 1f 10 67 4c c8 34 cb 6f 95 73 3a 41 05 91 bd 4a e9 0c 4d 86 28 b9 70 a0 dc 0b 5f cc 30 48 1e 9b 00 ce 0a 36 61 4d 67 82 49 df 20 f2 f7 c2 24 f3 3d 20 d2 44 1a de 95 5f 5b 1f 00 a3 49 4b 81 0b 54 00 86 00 40 92 f1 01 3e 04 00 36 76 85 Data Ascii: vg`rMK`yeBd*>:I54}X}iOhl_L)Xl7}u:hx($~XaN"~Ir>\|T"ltbAbeC>\|]?H&Rk}wcz'gL4os:AJM(p_0H6aMgI $= D_[IKT@>6v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.17	49848	159.223.101.159	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:32 UTC	924	OUT	POST /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive Content-Length: 96 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Accept: / Origin: https://pcapp.store Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
2025-01-02 11:16:32 UTC	96	OUT	Data Raw: 7b 22 63 22 3a 22 66 72 6f 6e 74 2f 69 6e 73 74 61 6c 6c 69 6e 67 22 2c 22 61 22 3a 22 69 6e 73 74 61 6c 6c 53 74 61 74 75 73 22 2c 22 70 22 3a 7b 22 67 75 69 64 22 3a 22 43 31 42 38 32 37 34 32 2d 32 32 36 37 2d 34 45 35 30 2d 38 42 31 45 2d 35 32 35 42 42 31 33 42 34 41 33 34 22 7d 7d Data Ascii: {"c":"front/installing","a":"installStatus","p":{"guid":"C1B82742-2267-4E50-8B1E-525BB13B4A34"}}
2025-01-02 11:16:32 UTC	551	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:32 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: https://pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:32 UTC	44	IN	Data Raw: 32 31 0d 0a 7b 22 73 74 61 74 65 22 3a 22 6f 6b 22 2c 22 72 65 73 75 6c 74 22 3a 22 73 74 61 72 74 65 64 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 21{"state":"ok","result":"started"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.17	49851	207.246.91.177	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:32 UTC	235	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_menu_store&evt_action=created&&eng_time=1735822748312&nocache=6364296 HTTP/1.1 Connection: Keep-Alive User-Agent: WinHTTP 1.0 Host: pcapp.store
2025-01-02 11:16:32 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:32 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.17	49846	18.173.205.91	443	2936	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:32 UTC	702	OUT	GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":11,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735844083&nocache=10681 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-02 11:16:32 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 02 Jan 2025 11:16:19 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 b542963649ffc3f71c6540a2347be55a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: jGMsg6ZIGqqhhLRyG6kZt9CAiHsEH3aw7jv1LKqThKSTSrP2wbK6Gw== Age: 14
2025-01-02 11:16:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.17	49854	207.246.91.177	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:32 UTC	284	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_hint&evt_action=show&version=fa.2001g&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&eng_time=1735822752290&nocache=6364640 HTTP/1.1 Connection: Keep-Alive User-Agent: WinHTTP 1.0 Host: pcapp.store
2025-01-02 11:16:32 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:32 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:32 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.17	49855	207.246.91.177	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:32 UTC	82	OUT	GET //src/app/appStore.js HTTP/1.1 Host: pcapp.store Cache-Control: no-cache
2025-01-02 11:16:32 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:32 GMT Content-Type: application/javascript Content-Length: 107074 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:32 UTC	16019	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 4f 76 65 72 6c 6f 61 64 59 69 65 6c 64 28 65 2c 20 64 29 20 7b 0a 20 20 74 68 69 73 2e 76 20 3d 20 65 2c 20 74 68 69 73 2e 6b 20 3d 20 64 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 61 70 70 6c 79 44 65 63 6f 72 61 74 65 64 44 65 73 63 72 69 70 74 6f 72 28 69 2c 20 65 2c 20 72 2c 20 6e 2c 20 6c 29 20 7b 0a 20 20 76 61 72 20 61 20 3d 20 7b 7d 3b 0a 20 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 69 29 20 7b 0a 20 20 20 20 61 5b 69 5d 20 3d 20 6e 5b 69 5d 3b 0a 20 20 7d 29 2c 20 61 2e 65 6e 75 6d 65 72 61 62 6c 65 20 3d 20 21 21 61 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 20 61 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 3d 20 21 21 61 2e 63 6f 6e 66 69 67 75 Data Ascii: function _OverloadYield(e, d) { this.v = e, this.k = d;}function _applyDecoratedDescriptor(i, e, r, n, l) { var a = {}; return Object.keys(n).forEach(function (i) { a[i] = n[i]; }), a.enumerable = !!a.enumerable, a.configurable = !!a.configu
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 65 20 3d 20 6e 2e 65 6c 65 6d 65 6e 74 73 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 73 20 3d 20 30 3b 20 73 20 3c 20 65 2e 6c 65 6e 67 74 68 20 2d 20 31 3b 20 73 2b 2b 29 20 66 6f 72 20 28 76 61 72 20 61 20 3d 20 73 20 2b 20 31 3b 20 61 20 3c 20 65 2e 6c 65 6e 67 74 68 3b 20 61 2b 2b 29 20 69 66 20 28 65 5b 73 5d 2e 6b 65 79 20 3d 3d 3d 20 65 5b 61 5d 2e 6b 65 79 20 26 26 20 65 5b 73 5d 2e 70 6c 61 63 65 6d 65 6e 74 20 3d 3d 3d 20 65 5b 61 5d 2e 70 6c 61 63 65 6d 65 6e 74 29 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 44 75 70 6c 69 63 61 74 65 64 20 65 6c 65 6d 65 6e 74 20 28 22 20 2b 20 65 5b 73 5d 2e 6b 65 79 20 2b 20 22 29 22 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a Data Ascii: e = n.elements; for (var s = 0; s < e.length - 1; s++) for (var a = s + 1; a < e.length; a++) if (e[s].key === e[a].key && e[s].placement === e[a].placement) throw new TypeError("Duplicated element (" + e[s].key + ")"); } }
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 0a 20 20 20 20 76 20 3d 20 64 20 26 26 20 64 28 64 28 76 61 6c 75 65 73 28 5b 5d 29 29 29 3b 0a 20 20 76 20 26 26 20 76 20 21 3d 3d 20 72 20 26 26 20 6e 2e 63 61 6c 6c 28 76 2c 20 61 29 20 26 26 20 28 70 20 3d 20 76 29 3b 0a 20 20 76 61 72 20 67 20 3d 20 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 50 72 6f 74 6f 74 79 70 65 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 47 65 6e 65 72 61 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 70 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 64 65 66 69 6e 65 49 74 65 72 61 74 6f 72 4d 65 74 68 6f 64 73 28 74 29 20 7b 0a 20 20 20 20 5b 22 6e 65 78 74 22 2c 20 22 74 68 72 6f 77 22 2c 20 22 72 65 74 75 72 6e 22 5d 2e 66 6f 72 45 61 63 Data Ascii: getPrototypeOf, v = d && d(d(values([]))); v && v !== r && n.call(v, a) && (p = v); var g = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(p); function defineIteratorMethods(t) { ["next", "throw", "return"].forEac
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 5f 77 72 61 70 4e 61 74 69 76 65 53 75 70 65 72 28 74 29 20 7b 0a 20 20 76 61 72 20 72 20 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 4d 61 70 20 3f 20 6e 65 77 20 4d 61 70 28 29 20 3a 20 76 6f 69 64 20 30 3b 0a 20 20 72 65 74 75 72 6e 20 5f 77 72 61 70 4e 61 74 69 76 65 53 75 70 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 69 66 20 28 6e 75 6c 6c 20 3d 3d 3d 20 74 20 7c 7c 20 21 5f 69 73 4e 61 74 69 76 65 46 75 6e 63 74 69 6f 6e 28 74 29 29 20 72 65 74 75 72 6e 20 74 3b 0a 20 20 20 20 69 66 20 28 22 66 75 6e 63 74 69 6f 6e 22 20 21 3d 20 74 79 70 65 6f 66 20 74 29 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 Data Ascii: _wrapNativeSuper(t) { var r = "function" == typeof Map ? new Map() : void 0; return _wrapNativeSuper = function (t) { if (null === t \|\| !_isNativeFunction(t)) return t; if ("function" != typeof t) throw new TypeError("Super expression must eit
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 7c 7c 20 61 70 70 6c 79 44 65 63 73 32 32 30 33 46 61 63 74 6f 72 79 28 29 29 28 65 2c 20 74 2c 20 72 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 61 70 70 6c 79 44 65 63 73 32 32 30 33 52 46 61 63 74 6f 72 79 28 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 41 64 64 49 6e 69 74 69 61 6c 69 7a 65 72 4d 65 74 68 6f 64 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 72 29 20 7b 0a 20 20 20 20 20 20 21 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 2e 76 29 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 74 74 65 6d 70 74 65 64 20 74 6f 20 63 61 6c 6c 20 61 64 64 49 6e 69 74 69 61 6c 69 7a 65 72 20 61 66 74 65 72 20 64 65 63 6f 72 61 74 69 6f 6e 20 77 61 73 20 Data Ascii: \|\| applyDecs2203Factory())(e, t, r);}function applyDecs2203RFactory() { function createAddInitializerMethod(e, t) { return function (r) { !function (e, t) { if (e.v) throw Error("attempted to call addInitializer after decoration was
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 28 32 20 3d 3d 3d 20 6f 20 3f 20 77 5b 41 5d 20 3a 20 69 2e 63 61 6c 6c 2e 62 69 6e 64 28 77 5b 41 5d 29 29 20 3a 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 20 6e 2c 20 77 29 29 2c 20 50 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 20 53 79 6d 62 6f 6c 2e 6d 65 74 61 64 61 74 61 20 7c 7c 20 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 53 79 6d 62 6f 6c 2e 6d 65 74 61 64 61 74 61 22 29 2c 20 7b 0a 20 20 20 20 20 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 20 21 30 2c 0a 20 20 20 20 20 20 65 6e 75 6d 65 72 61 62 6c 65 3a 20 21 30 2c 0a 20 20 20 20 20 20 76 61 6c 75 65 3a 20 74 0a 20 20 20 20 7d 29 Data Ascii: (2 === o ? w[A] : i.call.bind(w[A])) : Object.defineProperty(e, n, w)), P; } function u(e, t) { return Object.defineProperty(e, Symbol.metadata \|\| Symbol.for("Symbol.metadata"), { configurable: !0, enumerable: !0, value: t })
2025-01-02 11:16:32 UTC	9135	IN	Data Raw: 72 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 74 68 69 73 32 2e 68 61 6e 64 6c 65 45 72 72 6f 72 28 65 72 72 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 68 61 6e 64 6c 65 45 72 72 6f 72 28 65 72 72 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 20 20 7d 2c 20 7b 0a 20 20 20 20 6b 65 79 3a 20 22 6f 70 65 6e 42 72 6f 77 73 65 72 4c 69 6e 6b 22 2c 0a 20 20 20 20 76 61 6c 75 65 3a 20 66 75 6e 63 74 69 6f 6e 20 6f 70 65 6e 42 72 6f 77 73 65 72 4c 69 6e 6b 28 6c 69 6e 6b 29 20 7b 0a 20 20 20 20 20 20 5f 73 75 70 65 72 50 72 6f 70 Data Ascii: rr) { _this2.handleError(err); } }); } catch (err) { this.handleError(err); return undefined; } } }, { key: "openBrowserLink", value: function openBrowserLink(link) { _superProp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.17	49852	207.246.91.177	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:32 UTC	82	OUT	GET //src/app/appOffer.js HTTP/1.1 Host: pcapp.store Cache-Control: no-cache
2025-01-02 11:16:32 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:32 GMT Content-Type: application/javascript Content-Length: 105015 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:32 UTC	16019	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 4f 76 65 72 6c 6f 61 64 59 69 65 6c 64 28 65 2c 20 64 29 20 7b 0a 20 20 74 68 69 73 2e 76 20 3d 20 65 2c 20 74 68 69 73 2e 6b 20 3d 20 64 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 61 70 70 6c 79 44 65 63 6f 72 61 74 65 64 44 65 73 63 72 69 70 74 6f 72 28 69 2c 20 65 2c 20 72 2c 20 6e 2c 20 6c 29 20 7b 0a 20 20 76 61 72 20 61 20 3d 20 7b 7d 3b 0a 20 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 69 29 20 7b 0a 20 20 20 20 61 5b 69 5d 20 3d 20 6e 5b 69 5d 3b 0a 20 20 7d 29 2c 20 61 2e 65 6e 75 6d 65 72 61 62 6c 65 20 3d 20 21 21 61 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 20 61 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 3d 20 21 21 61 2e 63 6f 6e 66 69 67 75 Data Ascii: function _OverloadYield(e, d) { this.v = e, this.k = d;}function _applyDecoratedDescriptor(i, e, r, n, l) { var a = {}; return Object.keys(n).forEach(function (i) { a[i] = n[i]; }), a.enumerable = !!a.enumerable, a.configurable = !!a.configu
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 65 20 3d 20 6e 2e 65 6c 65 6d 65 6e 74 73 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 73 20 3d 20 30 3b 20 73 20 3c 20 65 2e 6c 65 6e 67 74 68 20 2d 20 31 3b 20 73 2b 2b 29 20 66 6f 72 20 28 76 61 72 20 61 20 3d 20 73 20 2b 20 31 3b 20 61 20 3c 20 65 2e 6c 65 6e 67 74 68 3b 20 61 2b 2b 29 20 69 66 20 28 65 5b 73 5d 2e 6b 65 79 20 3d 3d 3d 20 65 5b 61 5d 2e 6b 65 79 20 26 26 20 65 5b 73 5d 2e 70 6c 61 63 65 6d 65 6e 74 20 3d 3d 3d 20 65 5b 61 5d 2e 70 6c 61 63 65 6d 65 6e 74 29 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 44 75 70 6c 69 63 61 74 65 64 20 65 6c 65 6d 65 6e 74 20 28 22 20 2b 20 65 5b 73 5d 2e 6b 65 79 20 2b 20 22 29 22 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a Data Ascii: e = n.elements; for (var s = 0; s < e.length - 1; s++) for (var a = s + 1; a < e.length; a++) if (e[s].key === e[a].key && e[s].placement === e[a].placement) throw new TypeError("Duplicated element (" + e[s].key + ")"); } }
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 0a 20 20 20 20 76 20 3d 20 64 20 26 26 20 64 28 64 28 76 61 6c 75 65 73 28 5b 5d 29 29 29 3b 0a 20 20 76 20 26 26 20 76 20 21 3d 3d 20 72 20 26 26 20 6e 2e 63 61 6c 6c 28 76 2c 20 61 29 20 26 26 20 28 70 20 3d 20 76 29 3b 0a 20 20 76 61 72 20 67 20 3d 20 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 50 72 6f 74 6f 74 79 70 65 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 47 65 6e 65 72 61 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 70 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 64 65 66 69 6e 65 49 74 65 72 61 74 6f 72 4d 65 74 68 6f 64 73 28 74 29 20 7b 0a 20 20 20 20 5b 22 6e 65 78 74 22 2c 20 22 74 68 72 6f 77 22 2c 20 22 72 65 74 75 72 6e 22 5d 2e 66 6f 72 45 61 63 Data Ascii: getPrototypeOf, v = d && d(d(values([]))); v && v !== r && n.call(v, a) && (p = v); var g = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(p); function defineIteratorMethods(t) { ["next", "throw", "return"].forEac
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 5f 77 72 61 70 4e 61 74 69 76 65 53 75 70 65 72 28 74 29 20 7b 0a 20 20 76 61 72 20 72 20 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 4d 61 70 20 3f 20 6e 65 77 20 4d 61 70 28 29 20 3a 20 76 6f 69 64 20 30 3b 0a 20 20 72 65 74 75 72 6e 20 5f 77 72 61 70 4e 61 74 69 76 65 53 75 70 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 69 66 20 28 6e 75 6c 6c 20 3d 3d 3d 20 74 20 7c 7c 20 21 5f 69 73 4e 61 74 69 76 65 46 75 6e 63 74 69 6f 6e 28 74 29 29 20 72 65 74 75 72 6e 20 74 3b 0a 20 20 20 20 69 66 20 28 22 66 75 6e 63 74 69 6f 6e 22 20 21 3d 20 74 79 70 65 6f 66 20 74 29 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 Data Ascii: _wrapNativeSuper(t) { var r = "function" == typeof Map ? new Map() : void 0; return _wrapNativeSuper = function (t) { if (null === t \|\| !_isNativeFunction(t)) return t; if ("function" != typeof t) throw new TypeError("Super expression must eit
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 7c 7c 20 61 70 70 6c 79 44 65 63 73 32 32 30 33 46 61 63 74 6f 72 79 28 29 29 28 65 2c 20 74 2c 20 72 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 61 70 70 6c 79 44 65 63 73 32 32 30 33 52 46 61 63 74 6f 72 79 28 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 41 64 64 49 6e 69 74 69 61 6c 69 7a 65 72 4d 65 74 68 6f 64 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 72 29 20 7b 0a 20 20 20 20 20 20 21 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 2e 76 29 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 74 74 65 6d 70 74 65 64 20 74 6f 20 63 61 6c 6c 20 61 64 64 49 6e 69 74 69 61 6c 69 7a 65 72 20 61 66 74 65 72 20 64 65 63 6f 72 61 74 69 6f 6e 20 77 61 73 20 Data Ascii: \|\| applyDecs2203Factory())(e, t, r);}function applyDecs2203RFactory() { function createAddInitializerMethod(e, t) { return function (r) { !function (e, t) { if (e.v) throw Error("attempted to call addInitializer after decoration was
2025-01-02 11:16:32 UTC	16384	IN	Data Raw: 28 32 20 3d 3d 3d 20 6f 20 3f 20 77 5b 41 5d 20 3a 20 69 2e 63 61 6c 6c 2e 62 69 6e 64 28 77 5b 41 5d 29 29 20 3a 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 20 6e 2c 20 77 29 29 2c 20 50 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 20 53 79 6d 62 6f 6c 2e 6d 65 74 61 64 61 74 61 20 7c 7c 20 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 53 79 6d 62 6f 6c 2e 6d 65 74 61 64 61 74 61 22 29 2c 20 7b 0a 20 20 20 20 20 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 20 21 30 2c 0a 20 20 20 20 20 20 65 6e 75 6d 65 72 61 62 6c 65 3a 20 21 30 2c 0a 20 20 20 20 20 20 76 61 6c 75 65 3a 20 74 0a 20 20 20 20 7d 29 Data Ascii: (2 === o ? w[A] : i.call.bind(w[A])) : Object.defineProperty(e, n, w)), P; } function u(e, t) { return Object.defineProperty(e, Symbol.metadata \|\| Symbol.for("Symbol.metadata"), { configurable: !0, enumerable: !0, value: t })
2025-01-02 11:16:32 UTC	7076	IN	Data Raw: 65 20 21 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 50 61 72 61 6d 65 74 65 72 20 5c 22 73 68 6f 75 6c 64 48 69 64 65 5c 22 20 66 6f 72 20 41 70 70 4f 66 66 65 72 2e 6c 6f 61 64 53 74 6f 72 65 57 69 6e 64 6f 77 20 73 68 6f 75 6c 64 20 68 61 76 65 20 74 79 70 65 20 62 6f 6f 6c 65 61 6e 20 69 6e 73 74 65 61 64 20 6f 66 20 22 2e 63 6f 6e 63 61 74 28 5f 74 79 70 65 6f 66 28 73 68 6f 75 6c 64 48 69 64 65 29 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 5f 73 75 70 65 72 50 72 6f 70 47 65 74 28 41 70 70 4f 66 66 65 72 2c 20 22 6c 6f 61 64 53 74 6f 72 65 57 69 6e 64 6f 77 22 2c 20 74 68 69 73 2c 20 33 29 28 5b 71 75 65 72 79 5d 29 3b 0a 20 20 20 20 20 20 20 Data Ascii: e !== "boolean") { throw new Error("Parameter \"shouldHide\" for AppOffer.loadStoreWindow should have type boolean instead of ".concat(_typeof(shouldHide))); } _superPropGet(AppOffer, "loadStoreWindow", this, 3)([query]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.17	49857	195.181.170.18	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:32 UTC	138	OUT	GET /pcapp/images/3rdparty/application/images/apps_73406_6671309e0b993.png HTTP/1.1 Host: repcdn.pcapp.store Cache-Control: no-cache
2025-01-02 11:16:33 UTC	638	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:32 GMT Content-Type: application/octet-stream Content-Length: 187314 Connection: close x-amz-id-2: Mkkwa1GFgviyn1Vd1CLhrifVHHLOaIeARH78MDASrTcykoeEQfwT08TqMcj8+JR6ZQShvSiUqMs= x-amz-request-id: BJYTQS25MF9W1J8R Last-Modified: Tue, 18 Jun 2024 07:00:47 GMT ETag: "f5c3741bfb4b535d69765d82350ecdea" x-amz-server-side-encryption: AES256 x-amz-version-id: m3PPFOng2dgqin4ezHTExEOsoi1h1fOw X-77-NZT: EgwBw7WqEQH36fMMAAwBJRPCMQG3eEQCAA X-77-NZT-Ray: 4c156224d63ee943907576678d408737 X-77-Cache: HIT X-77-Age: 848873 Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:33 UTC	15746	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 18 08 06 00 00 00 84 15 25 e1 00 00 34 72 63 61 42 58 00 00 34 72 6a 75 6d 62 00 00 00 1e 6a 75 6d 64 63 32 70 61 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 00 00 00 34 4c 6a 75 6d 62 00 00 00 4d 6a 75 6d 64 63 32 6d 61 00 11 00 10 80 00 00 aa 00 38 9b 71 03 61 64 6f 62 65 3a 75 72 6e 3a 75 75 69 64 3a 34 36 64 37 62 30 31 61 2d 32 64 37 38 2d 34 32 63 33 2d 38 37 31 30 2d 62 61 32 39 31 62 32 63 39 31 64 66 00 00 00 01 b3 6a 75 6d 62 00 00 00 29 6a 75 6d 64 63 32 61 73 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 2e 61 73 73 65 72 74 69 6f 6e 73 00 00 00 00 d7 6a 75 6d 62 00 00 00 26 6a 75 6d 64 63 62 6f 72 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 2e 61 63 74 69 Data Ascii: PNGIHDR%4rcaBX4rjumbjumdc2pa8qc2pa4LjumbMjumdc2ma8qadobe:urn:uuid:46d7b01a-2d78-42c3-8710-ba291b2c91dfjumb)jumdc2as8qc2pa.assertionsjumb&jumdcbor8qc2pa.acti
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 9d 39 63 67 44 79 7c b2 20 25 e1 ed e5 b5 0d 61 b2 79 21 aa 90 12 5d bf a0 3b 3c e4 e0 c1 7b 1c bc ff 35 56 ef 7f 8d f4 e0 43 d2 f1 03 74 75 8c f4 87 74 fd 92 b4 ec e8 fb 05 7d bf a0 5b 74 f4 5d a6 cf 99 94 d2 f4 4f 12 29 1b ed 92 44 c8 4e c1 18 bf b2 42 0e 8e a8 87 f7 e8 4f 1e d1 9f 3e 61 71 fc 90 b4 3a 66 79 f0 db f0 fa 29 d7 e7 e7 d4 3a 98 95 44 42 4d 9f b0 fe 49 90 54 30 79 2b 31 3c 0e 44 76 be 24 13 6a 92 0c 90 24 d9 f9 93 b5 3c 09 fd 80 be 60 19 d4 29 d2 ec eb 45 d5 14 35 d1 84 a6 6a 90 54 a4 19 07 3b f3 4c ab bb 68 94 22 06 21 bd 64 9e 1c d9 dc 3c df 07 e1 99 18 09 40 10 32 54 45 b5 4c 8a 57 8d f9 12 d6 b1 b3 3c 2a 3b 94 b4 92 50 97 a1 d6 5e d0 40 8c 58 01 d1 70 9f 33 06 f2 85 a3 be e3 a8 c3 15 88 10 d6 81 7e 42 32 52 c5 a5 8d 9a c2 eb c6 81 36 b7 Data Ascii: 9cgDy\| %ay!];<{5VCtut}[t]O)DNBO>aq:fy):DBMIT0y+1<Dv$j$<`)E5jT;Lh"!d<@2TELW<*;P^@Xp3~B2R6
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 82 9f f2 4e 77 c8 4e 67 84 5f 53 fd 7c 64 97 f2 56 47 93 f9 2d 4a bf e2 b4 ac b9 3f 5e f1 59 be c7 b1 14 07 51 eb b3 4c a2 5f 2e 28 c5 d2 57 a2 a8 46 3c 4f 7c c2 19 01 61 b3 34 c6 f4 c1 c1 92 ed 36 f1 17 f5 1b fc 17 6f 2f f8 b9 8b 4b fe c5 87 1d 5d 9e b4 f1 94 ad 28 c4 c2 29 b6 57 97 1b fa 9c 5d f8 4a 2b 52 12 ef d2 ac 46 60 d9 77 9c af 47 d2 9b 2b de 7b 78 ec 16 92 c3 58 76 41 bc e3 43 72 65 44 a4 d1 72 d6 4d 93 42 37 df 8a b0 4d 94 c4 8e 73 a5 7a fe 6d 6c 3b 87 e0 95 9c 7c 45 8a a5 c1 98 b5 6c f5 9d e3 3e 9a 43 68 fb 98 ba 95 3f 53 b8 db 0b ab fb 21 ed dd 75 a6 77 ca 04 16 21 97 52 6a a0 28 2a d4 3a 20 db 4b d2 f6 92 6e b5 66 91 8e e9 ba c4 e0 74 7d ad 85 34 c2 c8 e4 eb 1a 24 ac 6c 5c b1 98 04 57 24 e8 44 a4 39 b8 8f 5a d5 d3 ab 12 16 ac 67 e5 44 cd 22 Data Ascii: NwNg_S\|dVG-J?^YQL_.(WF<O\|a46o/K]()W]J+RF`wG+{xXvACreDrMB7Mszml;\|El>Ch?S!uw!Rj(*: Knft}4$l\W$D9ZgD"
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: c5 62 c1 4f 3c 3a e2 9f fd c9 7b fc a1 9f 7d c0 1f fa d9 87 7c f3 c3 23 36 cb ca eb b3 81 ba 8e b4 a8 30 07 15 2b 2e 4d cb b1 26 4b 64 cc b4 de 77 94 b0 73 c3 6f 9b 2b 6d 87 93 0c 22 9e ce 24 c9 f2 82 7b e5 fa f5 19 2f 9e 0d 94 d5 cf b2 fa f8 0f 71 f8 d1 2f b1 7c f0 15 cb a5 ae 15 12 e4 2e 59 ae ea 62 49 ca 3d 9d 85 78 3b 30 88 c7 15 18 bd aa 45 59 af af d9 5e bd 41 df 7e 42 7d f1 9b d4 97 bf 8e be fa 2d ca fa 05 92 17 48 77 68 6d 0e 1f 73 48 b1 f0 cb 52 20 6b a3 7e 05 5a c0 9e 0a 74 5d 66 b9 58 d0 77 0a 64 7a 5e d8 96 8f 05 96 8b 9e 61 b4 fd 74 2d 9f 5d 29 40 ad 56 d9 ad aa 0b c8 ce 69 5e b5 1c e9 e6 b3 75 fc 9f 92 81 b5 75 2d da 5a 03 39 d3 0d 1b ce 3f fd 3e 4f 57 1f 59 f5 ab 61 f0 20 29 f5 f5 57 19 6b 65 bb d9 b0 ee 3a 50 a5 f6 0b 0f c2 c2 e3 34 2c a5 Data Ascii: bO<:{}\|#60+.M&Kdwso+m"${/q/\|.YbI=x;0EY^A~B}-HwhmsHR k~Zt]fXwdz^at-])@Vi^uu-Z9?>OWYa )Wke:P4,
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 3b 4c 67 33 7a db db 9c db 3f cf b9 fd 3d 86 fd 81 cf 4b 75 1e 2a f0 e4 f4 94 c3 7b f7 38 39 39 61 36 9f 33 9b cf 7d c4 6b 08 38 51 4d ed e0 24 41 c7 31 3a 44 42 9b aa 66 5e 55 9c 1a 1f b8 e5 9c 23 89 22 06 a3 11 9b a3 11 c3 a8 42 d9 94 cf 4d 2f f2 e8 70 c2 b6 9e 53 38 dd ee 13 2f 58 01 ce a2 64 44 9d 5d e2 ee d7 3e c5 c6 dd 67 99 9e ff a3 cc 36 de c3 bb de f5 6e ca 22 e7 ce dd 3b e4 8b c6 0c ee 19 57 92 c6 64 bd 8c f3 fb fb 9c db 3f cf dd 3b 77 f8 89 5f f9 65 7e e9 97 7e 89 9f fe e9 9f 46 4a 45 bf 9f 30 1e 1f 93 65 7d 1e 7e f8 1a a3 d1 88 7b f7 8e 28 cb 02 ad 23 92 24 6e f1 a7 81 80 6a e4 fd b4 b3 d9 9c 7b f7 0e 42 b9 b8 1e d6 ba a0 dd 46 18 e3 ad 03 3a 14 6c 90 52 07 74 20 d7 6a 18 67 90 a9 ce e1 11 bd 1a 44 25 13 70 b9 9b c3 04 17 c1 b7 7f cb 07 38 77 Data Ascii: ;Lg3z?=Ku*{899a63}k8QM$A1:DBf^U#"BM/pS8/XdD]>g6n";Wd?;w_e~~FJE0e}~{(#$nj{BF:lRt jgD%p8w
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 92 d0 18 82 9a f5 e6 9c ef 44 a3 c7 1a e3 40 48 be f3 83 1b 5c 3e 2f 38 bc 3b a3 ce ef a0 d4 16 18 bf 0b 65 b3 7e c2 02 6f 96 17 ce 93 43 29 35 5f fd dc 6f b2 b3 77 81 de f6 79 a6 93 1a 84 43 a7 23 84 a9 a8 ca 53 6a 29 d1 c9 08 29 23 ea 6a 8e c6 79 53 75 36 44 08 a8 f3 13 8a f1 5d e2 fe 36 32 8a b1 55 81 42 a2 e3 1e b6 ce a9 67 87 90 8f 51 e9 00 9d 0c d1 49 9f 3a f8 6e 5b 9b a8 b3 5e 1a 6c eb 62 fb 75 23 ac c5 98 6a a9 f9 08 0f ae 21 11 5e 88 0a 48 53 58 e3 99 b0 92 6b 01 75 5e b8 52 02 a4 f5 ef 3a 8a 14 42 96 20 7a 68 6d b9 74 41 70 e4 1c 1b ca 22 36 86 9c cc 33 d2 26 b7 5d eb 8e c0 e9 3b 61 82 35 c4 e2 42 0e b9 03 63 a9 fc 4b a1 08 fb c5 3a 47 9c 24 6c 6d 6f d1 eb f7 18 9f 9c 32 9b fa 52 9e b3 f9 9c e3 d3 13 fa c3 01 9b db 9b 6c 6c 6c 60 b1 1c 6d 5d 61 Data Ascii: D@H\>/8;e~oC)5_owyC#Sj))#jySu6D]62UBgQI:n[^lbu#j!^HSXku^R:B zhmtAp"63&];a5BcK:G$lmo2Rlll`m]a
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 1b ac b4 1b 0c fa 03 1f b9 a9 79 d5 5d e3 fc cd 07 97 b9 6e e1 20 77 bf fc 11 e0 4f 69 8a 56 31 9b 5b 1e 5b 98 95 b6 be 5e 80 cd 81 19 5e fd 86 09 de f3 9e 16 d7 03 1f 78 4f 9f 1f f8 cf 3b 91 d1 d3 98 dc 16 f9 d5 e1 05 01 63 b8 35 31 c6 eb 6e de cf fe c9 71 f2 34 a5 33 d0 9c 3e 99 f0 23 ff 6a 8a 6f fa 8e 9b f8 b9 ef ce f8 d9 8f fc 1e af bc eb 9b 39 fa be bf e4 ba 6b e7 80 07 21 ff 15 58 f9 12 a4 c7 40 5f 2c da fc 15 c8 47 65 6b 44 b9 cf 90 db 41 6d 87 78 0f 13 e3 07 79 d5 3d b7 f2 aa 7b 0e 02 df 08 fc 30 9f fd dc 47 79 ed 57 fd 63 06 cb 6f e0 bb fe 55 83 07 bf b0 4c b7 57 73 c1 7f 52 b0 b6 ae e9 76 72 fe d3 af 8d b1 ad 39 c1 77 df d7 e2 4f ce 5e 02 3e c1 3b df fe 5d fc c2 7f ff b7 ec dd de 04 be 08 f9 9f c0 ea 83 90 1e c5 9a e5 a2 0f 57 16 77 b6 ee 88 08 Data Ascii: y]n wOiV1[[^^xO;c51nq43>#jo9k!X@_,GekDAmxy={0GyWcoULWsRvr9wO^>;]Ww
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 3f c9 33 1a 89 45 83 19 14 74 60 ab 71 d9 74 ce 3d 5d 2a d6 a3 6f 75 24 9c fb 28 30 56 29 82 45 4c a2 84 f2 d1 d1 c2 6b b8 8e 29 0b e9 33 7e 85 2c 30 18 9c 3f d6 a5 a9 08 e9 04 89 40 e7 b5 ef 9f 81 82 1e 86 a0 5c 6b 25 ca 16 46 6c 4f a2 9d 00 b2 9e 64 0c 32 17 fd ac 0d 05 c4 e4 ff 2d e3 ad 72 86 2b b3 df 8d 7c ad b0 5a 84 df 4d b8 ae 7c 62 08 b6 15 42 d0 49 73 ba 99 26 0a e6 e8 0d 3c 69 f8 79 81 95 85 a9 05 51 5a 44 ac 3b 27 83 da 6c 2d 55 53 7f 39 c0 d6 16 e9 1f a2 ca ab 2d 64 c6 5f 57 7d 9b 0d 2f 2b 19 a9 8f 38 2f cc d0 eb 89 66 90 19 94 17 bd 36 9a 8a 6d 65 c4 2c 2f 3e b4 e5 44 1a 36 4e ea 10 13 76 dd 1f 7a 4d 38 f4 50 db 4b a1 c4 31 e1 e1 a0 02 8b db 46 fd 5c b3 92 e4 85 56 56 b1 dc 0f 3f 3e 48 31 a6 62 5e ab 7c 0f 7f 8f 7e 2f cc a4 56 8c 74 a4 94 32 Data Ascii: ?3Et`qt=]*ou$(0V)ELk)3~,0?@\k%FlOd2-r+\|ZM\|bBIs&<iyQZD;'l-US9-d_W}/+8/f6me,/>D6NvzM8PK1F\VV?>H1b^\|~/Vt2
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: df 30 9f 78 28 e6 6c 4f 12 53 63 ab 4c 38 a1 53 6e 1a af f2 e0 4f d7 f8 d0 e3 87 f8 9d 87 7b fc ec 4d 55 86 1a 96 29 48 8d 62 3c 4a 58 68 19 3e b1 bf ce 27 a8 23 c8 d8 d3 c8 b8 61 7d c6 75 eb 14 57 4e 76 b9 7c 34 63 cb 90 61 2a 81 5a e6 fa 90 0f 4c d8 07 ff 31 39 ec 46 9a 22 f3 95 4c 6d 1f bc 5a d8 1d 85 7c 7c 16 1e 7c a2 ca 17 9e 18 e6 63 0f 4b 66 b3 08 ab 17 8e f9 f9 9b 1b fc fe 3b 35 bf f4 91 e7 f9 c7 83 8a eb c6 25 cf 2c 6a 92 18 97 a6 dc 22 45 7f 28 e1 a9 f3 5d 0e 7c 38 63 fe 39 81 1a 2a e2 81 2e 8a 69 52 90 cb 86 e9 73 55 f6 3d bf c8 e8 50 44 a5 29 48 95 cd 15 bf bb 22 f9 dd 07 db 6c 1b 3b c2 93 ff 61 17 b7 fd 1e 3c 3c db 66 6b 14 53 17 75 12 93 50 8d ba 2c 9b 1e 5f 38 66 f8 c2 5f 0e f1 92 8d 0d de 79 55 8f 57 6e 69 73 e5 58 66 19 ac 54 21 70 07 56 Data Ascii: 0x(lOScL8SnO{MU)Hb<JXh>'#a}uWNv\|4caZL19F"LmZ\|\|\|cKf;5%,j"E(]\|8c9.iRsU=PD)H"l;a<<fkSuP,_8f_yUWnisXfT!pV
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: fb e9 e6 3b ae e7 6b f7 7f 0d 80 17 3b fb 6f cf a9 c4 fb d3 47 7a 4c eb d5 d2 be 54 ea 35 a0 47 2f 53 2c af 68 a4 53 3f 67 0c 4e 3e 62 5c 1d f5 9a f5 dc 16 74 80 9b b9 7e fd 4f d2 53 73 f9 9c 79 96 21 8e 47 68 77 4e 73 7e e1 b4 5d 2b 46 61 90 64 08 14 0b d4 ab 8d 00 3c 91 33 0d 06 8a d0 27 21 d8 b6 7e 27 47 0f 2f 30 9c 64 b4 52 4d 46 95 1a 97 b1 b5 72 17 13 13 63 d4 1b 09 22 1d e3 4b 8f fc 47 52 62 ae b9 7a 94 c6 d0 31 c6 b6 08 a6 76 d4 a9 d5 04 f5 8a 22 89 15 ed 76 8a 4a 35 d5 2a 24 91 63 38 23 a8 d4 ec 21 12 2e cd b1 c3 49 e4 2a 57 6f 7e 41 3b 82 67 fc b4 88 7c 73 84 eb 25 37 c2 05 54 2f c4 86 c2 58 e2 9e 4f af cf 18 a0 25 ca 68 46 86 62 1a 43 12 ad 9c 93 a7 6b c7 3f eb 1d 28 5d 2b f8 d0 d1 72 d6 06 77 e2 53 3e 94 3e 25 6c 98 2e d6 ed 71 1f 49 20 2c b3 Data Ascii: ;k;oGzLT5G/S,hS?gN>b\t~OSsy!GhwNs~]+Fad<3'!~'G/0dRMFrc"KGRbz1v"vJ5$c8#!.IWo~A;g\|s%7T/XO%hFbCk?(]+rwS>>%l.qI ,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.17	49856	195.181.170.18	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:32 UTC	138	OUT	GET /pcapp/images/3rdparty/application/images/apps_73398_66603950c621c.png HTTP/1.1 Host: repcdn.pcapp.store Cache-Control: no-cache
