Edit tour

Windows Analysis Report
Setup.exe

Overview

General Information

Sample name:	Setup.exe
Analysis ID:	1584712
MD5:	2902e39c85dd5de70d317957a8dd1683
SHA1:	54b92618d4e08f3a06e1b510d14cd764a003acf1
SHA256:	536d9c6365af64660702c6cd49bf2939de2ae3d6798b8167f3b21b8d120f75bd
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Yara detected Generic Downloader

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains functionality to dynamically determine API calls

Contains long sleeps (>= 3 min)

Detected potential crypto function

Drops PE files

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

Setup.exe (PID: 2844 cmdline: "C:\Users\user\Desktop\Setup.exe" MD5: 2902E39C85DD5DE70D317957A8DD1683)

WebCompanion-Installer.exe (PID: 4856 cmdline: .\WebCompanion-Installer.exe --savename=Setup.exe --partner=IN240402 --nonadmin --direct --tych --campaign=21794599196 --version=13.900.0.1080 MD5: A27F9713DB1688D03D2082BFA1827803)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security

Unpacked PEs

Source	Rule	Description	Author
1.0.WebCompanion-Installer.exe.fd0000.0.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
0.3.Setup.exe.21434b8.2.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
0.3.Setup.exe.2141eb8.5.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
0.3.Setup.exe.21408b8.4.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-06T09:32:24.011591+0100	2803305	3	Unknown Traffic	192.168.2.4	49732	104.16.148.130	80	TCP
2025-01-06T09:32:34.822286+0100	2803305	3	Unknown Traffic	192.168.2.4	49768	104.16.149.130	443	TCP
2025-01-06T09:32:42.751980+0100	2803305	3	Unknown Traffic	192.168.2.4	49769	104.16.149.130	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

ReversingLabs: Detection: 20%

Multi AV Scanner detection for submitted file

Source: Setup.exe	ReversingLabs: Detection: 29%
Source: Setup.exe	Virustotal: Detection: 41%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 90.6% probability

Source: Setup.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, LARGE_ADDRESS_AWARE, 32BIT_MACHINE

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

File created: C:\Users\user\AppData\Local\Temp\WcInstaller.log

Jump to behavior

Source: Setup.exe

Static PE information: certificate valid

Source: unknown	HTTPS traffic detected: 104.16.149.130:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.26.149:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.149.130:443 -> 192.168.2.4:49762 version: TLS 1.2

Source:	Binary string: Application/WebCompanion-Installer.pdb source: WebCompanion.zip.1.dr
Source:	Binary string: &Application/WebCompanion-Installer.pdb source: WebCompanion.zip.1.dr
Source:	Binary string: c:\Temp\Release\Working\Newtonsoft.Json\Src\Newtonsoft.Json\obj\Release\Newtonsoft.Json.pdb source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, WebCompanion-Installer.exe, 00000001.00000002.4116833282.0000000006ED2000.00000002.00000001.01000000.00000007.sdmp, Newtonsoft.Json.dll.0.dr
Source:	Binary string: tem.pdbpdbte. source: WebCompanion-Installer.exe, 00000001.00000002.4115885606.0000000005C24000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: eApplication/WebCompanion-Installer.pdbPK source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003698000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003444000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000343F000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000369C000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000348E000.00000004.00000800.00020000.00000000.sdmp, WebCompanion.zip.1.dr
Source:	Binary string: Application/WebCompanion-Installer.pdbPK source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003698000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003444000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000343F000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000369C000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000348E000.00000004.00000800.00020000.00000000.sdmp, WebCompanion.zip.1.dr
Source:	Binary string: c:\Windows\Temp\drone-ME4saUyIgSY9rSgY\drone\src\WebCompanion\Installer\WebCompanionInstaller\obj\Release\WebCompanion-Installer.pdb source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr

Source: C:\Users\user\Desktop\Setup.exe

Code function: 0_2_00405434 FindFirstFileA,FindFirstFileW,

0_2_00405434

Networking

Yara detected Generic Downloader

Source: Yara match	File source: 1.0.WebCompanion-Installer.exe.fd0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.Setup.exe.21434b8.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.Setup.exe.2141eb8.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.Setup.exe.21408b8.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe, type: DROPPED

Source: global traffic	HTTP traffic detected: POST /api/feature/WC HTTP/1.1Content-Type: application/jsonHost: featureflags.lavasoft.comContent-Length: 194Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=Start&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 447Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=Start&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 398
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 508
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 646
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 515
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 482
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 515
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 488
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 527
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 466
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 527
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 458
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 520
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 460
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 520
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 475
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 520
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 491
Source: global traffic	HTTP traffic detected: POST /api/Update/WC HTTP/1.1Content-Type: application/jsonHost: featureflags.lavasoft.comContent-Length: 194
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 517Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 485
Source: global traffic	HTTP traffic detected: GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1Host: wcdownloadercdn.lavasoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1Host: wcdownloadercdn.lavasoft.com
Source: global traffic	HTTP traffic detected: GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1Host: wcdownloadercdn.lavasoft.com
Source: global traffic	HTTP traffic detected: GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1Host: wcdownloadercdn.lavasoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=ErrorInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 728Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=ErrorInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 674
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: geo.lavasoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: geo.lavasoft.com

Source: Joe Sandbox View	IP Address: 104.16.149.130 104.16.149.130
Source: Joe Sandbox View	IP Address: 104.16.148.130 104.16.148.130
Source: Joe Sandbox View	IP Address: 104.16.148.130 104.16.148.130

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49732 -> 104.16.148.130:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49768 -> 104.16.149.130:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49769 -> 104.16.149.130:443

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1Host: wcdownloadercdn.lavasoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1Host: wcdownloadercdn.lavasoft.com
Source: global traffic	HTTP traffic detected: GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1Host: wcdownloadercdn.lavasoft.com
Source: global traffic	HTTP traffic detected: GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1Host: wcdownloadercdn.lavasoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: geo.lavasoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: geo.lavasoft.com

Source: global traffic	DNS traffic detected: DNS query: geo.lavasoft.com
Source: global traffic	DNS traffic detected: DNS query: featureflags.lavasoft.com
Source: global traffic	DNS traffic detected: DNS query: flwadw.com
Source: global traffic	DNS traffic detected: DNS query: wcdownloadercdn.lavasoft.com

Source: unknown

HTTP traffic detected: POST /api/feature/WC HTTP/1.1Content-Type: application/jsonHost: featureflags.lavasoft.comContent-Length: 194Connection: Keep-Alive

Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://aia.entrust.net/evcs2-chain.p7c01
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://crl.entrust.net/csbr1.crl0
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://crl.entrust.net/evcs2.crl0
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://crl.entrust.net/g2ca.crl0
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://geo.lavasoft.com/
Source: Newtonsoft.Json.dll.0.dr	String found in binary or memory: http://james.newtonking.com/projects/json
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://localhost:9008Fhttp://localhost:9008/webcompanion/4http://rt.webcompanion.com
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://ocsp.entrust.net00
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://ocsp.entrust.net01
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://ocsp.entrust.net02
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://rt.webcompanion.com/notifications/download/rt/typolist.txt.http://www.lavasoft.com6http://www
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://rt.webcompanion.com/notifications/download/rt/typolist.txt5Creating
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/actor/next
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/fault
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003466000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://staging-cloudflow.lavasoft.net/v1/event-stat-wc
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://tempuri.org/
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://tempuri.org/$
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/:WebHttpBinding4
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://tempuri.org/GetComponentsInfoByProductT
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://tempuri.org/GetComponentsInfoT
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://tempuri.org/GetComponentsVersionInfoT
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://tempuri.org/GetProductInfoT
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/ILocalyHostedServiceInstaller/ChangeScreen
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/ILocalyHostedServiceInstaller/ChangeScreenResponse
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/ILocalyHostedServiceInstaller/GetDropDownValues
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/ILocalyHostedServiceInstaller/GetDropDownValuesResponse
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://tempuri.org/SignZipInstallerByProductT
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://tempuri.org/SignZipInstallerT
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://tempuri.org/T
Source: Setup.exe, 00000000.00000003.1642994503.0000000002105000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	String found in binary or memory: http://wc-update-service.lavasoft.com/components.asmx
Source: Setup.exe, 00000000.00000003.1642994503.0000000002105000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	String found in binary or memory: http://wc-update-service.lavasoft.com/update.asmx
Source: Setup.exe, 00000000.00000003.1642994503.0000000002105000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	String found in binary or memory: http://wcdownloadercdn.lavasoft.com/13.0.0.1080/WebCompanion-13.0.0.1080-prod.zip
Source: Setup.exe, 00000000.00000003.1642994503.0000000002105000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	String found in binary or memory: http://wcdownloadercdn.lavasoft.com/13.0.0.1080/webinstaller-13.0.0.1080-prod.zip
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://www.entrust.net/rpa0
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://www.entrust.net/rpa03
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://www.lavasoft.com
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://www.webcompanion.com
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033F4000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003455000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033F1000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000344C000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033EC000.00000004.00000800.00020000.00000000.sdmp, WcInstaller.log.1.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://acs.lavasoft.com/api/v2/url/blacklist
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033F4000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003455000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033F1000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000344C000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033EC000.00000004.00000800.00020000.00000000.sdmp, WcInstaller.log.1.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://acs.lavasoft.com/api/v2/url/permanentwhitelist
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://acs.lavasoft.comZhttps://acs.lavasoft.com/api/v2/url/blacklistlhttps://acs.lavasoft.com/api/
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://acscdn.lavasoft.com/urlnotificationlist.json
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://acscdn.lavasoft.comhhttps://acscdn.lavasoft.com/urlnotificationlist.json0https://webcompanio
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://featureflags.lavasoft.com
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000034CF000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://featureflags.lavasoft.com/api/Update/WC
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://featureflags.lavasoft.com/api/Update/WCyhttps://sandbox-featureflags-api.lavasoft.net/api/fe
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033F4000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://featureflags.lavasoft.com/api/feature/WC
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://featureflags.lavasoft.com/api/feature/WC$https://flwadw.comFhttps://flwadw.com/v1/event-stat
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://flow.lavasoft.com/v1/event-stat/v1/event-stat
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003466000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000369C000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://flwadw.com
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003466000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://flwadw.com/v1/event-stat
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003466000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://flwadw.com/v1/event-stat-wc
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000369C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://flwadw.com/v1/event-stat-wc?Type=ErrorInstall&ProductID=wc&EventVersion=1
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000034CF000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://flwadw.com/v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000369C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://flwadw.com/v1/event-stat?Type=ErrorInstall&ProductID=wc&EventVersion=1
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000034CF000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://flwadw.com/v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000034CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://flwadw.com/v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1oi
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003466000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://flwadw.com/v1/event-stat?Type=Start&ProductID=wc&EventVersion=1
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://flwadw.com/v1/event-statJhttp://staging-cloudflow.lavasoft.netlhttp://staging-cloudflow.lava
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://partner-tracking.lavasoft.com/api/Tracking/Decrypt
Source: Setup.exe, 00000000.00000003.1642994503.0000000002105000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033F4000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003455000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033F1000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000344C000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033EC000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr, WcInstaller.log.1.dr	String found in binary or memory: https://rt.webcompanion.com/notifications/download/rt/dci/latest/Webprotection.zip
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000034CF000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://sandbox-featureflags-api.lavasoft.net/api/Update/WC
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sandbox-featureflags-api.lavasoft.net/api/feature/WC
Source: Setup.exe, 00000000.00000003.1642994503.0000000002105000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	String found in binary or memory: https://staging-webcompanion.lavasoft.net/dci/4.0.0.14/Webprotection.zip
Source: Setup.exe, 00000000.00000003.1642994503.0000000002105000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	String found in binary or memory: https://wcdownloader-qa.lavasoft.com/13.0.0.1080/WebCompanion-13.0.0.1080-internal.zip
Source: Setup.exe, 00000000.00000003.1642994503.0000000002105000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	String found in binary or memory: https://wcdownloader-qa.lavasoft.com/13.0.0.1080/WebCompanionInstaller-13.0.0.1080-internal.exe
Source: Setup.exe, 00000000.00000003.1642994503.0000000002105000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	String found in binary or memory: https://wcdownloader-qa.lavasoft.com/13.0.0.1080/webinstaller-13.0.0.1080-internal.zip
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wcdownloadercdn.lavasoft.com
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000349B000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp, WcInstaller.log.1.dr	String found in binary or memory: https://wcdownloadercdn.lavasoft.com/13.0.0.1080/WCInstaller_NonAdmin.exe
Source: Setup.exe, 00000000.00000003.1642994503.0000000002105000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	String found in binary or memory: https://wcdownloadercdn.lavasoft.com/13.0.0.1080/WebCompanionInstaller-13.0.0.1080-prod.exe
Source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000349B000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp, WcInstaller.log.1.dr	String found in binary or memory: https://wcdownloadercdn.lavasoft.com/13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://webcompanion.com/en/help.php
Source: WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://webcompanion.com/en/install.php?partner=
Source: WcInstaller.log.1.dr	String found in binary or memory: https://webcompanion.com/images/favicon.ico
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://webcompanion.com/uninstall.php?utm_source=wc&utm_medium=
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://webcompanion.com/unsafe.php?utm_source=WCHhttps://webcompanion.com/en/help.php.https://www.a
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://webcompanion.com/unsafe.php?utm_source=WCghttp://pp.webcompanion.com/unsafe.php?utm_source=W
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://www.adaware.com/privacy-policy
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://www.adaware.com/terms-of-use
Source: WebCompanion-Installer.exe, 00000001.00000002.4115885606.0000000005C24000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.verisign.

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 104.16.149.130:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.26.149:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.149.130:443 -> 192.168.2.4:49762 version: TLS 1.2

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_00416076	0_2_00416076
Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_0040E38E	0_2_0040E38E
Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_00412480	0_2_00412480
Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_004039C8	0_2_004039C8
Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_00418CC1	0_2_00418CC1
Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_00418D9B	0_2_00418D9B
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Code function: 1_2_01960DE0	1_2_01960DE0
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Code function: 1_2_0196F0D0	1_2_0196F0D0
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Code function: 1_2_0196E390	1_2_0196E390
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Code function: 1_2_06C805A8	1_2_06C805A8
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Code function: 1_2_072DAA60	1_2_072DAA60
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Code function: 1_2_0738A730	1_2_0738A730
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Code function: 1_2_07389E60	1_2_07389E60
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Code function: 1_2_0738B1B0	1_2_0738B1B0
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Code function: 1_2_073854F9	1_2_073854F9
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Code function: 1_2_07389B18	1_2_07389B18

Source: C:\Users\user\Desktop\Setup.exe	Code function: String function: 00413724 appears 176 times
Source: C:\Users\user\Desktop\Setup.exe	Code function: String function: 00403A63 appears 33 times

Source: Setup.exe, 00000000.00000003.1644376885.0000000002106000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameWebCompanion-Installer.resources.dllL vs Setup.exe
Source: Setup.exe, 00000000.00000003.1644376885.0000000002106000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameICSharpCode.SharpZipLib.dll8 vs Setup.exe
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameWebCompanion-Installer.resources.dllL vs Setup.exe
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameNewtonsoft.Json.dll4 vs Setup.exe
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: get_OriginalFilename vs Setup.exe
Source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameWebCompanion.exe> vs Setup.exe
Source: Setup.exe, 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameInstaller.exeR vs Setup.exe
Source: Setup.exe, 00000000.00000003.1642796179.0000000001F01000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameInstaller.exeR vs Setup.exe
Source: Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: get_OriginalFilename vs Setup.exe
Source: Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameWebCompanion.exe> vs Setup.exe
Source: Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameWebCompanion-Installer.resources.dllL vs Setup.exe
Source: Setup.exe	Binary or memory string: OriginalFilenameInstaller.exeR vs Setup.exe

Source: Setup.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, LARGE_ADDRESS_AWARE, 32BIT_MACHINE

Source: ICSharpCode.SharpZipLib.dll.0.dr, InflaterInputBuffer.cs	Cryptographic APIs: 'TransformBlock'
Source: ICSharpCode.SharpZipLib.dll.0.dr, DeflaterOutputStream.cs	Cryptographic APIs: 'TransformBlock'
Source: ICSharpCode.SharpZipLib.dll.0.dr, ZipAESTransform.cs	Cryptographic APIs: 'TransformBlock'