2025-01-02 11:16:33 UTC	638	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:32 GMT Content-Type: application/octet-stream Content-Length: 183507 Connection: close x-amz-id-2: UCkfEZEf5WTcSR6R34UziR9njblbSRTwgMLC28NfgqUIOYw5T1aDvbqOGeqsJYebI4MRXwwMBbI= x-amz-request-id: BJYXHDZ3YQ3M26KD Last-Modified: Wed, 05 Jun 2024 10:09:21 GMT ETag: "2e7d8eb14e6badef25369ef05f04fffc" x-amz-server-side-encryption: AES256 x-amz-version-id: nb40YX_HgdoFek9MfARKhRXP3gOKtipH X-77-NZT: EgwBw7WqEQH3lPsMAAwBJRPCNAG3rUgCAA X-77-NZT-Ray: 4c1562242669724490757667bc68b338 X-77-Cache: HIT X-77-Age: 850836 Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:33 UTC	15746	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 18 08 06 00 00 00 84 15 25 e1 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 02 cc 85 49 44 41 54 78 9c ac fd 79 b4 6d 5b 7e d7 87 7d 7e 73 ce d5 ec 7d ce b9 e7 36 af 6f aa 7b 55 25 95 24 4a 94 64 02 b6 4c 63 90 c1 c8 c4 71 25 c1 18 db 18 77 98 0c 8f 04 db 89 51 48 43 54 19 f1 70 46 0c b6 c7 88 18 e0 90 88 38 96 47 e8 a2 98 11 8c 63 0c 31 36 09 16 46 06 0c 12 92 50 a9 fa e6 dd d7 dd ee dc b3 f7 5e cd 9c 33 7f fc e6 5c 6b ae b5 f7 b9 ef 55 c9 eb 8e 7d cf 6e 56 33 db df f7 d7 ff e4 d7 3f f7 4f 46 89 2c 8e 28 f3 7b 89 fa d9 1a e1 b0 ef e9 ba 01 41 40 80 7c 5d 3e 3f 9e 78 bf fe 0b c4 74 5d db 54 d4 9b 0a 02 88 81 61 f0 1c 76 1d 63 08 d4 95 63 b3 69 10 6b f4 72 1f 38 1c 7a Data Ascii: PNGIHDR%pHYsIDATxym[~}~s}6o{U%$JdLcq%wQHCTpF8Gc16FP^3\kU}nV3?OF,({A@\|]>?xt]Tavccikr8z
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 48 de ce a6 b8 6b 79 ff b9 3d 4b b5 55 c8 52 70 ba 44 01 58 35 04 31 89 ce cd a6 a2 ae dc ec 11 6c 60 38 74 74 7b 2d 58 bf 92 f9 99 05 eb 38 a5 31 8c 11 82 c4 c9 64 35 7b 17 e7 6b b2 a3 9c 3a 9a 65 c6 42 44 18 46 4f 77 ad 79 ba eb b6 9a d4 d1 31 cd 51 77 48 39 9d d7 62 f7 34 ee 2c 9e 35 7f bf 6c 43 19 26 46 54 e1 cc 55 8e 7a 5b 4d 40 1d a2 e6 73 1f bb 11 53 09 cd 99 ae a5 98 3a dd 75 03 fd a1 d7 61 92 d9 a7 67 35 3a f3 37 49 a1 95 29 08 44 c4 44 ea d6 b0 d9 58 9a 3a e2 5c a0 ae 55 4d 5d d7 91 ed 26 70 7e e6 39 df 06 ce 2e 3c 67 db c8 f9 59 e4 ec 3c 52 d7 51 67 30 42 df 5b 1e 5f 19 de 7d d7 f2 d6 db 86 37 df 32 bc fb 9e f0 e4 31 ec 0f c2 38 64 2f fc 65 bb b2 13 70 d3 54 d4 b5 82 6f 14 18 bb 81 dd a1 27 c6 40 d3 d4 b4 9b 66 ba d6 f7 21 81 f0 e9 10 a5 23 09 Data Ascii: Hky=KURpDX51l`8tt{-X81d5{k:eBDFOwy1QwH9b4,5lC&FTUz[M@sS:uag5:7I)DDX:\UM]&p~9.<gY<RQg0B[_}7218d/epTo'@f!#
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: aa fb 0e 6b 0c 4f 04 44 1c be 8f f4 7b e5 92 6c 4a be b0 dc 5f 27 a4 5f 80 54 01 68 ec 46 fa 6e 50 3b 04 1a 9a d1 0f 03 dd ce d0 6c eb 25 67 bc 18 2a 59 dd 7d 06 df 6e d7 27 55 9f 2c 1e bf b4 46 cb e2 93 36 4f a7 a4 2e c1 57 14 7c 35 7e 2e 4e b9 9d f3 a5 a3 d7 fe c7 30 03 83 88 12 b4 6e 3f 68 75 26 ab 2e 8a 6d 5b 61 d0 8a 23 87 dd 40 bb 55 9b 7c 04 0d 6d 32 30 ec 3d 53 51 f1 98 17 35 e4 04 1e 92 12 b6 1b 0b 61 8c bc f9 0d cb bb 6f 37 7c e9 0b 67 b4 db c0 61 6f 18 bc 50 d5 9e 5c b3 54 95 0d 85 43 44 8e e4 d7 15 95 ee af 19 73 40 ed 44 d9 96 a4 e6 80 f9 6a 75 cc 2a 38 df e9 6f 92 3c 44 93 d4 6f 9c e3 9d 6f 3c e6 dd 37 1f f3 e2 ab 77 39 70 40 ce ce 88 31 30 fc fe 1f 61 f7 a7 7e 82 d8 f7 9c fd 96 1f c2 fe af 7e 1f c3 ff e2 7f cd 5b ff de 8f d1 6e 2e 89 43 cf Data Ascii: kOD{lJ_'_ThFnP;l%gY}n'U,F6O.W\|5~.N0n?hu&.m[a#@U\|m20=SQ5ao7\|gaoP\TCDs@Dju8o<Doo<7w9p@10a~~[n.C
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: ae a0 b8 f6 3a f2 33 57 92 9d 38 46 76 f2 0a f2 d3 67 c8 af bd 1a 57 b7 ec bc f6 c7 31 df f0 4d 98 f3 17 98 64 19 ea 3f fe 27 16 1f fd 38 f9 55 67 b1 6d eb e3 03 8d 78 6e 86 ba bf 01 84 13 07 34 14 50 8e 29 1e 7c 88 51 d7 61 ff 27 cd 43 d0 34 00 c9 5c 0f c7 bd 28 0a de f8 c6 37 f2 d3 3f fd 53 dc 72 cb cd 4c 26 93 a4 52 51 6f d7 3d 71 e2 04 87 0f 1f e6 07 7e e0 07 f9 c4 27 3e ce d6 d6 d6 40 c5 ec 9c 8b ea e9 34 d6 b7 6d 3d 10 5b 09 bb ba ee ba eb a8 aa 6a 30 bf b0 0a a6 21 86 d4 ee ed c1 7c ce 7e b5 9f 97 41 50 6b 8d f6 11 03 4a 69 52 d0 bd fc b1 0c cc 4f 6f ac d7 b5 65 7f d3 c9 fa fb b6 2f ed b2 bd b3 cd 81 c3 1b fc af ff ec 55 fc f2 47 ff 19 ff e4 7b be 9e 51 51 f0 f1 dd 87 98 ce 16 51 48 58 f7 64 3b 94 92 fc 11 68 77 00 e2 9e a6 94 95 a4 af ed 93 db 12 Data Ascii: :3W8FvgW1Md?'8Ugmxn4P)\|Qa'C4\(7?SrL&RQo=q~'>@4m=[j0!\|~APkJiROoe/UG{QQQHXd;hw
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: d7 34 cf 79 0e 3c f8 00 b6 15 69 b7 a9 6b 4e 9f 39 c3 c9 93 27 a9 eb c5 50 5a 75 4b 1f 8c 8c 4b 5c 25 4e c0 20 da 1a 3d 37 ad fd 98 e2 82 26 41 c6 56 38 02 51 73 87 6c 57 a6 93 cc 75 d6 39 26 93 11 6f 7d eb 1f f3 37 ff b7 bf c1 ee 7c 9b 5c 17 d4 8b 05 38 29 e4 6e 8d 65 67 7b 97 e7 3c e7 39 8c c7 63 66 b3 85 57 5f 1b 4c db b1 b7 37 65 3c 1a f1 8a 57 bc 82 32 2f 99 cd e7 fd 5c 84 ff a4 6b 68 f8 5d 44 5d d5 77 3b 9c 8e fe 52 ae f7 7f 49 9f 6d 62 ff 5d 0f 1c 6e e5 e5 04 a6 6f 6d 89 c3 64 8d 06 b5 37 f4 74 2c 86 25 b9 65 c6 61 75 9d cb eb ec e0 9c 75 fd fe 0a e7 02 59 b6 b8 d5 67 c4 e6 bb 95 77 66 59 c6 e6 d6 06 af ff a1 3f e0 f7 df f2 41 4e 1f 38 24 43 17 da 3f 50 b7 89 f3 a6 53 2a 68 63 85 91 0c 7d 8b 68 2f 19 cf 74 8e 84 ef 20 30 1d 48 9f 90 2a 99 9f ae 35 Data Ascii: 4y<ikN9'PZuKK\%N =7&AV8QslWu9&o}7\|\8)neg{<9cfW_L7e<W2/\kh]D]w;RImb]nomd7t,%eauuYgwfY?AN8$C?PShc}h/t 0H5
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 08 18 9d e8 25 65 2c 28 25 61 e7 ba 03 25 60 30 53 48 5e 2c 04 09 47 d9 a6 93 d8 5f af f3 d2 66 8a d7 52 44 8f 66 ac 8c 11 51 19 17 68 86 e2 6b 9f b9 c6 5b de f7 b8 78 4d 36 a2 7f 09 23 1d 36 e4 3a 93 b0 d8 dc 2b 49 21 68 ab 23 12 34 e9 a7 c1 96 bc 79 fb 16 ef 7b e7 b7 f0 1d 9f f8 6e 3e f8 b9 7f c7 c5 e2 75 d2 a3 d9 f7 27 27 f9 c2 5a 29 ee 34 37 b9 32 bf ca ef 78 ef b7 f3 ab 1f fe 20 00 77 6e df a1 6d ba 58 77 eb 50 21 96 59 68 f1 56 04 79 a9 e8 99 97 42 00 ed fb 14 43 ef ba 8c 3d b4 10 10 40 4f 52 78 4a 04 7d 40 3c df 48 51 d9 73 44 c7 ef a4 1e bd a1 47 46 07 6c 2b 5e bf 6b 2d 4d dd 46 d0 53 88 06 95 ef e7 31 a1 90 e9 c3 ce 42 f7 38 ee bc 35 a8 27 8f ed bd 6d 1f 3d e3 71 fd b2 8f b9 ba a8 e8 93 f2 75 09 b8 95 c6 1b 11 dd 28 bc b7 b8 ce 73 61 ff 22 ce 7a Data Ascii: %e,(%a%`0SH^,G_fRDfQhk[xM6#6:+I!h#4y{n>u''Z)472x wnmXwP!YhVyBC=@ORxJ}@<HQsDGFl+^k-MFS1B85'm=qu(sa"z
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: be d1 6b 91 09 2b 28 85 8d d1 81 ba b1 12 7e 3e 03 0f be b2 a4 3d ea 98 17 8b de 6b ed 8d d9 d4 22 51 85 d1 69 a7 0f 46 95 9a 70 ab 85 bb 70 e1 c2 19 2e 9e dd e3 d5 57 0f d9 9e 29 69 a1 68 89 b2 40 42 c2 1e 87 76 5a ca bc 36 86 2d 87 97 e6 f0 23 e5 3b de a8 41 f4 ae 00 ea 9c 8f 0d eb 4f db c8 61 e3 27 d2 90 fe f1 39 bc b5 14 96 ab 82 a9 30 a9 0a b2 ad 39 db 3f 7c 11 fd cf ce 72 ed ef 7c 8a fd c3 8e ed 9d 45 d4 09 62 bc a5 39 30 db 39 dd 8d 15 7c 79 09 df bd e0 1b de f4 38 1f fa f0 a7 51 a9 ce 6d 3c ee fe 06 a7 ab 15 10 fe de 42 c3 d3 3b b0 1b c7 92 36 df a6 50 1b 0b 89 cd e7 9e 7e b6 40 0e 45 9e 13 62 03 8f b6 71 60 7d 9f 8f 75 9d a3 43 da 15 a2 a4 bb 58 39 cb a9 d7 1d b6 f3 b4 2b 4b 31 cf 25 62 a1 45 09 b7 0a 6c 6b f1 43 dd e6 29 1e 6c 7a cd f7 d1 87 93 Data Ascii: k+(~>=k"QiFpp.W)ih@BvZ6-#;AOa'909?\|r\|Eb909\|y8Qm<B;6P~@Ebq`}uCX9+K1%bElkC)lz
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 3b 63 eb f1 25 d2 d5 94 b3 3b d3 c6 55 30 58 75 2c 06 91 49 cc bd 19 1c c3 8d 2b 5b ec 6c af 33 3b 39 62 09 e1 f0 d4 65 58 57 f3 42 47 1f 28 ff c1 14 c2 32 3f 1e e1 7a 88 3f 8d 09 a6 ab 7f b0 39 e2 e6 7a c6 a6 d9 a0 b4 b5 ff a9 85 5f 4d 84 20 15 09 23 91 90 49 e5 12 79 9c 97 58 25 c9 de f8 10 7c f5 f3 e1 a5 43 b8 ab f9 17 ff f0 57 f8 f1 5f 7a 0b 8f 5e dd 42 9f 1d 61 66 13 30 b5 6f bb 6c 9d 21 a3 26 2e 54 80 64 77 05 cc 7b 1b 3e 40 f8 0f 8b 5d 38 a1 37 66 15 d6 3a 05 23 1d 08 ec d4 82 4b 12 44 b0 60 c9 44 3a c6 24 bd 15 b1 d9 9e d1 3e 9d 93 1b 04 e9 20 69 12 45 08 7f bf 6b 71 f0 6a 10 de 03 da 30 18 a4 08 20 91 82 e1 38 87 89 45 7b 4d b8 61 c2 c2 85 84 ce 28 fd 99 b0 f0 f9 7b 5b 4b a3 10 e1 ac df af eb 78 ff 37 63 eb b0 4d 8c 74 8e a0 52 08 d2 60 f9 f4 3d Data Ascii: ;c%;U0Xu,I+[l3;9beXWBG(2?z?9z_M #IyX%\|CW_z^Baf0ol!&.Tdw{>@]87f:#KD`D:$> iEkqj0 8E{Ma({[Kx7cMtR`=
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: e3 85 9f fb 6a ae 3e b2 c2 7b df 7b 8f d2 6a 06 32 e9 28 03 52 c2 fa d2 90 67 df 7c c4 5b 8e cf 79 de eb 36 78 e8 e1 21 d7 9e 78 a2 71 aa d6 87 f0 b1 df 3e e6 2d bf f5 09 9e 7c fa 3e 2f d8 da 61 47 2c 33 08 c8 5a 91 b1 c2 4e 34 d9 cb 72 06 d7 e1 43 ef 39 e4 c3 cf 3e c7 4a 3a 20 1b 68 3e bd 7b 87 0f 7d e2 93 bc ee 2f 3c c6 e5 47 d7 78 e6 63 f7 d1 d6 f4 76 a9 3b 93 5f da 18 30 79 fa 84 f7 ff eb 27 b9 fa c6 4d 9e f7 e2 55 be e4 eb 5e 08 b9 5f 18 e7 30 7b 16 fe e4 0f 9e e2 f7 de f4 41 c6 a3 8c 87 06 9b ac a9 21 aa 53 a1 c5 14 96 6c 33 61 f0 78 06 fb f0 9e 8f 3d 45 2a 15 a2 b6 28 1b 52 ae c7 53 13 33 5c f7 59 01 56 39 93 5f f9 fe 33 0e ee 6a 0e 67 13 6a 61 48 89 9d 9b 98 eb 0f 82 d8 9a 8b d1 16 a5 24 cf 7b e9 15 b2 01 cc 72 85 b1 6e 2c 23 4c 88 0b 4a 77 83 06 Data Ascii: j>{{j2(Rg\|[y6x!xq>-\|>/aG,3ZN4rC9>J: h>{}/<Gxcv;_0y'MU^_0{A!Sl3ax=E*(RS3\YV9_3jgjaH${rn,#LJw
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 14 88 50 00 62 c9 60 40 45 9b 26 25 42 15 04 84 21 2a 3e 82 30 9e c4 d2 5e 70 cc 6c 6b 71 da 62 a6 48 40 b8 82 55 d6 70 e5 70 bc f2 74 ab ea bf cc 28 a8 1c 2e 16 a5 b6 96 c1 57 b3 1a 00 e4 09 e3 de c1 bb 00 2b aa c1 e8 f8 46 33 ab 63 bd 48 3f 35 e3 5b 9e 4b 95 24 dd 72 05 b2 1d ba 82 de b4 06 9c fb 5e 32 54 41 08 be 32 0c 98 a1 60 a2 e3 6a 45 35 9c d4 60 8e a1 67 e9 6f 5a 9c bc ba 69 c9 3c 87 28 31 98 30 d3 63 85 01 9e 67 8e 73 d6 46 cb 3a 28 28 2b 85 38 0a 15 6c da 37 0a b0 c6 a3 e9 67 1c 9d 1a 71 d3 cd c7 b8 e5 ce 2b b8 ed ae e7 70 db 1d cf e0 a6 8b 97 70 ee dc 75 9c da 8c 68 0d ab d5 43 d0 70 5e c1 4b d9 bf a6 eb 85 16 f0 38 9d 17 f0 0d 1e b6 6f d0 6d 3a b1 82 30 5d 64 67 2c 97 35 47 71 46 17 4c 61 42 d2 e5 56 15 b5 73 bb 6d 60 37 ac 81 94 b4 61 2b 32 Data Ascii: Pb`@E&%B!*>0^plkqbH@Uppt(.W+F3cH?5[K$r^2TA2`jE5`goZi<(10cgsF:((+8l7gq+ppuhCp^K8om:0]dg,5GqFLaBVsm`7a+2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.17	49858	104.248.126.225	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:32 UTC	544	OUT	GET /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
2025-01-02 11:16:32 UTC	211	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 02 Jan 2025 11:16:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding
2025-01-02 11:16:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.17	49845	212.102.56.178	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:32 UTC	553	OUT	GET /pcapp/images/3rdparty/application/videos/mahjong_video_470x260_2.webm HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept-Encoding: identity;q=1, ;q=0 Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://pcapp.store/ Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045 Range: bytes=0-
2025-01-02 11:16:33 UTC	666	IN	HTTP/1.1 206 Partial Content Date: Thu, 02 Jan 2025 11:16:32 GMT Content-Type: application/octet-stream Content-Length: 580323 Connection: close x-amz-id-2: jhrbuoJhraMUZHJXiaYzNEkyyZPsgcxzY8/tswNPHX/RXTrQidWp0qIUcWlJkizAKczpbwwFyFg= x-amz-request-id: 2DM3BKVBAXG2D2VQ Last-Modified: Tue, 11 Jun 2024 11:47:42 GMT ETag: "62d07e6fa53aeacff39ed59e694f8500" x-amz-server-side-encryption: AES256 x-amz-version-id: HfNi1el8kuj7ec_ch4wjXtcQ3.ka4B4e X-77-NZT: EgwB1GY4sQH3YkQBAAwBJRPCMQG3DGcGAA X-77-NZT-Ray: 1cb09c0e2a680e11907576675569af37 X-77-Cache: HIT X-77-Age: 83042 Server: CDN77-Turbo X-77-POP: frankfurtDE Content-Range: bytes 0-580322/580323
2025-01-02 11:16:33 UTC	15718	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 04 42 85 81 02 18 53 80 67 01 00 00 00 00 08 da b3 11 4d 9b 74 bb 4d bb 8b 53 ab 84 15 49 a9 66 53 ac 81 a1 4d bb 8b 53 ab 84 16 54 ae 6b 53 ac 81 d6 4d bb 8c 53 ab 84 12 54 c3 67 53 ac 82 01 99 4d bb 8d 53 ab 84 1c 53 bb 6b 53 ac 83 08 da 8a ec 01 00 00 00 00 00 00 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 49 a9 66 b0 2a d7 b1 83 0f 42 40 4d 80 8c 4c 61 76 66 36 30 2e 33 2e 31 30 30 57 41 8c 4c 61 76 66 36 30 2e 33 2e 31 30 30 44 89 88 40 Data Ascii: EBBBBBwebmBBSgMtMSIfSMSTkSMSTgSMSSkSXIf*B@MLavf60.3.100WALavf60.3.100D@
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 45 9e 55 3a a7 cf f8 40 3a b0 5d de fc 0a 51 91 02 41 e5 2c 2b c7 15 00 7f 3f ef 71 b7 74 be 24 ba 25 c8 be 85 4c bb 2c 27 32 41 ab 7b 22 cf 35 36 f0 74 72 e0 37 28 b4 e7 22 11 e5 61 c4 4d de 7f e0 8a 69 0d 7c 62 52 c7 45 1b c5 b0 ce 30 05 35 9d ee 5c c9 c0 63 bd 34 c4 6e 31 72 f5 f5 fe ae cc 87 02 46 c1 5c bb f8 d3 d4 a2 ab a4 48 88 c0 66 18 6a 65 b6 c2 40 9c a2 00 a5 3f 11 d6 9a db 17 7f b2 c8 68 eb d1 b8 16 40 a5 7f cd 04 fb b3 8f 87 dd a0 19 4e 17 2d f7 f1 f4 fb c1 f5 54 8b 7f bd 7d fc 63 df f6 2c db b7 40 b4 28 3a da 71 60 b9 27 05 b3 21 a9 76 66 2f c6 71 a6 26 2b f5 cd fb b1 9c 06 0e dd 1b 65 3d d7 db 87 7d 13 94 c0 66 9b 3a 1a 71 cd 5a 46 e4 66 92 b4 e8 c3 20 09 e2 10 2a 8b 06 14 6c 06 ef 5b 59 8e 71 b7 75 2e f8 e3 a2 8c 17 bb 75 92 05 1d 6f 36 b7 Data Ascii: EU:@:]QA,+?qt$%L,'2A{"56tr7("aMi\|bRE05\c4n1rF\Hfje@?h@N-T}c,@(:q`'!vf/q&+e=}f:qZFf *l[Yqu.uo6
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: b3 13 18 b8 ec 82 af 66 d7 1b 32 88 26 63 0e f9 6b e7 ee 70 da 12 f8 b0 bf a5 5b 80 dd 1e ad fa 46 5c 1c 8e c5 6e 4a 0e fb 01 49 30 4c 70 77 5f 33 d0 db e3 24 ce 8f fd 87 23 71 bd e3 ef bb d9 5d 5d 02 c6 11 68 d5 2a 34 e0 77 a7 3b db 40 1c 45 4a 4d 58 b8 88 d6 c6 d4 1d 53 dd 5c 91 34 ce 5a d0 e6 b4 0f c1 dc f0 49 a9 0f 38 8b 04 60 e9 01 87 2f 5e 83 39 3c b5 c8 13 09 31 0c 13 99 80 c6 fe ab f6 b0 6b 40 e1 70 b3 3e 11 07 d7 59 a7 0c 01 6e 9f 0d b2 cb e7 17 e4 27 9b 5b 51 f4 f0 8e 3b 68 a8 27 88 a9 6a df b0 46 51 c5 07 7f 02 5f 58 93 a3 31 7c fb 5a 0e a0 6e 7b 7f 8a c6 ed ad e8 74 59 54 78 f4 86 55 77 be 01 86 c0 91 99 f6 ef 13 6f 26 b9 a8 9e b0 70 c1 68 8d dd 7b 6f cc 01 1b a5 ca a0 fe a6 ea ba cd ac 27 ad 7d d5 dd 0f 25 3b 14 3f ac f1 39 3e 24 1f 49 81 bc Data Ascii: f2&ckp[F\nJI0Lpw_3$#q]]h*4w;@EJMXS\4ZI8`/^9<1k@p>Yn'[Q;h'jFQ_X1\|Zn{tYTxUwo&ph{o'}%;?9>$I
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 2f 44 9f 27 d0 ea 89 29 43 33 d7 a6 aa 5e c2 25 b5 ae 8d c8 4d 92 70 20 2f 32 98 73 fb d6 7b cd 14 77 17 1d b0 19 59 40 ee 19 38 49 d9 aa 2d df 3d 59 b8 a9 e2 49 2b 74 65 38 8e fb ef 57 c2 c5 eb aa 0a c4 d7 da 1a 11 97 87 13 05 33 fa f0 3a 15 81 6b 9e bd 34 14 e9 71 bb 7c f5 07 e9 70 df 07 da bb 83 b9 d6 e9 27 8c f9 44 0a 00 9b a1 1c b3 bb de a7 2a ab 60 74 1a bd 9b 52 ad 99 31 48 86 d6 55 3c f1 44 67 2a df 92 17 6d f0 b2 d2 74 ba a0 37 75 ba df 97 ad 4f 2d 7f f1 b6 23 23 87 3f 3b ed 88 4b 3e ec 88 3f 6f 84 d2 80 8a 29 82 a3 68 9d 0a 64 a4 03 1c 8d 73 87 6c 98 28 cb 75 fd 92 23 d1 e9 5a b6 bb fd e6 ee 6e 0e f4 3a 59 fb 9f 3d 79 d8 b6 40 a7 64 3e be ea e1 fd 2d 96 78 bb e9 f3 e5 43 f8 bd 36 61 24 f4 dd d6 3f 07 cc 79 26 d6 79 a6 55 55 23 32 61 a0 50 d1 61 Data Ascii: /D')C3^%Mp /2s{wY@8I-=YI+te8W3:k4q\|p'D`tR1HU<Dgmt7uO-##?;K>?o)hdsl(u#Zn:Y=y@d>-xC6a$?y&yUU#2aPa
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: a9 35 78 d4 22 cd ab ce fb eb d9 1e eb 76 5b f8 d7 15 66 03 5e cb 7d 58 b4 fb 6a 6a 18 31 3b fe f9 88 08 29 91 17 da ef be de 3d 5a 9f 92 69 bb bf 87 a8 55 67 cf 48 1e fd de df da 46 96 50 d8 ce e4 96 35 04 5b a7 96 ab ad 48 28 a6 b7 63 72 bf f3 37 fc ce f9 7c 0b fb 63 0e 34 2f 6f 85 ec 4c a6 e8 d0 e8 d6 85 11 a6 6b 58 67 52 66 52 7b 01 82 d7 8e e4 c3 c2 63 dc 26 34 dd 78 d8 f5 79 fd 4e 8c 9b 85 62 b7 29 12 a1 9b e5 4e 84 f5 2e f4 bc dc 0f c9 7b 27 65 33 8c 93 9e 09 7a ab 0d 77 e0 29 0f 8c 2d 01 aa f5 0e c8 df 23 1e b7 21 ca 2d 1f e5 fb d6 36 5c 53 74 49 0b 3f 57 13 ef 3f 46 d2 aa ab d1 b1 24 87 43 74 13 c1 bc b9 e5 9c b9 45 fd fe ee 3a 9b 0e 98 bb ec 97 f9 42 f2 23 17 94 95 ac 8a eb bb 51 2a 51 63 81 d4 0a 14 ce 81 47 63 1a cc d3 1d 9c f5 fc bc be 2f 9d Data Ascii: 5x"v[f^}Xjj1;)=ZiUgHFP5[H(cr7\|c4/oLkXgRfR{c&4xyNb)N.{'e3zw)-#!-6\StI?W?F$CtE:B#Q*QcGc/
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: a8 ae 38 b0 7d 13 08 6f 2f 0d fb 9d c0 0b f1 5e b1 53 e2 27 06 4a 32 40 3a 36 15 0b 23 98 16 f6 4b 92 69 b2 bb 38 bf 1e b9 65 fb 16 30 12 54 ea 4e 66 0c ee 13 24 3a d6 d9 f0 92 91 34 64 2b 56 f2 6a 45 ae 45 2c 5d e2 e7 c1 2d 2e 99 2e 61 f8 f0 a7 f6 4c aa 12 f1 4d d0 f6 a6 36 ec 1d 15 87 df 16 93 6d 78 f3 cb 82 fd 77 d0 97 4c 7d 0c 9c 01 ba ca c6 0f b6 bd fd 6b 57 04 37 48 2a f1 0e b1 96 4f 22 7b bf dc 98 e7 29 c4 6d 93 83 0d 17 bb ba 8f d5 08 91 9f 4f f6 18 0d d2 c7 97 14 bc dd 22 aa 9f a4 ca d0 d9 b9 1b f0 c8 c9 81 94 14 b4 c5 68 8f a7 3e 2b c6 dc 11 a9 36 07 a3 50 73 82 44 fa ab 19 a6 b2 a2 7c f8 f7 79 46 bd ba e5 d2 07 d2 20 e9 9c 59 f0 ed 8f a2 b8 b1 dc 50 27 53 91 a8 7d 66 ee 5b c9 3a ee d4 a7 b7 c4 2f 1f 6d d7 bd d3 f4 f8 ac 51 11 04 08 04 5c 73 5d Data Ascii: 8}o/^S'J2@:6#Ki8e0TNf$:4d+VjEE,]-..aLM6mxwL}kW7H*O"{)mO"h>+6PsD\|yF YP'S}f[:/mQ\s]
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: b2 2d bc 11 a8 5d 00 07 e6 c1 7e 13 97 b4 34 9b 8c e6 dd 71 1a 8b 3f d2 7f 88 27 9f d3 a5 25 b8 c3 84 ff bc 14 79 e1 df 27 9e 3f 69 ec 87 52 f6 35 37 d4 db 5d ec 13 89 f0 44 b8 04 31 56 dc aa 17 57 ca 3b ea 0c 81 78 aa 54 bb 7c de 76 46 bc 9c 3d 0c 46 d9 84 18 6a cf 71 ba d4 d6 bd 0e d6 1a e4 0a 42 bb a7 09 7e b0 ee 7f 98 fe af 7a bb cc 5d 1c 35 8b 92 94 14 a9 06 e9 68 2c 87 b3 ee 8c 67 dd df b2 a5 9a a5 48 95 88 69 ce 48 70 04 88 4d 19 db 89 2b 33 57 c2 63 57 79 25 14 62 34 15 f0 7c 8d e4 55 b4 63 e7 e2 4e 0e b0 0e 39 57 f5 86 09 11 da 09 eb ee 63 37 1b 5f bf 8d d2 bb f7 06 86 59 e5 e5 79 f0 e6 1a 80 d4 ed 20 fc 54 c2 50 48 a4 a1 bb b5 0f 58 22 7f 7b 43 63 d5 1d 0e 84 a8 45 57 8f 0d 92 23 57 5f ca 65 4d 99 5a dd b2 65 b5 d8 8d 5f 7b be fd c8 a3 32 11 97 Data Ascii: -]~4q?'%y'?iR57]D1VW;xT\|vF=FjqB~z]5h,gHiHpM+3WcWy%b4\|UcN9Wc7_Yy TPHX"{CcEW#W_eMZe_{2
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 19 1f 8f 3a ff f5 84 38 66 c8 ea b7 b0 21 5a 45 dc 0d c0 3b 6e f3 35 49 1f 26 29 56 16 76 53 45 0d ba d8 2a ee 10 dd d8 44 00 62 8a 38 2c 17 5b 4f ec 2d 7b 2d 8a 24 69 96 1f cb ec e3 d3 5f c1 07 42 4b 07 16 62 4f b7 ac a7 30 47 97 bb 59 51 4a a2 7d cc 53 21 3e 1c 0d b5 43 e5 e2 92 f4 73 c3 3b 3b 0f f8 31 91 57 d1 5c e0 1f 17 07 cf 6b 38 d3 76 d4 c2 61 7f 87 a9 eb 69 7c 30 2e da 9a 12 c5 0a 06 be 57 79 22 15 c0 42 96 25 8e 44 fd f3 d8 37 f8 d2 24 06 62 8e 30 70 8a 0c 1f b2 a4 e9 c2 05 2a cd 21 b9 7f 0a 6d b5 64 7a 76 1d 75 15 7c f5 12 4e d0 31 6f c9 f3 da 46 d3 d2 0f e6 18 f0 2c 5a 1e c4 76 c6 31 94 a6 c8 61 13 77 0e a8 a9 2e de af 6c 98 64 eb 8f 02 10 58 58 4e 61 ea 2c f4 d1 95 b2 8f d6 f6 71 71 4b 62 cc b5 a8 a2 bc 8c 79 e2 2e 87 68 40 76 d1 3c 87 8a 67 Data Ascii: :8f!ZE;n5I&)VvSEDb8,[O-{-$i_BKbO0GYQJ}S!>Cs;;1W\k8vai\|0.Wy"B%D7$b0p!mdzvu\|N1oF,Zv1aw.ldXXNa,qqKby.h@v<g
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: ad 18 14 4c 55 7a 8b b0 d2 29 c2 5f 4f eb e5 9a 78 a6 6f 7e 67 a3 0f 10 3c 91 61 5b 43 be d3 b7 98 1d 72 4c 0b 0a f3 8a d7 7a 33 42 6d ec de 21 69 f1 16 1c c2 73 bb 4a 68 02 46 98 ee 32 9d 1f 72 3a c1 f8 61 e6 e3 45 82 d8 01 e2 b0 5a 94 f6 ba 77 fe 78 53 d7 0d 1e 88 63 67 f7 58 4c d3 d8 11 95 36 b6 40 75 dc 98 d6 2d ab c6 05 1e 81 99 26 c3 c9 8a ed d9 e0 66 17 12 5f c2 7b 65 5c 95 f6 56 35 fa 86 60 6f 66 22 af 43 24 9a 15 76 39 34 61 0a 5e b2 03 f8 8f 60 d6 33 a3 97 28 1f 46 7e 23 dd f9 15 fa a8 5b a6 6e 77 6e 69 1a 9e 68 5e 95 6b 56 86 25 ff 50 0c 57 72 c2 b5 64 02 90 d9 72 30 c3 ad 05 e2 c1 2d ee e8 3e 12 01 18 e0 c3 bb 15 3d 53 66 75 95 00 02 ab 8c 13 49 e7 2b 9d 77 5a 08 49 09 8e db a3 ca 7c 22 f6 3c 94 fb 5d 65 99 12 87 06 5c 40 80 8b 2b 9a dd 16 72 Data Ascii: LUz)_Oxo~g<a[CrLz3Bm!isJhF2r:aEZwxScgXL6@u-&f_{e\V5`of"C$v94a^`3(F~#[nwnih^kV%PWrdr0->=SfuI+wZI\|"<]e\@+r
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: a7 03 04 a1 6d c1 e0 7d 72 9b 35 78 17 2f b2 25 58 f6 d3 93 88 47 c2 df 65 63 3f 58 cf a7 dc 87 3d f9 58 0a 59 79 a6 7a 72 62 64 2a 8d 2c 09 5f b0 06 49 51 28 89 9a e9 d6 b6 49 98 78 12 ee f1 21 77 80 39 98 52 e5 18 e3 1b f2 d7 35 6b 6f f6 e5 b8 d6 db 4a b6 f3 3e 82 f0 90 75 5e 83 b1 57 c5 6b 1e a9 16 76 fa a5 c8 2a aa 2a 04 f9 a7 aa 94 0e 43 05 27 f5 5e 0b 82 cf 7c be 2a 71 e1 f9 90 32 2e b5 80 2f 2e 9c 81 a4 36 14 38 91 7f 76 1c 7c ca f2 cf aa d1 e5 d9 54 ac a5 39 b3 ef 77 1a 9c 1d d1 a9 f0 d7 6d 1d 79 92 f8 79 63 9a d3 4e 4e 94 13 3b 12 7d b8 24 f3 e3 9e 23 50 9b 85 08 18 6f 66 be e1 ea a8 ec 89 64 c0 00 42 b9 48 28 17 8f cd 76 e2 36 d8 f2 79 16 51 7d 44 d4 ae bd d8 a1 b9 46 4a 1a 92 1d c7 8e ac 8a 3e 3a 30 ac 3a ef e5 db 9e d3 69 11 d4 5c 5b 81 35 21 Data Ascii: m}r5x/%XGec?X=XYyzrbd,_IQ(Ix!w9R5koJ>u^WkvC'^\|q2./.68v\|T9wmyycNN;}$#PofdBH(v6yQ}DFJ>:0:i\[5!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.17	49847	212.102.56.178	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:32 UTC	542	OUT	GET /pcapp/images/3rdparty/application/videos/watermelon_1.webm HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept-Encoding: identity;q=1, ;q=0 Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://pcapp.store/ Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045 Range: bytes=0-
2025-01-02 11:16:33 UTC	667	IN	HTTP/1.1 206 Partial Content Date: Thu, 02 Jan 2025 11:16:32 GMT Content-Type: application/octet-stream Content-Length: 135327 Connection: close x-amz-id-2: tGpJLEbctwGciUL/O7YTbrMDEYLAHaeojmLo9PG9rUWtfG+TiZRGIsRmYf/WXdkbmEwYeZwdp2s= x-amz-request-id: RKQM9FBN73A8FENJ Last-Modified: Wed, 29 May 2024 11:51:02 GMT ETag: "a4a5d6083a0ba509f88c56ea55cbdd57" x-amz-server-side-encryption: AES256 x-amz-version-id: CFEXEq0N2ZLuP1lFCJBp1daUzflZhGCs X-77-NZT: EgwB1GY4sQH3B5kCAAwBJRPCMQG3gLcHAA X-77-NZT-Ray: 1cb09c0e77aace1490757667ff3ebf37 X-77-Cache: HIT X-77-Age: 170247 Server: CDN77-Turbo X-77-POP: frankfurtDE Content-Range: bytes 0-135326/135327
2025-01-02 11:16:33 UTC	15717	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 02 42 85 81 02 18 53 80 67 01 00 00 00 00 02 10 6f 11 4d 9b 74 bb 4d bb 8b 53 ab 84 15 49 a9 66 53 ac 81 a1 4d bb 8b 53 ab 84 16 54 ae 6b 53 ac 81 d6 4d bb 8c 53 ab 84 12 54 c3 67 53 ac 82 01 26 4d bb 8d 53 ab 84 1c 53 bb 6b 53 ac 83 02 10 46 ec 01 00 00 00 00 00 00 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 49 a9 66 b0 2a d7 b1 83 0f 42 40 4d 80 8c 4c 61 76 66 36 30 2e 33 2e 31 30 30 57 41 8c 4c 61 76 66 36 30 2e 33 2e 31 30 30 44 89 88 40 Data Ascii: EBBBBBwebmBBSgoMtMSIfSMSTkSMSTgS&MSSkSFXIf*B@MLavf60.3.100WALavf60.3.100D@
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: cd d6 1f 1d ad 87 d7 11 2d 31 00 44 6f ec 4d 1c a4 f1 a9 47 61 74 82 62 6c 09 18 3a e8 2b c9 4e 85 c8 1a c3 20 da a6 96 a5 0e 39 6e ba bd fe c0 c5 6a 6e 90 9c 3c c1 95 2c 12 6f 2a e0 8c 79 72 4c 79 99 a5 d9 40 de 92 99 ec 2b c4 4f c0 00 a3 47 db 81 02 9b 00 86 00 c0 92 f0 c1 25 84 00 38 7e cb 45 d5 cc bc 33 d8 f6 6c 6d 4a 7c c1 d7 5f e2 8a 89 ca 6b 52 c5 80 0a 60 00 00 00 00 04 0b 77 1b d1 26 f6 f7 ba 46 3f 6d ef 50 11 8a 06 aa 68 3c 89 cc 85 ea 6b 96 dc 44 47 b8 77 94 70 fa 60 c4 e7 32 3d b4 88 65 2b 20 12 ae ff c0 6a 8d 34 2e 59 58 9d d8 8f 8a 90 33 ad df 4b a3 2d 99 ec 6e 31 f9 b9 ee 2d 61 b9 ba b7 94 e7 d8 ee ed b2 cc 25 1f 42 61 28 d6 88 2d bb bd 68 02 e7 7b cf 30 36 d6 4a d6 1e 33 fb bc 0f 00 4a 02 3a e1 f4 99 ec bf 31 81 c3 e5 fc ec 29 7c 52 43 9b Data Ascii: -1DoMGatbl:+N 9njn<,o*yrLy@+OG%8~E3lmJ\|_kR`w&F?mPh<kDGwp`2=e+ j4.YX3K-n1-a%Ba(-h{06J3J:1)\|RC
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 8c 81 5e 53 42 db 97 b5 2f bf 2d b0 55 03 08 f2 4f da 55 de 70 9f a8 04 0f 86 6f a0 db f1 1e a2 ca 62 b1 e2 64 2f e8 3d 8a 58 c2 73 f6 e9 8e f9 1f ed 6e 9a be d0 6e 3f 68 50 cc fc 4e f8 3d 32 ae 51 2f a0 20 24 25 7c 56 4d 06 a0 b6 99 a8 05 42 b5 3d 65 47 de d1 fb ce 7f 4b 7b 0b 66 1e 2c 87 da 09 af 78 4c 3b 98 34 d1 a7 46 28 2d dc ae 6b 46 84 81 dd fc 97 4f 46 d0 3a 31 56 96 7a e9 3d 80 f1 8d e1 26 bb 74 a2 cd 77 70 7c 72 bd 1e a6 8d e0 de c5 37 cd f2 d2 80 54 9a 23 3b 57 89 d8 c5 4d 9b 14 a8 14 4f fc 67 49 9e cb cd 87 47 48 65 9d a3 e9 67 8d d3 5f e5 4c 78 9f 78 24 2b 39 38 3b 56 9d fa 7f 69 15 48 dc f1 b5 11 52 6c d1 63 69 19 34 10 8c ea ff 6a 5d 69 4a c1 b5 6d b4 89 3c 13 54 45 99 bf 24 bf 36 27 30 f1 2d cd e7 10 e6 6a 6c b0 af 26 fc 8d e9 7d 0f 63 83 Data Ascii: ^SB/-UOUpobd/=Xsnn?hPN=2Q/ $%\|VMB=eGK{f,xL;4F(-kFOF:1Vz=&twp\|r7T#;WMOgIGHeg_Lxx$+98;ViHRlci4j]iJm<TE$6'0-jl&}c
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: d5 da 70 ef ed e7 df ce 67 b7 6d d2 5e 13 00 00 16 8f 07 94 89 ae b9 48 e8 3a 01 79 79 20 3e 02 91 d9 95 4c 9e 4b 57 ba 8e be ea c0 e6 2a e8 41 97 08 17 2a a4 82 dc 59 4f 75 b7 c8 35 2d 10 9e 36 5b 23 64 b6 da 45 55 66 34 be a6 06 d6 3c 44 bb c8 ac 48 e1 99 d3 89 d5 c9 90 8f 91 ba 62 05 4c 03 14 33 25 9c 74 f7 75 31 d8 d4 58 04 d8 f1 3a f7 1a ad 7f 29 2a bd 7c 32 f2 84 99 15 88 66 d5 db be 6f 99 15 fb ae 4e 25 11 bd d9 a1 db a9 20 5c d5 a3 45 f7 42 d9 2a 02 54 43 7f 82 0d 0e 62 a5 81 2b c4 60 2c 3e c1 44 67 3c 56 2b 07 a6 89 73 86 f0 f6 18 f2 74 bb 47 aa e1 8f e7 97 1b 4e 72 a7 a2 bd b8 94 ba 86 2b f9 1a 06 fe 21 0a 26 e2 25 70 1a 18 3e 4d 6b 63 d9 8c 65 36 24 ac b4 71 7b e0 4d 80 b7 57 0c 68 af 11 6f 46 db 53 41 bd b2 f2 93 d0 66 34 38 89 03 03 81 fd 27 Data Ascii: pgm^H:yy >LKWAYOu5-6[#dEUf4<DHbL3%tu1X:)\|2foN% \EBTCb+`,>Dg<V+stGNr+!&%p>Mkce6$q{MWhoFSAf48'
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 23 a7 ae 69 ea 9c 04 48 b1 06 22 aa 2f f1 41 18 b8 6f 8f fa cd d2 43 65 79 5c eb 0e d6 8a 39 ff 28 01 35 b5 f1 18 ae ce 42 d1 d8 c2 54 ac d4 fa 23 d7 91 f9 c2 be 7a d9 c1 00 a3 41 73 81 0f 7f 00 86 00 40 92 9c 3c 4f 81 00 01 80 70 00 00 00 00 00 d9 79 af f8 75 fe b5 2d c6 b5 e5 91 10 0b 3f d1 a2 1b 88 57 d6 ec 66 17 3b 51 f4 eb 8e f7 39 78 1b ac 57 eb 6e 8f 1f a4 f8 89 01 ae bf 05 5f 9a df a2 71 5e 45 af ba dc 95 7e 74 80 3c a8 08 86 86 f5 74 7f f9 0d c4 48 60 c6 e3 44 67 6e 93 cb 4f 3c 46 ec 20 b6 3d 23 38 9f c6 44 a9 c8 12 af e4 73 1d 65 48 0a 75 05 09 c6 77 83 66 d3 80 23 18 53 0c aa 88 cb 90 fc f7 ae 67 99 f7 9f 79 7e 6b fb bc 0a 2e e8 f0 c4 df 25 a1 ab 85 9e 21 ed 66 01 ac 70 bb ef 68 29 b0 4b 0e e6 93 d2 3e 0f 0e 78 d5 3f a0 c7 e7 be 74 1d 83 d8 b5 Data Ascii: #iH"/AoCey\9(5BT#zAs@<Opyu-?Wf;Q9xWn_q^E~t<tH`DgnO<F =#8DseHuwf#Sgy~k.%!fph)K>x?t
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 93 7c c4 ac a8 a6 d6 75 ca 78 e8 24 15 31 d1 cf 9a 0d c5 87 14 03 70 7b b0 6c 4b ee 24 a8 17 03 ce 6b 46 a5 42 60 70 96 29 64 8c 3a 0f 5f f5 80 40 63 12 5c 86 2d ae ab a7 3f ef 25 fc 7c dd 57 ee 73 97 06 b5 fc 8b 80 09 3b 4b 89 8a 55 56 82 80 fb 58 b7 49 b9 6e 91 92 10 0f 16 c8 7c 31 f7 89 be 44 4f a2 8a 48 a5 b2 b6 07 7a 68 a0 37 27 47 1e ba b2 ae fb 2c 9e 80 98 a1 8c 89 88 2e 3b 68 52 61 d9 13 36 8e 97 fa 2f cc e9 52 fe 67 ba e9 87 18 79 cf fa 3a af 90 89 62 8c 90 45 d9 92 f1 91 44 16 95 b7 d8 c2 3e e0 0a 88 b8 0c 4f f2 6b 12 b3 d6 ca 17 9f a0 9f 30 a7 35 fd 89 e6 36 64 47 8a 8d a6 ce 19 66 a0 e8 49 2f 4b ed 9f ba b8 ba 6b 1c e7 08 6f 2e 72 c4 19 ef d7 ac 71 78 f0 5f 7c 41 bd 75 d9 8e a6 9e 6f 84 a7 3e de 1f e5 6e aa a7 5b 70 c4 87 ae 34 f4 82 db 07 be Data Ascii: \|ux$1p{lK$kFB`p)d:_@c\-?%\|Ws;KUVXIn\|1DOHzh7'G,.;hRa6/Rgy:bED>Ok056dGfI/Kko.rqx_\|Auo>n[p4
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 7f 36 a6 89 4a 88 ff e3 6d 71 bf eb 59 a4 5e 74 c8 54 ef f3 91 84 da 94 5e 74 20 1a 58 6f d1 89 50 a3 93 81 f6 d3 62 02 5d 58 43 32 5d f4 6b 5a 03 c5 5a 83 8f 18 f1 04 6c 28 5d a1 ef db 0f a6 ae ba 9a ea 04 83 fe 47 80 f0 d9 04 b2 d8 96 66 27 76 dc 2b 2b 5b 82 af 54 cd 01 f6 90 20 f1 21 82 05 73 ed e8 3c 47 93 4d 0c fb b6 b1 7c 7e f6 03 8b 12 39 59 bc f4 f8 b8 8f 04 18 b4 a6 54 9a 2a 39 87 44 14 87 c5 62 84 a5 0b d5 6b 4e df f8 d4 4b 40 a7 fe 76 22 f0 be 66 37 52 c4 fb 67 b3 c8 b9 1f 59 8e 65 f6 15 6a d6 cc 6c d5 44 63 88 e0 e5 9c 85 71 4e 63 05 92 f9 90 11 a7 05 12 c6 9a cf 76 d2 bd fc 82 6c 8b 0e d3 25 21 dd 84 00 a3 41 ee 81 04 b0 00 86 00 40 92 9c 30 4c c1 00 02 80 70 69 30 00 00 00 00 00 2d 79 c2 5e 7c 29 a9 32 58 80 22 ba 43 18 dc 88 1d c5 15 f0 04 Data Ascii: 6JmqY^tT^t XoPb]XC2]kZZl(]Gf'v++[T !s<GM\|~9YT*9DbkNK@v"f7RgYejlDcqNcvl%!A@0Lpi0-y^\|)2X"C
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 10 42 03 39 b6 ab 8e 26 17 84 77 fc a5 35 eb ba 28 29 b2 c8 6e 42 db d4 52 93 d2 80 97 77 ab 39 28 33 a0 39 88 ad 27 a4 79 9c 1f a0 35 50 74 ca 4e 1d 29 a7 0f 8a 50 e5 62 22 eb b8 8c 4c 26 b2 18 23 02 e9 b1 64 1e 75 b9 5c 63 02 7a e1 97 b3 f3 49 2e 14 b5 ca 12 6b 81 d8 25 3e e0 a6 74 ff 80 db 13 1d 4b d2 f0 fa 3a 54 fd f9 b4 bc fa 6a ba 4d e0 8e 56 3d da 82 6e ac 24 9f 81 1d 75 6e 18 fa 98 35 56 a0 37 dd 5b af 0b 9c ca 9f 5b 38 10 37 6d 9c c3 fe cc 87 e9 3f bc a9 fc c5 ee 6f 2f 13 31 f7 fe 1e f8 93 4f 86 98 7e 7c f1 3e a8 78 c7 43 b8 6a 45 d1 57 38 64 d1 cc 5c db 53 61 05 8c 1d 5d d0 38 dd f8 0a d3 26 a3 2a 07 fc d3 bb 00 8a 06 81 2e 6d 61 5c 07 d1 03 da a5 52 d1 b7 a9 6c b1 15 62 59 d7 ee 18 cf 19 1f fa 96 a1 a1 7f 0f 22 69 34 f6 52 f9 1d 09 4c 70 1f 5b Data Ascii: B9&w5()nBRw9(39'y5PtN)Pb"L&#du\czI.k%>tK:TjMV=n$un5V7[[87m?o/1O~\|>xCjEW8d\Sa]8&*.ma\RlbY"i4RLp[
2025-01-02 11:16:33 UTC	4922	IN	Data Raw: 00 00 00 00 00 3b 5b 52 9c 14 22 b4 46 d2 3d 4f bb ea 21 fb 7b 83 b5 96 62 28 8d a5 03 66 90 61 f3 08 77 45 95 00 15 62 ed eb f5 c2 6e 00 b4 75 52 30 11 fa bc de 16 83 b2 15 0f 61 67 ca 34 60 60 57 78 2d 3a db 9f 26 d4 f6 97 a1 2b c6 b7 fd b4 f7 a8 41 00 45 83 6c 8b b4 84 1c f6 5d 59 3b 97 8b 00 a3 40 be 81 0b fa 00 86 00 40 92 f0 71 33 04 00 06 70 00 00 00 00 00 65 64 c4 af be 35 d8 6e 8d 66 b0 84 1f 63 4d b3 6f ce 13 c5 e5 a7 c9 b6 8c c9 9f 3d 73 a7 97 94 4c 4d 59 f1 cc 4d af 45 37 0d 89 55 45 c9 b0 f0 2b af 25 9d 5f ab 2c f0 e1 50 22 50 d1 de 17 1d 15 e0 b3 6d 2f 16 91 2a 72 9b cd 58 c7 98 d2 b4 c0 76 ed fe 29 ef 52 b8 f0 f7 bf 54 89 b3 08 22 c6 36 b6 8e f0 60 57 51 bc b5 7f de ba 04 49 39 5c 94 3f 83 8e 3c dd 02 41 7e 43 76 2d 2b c1 19 40 9b b4 74 cd Data Ascii: ;[R"F=O!{b(fawEbnuR0ag4``Wx-:&+AEl]Y;@@q3ped5nfcMo=sLMYME7UE+%_,P"Pm/*rXv)RT"6`WQI9\?<A~Cv-+@t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.17	49849	212.102.56.178	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:32 UTC	566	OUT	GET /pcapp/images/3rdparty/application/videos/Hidden_Objects_category_video_4_webm.webm HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept-Encoding: identity;q=1, ;q=0 Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://pcapp.store/ Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045 Range: bytes=0-
2025-01-02 11:16:33 UTC	687	IN	HTTP/1.1 206 Partial Content Date: Thu, 02 Jan 2025 11:16:32 GMT Content-Type: application/octet-stream Content-Length: 528855 Connection: close x-amz-id-2: eAaxKY9+K3h26QxU+H0yvYhb7HrMESuFXEfs+wtgA2pHrRFNSiigK0l4KlwRft10fmOvvySPNH4WAOF7esd/HKTs6maIWAfs x-amz-request-id: XK9EPEJ8TYW5600V Last-Modified: Thu, 06 Jun 2024 08:44:27 GMT ETag: "cca340197220e96581d6aca8f94927e0" x-amz-server-side-encryption: AES256 x-amz-version-id: ilpxTJPWw9nOrOCLN_T8dd6og.mkTC.V X-77-NZT: EgwB1GY4sQH3DY4OAAwBw7WvBgG3oNkDAA X-77-NZT-Ray: 1cb09c0e29a1cf1890757667c004a337 X-77-Cache: HIT X-77-Age: 953869 Server: CDN77-Turbo X-77-POP: frankfurtDE Content-Range: bytes 0-528854/528855
2025-01-02 11:16:33 UTC	15697	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 02 42 85 81 02 18 53 80 67 01 00 00 00 00 08 11 a7 11 4d 9b 74 bb 4d bb 8b 53 ab 84 15 49 a9 66 53 ac 81 a1 4d bb 8b 53 ab 84 16 54 ae 6b 53 ac 81 d6 4d bb 8c 53 ab 84 12 54 c3 67 53 ac 82 01 26 4d bb 8d 53 ab 84 1c 53 bb 6b 53 ac 83 08 11 6b ec 01 00 00 00 00 00 00 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 49 a9 66 b0 2a d7 b1 83 0f 42 40 4d 80 8c 4c 61 76 66 36 30 2e 33 2e 31 30 30 57 41 8c 4c 61 76 66 36 30 2e 33 2e 31 30 30 44 89 88 40 Data Ascii: EBBBBBwebmBBSgMtMSIfSMSTkSMSTgS&MSSkSkXIf*B@MLavf60.3.100WALavf60.3.100D@
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: d6 00 1a e5 e5 74 4b 59 cc 48 c3 6c 93 0d 14 63 0b 4b 14 7c 12 f1 5b f9 02 e0 76 1c 1b 69 c7 9f 01 f0 58 49 d7 ef bc 50 c8 48 e1 83 52 c3 e7 30 01 74 f9 b8 59 89 b9 ac c5 18 b9 4a aa 89 4f e4 3c 9c 19 d5 7c e7 69 8a 5e 72 9e 53 b7 c0 d6 ae bd 12 f7 9f 9b 75 00 33 69 b2 de 87 5f 3f f2 b3 3a 5c 01 ee f6 4d 54 ab ba c9 b6 d6 36 b0 6b a2 4a 78 72 d4 05 b0 d9 d4 a0 ab 0d 55 18 39 ae 2d 9f de 93 09 4f 2a 0b 67 3a db a5 6b f7 d9 23 16 91 1c 8f db 5e 6a 42 35 4c a2 c4 02 cd 6a 5e 03 98 c9 79 35 32 c3 80 d6 3a 1c f9 27 de 99 a8 53 62 c5 59 b3 d5 92 83 47 0a e2 cd aa 61 d7 d6 77 f8 88 2d cb ac 54 80 38 90 3a be 23 50 4e 8a f8 bf 1a 1e f0 05 de 6b 50 6a 5c 6f 3f 73 20 5d f4 08 12 23 df cc 68 f6 9e 13 01 15 f0 81 95 71 04 46 bb 1f ea b8 a1 83 0f 99 13 4b 88 99 46 39 Data Ascii: tKYHlcK\|[viXIPHR0tYJO<\|i^rSu3i_?:\MT6kJxrU9-O*g:k#^jB5Lj^y52:'SbYGaw-T8:#PNkPj\o?s ]#hqFKF9
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: a6 c7 1b e4 ab 6c e9 84 9b 52 99 e2 f3 66 a3 be be 75 52 fd 17 ba a9 ae 54 a5 d9 91 aa 52 3b 09 4b 53 dd 63 3b 5b 54 47 1b 7d ed a6 46 2f 10 40 36 19 04 6d 6d 02 a4 4f 18 51 d8 1d 28 2e 8e c9 42 21 32 21 c1 a9 49 5d 51 01 43 1c eb cb f9 f7 bc 2e 0c 98 e6 25 1c 8f f3 37 cc 1d 7b f3 3e 54 00 3a 4f ae 1f 53 00 a3 4c 42 81 01 4d 00 86 00 c0 92 f0 71 25 84 00 34 7e 8e e8 b6 62 8d 70 c9 b6 e5 01 5c 0f 7e bc 86 a9 c0 d1 88 3f e0 79 5b f4 00 00 00 06 d8 70 d7 7f d3 59 06 27 cb 45 d0 50 17 52 13 4a e5 fa 86 a7 f3 db 87 e4 5e f2 5c 52 41 db 21 96 1f e9 b1 23 b2 0f 48 5c 22 a8 98 6b 60 46 99 56 f9 3d d0 93 d8 a4 ff ed 0c b8 08 0b 17 07 94 6a 1d 02 af f4 b7 4f c2 ee 66 46 25 a2 da d6 e2 f5 a6 88 bb 3c 95 27 25 c7 b0 01 5b 3d a3 f9 ff 45 d8 c8 0e f0 b5 dc 86 20 7b 08 Data Ascii: lRfuRTR;KSc;[TG}F/@6mmOQ(.B!2!I]QC.%7{>T:OSLBMq%4~bp\~?y[pY'EPRJ^\RA!#H\"k`FV=jOfF%<'%[=E {
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 76 43 bd cf 5d 2f 8d 33 83 59 71 57 00 f9 e3 15 61 bf e9 95 a8 2e 2b 35 e2 8b 68 df 1e e3 0c a3 ab d4 a8 85 a4 f5 1c 2b 95 61 63 e6 e2 92 42 3d 5b 4b 8d fd 47 42 9d 40 95 e4 06 b3 55 44 7e 76 23 8d 2f 9a 73 68 6e 0b 55 0c 82 00 37 d5 85 6d 2d 18 0f d3 5e b7 eb cf 67 c2 27 c5 c1 ff 15 27 fa 42 17 96 f5 3e 7c 35 46 5c 5d 78 c4 d9 1d ba 34 e4 3e 64 ad ca 8b d4 be c5 21 00 71 28 0c 79 ff c0 ff 13 6f 70 07 8f 0a 3f 52 7a 28 95 e3 97 6f 5a f2 18 8f da 94 28 bd 92 1d e3 50 3a a4 42 cf 86 3e 96 aa 5b 37 b2 62 9e 6b 90 04 85 0a 3c 2d 7e de d1 31 0e 8a 40 39 b0 99 91 ff dd ef b1 10 07 8f 5a 82 4f 96 4d 9d 09 38 95 b9 1b 6c b3 ed ac b2 4c fc 1d fd df ce d4 5d 51 f8 cb 88 8e 59 4a 75 b1 b2 b0 78 f7 5b fa e0 af b2 70 30 84 5b 1b d8 83 0e e0 b3 51 43 24 c8 83 b3 e2 5d Data Ascii: vC]/3YqWa.+5h+acB=[KGB@UD~v#/shnU7m-^g''B>\|5F\]x4>d!q(yop?Rz(oZ(P:B>[7bk<-~1@9ZOM8lL]QYJux[p0[QC$]
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 83 5d f8 1b 38 ba 01 a8 dd cd 22 dd be 5b 04 f3 89 19 15 81 8f a8 68 4a 00 11 0f a4 bd f2 7f 5f 93 73 85 5e dc 8d 8d 16 8f 1e bf 20 40 c2 99 87 5c 2b a8 71 92 33 36 d2 6b d4 4e 1a e1 39 c8 14 ef 69 43 81 4e 40 13 48 0b d0 70 9d 32 d7 ff 5a d5 64 87 17 37 54 01 4c 1d 60 59 92 85 62 7b e4 c6 28 d8 99 71 7b 4a bc 4d c3 6b 1b 4c 32 07 11 3b 49 fc 92 01 03 e4 ef 6a 88 01 e3 0c ed 81 74 5e f2 97 e4 f1 7c 00 ae de 51 b8 93 6d a6 a3 85 f4 8e ac df e8 8b 20 ad 78 0e eb 3f 04 90 e0 22 da af f8 ad 4a f9 2c 55 d0 2d f6 9a 37 94 aa 98 04 82 cf a7 25 dd f4 9c 4d c9 f9 35 25 b9 2b 76 a9 e1 df ae 33 52 38 c3 32 7c 0d bc 0a 69 b9 b5 0e ff 54 aa 63 bf dd 6c 90 16 cf 55 0a 62 1c 13 fe ea 6e 67 4f d4 af 25 5a 09 09 b8 a9 04 b5 fa d3 a0 bb bd 7b da 18 47 8f 22 b6 f2 41 37 90 Data Ascii: ]8"[hJ_s^ @\+q36kN9iCN@Hp2Zd7TL`Yb{(q{JMkL2;Ijt^\|Qm x?"J,U-7%M5%+v3R82\|iTclUbngO%Z{G"A7
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 13 34 db 85 a1 b7 1b 46 6a da b4 47 5f ca 1d c2 49 d9 7f 5d c5 36 09 94 3a c9 a9 fa 6b b5 0c 92 10 38 b7 e6 38 0d 5d 97 b5 01 cc bc fb 89 2f 75 db ef 71 ea b6 de 33 3a 5c ea 93 2b 7a cd bf 31 45 ee 5b b0 bc 54 21 55 f5 98 20 6d 09 af 74 04 23 2e 84 2d f4 2a 64 8e 33 86 34 9f 30 fa b7 b9 cb 29 55 38 97 10 43 1c b3 81 75 59 72 c8 b8 30 64 af bc ad 71 06 5b 50 14 6a d3 14 71 d0 0a c4 48 86 d2 d7 17 7d d8 22 20 b8 8c a1 2d dc e3 de aa ef c5 0c 36 18 16 01 dd db 2b f5 ac 82 e7 60 f8 26 25 ed a0 18 16 15 ea be 60 32 92 19 91 ec c8 42 83 45 73 0a 36 6e c3 12 66 7c 67 9a 6b e8 c7 e9 ed a0 bc 6c 35 c7 b8 99 78 07 cc c1 34 2a 63 65 93 43 2b d8 4d 3d b2 47 7b 00 7f 6a 24 37 93 b2 8b 53 0c 0c 62 fa 4f 3e be d8 bd a2 39 5f 22 da ec db 97 6d af c9 87 2f 83 27 d5 64 80 Data Ascii: 4FjG_I]6:k88]/uq3:\+z1E[T!U mt#.-d340)U8CuYr0dq[PjqH}" -6+`&%`2BEs6nf\|gkl5x4ceC+M=G{j$7SbO>9_"m/'d
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: c3 f8 8a 33 18 35 06 20 24 da 7e 8f 4a 47 91 bd 49 45 d0 0f 7c 76 91 33 ac 14 97 f0 a9 5a 31 26 31 bb 94 ec 7e 21 9b 70 42 70 12 20 bf 63 39 9e b1 31 02 17 c8 08 39 70 16 fb 65 30 5b f3 a9 a7 20 93 cf 1b fc 76 45 a9 91 1d 46 33 ce 0e 0e 4d 2b 19 36 f5 8a b2 6a 04 55 87 81 cf f9 c8 28 8c 1a cd f4 5c 24 b5 0a f4 bc ae ad 92 5e fe bd 49 04 47 a2 57 b6 b6 46 de 18 91 e7 b3 2c 1c a3 e1 59 89 0a a2 94 96 c6 bf 09 e8 92 a4 f2 6f 1d b8 c5 5b f8 0c f2 3c 9e 51 45 8f ff 66 12 9e 65 b5 b3 4b 0d 76 94 eb 47 c7 54 18 6e a2 ef 0e a9 3b 0a ce 40 2c dc 59 9a e5 c6 15 f9 a2 e3 8b 43 2d 5a e1 a2 d2 9d c8 40 5f ab 96 42 14 73 4d 86 f6 6d 7e d6 25 4a 6f 89 0e 9d cb e5 60 51 ba 15 41 7e b2 02 c4 d1 8d 4f 58 37 2e e5 c4 73 88 12 99 30 9a bd d1 f2 ba 66 8d 61 17 d7 6d 82 50 60 Data Ascii: 35 $~JGIE\|v3Z1&1~!pBp c919pe0[ vEF3M+6jU(\$^IGWF,Yo[<QEfeKvGTn;@,YC-Z@_BsMm~%Jo`QA~OX7.s0famP`
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 91 5f 8f 70 58 4c 8c e2 de 7d 82 47 48 3d 40 79 67 b3 62 a9 50 7f 7e 94 12 75 b4 55 3f 6e 25 cc aa 69 f8 4a 1a b5 e6 c3 bc b3 69 bc cb 6f a5 a4 04 21 44 b5 fa 8a 16 ef 6d 31 d0 2a 09 3f 98 89 cf d3 ae be e0 95 8c 8d 38 fa 54 17 5e 77 40 8b 86 36 72 21 f8 b0 7b be e0 81 28 0a 12 c2 60 83 10 3f 80 62 df 88 9e d9 5f df dd 9a 5f c3 96 ca e1 d1 b9 16 f5 e9 69 ca 1a d8 96 3e b1 a7 d5 a4 ec fb b9 73 f5 77 02 6a 69 e9 9e d0 0e e8 bb d5 cf bd e2 ce 00 08 a6 c1 9f b9 5a 98 15 bc b7 9b 6a b4 00 ab 91 8c 99 e3 be bc c7 12 4d b9 d2 54 ef 9c 9f d3 01 ab 6b 77 a0 ab 7f ed 4f ad 08 df d2 1e a0 da 7f 51 6f 74 0e 90 e0 9c 49 05 b9 cc a3 50 7f ee 8c bd 40 19 1d 7d 81 52 1d c3 1d 3d 0c 90 5f ea f9 a8 28 17 d9 dc df 9d 49 65 71 1d 73 5c 4d 8d 77 59 26 a1 1f 17 94 f4 1e 77 25 Data Ascii: _pXL}GH=@ygbP~uU?n%iJio!Dm1*?8T^w@6r!{(`?b__i>swjiZjMTkwOQotIP@}R=_(Ieqs\MwY&w%
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 86 4d d7 dc f3 6c 5a f3 12 07 b3 84 d4 fb ee 66 e8 c8 1a ce 67 d5 0d d7 dd 64 1c 73 bf a3 e6 dc bc 5e 8e 85 7f 1e f8 0d c2 19 80 19 c4 a3 20 b8 df 11 24 23 e8 17 74 6c 5c 0f 43 3d 2d bd ab 54 7a 2d cd 41 c9 1d dd 2e f6 45 18 37 5f 11 83 c5 bb 34 5a a9 6c 62 27 60 d0 90 0b 67 11 9e b4 5b 40 b7 b8 a7 16 e4 f2 50 34 f4 3b 89 f1 cc 3a 2d 64 f1 da 4e 67 5c fe ba 79 38 28 82 4c b1 ac ff 4c 0e 3e 7d 9e ed 39 4e cb e4 0a f2 d6 9f 46 12 1f 2b bb 01 8d db 87 39 47 a4 01 d0 87 66 25 f4 7a 0b 4e a5 e6 87 9b 62 9b 02 f7 2c ad 1a 30 d2 90 42 85 ca fe b5 4c 88 9e ca 85 45 e9 cb ef ee d1 71 60 18 01 a7 bc e8 c4 63 20 87 16 90 91 f8 70 88 97 15 20 40 f7 66 ee 46 7c c1 53 40 8e da 00 3a 29 c8 6a 2e 8a c9 cc 35 34 ab 02 0c 71 50 f2 ea 88 81 91 dd bd d8 ae 95 e9 65 2d 90 7d Data Ascii: MlZfgds^ $#tl\C=-Tz-A.E7_4Zlb'`g[@P4;:-dNg\y8(LL>}9NF+9Gf%zNb,0BLEq`c p @fF\|S@:)j.54qPe-}
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 0c 53 b4 59 9d 65 ba 04 8d 93 5c c0 35 3d 46 ab 14 94 12 d7 8d df dc 54 5d 0e 6b c6 3a 19 c5 d8 f7 67 ab 0e f2 fc d1 f4 78 d2 68 a2 a3 46 85 e6 9c 33 a7 09 da 99 22 e7 f9 43 f2 cf 57 73 83 96 20 22 9d 8e 69 e8 70 4b a9 b3 73 be 1a 11 1f 5c 84 e6 28 19 0a f0 2a 57 7f 3e ef 3d e8 86 42 fe a7 dd 1b aa 5f 8b 2b 3f c5 c1 86 3f c3 96 50 fa 42 5c 39 fd 7a 3e 3e 9d 65 35 0c 5e df 2d f0 f4 b3 8a c0 88 10 b5 1c ad 7a d0 95 dd 78 b3 ce 26 51 a7 0c 08 c1 49 dc f1 2a f2 65 02 f0 66 3d a5 0c 94 34 50 71 65 60 e7 ca 1c a0 c3 a5 84 5d 51 2c 01 5b 3a 6c 5d 2a 2d 9f a6 1b 8d d9 99 a6 e7 41 1c d3 5c c9 5e b5 d5 cd c2 13 70 7b 49 1e bd 75 c9 2a d7 88 21 86 8a 20 f9 f9 1d 24 5f 97 80 6d 6b 76 94 69 6f 63 eb 3d 75 fb b7 fb e1 7d 0a 62 d5 7e 2b f8 7a d1 a3 9c 57 37 a3 4a 52 57 Data Ascii: SYe\5=FT]k:gxhF3"CWs "ipKs\(W>=B_+??PB\9z>>e5^-zx&QIef=4Pqe`]Q,[:l]-A\^p{Iu! $_mkvioc=u}b~+zW7JRW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.17	49863	162.159.61.3	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:33 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2025-01-02 11:16:33 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2025-01-02 11:16:33 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Thu, 02 Jan 2025 11:16:33 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8fba566d6f7b4211-EWR alt-svc: h3=":443"; ma=86400
2025-01-02 11:16:33 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 20 00 04 8e fb 20 63 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom c)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.17	49862	172.64.41.3	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:33 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2025-01-02 11:16:33 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2025-01-02 11:16:33 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Thu, 02 Jan 2025 11:16:33 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8fba566d7c4142f2-EWR alt-svc: h3=":443"; ma=86400
2025-01-02 11:16:33 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 25 00 04 8e fa 41 c3 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom%A)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.17	49861	169.150.255.184	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:33 UTC	580	OUT	GET /pcapp/images/3rdparty/application/images/apps_73424_66a3b3e271152.png HTTP/1.1 Host: repcdn.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045
2025-01-02 11:16:33 UTC	664	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:33 GMT Content-Type: application/octet-stream Content-Length: 191508 Connection: close x-amz-id-2: Ae7qFEeMaKvkyNQEW8LV0kkMkGg3TF91Zm4ISRJW5eZy70eAqEo3hd96NSnvCv8R3cliAyGDtl/Yk0LoROugS6XYFggDGNj0dcySglBkOJQ= x-amz-request-id: MYN7AF94AWF1GFY1 Last-Modified: Fri, 26 Jul 2024 14:34:11 GMT ETag: "1e835e5c660c739d3e264c484007b1d5" x-amz-server-side-encryption: AES256 x-amz-version-id: rgYkeNUGoUuUJ5TRBICqq.3e9LbcliI. X-77-NZT: EggBqZb/tgFBDAGckiEfAbfq9gwA X-77-NZT-Ray: 15b3c711509687d6917576679ff0ad27 X-77-Cache: HIT X-77-Age: 849642 Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:33 UTC	15720	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 d6 00 00 01 04 08 06 00 00 00 95 ec 15 7e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 02 eb a9 49 44 41 54 78 01 ec fd 07 b8 24 d7 55 2e 0c bf 55 9d 73 9f 9c c3 e4 9c 47 d2 8c 34 ca c1 8a 0e 72 c6 c6 18 9b 68 30 60 c0 7c 36 7c 70 81 4b 4e 36 98 60 c0 d8 06 47 9c 65 4b 96 2c 2b 59 d2 48 93 34 39 87 93 73 ea 9c bb ab fe 77 ed aa 3e d3 d3 3a 23 c9 f7 72 bf cb ff 3c 2a 79 7c ce e9 50 61 ef b5 57 78 df b5 d6 d6 4c 1e 78 fd 78 fd 78 fd 78 fd 78 fd 78 fd 78 fd f8 2f 39 74 bc 7e bc 7e bc 7e bc 7e bc 7e bc 7e bc 7e fc 97 1d af 1b d6 d7 8f d7 8f d7 8f d7 8f d7 8f d7 8f ff c2 e3 75 c3 fa fa f1 fa f1 fa Data Ascii: PNGIHDR~pHYssRGBgAMAaIDATx$U.UsG4rh0`\|6\|pKN6`GeK,+YH49sw>:#r<*y\|PaWxLxxxxxxx/9t~~~~~~~u
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 80 05 72 a2 9a 5b 53 cd cc f3 b2 28 e9 08 06 3b bd b8 e6 a6 55 b8 78 ec 14 b2 c6 14 a2 8d 52 e3 4a 45 ee 10 95 59 20 e2 c1 d8 84 f7 e1 96 26 2c 92 60 a2 ea 48 9d 96 b2 ad 58 35 b4 aa c1 0a e7 ae c0 48 68 e5 32 3f 3a 76 76 aa 08 f7 f3 bf fd 45 1c 8c 4d c2 6c 0a c1 31 33 83 93 7f f8 2f f8 cd bf f8 25 34 d1 c9 dc 7a dd 26 0c 1d 9f 50 ce ab e9 60 e4 d0 e8 c2 03 3f 77 17 82 5f 71 e2 3b 4f 1f 50 75 cd 92 20 a5 f8 d3 45 f9 b1 52 e6 cc 45 a1 aa e2 bf 35 93 60 77 4e 03 ae e4 56 97 d2 1d 55 3d 53 ab 6f 1c 9a 4f 29 43 f5 ae 6e a8 c8 cc 29 f4 8c 19 44 4b 87 0b 2b e8 b8 c5 a7 e3 98 19 6a 44 c0 b3 1c de ce 51 84 89 36 25 a5 7d 24 3d 37 dd 8c ab 68 af 40 a5 bd 72 8b 1f 1b 77 a4 d1 b0 5a 47 63 57 9c 1c 38 95 fb 2c af 9d a4 71 e3 1c fb 1d b3 58 db e3 c1 3c 51 82 e9 e9 d3 Data Ascii: r[S(;UxRJEY &,`HX5Hh2?:vvEMl13/%4z&P`?w_q;OPu ERE5`wNVU=SoO)Cn)DK+jDQ6%}$=7h@rwZGcW8,qX<Q
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: b4 c3 a8 0b 4d 5b da ad 9e cc b0 14 85 61 d6 76 01 b2 9b f3 8b 71 35 ab 82 6e f5 46 d6 6c 03 5b 55 2e f5 8a 7e a9 f1 56 7f 4b 7b 04 2e fe 52 22 ab 8c 6a 3e 2b 75 77 86 e2 ee a4 e6 4e bc 5f 23 5f 84 5f 38 1e ce 07 bd 2c 34 bb 1b e1 6a 09 10 6e ec 40 63 43 03 12 33 0b b8 f0 d2 21 3a 71 67 c8 97 69 aa d5 e0 a1 67 e6 71 f3 9b 9b d0 b9 26 83 ae de 75 38 33 7c da da fb d5 b0 ae 2f 04 40 49 b8 7d a7 ec fb ab e1 a9 53 47 91 19 38 a7 ea 04 ef e8 ba 0e e9 71 72 59 f4 ac f3 ae 8c 6a c9 e6 e0 ba 73 d1 d1 f0 35 38 31 79 3c ad f6 bb d4 92 3a 36 10 be f5 b7 47 90 a1 13 30 35 33 8e f3 67 43 e4 12 cf 63 db b2 65 88 b4 86 71 f6 a5 49 dc bd 66 33 d6 6f ee c5 57 fe fe 7b 78 cb ae 5b 30 93 9d c5 c3 c7 5f 44 8e 70 99 64 b3 56 74 bb 11 bc db 05 a0 ba 4f 92 b1 98 7d 6b d5 b0 d6 Data Ascii: M[avq5nFl[U.~VK{.R"j>+uwN_#__8,4jn@cC3!:qgigq&u83\|/@I}SG8qrYjs581y<:6G053gCceqIf3oW{x[0_DpdVtO}k
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: c3 a4 93 08 75 38 b9 c6 e1 23 df 1d f4 a1 71 79 1f 21 f9 8a ea a5 ac 99 56 de 8c c8 80 a0 b2 b0 f7 b5 15 dd 5d 8f 82 d5 6f 91 28 c7 2b b6 34 ac ef a5 9a cf 0b 84 c3 85 a7 a2 d7 b2 5a 4b 92 f0 21 75 4d 26 27 24 e0 91 d6 55 84 49 b2 56 a2 8f 2a 99 d0 1c 2a 7a d4 74 7a 92 24 ed e5 73 79 a5 70 bc 0c af 9d 18 8e 53 e9 48 1b 3a e2 63 bd 6d 5d 68 2d 2d 20 4d 9e f0 da dd d7 a8 4d 72 f5 ee 16 04 36 ae 57 50 91 7f d9 72 78 b8 98 a4 f5 d6 d9 17 5f c4 7f 1e 3f 8d a9 79 c2 99 e4 5d 2a 59 0d 01 c2 03 d3 33 f3 56 3d 9c 69 b5 47 d3 cb b2 67 23 61 1d 7a 52 d2 0d ea fe fb df 84 37 3e f8 20 a2 e4 17 8e 1c 3c 88 d3 67 0e 21 da e0 43 13 3d 1a b7 14 1f 42 76 eb a1 e7 16 ee 85 1e 68 b2 b6 01 d5 26 28 64 43 bc f7 69 0b aa 92 1d 4e d4 66 b4 f2 4f fe 36 6d 45 76 d9 cb b7 14 86 0d Data Ascii: u8#qy!V]o(+4ZK!uM&'$UIV*ztz$sypSH:cm]h-- MMr6WPrx_?y]Y3V=iGg#azR7> <g!C=Bvh&(dCiNfO6mEv
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: 5b 35 49 8b f4 62 e7 c9 20 f2 d2 dc 59 6a 2e 97 b5 61 b9 24 fb d5 e9 b0 8e 0a 93 ad e5 51 be bc 88 f3 17 8f 63 84 b0 dc 90 f4 91 ad 5b 1a 85 99 22 0c 10 e1 5e 25 a9 38 05 d3 96 2a 77 bd bc f6 7d 07 8e e0 a5 1c 2d d7 a1 4e 2d 53 59 d3 7e aa 9e c0 bb 26 bf fd 91 93 de b1 26 1c 82 d7 a2 84 85 a1 0a 3b d7 1f 81 c0 04 89 91 5c 55 39 c4 9a 72 03 8d b8 6c b8 d1 48 c6 ac 71 fc ac b2 e7 41 3d 70 72 1d a9 93 4b 77 15 19 d8 55 32 bc 18 ad 85 0c 61 b2 34 0e 1e dc 8e 3b ee 38 44 5a 9b c4 1b 47 4f e2 14 21 c4 15 fa ca 73 39 da ae 34 e3 ab e1 3e 7c e3 52 19 4f 1f dc 8a 4a 47 2f 2e 8e ce a1 bb 6f 18 e9 9e 01 a4 bb bb 51 25 c4 35 b6 fc 6d 1c 7d f9 55 be de ab 55 97 62 54 4a 4b b4 ea e6 c7 27 54 a9 d9 ba fd 2e 4c 2c 2c 91 d1 8f 2a 82 20 8e b1 59 c2 c9 e7 ce 9c a3 9f 2c 8e Data Ascii: [5Ib Yj.a$Qc["^%8w}-N-SY~&&;\U9rlHqA=prKwU2a4;8DZGO!s94>\|ROJG/.oQ%5m}UUbTJK'T.L,, Y,
2025-01-02 11:16:33 UTC	16384	IN	Data Raw: a4 b5 b2 71 db d9 86 17 d7 09 75 4b 1e 73 3a 9d d6 ea 4c 4f f1 8c 4d e6 bb d0 9b c9 21 49 24 6f b6 de a5 90 bd 92 06 bf 29 9c 5e e6 5a af 07 d0 ac 1b 96 37 e8 d4 3b de 51 2b 78 3d 88 f2 2a b5 8d ce 64 1f 68 83 a1 bb 3b 8b a1 fe 3e 4c 12 c2 92 94 10 2d 6f 4a ff 69 9c 0b 1c 15 cd 21 68 34 ba 88 6a 09 7c d0 44 04 11 12 f1 ca 6a 01 81 68 44 b1 f3 d7 de 7a 5b 0b 04 c8 a6 68 08 79 c0 58 0d ca 7c 35 49 da c0 44 32 25 5d 2c 09 8d 12 6b c0 d6 da 10 5c 68 0b 84 f8 d1 c9 39 26 25 72 54 52 7c 1a 25 24 49 50 49 6a 28 83 09 fa 88 b4 2e 26 2d 67 6e 7e 5f d4 46 5f 2a 4f 78 3a 8c 8c 45 e8 99 0e f1 28 85 94 49 7e 37 d5 63 34 84 c2 76 b4 5c 12 86 bd c2 e7 9a aa 20 da 6b da 9c 05 08 37 a8 d0 95 39 db c6 67 26 84 25 e5 90 42 05 6e 21 61 0c 7b 45 13 6b 48 30 65 d3 e7 4f 15 83 Data Ascii: quKs:LOM!I$o)^Z7;Q+x=dh;>L-oJi!h4j\|DjhDz[hyX\|5ID2%],k\h9&%rTR\|%$IPIj(.&-gn~_F_Ox:E(I~7c4v\ k79g&%Bn!a{EkH0eO
2025-01-02 11:16:34 UTC	16384	IN	Data Raw: 37 62 08 81 75 2c 25 ef 67 9a bd e6 67 10 5e 4b e0 66 e6 76 a3 8d 58 6f 1d bc 9f bb 15 e6 73 33 0c 67 23 df 73 ef d9 8a 61 f9 5f 77 19 a9 30 15 77 ae 1b 59 6f f7 7d ff 5a 6d e4 00 fa 5f 77 e7 e0 7d 6e ff df ad 9e f3 66 5e 77 c7 8d 98 8e ff df 81 16 5a bc ff df 37 62 c4 37 5a 87 f5 3e 73 b3 df 69 36 3f f7 6f ef 77 bc ef 35 a3 97 56 d7 dc c8 eb de fb 6f e4 b5 56 ef 7f d0 cf 7f b3 ef 37 9b e7 7a d7 6e c6 07 03 81 5b 53 22 9b d1 b0 7f 2e 7e e1 fa 41 3f ff eb ed d1 7a bc f2 46 67 c3 ff da ad ac b7 7e e6 66 05 eb 7a 87 c2 bf 49 ad ae 75 23 e6 78 23 46 b7 91 07 bb d9 cf 6e 74 78 37 b4 d5 c1 f4 bf be de c6 b5 ba 7e ab 7f bb af ad 47 e4 de 43 b1 91 e7 d9 c8 c1 5c 8f 89 b6 da f7 9b a5 83 1b dd 47 9e cb 6f 3d b9 ff f6 0b 83 8d ae 79 ab f5 6e 76 88 bd fb db 68 34 36 Data Ascii: 7bu,%gg^KfvXos3g#sa_w0wYo}Zm_w}nf^wZ7b7Z>si6?ow5VoV7zn[S".~A?zFg~fzIu#x#Fntx7~GC\Go=ynvh46
2025-01-02 11:16:34 UTC	16384	IN	Data Raw: 87 43 99 6e 38 fc 54 4e aa a5 30 cd a8 3a 60 a5 13 25 d5 42 56 ba 21 e9 4d 54 2e 18 88 a5 9e a4 0c ce cb 63 5e c9 9e ae 25 5b aa 93 82 f8 6f 29 40 73 30 c1 66 a9 18 46 09 e6 a4 d0 b1 20 bd c5 8d 1a c8 34 f3 de 3a f8 39 e5 ef c2 f0 c8 71 5a 49 45 bc f2 4a 18 d5 75 cd 18 19 0b 10 d4 52 c7 21 81 38 7c 6e 0a ef 70 d5 62 dd b6 ed 48 c6 f3 aa 99 cc ed f7 df ad 0e 45 f8 a7 2f 7e 15 37 dd 7a 13 ba 57 6d c4 3c d5 84 23 47 2e 62 2e 12 45 ab 9f 80 9d f3 65 60 c1 05 77 de 87 d5 6b 6d 5a d3 12 ad 9a ef 4d fb f1 1a c9 ea 5a 8f ff 49 1d d1 76 58 14 54 c3 9c 2c d7 21 69 3f 22 04 8c 91 70 50 ed 9b 6d ad ab 25 61 e3 7b f1 d8 d4 b6 40 97 d5 4e 35 cd aa 92 69 79 8f b9 a1 f8 e6 ae 8e f2 bc ae 1c eb b7 2d 5e 5a 9a 81 cb 5f 57 16 76 c8 43 a4 1b a6 1d e8 29 45 45 67 46 11 ce c6 Data Ascii: Cn8TN0:`%BV!MT.c^%[o)@s0fF 4:9qZIEJuR!8\|npbHE/~7zWm<#G.b.Ee`wkmZMZIvXT,!i?"pPm%a{@N5iy-^Z_WvC)EEgF
2025-01-02 11:16:34 UTC	16384	IN	Data Raw: 52 0a 29 aa 4d f4 49 62 c9 57 0e 9d 80 c7 18 a3 fc 61 41 84 de c2 50 24 44 24 c7 24 42 f9 c6 ec d1 8a 81 0c 86 a2 f2 0e a4 d5 9b 8e 09 66 21 ae c7 bf fc f8 b0 da b3 65 b4 e6 f8 7e 63 c8 ea 28 cf 8a 1c 96 9f e4 bf 89 ae dd 0d f4 15 6a c9 08 32 aa 31 76 51 2f 1d 9c c2 aa 8b 93 ce 10 41 13 3d a9 78 2a 8d 30 9f cb 96 4b 31 09 e6 f0 c9 3f 7c 00 3d 86 41 2c 9c 3b 05 d3 d8 38 4e 5d fa 02 3e 7c eb dd 78 e8 27 fd 28 59 62 f0 d5 95 30 35 37 c8 a4 48 59 cf 54 cb 85 60 85 c7 61 83 d9 65 57 fe a4 48 c1 b2 b7 4c 12 97 02 04 06 ad 67 69 91 1e 4a 48 aa 83 89 6a 4d 0c 58 a1 f8 10 c7 6f 02 f5 be 2c da eb 0d a8 69 b4 90 a5 e6 18 64 62 d8 d2 c3 f1 ef fb 22 7c 94 c1 ff ee b3 37 e0 47 cf 9c c5 93 2f 9d 83 ec 05 30 97 0c 6f 19 df ca a0 5e e9 bd 4a 01 8e 3c d4 89 16 72 b6 a8 49 Data Ascii: R)MIbWaAP$D$$Bf!e~c(j21vQ/A=x*0K1?\|=A,;8N]>\|x'(Yb057HYT`aeWHLgiJHjMXo,idb"\|7G/0o^J<rI
2025-01-02 11:16:34 UTC	16384	IN	Data Raw: ee 9c 9c 23 69 d0 9a 8a 8b cf 96 35 da 31 b1 40 b9 30 3f a1 16 80 8e 00 cb 59 57 8d ff ee 71 ad 8a ec 02 55 98 d3 67 2e 90 f1 46 b0 b5 d6 49 89 9c 92 d5 b8 19 a7 2f 4e a3 ae 9a be 96 6e 12 d9 16 32 e8 c2 04 22 43 03 30 25 9c 44 fe 56 bc f4 d4 71 a2 ec 35 f4 e0 8f 61 61 15 a5 46 77 16 76 ce c5 c6 c2 51 b2 97 5a ca f4 64 61 5e 17 de ff c1 bb 69 1b 4c 21 1f 3c 8d f3 67 46 70 e2 62 41 f5 45 cd 31 31 1d 3e ba 0f d7 ed bd 93 f7 7b 02 9f fd bd 6d 72 3c 12 ef 45 1c bf f5 a0 11 6e 06 e6 87 7e 3a ca 88 61 e3 1a 0b a0 da 57 cf 7b c0 35 48 66 b3 76 ef 6e c5 96 0b e2 07 ca 41 ce 39 39 f4 a0 49 36 48 11 7c ea f1 dc c3 71 ac b6 ad 45 f5 72 da 04 be 5a dc b0 9b ea c0 4d f4 ca dd d7 61 fe 90 1b 85 60 0e e3 93 a3 b8 d0 7f 92 60 b4 1a b3 0b 41 78 96 17 51 bd b6 03 ab 1a 5a Data Ascii: #i51@0?YWqUg.FI/Nn2"C0%DVq5aaFwvQZda^iL!<gFpbAE11>{mr<En~:aW{5HfvnA99I6H\|qErZMa``AxQZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.17	49860	18.173.205.91	443	2936	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:33 UTC	702	OUT	GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":12,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735846122&nocache=14012 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-02 11:16:33 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 02 Jan 2025 11:16:19 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 65c5d5104f267ee43cce97d81871c884.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: nhSszq-mvn7X0akvmYVlinETVebuvSZ54mgx0WHxQesMo8EWbSoPnw== Age: 15
2025-01-02 11:16:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.17	49867	169.150.255.184	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:34 UTC	580	OUT	GET /pcapp/images/3rdparty/application/images/apps_73377_663ce6da92b28.jpg HTTP/1.1 Host: repcdn.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045
2025-01-02 11:16:34 UTC	637	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:34 GMT Content-Type: application/octet-stream Content-Length: 83447 Connection: close x-amz-id-2: +iJSQDWXDir1k0o1xSZsiMi008Cg3DOQ7e4rO9lGGx1C7Scnp1IUKY/o7EXRZHxVCdMVnQHP+nU= x-amz-request-id: 6K5T5PT18QDE4JWC Last-Modified: Thu, 09 May 2024 15:08:11 GMT ETag: "ee755b13adeaba5325e4a1686eccb9e7" x-amz-server-side-encryption: AES256 x-amz-version-id: 2YkeYGjrls8Lsgmm5_MI4xzBzYoPvgJ. X-77-NZT: EgwBqZb/tgHXXvIMAAwBnJIhJwG3DkACAA X-77-NZT-Ray: 15b3c71105b3a1e692757667ec0f5206 X-77-Cache: HIT X-77-Age: 848478 Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:34 UTC	15747	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 00 7e 00 f9 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFHHCC~}!1AQa"q2
2025-01-02 11:16:34 UTC	16384	IN	Data Raw: e2 21 46 95 3a 53 73 a9 5a 9f 16 d3 a0 a1 7a b1 8c a7 5a 38 5e 45 28 4e 50 51 a9 13 f7 f7 fb 43 c4 1f f4 03 d3 bf f0 7d 73 ff 00 cc f5 7b 1f eb 1e 17 fe 7c d6 fb e1 fe 67 fa 6f ff 00 10 ad 7f d1 40 ff 00 f0 cd 2f fe 79 9f c9 be 85 f0 c3 c4 96 fa d5 ae a1 f1 6e 7d 1d fc 28 35 49 ef af 6c bc 0f 2c 97 51 5e 5e df 69 f6 9a 74 5f f0 94 9d 4f 43 d3 2e 21 d2 b6 c7 3e 9d 71 71 e1 7b 5b 09 9a de f6 15 b8 1a 56 8f 16 a8 f3 ff 00 25 e5 9f 47 fe 0f c8 f1 71 c7 e1 eb 66 39 bc b0 b4 b0 74 b0 98 5c d2 70 54 e8 c3 0b 8a ab 89 6a 4b 0b 15 f5 ea 6e ac e9 56 74 b1 4e 57 a9 87 f6 b5 1e 2e b5 44 a1 fc 91 91 f8 9b e1 26 61 8c 8e 17 85 72 ee 21 cb f3 98 e5 d9 6e 1f 2f af c6 0f 27 a7 85 5f d8 6a be 26 30 cb ea e0 71 6e 84 31 f5 a7 cb 89 a7 0c e6 ad 4c 26 27 15 41 55 52 a9 99 cf Data Ascii: !F:SsZzZ8^E(NPQC}s{\|go@/yn}(5Il,Q^^it_OC.!>qq{[V%Gqf9t\pTjKnVtNW.D&ar!n/'_j&0qn1L&'AUR
2025-01-02 11:16:34 UTC	16384	IN	Data Raw: 6c b1 93 c3 ca 55 31 0e a5 3f 81 ad be 16 5d c3 e2 e3 0e 9f a1 f8 ab c4 3e 29 bf b4 b8 b8 d6 b4 f8 bc 1b e2 24 b8 b4 b4 b0 7d 5f 4e 99 e7 f0 9e 99 69 06 bd 6f 69 63 73 e1 dd 26 61 a9 ff 00 67 ce 56 19 f5 2d 4f c4 0b 7f be e2 fa 1f a2 9e 36 8d 2a 0a 7e da 14 e9 b6 94 2b 3a f0 f6 73 e6 85 29 53 82 ac ef 4e 6a 71 73 b4 7d c8 ea a9 d3 95 92 2d 71 16 6b 8c ca 31 79 7b 9e 0f 2f c1 e5 73 54 a8 7b 3c ff 00 2e af 2a d2 92 ca 31 8b 0c b3 4c 5d 4a d9 7e 27 10 e1 9c 63 69 d4 cb 96 2a 31 f6 94 70 38 5c a3 ea b4 e9 51 a1 57 f6 2b f6 26 bd f1 48 f8 4b 79 a4 78 8f 47 bc f0 e6 87 e1 af 12 eb ba 67 82 75 8b ab 45 d2 21 f1 0f 86 a7 30 6a 70 78 83 49 8a 7b 6b 98 6f 74 cb fb bd 42 f2 f8 5d 5c 1f 33 46 ba bc be d0 e6 9a f5 34 c7 61 f9 fe 7e b0 ef 1a e5 86 9c 6a ba b4 28 cf 12 Data Ascii: lU1?]>)$}_Nioics&agV-O6~+:s)SNjqs}-qk1y{/sT{<.1L]J~'ci*1p8\QW+&HKyxGguE!0jpxI{kotB]\3F4a~j(
2025-01-02 11:16:34 UTC	16384	IN	Data Raw: c4 bf 55 c7 f0 d6 23 23 e3 4c 9b 07 c4 b9 06 55 90 7b 2c 35 2c cf 01 9b 61 72 bc c7 01 5f 15 56 8d 48 d0 ad 5f 31 c6 d3 a4 e8 e3 bd ad 4a 3f 27 7f c1 43 f4 ff 00 85 5f b3 97 85 3c 23 a8 df 78 b6 0f 8a 9f 17 b5 6f 88 fe 23 f0 df c4 4d 77 c3 5e 2f d5 35 7f 00 78 5f c2 9a cd f7 88 2c fc 25 e1 3b ad 23 c4 3a 8a 59 4b 1f 86 ed 97 c1 90 5e 5f f8 43 42 9a f5 2e ec b5 6d 5b 5c d1 b4 13 e2 6f 0f c7 77 f6 de 19 f1 ce 65 c3 f5 eb 51 9f d6 a5 92 c7 2b c4 d6 a3 91 2c 2e 0a 52 cc 71 d3 85 37 59 d5 78 96 a1 87 8e 32 a4 2a 2a d5 6b b9 55 ab 41 52 85 37 24 a7 3a 35 c3 1c 33 c1 3e 1a e4 59 0f 86 18 1c 7e 13 13 c5 59 4e 53 3c 7e 6c f2 ba 35 e9 c6 73 72 58 cc 66 61 88 c3 e1 a3 2a 18 2a 98 99 57 9b c9 b0 78 9a b4 ab 3c b7 0b f5 6c 32 9e 1f 03 18 9f 4a 78 73 e0 b7 c2 af d9 e3 Data Ascii: U##LU{,5,ar_VH_1J?'C_<#xo#Mw^/5x_,%;#:YK^_CB.m[\oweQ+,.Rq7Yx2kUAR7$:53>Y~YNS<~l5srXfaWx<l2Jxs