Source: WebCompanion-Installer.exe.0.dr, RemoveRegistry.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: WebCompanion-Installer.exe.0.dr, InstallUtils.cs	Security API names: System.IO.DirectoryInfo.SetAccessControl(System.Security.AccessControl.DirectorySecurity)
Source: WebCompanion-Installer.exe.0.dr, InstallUtils.cs	Security API names: System.IO.DirectoryInfo.GetAccessControl()
Source: WebCompanion-Installer.exe.0.dr, InstallUtils.cs	Security API names: System.Security.AccessControl.FileSystemSecurity.AddAccessRule(System.Security.AccessControl.FileSystemAccessRule)
Source: WebCompanion-Installer.exe.0.dr, App.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: WebCompanion-Installer.exe.0.dr, App.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()

Source: classification engine

Classification label: mal48.troj.winEXE@3/17@4/3

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

File created: C:\Users\user\AppData\Roaming\Lavasoft

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Mutant created: NULL

Source: C:\Users\user\Desktop\Setup.exe

File created: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D

Jump to behavior

Source: Setup.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\Setup.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: Setup.exe	ReversingLabs: Detection: 29%
Source: Setup.exe	Virustotal: Detection: 41%

Source: WebCompanion-Installer.exe	String found in binary or memory: WebCompanion-Installer.resources
Source: WebCompanion-Installer.exe	String found in binary or memory: WebCompanion-Installer.resources.dll
Source: Setup.exe	String found in binary or memory: RunProgram="WebCompanion-Installer.exe --savename=Setup.exe --partner=IN240402 --nonadmin --direct --tych --campaign=21794599196 --version=13.900.0.1080"

Source: C:\Users\user\Desktop\Setup.exe

File read: C:\Users\user\Desktop\Setup.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\Setup.exe "C:\Users\user\Desktop\Setup.exe"
Source: C:\Users\user\Desktop\Setup.exe	Process created: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe .\WebCompanion-Installer.exe --savename=Setup.exe --partner=IN240402 --nonadmin --direct --tych --campaign=21794599196 --version=13.900.0.1080
Source: C:\Users\user\Desktop\Setup.exe	Process created: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe .\WebCompanion-Installer.exe --savename=Setup.exe --partner=IN240402 --nonadmin --direct --tych --campaign=21794599196 --version=13.900.0.1080	Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: acgenral.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: msvcp140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: httpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: d3d9.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: msctfui.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: uiautomationcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Section loaded: d3dcompiler_47.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: Setup.exe

Static PE information: certificate valid

Source:	Binary string: Application/WebCompanion-Installer.pdb source: WebCompanion.zip.1.dr
Source:	Binary string: &Application/WebCompanion-Installer.pdb source: WebCompanion.zip.1.dr
Source:	Binary string: c:\Temp\Release\Working\Newtonsoft.Json\Src\Newtonsoft.Json\obj\Release\Newtonsoft.Json.pdb source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, WebCompanion-Installer.exe, 00000001.00000002.4116833282.0000000006ED2000.00000002.00000001.01000000.00000007.sdmp, Newtonsoft.Json.dll.0.dr
Source:	Binary string: tem.pdbpdbte. source: WebCompanion-Installer.exe, 00000001.00000002.4115885606.0000000005C24000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: eApplication/WebCompanion-Installer.pdbPK source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003698000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003444000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000343F000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000369C000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000348E000.00000004.00000800.00020000.00000000.sdmp, WebCompanion.zip.1.dr
Source:	Binary string: Application/WebCompanion-Installer.pdbPK source: WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003698000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003444000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000343F000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000369C000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000348E000.00000004.00000800.00020000.00000000.sdmp, WebCompanion.zip.1.dr
Source:	Binary string: c:\Windows\Temp\drone-ME4saUyIgSY9rSgY\drone\src\WebCompanion\Installer\WebCompanionInstaller\obj\Release\WebCompanion-Installer.pdb source: Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr

Source: C:\Users\user\Desktop\Setup.exe

Code function: 0_2_004180F0 LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_004180F0

Source: Setup.exe	Static PE information: real checksum: 0x89be3 should be: 0x93a47
Source: WebCompanion-Installer.resources.dll8.0.dr	Static PE information: real checksum: 0x0 should be: 0xa6a7
Source: WebCompanion-Installer.resources.dll5.0.dr	Static PE information: real checksum: 0x0 should be: 0xc6c2
Source: WebCompanion-Installer.resources.dll1.0.dr	Static PE information: real checksum: 0x0 should be: 0x3e3f
Source: WebCompanion-Installer.resources.dll7.0.dr	Static PE information: real checksum: 0x0 should be: 0xcb69
Source: WebCompanion-Installer.resources.dll2.0.dr	Static PE information: real checksum: 0x0 should be: 0x4885
Source: WebCompanion-Installer.resources.dll4.0.dr	Static PE information: real checksum: 0x0 should be: 0x5659
Source: WebCompanion-Installer.resources.dll6.0.dr	Static PE information: real checksum: 0x0 should be: 0xd8a3
Source: WebCompanion-Installer.resources.dll0.0.dr	Static PE information: real checksum: 0x0 should be: 0xe72f
Source: WebCompanion-Installer.resources.dll.0.dr	Static PE information: real checksum: 0x0 should be: 0x2ab0
Source: WebCompanion-Installer.resources.dll3.0.dr	Static PE information: real checksum: 0x0 should be: 0x842b

Source: Setup.exe

Static PE information: section name: .sxdata

Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_00411130 push ecx; mov dword ptr [esp], ecx	0_2_00411131
Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_00413724 push eax; ret	0_2_00413742
Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_00413A90 push eax; ret	0_2_00413ABE
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Code function: 1_2_0B162050 push ss; retf	1_2_0B162073
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Code function: 1_2_06C815B8 push es; iretd	1_2_06C81612
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Code function: 1_2_072D8EC2 push eax; ret	1_2_072D8EC9
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Code function: 1_2_0738FB4D pushfd ; iretd	1_2_0738FB51
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Code function: 1_2_0738EA65 push cs; iretd	1_2_0738EA6A
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Code function: 1_2_0738F193 pushad ; iretd	1_2_0738F1A1

Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\it-IT\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\tr-TR\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\fr-CA\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\zh-CHS\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\Newtonsoft.Json.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\ICSharpCode.SharpZipLib.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\de-DE\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\ja-JP\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\ru-RU\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\es-ES\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\pt-BR\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\en-US\WebCompanion-Installer.resources.dll	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

File created: C:\Users\user\AppData\Local\Temp\WcInstaller.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Memory allocated: 1960000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Memory allocated: 3380000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Memory allocated: 31A0000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 600000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 599875	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 599766	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 599641	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 599531	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 599422	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 599312	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 599203	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 599094	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 598984	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 598875	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 598766	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 598641	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 598516	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 598406	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 598286	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 598156	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 598045	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 597936	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 597805	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 597687	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 597578	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 597469	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 597359	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 597250	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 597140	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 597031	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 596922	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 596812	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 596703	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 596594	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 596483	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 596375	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 596266	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 596156	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 596047	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 595937	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 595828	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 595716	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 595609	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 595379	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 595250	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 595139	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 595031	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 594922	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 594812	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 594703	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 594594	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 594469	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Window / User API: threadDelayed 2675			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Window / User API: threadDelayed 7163			Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\it-IT\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\tr-TR\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\fr-CA\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\zh-CHS\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\Newtonsoft.Json.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\ICSharpCode.SharpZipLib.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\de-DE\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\ja-JP\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\ru-RU\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\es-ES\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\pt-BR\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\en-US\WebCompanion-Installer.resources.dll	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -33204139332677172s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -600000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -599875s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -599766s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -599641s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -599531s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -599422s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -599312s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -599203s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -599094s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -598984s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -598875s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -598766s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -598641s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -598516s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -598406s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -598286s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -598156s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -598045s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -597936s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -597805s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -597687s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -597578s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -597469s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -597359s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -597250s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -597140s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -597031s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -596922s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -596812s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -596703s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -596594s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -596483s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -596375s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -596266s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -596156s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -596047s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -595937s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -595828s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -595716s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -595609s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -595379s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -595250s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -595139s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -595031s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -594922s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -594812s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -594703s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -594594s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe TID: 7292	Thread sleep time: -594469s >= -30000s	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : Select * from Win32_ComputerSystem

Source: C:\Users\user\Desktop\Setup.exe

Code function: 0_2_00405434 FindFirstFileA,FindFirstFileW,

0_2_00405434

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 600000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 599875	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 599766	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 599641	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 599531	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 599422	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 599312	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 599203	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 599094	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 598984	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 598875	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 598766	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 598641	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 598516	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 598406	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 598286	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 598156	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 598045	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 597936	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 597805	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 597687	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 597578	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 597469	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 597359	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 597250	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 597140	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 597031	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 596922	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 596812	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 596703	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 596594	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 596483	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 596375	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 596266	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 596156	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 596047	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 595937	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 595828	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 595716	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 595609	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 595379	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 595250	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 595139	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 595031	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 594922	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 594812	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 594703	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 594594	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Thread delayed: delay time: 594469	Jump to behavior

Source: WebCompanion-Installer.exe.0.dr	Binary or memory string: vmware
Source: WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll<

Source: C:\Users\user\Desktop\Setup.exe

API call chain: ExitProcess graph end node

graph_0-16392

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe

Code function: 0_2_004180F0 LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_004180F0

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_0041561A SetUnhandledExceptionFilter,		0_2_0041561A
Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_0041562C SetUnhandledExceptionFilter,		0_2_0041562C

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Internals\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Internals.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\Newtonsoft.Json.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\en-US\WebCompanion-Installer.resources.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemXmlLinq\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemXmlLinq.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemXml\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemXml.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\ICSharpCode.SharpZipLib.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe

Code function: 0_2_004148D4 EntryPoint,GetVersion,GetCommandLineA,GetStartupInfoA,GetModuleHandleA,

0_2_004148D4

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter : SELECT * FROM AntivirusProduct

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Query Registry	Remote Services	11 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	1 Disable or Modify Tools	LSASS Memory	121 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Native API	Logon Script (Windows)	Logon Script (Windows)	41 Virtualization/Sandbox Evasion	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Process Injection	NTDS	41 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Deobfuscate/Decode Files or Information	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Obfuscated Files or Information	Cached Domain Credentials	1 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	23 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Setup.exe	29%	ReversingLabs	Win32.PUA.Generic
Setup.exe	42%	Virustotal		Browse

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\ICSharpCode.SharpZipLib.dll	4%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\Newtonsoft.Json.dll	4%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe	21%	ReversingLabs	Win32.PUA.Generic
C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\de-DE\WebCompanion-Installer.resources.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\en-US\WebCompanion-Installer.resources.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\es-ES\WebCompanion-Installer.resources.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\fr-CA\WebCompanion-Installer.resources.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\it-IT\WebCompanion-Installer.resources.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\ja-JP\WebCompanion-Installer.resources.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\pt-BR\WebCompanion-Installer.resources.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\ru-RU\WebCompanion-Installer.resources.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\tr-TR\WebCompanion-Installer.resources.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\zh-CHS\WebCompanion-Installer.resources.dll	0%	ReversingLabs

Source	Detection	Scanner	Label
https://wcdownloader-qa.lavasoft.com/13.0.0.1080/WebCompanion-13.0.0.1080-internal.zip	0%	Avira URL Cloud	safe
https://sandbox-featureflags-api.lavasoft.net/api/feature/WC	0%	Avira URL Cloud	safe
https://www.adaware.com/terms-of-use	0%	Avira URL Cloud	safe
https://wcdownloader-qa.lavasoft.com/13.0.0.1080/webinstaller-13.0.0.1080-internal.zip	0%	Avira URL Cloud	safe
https://staging-webcompanion.lavasoft.net/dci/4.0.0.14/Webprotection.zip	0%	Avira URL Cloud	safe
https://www.verisign.	0%	Avira URL Cloud	safe
https://wcdownloader-qa.lavasoft.com/13.0.0.1080/WebCompanionInstaller-13.0.0.1080-internal.exe	0%	Avira URL Cloud	safe
http://www.webcompanion.com	0%	Avira URL Cloud	safe
https://www.adaware.com/privacy-policy	0%	Avira URL Cloud	safe
https://acs.lavasoft.comZhttps://acs.lavasoft.com/api/v2/url/blacklistlhttps://acs.lavasoft.com/api/	0%	Avira URL Cloud	safe
http://localhost:9008Fhttp://localhost:9008/webcompanion/4http://rt.webcompanion.com	0%	Avira URL Cloud	safe
https://acscdn.lavasoft.comhhttps://acscdn.lavasoft.com/urlnotificationlist.json0https://webcompanio	0%	Avira URL Cloud	safe
http://staging-cloudflow.lavasoft.net/v1/event-stat-wc	0%	Avira URL Cloud	safe
https://sandbox-featureflags-api.lavasoft.net/api/Update/WC	0%	Avira URL Cloud	safe
http://www.lavasoft.com	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
geo.lavasoft.com	104.16.148.130	true	false	high
wcdownloadercdn.lavasoft.com	104.16.149.130	true	false	high
featureflags.lavasoft.com	104.16.149.130	true	false	high
flwadw.com	104.18.26.149	true	false	high