2025-01-02 11:16:34 UTC	16384	IN	Data Raw: fc 6e 12 b7 12 e4 b9 3e 5d 8d c8 a8 70 fc 32 1c c3 15 5b 15 4b 2d c2 e1 6a 63 f3 19 65 d9 3e 62 9e 06 b6 1e 15 70 d8 4a b9 3c aa cf 1b 4b c8 6e ad fc 55 a4 a4 d1 ea f2 dc d9 de 5a c3 62 2f a7 b2 8e fa 0d 3f 4e 9e ea 6b e4 b5 82 e3 55 b3 f1 bf 80 a0 9d ee d2 c2 f7 c9 22 28 ed a7 64 41 1d c5 c4 b1 1b 7a fe 36 e2 de 09 cc 38 3b 36 fe ca ce 72 a5 41 d5 9e 26 79 7d 4a b2 c3 e2 69 66 d8 6a 31 a3 ed 31 79 72 a9 90 71 17 35 2a 73 ad 47 da 45 d4 78 9a 17 9c 6b e1 f0 e9 f3 9f ed 3f 83 de 39 f0 27 8e 1c 2b 0e 2b e0 2c fd 63 b0 f1 74 b0 f9 96 12 a5 2a f8 1c c7 24 cc 39 15 67 97 66 f8 7f ed 5c a6 78 7c 57 b1 92 a9 1b c6 58 7c 45 39 42 b6 17 13 89 a5 ca db b4 6d 57 55 d2 ee 66 d5 bc 3d 7d 24 d3 c8 f7 17 9a c6 9c 35 1d 32 6d 3b 55 79 23 30 21 d4 20 d5 fe 2c 6b b7 5a 5d Data Ascii: n>]p2[K-jce>bpJ<KnUZb/?NkU"(dAz68;6rA&y}Jifj11yrq5sGExk?9'++,ct$9gf\x\|WX\|E9BmWUf=}$52m;Uy#0! ,kZ]
2025-01-02 11:16:34 UTC	2164	IN	Data Raw: d3 74 fd 4c 69 d6 56 ba b5 dd ae ad a5 47 79 a7 dd 45 74 25 8c 27 d9 cd f0 13 07 5b 52 f7 36 57 cb 73 65 25 c4 5a 75 c8 06 e7 4f 8a 66 d1 4a a5 0f dd f3 4a 3c b3 a9 4e 2e 94 92 92 94 66 93 6e 5c 89 bb 37 68 49 59 a8 39 2b 25 37 13 d8 c2 62 31 d4 32 ca 19 be 59 89 c4 e1 61 99 ca 95 38 4d 63 b1 10 c4 50 a5 4e 0e 70 50 a7 18 54 a3 87 94 61 5e 2b 9b 07 3c 3d 49 4a 78 a5 2a ae 35 fd dc 9b ed 56 e2 2b 1b 0b 25 33 dc d8 e8 72 6b 37 1a 15 8c 97 f7 10 d8 58 d9 42 da ae 9d a8 2c 7a 74 e3 53 d3 2d cb 5c 0d 41 a1 d3 ed 2c 61 b0 b8 5b 98 ae 49 b0 96 33 6f 5b c6 55 6b 5e 94 aa cd c7 9a 0a 71 9c 9c d2 71 b4 e1 c9 ac 6d ee d9 39 59 4a 2d 34 ae 9e 9d 18 ee 25 e2 3c 56 57 85 c2 66 9c 47 9d e3 32 7a 38 6c 05 2c 06 57 88 c7 e3 31 d8 1c 25 79 61 30 d2 c3 54 a1 82 af 8b a7 4e Data Ascii: tLiVGyEt%'[R6Wse%ZuOfJJ<N.fn\7hIY9+%7b12Ya8McPNpPTa^+<=IJx*5V+%3rk7XB,ztS-\A,a[I3o[Uk^qqm9YJ-4%<VWfG2z8l,W1%ya0TN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.17	49866	169.150.255.184	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:34 UTC	580	OUT	GET /pcapp/images/3rdparty/application/images/apps_73394_663ce7758e4ec.jpg HTTP/1.1 Host: repcdn.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045
2025-01-02 11:16:34 UTC	637	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:34 GMT Content-Type: application/octet-stream Content-Length: 62594 Connection: close x-amz-id-2: 7yfRiUmNHVbztqkLBt+w/2SbqFdyh9fQIyWs+RvahC87Xqxn1rrx84aUy133yJ1CGh9nY3N7pAs= x-amz-request-id: B1JY3DMMVKSEFYXP Last-Modified: Thu, 09 May 2024 15:10:46 GMT ETag: "99024bc9d17bc0ee957cd439108c1ebe" x-amz-server-side-encryption: AES256 x-amz-version-id: uNyVL6_YPfXRGCdCwrtZHj9t5LTu8HQI X-77-NZT: EgwBqZb/tgHX0PkMAAwBJRPCMQG3/EcCAA X-77-NZT-Ray: 15b3c711a2b42be69275766728d55306 X-77-Cache: HIT X-77-Age: 850384 Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:34 UTC	15747	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 00 7e 00 f9 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFHHCC~}!1AQa"q2
2025-01-02 11:16:34 UTC	16384	IN	Data Raw: 24 01 5d ad 25 3b 24 08 e1 76 b6 08 27 1b 56 ad 56 94 60 ea d2 a9 18 d5 55 1d 29 c9 cd 53 ad 08 c9 d3 9c e1 39 42 3c ea 33 f7 26 e3 75 19 7b bc cd a6 96 f5 32 68 42 95 1a b0 c4 51 ad ed a3 cd 28 43 59 d1 bc 21 38 aa 91 e6 6e 3c d1 a9 17 17 a7 32 bb b5 9a 6f e0 7f f8 29 97 82 f4 bf 11 fc 25 d0 7e 24 47 6b 6c 9e 25 f0 5f 88 ed 34 97 bd da bf 69 bd f0 b6 bd 05 e2 dd e9 92 b8 19 9a 0b 2d 52 1b 2b fb 68 e4 0e 96 c9 36 a9 e5 a8 37 b2 96 fe fd fd 9f be 2f 63 b8 7b c4 6c 57 87 38 dc 45 6a bc 3f c6 b4 2b cb 2f c2 39 b9 52 c0 71 16 59 81 af 8e a5 5f 0f 0b 68 f3 1c 1e 1b 11 84 af 04 e3 1a 95 63 84 94 52 9c 67 ed 7f 22 f1 4f 86 21 fd 91 53 3a a3 18 fb 5c be 94 5e 2d 72 59 62 30 75 b1 34 30 b3 55 1e aa d4 fe b5 ed 24 dc 67 cd 4e 1e cd d9 6b 1d 8f 85 5f b0 e7 c2 7f 0e Data Ascii: $]%;$v'VV`U)S9B<3&u{2hBQ(CY!8n<2o)%~$Gkl%_4i-R+h67/c{lW8Ej?+/9RqY_hcRg"O!S:\^-rYb0u40U$gNk_
2025-01-02 11:16:34 UTC	16384	IN	Data Raw: 94 60 ff 00 ab df f8 42 ef 3f bd ab 7f e0 05 c7 ff 00 1b af c8 ff 00 b5 bf e9 d5 1f be 5f fc 89 fd 99 fe a1 e0 bf e8 61 8a ff 00 c0 28 ff 00 f2 47 e3 a7 ed 0f fb 3c 7e c5 be 13 f0 85 85 8f 8d ed 2c 6d b4 7b 3d 56 79 61 f8 a7 f0 cb c5 17 d6 5a cd 97 88 2f a4 ba 9f cd d5 7c 17 a8 a5 de 95 38 69 27 94 c6 90 39 8e 57 05 37 c6 ec 80 ff 00 9d fc 1b c6 99 be 67 7c bb 2c e3 3a 19 a6 63 84 a7 2a b5 30 99 b4 f0 d5 9d 7a 49 f2 c9 bc 45 2e 49 ae 47 3b 5a 0a 9c 94 62 b5 6a f6 ff 00 42 7c 7c f1 1b c4 3f a3 f6 37 01 9e 78 a5 e0 1e 5d 8d f0 db 33 c6 53 c1 d3 e3 df 0e 33 0c d3 05 8c ca 73 2a ad ca 9e 1b 39 e1 5c e2 18 87 45 d7 8e 94 2a d3 cc f1 74 71 15 54 a0 9d 39 a8 41 fa 47 ec 75 a2 f8 fb c0 1f 05 b5 2d 1f e0 b6 b4 bf 16 7e 09 cf ac 4e 6c fc 53 73 a7 49 0b a5 da da ac Data Ascii: `B?_a(G<~,m{=VyaZ/\|8i'9W7g\|,:c0zIE.IG;ZbjB\|\|?7x]3S3s9\E*tqT9AGu-~NlSsI
2025-01-02 11:16:34 UTC	14079	IN	Data Raw: 4d b5 db fb c3 ad ea 70 5d 1b 2b cb f7 b3 d3 2d df c8 b0 ca db e9 96 ab 11 8e 67 6b 94 fb 0f 0a bc 38 f0 db e8 ef e1 f7 1a f0 cf 0e 71 5d 7e 33 cd f8 cb 30 c2 e3 31 b9 84 b2 e7 84 aa e9 e0 e8 51 c3 e0 b0 d5 2a c5 cf 0e a8 60 e0 b1 55 23 c9 27 2a b2 c5 4e 32 8f 32 e6 3f 27 f1 7f c6 9c 8f c4 0c 93 30 ca f0 95 72 e8 e6 58 ec b3 15 95 e1 30 b9 2c 31 2f 09 4a 58 ba 52 8d 5c 5e 23 11 3c 36 1e 2e 54 d5 a6 a2 94 e7 2f 67 1a 70 94 14 e5 38 7e 8c 7e da 1f f0 57 ff 00 da db e3 f7 82 60 f8 7d f0 af e1 fd 9f 81 3c 2d a3 f8 57 c2 f1 78 13 58 b8 f8 f3 e2 fd 07 c6 5e 0d f1 55 85 bf 88 34 cd 7f 5c fb 77 82 f4 af 87 76 da f6 8f e2 0d 1a f3 c3 f2 43 e0 ad 5e 77 f0 d6 97 ab 68 16 9a 8d cc 1a cc 93 5c ac be 16 23 1b 3c 74 a5 0a 75 6b 60 bd 9d 6a 75 29 55 c1 e2 2a d1 ab 29 53 Data Ascii: Mp]+-gk8q]~301Q`U#'N22?'0rX0,1/JXR\^#<6.T/gp8~~W`}<-WxX^U4\wvC^wh\#<tuk`ju)U*)S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.17	49868	212.102.56.178	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:34 UTC	550	OUT	GET /pcapp/images/3rdparty/application/videos/classic_games_4_webm.webm HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept-Encoding: identity;q=1, ;q=0 Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://pcapp.store/ Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045 Range: bytes=0-
2025-01-02 11:16:34 UTC	667	IN	HTTP/1.1 206 Partial Content Date: Thu, 02 Jan 2025 11:16:34 GMT Content-Type: application/octet-stream Content-Length: 513086 Connection: close x-amz-id-2: 0c6j5TYpzSRJQuE8TyviJpe7J0bmrnwSaIhz7aNAlZ8LY41W76QZpW3+WlWqyCmEaAczXgj142k= x-amz-request-id: DZMWDYBBYRHCN6VK Last-Modified: Tue, 18 Jun 2024 08:49:29 GMT ETag: "457442c95842e19e6aca17d451148620" x-amz-server-side-encryption: AES256 x-amz-version-id: P_Ft_c8eeMGDPcJiYXVa2dIiqHRU9.Ie X-77-NZT: EgwB1GY4sQH3IrwGAAwB1GY4EQG3wdoLAA X-77-NZT-Ray: 1cb09c0e44a3177192757667041f2e10 X-77-Cache: HIT X-77-Age: 441378 Server: CDN77-Turbo X-77-POP: frankfurtDE Content-Range: bytes 0-513085/513086
2025-01-02 11:16:34 UTC	15717	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 02 42 85 81 02 18 53 80 67 01 00 00 00 00 07 d4 0e 11 4d 9b 74 bb 4d bb 8b 53 ab 84 15 49 a9 66 53 ac 81 a1 4d bb 8b 53 ab 84 16 54 ae 6b 53 ac 81 d6 4d bb 8c 53 ab 84 12 54 c3 67 53 ac 82 01 26 4d bb 8d 53 ab 84 1c 53 bb 6b 53 ac 83 07 d3 d2 ec 01 00 00 00 00 00 00 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 49 a9 66 b0 2a d7 b1 83 0f 42 40 4d 80 8c 4c 61 76 66 36 30 2e 33 2e 31 30 30 57 41 8c 4c 61 76 66 36 30 2e 33 2e 31 30 30 44 89 88 40 Data Ascii: EBBBBBwebmBBSgMtMSIfSMSTkSMSTgS&MSSkSXIf*B@MLavf60.3.100WALavf60.3.100D@
2025-01-02 11:16:34 UTC	16384	IN	Data Raw: 6a 6f 32 86 83 58 9f e8 82 1c 03 b9 b2 86 7b 61 12 d6 eb 3e f9 a6 66 3f 89 ba 79 fc fc 18 b7 55 47 fa ac 63 91 9c 5e b3 4c 89 74 3d 5f 19 60 9f 6e ea fb 06 50 a9 89 3f c5 15 00 45 9f ea 0b 75 fd 4a 87 c3 bd 28 89 2d cc 3c 88 99 63 b7 82 42 ca d1 52 d0 70 6b ee c8 5e 2d 14 09 bc 76 b1 49 0d 26 b3 9e 8b 1d 06 e8 65 8b 33 72 7e d0 06 98 9f 62 c8 01 cd 0d 8a 4f 26 c6 1c fc c8 8a d5 a8 1e b7 61 4d 53 39 da 84 14 e1 4d 41 04 64 be 2e 04 57 e0 71 aa 95 f9 6b 02 e9 ea 4d 69 ca 8d e9 89 e7 8e ef 3c b8 c9 3b 85 f1 8d 9a ab ed 8a aa dd 3f 0c 8d 3a 14 b8 44 b7 fa 2e 1f 05 c1 53 4e 0d 4b 68 f5 95 e6 9c 24 a7 30 a1 5f 54 82 57 9f 0f 1b 50 da 28 1e 57 05 11 66 ec 2e f4 de 04 25 2a dd 34 9e bb 98 1d d3 51 6f 16 52 a5 6f 96 1e 8e 0a 79 34 61 da e4 f1 60 95 01 f2 c0 96 88 Data Ascii: jo2X{a>f?yUGc^Lt=_`nP?EuJ(-<cBRpk^-vI&e3r~bO&aMS9MAd.WqkMi<;?:D.SNKh$0_TWP(Wf.%*4QoRoy4a`
2025-01-02 11:16:34 UTC	16384	IN	Data Raw: 1d 08 f3 bd b0 af 21 ff c8 32 44 4e fb b0 64 77 86 c9 09 67 7a 05 48 64 a9 41 fb 30 42 1b b5 b9 7a bd 38 5c 5a 2c 80 30 25 36 0d 33 84 f8 84 c3 8b 77 8b 9c bb c0 df 1c da 92 74 57 f7 99 13 fc b6 d2 cd cb 7e c1 b0 55 c3 3e 71 44 d7 f3 cf 68 91 a8 e2 6e b8 e4 12 29 7f f7 db 99 a5 4b c5 62 bb c2 c8 b2 dc 82 cd 7b 98 69 2d ca c8 f3 32 93 11 f1 aa f7 75 1e 56 6e cc d2 85 1f 3a 96 41 1e 47 58 16 76 d4 96 f1 b1 6c c6 3f 05 fb 47 52 ab ba e6 4b 1b 19 d9 03 37 e5 5f 28 99 36 53 77 f6 dc 50 f8 14 2c 02 b3 a5 51 bd 52 28 f1 49 42 d9 64 41 fe 5d 47 b3 0c d3 54 cc b3 f1 e4 6b 96 ca e9 5b 03 c0 69 97 94 2a 69 47 45 2e cf fa e3 e2 c3 c4 50 c3 ea 94 e3 64 df 0b 30 66 f0 72 49 98 45 4b 8a 9d 11 bb 37 39 ee 91 94 d1 24 eb 7a 7a 34 06 10 7f 18 bb b3 cb 8c 81 d7 38 78 10 f8 Data Ascii: !2DNdwgzHdA0Bz8\Z,0%63wtW~U>qDhn)Kb{i-2uVn:AGXvl?GRK7_(6SwP,QR(IBdA]GTk[i*iGE.Pd0frIEK79$zz48x
2025-01-02 11:16:34 UTC	16384	IN	Data Raw: a5 6a ac 83 99 c3 a9 fe 48 e1 4b c1 ed 4d 55 9b a6 dd cd 53 ff cb fe 13 b9 78 62 95 a0 b9 b1 b7 3b 50 2a 0b c8 1d c7 7d 9d 38 8f bf 8e f4 2a 43 ad ab 66 cc 7c 15 00 b4 37 46 63 96 fd 17 81 a0 33 27 03 b4 49 52 ed a7 06 d1 4d dc cf d4 62 52 b1 73 42 4a f2 17 e0 63 9d 08 00 74 68 7b 02 69 59 ad b2 d2 9a 14 2a 97 3c 66 3e 6c bd 8d 73 85 b0 48 c8 0c 14 2a d9 b0 bd d2 32 c5 3d 8d 43 5d 99 f5 67 1b f0 32 bd 3f 22 02 48 43 22 88 35 8a 8c 00 bc e2 a4 8e c2 38 55 cd e9 43 86 f9 d0 8f 40 eb 36 41 dc 2a 00 8a 86 92 40 aa 24 08 fa 19 8a 86 af 11 cc 5e ab 22 81 42 3f 10 cb 71 85 c3 db 78 86 cd a0 df 06 f9 8c c3 f1 7b 8f 07 d9 26 76 d2 fd ea 31 95 2b eb a4 54 78 52 de cc c5 5e 64 9d 3d f1 a5 99 2e 22 28 26 db d6 02 38 65 a8 04 70 61 3a cb 01 a0 c5 55 33 53 e8 3a dd 2f Data Ascii: jHKMUSxb;P}8Cf\|7Fc3'IRMbRsBJcth{iY<f>lsH2=C]g2?"HC"58UC@6A*@$^"B?qx{&v1+TxR^d=."(&8epa:U3S:/
2025-01-02 11:16:34 UTC	16384	IN	Data Raw: dc 66 4a 16 a5 79 1f bf a9 86 ad a3 af 13 78 31 58 0a 49 c0 85 b1 3b 74 cc 9a 7f d1 7e 5f 16 6d 7d 4b aa bc 28 ca fa 35 83 c6 ae dc 9c d4 cd 6a 9c 17 8a 45 f5 f7 19 00 74 00 cb 4b e0 ea 85 77 54 85 1a e9 ab a9 82 ef 2d 1d b0 5f 57 c3 8a 3d 35 49 f1 2b 12 a5 bf 74 da 98 55 c8 8d c3 76 af 8d 43 5f db c8 ca 19 87 de d5 63 73 48 9c f7 fe 8b 8b 8d 36 40 6b 00 b2 cb d0 77 9c 69 d5 cf ff b9 6f 90 d4 74 e4 51 06 8f 73 a5 82 90 d7 02 09 d1 11 07 f9 62 86 63 73 c1 e7 63 5e 8f be e4 8c 0d ca cc 64 4a ee 0f 91 bb 35 68 fc 93 44 92 8a 64 e6 d4 ef 2d ab ca 6d ac ad 10 82 b7 3c 11 ec b8 39 46 6a bb b0 a9 df 60 ef 46 24 c7 69 f5 19 34 c3 62 3c 37 d6 7f 3c f8 c9 a4 cb 28 99 9a 08 d9 f8 a4 0d 5e ea 2d 54 69 2c a7 a8 8f 97 be e3 a6 83 76 8d 6d 39 35 1c f9 4c da 68 48 35 a4 Data Ascii: fJyx1XI;t~_m}K(5jEtKwT-_W=5I+tUvC_csH6@kwiotQsbcsc^dJ5hDd-m<9Fj`F$i4b<7<(^-Ti,vm95LhH5
2025-01-02 11:16:34 UTC	16384	IN	Data Raw: b7 24 66 da b3 33 58 e2 65 7a 47 44 69 8c 17 c7 d7 cb fa 54 e0 b8 30 ba 9f 0f 61 18 11 d8 17 76 07 a1 d4 38 4a f6 84 a0 e1 69 e7 a4 52 9c 16 23 d0 7d cc 3b 9d 49 ae 6d 0a 65 d5 28 b0 c8 9b d1 d0 6c 40 da 5e a7 ae f1 d3 bc 09 31 8d dd bb 6a 20 ca 69 ea 6d b7 fe b4 c2 1e 05 42 30 54 ed 24 4b 87 e4 19 c5 00 3a 4a 20 67 ca c8 01 e8 92 6b 47 03 3b e1 00 ba 39 ab be 0b 62 3e 8e 8c 8f 70 ef 1b 05 7d e0 a3 41 c7 81 05 99 00 86 00 40 92 9c 28 4f 81 00 02 80 70 cd e0 00 00 00 00 01 8c 7f e4 6d 4f f6 ff 1f 30 fc 48 ec b3 3a e8 b3 08 a2 2f 4e b6 89 9d ba 32 20 6f d9 b1 d9 18 9f da f8 6c 17 d6 6a 26 ff 7a e7 6c 92 15 19 1f 2a 52 8f 85 89 ab ae 4c 98 19 c1 dd f7 37 74 af 40 7b b4 bb a8 9a ed 35 ce 06 68 35 1f be 17 8f be bb f5 53 64 dd 31 dc 0b fd 9d 7a d3 d9 90 a5 62 Data Ascii: $f3XezGDiT0av8JiR#};Ime(l@^1j imB0T$K:J gkG;9b>p}A@(OpmO0H:/N2 olj&zl*RL7t@{5h5Sd1zb
2025-01-02 11:16:34 UTC	16384	IN	Data Raw: ab 21 09 a5 75 c1 e0 c1 b8 41 30 b4 f4 ea b2 8f c0 83 84 8d 2a 64 62 dc bb d9 1b ea 49 a7 da 83 11 9a 41 a2 72 96 99 65 3e aa c8 bb fd 94 00 1c a5 8a 8a de 7c 91 45 68 14 9a a0 76 6d e5 7d c4 56 71 f9 5f b6 7c 71 d9 3f 0d 5c 65 c9 28 0f ce 02 df 64 14 c5 85 99 37 ad 8c a1 13 ca f9 3d 2d 27 43 7b fe 0e 49 61 b6 47 66 2d 23 0a 2f 72 05 f7 1b 0b b7 87 54 ed 41 15 79 73 2f 26 27 91 ca 4a 0a 57 0f 5e 10 a9 b6 c3 74 df 70 c8 ff ab 5e 1f fe 83 96 7f 69 b0 72 b4 1e 96 21 57 5c b9 10 75 77 84 00 25 5b 39 9f 99 72 63 51 fc 97 69 3b 9d 71 6c 61 5c b5 4b 7e 63 94 32 4a 3b 52 ce fb a4 ce 7a 04 8c 2b c4 d8 a3 77 a2 3f 86 a6 1f 78 80 97 fe 56 51 f4 34 89 b4 04 ec 38 70 07 04 ea ac 8c 22 2a 26 2a e3 e6 a3 d5 a9 57 78 fc e3 ec f7 ef 99 c1 7d 9c b4 d4 1a d0 c9 f8 fb 45 6e Data Ascii: !uA0dbIAre>\|Ehvm}Vq_\|q?\e(d7=-'C{IaGf-#/rTAys/&'JW^tp^ir!W\uw%[9rcQi;qla\K~c2J;Rz+w?xVQ48p"&*Wx}En
2025-01-02 11:16:34 UTC	16384	IN	Data Raw: a7 b1 1a 82 65 08 53 53 e8 12 ae 8c f0 98 26 f4 02 b4 92 43 6a 7d df ef 21 22 2c 46 b2 cd 1a 20 dc 98 e0 bc a8 25 82 bc 3f 07 6f da 4e 7e ba 4c b1 73 23 fa bd 4e c2 31 52 c2 e3 e4 2d 69 4b 18 3e 76 e7 a2 67 b4 ff 81 b3 e9 0e 50 a6 68 7e 0e 75 d0 7f bb 72 c9 36 73 6e 74 eb 0f 3e 86 df 03 2b d9 7d d9 48 7c 4b cc 36 bc b2 cd 25 54 f8 71 af fd f0 90 02 2b 33 c6 76 03 80 b9 dc bb e3 5e 0b 2c cd 19 5f 8c bb c6 57 be 5f 2f 00 d4 72 ee 4d 2e 2e cf 77 d4 a1 7d 37 0b a7 bf 29 20 13 de ef d3 39 74 91 28 8e b8 ce c3 38 32 80 33 ff c7 4f a4 9c cf 47 a8 f4 2d 43 b2 4d 7e 97 76 d8 58 64 64 5c 9c c0 42 ff ba d4 a4 3b ed 05 f3 a6 2c ca b0 fd a2 fd 00 b9 c7 3b 76 a4 03 7b 40 bd f4 6d 0e 00 20 1a 5e 68 5a f9 d5 41 08 56 b6 d3 28 41 57 58 fe ab 94 c2 57 8d d1 87 26 cd 28 72 Data Ascii: eSS&Cj}!",F %?oN~Ls#N1R-iK>vgPh~ur6snt>+}H\|K6%Tq+3v^,_W_/rM..w}7) 9t(823OG-CM~vXdd\B;,;v{@m ^hZAV(AWXW&(r
2025-01-02 11:16:34 UTC	16384	IN	Data Raw: 79 a5 e4 d8 34 ea 9a 78 70 20 21 d6 a0 7e 01 12 0a 02 67 4a 64 48 1c f2 5a 11 f3 02 12 6b e1 f5 e2 d6 99 f0 1d 10 35 d8 25 6e 8b e4 9a a4 75 7f 4f 05 4e 0f e5 63 d7 6d 66 71 35 86 cc 10 55 07 d4 76 e2 a5 2f dd ed a1 a6 52 9f 5f 3c ff c2 54 46 94 82 ee 9b 72 3b d9 e0 1c 8f 63 57 23 d8 02 b5 e3 6a 35 28 32 ee 31 5a 4e 78 2d 42 4e 91 50 aa 26 54 ec 2c 1e a2 89 50 97 43 97 c2 cc de 2b 1a 38 fa 2f f4 83 15 a8 0e f1 75 4e aa 4e 36 17 b9 cb c7 ef 88 8d e0 71 c7 0f 70 cb df b2 44 e5 75 87 8a 79 e5 5c 7f 00 d6 89 1f c5 3d 30 f9 1f ce a2 ba 5a 00 51 4f bc 54 31 a7 9a 10 b2 a4 30 58 09 2c 00 02 34 70 1a d8 67 6d f3 d6 5c 64 97 42 73 08 62 d6 60 6f ca 7c eb 19 c9 aa 88 4e a8 e2 e7 6b e0 e1 17 03 33 3c d7 d7 ef 5b 50 2a c3 bd 3a 86 cb 65 e3 3f 81 71 90 bf c7 04 09 bb Data Ascii: y4xp !~gJdHZk5%nuONcmfq5Uv/R_<TFr;cW#j5(21ZNx-BNP&T,PC+8/uNN6qpDuy\=0ZQOT10X,4pgm\dBsb`o\|Nk3<[P*:e?q
2025-01-02 11:16:34 UTC	16384	IN	Data Raw: 2a 63 1b 0a 28 0c 87 5b 1c 38 51 90 53 26 d1 9b e0 ff 6f 0c 85 ac 22 bc 11 4c e6 30 df c2 03 2d 63 c0 1d 9c ae 5c 25 74 bd b6 24 c4 7d 09 75 2a 3d 07 ae 6f e1 c7 4c 47 46 7c 6a ea 0c c7 74 7b 2d bd 69 dc 1f d4 52 ef 5f 76 33 7d cc dc ae 41 49 2b 61 80 f9 44 e0 00 76 72 92 a8 85 24 8c 5a b2 53 86 ad 7f 7a 29 00 a7 d6 78 a3 f8 8a 28 c2 f1 8a d6 56 a6 cf f0 5c fa 10 04 66 07 36 94 b2 03 7c c3 b5 44 a1 24 35 9f 18 15 00 52 85 61 4a 75 29 6d bf df ef 01 c3 2d 34 d8 d8 06 da 91 07 19 7f 9c 08 a3 82 f3 4c c2 9c af 93 a6 4b 25 3b 45 ff c9 d4 58 41 a4 76 ae 78 9d e7 ae 10 25 70 f1 21 b4 ed b4 b4 49 af 43 34 ff 9c ae cc 47 1e 00 12 16 07 47 4c 41 2b 8e 5e ea d4 3d e7 20 95 3e 20 1e 51 30 7c e6 d4 f4 ef 98 b1 02 d7 04 24 70 3f cf ba 10 c8 f5 ab 15 f6 40 38 95 1c 50 Data Ascii: c([8QS&o"L0-c\%t$}u=oLGF\|jt{-iR_v3}AI+aDvr$ZSz)x(V\f6\|D$5RaJu)m-4LK%;EXAvx%p!IC4GGLA+^= > Q0\|$p?@8P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.17	49869	162.159.61.3	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:34 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2025-01-02 11:16:34 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 0a 72 65 70 6f 73 69 74 6f 72 79 05 70 63 61 70 70 05 73 74 6f 72 65 00 00 41 00 01 00 00 29 10 00 00 00 00 00 00 4d 00 0c 00 49 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: repositorypcappstoreA)MI
2025-01-02 11:16:34 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Thu, 02 Jan 2025 11:16:34 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8fba56720e0e3320-EWR alt-svc: h3=":443"; ma=86400
2025-01-02 11:16:34 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 01 00 01 0a 72 65 70 6f 73 69 74 6f 72 79 05 70 63 61 70 70 05 73 74 6f 72 65 00 00 41 00 01 c0 0c 00 05 00 01 00 00 00 6d 00 1a 0a 31 37 31 35 37 32 30 34 32 37 03 72 73 63 05 63 64 6e 37 37 03 6f 72 67 00 c0 43 00 06 00 01 00 00 00 3c 00 2b 03 6e 73 31 c0 43 05 61 64 6d 69 6e 05 63 64 6e 37 37 03 63 6f 6d 00 67 76 75 3b 00 00 2a 30 00 00 00 b4 00 00 38 40 00 00 00 3c 00 00 29 04 d0 00 00 00 00 01 44 00 0c 01 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: repositorypcappstoreAm1715720427rsccdn77orgC<+ns1Cadmincdn77comgvu;*08@<)D@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.17	49870	162.159.61.3	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:34 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2025-01-02 11:16:34 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 0a 72 65 70 6f 73 69 74 6f 72 79 05 70 63 61 70 70 05 73 74 6f 72 65 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 4d 00 0c 00 49 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: repositorypcappstore)MI
2025-01-02 11:16:34 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Thu, 02 Jan 2025 11:16:34 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8fba56720ee24345-EWR alt-svc: h3=":443"; ma=86400
2025-01-02 11:16:34 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 03 00 00 00 01 0a 72 65 70 6f 73 69 74 6f 72 79 05 70 63 61 70 70 05 73 74 6f 72 65 00 00 01 00 01 c0 0c 00 05 00 01 00 00 08 70 00 1a 0a 31 37 31 35 37 32 30 34 32 37 03 72 73 63 05 63 64 6e 37 37 03 6f 72 67 00 c0 34 00 01 00 01 00 00 00 0f 00 04 4f 7f ce ea c0 34 00 01 00 01 00 00 00 0f 00 04 4f 7f ce cf 00 00 29 04 d0 00 00 00 00 01 5b 00 0c 01 57 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: repositorypcappstorep1715720427rsccdn77org4O4O)[W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.17	49864	207.246.91.177	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:34 UTC	83	OUT	GET //src/app/appWidget.js HTTP/1.1 Host: pcapp.store Cache-Control: no-cache
2025-01-02 11:16:34 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:34 GMT Content-Type: application/javascript Content-Length: 106128 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:34 UTC	16019	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 4f 76 65 72 6c 6f 61 64 59 69 65 6c 64 28 65 2c 20 64 29 20 7b 0a 20 20 74 68 69 73 2e 76 20 3d 20 65 2c 20 74 68 69 73 2e 6b 20 3d 20 64 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 61 70 70 6c 79 44 65 63 6f 72 61 74 65 64 44 65 73 63 72 69 70 74 6f 72 28 69 2c 20 65 2c 20 72 2c 20 6e 2c 20 6c 29 20 7b 0a 20 20 76 61 72 20 61 20 3d 20 7b 7d 3b 0a 20 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 69 29 20 7b 0a 20 20 20 20 61 5b 69 5d 20 3d 20 6e 5b 69 5d 3b 0a 20 20 7d 29 2c 20 61 2e 65 6e 75 6d 65 72 61 62 6c 65 20 3d 20 21 21 61 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 20 61 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 3d 20 21 21 61 2e 63 6f 6e 66 69 67 75 Data Ascii: function _OverloadYield(e, d) { this.v = e, this.k = d;}function _applyDecoratedDescriptor(i, e, r, n, l) { var a = {}; return Object.keys(n).forEach(function (i) { a[i] = n[i]; }), a.enumerable = !!a.enumerable, a.configurable = !!a.configu
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 65 20 3d 20 6e 2e 65 6c 65 6d 65 6e 74 73 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 73 20 3d 20 30 3b 20 73 20 3c 20 65 2e 6c 65 6e 67 74 68 20 2d 20 31 3b 20 73 2b 2b 29 20 66 6f 72 20 28 76 61 72 20 61 20 3d 20 73 20 2b 20 31 3b 20 61 20 3c 20 65 2e 6c 65 6e 67 74 68 3b 20 61 2b 2b 29 20 69 66 20 28 65 5b 73 5d 2e 6b 65 79 20 3d 3d 3d 20 65 5b 61 5d 2e 6b 65 79 20 26 26 20 65 5b 73 5d 2e 70 6c 61 63 65 6d 65 6e 74 20 3d 3d 3d 20 65 5b 61 5d 2e 70 6c 61 63 65 6d 65 6e 74 29 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 44 75 70 6c 69 63 61 74 65 64 20 65 6c 65 6d 65 6e 74 20 28 22 20 2b 20 65 5b 73 5d 2e 6b 65 79 20 2b 20 22 29 22 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a Data Ascii: e = n.elements; for (var s = 0; s < e.length - 1; s++) for (var a = s + 1; a < e.length; a++) if (e[s].key === e[a].key && e[s].placement === e[a].placement) throw new TypeError("Duplicated element (" + e[s].key + ")"); } }
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 0a 20 20 20 20 76 20 3d 20 64 20 26 26 20 64 28 64 28 76 61 6c 75 65 73 28 5b 5d 29 29 29 3b 0a 20 20 76 20 26 26 20 76 20 21 3d 3d 20 72 20 26 26 20 6e 2e 63 61 6c 6c 28 76 2c 20 61 29 20 26 26 20 28 70 20 3d 20 76 29 3b 0a 20 20 76 61 72 20 67 20 3d 20 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 50 72 6f 74 6f 74 79 70 65 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 47 65 6e 65 72 61 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 70 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 64 65 66 69 6e 65 49 74 65 72 61 74 6f 72 4d 65 74 68 6f 64 73 28 74 29 20 7b 0a 20 20 20 20 5b 22 6e 65 78 74 22 2c 20 22 74 68 72 6f 77 22 2c 20 22 72 65 74 75 72 6e 22 5d 2e 66 6f 72 45 61 63 Data Ascii: getPrototypeOf, v = d && d(d(values([]))); v && v !== r && n.call(v, a) && (p = v); var g = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(p); function defineIteratorMethods(t) { ["next", "throw", "return"].forEac
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 5f 77 72 61 70 4e 61 74 69 76 65 53 75 70 65 72 28 74 29 20 7b 0a 20 20 76 61 72 20 72 20 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 4d 61 70 20 3f 20 6e 65 77 20 4d 61 70 28 29 20 3a 20 76 6f 69 64 20 30 3b 0a 20 20 72 65 74 75 72 6e 20 5f 77 72 61 70 4e 61 74 69 76 65 53 75 70 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 69 66 20 28 6e 75 6c 6c 20 3d 3d 3d 20 74 20 7c 7c 20 21 5f 69 73 4e 61 74 69 76 65 46 75 6e 63 74 69 6f 6e 28 74 29 29 20 72 65 74 75 72 6e 20 74 3b 0a 20 20 20 20 69 66 20 28 22 66 75 6e 63 74 69 6f 6e 22 20 21 3d 20 74 79 70 65 6f 66 20 74 29 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 Data Ascii: _wrapNativeSuper(t) { var r = "function" == typeof Map ? new Map() : void 0; return _wrapNativeSuper = function (t) { if (null === t \|\| !_isNativeFunction(t)) return t; if ("function" != typeof t) throw new TypeError("Super expression must eit
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 7c 7c 20 61 70 70 6c 79 44 65 63 73 32 32 30 33 46 61 63 74 6f 72 79 28 29 29 28 65 2c 20 74 2c 20 72 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 61 70 70 6c 79 44 65 63 73 32 32 30 33 52 46 61 63 74 6f 72 79 28 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 41 64 64 49 6e 69 74 69 61 6c 69 7a 65 72 4d 65 74 68 6f 64 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 72 29 20 7b 0a 20 20 20 20 20 20 21 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 2e 76 29 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 74 74 65 6d 70 74 65 64 20 74 6f 20 63 61 6c 6c 20 61 64 64 49 6e 69 74 69 61 6c 69 7a 65 72 20 61 66 74 65 72 20 64 65 63 6f 72 61 74 69 6f 6e 20 77 61 73 20 Data Ascii: \|\| applyDecs2203Factory())(e, t, r);}function applyDecs2203RFactory() { function createAddInitializerMethod(e, t) { return function (r) { !function (e, t) { if (e.v) throw Error("attempted to call addInitializer after decoration was
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 28 32 20 3d 3d 3d 20 6f 20 3f 20 77 5b 41 5d 20 3a 20 69 2e 63 61 6c 6c 2e 62 69 6e 64 28 77 5b 41 5d 29 29 20 3a 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 20 6e 2c 20 77 29 29 2c 20 50 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 20 53 79 6d 62 6f 6c 2e 6d 65 74 61 64 61 74 61 20 7c 7c 20 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 53 79 6d 62 6f 6c 2e 6d 65 74 61 64 61 74 61 22 29 2c 20 7b 0a 20 20 20 20 20 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 20 21 30 2c 0a 20 20 20 20 20 20 65 6e 75 6d 65 72 61 62 6c 65 3a 20 21 30 2c 0a 20 20 20 20 20 20 76 61 6c 75 65 3a 20 74 0a 20 20 20 20 7d 29 Data Ascii: (2 === o ? w[A] : i.call.bind(w[A])) : Object.defineProperty(e, n, w)), P; } function u(e, t) { return Object.defineProperty(e, Symbol.metadata \|\| Symbol.for("Symbol.metadata"), { configurable: !0, enumerable: !0, value: t })
2025-01-02 11:16:35 UTC	8189	IN	Data Raw: 74 69 6f 6e 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 20 6f 72 20 69 66 20 74 68 65 72 65 20 69 73 20 61 6e 20 65 72 72 6f 72 2e 0a 20 20 20 20 20 2a 20 40 74 68 72 6f 77 73 20 7b 45 72 72 6f 72 7d 20 49 66 20 74 68 65 20 70 6f 73 69 74 69 6f 6e 20 73 74 6f 72 65 64 20 69 6e 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 20 69 73 20 6d 69 73 73 69 6e 67 20 74 68 65 20 72 65 71 75 69 72 65 64 20 22 78 22 20 6f 72 20 22 79 22 20 6b 65 79 73 2e 0a 20 20 20 20 20 2a 2f 0a 20 20 7d 2c 20 7b 0a 20 20 20 20 6b 65 79 3a 20 22 67 65 74 43 75 73 74 6f 6d 50 6f 73 69 74 69 6f 6e 22 2c 0a 20 20 20 20 76 61 6c 75 65 3a 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 75 73 74 6f 6d 50 6f 73 69 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 Data Ascii: tion cannot be retrieved or if there is an error. * @throws {Error} If the position stored in localStorage is missing the required "x" or "y" keys. */ }, { key: "getCustomPosition", value: function getCustomPosition() { try {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.17	49865	207.246.91.177	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:34 UTC	108	OUT	GET //search-menu/?a=getTemplate&p[tmplType]=search HTTP/1.1 Host: pcapp.store Cache-Control: no-cache
2025-01-02 11:16:34 UTC	509	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:34 UTC	8648	IN	Data Raw: 31 65 38 37 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 31 31 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 Data Ascii: 1e87<!DOCTYPE html><html lang="en" style=""> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <meta http-equiv="X-UA-Compatible" content="ie=11" /> <meta name="viewport" content="width=device-widt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.17	49859	207.246.91.177	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:34 UTC	196	OUT	GET /notify_app_v2.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&lastid=0&lasttime=0&end_v=fa.2001g&nocache=6364640 HTTP/1.1 Connection: Keep-Alive User-Agent: WinHTTP 1.0 Host: pcapp.store
2025-01-02 11:16:35 UTC	509	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:35 UTC	12	IN	Data Raw: 32 0d 0a 23 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 2#0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.17	49873	18.173.205.91	443	2936	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:34 UTC	702	OUT	GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":13,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735848160&nocache=17343 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-02 11:16:35 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 02 Jan 2025 11:16:19 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 8d70d51432f10e2eca684af448a5f99e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: LvzPl_BE-OoKcU1O6RVNgsvnh_iC78q3xao-IZUrBrTpffsWtyJ9wA== Age: 17
2025-01-02 11:16:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.17	49874	79.127.206.234	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:35 UTC	540	OUT	GET /pcapp/images/3rdparty/application/videos/checkers_1.webm HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept-Encoding: identity;q=1, ;q=0 Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://pcapp.store/ Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045 Range: bytes=0-
2025-01-02 11:16:35 UTC	667	IN	HTTP/1.1 206 Partial Content Date: Thu, 02 Jan 2025 11:16:35 GMT Content-Type: application/octet-stream Content-Length: 242574 Connection: close x-amz-id-2: ZOVwnA+vtaIXrAeqscBlsGn76EzyuhYmGA41+57mX/tLnFZTLfiGoroyzVES7fJkUNkvZlIdYjY= x-amz-request-id: TV50DXD9A1RWF4XE Last-Modified: Wed, 29 May 2024 11:49:35 GMT ETag: "c522383e2c644e952e333caf8b0957bd" x-amz-server-side-encryption: AES256 x-amz-version-id: 1HFW8It.Pwz.qcxyoHNu7q4H5HzOPWTR X-77-NZT: EgwBT3/O6QH3TfsEAAwBnJI74gG3fAwBAA X-77-NZT-Ray: f03d061302cb2be4937576670491dc1f X-77-Cache: HIT X-77-Age: 326477 Server: CDN77-Turbo X-77-POP: newyorkUSNY Content-Range: bytes 0-242573/242574
2025-01-02 11:16:35 UTC	15717	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 02 42 85 81 02 18 53 80 67 01 00 00 00 00 03 b3 5e 11 4d 9b 74 bb 4d bb 8b 53 ab 84 15 49 a9 66 53 ac 81 a1 4d bb 8b 53 ab 84 16 54 ae 6b 53 ac 81 d6 4d bb 8c 53 ab 84 12 54 c3 67 53 ac 82 01 26 4d bb 8d 53 ab 84 1c 53 bb 6b 53 ac 83 03 b3 35 ec 01 00 00 00 00 00 00 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 49 a9 66 b0 2a d7 b1 83 0f 42 40 4d 80 8c 4c 61 76 66 36 30 2e 33 2e 31 30 30 57 41 8c 4c 61 76 66 36 30 2e 33 2e 31 30 30 44 89 88 40 Data Ascii: EBBBBBwebmBBSg^MtMSIfSMSTkSMSTgS&MSSkS5XIf*B@MLavf60.3.100WALavf60.3.100D@
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 1f 8b 04 e8 6b d0 a9 91 cb ec 82 a2 5a c6 79 60 2e 35 76 be 90 75 4f 46 02 79 b2 5e 60 33 34 a7 27 23 dd 0e fe eb 61 2c 19 7a 92 49 76 ee 7c 57 18 4b 58 93 6b 9d b8 b6 31 93 af 0a ad fd 63 9f 78 84 bf b2 8a 5c 8e eb 75 cc d1 7d a1 96 43 43 ff d4 03 6b ff 1d fa c3 06 1b 70 56 e5 2f 6a 40 fb cb 64 d9 10 99 19 4b 34 2b 6c 78 ae a1 b2 71 a5 43 1a 5d da cf 79 96 65 e2 26 99 a5 72 f1 0c 2a 9d 94 08 c0 98 8e 53 0f 96 a6 d8 80 57 97 47 28 30 16 e7 0b 7b 99 84 c8 af f1 4c 29 e7 8e ec d8 59 a1 28 69 9f bc 19 85 2e 9b 46 a9 23 d8 6a 44 c8 a6 8e 73 4b fa 59 b4 69 dd 37 db e9 16 f7 3d e9 8a 60 a9 cc 20 05 81 89 4d 9c e4 89 92 00 af 2d 33 f7 88 3f 84 cf a4 f7 ef 04 56 4c a7 ae 9b 9a c2 3f 1e ce 98 35 70 96 1e df d0 54 18 c8 c5 37 e8 ef 63 5e 42 90 f5 c2 2f 82 2b 87 d8 Data Ascii: kZy`.5vuOFy^`34'#a,zIv\|WKXk1cx\u}CCkpV/j@dK4+lxqC]ye&r*SWG(0{L)Y(i.F#jDsKYi7=` M-3?VL?5pT7c^B/+
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: c8 c2 16 81 3d a9 21 bd 87 09 dd ea 76 3e 0c c0 8e 08 8c 05 2e ce 13 e7 cc da 40 ae d1 51 84 c4 c3 5b 99 f9 a7 c4 67 5d e7 6a 0b c2 f8 db 7f 2a 76 ec a3 9c 65 08 f4 e6 3a a6 0c 96 df 9f 1e b9 aa 37 fd ba 31 c4 84 d3 a8 06 7f d9 52 6c cd 91 17 2b 32 9a ca cd 87 3c bf 01 3c 9e 96 9e 8a 62 f2 0d 38 87 81 83 08 5f 78 62 2f d0 70 d0 cb f9 24 eb 48 75 78 9b da ae 44 fa 88 d2 23 15 f1 26 c2 b7 fc cd b6 30 df 86 04 5c 60 e6 05 e4 90 36 ce 04 9c 1d 7f 8b 30 9e 49 9c 08 9f a6 9f 50 ea 6b 68 f6 a4 1f 9b ec 79 7a 40 d5 45 e6 ba 3f eb 04 d9 77 72 0d 1d 13 13 79 56 a6 0e 4e ee be 1c d9 cb c0 c6 8d 93 59 d7 1a 93 b3 9d c6 27 99 e9 7b d9 b9 ce 80 7b e6 d3 6b 2c 81 b9 3e 27 32 62 8d 44 a6 d6 ba be 61 b2 a1 92 32 a2 42 05 0b 6d 87 eb b9 1c 54 b0 ab 26 e4 9f aa af c7 44 f1 Data Ascii: =!v>.@Q[g]j*ve:71Rl+2<<b8_xb/p$HuxD#&0\`60IPkhyz@E?wryVNY'{{k,>'2bDa2BmT&D
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 9a 99 18 f3 7a 12 38 cf 2d f1 a5 50 e3 20 20 af aa 14 8b 78 55 50 17 e4 9b d8 bb 0f 16 88 4d 35 10 88 46 60 fd 22 53 d4 8e 86 33 19 2c f3 06 87 ee 1d 80 9a 0b 51 b5 08 e7 b5 f2 c9 b2 d6 26 e8 47 26 b9 e4 9f d7 85 ff d8 16 9e 1f 44 c7 76 4a 80 dc c4 07 d4 f7 cb c7 1c 28 41 24 ac 2f f6 67 aa 7f 9d 57 97 9f 06 e6 cf 47 7c 17 ab 9c 3e 79 ce bf 34 8b 92 a3 cf 8e cf de b8 bd 1a 0c 44 29 3d 93 dc ab fc ae 22 86 db 05 90 fb 7f ab 7c 1e f8 db 2b 10 48 a9 5f 50 61 80 5f db fd d3 bf 1b 25 40 d8 ca 4f 97 f3 d8 45 4b 84 f8 c6 a1 15 e7 f6 d1 6c 4e 15 5b bc 69 36 34 4a e0 cd b8 f9 85 ff b3 b8 de b2 f0 f1 13 1b 17 75 2a 8f bd 77 e4 38 4b fa 17 ff b7 33 86 a0 04 04 18 77 7e 7e 82 1f 13 69 b6 61 21 04 11 da 96 ff 0e 41 04 aa 07 ba 16 39 8f f5 d1 3d b0 3d aa 16 5c 7c 3e 56 Data Ascii: z8-P xUPM5F`"S3,Q&G&DvJ(A$/gWG\|>y4D)="\|+H_Pa_%@OEKlN[i64Ju*w8K3w~~ia!A9==\\|>V
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: e6 7f 0f ab 12 42 b9 bd 02 fa d1 31 58 0a d4 ed fd db ff 0d 53 e0 7f 4f ae e4 b8 46 ca 62 20 7a 8e 99 5f 1c 76 00 a3 40 b2 81 06 61 00 86 00 40 92 f0 91 3e 04 00 12 70 c4 9c 10 b0 6e 50 00 00 00 00 00 4e 53 4a 16 91 4b 4b 76 ef 92 23 41 57 d8 e2 71 5e 89 04 24 4b f9 e9 a2 81 83 ae fc 61 ef 4e 69 df 24 0a fc a1 6d 6a ba ed e3 53 96 4e fa 47 2b 38 87 5f 57 d4 fa 99 43 2d 55 ae cd ed 10 3d 22 f0 a4 07 2f 6d d0 5a 59 a8 5f 5a a2 d8 20 80 7c 2c 72 ea 9b d7 e5 1a 22 cf 71 a2 57 1e 94 f1 71 c5 c2 48 4c 1e b5 d3 40 54 41 2b 15 77 4d 0f a0 8e 99 df 97 e1 7d 24 34 2f 8c f9 fb 75 12 36 ca 0e 58 8b 9a ce 09 57 a6 87 3e 55 60 18 fe ac 1d b4 25 48 cd 9e db de 00 a3 41 38 81 06 83 00 86 00 40 92 f0 91 39 04 00 0e 70 69 a4 31 36 2a 00 00 00 00 a9 3e 5f 38 98 89 11 05 39 Data Ascii: B1XSOFb z_v@a@>pnPNSJKKv#AWq^$KaNi$mjSNG+8_WC-U="/mZY_Z \|,r"qWqHL@TA+wM}$4/u6XW>U`%HA8@9pi16*>_89
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 91 25 22 5a 0d ad 99 0c be 7e 46 a6 ac 68 0e 98 75 78 6d b9 f0 f5 c9 25 8a 0e bd e6 a2 e4 2c dc 80 00 7e 53 5e ed 19 b5 cd 79 4a 22 5e 51 1a 2f d6 a3 19 a6 b8 14 4b e8 5c 4f 94 29 19 aa 1e f9 49 59 83 29 60 0e 86 61 1e f3 6c f5 91 97 5b e5 c6 21 2d b8 4a f4 f8 11 c5 1d 90 2d f8 cc a7 a2 d4 51 60 75 1e 14 d0 8e 8d 8b b1 f3 e0 ff 45 35 11 35 3c 9c 95 d9 63 3e 35 d4 6e ac 76 35 92 f8 2c 81 63 fe 75 1a f6 21 2d 14 21 5d da 1f ae b0 09 1f 60 7e d3 5f 25 ba 6a 32 4c 50 1f 89 18 d4 17 ac be 7b 54 11 cc 36 ab 41 b1 0d c2 f4 88 02 ec 9c 4d bc e9 9b 70 2b d5 4c 54 27 1a 03 68 69 bc 96 8c 0a f5 d0 29 9e b4 7b a7 e3 db 62 f0 a4 76 56 52 42 0d 85 b0 a2 6d 8a aa fb 9c 90 00 c6 9b cb ed d2 1c 06 d6 aa c2 66 02 1c 3b ce 36 0d 45 c8 6d 4c 2d 85 2b 0a d3 ab 68 2d 1f 05 53 Data Ascii: %"Z~Fhuxm%,~S^yJ"^Q/K\O)IY)`al[!-J-Q`uE55<c>5nv5,cu!-!]`~_%j2LP{T6AMp+LT'hi){bvVRBmf;6EmL-+h-S
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 1a cb e6 c0 00 e9 cc 72 a2 08 fc ff 4e db 7d fe d9 3f 28 3d e6 88 b3 20 13 18 81 3c 51 b3 58 ce fe 9e d6 40 13 00 f2 3d ae 8b f7 92 fb 1d 84 1d ef 48 fe 39 16 3b 3c c6 be d2 ca 9b 7b a8 93 3f ae 82 84 b0 a8 2a e1 b6 6e 43 ba 3f 77 f9 9c 45 3c 3b ea 0c 17 d5 90 08 29 ec 78 6c b3 79 a7 a9 97 a9 fa 93 a6 32 1c da 01 20 9f e2 fa e6 90 7a 33 e9 bb fc cf 97 a4 39 b0 f1 64 2a 53 f0 ba bc de d0 b3 64 7c ac ed 6b 98 3d 9c 91 66 4f 94 d6 77 76 04 52 b6 71 a9 80 44 64 f4 ce 35 77 12 c3 15 a4 06 0f a3 94 95 ba 3a 1c 42 5e bb fd ee 1e 81 98 fe 36 08 0a 33 0b fa de 85 2d d7 ad 08 c6 60 2b 7a 83 ff 13 8b 90 66 b5 bd b8 7f db bf b8 6f d7 75 49 52 26 d9 de 64 6a 87 1b b0 89 45 be dc 30 b4 a6 c6 be bd e8 f5 fb ee 04 f3 f6 75 69 de 75 f5 80 3b 26 48 a0 b9 b1 2a a7 ea 8d 19 Data Ascii: rN}?(= <QX@=H9;<{?nC?wE<;)xly2 z39dSd\|k=fOwvRqDd5w:B^63-`+zfouIR&djE0uiu;&H*
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 11 4f 04 08 7d 85 54 10 ed 73 75 28 ca 0a f1 0b ac 98 d5 5e ad 01 14 85 5b 04 33 0b 62 39 1c 30 89 c8 02 b6 74 d5 f8 98 8f 58 78 39 27 ba d0 e7 14 ac 53 b2 dc 9c 52 12 d1 6d 33 bd 19 2a f0 e5 68 6d 23 93 4d 65 c5 4d 05 ee 58 dd bf ab 1f e6 24 6b c9 6e 28 01 ab 7f e1 67 fd 47 c6 35 66 71 26 8c 41 4e 36 88 04 33 53 08 bd 13 41 e2 16 9e ab 5e f2 a2 dc 00 5f e2 10 ab 0c 4a 50 04 85 dd fb d1 a9 6d e3 61 36 6e 2a 11 b6 9c 23 a8 3f fe 6d 67 37 eb 86 d5 6f eb a3 9b 55 b5 eb ae fa e3 75 6c f8 52 08 49 c0 90 45 e2 0e aa 2e 00 33 08 b8 af 71 a5 60 ea a2 ed e0 79 b3 ea 23 95 ad 09 53 bc 5c 94 75 34 99 78 ee 2b 1f 08 46 13 89 3c 7b ad 74 85 2c 00 73 6c 15 cb 53 b7 00 27 ab f7 3c 16 ff 2c 09 19 66 70 bb da 0a 8e d3 0d 71 e7 e0 c8 0b 23 47 b9 75 44 04 1b 69 ec c5 32 60 Data Ascii: O}Tsu(^[3b90tXx9'SRm3hm#MeMX$kn(gG5fq&AN63SA^_JPma6n#?mg7oUulRIE.3q`y#S\u4x+F<{t,slS'<,fpq#GuDi2`
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 95 20 8b 33 9c 5f 6c c3 0a 82 45 f0 9f fe d7 07 51 4d 6d 41 12 64 c3 ba 83 da ef d1 20 0f 34 1b b7 11 e9 7e 18 c6 24 71 98 c1 c4 96 b3 b9 62 d8 f0 7a 86 b6 5c e7 0d b0 24 0c 1a 62 75 08 4f d9 c1 8a 42 f9 cd 75 02 75 ad 4e 0f f4 3c f0 bd f7 e1 a5 28 01 53 d5 1e 50 4b 30 44 2e 29 5d 1f 48 b5 53 92 0d ac f5 78 bb 88 4b f9 5f c6 53 3e d2 de f4 5e c8 9e e6 b5 6b 23 12 01 04 a3 61 9d ee 9c 49 e9 a8 2f af 8e cf 65 b6 bf 94 4c 8c 54 17 dd b5 eb 74 42 7c b4 ef 73 ad 5e 59 4d fc eb e7 15 c1 8f 34 e5 c4 ec 79 0b 05 9a c2 52 1b 41 6a ca 81 bd 15 1e e9 35 f6 5e 69 e3 68 5a 14 6a 9b 5a 57 06 20 e2 e0 e0 35 0d 8a 75 61 ca ae 60 88 38 74 e9 af 39 f6 81 76 80 bd 74 e7 cf c8 d4 10 c7 af 45 c9 57 68 36 87 5c 1b bb b3 1b d9 26 9a c8 fc dc ac 18 e3 7d 0b 45 10 bb bb a8 04 2f Data Ascii: 3_lEQMmAd 4~$qbz\$buOBuuN<(SPK0D.)]HSxK_S>^k#aI/eLTtB\|s^YM4yRAj5^ihZjZW 5ua`8t9vtEWh6\&}E/
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: b8 a4 35 89 86 cf 8f 1f ba 04 ee 4e 2e d8 d6 46 3e 39 fd f9 07 2c d0 5b 81 28 f4 dd 1e f2 6a c9 06 0e 4d a3 d4 d8 b9 c9 49 dc 9a 61 5b a1 ac 2e a0 b4 60 3a d2 0f 42 9a a0 98 52 72 4c 61 22 1e a2 44 c9 4a 5c 1b 5d 9c 45 b8 34 7c 4d bd d9 f4 8f 27 0d b1 cf d3 2d 60 39 ec 3c f1 76 12 53 f0 fb aa 1d d5 43 58 bd f8 2a 2e 5d 4e 0a 43 35 ee db 2a 23 b5 89 66 a3 3b 62 da 17 0a d8 1d 57 1b 74 07 34 32 56 d5 4e 25 11 3c cc 7f 84 2b 61 4a 9f ec cf a4 c3 8f 0f 70 45 25 a9 21 3d 74 99 a0 3f c9 f8 6e 0d 9e 21 fd a3 fc e6 03 2b db 3e c5 90 9d 86 f4 10 e4 1e 0f d3 d5 fc ad da 24 d5 23 70 4c 26 cc 3f b0 df 59 e2 f7 5b b0 45 e4 ae b8 f5 97 0e a3 fa 39 e0 06 87 93 31 cc 08 1a e3 68 48 c0 fa ee 8c 25 f7 5e 02 59 68 5c 5f 34 0a fd 09 01 e5 be 71 a2 c8 09 5b 19 d6 cf ea dd 56 Data Ascii: 5N.F>9,[(jMIa[.`:BRrLa"DJ\]E4\|M'-`9<vSCX.]NC5#f;bWt42VN%<+aJpE%!=t?n!+>$#pL&?Y[E91hH%^Yh\_4q[V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.17	49875	79.127.206.234	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:35 UTC	543	OUT	GET /pcapp/images/3rdparty/application/videos/top10_400x280.webm HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept-Encoding: identity;q=1, ;q=0 Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://pcapp.store/ Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045 Range: bytes=0-
2025-01-02 11:16:35 UTC	667	IN	HTTP/1.1 206 Partial Content Date: Thu, 02 Jan 2025 11:16:35 GMT Content-Type: application/octet-stream Content-Length: 450924 Connection: close x-amz-id-2: ogVii1NQa9y7ZLNip49jcMhff7z0dVuXviAWi/XYNdmrW5LVswuLziBNm0AKjehA0e3+Uh1ZHX0= x-amz-request-id: ZH8ZX24KG197CRQM Last-Modified: Fri, 26 Jul 2024 13:54:34 GMT ETag: "a0f485260ff734afc556acd03ab8f409" x-amz-server-side-encryption: AES256 x-amz-version-id: QsA.ZmewpmhTImwMC3WMe1gNM6wPek5g X-77-NZT: EgwBT3/O6QH3KEYJAAwBnJI73wG3Mw0AAA X-77-NZT-Ray: f03d061386d50de793757667d206f41f X-77-Cache: HIT X-77-Age: 607784 Server: CDN77-Turbo X-77-POP: newyorkUSNY Content-Range: bytes 0-450923/450924
2025-01-02 11:16:35 UTC	15717	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 02 42 85 81 02 18 53 80 67 01 00 00 00 00 06 e1 3c 11 4d 9b 74 bb 4d bb 8b 53 ab 84 15 49 a9 66 53 ac 81 a1 4d bb 8b 53 ab 84 16 54 ae 6b 53 ac 81 d6 4d bb 8c 53 ab 84 12 54 c3 67 53 ac 82 01 36 4d bb 8d 53 ab 84 1c 53 bb 6b 53 ac 83 06 e1 00 ec 01 00 00 00 00 00 00 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 49 a9 66 b0 2a d7 b1 83 0f 42 40 4d 80 8c 4c 61 76 66 36 30 2e 33 2e 31 30 30 57 41 8c 4c 61 76 66 36 30 2e 33 2e 31 30 30 44 89 88 40 Data Ascii: EBBBBBwebmBBSg<MtMSIfSMSTkSMSTgS6MSSkSXIf*B@MLavf60.3.100WALavf60.3.100D@
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 80 0a bc a5 46 62 f0 2a f6 20 b6 3c 18 15 0a ff 6e 8d 36 c7 16 a9 06 f7 3e 12 64 88 66 8e 6e 15 81 e6 d3 b4 2d 85 1e bd ad aa 25 f6 fe b4 40 3a c5 67 19 33 7c 65 b2 0a 06 d7 04 96 43 cd ad 6a 5f c9 d9 e6 ba ae fb c3 ac 8d 4f c4 dc 56 58 42 e5 88 8d d2 75 b7 6a b1 bd f6 a7 ad 5f ac 74 d8 df 65 af dc ef 5e 92 8a 6d 2b 17 c3 d0 fc 90 80 0d 92 f8 e6 c6 c9 d1 c4 b8 92 9a 14 8c 6b 6b b7 e5 47 09 9d f2 f9 92 0d 9f 3c 38 3c c3 25 f6 72 60 94 7f 8a f0 78 14 a0 1e 75 d8 fc f2 bd e3 6a 02 de 00 10 8c 0d 07 2a c2 df fe 31 73 0b d2 6c 19 05 48 c3 e8 0e 42 50 41 3e b7 72 23 a3 c8 c6 34 10 5b ae 12 ca 0a 7d 7b 60 17 56 d6 c7 b8 e9 b6 f8 aa 5e f7 66 23 95 b3 d6 4e d4 97 49 e6 22 70 02 20 bd a2 49 7f f6 29 21 e6 d3 e5 f8 28 ab 84 7d a6 a8 77 ed e8 ad e7 1e a3 66 ad e9 0a Data Ascii: Fb* <n6>dfn-%@:g3\|eCj_OVXBuj_te^m+kkG<8<%r`xuj*1slHBPA>r#4[}{`V^f#NI"p I)!(}wf
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 73 86 25 12 67 2f b3 03 3a 98 a2 9b 6b 28 0a ed f2 7c 02 bb 32 ee b2 1b 2e 5f be d8 4d 04 b4 36 fd ed 9c 8a fb 2e e2 66 fe 7d 9d a9 24 78 3e e9 52 ab 35 12 35 19 ca bc df 0b 83 8a 75 3f 64 7f f3 1d 1e aa aa d6 de d3 47 56 a0 5d 7b bf 95 e6 f7 cf 22 03 2b 68 3e 3a 7c 7c 89 5a 5b c1 41 e3 9f 9f 7b b6 d4 86 a7 af 6f d8 30 a7 94 d3 ad 55 27 7f 8a d3 ea 50 ec 14 f2 a8 71 91 4a 3c 1f 04 5b ca 45 5d 9a 84 aa 8c e3 a4 d9 ad d4 2f 1a b3 17 0c e8 d0 ee 29 2c 87 2c c7 fe b4 3a 72 20 72 90 b4 9e 41 9c dd 08 14 e1 41 86 4e 23 2f 64 da f4 ab d4 df b8 b6 a7 36 89 0c be 02 41 67 98 32 7a 99 59 40 d5 9b bf 79 b2 0b a1 f1 f9 44 e9 8a 2e 5a 50 99 10 05 94 6e fa 85 39 65 9e 4d 50 bf 7d d0 65 41 84 0c b0 01 d4 da 92 b8 75 e0 a2 af 4d e8 d3 64 f2 91 dd 9b 06 bc 73 d8 8d 13 a2 Data Ascii: s%g/:k(\|2._M6.f}$x>R55u?dGV]{"+h>:\|\|Z[A{o0U'PqJ<[E]/),,:r rAAN#/d6Ag2zY@yD.ZPn9eMP}eAuMds
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 3c 14 c8 5c 2f 45 13 d1 b6 cc 38 8d 1f 6c d2 55 5a 17 86 95 3d 63 fc 5c d5 d4 4c 29 c0 2d c2 cd 3d 14 06 f1 42 16 d6 d8 fd c9 3f 1f 3e 8d 36 ef 8d c3 7d 2a 1e 57 4e 53 18 28 c5 03 23 ea 5f 29 f0 ab 4f 3c c4 46 86 c9 94 31 34 90 fa 4f 7e d4 4d 19 49 b9 44 80 97 34 dc 23 76 81 bc d2 c6 e7 08 8a 75 95 d1 b5 11 6c 25 68 92 9a dd f2 b9 f1 a9 20 4d 15 fe fe c2 cb 15 6a ff e1 2e d0 f3 18 bf 60 7d 7e e0 60 98 4d e2 21 da ea 66 b7 57 e8 b3 df d0 4d 55 c1 23 12 f7 6b 32 4c dd e3 93 09 db 17 cb 94 60 88 3b 2d 6d e2 4f 84 12 0d be 67 50 0d 5b 59 cd 81 f0 a7 59 a1 d3 de 19 f6 61 ed 5e 7d 18 60 a2 fa c3 ca 53 be df 66 4b 92 d4 6e ed 9a 2c 1d 38 46 87 8d fc bb 2e 57 1c 88 7e 72 48 36 f2 90 71 92 79 2f b7 d4 ef 73 b2 56 b8 76 10 09 06 14 68 24 1e 69 75 dd b3 d3 16 7b 36 Data Ascii: <\/E8lUZ=c\L)-=B?>6}*WNS(#_)O<F14O~MID4#vul%h Mj.`}~`M!fWMU#k2L`;-mOgP[YYa^}`SfKn,8F.W~rH6qy/sVvh$iu{6
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 1c a3 6b a3 c8 15 d5 01 24 ee da 68 3f 6b 39 c5 27 40 12 82 ed 5c fa 1f 8a 67 ea 71 c5 4f 4c c0 58 26 0a c3 e3 95 1c 3b a5 e3 f8 58 eb d4 62 a0 d4 75 70 1b 00 a1 02 2c b9 a7 a7 70 14 52 c9 32 02 d0 44 a4 9a 00 d1 04 97 8f 6f b2 6f 0d 33 a3 b2 18 9a 2b 25 e6 df 3d 3a e1 88 a8 ae a0 c8 34 f1 35 47 66 e8 e9 fb 23 0a 8c 45 61 c5 e3 ca 06 29 7d f2 8c d0 02 fe 38 92 5f d9 97 29 40 c5 95 28 60 b1 66 78 87 eb d5 ae 27 cd 96 9b 73 8f 17 92 f2 d0 51 6d 88 96 2d e8 02 1a c7 32 45 b4 d5 d0 81 50 5d 3e a3 37 81 f8 65 db cb cd 05 d4 77 99 fc 21 26 85 cc 16 49 e1 55 38 81 73 09 66 b3 62 42 8a 65 28 00 c0 66 ff 8c fc 59 a3 0d b3 70 1b 53 6f ba 06 b4 a4 af 51 48 b3 d6 c2 25 9a 19 6f 69 f0 0e 4d 97 f8 6c 42 b2 64 bb 73 8e 00 ad 63 62 88 09 51 24 6a e4 14 9d a7 d4 e5 69 27 Data Ascii: k$h?k9'@\gqOLX&;Xbup,pR2Doo3+%=:45Gf#Ea)}8_)@(`fx'sQm-2EP]>7ew!&IU8sfbBe(fYpSoQH%oiMlBdscbQ$ji'
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 7e 43 d0 db 9e 40 b6 96 c4 a8 9d 20 d9 0f 9a 51 c5 6a c0 ff c9 a8 9f 09 e2 c8 06 a5 bf d7 af 19 77 78 2e 0e 9a 80 b5 f2 cb 56 2a 7d da 23 df 07 cc ff 0a 27 f4 f6 98 bd be 9b dc 12 86 ba d2 3b 48 21 ba 56 a3 0e a8 41 14 08 f5 63 ad d4 19 6b 1f 52 54 0d 1d b4 7b aa 96 2e 3a 74 20 e2 04 96 84 82 36 75 1f c8 46 44 01 bd 1d cc e7 83 92 34 0f 3c b2 d1 cb 63 db ea 44 7f ed 8d e3 16 3e 02 0a 2c 5b ab 0a 6d 99 53 d4 58 fd c6 86 6a 72 49 c9 ab 71 fe 8d ca 17 05 73 45 eb eb b9 51 cd 60 00 2f 73 e3 8c 96 61 a7 97 07 6c 2a b6 17 0c dd 63 51 a1 a7 c6 68 0d e6 ec 7b 34 9b c6 11 fe 10 eb 44 52 96 3c 4a 9b d1 80 8f 0a ae 6f 8b a2 5e 49 b3 4b e7 9f ff ea cd 16 de ab df a7 a4 91 56 b2 0c b3 50 fb 0c ca 12 2c 9d 7e 4d 2d 23 9a 44 b9 6c 4f 70 89 cd bb c9 cf c9 15 8c 93 df 20 Data Ascii: ~C@ Qjwx.V}#';H!VAckRT{.:t 6uFD4<cD>,[mSXjrIqsEQ`/salcQh{4DR<Jo^IKVP,~M-#DlOp
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: c6 a7 17 29 f2 73 ff 86 d4 98 33 34 cd cc 2c f4 d0 f7 7e 65 25 1c f7 e6 d9 ea 75 d7 74 2b 78 ed 75 ec 6d 67 03 41 c3 4b b9 b0 25 8e 94 24 b6 c3 ee b4 c4 fa f9 22 fd fc d4 a5 bd a0 f8 80 0e f9 1d 67 1e 84 7a 8e ec 12 ad 9a f5 d0 78 3f 22 3d 2c 75 6f 4d 90 04 62 5c b1 8c 22 30 71 76 6a ca 1f d2 1d 6a b4 ba b4 39 f3 5d 65 11 08 12 de 3f 22 96 b3 e3 5a 45 9a fb 91 38 27 9e 3f af 19 95 8e 13 d3 f3 26 e9 f5 a3 0f 80 73 7f 0e da ef 41 72 3a 0f 78 ae 7d fd d0 31 33 86 b2 5d 9e 9e d2 2d 55 c2 c2 c8 b9 16 f3 4a 92 d0 fe 68 1f 49 c3 19 2f ed 22 85 39 6d a6 df 58 24 cc 9f b8 97 db 0c 67 4b 10 03 ef 75 d3 0d ef f5 08 74 55 55 00 32 62 30 a3 d4 0a 37 54 4b a2 87 cc 62 0a 69 6a 88 1c 1d 4f 5b cb 16 61 3f 00 bd 2d ea 9f e1 e0 fc b3 28 6c a5 20 1f 7b 1d 61 d9 50 60 33 c2 Data Ascii: )s34,~e%ut+xumgAK%$"gzx?"=,uoMb\"0qvjj9]e?"ZE8'?&sAr:x}13]-UJhI/"9mX$gKutUU2b07TKbijO[a?-(l {aP`3
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 5d 61 45 93 92 2a fc 91 7e 56 bd ff 26 1a 16 72 84 fa 03 3d 1c 8f f8 a5 e8 c4 d9 6c 64 43 b0 a3 44 69 81 08 98 00 86 00 40 92 f0 91 39 00 00 30 77 6e ff c2 0e 2c 0a 36 e4 7e 00 00 79 31 ec ba 4b 2f a8 f1 2f e5 b5 a7 21 59 a5 e7 1f 2b a8 80 1e 33 18 b5 dc 74 15 eb c8 18 9c 71 ff f6 f0 f3 d7 17 9c a4 0d 48 d4 8c 76 c0 a3 3b f7 8b 3e 12 54 dd 43 70 88 8f b2 7e b6 fc 9e bd d1 48 dc d4 f8 12 51 be 39 21 62 73 46 bc 29 30 6c 97 99 80 d1 9b 9b 19 32 52 0f 00 53 51 21 dd 35 78 ee 95 1b 70 25 57 c0 e7 74 ff e9 74 03 62 33 b5 64 46 8b 9d 0a b3 91 ec 1c 86 79 ff 05 42 28 d7 9d de 15 e7 25 45 f8 a2 35 7a ad d1 0f 1f 49 ad 25 0b 0d 92 ea a3 dd 08 66 1f a5 2f 39 f9 f9 cc 52 ef a0 8d 8e 78 80 db 2f 8c d4 53 22 c4 c4 ee fe 21 ed 69 13 ec a9 73 04 92 82 9c e6 d3 7c bb a7 Data Ascii: ]aE*~V&r=ldCDi@90wn,6~y1K//!Y+3tqHv;>TCp~HQ9!bsF)0l2RSQ!5xp%Wttb3dFyB(%E5zI%f/9Rx/S"!is\|
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 1e 16 82 30 49 0c 00 25 fd 14 00 13 7a 2d 79 9a 6e cf 79 2e 9b ad 41 cc d9 db 8a 7e f0 de da bf c5 19 27 a2 c3 92 fb 7f 33 5c 5f 1f 61 66 d5 cd 3c 5f b0 de 54 5b a1 61 51 d8 0d 75 86 16 26 86 5b 59 d5 93 fc 04 14 4e 1b ff d2 a8 4b a1 19 dc 30 fb 1a 97 0c 3f 22 88 de ce 83 c2 63 8e f2 bf ac 31 9a 27 b6 ff 0f 78 c7 cc 56 66 b6 dc 7d d2 46 a0 55 67 f1 d2 76 d5 0e 9b 95 78 e8 6e 3e 7e c2 b6 4d 7c 41 64 78 29 b9 aa 1f ff ec d2 8d 1b 25 ec 51 0f b4 a1 5a ff 3f 73 fa 5f fa 73 35 bc 0c eb f7 25 00 d2 ac 08 41 c6 ec b1 3c d6 d1 b0 d5 44 b0 35 53 53 cd e1 d9 32 c1 1c a0 8a ea 2d b1 d0 4b 34 8f 8d aa c3 e0 1a cd 87 ed d3 32 60 c6 9a d9 b2 64 0f 7e 66 c1 c3 2b 9c b7 ef 09 83 9c 49 1c 57 e3 84 84 07 f3 c8 f1 7f 4d b0 ca 08 0e 7a 21 12 ed ae 72 52 ef 3e a9 b2 2a 5e f2 Data Ascii: 0I%z-yny.A~'3\_af<_T[aQu&[YNK0?"c1'xVf}FUgvxn>~M\|Adx)%QZ?s_s5%A<D5SS2-K42`d~f+IWMz!rR>*^
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: f1 0f 68 b2 f1 31 2c 0c f8 02 03 e4 5c 1e 6d 92 65 e2 39 f2 a4 06 f3 39 67 a6 dd fb 0d 89 70 14 e6 85 b2 d2 80 bd 09 77 a9 dd 78 4e 75 c5 e8 7e 9d 37 dd f7 c0 2d b9 74 78 33 56 45 1b 9c 8c 05 0a c0 67 a5 c1 1c 2c fe 13 70 aa fc 06 7a 9b c6 3d 12 84 94 62 95 9b 9a b4 5b 8b 9a c8 25 18 d6 83 ee 8d b8 e3 52 e0 f7 43 c2 53 a3 17 7f fe 46 9d c6 ab b3 1f 89 88 de 83 33 84 ba b7 24 39 dd b4 27 47 f8 5d bb 89 ea 50 92 5d f3 30 61 ae 2a 62 54 e8 4f e8 b0 26 e5 1b e5 4f 93 a8 bb ba 12 4c c0 28 c4 66 30 6f 62 04 3f cd 2c 5e c9 50 f6 7a 73 b2 fd 55 48 50 e1 ea ae 1b 2a 3b 40 75 7f 3f e3 92 59 1d 7e 12 70 9c bb e2 9c 99 80 f7 2e 6f 2c 2b 8a 35 38 a4 17 9e 14 95 3b f2 b7 81 0e 3a 60 db 6a b5 59 e3 a8 ed 0f 00 39 37 dd fe 40 e4 52 02 0d 0d 70 60 b0 68 df cb f5 cc 78 00 Data Ascii: h1,\me99gpwxNu~7-tx3VEg,pz=b[%RCSF3$9'G]P]0abTO&OL(f0ob?,^PzsUHP;@u?Y~p.o,+58;:`jY97@Rp`hx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.17	49881	79.127.206.234	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:35 UTC	547	OUT	GET /pcapp/images/3rdparty/application/videos/scavenger_quest_1.webm HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept-Encoding: identity;q=1, ;q=0 Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://pcapp.store/ Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045 Range: bytes=0-
2025-01-02 11:16:35 UTC	670	IN	HTTP/1.1 206 Partial Content Date: Thu, 02 Jan 2025 11:16:35 GMT Content-Type: application/octet-stream Content-Length: 1280458 Connection: close x-amz-id-2: 1WvTWDvmz3PTFGL679kmZE9gc/RGiOBY1qlMqniu2vB4xNrSJYfo/Icj0+NamvoIlG9Xtp6vft8= x-amz-request-id: TV55P7QW54T2XFQP Last-Modified: Wed, 29 May 2024 11:48:39 GMT ETag: "fb3de8a72859fb711c3598bbcc3c5d92" x-amz-server-side-encryption: AES256 x-amz-version-id: 3Kh0.TOG2ZiFgcxgbx29ecxXZ8erCKHX X-77-NZT: EgwBT3/O6QH3VlMKAAwBnJI74gG3rQsBAA X-77-NZT-Ray: f03d0613f9dd6be89375766720a3f91f X-77-Cache: HIT X-77-Age: 676694 Server: CDN77-Turbo X-77-POP: newyorkUSNY Content-Range: bytes 0-1280457/1280458
2025-01-02 11:16:35 UTC	15714	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 02 42 85 81 02 18 53 80 67 01 00 00 00 00 13 89 9a 11 4d 9b 74 bb 4d bb 8b 53 ab 84 15 49 a9 66 53 ac 81 a1 4d bb 8b 53 ab 84 16 54 ae 6b 53 ac 81 d6 4d bb 8c 53 ab 84 12 54 c3 67 53 ac 82 01 26 4d bb 8d 53 ab 84 1c 53 bb 6b 53 ac 83 13 89 71 ec 01 00 00 00 00 00 00 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 49 a9 66 b0 2a d7 b1 83 0f 42 40 4d 80 8c 4c 61 76 66 36 30 2e 33 2e 31 30 30 57 41 8c 4c 61 76 66 36 30 2e 33 2e 31 30 30 44 89 88 40 Data Ascii: EBBBBBwebmBBSgMtMSIfSMSTkSMSTgS&MSSkSqXIf*B@MLavf60.3.100WALavf60.3.100D@
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 8e d6 35 7d eb cf a1 0f 81 48 ce 13 cb e5 9f c6 3a e8 7a 53 b7 a9 bc 37 90 30 ea cc 5e 58 6f f2 d1 1d 59 06 8a 9e 03 27 00 4a 0b 42 b0 67 bf e9 99 43 0b f2 3e ea 4c dd 7f 78 54 00 e9 1e 34 8d 22 cd 43 03 14 30 dc b7 f6 f3 e6 cf 51 57 fb 38 6b 15 7e 4c c0 ce db f9 5e 35 ed e2 3a e1 61 a4 f6 22 c7 28 fa 2a d2 ac 9a 8a 40 05 89 00 bf 8b 3a 13 a4 93 76 a5 f4 14 3a 79 1a ea 2c fb 2b d9 ff 57 1b 28 7d 59 f0 52 d4 3d f1 b7 76 38 2b 02 96 f8 a3 c2 96 2b 4b f7 4d 29 92 02 40 64 e1 43 69 42 d1 07 59 92 50 b2 fa 21 64 b0 a1 73 9c e0 c1 ae 81 12 e4 c5 40 48 e5 f1 43 ed 75 60 a3 84 b3 09 98 60 fa 5f 04 91 f7 c0 2e 47 6d af 6c 6b 48 b2 45 00 a7 df 26 76 a1 da 3d 58 1a 11 12 f3 38 86 2c ed 77 ed 24 58 3a 53 9c 20 c1 6b 9a 3f ff 04 1b 4a da 4a 7a 2c b3 0a 0e 64 0f c7 48 Data Ascii: 5}H:zS70^XoY'JBgC>LxT4"C0QW8k~L^5:a"(*@:v:y,+W(}YR=v8++KM)@dCiBYP!ds@HCu``_.GmlkHE&v=X8,w$X:S k?JJz,dH
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: eb 02 02 87 d8 f7 6b 33 73 1b 1b 5f e6 b2 da 92 17 e1 81 4e 35 9b 3f dc a3 2f f2 c4 1d a9 68 d5 08 2e 2b 82 92 69 82 1b bb 66 9e ee db b6 cc 07 a9 ed 85 39 d2 9e 20 4e a5 a7 98 a5 48 8b e8 b5 dc 99 14 2e 50 19 fc 33 5b 4e 8b 93 38 79 c9 b1 94 82 c4 25 cc ff 18 30 62 f7 20 d6 df 8d 24 0f 95 9f c4 e2 38 86 af 72 12 9f cd f5 6c 5f fb 37 30 30 d6 65 cc 4c fc 00 04 6e 0a 4e 11 55 08 fa a6 97 6f 1d 4f a1 57 a9 04 31 54 3e e1 33 17 08 c3 d7 5b 3f 93 e8 a9 ae 3f 07 d0 b3 7d 70 63 eb 69 ff f2 a3 80 0c 56 29 d1 df 71 04 1a a7 23 2f 26 e7 cd 70 8c f2 15 b0 30 1a 13 9f c3 d2 07 21 15 0d a6 2c fc 5b 31 b1 09 69 3d 19 47 4a f3 15 a5 33 9a 6a 13 66 3c d2 1e 7d 37 82 46 e3 a6 2d 67 c9 c8 23 eb 4b 70 b7 62 82 6d 98 52 2e b2 b2 58 32 2b d8 81 13 bf 62 6b 13 85 6e 03 33 15 Data Ascii: k3s_N5?/h.+if9 NH.P3[N8y%0b $8rl_700eLnNUoOW1T>3[??}pciV)q#/&p0!,[1i=GJ3jf<}7F-g#KpbmR.X2+bkn3
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 9d bf db 8f 85 c6 95 12 eb d3 c4 11 78 f9 af 9d ca 74 f8 e5 ba 1e 4b d0 07 b4 60 23 32 fd 6e 56 f7 2f 17 92 d3 87 70 a6 8c f8 d7 a2 33 74 ad 9e 46 d4 87 17 06 38 12 58 bc 7a 1f c4 8a 00 52 db 27 c8 54 7e 23 87 fc 3a f4 28 8a 7b 99 69 0c c4 6a 9f fb 0c a7 74 ee 9f f5 dc c0 1e 29 2a 31 ea 6d 94 12 ab e4 1f aa 62 43 4c 54 0b 15 25 96 f2 55 a1 6a d7 fb 1b 67 96 88 eb 32 8b c0 cd fe c3 9d c2 25 61 cc f2 fa 41 d5 79 7a 37 cb c8 55 cd af 91 27 11 e7 e3 7b 4e f1 53 49 06 1d 3f c8 81 06 71 1a db da 65 50 e8 8a fc 90 a2 35 92 c7 f1 cd a7 f8 01 bc de fb 98 56 16 32 3b de 18 9f 02 ba 5b 2e 87 5c 0a b9 a6 63 9c 84 ee 22 a7 7d 56 b2 ad 5d 80 d5 a9 26 9d 9f f1 e3 75 a7 62 b4 cc a9 2b fc 9c b8 80 5b 65 d9 f4 40 49 93 b9 7e 49 cb f9 2f 95 94 03 0e 02 c5 a5 0a 40 d7 81 0a Data Ascii: xtK`#2nV/p3tF8XzR'T~#:({ijt)*1mbCLT%Ujg2%aAyz7U'{NSI?qeP5V2;[.\c"}V]&ub+[e@I~I/@
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: b7 23 8a 5f c0 46 2f 62 d0 29 77 a7 7c 6c c4 9a c4 99 aa cb f1 b3 47 84 cb 09 08 18 94 6a de 8b 26 92 dd 7a 9b 91 68 6c c4 e3 77 72 4a 04 c1 6c 39 e0 bf 58 b7 86 bc 18 dd cb ee e7 8e 8b 8f 10 c8 8b e9 f2 f0 da 91 67 87 5f 9f f9 70 5b c0 7c 9a 02 29 f2 ce 2d e8 4b 50 f9 0c 9a fa 68 7b 4a 0d a2 27 b9 7d e3 5a c6 78 67 68 cb c9 1e 40 99 83 9b 0f 1f c8 7a b6 1c 83 b8 54 75 6d 91 a1 91 29 a9 4b 82 33 57 fb 8c c4 c1 1e 80 5f 8a e3 da 17 6c 72 f0 f1 07 39 18 85 bb 14 e7 0d bb df 7e c9 3f 9f cb 20 98 86 7a 86 12 f6 f2 49 88 e7 ca 7f 0b 23 42 35 38 16 17 df e0 5b 41 78 16 b3 60 d0 55 bd ac a7 84 5f 4f 92 89 16 a1 da 2d fc ff a2 18 0a 06 50 96 2e 99 fe 03 54 93 2d 33 31 e6 85 0d 91 2f d4 86 8d 53 41 6a 65 28 32 3c ae 83 18 94 c8 ed 59 5b 79 6d 0a f9 b7 90 9d 33 23 Data Ascii: #_F/b)w\|lGj&zhlwrJl9Xg_p[\|)-KPh{J'}Zxgh@zTum)K3W_lr9~? zI#B58[Ax`U_O-P.T-31/SAje(2<Y[ym3#
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 1e 04 e9 45 6e 4a d2 51 1b 33 8c e5 95 83 c0 da 57 72 39 32 73 97 d9 18 07 7a 7d 0e cf 8c 5c d6 ee 91 d0 00 e6 28 6f cc 0e 27 f8 62 9f 74 6b d1 5e ae 9a ea 89 40 a9 55 48 b3 4f 8e 92 2c e2 e6 df c6 d4 d8 fe 19 43 90 bf b0 1a c1 b2 df a1 89 4b 70 51 cc 9c 19 b6 1e dd 50 30 ba e5 2f 9a 7f c3 75 3e 99 f7 96 ed 89 21 c4 d7 65 1c 16 0c a1 05 06 23 ef b8 78 d8 b2 31 1a f2 38 3a b9 3c 86 29 d5 0f c3 f1 3c 5a ab 21 be 55 9b a4 ed 85 d2 20 b0 04 e1 ef 01 f8 9c 2c 67 29 8f 7c 8d 02 7e 53 14 d3 d4 ad 2f 98 2e af 91 16 53 0e e8 42 ee 3d 11 4c bc 06 42 c2 18 5d 31 ce 2d b9 66 46 11 09 7e 08 59 fb 9d 82 4c fe 8a 3a 67 77 c3 59 7b bd 09 c7 e7 7b da 39 26 bd 76 0d ca 07 19 06 c9 48 1e 8e 34 42 88 92 21 70 e8 c7 68 a4 6e e2 a8 42 e4 ab d6 ef 8d 66 c6 78 77 17 a0 92 ce 62 Data Ascii: EnJQ3Wr92sz}\(o'btk^@UHO,CKpQP0/u>!e#x18:<)<Z!U ,g)\|~S/.SB=LB]1-fF~YL:gwY{{9&vH4B!phnBfxwb
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 60 74 3e 96 2b f4 59 e0 e4 c4 a2 60 31 05 fb be d8 1e 92 70 2f ab 27 e5 74 ba ae c3 13 02 4a 3c 2c d4 c1 3c 97 3d b7 61 a8 de 65 e7 1b f4 67 f1 d5 92 b4 70 2d aa 5a b3 33 fe 13 e3 18 54 b3 59 37 6c 76 94 d1 01 a3 f0 46 6c 4d e4 dc 24 72 ed cd 4f e3 f9 63 a1 47 70 ec 0c c4 56 30 84 61 6b 8b dd 8b 76 a2 32 be 32 90 de df 4f bd 64 79 c9 1c 01 85 7c c4 65 c4 77 b2 2c 1b 89 07 d8 42 e4 62 55 8c 86 33 60 21 4c 64 41 bc 4e 29 1a 67 1c 35 15 c0 9c f0 b9 fe 42 cf 2a 3a 21 82 fc 12 64 73 14 31 d0 9f b2 5d 91 2c 1d b7 36 de 1b 4f 72 ad 7e d6 15 0f 51 7d b7 62 54 ef aa ed a6 09 64 b4 e6 6a bb d0 99 6c 53 c2 9c 63 71 37 4d 26 b0 9d f1 28 11 14 6b 19 1f 5a 90 46 eb eb 78 6f 96 12 71 91 2c e6 e4 93 c8 1b 29 92 c9 ed c0 65 b2 0f c0 30 ff fd ae d5 03 e5 c4 bc c2 da d6 a1 Data Ascii: `t>+Y`1p/'tJ<,<=aegp-Z3TY7lvFlM$rOcGpV0akv22Ody\|ew,BbU3`!LdAN)g5B*:!ds1],6Or~Q}bTdjlScq7M&(kZFxoq,)e0
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 89 dd aa bd ce 0f e1 f0 4f ca 45 61 d3 4d 9d 7a cc 66 88 b1 97 52 79 be ce 94 4b b1 d4 cc 8f 2e 10 dc 0c 16 cf af f6 7a 77 2c 93 4a 15 33 93 b2 4a 62 1f 22 2a ca 48 7f 4f 85 b3 42 54 e5 61 f4 a0 fb 69 53 5b d9 96 35 b1 fb 2f f6 c9 d4 1b b8 9e 18 ed 35 10 e9 e6 3d d3 58 f3 91 60 3c 5d df 81 3e e9 28 24 d3 5e 80 2d dd f2 47 3e db 94 a2 7e 7f 6e 9d 45 f6 8e 78 79 f1 a4 71 a3 51 60 85 c7 9c b2 0c c2 ec 06 03 37 6f a3 a2 04 f1 51 97 e3 6f 75 05 8a ae 52 a9 e0 8e f1 96 77 92 e3 d6 50 3c 2b 93 1d 88 6c a4 e6 b3 2e 49 67 96 c5 bb 6b 30 70 51 5b 2f 17 6c d0 fe 17 57 ff 6f 63 a6 e4 d9 45 a0 8c 65 1f e6 25 f8 29 57 9e 1e 39 4f d4 ea 98 5d 21 4a cd 27 83 eb 23 ca aa 5f 06 b3 fb 33 26 3b 6f 35 ac ae eb 82 a1 40 46 a0 b5 00 85 88 c2 bb 09 d0 17 4c 05 e6 08 29 c9 41 d2 Data Ascii: OEaMzfRyK.zw,J3Jb"*HOBTaiS[5/5=X`<]>($^-G>~nExyqQ`7oQouRwP<+l.Igk0pQ[/lWocEe%)W9O]!J'#_3&;o5@FL)A