Contacted URLs

Name	Malicious	Reputation
https://flwadw.com/v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1	false	high
https://featureflags.lavasoft.com/api/feature/WC	false	high
https://featureflags.lavasoft.com/api/Update/WC	false	high
https://flwadw.com/v1/event-stat-wc?Type=ErrorInstall&ProductID=wc&EventVersion=1	false	high
https://wcdownloadercdn.lavasoft.com/13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip	false	high
https://flwadw.com/v1/event-stat?Type=ErrorInstall&ProductID=wc&EventVersion=1	false	high
https://flwadw.com/v1/event-stat?Type=Start&ProductID=wc&EventVersion=1	false	high
http://geo.lavasoft.com/	false	high
https://flwadw.com/v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1	false	high
https://flwadw.com/v1/event-stat-wc?Type=Start&ProductID=wc&EventVersion=1	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://crl.entrust.net/g2ca.crl0	Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	false		high
http://tempuri.org/GetComponentsVersionInfoT	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://featureflags.lavasoft.com/api/Update/WCyhttps://sandbox-featureflags-api.lavasoft.net/api/fe	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://wcdownloadercdn.lavasoft.com/13.0.0.1080/WebCompanionInstaller-13.0.0.1080-prod.exe	Setup.exe, 00000000.00000003.1642994503.0000000002105000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	false		high
https://flwadw.com/v1/event-stat-wc	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003466000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://flwadw.com/v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1oi	WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000034CF000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/ILocalyHostedServiceInstaller/GetDropDownValuesResponse	WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	false		high
http://ocsp.entrust.net02	Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	false		high
http://ocsp.entrust.net01	Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	false		high
http://ocsp.entrust.net00	Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	false		high
https://flwadw.com/v1/event-stat	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003466000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://wcdownloadercdn.lavasoft.com	WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://acs.lavasoft.com/api/v2/url/permanentwhitelist	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033F4000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003455000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033F1000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000344C000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033EC000.00000004.00000800.00020000.00000000.sdmp, WcInstaller.log.1.dr, WebCompanion-Installer.exe.0.dr	false		high
http://schemas.xmlsoap.org/soap/envelope/	WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.adaware.com/privacy-policy	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false	Avira URL Cloud: safe	unknown
http://tempuri.org/	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://wcdownloader-qa.lavasoft.com/13.0.0.1080/WebCompanion-13.0.0.1080-internal.zip	Setup.exe, 00000000.00000003.1642994503.0000000002105000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	false	Avira URL Cloud: safe	unknown
http://tempuri.org/:WebHttpBinding4	WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	false		high
https://webcompanion.com/images/favicon.ico	WcInstaller.log.1.dr	false		high
http://www.webcompanion.com	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false	Avira URL Cloud: safe	unknown
https://rt.webcompanion.com/notifications/download/rt/dci/latest/Webprotection.zip	Setup.exe, 00000000.00000003.1642994503.0000000002105000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033F4000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003455000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033F1000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000344C000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033EC000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr, WcInstaller.log.1.dr	false		high
http://tempuri.org/ILocalyHostedServiceInstaller/ChangeScreenResponse	WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.entrust.net/csbr1.crl0	Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	false		high
http://schemas.xmlsoap.org/ws/2004/08/addressing/fault	WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	false		high
https://sandbox-featureflags-api.lavasoft.net/api/feature/WC	WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033F4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/ILocalyHostedServiceInstaller/GetDropDownValues	WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	false		high
http://rt.webcompanion.com/notifications/download/rt/typolist.txt.http://www.lavasoft.com6http://www	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://featureflags.lavasoft.com/api/feature/WC$https://flwadw.comFhttps://flwadw.com/v1/event-stat	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://staging-webcompanion.lavasoft.net/dci/4.0.0.14/Webprotection.zip	Setup.exe, 00000000.00000003.1642994503.0000000002105000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	false	Avira URL Cloud: safe	unknown
http://aia.entrust.net/evcs2-chain.p7c01	Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	false		high
http://rt.webcompanion.com/notifications/download/rt/typolist.txt5Creating	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://acscdn.lavasoft.com/urlnotificationlist.json	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033F4000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.entrust.net/rpa0	Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	false		high
https://wcdownloader-qa.lavasoft.com/13.0.0.1080/webinstaller-13.0.0.1080-internal.zip	Setup.exe, 00000000.00000003.1642994503.0000000002105000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	false	Avira URL Cloud: safe	unknown
http://tempuri.org/GetProductInfoT	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://tempuri.org/$	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://webcompanion.com/en/install.php?partner=	WebCompanion-Installer.exe.0.dr	false		high
https://webcompanion.com/en/help.php	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://wcdownloadercdn.lavasoft.com/13.0.0.1080/webinstaller-13.0.0.1080-prod.zip	Setup.exe, 00000000.00000003.1642994503.0000000002105000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	false		high
https://www.adaware.com/terms-of-use	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/soap/encoding/	WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous	WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/ILocalyHostedServiceInstaller/ChangeScreen	WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	false		high
https://flwadw.com/v1/event-statJhttp://staging-cloudflow.lavasoft.netlhttp://staging-cloudflow.lava	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://www.entrust.net/rpa03	Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	false		high
https://featureflags.lavasoft.com	WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033F4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://flow.lavasoft.com/v1/event-stat/v1/event-stat	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://wcdownloader-qa.lavasoft.com/13.0.0.1080/WebCompanionInstaller-13.0.0.1080-internal.exe	Setup.exe, 00000000.00000003.1642994503.0000000002105000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	false	Avira URL Cloud: safe	unknown
https://partner-tracking.lavasoft.com/api/Tracking/Decrypt	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://webcompanion.com/uninstall.php?utm_source=wc&utm_medium=	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://flwadw.com	WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003466000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000369C000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://acs.lavasoft.comZhttps://acs.lavasoft.com/api/v2/url/blacklistlhttps://acs.lavasoft.com/api/	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false	Avira URL Cloud: safe	unknown
https://www.verisign.	WebCompanion-Installer.exe, 00000001.00000002.4115885606.0000000005C24000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://wcdownloadercdn.lavasoft.com/13.0.0.1080/WCInstaller_NonAdmin.exe	WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000349B000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp, WcInstaller.log.1.dr	false		high
http://localhost:9008Fhttp://localhost:9008/webcompanion/4http://rt.webcompanion.com	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false	Avira URL Cloud: safe	unknown
http://staging-cloudflow.lavasoft.net/v1/event-stat-wc	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003466000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false	Avira URL Cloud: safe	unknown
http://james.newtonking.com/projects/json	Newtonsoft.Json.dll.0.dr	false		high
http://tempuri.org/GetComponentsInfoByProductT	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://www.lavasoft.com	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/08/addressing	WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	false		high
https://webcompanion.com/unsafe.php?utm_source=WCHhttps://webcompanion.com/en/help.php.https://www.a	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://acs.lavasoft.com/api/v2/url/blacklist	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033F4000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003455000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033F1000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.000000000344C000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000033EC000.00000004.00000800.00020000.00000000.sdmp, WcInstaller.log.1.dr, WebCompanion-Installer.exe.0.dr	false		high
https://acscdn.lavasoft.comhhttps://acscdn.lavasoft.com/urlnotificationlist.json0https://webcompanio	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false	Avira URL Cloud: safe	unknown
http://tempuri.org/T	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://sandbox-featureflags-api.lavasoft.net/api/Update/WC	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000034CF000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false	Avira URL Cloud: safe	unknown
https://webcompanion.com/unsafe.php?utm_source=WCghttp://pp.webcompanion.com/unsafe.php?utm_source=W	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://tempuri.org/SignZipInstallerByProductT	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://wcdownloadercdn.lavasoft.com/13.0.0.1080/WebCompanion-13.0.0.1080-prod.zip	Setup.exe, 00000000.00000003.1642994503.0000000002105000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4112777157.00000000035FC000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	false		high
http://crl.entrust.net/evcs2.crl0	Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	false		high
http://wc-update-service.lavasoft.com/update.asmx	Setup.exe, 00000000.00000003.1642994503.0000000002105000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	false		high
http://wc-update-service.lavasoft.com/components.asmx	Setup.exe, 00000000.00000003.1642994503.0000000002105000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.4111674188.00000000014FC000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	false		high
http://tempuri.org/SignZipInstallerT	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://schemas.xmlsoap.org/soap/actor/next	WebCompanion-Installer.exe, 00000001.00000002.4112777157.0000000003381000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/GetComponentsInfoT	Setup.exe, 00000000.00000003.1644376885.000000000213D000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1644789040.0000000000570000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1644951831.0000000000FD2000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.16.149.130	wcdownloadercdn.lavasoft.com	United States	13335	CLOUDFLARENETUS	false
104.16.148.130	geo.lavasoft.com	United States	13335	CLOUDFLARENETUS	false
104.18.26.149	flwadw.com	United States	13335	CLOUDFLARENETUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1584712
Start date and time:	2025-01-06 09:31:18 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Setup.exe
Detection:	MAL
Classification:	mal48.troj.winEXE@3/17@4/3
EGA Information:	Successful, ratio: 50%
HCA Information:	Successful, ratio: 100% Number of executed functions: 341 Number of non-executed functions: 34
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.56.254.164, 20.109.210.53, 4.175.87.197, 13.107.253.45
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, ocsp.entrust.net, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target WebCompanion-Installer.exe, PID 4856 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
03:32:23	API Interceptor	11265322x Sleep call for process: WebCompanion-Installer.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.16.149.130	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	WebCompanionInstaller-12.901.5.1061-prod.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	FileZilla_3.67.1_win64_sponsored-setup.exe	Get hash	malicious	Unknown	Browse	flow.lavasoft.com/v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1
	FileZilla_3.67.1_win64_sponsored-setup.exe	Get hash	malicious	Unknown	Browse	flow.lavasoft.com/v1/event-stat-wc?Type=Activity&ProductID=wc&EventVersion=1
	SecuriteInfo.com.Program.Unwanted.2818.3154.4230.exe	Get hash	malicious	Petite Virus	Browse	flow.lavasoft.com/v1/event-stat?ProductID=IS&Type=StubBundleStart
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
104.16.148.130	http://wcdownloadercdn.lavasoft.com/8.9.0.1091/WcInstaller.exe	Get hash	malicious	Unknown	Browse	flow.lavasoft.com/v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	FileZilla_3.67.1_win64_sponsored-setup.exe	Get hash	malicious	Unknown	Browse	flow.lavasoft.com/v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1
	FileZilla_3.67.1_win64_sponsored-setup.exe	Get hash	malicious	Unknown	Browse	wcdownloadercdn.lavasoft.com/9.1.0.993/WebCompanion-9.1.0.993-prod.zip
	SecuriteInfo.com.Program.Unwanted.2818.3154.4230.exe	Get hash	malicious	Petite Virus	Browse	flow.lavasoft.com/v1/event-stat?ProductID=IS&Type=StubBundleStart
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
featureflags.lavasoft.com	Setup (3).exe.zip	Get hash	malicious	Unknown	Browse	104.16.148.130
	http://home45insurance.blogspot.com	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
wcdownloadercdn.lavasoft.com	Setup (3).exe.zip	Get hash	malicious	Unknown	Browse	104.16.149.130
	http://wcdownloadercdn.lavasoft.com/8.9.0.1091/WcInstaller.exe	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.148.130
geo.lavasoft.com	Setup (3).exe.zip	Get hash	malicious	Unknown	Browse	104.16.149.130
	http://home45insurance.blogspot.com	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.148.130

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://www.boulderpeptide.org/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	104.17.25.14
	https://www.scribd.com/document/787929982/script-tlsfrance	Get hash	malicious	Unknown	Browse	104.18.66.57
	yxU3AgeVTi.exe	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	ITT # KRPBV2663 .doc	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	Ref#66001032.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	PI ITS15235.doc	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	un30brGAKP.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	P3A946MOFP.exe	Get hash	malicious	XWorm	Browse	162.159.135.234
	kP8EgMorTr.exe	Get hash	malicious	PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
CLOUDFLARENETUS	https://www.boulderpeptide.org/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	104.17.25.14
	https://www.scribd.com/document/787929982/script-tlsfrance	Get hash	malicious	Unknown	Browse	104.18.66.57
	yxU3AgeVTi.exe	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	ITT # KRPBV2663 .doc	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	Ref#66001032.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	PI ITS15235.doc	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	un30brGAKP.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	P3A946MOFP.exe	Get hash	malicious	XWorm	Browse	162.159.135.234
	kP8EgMorTr.exe	Get hash	malicious	PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
CLOUDFLARENETUS	https://www.boulderpeptide.org/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	104.17.25.14
	https://www.scribd.com/document/787929982/script-tlsfrance	Get hash	malicious	Unknown	Browse	104.18.66.57
	yxU3AgeVTi.exe	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	ITT # KRPBV2663 .doc	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	Ref#66001032.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	PI ITS15235.doc	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	un30brGAKP.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	P3A946MOFP.exe	Get hash	malicious	XWorm	Browse	162.159.135.234
	kP8EgMorTr.exe	Get hash	malicious	PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	yxU3AgeVTi.exe	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	104.16.149.130 104.18.26.149
	ITT # KRPBV2663 .doc	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	104.16.149.130 104.18.26.149
	Ref#66001032.exe	Get hash	malicious	AgentTesla	Browse	104.16.149.130 104.18.26.149
	PI ITS15235.doc	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	104.16.149.130 104.18.26.149
	kP8EgMorTr.exe	Get hash	malicious	PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	104.16.149.130 104.18.26.149
	ny9LDJr6pA.exe	Get hash	malicious	Quasar	Browse	104.16.149.130 104.18.26.149
	jaTDEkWCbs.exe	Get hash	malicious	Quasar	Browse	104.16.149.130 104.18.26.149
	3LcZO15oTC.exe	Get hash	malicious	Unknown	Browse	104.16.149.130 104.18.26.149
	3LcZO15oTC.exe	Get hash	malicious	Unknown	Browse	104.16.149.130 104.18.26.149

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\ICSharpCode.SharpZipLib.dll	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\ICSharpCode.SharpZipLib.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	213656
Entropy (8bit):	5.7590593524797615
Encrypted:	false
SSDEEP:	3072:LK1c/KCOAUXk31Vv91GOtJJKuE1iA5mGPB8qd9OTymIpn+64kRAclDwRNG95ZI4Q:Ge9OAQsFtJrGPBnmIRZUL
MD5:	0CFE19791546A96C6699657A94604596
SHA1:	5D1A1B74CCA9F74FFFEBCB583661C02E4CA626DD
SHA-256:	56FDFD148F0D60805B2873A5A49739909001D11789B75DAB2B0EA8E55BC60913
SHA-512:	586CC695A2C3C03008D0A1032C221CD3384B5F4363E83C9D903753FB1DAD65B340BC8CD0659F7F891A641F8BD7535C9B889219842045854AA98CD380F0FE4AA3
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 4%
Joe Sandbox View:	Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse
Reputation:	moderate, very likely benign file
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......S...........!......... ........... ........@.. .......................@......sC....@.................................d...W........................2... ....................................................... ............... ..H............text........ ...................... ..`.rsrc...............................@..@.reloc....... ......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\Newtonsoft.Json.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	438424
Entropy (8bit):	6.09887709092106
Encrypted:	false
SSDEEP:	6144:fHerwzLkqCG3uKWf4g6tUwoOkErUx5/Rsnaszr0tZDPEaN+YB5+GonYy:fHerIacuKUtOkESbKQrvB5+qy
MD5:	461C476F474A5F13D2EA9344AE6F70F6
SHA1:	8F74702B99F08277D4514C63956E2E69E8090073
SHA-256:	4F0EC6439B24652F16DF066F4A38B64518B5A874080EDA63DE45968545830F67
SHA-512:	E69080C205CD82EA2C056FA1328BBEC4C03CA3FDC3EE381C4FB44CB356247BE5FE4B8ADD53036DCB19CAC2C6D59B8E02F81932320EA534B5BA50DB80A0647017
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 4%
Reputation:	moderate, very likely benign file
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....L.R...........!.....t............... ........... ..............................%.....@.....................................K.......8............~...2..........x................................................ ............... ..H............text....s... ...t.................. ..`.rsrc...8............v..............@..@.reloc...............\|..............@..B........................H.......h...................X...P ......................................yK.N...f....i5.#I..xV. ..%BR..^.....t0"..z.%./.G'.j....{...2...k)w...'>.c..P..X.......n...h....E...ex..X/H].R.e.{..;&.-.'....{...."..}....V.(x.....(......}....2.{....oy...2.{....oz...B..(....&..(.......0...........oo........YE....}...............}...n...............n.......I...I...I...I...3...I...X...8D....t......{.....or...o{....ow.....+U..o\|.....{.....o....oo...o}.....o....o....t.....o....o..