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: c0 1c 25 0d 72 ae 30 14 da 58 87 fe 8e c8 60 a5 16 3d 76 2d c8 71 5a 35 34 00 4b 09 d7 62 58 b8 4c e6 44 d0 96 c8 90 3a df 41 b7 0f c5 0a 1d 7c a5 e4 a1 bf b0 c5 ad 94 80 9b d1 3c 0d d3 59 46 9a ae df fc b9 59 be 45 90 a4 7e e7 70 d4 d7 96 03 2e 98 bc dc 72 ff 7c b2 bc 71 61 d7 9b 35 7c d4 e5 80 60 97 de d5 5b 0d 93 76 96 6d 88 9f 7c 1d 3c 71 16 2d 18 5b a0 4e c5 1a 3d 4f 21 1d 3e 5c d4 89 61 74 dd 03 ab d6 c6 77 38 cd 43 ac 6f 22 b3 35 c2 25 81 4b 55 3d 62 5d 57 96 7d 57 c5 a6 4b 3e e7 e9 83 14 56 b5 e6 db a2 48 6b e1 f7 92 67 16 3a 8a 0a 3e 7c de 6a 8d fd 46 c7 70 ef 26 55 5f 4f d2 b8 f4 8a 63 63 37 6f e0 99 c7 e2 0f 56 fd 5b bd d8 2b 0d d2 df b7 b1 ee 44 ba fa 5a fe d0 e9 e1 ef 36 f5 6c c4 55 74 8e 5b 82 e1 a9 80 56 fa e3 83 eb af e6 ab e4 2e 59 c9 7f Data Ascii: %r0X`=v-qZ54KbXLD:A\|<YFYE~p.r\|qa5\|`[vm\|<q-[N=O!>\atw8Co"5%KU=b]W}WK>VHkg:>\|jFp&U_Occ7oV[+DZ6lUt[V.Y
2025-01-02 11:16:35 UTC	16384	IN	Data Raw: 77 5c f8 27 5e 4c 52 4f 39 01 33 96 46 58 7b 62 9a a0 6f 68 d5 60 17 cd 35 a0 26 39 f2 f3 f4 f0 e9 00 14 f0 af 3c e7 37 c7 27 3c 29 33 5e ff d5 54 db 61 e6 10 43 c5 8b d5 3a 21 24 6c 88 e2 49 4c b0 e8 62 07 ce e8 0a 31 06 65 9d 9f 9e 8d 3b be b4 6f 9e 3a f6 9f 5d 48 76 45 34 ca 27 09 cd 8b cd cc 7c 56 2c 67 95 5b b3 48 81 5f c8 d8 ce 20 4f 56 b8 12 7c 64 14 a8 42 60 d9 f8 32 c2 9c 23 3c 32 1c 09 55 47 2c 9a a9 94 2c fe 3a 54 c1 e1 b6 92 27 22 63 4d 43 3f 33 55 4c b8 20 1f f4 f6 01 78 5b 4b 60 75 db 94 65 43 a3 09 17 51 f1 58 26 82 f4 79 64 6d d4 3c 55 ee d4 15 91 0c 25 0e a2 86 ae ab bc 21 ec db a9 56 88 6f 25 8d 71 0d 49 b1 6d 05 c7 6d 16 fa 04 42 66 5b 28 2a 50 70 8d fd 77 96 45 bd a2 f6 cc 48 d2 1f 70 58 dc 2b ae 54 00 bf d3 64 e9 38 5d 92 dd 7f 2d 60 Data Ascii: w\'^LRO93FX{boh`5&9<7'<)3^TaC:!$lILb1e;o:]HvE4'\|V,g[H_ OV\|dB`2#<2UG,,:T'"cMC?3UL x[K`ueCQX&ydm<U%!Vo%qImmBf[(*PpwEHpX+Td8]-`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.17	49880	167.99.235.203	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:35 UTC	671	OUT	GET /images/front_img/appstore-menu/index_12/icon_search_write_right.png HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/appstore-menu/?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: finishInstallInApp=done; _fcid=1735816589292045
2025-01-02 11:16:35 UTC	331	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 02 Jan 2025 11:16:35 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://repository.pcapp.store/pcapp/images/front_img/appstore-menu/index_12/icon_search_write_right.png Strict-Transport-Security: max-age=31536000; includeSubDomains
2025-01-02 11:16:35 UTC	162	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.17	49882	18.173.205.91	443	2936	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:36 UTC	702	OUT	GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":14,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735850199&nocache=20674 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-02 11:16:36 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 02 Jan 2025 11:16:19 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 5f2b92535eb1297cf75fcc5a4a4e50cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: yVC6CrB8oNS2iwHt3cuLzDrfkGi_GlrM3Q5FBWQRQom4p-vqqIcRAg== Age: 18
2025-01-02 11:16:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.17	49876	207.246.91.177	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:36 UTC	273	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_product&evt_action=webview_error&reason=failed_to_create_thread_hook&eng_time=1735822748337&nocache=6365906 HTTP/1.1 Connection: Keep-Alive User-Agent: WinHTTP 1.0 Host: pcapp.store
2025-01-02 11:16:36 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:36 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.17	49877	207.246.91.177	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:36 UTC	285	OUT	GET /pixel.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=fa_hint&evt_action=close&version=fa.2001g&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&eng_time=1735822754074&nocache=6367390 HTTP/1.1 Connection: Keep-Alive User-Agent: WinHTTP 1.0 Host: pcapp.store
2025-01-02 11:16:36 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:36 GMT Content-Type: image/gif Content-Length: 42 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.17	49879	195.181.170.18	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:36 UTC	138	OUT	GET /pcapp/images/3rdparty/application/images/apps_73400_666176fb273fb.png HTTP/1.1 Host: repcdn.pcapp.store Cache-Control: no-cache
2025-01-02 11:16:36 UTC	638	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:36 GMT Content-Type: application/octet-stream Content-Length: 234721 Connection: close x-amz-id-2: 1+c9d+q2jGXPqMQ5jUz5YoUHCwzQmeSMk6hzTdm/f3Wk5NnRBsMCMkMAgg3xtqWevV8pipmHrEg= x-amz-request-id: J2XAWA3S5FH31FD4 Last-Modified: Thu, 06 Jun 2024 08:44:44 GMT ETag: "a28214a3689afb5b8eb74b788525a33f" x-amz-server-side-encryption: AES256 x-amz-version-id: w4BPUP3bfnxNvtOcY2OtNnFz11V.YgMM X-77-NZT: EgwBw7WqEQH3fYYOAAwBw7WvAgG3C9MDAA X-77-NZT-Ray: 4c156224c846e9c094757667d44be919 X-77-Cache: HIT X-77-Age: 951933 Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:36 UTC	15746	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 18 08 06 00 00 00 84 15 25 e1 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 03 94 93 49 44 41 54 78 9c 7c fd 77 94 64 5b 76 de 07 fe ae 09 9b 19 91 de 9b f2 de bf aa e7 7d 77 bf f6 40 37 d0 f0 20 09 12 82 40 51 8b 8b a4 a4 99 91 38 94 69 49 b3 96 a8 d1 48 1c 8a 14 9d 68 d0 02 61 08 d3 40 e3 b5 ef 7e 6d 9e f7 55 af bc af ac ac f4 3e 23 32 fc 35 f3 c7 77 4e dc a8 47 ae a9 b5 b2 d2 44 c4 bd e7 9e b3 cf 36 df fe f6 3e 0e fd c5 18 62 f0 7d 08 23 88 63 70 1c fe bd 7f 4e 0c ae 03 8e 07 c4 d0 6c 81 97 82 ee 2c 34 9a fa 8a d1 7b 7c df 5c a7 e3 f3 61 04 be a7 9f a3 10 22 c0 75 f5 7b 10 42 1c 81 e3 ea 73 60 c6 60 c6 62 fe 44 1c ea fe ae 79 cd f7 f5 f7 66 13 5c 0f 52 e6 be 51 0c Data Ascii: PNGIHDR%pHYsIDATx\|wd[v}w@7 @Q8iIHha@~mU>#25wNGD6>b}#cpNl,4{\|\a"u{Bs``bDyf\RQ
2025-01-02 11:16:36 UTC	16384	IN	Data Raw: 8e 3c 2d 5c 35 18 98 de a3 3e ad 3d a3 8a e4 72 19 d5 0d d7 76 92 63 ba 46 4d 0e ac a7 a0 6b 7f f0 21 fc db 3f 87 63 fb a5 c4 2e df 97 e1 ea 2d c8 09 1a 19 94 a7 5a aa e8 80 f0 ed 43 49 0d a8 25 37 f4 f7 c3 99 23 f0 f2 0f e0 d2 25 98 5d d1 86 4f a7 04 13 66 32 7a e6 d0 31 ac c9 8c e6 39 88 94 e3 da a9 6b 93 7a ae 36 7b 2e 2d a3 bb 6b 97 ea 80 0f 1f 56 4b ca 0f df 12 fc 3d 34 2e a8 70 69 55 0a af 54 91 52 c9 75 c1 85 ab 52 d4 c7 8e a9 57 ef ea 8a ea 79 27 77 c1 6f ff 65 f8 9d df d3 f1 8a 03 96 c8 83 1a 25 1c d9 a3 e7 fa 8b bf 50 44 9b cb 41 3d 4a 4a dc 76 aa f2 a0 27 86 d4 38 e1 d6 2c 5c b9 00 3f 79 4d 70 75 2e af e7 3a f7 98 36 7e 00 bc f0 bc a2 a4 3f 7f 19 3e ff 05 29 e0 5a 85 36 31 70 6c 44 91 46 1c 24 b2 da 4e ea 92 38 93 b1 55 90 71 c7 3e 72 c0 09 69 Data Ascii: <-\5>=rvcFMk!?c.-ZCI%7#%]Of2z19kz6{.-kVK=4.piUTRuRWy'woe%PDA=JJv'8,\?yMpu.:6~?>)Z61plDF$N8Uq>ri
2025-01-02 11:16:36 UTC	16384	IN	Data Raw: fd e4 23 da f3 f6 80 95 28 36 87 96 64 cc 5e 89 68 1f 0c 53 ab eb 19 fd 54 52 e3 ef 79 86 d4 69 e7 c0 28 c6 28 32 6d 57 03 19 88 7c b7 29 cb 6a 4a 47 e5 0b d2 47 7b a7 04 43 d3 82 b9 59 d8 3a 28 87 a5 52 a3 dd 80 28 8a 95 3b ce e5 44 32 db 29 43 71 c2 20 62 b1 0c 6f dc 94 be ec 35 e4 47 d7 57 49 e0 e4 a8 ee 7d e3 86 d2 30 b9 bc aa 02 82 48 d1 70 2e 2f 9f d6 31 79 e5 e8 63 eb 6c 85 30 9d 81 a9 29 9a f7 6e cb c1 5e 5e 91 53 3d 50 94 be bd 77 9f ff 63 6f 9a ff b4 d1 82 c8 61 79 cf 14 7b 1c d8 d8 dc 66 76 65 99 3b 8b 8b 64 7c 9f 4a 20 82 6a da 71 a9 c6 50 c3 61 da 71 08 dc 90 bb 71 c8 41 e3 08 c6 c4 38 8e 43 84 47 c9 8b 71 70 70 81 5d f5 80 33 f5 16 03 1f 5e 66 ed ea 1d 6e 1c 3d cc b7 07 0a 7c 7f b4 9f f9 ae 3c b8 1e 99 f2 16 de 40 3f e1 d6 06 78 2e 6b 51 8b Data Ascii: #(6d^hSTRyi((2mW\|)jJGG{CY:(R(;D2)Cq bo5GWI}0Hp./1ycl0)n^^S=Pwcoay{fve;d\|J jqPaqqA8CGqpp]3^fn=\|<@?x.kQ
2025-01-02 11:16:36 UTC	16384	IN	Data Raw: 3c f6 a0 04 0d da 31 88 3d d2 62 4d 35 89 26 50 8e 38 17 57 c7 4f 53 31 a0 bf fe 6f e0 0f be 0d 4f 9e 14 11 8f 13 87 c5 50 79 92 52 10 38 a6 b0 63 6d 6b 7f 8c bc ba 76 15 8a 93 ba 7e 4d 10 89 a5 39 59 b7 99 ab c3 fa 7d e0 6b b6 e7 ae 09 c9 62 b1 5d d5 4a 75 20 c7 2b a1 6f aa a0 30 49 2a 87 ef c9 4e 79 06 e3 1e 34 ba 52 bf bc 7c 09 de 7c 43 ee 91 27 bb 95 c8 91 33 7b a5 5e b3 77 c0 fe 76 b8 f7 f9 4c ca ab ca 7d f8 29 51 0e 4b 12 79 4e 52 3b 70 f7 d3 39 26 90 73 f1 f2 86 9e d0 b4 b3 2b 65 96 95 55 e9 81 4f a6 72 5f 8b 42 14 c7 0e ac ca b5 e1 9c 23 b8 67 e8 20 e0 50 43 dd 65 6d b3 d9 58 9a c1 d4 05 31 b7 b7 e0 c4 51 f9 de 6e b7 ca 7a eb a1 6b 3d 74 b6 43 2b ca 61 2a 6a c6 be 80 5c ab af fd 17 b9 20 37 c3 b1 ac 51 63 64 5f bf 7d 5e 9c d5 07 1e 92 67 b9 ef 3a Data Ascii: <1=bM5&P8WOS1oOPyR8cmkv~M9Y}kb]Ju +o0INy4R\|\|C'3{^wvL})QKyNR;p9&s+eUOr_B#g PCemX1Qnzk=tC+aj\ 7Qcd_}^g:
2025-01-02 11:16:36 UTC	16384	IN	Data Raw: 39 63 52 06 9b 3d ea 9d 06 07 1a 11 45 3a 64 fd f0 0a 8d a6 26 99 1a 36 b7 7a 6c 6e df 21 9f 4e 58 3f b0 42 b3 dd 20 73 81 4a 61 0d a4 d2 07 5c e4 62 ef 6d 61 e8 36 6b 9c 3c b4 cc b1 b5 65 9a b5 1a 79 51 30 9e 8c c9 52 61 38 17 b9 c1 58 99 e6 94 e5 09 69 32 a1 59 8f 78 fc fe e3 28 a3 79 e3 bd 8b 2c af 2e d1 08 03 0a 5b 10 58 68 d5 42 a6 45 c6 ce 38 25 cb 8c 6c 2f 2d 73 7f bd 3e 75 ac 34 8d 50 a3 b4 e1 76 0e 69 a0 58 40 53 33 96 42 89 44 e5 00 d8 b4 96 ae 52 b4 51 4c 11 8a c8 10 d0 c6 b0 16 04 32 c1 56 43 58 58 82 49 c6 95 27 1f e0 d2 8d ab 82 32 9c 39 09 df f8 0e 3c 70 1f c7 7e e2 c7 d9 bf bb 09 bf fd 45 78 ff 3c 6c de e6 ea 70 04 d9 94 63 4f 3e 46 b8 bc cc 64 b0 cf f0 e5 57 61 7b 9b a7 7f f2 a7 68 1c 3c c8 78 7f 8f c5 64 42 18 68 ee 4e 87 f4 a2 98 38 0a Data Ascii: 9cR=E:d&6zln!NX?B sJa\bma6k<eyQ0Ra8Xi2Yx(y,.[XhBE8%l/-s>u4PviX@S3BDRQL2VCXXI'29<p~Ex<lpcO>FdWa{h<xdBhN8
2025-01-02 11:16:36 UTC	16384	IN	Data Raw: 9b 7c ee 0f 3f ce e1 f5 eb 3c ba 7e 99 17 43 8b 96 70 32 6a 39 7e 93 32 ef e8 48 83 4d 42 51 d9 06 a7 3c 2a 49 b0 d6 52 57 15 b5 17 e2 9c 94 1b 3c 3f 7d 6d ca df b8 7f 40 2f 53 94 18 46 a7 23 2e 5c dc 61 7d b5 cb 70 5a e2 5c c2 b7 77 87 dc 18 1b 5e b1 05 68 cb bc bd 6b 5e d3 8e 6b 48 ce 41 7b 50 68 ac 72 e0 15 9d 4e 06 fd 0e d6 2b ea aa a1 c9 c2 31 a7 29 e3 d9 04 8e 8f 49 1e b8 9f f6 d6 35 d8 39 03 47 43 98 4e 48 b2 0c 1e b8 5f 86 02 d8 16 32 4f 51 97 54 d6 71 fe d2 25 26 87 a7 9c cc 46 54 15 9c 5d ef 43 91 d3 db 5d e7 cb 56 bf 9c f1 d4 a1 d2 84 de fa 2a ba bb 0a d5 18 ea 31 58 45 73 3a a2 b1 0d 26 55 68 ad e9 e4 39 bd a2 43 9a 27 f8 a6 c4 8e 1c ba 93 d3 df 5a a3 bf 25 36 b6 6d 1b c0 0b a0 15 d6 ae c3 41 e3 f0 6d 83 af 6b 9a b2 c4 5a 47 55 56 4c c6 95 8c Data Ascii: \|?<~Cp2j9~2HMBQ<IRW<?}m@/SF#.\a}pZ\w^hk^kHA{PhrN+1)I59GCNH_2OQTq%&FT]C]V1XEs:&Uh9C'Z%6mAmkZGUVL
2025-01-02 11:16:36 UTC	16384	IN	Data Raw: 36 d7 07 dc 7e fe 25 3e f2 d1 8f 70 36 0b d7 24 96 14 e6 9c 00 47 e2 3d 59 9a 84 09 a1 cd bc 82 15 17 8e d5 8a 4a cb 3c 6a a3 34 5e cb 77 6d 64 2c 5f 9a 1a 72 93 c8 48 48 2d 36 b1 4e 35 2a 85 3f 9d 68 fe 64 68 b0 b3 29 b3 b2 a2 2e 67 1c 1d 9d c8 72 6a 5b a6 24 9c dd ec f3 a3 0f e4 3c b8 bb 42 b1 7b 89 5e af 47 1d 54 c9 a2 d8 43 aa 34 95 f2 24 68 36 f2 01 a7 27 fb 80 67 fb d2 65 6c dd 42 dd 52 d5 53 bc 71 bc ee 5a 4e 8f 4f e9 a7 99 28 7b a9 94 36 0c 6f a8 95 28 7a f5 0a 83 01 fe e7 1f fb 5f e1 ce 01 ac f5 a1 50 b8 4c c9 de 9f dd 65 75 2b 65 6b 7d 8d eb 37 8f f9 b5 8f 7f 8e e7 5e bb 4e d1 ed 70 e9 de 73 9c bb b4 c9 64 3c 65 74 3a c5 5a a9 88 c6 70 79 01 35 2b 3c 22 bb 19 d3 2d e1 53 5a 56 56 52 6e 4f 1a 7e f4 17 3f c1 cb 87 25 1f 5c cd 59 d1 ee 3f 88 6d 13 Data Ascii: 6~%>p6$G=YJ<j4^wmd,_rHH-6N5*?hdh).grj[$<B{^GTC4$h6'gelBRSqZNO({6o(z_PLeu+ek}7^Npsd<et:Zpy5+<"-SZVVRnO~?%\Y?m
2025-01-02 11:16:36 UTC	16384	IN	Data Raw: 6a 8f 4d a4 c5 bb cb c3 6f 9a 89 40 4f ad 12 46 5b d0 94 dd 6c 99 99 84 a2 72 41 92 58 b4 73 7e 32 4f 0b 9b ce 28 06 d7 86 a4 4c 2c 39 a3 1c f9 9c 87 fd f2 b0 f3 18 a4 95 4e 42 68 0a 51 ba 79 fe 77 a6 2e 94 93 d7 ae c2 d6 86 1c f7 b9 f7 c3 9b 6f cb 26 7a fc 24 ac 6c c0 c5 ab 12 62 3d b4 0f da 6d 69 58 ad 1d 09 c5 5d ee cb 35 3d fa a8 6d c8 6e e0 ed b3 32 fe c5 39 f1 7e c3 50 84 d3 37 5f 83 f5 75 38 7a 00 f6 1f 90 30 eb 5b 17 e0 de 16 1c de 07 a7 8e 8a f7 77 fd 2e dc d9 84 45 03 8f 2e cb f5 14 87 02 f6 58 df 16 20 98 63 15 24 b9 31 62 8d 93 76 57 e8 2f 8b 01 b4 fb 8c d1 ac f3 73 b6 fb 93 55 6e 49 06 2a 85 44 c9 fc 2e ce 8b 92 bc b7 29 a1 e4 56 4f 76 cf d0 86 be ab 36 7f 1b c7 02 c2 4a b3 3c 5e 25 d7 56 af c3 b3 4f 48 b9 d6 c6 b6 7c be b1 03 eb bb 12 b5 28 Data Ascii: jMo@OF[lrAXs~2O(L,9NBhQyw.o&z$lb=miX]5=mn29~P7_u8z0[w.E.X c$1bvW/sUnI*D.)VOv6J<^%VOH\|(
2025-01-02 11:16:36 UTC	16384	IN	Data Raw: 44 6c 47 25 25 4a c8 f3 a5 76 77 75 45 84 21 8e b0 38 ed 6c 8b e1 d0 eb 5b 10 56 20 d7 bc d6 12 43 c1 71 25 bc 5c 28 8a a7 55 0c 44 01 6a e0 c1 13 d0 5c 90 76 87 c3 ae 6c 1e c7 97 eb 9d 6f 8a c7 89 12 84 74 14 da d6 6c 21 54 02 be ef 91 93 10 65 38 41 09 a2 35 ce bf fe 12 5e a9 46 32 1a b2 de 8f b9 14 54 05 01 99 66 42 64 5f f0 c5 8b 0d 6d 78 26 f0 04 a5 9d d8 36 7f 64 d2 2c a2 dd 93 39 88 86 c2 d8 d5 a8 89 90 cc ef 55 b5 0c f7 da 62 14 94 cb 72 2c 65 24 5f 67 f3 c2 af 6e f6 58 1f 26 1c 6f 28 9c 72 89 62 a1 48 62 84 ac 20 8e 13 5c d7 65 ce 0f 79 ba 59 e1 55 7c 70 15 2f fc 67 9f e1 b9 c3 4b 6c f6 ba b8 9e 4f 9c 24 b4 5a 2d ba 9d 1e 19 86 ea fc 3e 9a 73 73 14 3c 8d eb 17 f0 92 08 27 8b 71 bc 5c 29 67 24 3b 5b 6c ed b4 b8 71 ef 2e 6f 5f bb cb ef 9e bb ce 17 Data Ascii: DlG%%JvwuE!8l[V Cq%$UDj\vlotl!Te8A5^F2TfBd_mx&6d,9Ubr,e$_gnX&o(rbHb \eyYU\|p/gKlO$Z->ss<'q$g$;[lq.o_
2025-01-02 11:16:36 UTC	16384	IN	Data Raw: 03 1f d4 13 99 59 1f 63 87 43 79 73 44 ce 7a fe 0d cc 2d 96 b0 58 a7 b9 a3 f0 00 1a 5e df 7a 42 71 64 41 2b 15 bc 2d 3f 97 17 ae f3 b2 ea 28 61 46 87 6b d5 d0 77 5c 47 77 21 fa 32 a1 1b 92 73 a1 0d 5f 2c 23 53 96 b3 9f 4f 7d 8a 39 97 5e 55 73 9e 78 88 08 b4 62 5a a6 34 ca e1 89 33 62 9c ae dd 12 b8 b9 1b 58 ce 9b 3b 62 8c 8f 2f 4b 04 7c 30 84 6b db 12 f9 1e 5f 91 c8 39 0e 65 48 d7 6e 49 24 bb be 0c 8f dd 0b 3b 7b 70 7d 27 94 5a 38 89 ce 96 17 64 e3 3c e8 c3 e5 9b 42 e8 6a 35 25 e2 d6 1a b2 92 d7 0e 47 dc b7 d8 a3 4a 12 06 94 78 3c ed 6e 8b c1 70 82 57 86 96 51 3c 1e 29 9e cc 55 10 09 c9 24 fa eb b6 24 67 3b 1a 87 46 06 4a 9e 81 d0 50 a1 ee 90 93 7a 29 45 42 09 49 a6 08 6c ee 48 c9 58 5b 13 e0 ea a6 e4 89 87 07 42 d2 d2 5a 10 80 d0 ce f1 b1 b3 27 b0 71 4c Data Ascii: YcCysDz-X^zBqdA+-?(aFkw\Gw!2s_,#SO}9^UsxbZ43bX;b/K\|0k_9eHnI$;{p}'Z8d<Bj5%GJx<npWQ<)U$$g;FJPz)EBIlHX[BZ'qL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.17	49878	195.181.170.18	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:36 UTC	138	OUT	GET /pcapp/images/3rdparty/application/images/apps_73377_663ce6da92b28.jpg HTTP/1.1 Host: repcdn.pcapp.store Cache-Control: no-cache
2025-01-02 11:16:36 UTC	637	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:36 GMT Content-Type: application/octet-stream Content-Length: 83447 Connection: close x-amz-id-2: +iJSQDWXDir1k0o1xSZsiMi008Cg3DOQ7e4rO9lGGx1C7Scnp1IUKY/o7EXRZHxVCdMVnQHP+nU= x-amz-request-id: 6K5T5PT18QDE4JWC Last-Modified: Thu, 09 May 2024 15:08:11 GMT ETag: "ee755b13adeaba5325e4a1686eccb9e7" x-amz-server-side-encryption: AES256 x-amz-version-id: 2YkeYGjrls8Lsgmm5_MI4xzBzYoPvgJ. X-77-NZT: EgwBw7WqEQH37PMMAAwBnJIhJwG3v0ACAA X-77-NZT-Ray: 4c156224ba2f44c094757667fa8d741b X-77-Cache: HIT X-77-Age: 848876 Server: CDN77-Turbo X-77-POP: frankfurtDE Accept-Ranges: bytes
2025-01-02 11:16:36 UTC	15747	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 00 7e 00 f9 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFHHCC~}!1AQa"q2
2025-01-02 11:16:36 UTC	16384	IN	Data Raw: e2 21 46 95 3a 53 73 a9 5a 9f 16 d3 a0 a1 7a b1 8c a7 5a 38 5e 45 28 4e 50 51 a9 13 f7 f7 fb 43 c4 1f f4 03 d3 bf f0 7d 73 ff 00 cc f5 7b 1f eb 1e 17 fe 7c d6 fb e1 fe 67 fa 6f ff 00 10 ad 7f d1 40 ff 00 f0 cd 2f fe 79 9f c9 be 85 f0 c3 c4 96 fa d5 ae a1 f1 6e 7d 1d fc 28 35 49 ef af 6c bc 0f 2c 97 51 5e 5e df 69 f6 9a 74 5f f0 94 9d 4f 43 d3 2e 21 d2 b6 c7 3e 9d 71 71 e1 7b 5b 09 9a de f6 15 b8 1a 56 8f 16 a8 f3 ff 00 25 e5 9f 47 fe 0f c8 f1 71 c7 e1 eb 66 39 bc b0 b4 b0 74 b0 98 5c d2 70 54 e8 c3 0b 8a ab 89 6a 4b 0b 15 f5 ea 6e ac e9 56 74 b1 4e 57 a9 87 f6 b5 1e 2e b5 44 a1 fc 91 91 f8 9b e1 26 61 8c 8e 17 85 72 ee 21 cb f3 98 e5 d9 6e 1f 2f af c6 0f 27 a7 85 5f d8 6a be 26 30 cb ea e0 71 6e 84 31 f5 a7 cb 89 a7 0c e6 ad 4c 26 27 15 41 55 52 a9 99 cf Data Ascii: !F:SsZzZ8^E(NPQC}s{\|go@/yn}(5Il,Q^^it_OC.!>qq{[V%Gqf9t\pTjKnVtNW.D&ar!n/'_j&0qn1L&'AUR
2025-01-02 11:16:36 UTC	16384	IN	Data Raw: 6c b1 93 c3 ca 55 31 0e a5 3f 81 ad be 16 5d c3 e2 e3 0e 9f a1 f8 ab c4 3e 29 bf b4 b8 b8 d6 b4 f8 bc 1b e2 24 b8 b4 b4 b0 7d 5f 4e 99 e7 f0 9e 99 69 06 bd 6f 69 63 73 e1 dd 26 61 a9 ff 00 67 ce 56 19 f5 2d 4f c4 0b 7f be e2 fa 1f a2 9e 36 8d 2a 0a 7e da 14 e9 b6 94 2b 3a f0 f6 73 e6 85 29 53 82 ac ef 4e 6a 71 73 b4 7d c8 ea a9 d3 95 92 2d 71 16 6b 8c ca 31 79 7b 9e 0f 2f c1 e5 73 54 a8 7b 3c ff 00 2e af 2a d2 92 ca 31 8b 0c b3 4c 5d 4a d9 7e 27 10 e1 9c 63 69 d4 cb 96 2a 31 f6 94 70 38 5c a3 ea b4 e9 51 a1 57 f6 2b f6 26 bd f1 48 f8 4b 79 a4 78 8f 47 bc f0 e6 87 e1 af 12 eb ba 67 82 75 8b ab 45 d2 21 f1 0f 86 a7 30 6a 70 78 83 49 8a 7b 6b 98 6f 74 cb fb bd 42 f2 f8 5d 5c 1f 33 46 ba bc be d0 e6 9a f5 34 c7 61 f9 fe 7e b0 ef 1a e5 86 9c 6a ba b4 28 cf 12 Data Ascii: lU1?]>)$}_Nioics&agV-O6~+:s)SNjqs}-qk1y{/sT{<.1L]J~'ci*1p8\QW+&HKyxGguE!0jpxI{kotB]\3F4a~j(
2025-01-02 11:16:36 UTC	16384	IN	Data Raw: c4 bf 55 c7 f0 d6 23 23 e3 4c 9b 07 c4 b9 06 55 90 7b 2c 35 2c cf 01 9b 61 72 bc c7 01 5f 15 56 8d 48 d0 ad 5f 31 c6 d3 a4 e8 e3 bd ad 4a 3f 27 7f c1 43 f4 ff 00 85 5f b3 97 85 3c 23 a8 df 78 b6 0f 8a 9f 17 b5 6f 88 fe 23 f0 df c4 4d 77 c3 5e 2f d5 35 7f 00 78 5f c2 9a cd f7 88 2c fc 25 e1 3b ad 23 c4 3a 8a 59 4b 1f 86 ed 97 c1 90 5e 5f f8 43 42 9a f5 2e ec b5 6d 5b 5c d1 b4 13 e2 6f 0f c7 77 f6 de 19 f1 ce 65 c3 f5 eb 51 9f d6 a5 92 c7 2b c4 d6 a3 91 2c 2e 0a 52 cc 71 d3 85 37 59 d5 78 96 a1 87 8e 32 a4 2a 2a d5 6b b9 55 ab 41 52 85 37 24 a7 3a 35 c3 1c 33 c1 3e 1a e4 59 0f 86 18 1c 7e 13 13 c5 59 4e 53 3c 7e 6c f2 ba 35 e9 c6 73 72 58 cc 66 61 88 c3 e1 a3 2a 18 2a 98 99 57 9b c9 b0 78 9a b4 ab 3c b7 0b f5 6c 32 9e 1f 03 18 9f 4a 78 73 e0 b7 c2 af d9 e3 Data Ascii: U##LU{,5,ar_VH_1J?'C_<#xo#Mw^/5x_,%;#:YK^_CB.m[\oweQ+,.Rq7Yx2kUAR7$:53>Y~YNS<~l5srXfaWx<l2Jxs
2025-01-02 11:16:36 UTC	16384	IN	Data Raw: fc 6e 12 b7 12 e4 b9 3e 5d 8d c8 a8 70 fc 32 1c c3 15 5b 15 4b 2d c2 e1 6a 63 f3 19 65 d9 3e 62 9e 06 b6 1e 15 70 d8 4a b9 3c aa cf 1b 4b c8 6e ad fc 55 a4 a4 d1 ea f2 dc d9 de 5a c3 62 2f a7 b2 8e fa 0d 3f 4e 9e ea 6b e4 b5 82 e3 55 b3 f1 bf 80 a0 9d ee d2 c2 f7 c9 22 28 ed a7 64 41 1d c5 c4 b1 1b 7a fe 36 e2 de 09 cc 38 3b 36 fe ca ce 72 a5 41 d5 9e 26 79 7d 4a b2 c3 e2 69 66 d8 6a 31 a3 ed 31 79 72 a9 90 71 17 35 2a 73 ad 47 da 45 d4 78 9a 17 9c 6b e1 f0 e9 f3 9f ed 3f 83 de 39 f0 27 8e 1c 2b 0e 2b e0 2c fd 63 b0 f1 74 b0 f9 96 12 a5 2a f8 1c c7 24 cc 39 15 67 97 66 f8 7f ed 5c a6 78 7c 57 b1 92 a9 1b c6 58 7c 45 39 42 b6 17 13 89 a5 ca db b4 6d 57 55 d2 ee 66 d5 bc 3d 7d 24 d3 c8 f7 17 9a c6 9c 35 1d 32 6d 3b 55 79 23 30 21 d4 20 d5 fe 2c 6b b7 5a 5d Data Ascii: n>]p2[K-jce>bpJ<KnUZb/?NkU"(dAz68;6rA&y}Jifj11yrq5sGExk?9'++,ct$9gf\x\|WX\|E9BmWUf=}$52m;Uy#0! ,kZ]
2025-01-02 11:16:36 UTC	2164	IN	Data Raw: d3 74 fd 4c 69 d6 56 ba b5 dd ae ad a5 47 79 a7 dd 45 74 25 8c 27 d9 cd f0 13 07 5b 52 f7 36 57 cb 73 65 25 c4 5a 75 c8 06 e7 4f 8a 66 d1 4a a5 0f dd f3 4a 3c b3 a9 4e 2e 94 92 92 94 66 93 6e 5c 89 bb 37 68 49 59 a8 39 2b 25 37 13 d8 c2 62 31 d4 32 ca 19 be 59 89 c4 e1 61 99 ca 95 38 4d 63 b1 10 c4 50 a5 4e 0e 70 50 a7 18 54 a3 87 94 61 5e 2b 9b 07 3c 3d 49 4a 78 a5 2a ae 35 fd dc 9b ed 56 e2 2b 1b 0b 25 33 dc d8 e8 72 6b 37 1a 15 8c 97 f7 10 d8 58 d9 42 da ae 9d a8 2c 7a 74 e3 53 d3 2d cb 5c 0d 41 a1 d3 ed 2c 61 b0 b8 5b 98 ae 49 b0 96 33 6f 5b c6 55 6b 5e 94 aa cd c7 9a 0a 71 9c 9c d2 71 b4 e1 c9 ac 6d ee d9 39 59 4a 2d 34 ae 9e 9d 18 ee 25 e2 3c 56 57 85 c2 66 9c 47 9d e3 32 7a 38 6c 05 2c 06 57 88 c7 e3 31 d8 1c 25 79 61 30 d2 c3 54 a1 82 af 8b a7 4e Data Ascii: tLiVGyEt%'[R6Wse%ZuOfJJ<N.fn\7hIY9+%7b12Ya8McPNpPTa^+<=IJx*5V+%3rk7XB,ztS-\A,a[I3o[Uk^qqm9YJ-4%<VWfG2z8l,W1%ya0TN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.17	49886	159.223.101.159	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:37 UTC	924	OUT	POST /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive Content-Length: 96 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Accept: / Origin: https://pcapp.store Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
2025-01-02 11:16:37 UTC	96	OUT	Data Raw: 7b 22 63 22 3a 22 66 72 6f 6e 74 2f 69 6e 73 74 61 6c 6c 69 6e 67 22 2c 22 61 22 3a 22 69 6e 73 74 61 6c 6c 53 74 61 74 75 73 22 2c 22 70 22 3a 7b 22 67 75 69 64 22 3a 22 43 31 42 38 32 37 34 32 2d 32 32 36 37 2d 34 45 35 30 2d 38 42 31 45 2d 35 32 35 42 42 31 33 42 34 41 33 34 22 7d 7d Data Ascii: {"c":"front/installing","a":"installStatus","p":{"guid":"C1B82742-2267-4E50-8B1E-525BB13B4A34"}}
2025-01-02 11:16:37 UTC	551	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:37 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: https://pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:37 UTC	44	IN	Data Raw: 32 31 0d 0a 7b 22 73 74 61 74 65 22 3a 22 6f 6b 22 2c 22 72 65 73 75 6c 74 22 3a 22 73 74 61 72 74 65 64 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 21{"state":"ok","result":"started"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.17	49885	79.127.206.234	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:37 UTC	544	OUT	GET /pcapp/images/3rdparty/application/videos/Parking_Plot_1.webm HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept-Encoding: identity;q=1, ;q=0 Accept: /* Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://pcapp.store/ Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045 Range: bytes=0-
2025-01-02 11:16:37 UTC	699	IN	HTTP/1.1 206 Partial Content Date: Thu, 02 Jan 2025 11:16:37 GMT Content-Type: application/octet-stream Content-Length: 143389 Connection: close x-amz-id-2: K6qObxUtDXTX7nrrQvgYGogt66T4h8429x5MD+ww5q11oaylynpnFBPmGividYPofWiHthcIodWupGnmljGVr6wMWzRxyuJ2dD+EO72T68g= x-amz-request-id: 17V1M0B2YY955477 Last-Modified: Wed, 29 May 2024 11:50:04 GMT ETag: "1d60ad759af6c335d5ae8ce56b52fe93" x-amz-server-side-encryption: AES256 x-amz-version-id: sp5X6UcIvOjPXzd8PR.kwPRwDKUjYaiH X-77-NZT: EgwBT3/O6QH3EUIGAAwBWbuxDAG3FSQJAA X-77-NZT-Ray: f03d0613afca8205957576672c9c7126 X-77-Cache: HIT X-77-Age: 410129 Server: CDN77-Turbo X-77-POP: newyorkUSNY Content-Range: bytes 0-143388/143389
2025-01-02 11:16:37 UTC	15685	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 02 42 85 81 02 18 53 80 67 01 00 00 00 00 02 2f ed 11 4d 9b 74 bb 4d bb 8b 53 ab 84 15 49 a9 66 53 ac 81 a1 4d bb 8b 53 ab 84 16 54 ae 6b 53 ac 81 d6 4d bb 8c 53 ab 84 12 54 c3 67 53 ac 82 01 26 4d bb 8d 53 ab 84 1c 53 bb 6b 53 ac 83 02 2f c4 ec 01 00 00 00 00 00 00 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 49 a9 66 b0 2a d7 b1 83 0f 42 40 4d 80 8c 4c 61 76 66 36 30 2e 33 2e 31 30 30 57 41 8c 4c 61 76 66 36 30 2e 33 2e 31 30 30 44 89 88 40 Data Ascii: EBBBBBwebmBBSg/MtMSIfSMSTkSMSTgS&MSSkS/XIf*B@MLavf60.3.100WALavf60.3.100D@
2025-01-02 11:16:37 UTC	16384	IN	Data Raw: f4 87 bb 76 78 5a 88 05 d1 0e c5 e3 eb d7 d1 11 82 dd ca fd 70 30 42 76 ca 6a 0b 35 d0 98 84 04 01 25 68 a6 51 99 eb 62 26 6c 25 ab 37 c3 38 8b f0 20 22 f8 54 f4 24 c1 74 11 72 c3 49 63 01 d5 4e 05 ae 42 b0 a4 29 d3 0d e3 a1 7b 1f 08 80 47 4d f0 d5 4c 59 b8 94 ec 18 6c c1 25 de 54 d7 15 6c 34 d4 68 60 fc 58 ce 1c 98 7e 07 3d d4 5e e4 b0 48 c5 70 9b 56 2c 93 6d e5 ed bb bb 1b 88 95 fc ae b5 34 c6 f9 95 58 15 c0 a8 6c ba 83 cd ce e8 37 61 14 49 4b 66 e3 4d 1c ad 12 86 8a 3e a7 c7 a5 7a 90 5a 35 c3 d4 30 4f ea 73 73 6c e6 5a b9 87 e7 33 aa 0b 95 8a 63 8c d1 ba f8 23 2b 63 75 dc 83 37 a8 19 67 fb 80 5a df 5f 35 af 7d 09 da 0d 12 0d 09 d4 57 28 52 5d 82 b6 80 36 95 15 22 c4 ee 5d 6e 6b ab 9f d3 57 c6 e4 8b 21 4e ce 0d f6 10 58 35 2a 27 0c cf da 20 b6 9f f1 22 Data Ascii: vxZp0Bvj5%hQb&l%78 "T$trIcNB){GMLYl%Tl4h`X~=^HpV,m4Xl7aIKfM>zZ50OsslZ3c#+cu7gZ_5}W(R]6"]nkW!NX5*' "
2025-01-02 11:16:37 UTC	16384	IN	Data Raw: a1 e6 20 2c b1 27 d5 7b 1d 99 31 4c eb 13 ae 11 b3 3e b4 07 76 76 64 ad a4 9c 12 c3 db c7 78 4d 74 54 a4 db 62 d4 3b 3e 91 c4 fe be 09 80 da d0 dd e8 07 79 45 04 9c ec 52 60 46 6f 1a b3 02 c8 a7 35 9a e8 19 c2 c6 fb 4f 30 2c c3 26 a6 94 79 cc e5 36 ad 8b 53 66 be a0 58 31 92 b0 6a 0c dd 4f ef 34 3e fd 15 08 88 5d 25 50 b3 92 c7 c5 7f 3a 22 6d f5 bf fa 18 dc 7e 88 d9 d0 72 cf d3 ae 21 e8 6e 26 10 e7 a0 b1 50 d3 8f 60 d2 f7 96 de d6 58 74 d9 88 c1 2d de b3 da 3d 4f 5e 53 38 6b 64 d7 80 77 ee fd 95 a2 9a 97 90 f8 68 88 57 22 51 72 d7 6f b3 b8 3a 39 e9 1f ee c1 83 2b 65 f0 de 79 54 7c 00 cc 07 8b 7f 18 18 b3 3a c0 8c a2 e4 69 e1 4b 0b 5d ed 94 27 2f 46 a9 5f 62 c6 a4 9a 1d 25 58 14 bd 6a 44 54 6d 28 a4 c2 60 79 cc be 09 ed ac 53 48 72 c1 ea f5 f7 38 91 21 69 Data Ascii: ,'{1L>vvdxMtTb;>yER`Fo5O0,&y6SfX1jO4>]%P:"m~r!n&P`Xt-=O^S8kdwhW"Qro:9+eyT\|:iK]'/F_b%XjDTm(`ySHr8!i
2025-01-02 11:16:37 UTC	16384	IN	Data Raw: 8e 62 b8 ae 5a e6 be 9e 80 76 4a f8 39 db 04 37 2d 0c 5c 24 fb 95 e4 54 42 70 67 91 6e ad f5 f6 e3 80 26 95 00 6b 36 71 0d 5a ab 30 51 fb 4d 55 06 c0 58 43 97 35 30 80 fe 6e 4a c5 fe 99 ae 51 fe 4d f4 96 eb 6c 25 da c3 ac 78 c4 29 cc 78 ff 90 4d 5c e2 c1 a6 0f 4f 9a 50 a4 9e 9e 6e 9c a1 d7 15 c4 54 9d 6f d4 55 62 72 0e fa 31 33 3c 31 35 fe aa 9a d6 bc 10 a4 3b 88 df fe f2 16 69 6b 3b 2e a6 bc 57 77 f8 c8 47 a3 69 72 78 b2 4d 8c 78 c4 d1 35 17 24 77 d1 9f 07 33 87 2b 37 b4 d0 58 e6 dc d5 27 3b 05 e3 cd 2d 1c da d1 60 2e d3 4d 11 ea e4 a3 a1 5e 27 42 db b2 9e af 20 72 ac b3 fe f7 23 0c 1a ff eb b2 2e a5 5d a1 da 61 3b ba d9 b3 6e fd 0b c8 54 15 ca ad 42 0c 54 a0 40 fa f2 96 bc 4e 94 d4 c9 d2 22 40 e4 fb 39 5b 92 56 e1 3c f8 7f ac 91 1b ae 9f 90 2f e9 85 97 Data Ascii: bZvJ97-\$TBpgn&k6qZ0QMUXC50nJQMl%x)xM\OPnToUbr13<15;ik;.WwGirxMx5$w3+7X';-`.M^'B r#.]a;nTBT@N"@9[V</
2025-01-02 11:16:37 UTC	16384	IN	Data Raw: 1c de 71 59 85 29 a5 23 d5 59 11 11 ae 2f a3 30 f6 52 36 ea a2 cd ad 96 56 e9 fe 2a 49 86 ec 1d ba d8 b5 59 f4 03 d1 5a 0a c4 95 d8 c7 21 49 60 5d e2 8e 14 c2 52 59 62 05 60 a7 e6 9b c7 4e 09 84 2c d8 33 f5 e9 f8 e5 0c 0f 56 5a 4c e3 7f 3a 88 cd 7f 5b 05 6e f3 28 2e 32 50 f9 4b 99 4f 6f e5 51 db 74 17 8f 4f be df 55 a6 f1 84 bd 5f aa ba 63 5e 8f 01 6b 2f 07 f7 0f 16 74 a4 fe b6 13 3d f4 c4 9e 9d 1e b9 39 62 b7 8b b8 72 4a d1 9d d7 39 a6 5a 34 11 c5 0f ac a3 02 3b 57 7f 8c 58 40 90 79 c3 bf b9 e1 a4 c3 06 10 9d 30 fd 7d 31 c3 2e 62 a8 c6 cc 3b fd cc 73 ba 4c e3 84 97 8e 4c 02 05 48 b5 a1 88 a9 56 5d 71 f1 ea 03 30 4b d1 87 25 11 01 3e 4b 67 9a 1a 07 49 79 3a 93 8c 2a 7d 7f 88 2c 21 4e 8f 65 76 e3 3b 5b 37 33 4f 3a 3b 92 e6 3f e9 1f ed 92 28 2a 85 91 5e 7a Data Ascii: qY)#Y/0R6VIYZ!I`]RYb`N,3VZL:[n(.2PKOoQtOU_c^k/t=9brJ9Z4;WX@y0}1.b;sLLHV]q0K%>KgIy:},!Nev;[73O:;?(*^z
2025-01-02 11:16:37 UTC	16384	IN	Data Raw: 09 30 11 28 ab 78 08 5a ba cc 5a 1b 1f 3a fc 53 43 99 25 69 1f 41 25 57 b7 6a ae f0 35 21 b2 d2 ac fd 07 73 b6 d1 72 bb a6 a3 93 7d cf 6d de 01 6a 3a a6 50 90 94 0a be 0d f9 6a 75 57 f8 c4 00 85 e2 1c ef 92 58 65 55 30 6f d9 d4 62 bb 9f 84 36 a4 d8 4b 98 c0 1c 83 a6 68 e0 2c b8 ab b5 d2 43 ae e6 bb 09 ac af 96 48 06 01 26 1f c7 df bb c3 c4 01 c4 32 00 57 36 14 a1 b4 cb 00 a3 a0 81 08 34 00 86 00 40 92 9c 00 4f 81 00 02 00 26 a4 00 00 00 00 00 04 5c c2 f8 f0 5b 89 a6 64 80 a3 42 5f 81 08 55 00 86 00 40 92 9c 20 49 61 00 03 00 70 ab 2f ac 00 00 00 00 02 25 5a 3c e6 0b 7c 38 dd a6 27 0f 38 34 c8 b6 e5 b6 0d b4 d3 27 22 2c 70 1c fc 5d ae 44 9b e2 78 24 f5 26 75 ec 72 59 cc cb 24 3e 04 dd 93 cd 51 60 cd 94 f6 f7 48 c1 5f ca b5 3e 62 a9 72 76 f1 64 3e c6 e6 1c Data Ascii: 0(xZZ:SC%iA%Wj5!sr}mj:PjuWXeU0ob6Kh,CH&2W64@O&\[dB_U@ Iap/%Z<\|8'84'",p]Dx$&urY$>Q`H_>brvd>
2025-01-02 11:16:37 UTC	16384	IN	Data Raw: 07 b4 69 58 4f b2 3e b8 7e 02 9b 49 99 d0 f8 60 40 94 22 cc 19 e8 84 37 79 e6 98 92 25 13 7e aa 85 46 9c af 9f 60 b6 9c 91 3c 71 fa 09 8f fd 87 99 fa ab dc 13 4b ea de 8f 40 af 35 dc 90 fb b4 5f a6 2d ea 4a fe e8 aa 85 1b 5e 70 bf f2 f7 8e b6 07 7a df 15 d7 fe 7f a7 cb 07 a8 0d e0 20 92 84 88 a6 88 2f dc 9e ba 24 c0 39 63 c3 de f4 55 cc f5 ad 3e 6e b0 60 2c 0e c6 27 5e 72 03 cc b3 11 13 ba 82 3c 86 48 27 36 96 ea b4 43 97 52 b4 58 78 2a 8c e1 f9 c2 5e 5c 52 0f 88 72 ad f2 30 1d 18 9c 32 69 c0 43 0a 82 c0 60 79 c3 0d d3 e0 a1 92 53 43 39 3d 8b 85 f6 a5 65 fb 4a f6 d8 aa 20 ff 31 2c a1 36 85 e1 8f ec f3 b5 03 35 da 4f a2 ec d0 f8 9a f7 9a 03 ed 89 b1 3e 56 bc 14 81 b6 98 12 84 27 aa 4e 60 4b 92 f9 fe de 33 04 40 45 90 34 01 59 18 5b 70 53 0f f1 6a 84 24 7c Data Ascii: iXO>~I`@"7y%~F`<qK@5_-J^pz /$9cU>n`,'^r<H'6CRXx*^\Rr02iC`ySC9=eJ 1,65O>V'N`K3@E4Y[pSj$\|
2025-01-02 11:16:37 UTC	16384	IN	Data Raw: 63 27 54 95 cf fa da 7e dd e2 a2 16 09 1b 6a 1d 4c ee 4d d7 02 e5 ec a1 bb 8e 15 14 7b 5f 7f 56 ea 0d 1f 18 ac 88 ce 99 8c ef ee 6f d6 28 37 d7 aa ce de 0f 9d aa 21 ce db be a8 38 df 27 d9 aa c0 d8 b3 a6 5e 52 b9 65 fc bc cd 5c b9 12 e7 6e a6 e4 ac a3 d1 d4 c3 cc 41 ed cd 9c 77 bd 02 5f b2 93 32 e4 da 80 03 99 a5 f3 af 7d 23 ce 50 83 b5 0c 58 73 f2 38 58 fc 86 25 cc d3 65 a3 fa c5 67 03 98 ad 6a 7b 83 b7 b9 c5 cc 22 fb 84 67 c5 13 88 19 a8 96 3c 65 73 f2 ca 47 f5 42 07 ab f5 ce 18 f6 42 31 59 ea 98 c3 a6 d7 af 49 3c 2b 8f ba 54 0f 2a 7b d3 8a a5 f8 cc 56 ec 9d 52 32 f7 0d 10 8b 9e 7b 4c c6 23 c8 5a 08 fc b5 35 ec d2 96 96 66 57 28 c5 a0 b1 1d 11 13 63 1f cb 64 a3 89 d5 c6 7e b9 f9 3d 64 97 39 2d fe 7f 37 06 ff a6 8c 37 59 da 6f d8 88 5a c0 93 68 9d a1 67 Data Ascii: c'T~jLM{_Vo(7!8'^Re\nAw_2}#PXs8X%egj{"g<esGBB1YI<+T*{VR2{L#Z5fW(cd~=d9-77YoZhg
2025-01-02 11:16:37 UTC	13016	IN	Data Raw: ce e5 d1 7a 72 c2 78 1f 44 ae aa a3 5b b6 cd a3 ac ad b8 31 f1 5d fc 35 e9 95 5f 6b b5 91 79 c2 6e ed 7d 3c 32 c3 af 5b cb 27 20 c2 50 08 40 54 35 b9 4a c3 c5 af b8 ae 8d 04 ac b0 8c 9c ba 61 8f ad ac e0 6e 9f f9 3b 23 a5 57 4b 9f c4 ce 17 5b d2 c4 9d b5 ab 63 cc 0a fc b9 8d 4b e6 47 58 78 20 e6 9e f8 01 08 0e 8a e6 15 00 a3 a7 81 09 81 00 86 00 40 92 9c 00 4f 81 00 01 80 20 00 00 00 00 00 05 5c 38 56 20 00 5c 20 d0 0e 9a 3c 81 bd 7f b0 a5 00 a3 a8 81 09 a2 00 86 00 40 92 9c 10 4e 41 00 01 80 60 00 00 00 00 00 05 5c 38 56 20 00 5c 1e f0 41 d5 3d e7 45 e7 87 cb e8 00 a3 a0 81 09 c4 00 86 00 40 92 9c 00 4f 81 00 01 80 20 00 00 00 00 00 05 5c 38 56 20 00 5b f7 8e d8 ea a3 b5 81 09 e5 00 86 00 40 92 9c 14 4c c1 00 01 80 70 00 00 00 00 00 06 5c 38 56 b6 0f 80 Data Ascii: zrxD[1]5_kyn}<2[' P@T5Jan;#WK[cKGXx @O \8V \ <@NA`\8V \A=E@O \8V [@Lp\8V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.17	49887	104.248.126.225	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:37 UTC	544	OUT	GET /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
2025-01-02 11:16:37 UTC	211	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 02 Jan 2025 11:16:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding
2025-01-02 11:16:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.17	49888	18.173.205.91	443	2936	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:38 UTC	702	OUT	GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":15,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735852478&nocache=24400 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-02 11:16:38 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 02 Jan 2025 11:16:19 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 506bffda4b1949c4425629ce0bdce052.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: O2blxnNjjTOrNjl7vIY1b51gbPqi__GYuP2ZSJWUPItx7kl2NKIS7A== Age: 20
2025-01-02 11:16:38 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.17	49889	18.173.205.91	443	2936	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:40 UTC	702	OUT	GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":16,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735855116&nocache=28711 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-02 11:16:40 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 02 Jan 2025 11:16:19 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 e787a68a5271d06ea7b7e56fa6886dc8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: nLnG_jy3sT6H4I8fSR5AKeTAuGrN1e3uIvw8jO4jVNMCtHYlhASObQ== Age: 22
2025-01-02 11:16:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.17	49890	79.127.206.234	443	6364	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:40 UTC	588	OUT	GET /pcapp/images/front_img/appstore-menu/index_12/icon_search_write_right.png HTTP/1.1 Host: repository.pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 PcApp/1.0.0.2001g Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pcapp.store/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8 Cookie: _fcid=1735816589292045
2025-01-02 11:16:40 UTC	662	IN	HTTP/1.1 200 OK Date: Thu, 02 Jan 2025 11:16:40 GMT Content-Type: image/png Content-Length: 322 Connection: close x-amz-id-2: sBH8Qg/fRVexL5q3oBgWbsIgX75ydW3eBR5x9gRuSplK7uzzpZ+sU79cb2dotLSicWPnGv+RjTT+L0Kuo10q7Usd7EPLFLq53V874FpkjKU= x-amz-request-id: C52YEMPD2BJ4HX5D Last-Modified: Mon, 11 Nov 2024 10:03:35 GMT ETag: "24388a494baec90d9ef6eab6e28515b7" x-amz-server-side-encryption: AES256 x-amz-version-id: f_BKlrWNsRDDPJtYbjeTMfKwDQO75kk5 X-77-NZT: EwwBT3/O6QH3UFgFAAwBWbuxGAH3AQAAAAgBnJI76wGB X-77-NZT-Ray: f03d0613ba10314a987576670034fe30 X-77-Cache: HIT X-77-Age: 350288 Server: CDN77-Turbo X-77-POP: newyorkUSNY Accept-Ranges: bytes
2025-01-02 11:16:40 UTC	322	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 11 08 06 00 00 00 3b 6d 47 fa 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 d7 49 44 41 54 78 01 a5 93 01 0d c3 20 10 45 af 53 80 04 24 d4 c1 2a a1 0e 5a 07 93 50 24 d4 c1 24 4c 02 99 82 75 0a 90 c0 1c b0 23 fb d9 18 83 02 d9 4b 7e 9a 70 dc e7 d3 5e 89 32 38 e7 06 d6 ca 32 ee c3 8d 35 b1 24 95 e0 4d 0b 9a 2c 8c 4e 2c c5 ba 60 dd 1b 8f 35 06 be 59 24 ea 92 a5 b1 67 48 19 cc 28 2a 2a a7 d5 48 2a e2 82 bf b3 a6 0a 90 c8 7e 1d 88 45 cf 44 95 e0 1d e9 43 b0 26 f1 bc 53 3d 57 56 9f 32 79 50 1b 22 34 d9 22 b3 1a 7a df f7 36 e9 ba 6e 43 8a b1 c1 e4 18 1c fe 02 03 e5 e9 4b dd c1 3c c9 Data Ascii: PNGIHDR;mGpHYssRGBgAMAaIDATx ES$ZP$$Lu#K~p^2825$M,N,`5Y$gH(H~EDC&S=WV2yP"4"z6nCK<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.17	49884	207.246.91.177	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:41 UTC	83	OUT	GET //src/app/appWindow.js HTTP/1.1 Host: pcapp.store Cache-Control: no-cache
2025-01-02 11:16:41 UTC	365	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:41 GMT Content-Type: application/javascript Content-Length: 183086 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:41 UTC	16019	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 4f 76 65 72 6c 6f 61 64 59 69 65 6c 64 28 65 2c 20 64 29 20 7b 0a 20 20 74 68 69 73 2e 76 20 3d 20 65 2c 20 74 68 69 73 2e 6b 20 3d 20 64 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 61 70 70 6c 79 44 65 63 6f 72 61 74 65 64 44 65 73 63 72 69 70 74 6f 72 28 69 2c 20 65 2c 20 72 2c 20 6e 2c 20 6c 29 20 7b 0a 20 20 76 61 72 20 61 20 3d 20 7b 7d 3b 0a 20 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 69 29 20 7b 0a 20 20 20 20 61 5b 69 5d 20 3d 20 6e 5b 69 5d 3b 0a 20 20 7d 29 2c 20 61 2e 65 6e 75 6d 65 72 61 62 6c 65 20 3d 20 21 21 61 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 20 61 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 20 3d 20 21 21 61 2e 63 6f 6e 66 69 67 75 Data Ascii: function _OverloadYield(e, d) { this.v = e, this.k = d;}function _applyDecoratedDescriptor(i, e, r, n, l) { var a = {}; return Object.keys(n).forEach(function (i) { a[i] = n[i]; }), a.enumerable = !!a.enumerable, a.configurable = !!a.configu
2025-01-02 11:16:41 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 65 20 3d 20 6e 2e 65 6c 65 6d 65 6e 74 73 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 73 20 3d 20 30 3b 20 73 20 3c 20 65 2e 6c 65 6e 67 74 68 20 2d 20 31 3b 20 73 2b 2b 29 20 66 6f 72 20 28 76 61 72 20 61 20 3d 20 73 20 2b 20 31 3b 20 61 20 3c 20 65 2e 6c 65 6e 67 74 68 3b 20 61 2b 2b 29 20 69 66 20 28 65 5b 73 5d 2e 6b 65 79 20 3d 3d 3d 20 65 5b 61 5d 2e 6b 65 79 20 26 26 20 65 5b 73 5d 2e 70 6c 61 63 65 6d 65 6e 74 20 3d 3d 3d 20 65 5b 61 5d 2e 70 6c 61 63 65 6d 65 6e 74 29 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 44 75 70 6c 69 63 61 74 65 64 20 65 6c 65 6d 65 6e 74 20 28 22 20 2b 20 65 5b 73 5d 2e 6b 65 79 20 2b 20 22 29 22 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a Data Ascii: e = n.elements; for (var s = 0; s < e.length - 1; s++) for (var a = s + 1; a < e.length; a++) if (e[s].key === e[a].key && e[s].placement === e[a].placement) throw new TypeError("Duplicated element (" + e[s].key + ")"); } }
2025-01-02 11:16:41 UTC	16384	IN	Data Raw: 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 0a 20 20 20 20 76 20 3d 20 64 20 26 26 20 64 28 64 28 76 61 6c 75 65 73 28 5b 5d 29 29 29 3b 0a 20 20 76 20 26 26 20 76 20 21 3d 3d 20 72 20 26 26 20 6e 2e 63 61 6c 6c 28 76 2c 20 61 29 20 26 26 20 28 70 20 3d 20 76 29 3b 0a 20 20 76 61 72 20 67 20 3d 20 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 50 72 6f 74 6f 74 79 70 65 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 47 65 6e 65 72 61 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 70 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 64 65 66 69 6e 65 49 74 65 72 61 74 6f 72 4d 65 74 68 6f 64 73 28 74 29 20 7b 0a 20 20 20 20 5b 22 6e 65 78 74 22 2c 20 22 74 68 72 6f 77 22 2c 20 22 72 65 74 75 72 6e 22 5d 2e 66 6f 72 45 61 63 Data Ascii: getPrototypeOf, v = d && d(d(values([]))); v && v !== r && n.call(v, a) && (p = v); var g = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(p); function defineIteratorMethods(t) { ["next", "throw", "return"].forEac
2025-01-02 11:16:41 UTC	16384	IN	Data Raw: 5f 77 72 61 70 4e 61 74 69 76 65 53 75 70 65 72 28 74 29 20 7b 0a 20 20 76 61 72 20 72 20 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 4d 61 70 20 3f 20 6e 65 77 20 4d 61 70 28 29 20 3a 20 76 6f 69 64 20 30 3b 0a 20 20 72 65 74 75 72 6e 20 5f 77 72 61 70 4e 61 74 69 76 65 53 75 70 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 74 29 20 7b 0a 20 20 20 20 69 66 20 28 6e 75 6c 6c 20 3d 3d 3d 20 74 20 7c 7c 20 21 5f 69 73 4e 61 74 69 76 65 46 75 6e 63 74 69 6f 6e 28 74 29 29 20 72 65 74 75 72 6e 20 74 3b 0a 20 20 20 20 69 66 20 28 22 66 75 6e 63 74 69 6f 6e 22 20 21 3d 20 74 79 70 65 6f 66 20 74 29 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 Data Ascii: _wrapNativeSuper(t) { var r = "function" == typeof Map ? new Map() : void 0; return _wrapNativeSuper = function (t) { if (null === t \|\| !_isNativeFunction(t)) return t; if ("function" != typeof t) throw new TypeError("Super expression must eit
2025-01-02 11:16:41 UTC	16384	IN	Data Raw: 7c 7c 20 61 70 70 6c 79 44 65 63 73 32 32 30 33 46 61 63 74 6f 72 79 28 29 29 28 65 2c 20 74 2c 20 72 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 61 70 70 6c 79 44 65 63 73 32 32 30 33 52 46 61 63 74 6f 72 79 28 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 41 64 64 49 6e 69 74 69 61 6c 69 7a 65 72 4d 65 74 68 6f 64 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 72 29 20 7b 0a 20 20 20 20 20 20 21 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 2e 76 29 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 74 74 65 6d 70 74 65 64 20 74 6f 20 63 61 6c 6c 20 61 64 64 49 6e 69 74 69 61 6c 69 7a 65 72 20 61 66 74 65 72 20 64 65 63 6f 72 61 74 69 6f 6e 20 77 61 73 20 Data Ascii: \|\| applyDecs2203Factory())(e, t, r);}function applyDecs2203RFactory() { function createAddInitializerMethod(e, t) { return function (r) { !function (e, t) { if (e.v) throw Error("attempted to call addInitializer after decoration was
2025-01-02 11:16:41 UTC	16384	IN	Data Raw: 28 32 20 3d 3d 3d 20 6f 20 3f 20 77 5b 41 5d 20 3a 20 69 2e 63 61 6c 6c 2e 62 69 6e 64 28 77 5b 41 5d 29 29 20 3a 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 20 6e 2c 20 77 29 29 2c 20 50 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 20 53 79 6d 62 6f 6c 2e 6d 65 74 61 64 61 74 61 20 7c 7c 20 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 53 79 6d 62 6f 6c 2e 6d 65 74 61 64 61 74 61 22 29 2c 20 7b 0a 20 20 20 20 20 20 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 20 21 30 2c 0a 20 20 20 20 20 20 65 6e 75 6d 65 72 61 62 6c 65 3a 20 21 30 2c 0a 20 20 20 20 20 20 76 61 6c 75 65 3a 20 74 0a 20 20 20 20 7d 29 Data Ascii: (2 === o ? w[A] : i.call.bind(w[A])) : Object.defineProperty(e, n, w)), P; } function u(e, t) { return Object.defineProperty(e, Symbol.metadata \|\| Symbol.for("Symbol.metadata"), { configurable: !0, enumerable: !0, value: t })
2025-01-02 11:16:41 UTC	16384	IN	Data Raw: 73 2e 73 61 76 65 53 65 74 74 69 6e 67 73 2e 62 69 6e 64 28 74 68 69 73 29 3b 0a 20 20 20 20 74 68 69 73 2e 6f 70 65 6e 4f 66 66 65 72 42 79 55 72 6c 20 3d 20 74 68 69 73 2e 6f 70 65 6e 4f 66 66 65 72 42 79 55 72 6c 2e 62 69 6e 64 28 74 68 69 73 29 3b 0a 20 20 20 20 74 68 69 73 2e 6f 70 65 6e 4f 66 66 65 72 42 79 4f 69 64 20 3d 20 74 68 69 73 2e 6f 70 65 6e 4f 66 66 65 72 42 79 4f 69 64 2e 62 69 6e 64 28 74 68 69 73 29 3b 0a 20 20 20 20 74 68 69 73 2e 73 74 61 72 74 44 72 61 67 20 3d 20 74 68 69 73 2e 73 74 61 72 74 44 72 61 67 2e 62 69 6e 64 28 74 68 69 73 29 3b 0a 20 20 20 20 74 68 69 73 2e 72 65 6c 6f 61 64 41 70 70 20 3d 20 74 68 69 73 2e 72 65 6c 6f 61 64 41 70 70 2e 62 69 6e 64 28 74 68 69 73 29 3b 0a 20 20 20 20 74 68 69 73 2e 70 61 67 65 4c 6f 61 Data Ascii: s.saveSettings.bind(this); this.openOfferByUrl = this.openOfferByUrl.bind(this); this.openOfferByOid = this.openOfferByOid.bind(this); this.startDrag = this.startDrag.bind(this); this.reloadApp = this.reloadApp.bind(this); this.pageLoa
2025-01-02 11:16:41 UTC	16384	IN	Data Raw: 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 50 61 72 61 6d 65 74 65 72 20 5c 22 77 69 6e 64 6f 77 4e 61 6d 65 5c 22 20 66 6f 72 20 41 70 70 57 69 6e 64 6f 77 2e 6d 6f 76 65 54 6f 20 73 68 6f 75 6c 64 20 68 61 76 65 20 74 79 70 65 20 73 74 72 69 6e 67 20 69 6e 73 74 65 61 64 20 6f 66 20 22 2e 63 6f 6e 63 61 74 28 5f 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 4e 61 6d 65 29 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 78 20 21 3d 3d 20 22 6e 75 6d 62 65 72 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 50 61 72 61 6d 65 74 65 72 20 5c 22 78 5c 22 20 66 6f 72 20 41 70 70 57 69 6e 64 6f 77 2e 6d 6f 76 65 54 6f 20 Data Ascii: ) { throw new Error("Parameter \"windowName\" for AppWindow.moveTo should have type string instead of ".concat(_typeof(windowName))); } if (typeof x !== "number") { throw new Error("Parameter \"x\" for AppWindow.moveTo
2025-01-02 11:16:41 UTC	16384	IN	Data Raw: 33 20 26 26 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 3a 20 22 22 3b 0a 20 20 20 20 20 20 76 61 72 20 6f 69 64 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3e 20 34 20 26 26 20 61 72 67 75 6d 65 6e 74 73 5b 34 5d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 34 5d 20 3a 20 30 3b 0a 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 75 72 6c 20 21 3d 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 50 61 72 61 6d 65 74 65 72 20 5c 22 75 72 6c 5c 22 20 66 6f 72 20 41 70 70 57 69 6e 64 6f 77 2e 64 6f 77 6e 6c Data Ascii: 3 && arguments[3] !== undefined ? arguments[3] : ""; var oid = arguments.length > 4 && arguments[4] !== undefined ? arguments[4] : 0; try { if (typeof url !== "string") { throw new Error("Parameter \"url\" for AppWindow.downl
2025-01-02 11:16:41 UTC	16384	IN	Data Raw: 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 31 5d 20 3a 20 74 72 75 65 3b 0a 20 20 20 20 20 20 76 61 72 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 49 63 6f 6e 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3e 20 32 20 26 26 20 61 72 67 75 6d 65 6e 74 73 5b 32 5d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 32 5d 20 3a 20 74 72 75 65 3b 0a 20 20 20 20 20 20 76 61 72 20 64 69 73 70 6c 61 79 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3e 20 33 20 26 26 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 3f 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 3a 20 74 72 75 65 3b 0a 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: !== undefined ? arguments[1] : true; var notificationIcon = arguments.length > 2 && arguments[2] !== undefined ? arguments[2] : true; var display = arguments.length > 3 && arguments[3] !== undefined ? arguments[3] : true; try {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.17	49883	207.246.91.177	443	6968	C:\Users\user\PCAppStore\PcAppStore.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:41 UTC	81	OUT	GET //appstore-settings/ HTTP/1.1 Host: pcapp.store Cache-Control: no-cache
2025-01-02 11:16:41 UTC	211	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 02 Jan 2025 11:16:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding
2025-01-02 11:16:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.17	49891	18.173.205.91	443	2936	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:41 UTC	702	OUT	GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":17,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735857274&nocache=32237 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-02 11:16:41 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 02 Jan 2025 11:16:19 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 7f26f4279546775ace8410d89a15a960.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: AV2PQlP8w0gGx6gOVLgXVjox8oMwbTxXftsqTljxt6HGdZJG4HuVKw== Age: 23
2025-01-02 11:16:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.17	49896	159.223.101.159	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:42 UTC	924	OUT	POST /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive Content-Length: 96 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Accept: / Origin: https://pcapp.store Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pcapp.store/?p=lpd_installing_r2&guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&_fcid=1734694685230875&_winver=19045&version=fa.2001g Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
2025-01-02 11:16:42 UTC	96	OUT	Data Raw: 7b 22 63 22 3a 22 66 72 6f 6e 74 2f 69 6e 73 74 61 6c 6c 69 6e 67 22 2c 22 61 22 3a 22 69 6e 73 74 61 6c 6c 53 74 61 74 75 73 22 2c 22 70 22 3a 7b 22 67 75 69 64 22 3a 22 43 31 42 38 32 37 34 32 2d 32 32 36 37 2d 34 45 35 30 2d 38 42 31 45 2d 35 32 35 42 42 31 33 42 34 41 33 34 22 7d 7d Data Ascii: {"c":"front/installing","a":"installStatus","p":{"guid":"C1B82742-2267-4E50-8B1E-525BB13B4A34"}}
2025-01-02 11:16:42 UTC	551	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 02 Jan 2025 11:16:42 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: https://pcapp.store Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
2025-01-02 11:16:42 UTC	44	IN	Data Raw: 32 31 0d 0a 7b 22 73 74 61 74 65 22 3a 22 6f 6b 22 2c 22 72 65 73 75 6c 74 22 3a 22 73 74 61 72 74 65 64 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 21{"state":"ok","result":"started"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.17	49897	104.248.126.225	443	4376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:42 UTC	544	OUT	GET /api/api.php HTTP/1.1 Host: pcapp.store Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _fcid=1734694685230875; guid=C1B82742-2267-4E50-8B1E-525BB13B4A34; _gcl_au=1.1.1589823288.1735816572; _ga=GA1.1.1340293989.1735816572; _ga_VFQWFX3X1C=GS1.1.1735816571.1.0.1735816571.60.0.0
2025-01-02 11:16:42 UTC	211	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 02 Jan 2025 11:16:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding
2025-01-02 11:16:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.17	49898	18.173.205.91	443	2936	C:\Users\user\PCAppStore\Watchdog.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-02 11:16:42 UTC	701	OUT	GET /p.gif?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&version=fa.2001g&evt_src=watch_dog&evt_action=signal_event&data={"counter":18,"rid":"20250102061616.8456349890","isPCAppRunning":1,"registryInfo":{"pcAppInAutostart":1},"filesystemInfo":{"AutoUpdaterExeExists":1,"PcAppStoreExeExists":1,"pcappstoreIcoExists":1,"UninstallerExeExists":1,"startupFolderLnkExists":1}}&eng_time=1735859313&nocache=2800 HTTP/1.1 Accept: / UA-CPU: AMD64 Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: d74queuslupub.cloudfront.net Connection: Keep-Alive
2025-01-02 11:16:43 UTC	478	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 42 Connection: close Last-Modified: Thu, 26 May 2022 12:48:19 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 02 Jan 2025 11:16:19 GMT ETag: "d89746888da2d9510b64a9f031eaecd5" X-Cache: Hit from cloudfront Via: 1.1 43be4ee3b8e339e1d27addbbdc49a4d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: yaj418cpokdeoLkqexekQ_7YPNgfwMfV64wJL6jG3w63RY746qvKHw== Age: 25
2025-01-02 11:16:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Target ID:	0
Start time:	06:14:59
Start date:	02/01/2025
Path:	C:\Windows\System32\OpenWith.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\OpenWith.exe -Embedding
Imagebase:	0x7ff71eb80000
File size:	123'984 bytes
MD5 hash:	E4A834784FA08C17D47A1E72429C5109
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	06:15:41
Start date:	02/01/2025
Path:	C:\Program Files\7-Zip\7zG.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\user\Desktop\Setup.exe\" -ad -an -ai#7zMap10193:76:7zEvent19362
Imagebase:	0xc0000
File size:	700'416 bytes
MD5 hash:	50F289DF0C19484E970849AAC4E6F977
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	06:15:52
Start date:	02/01/2025
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
Imagebase:	0x7ff6eea30000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	06:16:02
Start date:	02/01/2025
Path:	C:\Users\user\Desktop\Setup.exe\Setup.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\Setup.exe\Setup.exe"
Imagebase:	0x400000
File size:	205'424 bytes
MD5 hash:	D4E4F0B0432D6EB4E61518AF4F839905
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	06:16:07
Start date:	02/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://pcapp.store/installing.php?guid=C1B82742-2267-4E50-8B1E-525BB13B4A34&winver=19045&version=fa.2001g&nocache=20250102061607.239&_fcid=1734694685230875
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	20
Start time:	06:16:08
Start date:	02/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=1996,i,9649082435104922829,9310766055222458882,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	21
Start time:	06:16:11
Start date:	02/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5420 --field-trial-handle=1996,i,9649082435104922829,9310766055222458882,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	22
Start time:	06:16:11
Start date:	02/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5564 --field-trial-handle=1996,i,9649082435104922829,9310766055222458882,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	06:16:11
Start date:	02/01/2025
Path:	C:\Users\user\AppData\Local\Temp\nsgC284.tmp
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\nsgC284.tmp" /internal 1734694685230875 /force
Imagebase:	0x400000
File size:	1'339'288 bytes
MD5 hash:	0ABEFE193A5575A9C273105CD50CFB25
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 33%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	06:16:16
Start date:	02/01/2025
Path:	C:\Users\user\PCAppStore\PcAppStore.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\PCAppStore\PcAppStore.exe" /init default
Imagebase:	0x7ff7005d0000
File size:	3'561'304 bytes
MD5 hash:	0BA9718F1D8FBFFD130565A2BC568140
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 5%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	26
Start time:	06:16:16
Start date:	02/01/2025
Path:	C:\Users\user\PCAppStore\Watchdog.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\PCAppStore\Watchdog.exe" /guid=C1B82742-2267-4E50-8B1E-525BB13B4A34 /rid=20250102061616.8456349890 /ver=fa.2001g
Imagebase:	0x7ff786ba0000
File size:	293'720 bytes
MD5 hash:	646EB11A93F5B255A528B46AAE2A4465
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 3%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	27
Start time:	06:16:17
Start date:	02/01/2025
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Explorer.EXE
Imagebase:	0x7ff672e00000
File size:	5'141'208 bytes
MD5 hash:	662F4F92FDE3557E86D110526BB578D5
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	30
Start time:	06:16:26
Start date:	02/01/2025
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=6968.6112.17141226139066604686
Imagebase:	0x7ff74cf90000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	31
Start time:	06:16:26
Start date:	02/01/2025
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\user\PCAppStore\UserData\EBWebView /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\user\PCAppStore\UserData\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=117.0.5938.132 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=117.0.2045.47 --initial-client-data=0x15c,0x160,0x164,0x138,0x170,0x7ffa1c2b8e88,0x7ffa1c2b8e98,0x7ffa1c2b8ea8
Imagebase:	0x7ff74cf90000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	32
Start time:	06:16:26
Start date:	02/01/2025
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1764 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:2
Imagebase:	0x7ff74cf90000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	33
Start time:	06:16:26
Start date:	02/01/2025
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=2036 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:3
Imagebase:	0x7ff74cf90000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	34
Start time:	06:16:27
Start date:	02/01/2025
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-GB --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=2416 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:8
Imagebase:	0x7ff74cf90000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	35
Start time:	06:16:27
Start date:	02/01/2025
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-nacl --first-renderer-process --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1735810226763476 --launch-time-ticks=6360422219 --mojo-platform-channel-handle=3304 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:1
Imagebase:	0x7ff74cf90000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	36
Start time:	06:16:27
Start date:	02/01/2025
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-nacl --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1735810226763476 --launch-time-ticks=6360676761 --mojo-platform-channel-handle=3624 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:1
Imagebase:	0x7ff74cf90000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	37
Start time:	06:16:27
Start date:	02/01/2025
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --disable-nacl --disable-gpu-compositing --lang=en-GB --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=en_CH" --time-ticks-at-unix-epoch=-1735810226763476 --launch-time-ticks=6360915784 --mojo-platform-channel-handle=3708 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:1
Imagebase:	0x7ff74cf90000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	06:16:34
Start date:	02/01/2025
Path:	C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.47\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-GB --service-sandbox-type=audio --noerrdialogs --user-data-dir="C:\Users\user\PCAppStore\UserData\EBWebView" --webview-exe-name=PcAppStore.exe --webview-exe-version=1.0.0.2001g --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --mojo-platform-channel-handle=4804 --field-trial-handle=1708,i,10774811973011844781,4815746348951762741,262144 --enable-features=MojoIpcz /prefetch:8
Imagebase:	0x7ff74cf90000
File size:	3'749'328 bytes
MD5 hash:	9909D978B39FB7369F511D8506C17CA0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Function 00007FFA6DCC5E71 Relevance: 3.9, Strings: 3, Instructions: 113COMMON