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	438936
Entropy (8bit):	6.4311342686757245
Encrypted:	false
SSDEEP:	6144:p0CMChRMg/ZytotgM7/J/NMFkl619WTRIlY57pMF9v2aiSVRlY/8a:CGhGI1Wo/J1l619WQY57pMfi8a
MD5:	A27F9713DB1688D03D2082BFA1827803
SHA1:	B8DF4649659003609419D052757166499D2322E8
SHA-256:	2F86EB0D3902A11DA1F534D9734DABAE37D33E2C57B03F968198A1CFC2E652A9
SHA-512:	F952C6792F10CB60CA3ECC00B317C33AADB65C8471D106171660EC0FCB0603C8D18B8AD2A90AACDA6581D342647290099AF0ED0FDD897EDB390D5BF9209EA905
Malicious:	true
Yara Hits:	Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 21%
Reputation:	moderate, very likely benign file
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf.....................t.......(... ...@....@.. ....................................@..................................(..K....@...q...............2..........X'............................................... ............... ..H............text........ ...................... ..`.rsrc....q...@...r..................@..@.reloc...............~..............@..B.................(......H..................{....i...9............................................~....}.....(......su...}......(....}.....r...pz.(....r'..p.{....(......(........0..j..........{....r...pov...,.(.....+.(......r...p(......(......r...p.{....o....o.......(........sG........o......z..........UU......N.(....r...p..(.....r...p.......{...."..}.....rA..p.rS..p.(....oV...f.~....}.....(......(.....ro..pN.(....r...p..(.....0..i.......~......(....(!...,.r...p.+..(.......(j.....(...+

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe.config

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2273
Entropy (8bit):	5.064418012146103
Encrypted:	false
SSDEEP:	48:c5+qM3DzYnwAGvSy6ZYEcCUkmPlrAn6EVr6R841docr7S3tB:jV3f84CRvur+rAN3r7sz
MD5:	E3D3AA100B93504676414B9268DFBAD4
SHA1:	A7D1E59C9D8C48DFE259D2973C13B0E2965E67AA
SHA-256:	EA7747D876307B0022F055C311C4F8F8112FDDE380E0848FD35508C00EDF8E7A
SHA-512:	9470E0B4784CE3AA94248DDBD9C17BCA988B6A680754511CBE1F1C368270F6D18C75AD1EA0F3A438CA5BB1A12E55E8745F68F2EBC9F78C68B373A6541AC9EFBE
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <section name="ProdSettings" type="System.Configuration.NameValueSectionHandler"/>.. <section name="StagingSettings" type="System.Configuration.NameValueSectionHandler"/>.. </configSections>.. <ProdSettings>.. <add key="Installer" value="https://wcdownloadercdn.lavasoft.com/13.0.0.1080/WebCompanionInstaller-13.0.0.1080-prod.exe"/>.. <add key="WebProtectionZip" value="https://rt.webcompanion.com/notifications/download/rt/dci/latest/Webprotection.zip"/>.. <add key="InstallerZip" value="http://wcdownloadercdn.lavasoft.com/13.0.0.1080/WebCompanion-13.0.0.1080-prod.zip"/>.. <add key="WebInstallerZip" value="http://wcdownloadercdn.lavasoft.com/13.0.0.1080/webinstaller-13.0.0.1080-prod.zip"/>.. </ProdSettings>.. <StagingSettings>.. <add key="Installer" value="https://wcdownloader-qa.lavasoft.com/13.0.0.1080/WebCompanionInstaller-13.0.0.1080-internal.exe"/>.. <add key="WebProtectionZip" va

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\de-DE\WebCompanion-Installer.resources.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	6656
Entropy (8bit):	4.423116664692943
Encrypted:	false
SSDEEP:	96:5GfMjBmbsmYpthmv13DA+7ZaOrO2I72LYlty5dPolY:5GEjBmb/Ypthmd3k+7LBTUa5NolY
MD5:	A564D6AE745D289B599A010E570E609E
SHA1:	7A698D14CDAB971982B02AF5A9C49D8AEDA56A19
SHA-256:	E20A9695E1322491C57C8A0E61839E5AEEBA40F43AAB400C29F19531D18FA037
SHA-512:	2894F6832F6D20E97E18FF09780D34E7CC25074F0382742838C9A060AF7ADE3FFD3DA9F844E0475697E3854A97379F0961A7F65A1EB5F2ACBA2AF17E49D75B39
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf...........!.................1... ...@....... ....................................@..................................0..O....@.......................`....................................................... ............... ..H............text...$.... ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................1......H.......h-..d...........P .............................................................lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet....".......PADPADP......n.....V ...].......}.E(/....xv.\|.-..X:..o.....V..................v...1.D\|-......."..&...'c$Q:#Uv=.9.W*..Y`..[.F.^:1;jg.Jq............g...i...............!.......z...............5...v.......K....... .......3...<...

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\en-US\WebCompanion-Installer.resources.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	6144
Entropy (8bit):	4.337584317889265
Encrypted:	false
SSDEEP:	96:tDXGBpbsiopCUoHve6v7ptEAT0VOGSxQ7F0ltEj8dPolY:trGBpbLopDoHm1MeGU8NolY
MD5:	88498F281D2BC857F09C3A0EFFE97A35
SHA1:	5560555DED4D2336EBAAC6AECBD80C2FC6F0AAE7
SHA-256:	2FBD9C10CEC246D5E6EE2F41635F283C3064773724253BAE598BFAEA735B702D
SHA-512:	2550C9C2E42E77A44520EC53418636721C3A56BE7B647C839B7A3063A9BDE4FFD304A6812F51A95DF19B1F04E05285FA9C23AF946472F07DE10F514DDB0DF9C0
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf...........!................N/... ...@....... ....................................@................................../..K....@.......................`....................................................... ............... ..H............text...T.... ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B................0/......H........+..d...........P ..I...........................................E..............lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet.... .......PADPADP......n.....V ...].......}.E(/....xv.\|.-..X:..o.....V..............v.D\|-......."..&...'c$Q:#Uv=.9.W..Y`..[.F.^:1;jg.Jq........\.......i.......t...............z...O...L...<...5..........................E...........L...

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\es-ES\WebCompanion-Installer.resources.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	6656
Entropy (8bit):	4.320496600456879
Encrypted:	false
SSDEEP:	96:wfMjBDbsPnpEaLv3lhC3E1Wb/xg/x9lt2EZdPolY:wEjBDbWnpEaLPlhC3fa9ZNolY
MD5:	A22C9231A5562DCA9F0BC186BDA3348D
SHA1:	D4D281A596E272A482C6917DC3CA67C150E72FCB
SHA-256:	AF899C47BDE2A325F3F9F22772F4E305F6B50EAF040670DE508226FEFBED649B
SHA-512:	C140934BF63AADB01F7C0A1A4A7E89FB7CC6DEAA5219BBCB64EB6FB9D29F8139DC4A17C990373BB008A891436BD60E8B21CF748DAB0FA263853663AD17BA9FB4
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf...........!.................0... ...@....... ....................................@.................................<0..O....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B................p0......H........,..d...........P .............................................................lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet....".......PADPADP......n.....V ...].......}.E(/....xv.\|.-..X:..o.....V..................v...1.D\|-......."..&...'c$Q:#Uv=.9.W*..Y`..[.F.^:1;jg.Jq............g...i...............!.......z...............5...v.......K....... .......3...<...

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\fr-CA\WebCompanion-Installer.resources.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	6656
Entropy (8bit):	4.4162624308031155
Encrypted:	false
SSDEEP:	96:vfMjBwbssSpcuov88johXbk3LFXRq7hltE5dPolY:vEjBwbJSpcuo0aX07hM5NolY
MD5:	07759138B75C31E8E62E2DCB9E5B4121
SHA1:	C78CAC2D69DD3770256EA1D22FE62F8991AE1735
SHA-256:	460E0EA0F891B4A7D8FCF4D7C1DAF4034B1A8C01F35C55B87C4DE4D34F7E1119
SHA-512:	7089069EFBE9109ED034C9538B16F482573757A6DAED2D870CF1711F15B1F39FFFC6E5F9FF5E3380514EAFCEE49797F63DD0C9E472D37647EE3FCF34E086B189
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf...........!.................0... ...@....... ....................................@..................................0..O....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................0......H.......8-..d...........P .............................................................lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet....".......PADPADP......n.....V ...].......}.E(/....xv.\|.-..X:..o.....V..................v...1.D\|-......."..&...'c$Q:#Uv=.9.W*..Y`..[.F.^:1;jg.Jq............g...i...............!.......z...............5...v.......K....... .......3...<...

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\it-IT\WebCompanion-Installer.resources.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	5632
Entropy (8bit):	4.05939038461759
Encrypted:	false
SSDEEP:	48:64WHsDO4eUqFAjpI1UhCvEWRCYVl6TxNLu6hxPFraKuhuXahZ439M/oKx8Welt4u:UFfAjpI1fvC6StPPtM+7tlth8tdPolY
MD5:	320A49D5E8C225BF7D8C8FC8F0FBA1FE
SHA1:	6986D89BABDB474B16E3074865EEDFFCCECC9337
SHA-256:	53F48BF5DEB5FB756EB61D5EE78BB72EF4509ADB396EB40BEF9671ECAA8D9819
SHA-512:	6EC2883F6542F8EA3966F367E11359B3702B8E8E01FAFA3D3828E16D216CC77CC71B92BB1BFBC0C7F146C79FB4DBEE5FAD84288DFE1C5979F0C59841B92F03D6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf...........!................n,... ...@....... ....................................@..................................,..W....@.......................`....................................................... ............... ..H............text...t.... ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B................P,......H........(..d...........P ..`...........................................\..............lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet............PADPADP........V ...].......}....xv.\|.-..X:.....V..................v...1.D\|-...."..&#Uv=.9.W.F.^:1;j........a.......J...'...........(...............p.......E...........{...........b.......B...O............B.T.N._.C.L.O.S.E......

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\ja-JP\WebCompanion-Installer.resources.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	5632
Entropy (8bit):	4.697358912630535
Encrypted:	false
SSDEEP:	96:KsC3ASpa3kvBYTnRDzIWI2dPRp0QltdHmdPolY:KsOASpa3kpXoR+Q1GNolY
MD5:	442654050F5E5EBFB286C75A6AD10485
SHA1:	7F9AB13C925DDDE3ADE1EBA334DD17F6BF341F7A
SHA-256:	B85CC7BA82B58AFD8FA00DFCCD820B5B34BC14A942EBDAB5380FCE8F7257C0AE
SHA-512:	E7F9F728603091728451127C02B1F8412C741C57C5ADFED91FECA37989C07570886ACA262ECBDB17A968474E05936C3485602115CBC26EDCEE65DD7764B76795
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf...........!.................-... ...@....... ....................................@..................................-..W....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................-......H....... *..d...........P .............................................................lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet............PADPADP........V ...].......}....xv.\|.-..X:.....V..................v...1.D\|-...."..&.9.W.F.^:1;j........a.......)...............(...............O.......$...........{.......j...b...B...O............B.T.N._.C.L.O.S.E......B.T.N._.

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\pt-BR\WebCompanion-Installer.resources.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	6656
Entropy (8bit):	4.272201212454418
Encrypted:	false
SSDEEP:	96:afMjBsbswapvL6vu1667y4UNGaB3q4kUO6ltMNdPolY:aEjBsb9apvL6ms67yJ3hUNNolY
MD5:	01CCD85F0676258B5E4A223832E3258C
SHA1:	630CD9F369A81A7823905FD842FDDEEFAF23D3A1
SHA-256:	C482D074CFDA0B6921A6750F0CCC1279BA6FCFB9D2037CA6EAAF704D8DAF811F
SHA-512:	1BB2DB0ABF3E0BCA3B131D2DF5329006A56E3FAA4E540621E54AA98DBB0BF4E27093314B477AA66E4F10FE0AF5DF1887FF23CAD938C5B0F98E455433E14FAD01
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf...........!.................0... ...@....... ....................................@................................../..K....@.......................`....................................................... ............... ..H............text...4.... ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................0......H.......\|,..d...........P ..,...........................................(..............lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet....".......PADPADP......n.....V ...].......}.E(/....xv.\|.-..X:..o.....V..................v...1.D\|-......."..&...'c$Q:#Uv=.9.W*..Y`..[.F.^:1;jg.Jq............g...i...............!.......z...............5...v.......K....... .......3...<...

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\ru-RU\WebCompanion-Installer.resources.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	7680
Entropy (8bit):	4.608207837862824
Encrypted:	false
SSDEEP:	96:41fMjBGbsSopXm7vGQdkxbdV2UCwbT+T/UA7+1styo36glt55odPolY:eEjBGbbopXm7eXxbWqExi1splHoNolY
MD5:	F2876EC061D1CC88E44104ED97FC36F8
SHA1:	68BFE2A32CA14B0C379EF725E426AB2FED09E075
SHA-256:	6071DAA27880FE3F6B9FB704890250CA655CAFE832A1B9A4E59F0CFFFB042E04
SHA-512:	E3DD2BAAB3C5AFB124DC9CC0BB2D9318D33707732B4F23C211C2E3BC5A8A8889FAF42003857DA98D43DD7F7368CAFB3A02591BE04DCA4E1343A00283CA071DB6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf...........!.................3... ...@....... ....................................@..................................3..K....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................3......H.......L0..d...........P .............................................................lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet....".......PADPADP......n.....V ...].......}.E(/....xv.\|.-..X:..o.....V..................v...1.D\|-......."..&...'c$Q:#Uv=.9.W*..Y`..[.F.^:1;jg.Jq............g...i...............!.......z...............5...v.......K....... .......3...<...

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\tr-TR\WebCompanion-Installer.resources.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	5632
Entropy (8bit):	4.204809000235561
Encrypted:	false
SSDEEP:	48:6teH9O4G6ULy3ABApQe1eBpQvu18JvLh4jK0YuPx4S8zqeelt4833PPbknI5Klfy:TsC3AWpt1eYvJgjKZSJltkFdPolY
MD5:	D0009577C38F3338B2A3DCCEE9DF5169
SHA1:	D567D95A61B57885B55D7D70B93BC839EF162436
SHA-256:	598BAD964E2BED4A4EDAFAC5E8838C7B922C6EBBFBA70EDA0D400E543B91E54B
SHA-512:	95F766F541CA5EFC74C3DCC9D5C299798B581F1B302A4EFFDCA9B7ED4177DAF4E8547B7729DB724EB0A8A28C9770FC470BF9BDF2C616F70782DC96056CF8410E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf...........!.................,... ...@....... ....................................@.................................<,..O....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B................p,......H........(..d...........P .............................................................lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet............PADPADP........V ...].......}....xv.\|.-..X:.....V..................v...1.D\|-...."..&.9.W.F.^:1;j........a.......)...............(...............O.......$...........{.......j...b...B...O............B.T.N._.C.L.O.S.E......B.T.N._.

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\zh-CHS\WebCompanion-Installer.resources.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	5120
Entropy (8bit):	4.582926268925439
Encrypted:	false
SSDEEP:	96:vsC3AjpTfYGvqLH+/WZGrlqlt9kdPolY:vsOAjpTfxyb+/gGJq1kNolY
MD5:	322549094C487E49ACEB9899419D8EC6
SHA1:	DD0E5FF6BC3E4590203829DA1BB8BD7B00CBD07E
SHA-256:	7824381C18E86E72C0D4A8BB0ED377DFDB6E3B5374984ED67AF119B14268E70D
SHA-512:	80747F72196406993110D0DB5B736BCA21975C26615D34F771042E69CA0D519ED80C0E9267A90517A5B9862AB44CF9F9D96C354E952CB9CB0C32EB4887F80A1C
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf...........!.................+... ...@....... ....................................@.................................t+..W....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................+......H........(..h...........P .............................................................lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet............PADPADP........V ...].......}....xv.\|.-..X:.....V..................v...1.D\|-...."..&.9.W.F.^:1;j........a.......)...............(...............O.......$...........{.......j...b...B...O............B.T.N._.C.L.O.S.E......B.T.N._.

C:\Users\user\AppData\Local\Temp\WcInstaller.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe
File Type:	ASCII text, with very long lines (912), with CRLF line terminators
Category:	modified
Size (bytes):	3301
Entropy (8bit):	5.333319743616741
Encrypted:	false
SSDEEP:	96:DRtAPy4COl++P/J4DjOvDPTBRtAnSnWAKH:DfAKis+HJ42vD7BfAtAKH
MD5:	638B509608FDC6612C619C7EB6CF7E53
SHA1:	60D5378B91E9C6B588B347FB20BC737941C28AB3
SHA-256:	5E7D746B672A16CF9708DC5A0EE3ACF6148A7D3C887D7597EC6C872992340BD0
SHA-512:	A7DD0B296EA3051BDAD592D288F0ACDE02C8D107018C32C9330AB303D2B8C2959EF15DF726AD202E46107BFF91A4FEBF6E8A592F86217A059073DABDD8A16ACF
Malicious:	false
Preview:	Detecting windows culture..Preparing request for featureflag: {"Geo":"GB","Partner":"IN240402","Campaign":"21794599196","InstallDate":"20250106","TriggerType":"install","TriggerEvent":"installer","Version":"13.900.0.1080","featurewp":true,"featureal":true}..Getting response from featureflag: [{"sectionCode":"WAC","code":"WAC","configuration":"{\"Icon\": \"https://webcompanion.com/images/favicon.ico\", \"AppName\": \"Web Companion\", \"Settings\": [\"WCAutoUpdate\", \"EnableGranularity\", \"PostRunV2Action\", \"PostRunTimerAction\", \"EnableTelemetryScan\", \"EnableWebProtection\", \"EnableDynamicNotification\"], \"CompanyName\": \"Lavasoft\", \"ConfigVersion\": \"v1\", \"CurrentVersion\": \"9.3.0\", \"IsNewUpdaterService\": true}","targetId":301},{"sectionCode":"WFAI","code":"WCP","configuration":"{\"Version\": \"3.0.2.12\", \"FilePath\": \"https://rt.webcompanion.com/notifications/download/rt/dci/latest/Webprotection.zip\", \"BlackList\": \"https://acs.lavasoft.com/api/v2/url/blacklis

C:\Users\user\AppData\Local\Temp\WebCompanion.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	10494317
Entropy (8bit):	7.994463819622281
Encrypted:	true
SSDEEP:	196608:pKZsrAth9Vrdx45WtQbJtXWYxEwsOOXd/XUCv1uGJONYTr9udX6:U+rWVBx3WX7EJONION6f
MD5:	C0A2AAF917E6BC1D951EC481213D4138
SHA1:	56308BC1CF014F507E161B518736CD3D3666387D
SHA-256:	2F87DCD36A114502A3C80ECF8A8C5F5EF60475951F9C142A1A68BDEC6CAA3E23
SHA-512:	43EF07470F33BA0FF6A18E343C55ADAF0CDB2B88C3B37FA53F32608F1F78B6266BFACD2BB3BD92BF56EB0E28C4C20278212E06C1873DEA9098ECE5CDB117B9BC
Malicious:	false
Preview:	PK.........%.X....FF...$......Application/7za.exe.yxTE.8\|{I.YH'@CX.V[..%CP.4h_.MnCG@DQ..h..... .`'..\[...u..yg....QGY\........{..d.....S.......~.}y...N.:u..S.NU...`.......k....~.......e..o.`.......[`._..]U..g.s...?..~..J..:.~.s.t.}..q.>}2l.....u.....#.Y..Mt}.......6z......{.:.:.y^KW.]....ys."..Nu.........C.EB..$..P.k......s.(..zN..K.........iH..Z.....[..x.P.7.iB.6..Ta.,..I...#....g.r...<.wg.....zb......QUw..M.:...L...nHN..r...]#..TA.r...vO..5.'.:B]..p}<.lxU... ...6...........?i...o...g..7H...%E_..B...d.... .f.].&I..Q..G.S..x.o.K......../.~...g.Q_..^(..h^...Dq.J\Y2.....&...........Fo`...........}....98E'..Kne+c........._./..o.o.+g.z..M.6.....D.D.^I9..!..0HJ..?h.7..2"U.;...RY..=b..k.^y....0.l...m...h..9.........f....J-N..KU....HH."......Y...I)8..=s>.)MPH!.L....e...J..`bc(.:.-M=}...v...=..9.:..u.7.X.O...T..%e.)V...rS..s....o...[1.C... ...x7g)P..:............8. .u...lv-a..MB.TyW..D..p$..0.x>..'..K..l./g..U......b{.!_...,....<.....$#zh.e....+.

C:\Users\user\AppData\Roaming\Lavasoft\Web Companion\Options\Statistics.txt

Download File

Process:	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	56
Entropy (8bit):	4.510405092002415
Encrypted:	false
SSDEEP:	3:asLGYBcU24hXYn:aqGYBbm
MD5:	EF769B561D6CAF8D031410065016867F
SHA1:	978F7F0C36B409B4CE140C710A3DC6CA1D5FE7F1
SHA-256:	7D11B1381558FFEAB6E8ADDBD097AEBFDD59596631983481B375821674BCF4B9
SHA-512:	0501D0C1E522D4077D6310281DBA8A6F5BE462CC14811F42829DEF3474D2C1EAAFA5F787DC8FB95FD69E250CB40AEA13F65DFA4D7AFD8EDCDCEC63A80E534E57
Malicious:	false
Preview:	{ "install_id" : "d768e6f2-f3e1-499f-9b44-ef0144c95940"}

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.6536233653890235
TrID:	Win32 Executable (generic) a (10002005/4) 99.40% InstallShield setup (43055/19) 0.43% Windows Screen Saver (13104/52) 0.13% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02%
File name:	Setup.exe
File size:	545'344 bytes
MD5:	2902e39c85dd5de70d317957a8dd1683
SHA1:	54b92618d4e08f3a06e1b510d14cd764a003acf1
SHA256:	536d9c6365af64660702c6cd49bf2939de2ae3d6798b8167f3b21b8d120f75bd
SHA512:	dba5e51815b6ce83f195a1810163095947db66dc594e9df9c3d2d7af55eacfed975d49193a701b9323bd56125e6c0a7c95c9a9da22c6f274c64647f3418f04e9
SSDEEP:	12288:WG5knZfFKeTzOydwORmV42Y5RBHtf8WS8sejGxUeRx7/ae:WG50ZfFKMzRCa0gDS8geeme
TLSH:	48C4F1127DE089B6D5810431CC745FA2A2B6FE560A21887773997E3E7F7F642C232A1D
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........W..s...s...s..c}...s..Yy...s..w,...s...r./.s..w....s..Yx...s.......s.......s.Zyu...s.Rich..s.................PE..L......M...

File Icon


Icon Hash:	8011090b07071616

Static PE Info

General

Entrypoint:	0x4148d4
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, LARGE_ADDRESS_AWARE, 32BIT_MACHINE
DLL Characteristics:
Time Stamp:	0x4DAC88CE [Mon Apr 18 18:54:06 2011 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	e00de6e48b9b06aceb12a81e7bf494c9

Authenticode Signature

Signature Valid:	true
Signature Issuer:	CN=Entrust Extended Validation Code Signing CA - EVCS2, O="Entrust, Inc.", C=US
Signature Validation Error:	The operation completed successfully
Error Number:	0
Not Before, Not After	01/05/2024 15:39:26 01/05/2025 15:39:25
Subject Chain	CN=7270356 Canada Inc., SERIALNUMBER=1417258-2, OID.2.5.4.15=Private Organization, O=7270356 Canada Inc., OID.1.3.6.1.4.1.311.60.2.1.3=CA, L=Saint-Laurent, S=Quebec, C=CA
Version:	3
Thumbprint MD5:	0E3940FCE9D8B244F0D82DDEEBE28F5E
Thumbprint SHA-1:	EA06433E6F12D2AADA040F4A6EF7C927404A4CBA
Thumbprint SHA-256:	EB0A666D9DFD790059DF788FBA544ABC93E1690F1425147BA0A6E784AFC6F5B5
Serial:	25D0CB9D7B0D6C700CDAE43D243AB1C6

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
push FFFFFFFFh
push 0041B9E8h
push 004147FCh
mov eax, dword ptr fs:[00000000h]
push eax
mov dword ptr fs:[00000000h], esp
sub esp, 58h
push ebx
push esi
push edi
mov dword ptr [ebp-18h], esp
call dword ptr [0041B078h]
xor edx, edx
mov dl, ah
mov dword ptr [004233F0h], edx
mov ecx, eax
and ecx, 000000FFh
mov dword ptr [004233ECh], ecx
shl ecx, 08h
add ecx, edx
mov dword ptr [004233E8h], ecx
shr eax, 10h
mov dword ptr [004233E4h], eax
push 00000001h
call 00007F359D159CCBh
pop ecx
test eax, eax
jne 00007F359D158E3Ah
push 0000001Ch
call 00007F359D158EF8h
pop ecx
call 00007F359D15977Dh
test eax, eax
jne 00007F359D158E3Ah
push 00000010h
call 00007F359D158EE7h
pop ecx
xor esi, esi
mov dword ptr [ebp-04h], esi
call 00007F359D15B8ECh
call dword ptr [0041B07Ch]
mov dword ptr [00425A5Ch], eax
call 00007F359D15B7AAh
mov dword ptr [00423360h], eax
call 00007F359D15B553h
call 00007F359D15B495h
call 00007F359D15AEF0h
mov dword ptr [ebp-30h], esi
lea eax, dword ptr [ebp-5Ch]
push eax
call dword ptr [0041B080h]
call 00007F359D15B426h
mov dword ptr [ebp-64h], eax
test byte ptr [ebp-30h], 00000001h
je 00007F359D158E38h
movzx eax, word ptr [ebp+00h]

Rich Headers

Programming Language:

[ C ] VS98 (6.0) SP6 build 8804
[C++] VS98 (6.0) SP6 build 8804
[ C ] VS2010 build 30319
[ASM] VS2010 build 30319
[EXP] VC++ 6.0 SP5 build 8804

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x1e9ac	0x64	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x27000	0x71d4	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x81fb0	0x3290
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x1b000	0x200	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x197c0	0x19800	206b62d600beb166f8bf863ad5301f8c	False	0.5831609987745098	DOS executable (COM)	6.60822715389085	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x1b000	0x4490	0x4600	b0314f39355cab7d4674a0928d3b15f2	False	0.312109375	data	4.383775518811042	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x20000	0x5a68	0x3200	8d44c03d32e0c923339cda9fae15827a	False	0.123828125	data	1.3793356235333818	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.sxdata	0x26000	0x4	0x200	35925cfdc1176bd9ffc634a58b40ec17	False	0.02734375	data	0.020393135236084953	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_LNK_INFO, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x27000	0x71d4	0x7200	cd606fe2fe8a9aaa6244d6a44a46010a	False	0.3919613486842105	data	4.655199945289653	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_ICON	0x27354	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 640	English	United States	0.37231182795698925
RT_ICON	0x2763c	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 192	English	United States	0.5472972972972973
RT_ICON	0x27764	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 2833 x 2833 px/m			0.3200354609929078
RT_ICON	0x27bcc	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 2833 x 2833 px/m			0.23688524590163934
RT_ICON	0x28554	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 2833 x 2833 px/m			0.1721388367729831
RT_ICON	0x295fc	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 2833 x 2833 px/m			0.1241701244813278
RT_ICON	0x2bba4	0x1a7b	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced			0.9648915769287506
RT_DIALOG	0x2d620	0xb8	data	English	United States	0.6684782608695652
RT_STRING	0x2d6d8	0x94	data	English	United States	0.668918918918919
RT_STRING	0x2d76c	0x34	data	English	United States	0.6538461538461539
RT_GROUP_ICON	0x2d7a0	0x4c	data			0.8289473684210527
RT_GROUP_ICON	0x2d7ec	0x22	data	English	United States	1.0
RT_VERSION	0x2d810	0x344	data	English	United States	0.4318181818181818
RT_MANIFEST	0x2db54	0x67f	exported SGML document, ASCII text, with CRLF line terminators	English	United States	0.3692122669873722

Imports

DLL	Import
OLEAUT32.dll	VariantClear, SysAllocString
USER32.dll	SendMessageA, SetTimer, DialogBoxParamW, DialogBoxParamA, SetWindowLongA, GetWindowLongA, SetWindowTextW, LoadIconA, LoadStringW, LoadStringA, CharUpperW, CharUpperA, DestroyWindow, EndDialog, PostMessageA, ShowWindow, MessageBoxW, GetDlgItem, KillTimer, SetWindowTextA
SHELL32.dll	ShellExecuteExA
KERNEL32.dll	GetCurrentDirectoryA, GetStringTypeW, GetStringTypeA, LCMapStringW, LCMapStringA, InterlockedIncrement, InterlockedDecrement, GetProcAddress, GetOEMCP, GetACP, GetCPInfo, IsBadCodePtr, IsBadReadPtr, GetFileType, SetHandleCount, GetEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsW, FreeEnvironmentStringsA, UnhandledExceptionFilter, HeapSize, GetCurrentProcess, TerminateProcess, IsBadWritePtr, HeapCreate, HeapDestroy, GetEnvironmentVariableA, SetUnhandledExceptionFilter, TlsAlloc, ExitProcess, GetVersion, GetCommandLineA, GetStartupInfoA, GetModuleHandleA, WaitForSingleObject, CloseHandle, CreateProcessA, GetCommandLineW, GetVersionExA, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, MultiByteToWideChar, WideCharToMultiByte, GetLastError, LoadLibraryA, GetModuleFileNameW, GetModuleFileNameA, LocalFree, FormatMessageW, FormatMessageA, SetFileTime, CreateFileW, SetLastError, SetFileAttributesW, SetFileAttributesA, RemoveDirectoryW, RemoveDirectoryA, CreateDirectoryW, CreateDirectoryA, DeleteFileW, DeleteFileA, GetFullPathNameW, GetFullPathNameA, SetCurrentDirectoryW, SetCurrentDirectoryA, GetCurrentDirectoryW, GetTempPathW, GetTempPathA, GetCurrentProcessId, GetTickCount, GetCurrentThreadId, FindClose, FindFirstFileW, FindFirstFileA, FindNextFileW, FindNextFileA, CreateFileA, GetFileSize, SetFilePointer, ReadFile, WriteFile, SetEndOfFile, GetStdHandle, WaitForMultipleObjects, Sleep, VirtualAlloc, VirtualFree, CreateEventA, SetEvent, ResetEvent, InitializeCriticalSection, RtlUnwind, RaiseException, HeapAlloc, HeapFree, HeapReAlloc, CreateThread, TlsSetValue, TlsGetValue, ExitThread

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-06T09:32:24.011591+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49732	104.16.148.130	80	TCP
2025-01-06T09:32:34.822286+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49768	104.16.149.130	443	TCP
2025-01-06T09:32:42.751980+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49769	104.16.149.130	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 6, 2025 09:32:08.543517113 CET	49732	80	192.168.2.4	104.16.148.130
Jan 6, 2025 09:32:08.548437119 CET	80	49732	104.16.148.130	192.168.2.4
Jan 6, 2025 09:32:08.551331043 CET	49732	80	192.168.2.4	104.16.148.130
Jan 6, 2025 09:32:08.555794954 CET	49732	80	192.168.2.4	104.16.148.130
Jan 6, 2025 09:32:08.560612917 CET	80	49732	104.16.148.130	192.168.2.4
Jan 6, 2025 09:32:09.027638912 CET	80	49732	104.16.148.130	192.168.2.4
Jan 6, 2025 09:32:09.077210903 CET	49732	80	192.168.2.4	104.16.148.130
Jan 6, 2025 09:32:09.771466017 CET	49733	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:09.771508932 CET	443	49733	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:09.771579027 CET	49733	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:09.783308029 CET	49733	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:09.783325911 CET	443	49733	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:10.335553885 CET	443	49733	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:10.335645914 CET	49733	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:10.339096069 CET	49733	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:10.339109898 CET	443	49733	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:10.339368105 CET	443	49733	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:10.386538982 CET	49733	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:10.389218092 CET	49733	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:10.435336113 CET	443	49733	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:10.435399055 CET	49733	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:10.435411930 CET	443	49733	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:10.582703114 CET	443	49733	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:10.582792997 CET	443	49733	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:10.582847118 CET	49733	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:10.584148884 CET	49733	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:10.669737101 CET	49734	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:10.669778109 CET	443	49734	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:10.669842958 CET	49734	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:10.670089960 CET	49734	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:10.670106888 CET	443	49734	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:11.159862995 CET	443	49734	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:11.159934044 CET	49734	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:11.162666082 CET	49734	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:11.162676096 CET	443	49734	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:11.162914038 CET	443	49734	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:11.164256096 CET	49734	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:11.207336903 CET	443	49734	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:11.207396984 CET	49734	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:11.207405090 CET	443	49734	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:11.351708889 CET	443	49734	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:11.351793051 CET	443	49734	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:11.351859093 CET	49734	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:11.352252007 CET	49734	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:11.359796047 CET	49735	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:11.359841108 CET	443	49735	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:11.359930992 CET	49735	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:11.360106945 CET	49735	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:11.360116005 CET	443	49735	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:11.843348026 CET	443	49735	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:11.848294020 CET	49735	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:11.848320961 CET	443	49735	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:11.848371029 CET	49735	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:11.848378897 CET	443	49735	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:12.000327110 CET	443	49735	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:12.000410080 CET	443	49735	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:12.000478029 CET	49735	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:12.003722906 CET	49735	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:12.155030966 CET	49736	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:12.155082941 CET	443	49736	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:12.155188084 CET	49736	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:12.158479929 CET	49736	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:12.158488035 CET	443	49736	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:12.620296955 CET	443	49736	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:12.621793032 CET	49736	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:12.621808052 CET	443	49736	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:12.621855974 CET	49736	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:12.621864080 CET	443	49736	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:12.788067102 CET	443	49736	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:12.788146973 CET	443	49736	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:12.788192034 CET	49736	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:12.788739920 CET	49736	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:12.797322989 CET	49737	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:12.797358990 CET	443	49737	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:12.797420979 CET	49737	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:12.797627926 CET	49737	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:12.797643900 CET	443	49737	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:13.251915932 CET	443	49737	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:13.253499985 CET	49737	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:13.253523111 CET	443	49737	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:13.253573895 CET	49737	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:13.253578901 CET	443	49737	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:13.441046953 CET	443	49737	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:13.441134930 CET	443	49737	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:13.441195011 CET	49737	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:13.441529036 CET	49737	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:14.258656025 CET	49738	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:14.258697033 CET	443	49738	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:14.258763075 CET	49738	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:14.259031057 CET	49738	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:14.259040117 CET	443	49738	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:14.730113029 CET	443	49738	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:14.731822968 CET	49738	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:14.731837034 CET	443	49738	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:14.731976986 CET	49738	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:14.731981039 CET	443	49738	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:14.895715952 CET	443	49738	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:14.895795107 CET	443	49738	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:14.895857096 CET	49738	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:14.899174929 CET	49738	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:14.978322983 CET	49741	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:14.978360891 CET	443	49741	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:14.978435040 CET	49741	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:14.979018927 CET	49741	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:14.979031086 CET	443	49741	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:15.434217930 CET	443	49741	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:15.435791969 CET	49741	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:15.435806036 CET	443	49741	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:15.435856104 CET	49741	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:15.435863018 CET	443	49741	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:15.603918076 CET	443	49741	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:15.603997946 CET	443	49741	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:15.604049921 CET	49741	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:15.604679108 CET	49741	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:15.627151966 CET	49742	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:15.627207041 CET	443	49742	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:15.627278090 CET	49742	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:15.627588034 CET	49742	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:15.627603054 CET	443	49742	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:16.082184076 CET	443	49742	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:16.084254980 CET	49742	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:16.084274054 CET	443	49742	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:16.084332943 CET	49742	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:16.084342003 CET	443	49742	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:16.268987894 CET	443	49742	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:16.269077063 CET	443	49742	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:16.269315958 CET	49742	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:16.273210049 CET	49742	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:16.278827906 CET	49743	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:16.278863907 CET	443	49743	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:16.278959990 CET	49743	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:16.279175043 CET	49743	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:16.279185057 CET	443	49743	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:16.742346048 CET	443	49743	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:16.744735003 CET	49743	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:16.744756937 CET	443	49743	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:16.745220900 CET	49743	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:16.745225906 CET	443	49743	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:16.924019098 CET	443	49743	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:16.924079895 CET	443	49743	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:16.924268007 CET	49743	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:16.924863100 CET	49743	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:16.955297947 CET	49745	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:16.955328941 CET	443	49745	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:16.955425024 CET	49745	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:16.955694914 CET	49745	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:16.955702066 CET	443	49745	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:17.438096046 CET	443	49745	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:17.439773083 CET	49745	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:17.439789057 CET	443	49745	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:17.439860106 CET	49745	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:17.439865112 CET	443	49745	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:17.602577925 CET	443	49745	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:17.602684975 CET	443	49745	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:17.602741003 CET	49745	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:17.663661003 CET	49745	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:17.683643103 CET	49746	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:17.683684111 CET	443	49746	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:17.683764935 CET	49746	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:17.683983088 CET	49746	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:17.683995962 CET	443	49746	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:18.162655115 CET	443	49746	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:18.164649963 CET	49746	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:18.164674997 CET	443	49746	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:18.164726973 CET	49746	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:18.164732933 CET	443	49746	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:18.341500044 CET	443	49746	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:18.341617107 CET	443	49746	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:18.341675997 CET	49746	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:18.342108965 CET	49746	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:18.352135897 CET	49747	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:18.352178097 CET	443	49747	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:18.352242947 CET	49747	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:18.352462053 CET	49747	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:18.352471113 CET	443	49747	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:18.836499929 CET	443	49747	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:18.838200092 CET	49747	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:18.838221073 CET	443	49747	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:18.838284016 CET	49747	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:18.838293076 CET	443	49747	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:19.007755995 CET	443	49747	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:19.007890940 CET	443	49747	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:19.007965088 CET	49747	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:19.008583069 CET	49747	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:19.013816118 CET	49749	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:19.013829947 CET	443	49749	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:19.013914108 CET	49749	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:19.014138937 CET	49749	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:19.014149904 CET	443	49749	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:19.498594046 CET	443	49749	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:19.500305891 CET	49749	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:19.500315905 CET	443	49749	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:19.500421047 CET	49749	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:19.500425100 CET	443	49749	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:19.665390968 CET	443	49749	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:19.665527105 CET	443	49749	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:19.665579081 CET	49749	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:19.666034937 CET	49749	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:19.703030109 CET	49751	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:19.703063965 CET	443	49751	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:19.703134060 CET	49751	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:19.703411102 CET	49751	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:19.703423977 CET	443	49751	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:20.159816980 CET	443	49751	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:20.161587000 CET	49751	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:20.161607027 CET	443	49751	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:20.162995100 CET	49751	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:20.163000107 CET	443	49751	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:20.344460011 CET	443	49751	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:20.344538927 CET	443	49751	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:20.345330000 CET	49751	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:20.354118109 CET	49751	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:20.417304039 CET	49752	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:20.417373896 CET	443	49752	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:20.417480946 CET	49752	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:20.422451019 CET	49752	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:20.422466040 CET	443	49752	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:20.903327942 CET	443	49752	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:20.904932976 CET	49752	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:20.904952049 CET	443	49752	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:20.905040979 CET	49752	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:20.905045986 CET	443	49752	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:21.068877935 CET	443	49752	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:21.068963051 CET	443	49752	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:21.069013119 CET	49752	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:21.069906950 CET	49752	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:21.093386889 CET	49753	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:21.093413115 CET	443	49753	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:21.093475103 CET	49753	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:21.093791008 CET	49753	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:21.093808889 CET	443	49753	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:21.548361063 CET	443	49753	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:21.550345898 CET	49753	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:21.550359011 CET	443	49753	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:21.550414085 CET	49753	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:21.550417900 CET	443	49753	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:21.708856106 CET	443	49753	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:21.708934069 CET	443	49753	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:21.709012032 CET	49753	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:21.709470034 CET	49753	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:21.714565992 CET	49754	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:21.714593887 CET	443	49754	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:21.714706898 CET	49754	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:21.714983940 CET	49754	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:21.714998960 CET	443	49754	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:22.199126005 CET	443	49754	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:22.201381922 CET	49754	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:22.201402903 CET	443	49754	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:22.201478004 CET	49754	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:22.201482058 CET	443	49754	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:22.391297102 CET	443	49754	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:22.391370058 CET	443	49754	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:22.392021894 CET	49754	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:22.392023087 CET	49754	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:22.401349068 CET	49755	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:22.401367903 CET	443	49755	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:22.405936003 CET	49755	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:22.405936956 CET	49755	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:22.405956030 CET	443	49755	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:22.882806063 CET	443	49755	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:22.884322882 CET	49755	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:22.884341002 CET	443	49755	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:22.884452105 CET	49755	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:22.884455919 CET	443	49755	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:23.065768003 CET	443	49755	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:23.065839052 CET	443	49755	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:23.065946102 CET	49755	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:23.085917950 CET	49755	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:23.179207087 CET	49756	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:23.179291964 CET	443	49756	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:23.179378986 CET	49756	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:23.182380915 CET	49756	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:23.182419062 CET	443	49756	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:23.655860901 CET	443	49756	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:23.657557011 CET	49756	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:23.657587051 CET	443	49756	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:23.657660007 CET	49756	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:23.657671928 CET	443	49756	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:23.823924065 CET	443	49756	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:23.823990107 CET	443	49756	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:23.824141979 CET	49756	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:23.824748993 CET	49756	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:23.833937883 CET	49732	80	192.168.2.4	104.16.148.130
Jan 6, 2025 09:32:23.838728905 CET	80	49732	104.16.148.130	192.168.2.4
Jan 6, 2025 09:32:23.961266994 CET	80	49732	104.16.148.130	192.168.2.4
Jan 6, 2025 09:32:23.963093996 CET	49757	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:23.963118076 CET	443	49757	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:23.963186979 CET	49757	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:23.963438988 CET	49757	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:23.963447094 CET	443	49757	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:24.011590958 CET	49732	80	192.168.2.4	104.16.148.130
Jan 6, 2025 09:32:24.440221071 CET	443	49757	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:24.441749096 CET	49757	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:24.441761017 CET	443	49757	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:24.441832066 CET	49757	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:24.441837072 CET	443	49757	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:24.629606962 CET	443	49757	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:24.629679918 CET	443	49757	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:24.629734993 CET	49757	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:24.630278111 CET	49757	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:24.642226934 CET	49732	80	192.168.2.4	104.16.148.130
Jan 6, 2025 09:32:24.647202969 CET	80	49732	104.16.148.130	192.168.2.4
Jan 6, 2025 09:32:24.647264957 CET	49732	80	192.168.2.4	104.16.148.130
Jan 6, 2025 09:32:24.652667046 CET	49758	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:24.652750969 CET	443	49758	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:24.652837992 CET	49758	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:24.653321981 CET	49758	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:24.653357029 CET	443	49758	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:25.106117964 CET	443	49758	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:25.107893944 CET	49758	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:25.107950926 CET	443	49758	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:25.108113050 CET	49758	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:25.108143091 CET	443	49758	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:25.286566973 CET	443	49758	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:25.286640882 CET	443	49758	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:25.286783934 CET	49758	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:25.287270069 CET	49758	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:25.293451071 CET	49760	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:25.293489933 CET	443	49760	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:25.293692112 CET	49760	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:25.293853998 CET	49760	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:25.293868065 CET	443	49760	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:25.776932001 CET	443	49760	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:25.778669119 CET	49760	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:25.778692961 CET	443	49760	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:25.783396006 CET	49760	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:25.783402920 CET	443	49760	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:25.962842941 CET	443	49760	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:25.962939024 CET	443	49760	104.18.26.149	192.168.2.4
Jan 6, 2025 09:32:25.964942932 CET	49760	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:25.979274988 CET	49760	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:32:26.027348995 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.027430058 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.027517080 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.027760029 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.027792931 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.578166008 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.578241110 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.579925060 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.579946995 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.580190897 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.581478119 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.623339891 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.694833040 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.694883108 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.694917917 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.694931984 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.694966078 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.695010900 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.695020914 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.695035934 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.695082903 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.695086002 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.695097923 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.695144892 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.695158958 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.695557117 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.695585966 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.695612907 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.695626974 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.695672035 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.695683956 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.745984077 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.781683922 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.781846046 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.781877041 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.781900883 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.781905890 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.781918049 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.781949997 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.782140017 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.782198906 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.782216072 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.782269955 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.782300949 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.782319069 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.782334089 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.782387972 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.783021927 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.783075094 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.783124924 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.783138037 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.783200026 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.783241034 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.783248901 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.783263922 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.783329010 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.783858061 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.783951044 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.783983946 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.784004927 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.784018040 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.784065962 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.868571997 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.868745089 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.868773937 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.868803024 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.868808985 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.868818998 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.868853092 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.868905067 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.868953943 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.868969917 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.869144917 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.869190931 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.869204044 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.869787931 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.869844913 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.869858027 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.869924068 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.869971037 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.870024920 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.870037079 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.870090008 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.870611906 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.870671988 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.870810032 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.870872021 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.871570110 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.871634960 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.871706963 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.871767998 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.871922970 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.871983051 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.872447968 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.872510910 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.872704029 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.872762918 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.873317003 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.873380899 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.955799103 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.955878019 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.955914021 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.955972910 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.956073046 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.956129074 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.956291914 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.956346989 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.956698895 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.956753969 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.956832886 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.956887007 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.956909895 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.957200050 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.957274914 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.957328081 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.957384109 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.957617998 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.957670927 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.957789898 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.957851887 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.957876921 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.957933903 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.958096981 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.958157063 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.958499908 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.958564043 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.958755970 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.958821058 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.958980083 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.959012032 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.959032059 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.959045887 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.959076881 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.959103107 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.959439993 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.959502935 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.959630013 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.959687948 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.959827900 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.959887028 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.960031986 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.960084915 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.960369110 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.960433960 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.960525036 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.960586071 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:26.960747957 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:26.960807085 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.003251076 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.003344059 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.042599916 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.042731047 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.042774916 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.042795897 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.042845964 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.042983055 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.043145895 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.043190002 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.043201923 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.043232918 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.043411016 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.043447971 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.043474913 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.043513060 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.043796062 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.043834925 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.043874979 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.043889046 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.043935061 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.044729948 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.044749975 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.044778109 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.044790983 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.044835091 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.047286987 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.047310114 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.047332048 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.047785997 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.047831059 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.047847986 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.047914982 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.048563004 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.048592091 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.048605919 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.048619032 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.048654079 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.048654079 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.049201012 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.049218893 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.049288034 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.049288034 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.049303055 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.089900017 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.129645109 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.129652977 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.129681110 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.129705906 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.129725933 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.129743099 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.129782915 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.130340099 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.130369902 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.130382061 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.130399942 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.130424023 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.130451918 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.130451918 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.131006002 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.131025076 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.131089926 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.131089926 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.131108999 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.131287098 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.131535053 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.131548882 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.132406950 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.132437944 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.132447004 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.132462025 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.132494926 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.132515907 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.133374929 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.133388996 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.133415937 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.133430004 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.133470058 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.133470058 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.134341955 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.134358883 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.134442091 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.134442091 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.134457111 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.135237932 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.135251999 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.135337114 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.135338068 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.135358095 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.183471918 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.216643095 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.216650963 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.216682911 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.216695070 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.216718912 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.216718912 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.216746092 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.216770887 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.216770887 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.217180967 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.217199087 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.217226982 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.217262030 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.217276096 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.217308044 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.217340946 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.217915058 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.217928886 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.218003988 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.218015909 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.218044996 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.218105078 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.218584061 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.218597889 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.218693018 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.218707085 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.219363928 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.219455957 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.219470978 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.219541073 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.219541073 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.219556093 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.220230103 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.220247984 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.220288992 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.220288992 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.220303059 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.220339060 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.221131086 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.221143961 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.221225023 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.221225023 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.221240044 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.221302032 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.222083092 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.222095966 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.222343922 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.222357988 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.222429991 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.303673029 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.303693056 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.303798914 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.303819895 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.304225922 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.304246902 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.304286003 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.304286003 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.304300070 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.304336071 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.304600000 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.305474043 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.305489063 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.305550098 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.305571079 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.305571079 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.305586100 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.305624962 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.305766106 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.306412935 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.306427002 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.306622028 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.306634903 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.307260036 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.307279110 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.307351112 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.307369947 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.307394028 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.308156013 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.308176994 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.308243036 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.308243036 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.308259010 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.309118986 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.309139013 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.309186935 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.309199095 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.309246063 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.355381966 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.390708923 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.390717983 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.390750885 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.390763044 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.390794992 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.390810966 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.390857935 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.390917063 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.391479015 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.391485929 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.391514063 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.391571999 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.391846895 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.391859055 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.392273903 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.392296076 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.392338991 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.392354012 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.392389059 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.392455101 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.393095016 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.393107891 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.393191099 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.393191099 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.393204927 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.393366098 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.393852949 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.393867970 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.393917084 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.393951893 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.393965006 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.393986940 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.394015074 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.394052029 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.394136906 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.394869089 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.394891977 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.394958019 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.394958019 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.394977093 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.395828962 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.395848989 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.395941019 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.395941973 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.395955086 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.449106932 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.477699995 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.477708101 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.477741957 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.477749109 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.477778912 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.477822065 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.477838039 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.478290081 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.478319883 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.478331089 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.478342056 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.478360891 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.478375912 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.478415966 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.478511095 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.479213953 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.479231119 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.479288101 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.479300022 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.479351997 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.479387045 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.479752064 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.479768038 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.479850054 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.479850054 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.479863882 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.479970932 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.480716944 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.480731964 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.480778933 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.480806112 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.480806112 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.480818033 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.480839014 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.480873108 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.480911016 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.480911016 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.481749058 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.481762886 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.481837988 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.481851101 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.481889009 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.482701063 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.482721090 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.482753038 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.482764959 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.482814074 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.527373075 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.564659119 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.564666033 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.564697027 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.564724922 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.564752102 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.564762115 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.564829111 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.564829111 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.565303087 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.565318108 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.565460920 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.565468073 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.565694094 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.566170931 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.566185951 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.566237926 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.566245079 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.566273928 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.566339970 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.566637993 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.566653013 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.566744089 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.566751003 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.566819906 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.567511082 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.567526102 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.567768097 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.567780018 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.568135023 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.568480015 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.568494081 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.568548918 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.568583012 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.568600893 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.568619967 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.568654060 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.568654060 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.569439888 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.569468975 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.569521904 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.569535971 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.569581985 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.621041059 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.651729107 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.651736975 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.651772022 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.651782990 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.651814938 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.651838064 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.651878119 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.651988029 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.652323961 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.652331114 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.652358055 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.652403116 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.652415991 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.652462006 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.653156996 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.653227091 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.653261900 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.653330088 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.653330088 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.653346062 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.653844118 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.653856993 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.653937101 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.653937101 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.653953075 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.654786110 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.654803038 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.654839039 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.654850960 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.654881001 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.654881001 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.654898882 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.654936075 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.655287981 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.655843019 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.655859947 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.656761885 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.656816006 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.656831980 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.656879902 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.657450914 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.738639116 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.738656998 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.738928080 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.738944054 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.739171982 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.739417076 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.739432096 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.739644051 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.739656925 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.739759922 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.739892960 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.739908934 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.740032911 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.740046024 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.740150928 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.740881920 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.740896940 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.741065979 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.741079092 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.741188049 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.741755009 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.741770029 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.741821051 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.741859913 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.741861105 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.741878033 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.741914034 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.741914034 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.742790937 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.742805958 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.742921114 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.742922068 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.742937088 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.743624926 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.743643999 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.743721962 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.743721962 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.743737936 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.793013096 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.825725079 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.825732946 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.825766087 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.825797081 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.825807095 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.825823069 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.825881004 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.826030016 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.826317072 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.826330900 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.826525927 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.826539040 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.826642036 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.827121973 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.827135086 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.827267885 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.827280998 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.827380896 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.827462912 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.827483892 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.827653885 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.827682018 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.827792883 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.828237057 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.828250885 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.828407049 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.828419924 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.828532934 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.829152107 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.829166889 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.829252958 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.829252958 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.829283953 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.829417944 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.830077887 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.830092907 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.830234051 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.830245972 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.830343008 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.830960989 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.830976009 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.831149101 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.831161022 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.831271887 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.912867069 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.912883043 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.912970066 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.912988901 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.913125038 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.913496971 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.913517952 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.913597107 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.913598061 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.913611889 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.913765907 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.914233923 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.914247990 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.914345026 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.914345026 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.914359093 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.914452076 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.914678097 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.914694071 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.914777040 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.914777040 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.914789915 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.914971113 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.915318012 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.915333986 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.915478945 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.915492058 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.915571928 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.916032076 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.916049004 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.916130066 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.916130066 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.916143894 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.916264057 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.916979074 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.916992903 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.917118073 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.917130947 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.917243004 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.917913914 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.917928934 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.918077946 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.918090105 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.918184042 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:27.999787092 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:27.999805927 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.000116110 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.000132084 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.000391960 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.000411987 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.000428915 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.000524998 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.000524998 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.000539064 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.000665903 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.001271009 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.001290083 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.001372099 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.001372099 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.001385927 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.001564980 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.001624107 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.001640081 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.001763105 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.001775026 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.002096891 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.002530098 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.002543926 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.002660990 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.002675056 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.002788067 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.003465891 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.003482103 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.003648043 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.003674984 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.003864050 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.004396915 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.004411936 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.004465103 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.004501104 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.004515886 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.004564047 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.004641056 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.086715937 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.086744070 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.086793900 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.086821079 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.086869001 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.086901903 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.087270975 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.087287903 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.087352037 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.087352037 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.087368965 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.087487936 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.087893963 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.087908030 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.087969065 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.087985992 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.088015079 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.088150978 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.088550091 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.088565111 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.088629007 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.088643074 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.088697910 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.089308023 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.089323044 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.089375019 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.089387894 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.089417934 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.089463949 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.090074062 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.090105057 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.090147018 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.090157986 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.090202093 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.090241909 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.091006994 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.091023922 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.091077089 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.091089010 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.091120005 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.091140985 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.091882944 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.091897011 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.091960907 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.091972113 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.092005968 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.092025995 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.173612118 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.173629999 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.173707008 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.173724890 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.173777103 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.174408913 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.174424887 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.174499035 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.174511909 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.174561024 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.175234079 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.175247908 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.175297022 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.175308943 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.175357103 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.175357103 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.175796032 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.175811052 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.175874949 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.175888062 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.175942898 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.176579952 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.176604033 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.176649094 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.176665068 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.176691055 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.176753998 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.176774979 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.176819086 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.176831961 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.176857948 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.177735090 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.177747965 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.177799940 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.177819967 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.177861929 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.178307056 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.178554058 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.178569078 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.178637981 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.178649902 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.178698063 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.260737896 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.260755062 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.260814905 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.260834932 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.260859966 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.261322975 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.261341095 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.261394978 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.261409044 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.261461973 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.261758089 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.261770964 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.261843920 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.261843920 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.261857986 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.262303114 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.262630939 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.262650967 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.262717962 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.262732983 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.262803078 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.263305902 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.263326883 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.263369083 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.263394117 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.263417959 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.263906956 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.263925076 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.263964891 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.263978004 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.264008999 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.264796019 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.264796019 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.265096903 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.265110970 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.265157938 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.265170097 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.265201092 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.265316963 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.265717983 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.265731096 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.265783072 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.265795946 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.265851021 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.268560886 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.347728968 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.347748995 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.347855091 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.347872972 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.347927094 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.348231077 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.348252058 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.348319054 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.348331928 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.348382950 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.349054098 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.349070072 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.349132061 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.349145889 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.349191904 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.349520922 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.349535942 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.349611044 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.349622965 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.349682093 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.350229979 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.350244045 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.350320101 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.350332975 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.350380898 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.351141930 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.351155996 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.351221085 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.351233006 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.351279974 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.352061987 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.352077007 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.352125883 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.352140903 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.352154016 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.352186918 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.352225065 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.434663057 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.434693098 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.434755087 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.434772968 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.434804916 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.435286045 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.435305119 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.435348034 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.435362101 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.435391903 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.436193943 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.436212063 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.436258078 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.436273098 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.436300039 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.436873913 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.436892033 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.436923027 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.436932087 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.436944962 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.436988115 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.437014103 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.437791109 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.437812090 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.437870026 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.437896967 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.438517094 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.438549042 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.438590050 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.438606977 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.438631058 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.439507008 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.439531088 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.439568996 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.439582109 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.439615965 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.442287922 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.521576881 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.521595001 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.521662951 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.521687031 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.521717072 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.522356987 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.522375107 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.522413015 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.522425890 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.522458076 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.522933006 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.522945881 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.523015976 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.523032904 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.523080111 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.523731947 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.523746014 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.523792982 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.523804903 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.523830891 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.523880959 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.523900032 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.523947954 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.523958921 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.523987055 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.524744987 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.524760008 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.524802923 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.524816036 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.524842978 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.525727987 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.525747061 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.525785923 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.525798082 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.525827885 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.525846958 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.526539087 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.526551962 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.526601076 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.526618004 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.526643038 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.526772976 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.526808977 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.609920025 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.609937906 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.610038996 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.610054016 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.610107899 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.610604048 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.610632896 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.610688925 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.610701084 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.610728025 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.611347914 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.611366987 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.611407042 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.611424923 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.611449003 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.611488104 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.612234116 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.612246990 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.612296104 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.612302065 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.612313986 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.612341881 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.612380981 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.612395048 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.612423897 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.612443924 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.613219976 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.613234043 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.613286972 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.613300085 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.613349915 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.614379883 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.614394903 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.614443064 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.614458084 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.614470005 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.614486933 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.614504099 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.614542007 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.697048903 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.697066069 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.697144032 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.697159052 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.697226048 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.697734118 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.697748899 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.697803020 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.697817087 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.697866917 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.698318005 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.698360920 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.698383093 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.698395014 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.698424101 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.698442936 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.699611902 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.699634075 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.699680090 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.699693918 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.699722052 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.699738979 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.700283051 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.700299025 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.700362921 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.700381994 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.700438023 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.700822115 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.700836897 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.700896978 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.700908899 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.700964928 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.701515913 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.701530933 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.701584101 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.701596975 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.701622009 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.702167034 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.702186108 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.702219963 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.702233076 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.702264071 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.702308893 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.729201078 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.784044981 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.784070015 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.784141064 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.784178972 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.784240007 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.784554005 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.784569979 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.784626961 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.784641027 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.784691095 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.785418987 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.785435915 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.785485029 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.785504103 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.785533905 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.786314011 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.786643982 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.786659956 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.786717892 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.786731005 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.786780119 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.787326097 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.787339926 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.787390947 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.787401915 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.787431955 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.788000107 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.788021088 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.788032055 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.788048029 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.788105011 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.788105011 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.788120031 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.788146019 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.788163900 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.788216114 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.788326979 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.788733006 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.788775921 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.788798094 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.788810015 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.788836956 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.788853884 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.789541960 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.789556026 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.789624929 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.789635897 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.789664984 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.789788961 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.871066093 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.871083021 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.871151924 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.871189117 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.871377945 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.871607065 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.871620893 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.871689081 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.871704102 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.871759892 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.872262001 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.872277975 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.872335911 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.872348070 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.872399092 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.874506950 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.874526978 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.874614000 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.874627113 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.874725103 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.875344038 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.875365019 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.875420094 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.875432014 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.875461102 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.875513077 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.876028061 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.876043081 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.876101971 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.876115084 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.876168013 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.876689911 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.876703978 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.876765966 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.876771927 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.876782894 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.876817942 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.876847029 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.876861095 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.876904964 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.876904964 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.958039999 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.958055973 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.958100080 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.958134890 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.958173990 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.958234072 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.958677053 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.958692074 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.958744049 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.958760023 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.958786964 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.958847046 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.962490082 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.962505102 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.962555885 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.962568998 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.962601900 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.962631941 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.962650061 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.962703943 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.962703943 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.962719917 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.962790012 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.963612080 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.963628054 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.963700056 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.963717937 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.963743925 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.963874102 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.963948965 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.963963985 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.964020967 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.964034081 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.964081049 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.964101076 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.964107037 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.964118004 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.964145899 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.964163065 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.964449883 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.964469910 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.964530945 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:28.964557886 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:28.964612961 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.045466900 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.045507908 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.045547962 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.045571089 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.045619965 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.045803070 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.045871019 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.045885086 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.045931101 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.045963049 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.045988083 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.046164989 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.047373056 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.047389030 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.047475100 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.047488928 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.047544003 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.049195051 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.049216032 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.049284935 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.049298048 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.049325943 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.049629927 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.049650908 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.049691916 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.049705029 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.049753904 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.050321102 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.050580978 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.050594091 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.050649881 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.050662994 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.050714016 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.051393032 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.051414013 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.051472902 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.051486969 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.051554918 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.051594973 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.051609993 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.051667929 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.051683903 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.051708937 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.051991940 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.052030087 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.132080078 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.132096052 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.132162094 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.132188082 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.132215977 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.132237911 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.132662058 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.132677078 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.132749081 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.132762909 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.132857084 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.133301020 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.133318901 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.133368015 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.133378983 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.133404970 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.133635044 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.135370016 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.135385036 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.135447979 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.135459900 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.135514021 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.135514021 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.135966063 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.135991096 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.136048079 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.136060953 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.136113882 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.136646986 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.136666059 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.136719942 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.136733055 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.136866093 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.137566090 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.137579918 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.137628078 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.137639999 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.137651920 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.137680054 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.137684107 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.137684107 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.137705088 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.137731075 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.137761116 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.137784958 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.218967915 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.218988895 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.219062090 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.219078064 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.219213009 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.219711065 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.219727039 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.219777107 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.219789982 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.219815969 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.219851017 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.220427036 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.220441103 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.220493078 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.220504999 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.220545053 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.220561028 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.222395897 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.222410917 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.222461939 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.222491026 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.222546101 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.223021984 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.223036051 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.223098040 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.223110914 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.223162889 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.223474026 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.223494053 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.223596096 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.223608971 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.223789930 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.224108934 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.224123955 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.224175930 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.224186897 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.224214077 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.224247932 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.225033998 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.225048065 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.225100040 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.225111961 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.225138903 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.225331068 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.306058884 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.306073904 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.306160927 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.306174994 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.306226015 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.306688070 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.306701899 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.306757927 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.306770086 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.306796074 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.307430983 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.307451010 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.307497025 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.307512999 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.307537079 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.308566093 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.309326887 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.309341908 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.309401035 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.309412003 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.309456110 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.309940100 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.309957027 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.310004950 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.310022116 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.310046911 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.310334921 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.310401917 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.310415983 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.310475111 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.310679913 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.310694933 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.310748100 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.310760021 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.310786009 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.311326027 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.311460972 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.311479092 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.311531067 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.311542988 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.311568022 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.312027931 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.312046051 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.312150002 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.312163115 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.312216043 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.312236071 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.400834084 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.400856018 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.400927067 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.400943041 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.400989056 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.401834011 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.401849985 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.401896954 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.401904106 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.401932955 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.401957035 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.402510881 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.402524948 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.402585030 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.402591944 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.402605057 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.402626038 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.402637005 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.402642012 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.402667046 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.402702093 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.403516054 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.403532982 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.403589010 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.403594971 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.403636932 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.404326916 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.404342890 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.404400110 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.404406071 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.404448986 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.405180931 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.405195951 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.405250072 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.405251980 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.405261040 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.405282974 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.405301094 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.405307055 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.405334949 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.405344009 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.487895966 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.487910986 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.487970114 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.487978935 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.488022089 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.488439083 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.488452911 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.488508940 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.488517046 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.488559961 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.489466906 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.489480972 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.489525080 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.489532948 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.489573002 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.490164042 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.490179062 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.490233898 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.490236044 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.490243912 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.490266085 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.490286112 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.490293980 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.490323067 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.490345001 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.491183996 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.491198063 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.491255045 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.491261959 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.492078066 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.492095947 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.492134094 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.492140055 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.492151022 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.492151976 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.492166042 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.492183924 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.492189884 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.492221117 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.492245913 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.574897051 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.574913025 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.575026035 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.575037003 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.575083017 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.575557947 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.575571060 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.575622082 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.575628996 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.575670958 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.576256990 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.576271057 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.576324940 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.576333046 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.576381922 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.576921940 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.576936007 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.576992989 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.576999903 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.577042103 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.577373981 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.577389002 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.577434063 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.577440023 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.577466965 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.577477932 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.578318119 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.578331947 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.578386068 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.578392982 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.578432083 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.579252958 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.579267025 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.579323053 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.579324961 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.579333067 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.579350948 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.579381943 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.579411030 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.579416037 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.579457998 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.661825895 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.661839008 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.662013054 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.662020922 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.662075043 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.662533045 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.662549973 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.662621975 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.662628889 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.662704945 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.663397074 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.663410902 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.663470030 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.663476944 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.663523912 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.664120913 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.664135933 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.664194107 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.664196014 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.664203882 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.664238930 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.664258003 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.664266109 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.664297104 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.664313078 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.665117979 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.665131092 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.665194988 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.665201902 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.665250063 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.666058064 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.666073084 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.666119099 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.666131973 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.666136980 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.666152954 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.666161060 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.666183949 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.666188955 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.666209936 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.666238070 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.748946905 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.748966932 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.749063015 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.749073029 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.749125004 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.749530077 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.749547005 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.749638081 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.749644995 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.749697924 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.750089884 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.750106096 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.750170946 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.750178099 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.750228882 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.750881910 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.750897884 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.750957012 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.750963926 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.751018047 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.751724958 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.751739979 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.751782894 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.751801014 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.751808882 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.751842976 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.751878023 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.752660036 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.752671957 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.752762079 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.752769947 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.753456116 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.753487110 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.753535986 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.753542900 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.753559113 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.808525085 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.835757017 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.835766077 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.835800886 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.835836887 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.835865974 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.835876942 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.835910082 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.835928917 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.836294889 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.836302042 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.836334944 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.836364031 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.836370945 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.836401939 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.836420059 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.837160110 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.837173939 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.837240934 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.837248087 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.837296963 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.837635994 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.837650061 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.837714911 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.837721109 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.837791920 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.838637114 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.838658094 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.838706970 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.838726997 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.838732958 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.838766098 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.838802099 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.839550018 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.839561939 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.839633942 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.839641094 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.840373993 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.840390921 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.840439081 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.840445995 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.840464115 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.886605024 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.922744989 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.922753096 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.922786951 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.922812939 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.922825098 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.922836065 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.922867060 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.922883987 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.923369884 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.923384905 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.923449993 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.923456907 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.923501968 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.924189091 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.924201965 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.924248934 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.924258947 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.924269915 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.924302101 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.924319983 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.925225973 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.925242901 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.925290108 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.925297022 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.925328970 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.926075935 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.926096916 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.926131010 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.926137924 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.926166058 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.926899910 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.926911116 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.926963091 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.926970005 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.926997900 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.927016020 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.927046061 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.927052975 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:29.927078009 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:29.980351925 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.009819984 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.009831905 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.009861946 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.009872913 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.009901047 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.009912014 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.009943008 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.009954929 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.010441065 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.010449886 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.010473967 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.010507107 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.010518074 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.010530949 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.010567904 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.011089087 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.011110067 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.011161089 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.011168003 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.011207104 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.011744976 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.011765957 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.011821985 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.011828899 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.011869907 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.012332916 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.012351990 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.012401104 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.012408018 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.012422085 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.012449026 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.013268948 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.013287067 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.013330936 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.013345957 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.013358116 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.013365030 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.013400078 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.013430119 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.014256001 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.014270067 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.014326096 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.014333010 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.058485031 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.096616983 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.096626043 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.096672058 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.096698046 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.096710920 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.096719980 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.096755981 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.096767902 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.097330093 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.097352028 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.097408056 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.097414970 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.097459078 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.098123074 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.098150969 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.098191977 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.098198891 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.098232031 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.098251104 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.098716974 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.098732948 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.098792076 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.098799944 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.098843098 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.099694967 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.099714041 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.099756002 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.099769115 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.099780083 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.099807024 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.099841118 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.100661993 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.100676060 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.100725889 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.100733042 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.101435900 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.101457119 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.101492882 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.101500988 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.101515055 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.152266979 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.183762074 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.183768988 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.183794975 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.183804035 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.183840036 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.183849096 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.183882952 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.183897972 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.184236050 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.184242964 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.184271097 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.184310913 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.184319973 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.184346914 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.184367895 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.184905052 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.184920073 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.184993029 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.184999943 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.185049057 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.185972929 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.185992956 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.186053038 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.186059952 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.186109066 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.186618090 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.186631918 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.186678886 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.186686993 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.186693907 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.186713934 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.186744928 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.186753035 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.186767101 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.186800003 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.187520027 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.187550068 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.187589884 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.187596083 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.187624931 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.187638998 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.188366890 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.188380957 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.188442945 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.188450098 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.188497066 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.270664930 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.270677090 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.270864010 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.270870924 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.270927906 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.271523952 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.271538019 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.271605015 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.271611929 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.271657944 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.272267103 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.272281885 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.272329092 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.272345066 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.272351027 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.272367954 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.272382975 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.272418976 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.272423983 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.272469044 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.273644924 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.273660898 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.273716927 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.273718119 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.273727894 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.273752928 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.273786068 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.273793936 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.273808002 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.273840904 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.274645090 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.274657965 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.274714947 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.274722099 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.274766922 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.275451899 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.275466919 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.275531054 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.275536060 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.275583982 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.357868910 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.357884884 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.357985973 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.357995987 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.358046055 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.358383894 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.358397961 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.358465910 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.358472109 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.358520031 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.359282017 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.359297037 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.359357119 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.359364033 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.359411955 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.360045910 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.360060930 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.360110044 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.360121012 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.360131979 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.360168934 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.360203981 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.361023903 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.361037970 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.361119032 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.361125946 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.361954927 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.361974001 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.362025023 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.362032890 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.362683058 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.362694979 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.362754107 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.362762928 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.417889118 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.444868088 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.444875002 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.444911957 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.444928885 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.444952011 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.444964886 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.444983959 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.445018053 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.445316076 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.445322990 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.445353985 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.445398092 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.445406914 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.445422888 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.445455074 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.446362019 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.446376085 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.446448088 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.446455002 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.446513891 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.446873903 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.446887970 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.446954966 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.446962118 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.447006941 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.447798014 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.447813988 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.447863102 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.447870016 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.447875977 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.447904110 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.447932005 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.447940111 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.447956085 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.447985888 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.448759079 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.448774099 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.448837996 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.448843956 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.448888063 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.449553967 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.449568987 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.449623108 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.449630022 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.449657917 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.449676037 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.531953096 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.531969070 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.532063961 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.532075882 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.532150030 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.532550097 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.532563925 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.532629013 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.532636881 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.532684088 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.533205032 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.533220053 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.533286095 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.533292055 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.533337116 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.533617973 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.533634901 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.533698082 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.533704996 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.533749104 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.534383059 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.534399033 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.534468889 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.534481049 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.534538984 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.535322905 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.535340071 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.535403013 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.535408974 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.535455942 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.536202908 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.536217928 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.536281109 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.536287069 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.536329985 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.618232965 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.618247986 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.618316889 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.618333101 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.618386030 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.618752956 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.618768930 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.618825912 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.618839025 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.618889093 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.619462013 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.619474888 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.619529009 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.619541883 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.619590998 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.620357990 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.620373011 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.620421886 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.620434046 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.620482922 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.621143103 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.621156931 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.621206045 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.621217966 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.621234894 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.621256113 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.621267080 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.621284962 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.621320009 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.621320009 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.621345043 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.622143984 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.622158051 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.622209072 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.622221947 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.622268915 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.623145103 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.623159885 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.623203993 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.623215914 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.623260021 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.623308897 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.705159903 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.705174923 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.705260992 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.705277920 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.705339909 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.705807924 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.705822945 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.705904961 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.705919027 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.705976963 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.706497908 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.706513882 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.706576109 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.706588984 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.706648111 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.706789970 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.706804037 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.706862926 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.706876040 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.706907034 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.706958055 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.707665920 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.707679033 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.707736969 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.707750082 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.707802057 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.708417892 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.708432913 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.708494902 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.708508015 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.708563089 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.709081888 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.709096909 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.709156990 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.709168911 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.709216118 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.710001945 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.710016012 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.710077047 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.710089922 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.710149050 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.792313099 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.792329073 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.792418957 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.792439938 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.792665958 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.792819023 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.792831898 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.792910099 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.792922974 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.792978048 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.793524027 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.793539047 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.793601036 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.793613911 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.793663979 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.794487000 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.794501066 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.794564962 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.794578075 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.794626951 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.795222044 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.795237064 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.795306921 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.795332909 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.795350075 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.795372009 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.795384884 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.795396090 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.795427084 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.795447111 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.795466900 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.796211958 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.796225071 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.796289921 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.796303034 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.796355009 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.797143936 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.797158003 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.797238111 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.797250032 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.797317028 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.879138947 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.879153967 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.879216909 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.879230976 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.879273891 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.879295111 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.879856110 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.879870892 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.879942894 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.879955053 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.880013943 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.880238056 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.880253077 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.880316973 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.880327940 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.880356073 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.880429029 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.881122112 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.881135941 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.881180048 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.881191969 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.881222963 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.881242990 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.881844044 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.881859064 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.881933928 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.881947041 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.882005930 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.882674932 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.882690907 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.882765055 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.882776976 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.882795095 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.882818937 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.882867098 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.882884979 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.882913113 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.882937908 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.883769989 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.883784056 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.883865118 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.883877993 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.883935928 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.966877937 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.966892958 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.967089891 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.967128038 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.967199087 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.967886925 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.967901945 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.967968941 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.967982054 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.968041897 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.968430042 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.968455076 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.968504906 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.968518019 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.968545914 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.968600035 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.969094992 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.969109058 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.969168901 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.969182014 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.969237089 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.970411062 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.970424891 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.970489979 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.970501900 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.970556021 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.970565081 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.970576048 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.970602036 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.970624924 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.970649958 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.970659971 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.970743895 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.971637964 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.971657038 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.971714973 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.971726894 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.971775055 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.972507954 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.972522020 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.972579956 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:30.972592115 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:30.972651958 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.054220915 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.054234028 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.054502964 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.054570913 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.054660082 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.054913998 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.054928064 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.055002928 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.055017948 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.055075884 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.055813074 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.055828094 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.055900097 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.055912018 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.055968046 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.056230068 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.056245089 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.056312084 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.056324005 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.056390047 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.057322979 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.057338953 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.057409048 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.057420969 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.057475090 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.057823896 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.057837963 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.057904959 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.057917118 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.057976961 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.058754921 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.058783054 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.058818102 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.058830976 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.058864117 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.058887005 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.059622049 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.059634924 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.059715986 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.059726954 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.059787989 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.140868902 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.140893936 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.140997887 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.141066074 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.141108990 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.141130924 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.141422987 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.141438961 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.141508102 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.141522884 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.141577959 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.141858101 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.141874075 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.141936064 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.141947985 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.141999960 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.142445087 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.142467022 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.142523050 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.142535925 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.142589092 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.143100023 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.143115997 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.143165112 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.143178940 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.143297911 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.144112110 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.144129038 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.144186020 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.144196033 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.144207001 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.144246101 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.144284964 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.145109892 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.145124912 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.145174026 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.145184994 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.145211935 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.199129105 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.227359056 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.227366924 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.227404118 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.227441072 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.227442026 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.227468967 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.227494955 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.227520943 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.228456974 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.228471041 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.228655100 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.228672028 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.228738070 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.229022026 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.229036093 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.229096889 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.229110956 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.229163885 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.229813099 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.229830027 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.229887009 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.229898930 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.229948997 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.230581999 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.230597019 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.230645895 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.230665922 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.230679989 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.230716944 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.230751991 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.231615067 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.231628895 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.231689930 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.231702089 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.232311010 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.232328892 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.232367039 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.232383966 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.232408047 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.277292967 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.314394951 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.314408064 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.314444065 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.314466953 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.314541101 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.314541101 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.314567089 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.314640045 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.315444946 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.315458059 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.315526009 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.315546036 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.315599918 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.315999985 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.316014051 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.316075087 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.316088915 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.316143036 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.316849947 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.316864014 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.316941977 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.316941977 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.316956997 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.317011118 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.317337036 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.317352057 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.317414045 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.317426920 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.317487001 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.318278074 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.318291903 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.318341970 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.318347931 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.318360090 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.318382978 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.318403006 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.318429947 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.318440914 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.318495035 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.319257021 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.319272041 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.319344044 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.319356918 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.319405079 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.401396036 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.401410103 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.401599884 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.401660919 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.401731014 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.402407885 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.402420998 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.402484894 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.402498960 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.402554035 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.402944088 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.402957916 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.403023005 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.403036118 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.403085947 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.403943062 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.403956890 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.404014111 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.404016018 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.404026985 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.404053926 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.404078007 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.404092073 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.404124022 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.404145956 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.404844046 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.404856920 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.404915094 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.404927969 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.404997110 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.405925989 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.405941010 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.405994892 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.406007051 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.406024933 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.406059980 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.406060934 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.406092882 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.406105042 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.406140089 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.406160116 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.488368034 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.488379955 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.488584995 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.488606930 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.488670111 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.489388943 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.489404917 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.489576101 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.489589930 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.489649057 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.489850998 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.489866972 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.489939928 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.489955902 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.490010023 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.490617037 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.490633011 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.490699053 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.490711927 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.490763903 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.491466045 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.491481066 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.491544962 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.491558075 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.491605043 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.491923094 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.491935968 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.491993904 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.492007017 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.492060900 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.492821932 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.492835999 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.492887974 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.492902040 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.492916107 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.492948055 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.492981911 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.575494051 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.575509071 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.575700045 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.575721025 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.575784922 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.576200008 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.576214075 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.576283932 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.576297998 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.576345921 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.576838017 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.576853037 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.576921940 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.576934099 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.576986074 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.577728987 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.577742100 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.577805042 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.577816963 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.577867031 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.578304052 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.578318119 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.578376055 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.578388929 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.578438997 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.579118013 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.579133034 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.579188108 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.579195023 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.579207897 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.579231024 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.579255104 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.579293966 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.579304934 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.579355955 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.580157995 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.580171108 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.580240011 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.580254078 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.580303907 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.662434101 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.662448883 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.662643909 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.662658930 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.662724018 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.663065910 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.663080931 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.663155079 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.663170099 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.663225889 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.663717985 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.663765907 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.663795948 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.663806915 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.663839102 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.663894892 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.664308071 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.664323092 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.664390087 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.664402008 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.664457083 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.665041924 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.665062904 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.665117979 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.665131092 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.665184021 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.665680885 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.665693998 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.665755033 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.665767908 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.665821075 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.666414022 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.666429043 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.666490078 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.666502953 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.666554928 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.667305946 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.667325020 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.667367935 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.667380095 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.667404890 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.667428970 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.749443054 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.749458075 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.749516964 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.749535084 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.749562979 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.749599934 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.750068903 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.750083923 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.750145912 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.750159025 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.750206947 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.750897884 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.750917912 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.750962019 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.750972986 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.750998974 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.751025915 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.751220942 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.751236916 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.751295090 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.751307964 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.751358032 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.751923084 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.751939058 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.751997948 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.752011061 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.752063990 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.752742052 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.752757072 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.752827883 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.752839088 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.752888918 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.753469944 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.753484011 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.753551960 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.753563881 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.753616095 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.754295111 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.754308939 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.754375935 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.754391909 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.754419088 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.754442930 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.836441994 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.836457968 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.836540937 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.836548090 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.836595058 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.837110996 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.837126970 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.837191105 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.837198019 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.837243080 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.837657928 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.837672949 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.837735891 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.837742090 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.837810993 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.838706970 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.838721037 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.838779926 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.838785887 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.838834047 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.839230061 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.839245081 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.839307070 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.839320898 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.839375973 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.840029001 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.840044022 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.840087891 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.840100050 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.840110064 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.840141058 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.840186119 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.840987921 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.841001987 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.841058969 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.841064930 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.886609077 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.923494101 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.923502922 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.923537016 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.923553944 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.923571110 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.923579931 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.923620939 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.923640013 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.924034119 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.924047947 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.924099922 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.924108028 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.924134016 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.924150944 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.924818039 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.924833059 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.924890041 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.924896002 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.924942970 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.925131083 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.925162077 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.925192118 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.925198078 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.925225019 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.925239086 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.925899982 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.925914049 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.925956964 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.925962925 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.925992012 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.926009893 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.926767111 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.926780939 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.926824093 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.926831007 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.926877975 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.927577019 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.927592039 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.927650928 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.927658081 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.927705050 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.928409100 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.928423882 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.928472996 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.928478956 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:31.928505898 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:31.928524017 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.010588884 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.010602951 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.010790110 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.010799885 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.010858059 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.011523008 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.011538029 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.011601925 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.011607885 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.011639118 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.011657953 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.012212038 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.012226105 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.012289047 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.012295961 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.012342930 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.012749910 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.012763023 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.012825966 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.012830973 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.012873888 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.013622046 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.013636112 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.013698101 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.013705015 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.013751984 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.014298916 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.014313936 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.014369011 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.014375925 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.014422894 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.015146971 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.015161991 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.015221119 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.015227079 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.015273094 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.015294075 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.015309095 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.015369892 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.015377045 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.015420914 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.099062920 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.099076986 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.099169016 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.099175930 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.099220037 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.099796057 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.099809885 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.099877119 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.099884033 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.099932909 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.100347996 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.100363016 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.100418091 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.100425005 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.100466967 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.100471020 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.100477934 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.100507975 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.100531101 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.100538015 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.100564957 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.100589991 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.100616932 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.100630045 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.100692034 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.100698948 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.100745916 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.101417065 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.101430893 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.101495028 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.101501942 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.101552963 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.101586103 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.101598024 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.101645947 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.101653099 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.101684093 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.101697922 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.101753950 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.101768017 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.101838112 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:32.101844072 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:32.101897955 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.166776896 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.166785955 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