Download Yara Rule

Strings

][ , xrefs: 00007FFA6DCC5F4F
][ , xrefs: 00007FFA6DCC5E9D
][ , xrefs: 00007FFA6DCC5EDC

Memory Dump Source

Source File: 00000025.00000002.2186904583.00007FFA6DCC4000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA6DCC4000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_37_2_7ffa6dcc4000_msedgewebview2.jbxd

Similarity

API ID:
String ID: ][ $][ $][
API String ID: 0-2852900069
Opcode ID: 9622f63abd5209605c83061b0c8d9dfe7d01f5fa04d51e3004b689d0e5ae474f
Instruction ID: 799c71d1fbc520554164a83def98ce199ccaea0cbc6615465a16017a48e2bf41
Opcode Fuzzy Hash: 9622f63abd5209605c83061b0c8d9dfe7d01f5fa04d51e3004b689d0e5ae474f
Instruction Fuzzy Hash: 5F41913051CA899FEB55DB6CD8A5BE87BA0FF4B300F1441AAE58DC7293DA2468538741

Function 00007FFA6DCC5DC0 Relevance: 1.3, Strings: 1, Instructions: 49COMMON

Download Yara Rule

Strings

).', xrefs: 00007FFA6DCC5DC6

Memory Dump Source

Source File: 00000025.00000002.2186904583.00007FFA6DCC4000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFA6DCC4000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_37_2_7ffa6dcc4000_msedgewebview2.jbxd

Similarity

API ID:
String ID: ).'
API String ID: 0-1724913722
Opcode ID: fce56ba8c9572244c4f2345ea06c30e34c9ec31b34993a8a7d29ae1c10a3e985
Instruction ID: ee295252a4ede608e8489fe0acdf3dd67c863b7016ffc9570f931e0023dcdeba
Opcode Fuzzy Hash: fce56ba8c9572244c4f2345ea06c30e34c9ec31b34993a8a7d29ae1c10a3e985
Instruction Fuzzy Hash: 3E018470A18918AFEB05DB6CEC99AEC7BF1EF09310F1000A5F449D3292CA246C538780

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads (ex: `rundll32.exe {DLLname, DLLfunction}` ).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Setup.exe.7z

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Bitcoin Miner

Compliance

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres

C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000018.db

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\apps_73377_663ce6da92b28[1].jpg

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\apps_73400_666176fb273fb[1].png

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\icon_check[1].png

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\icon_search_write_right[1].png

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\in_background_auto_update_img[1].htm

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\logo-light[1].svg

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\p[1].gif

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\p[2].gif

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\p[3].gif

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\p[4].gif

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\p[5].gif

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5IQBCSP1\p[6].gif

Windows Analysis Report
Setup.exe.7z

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre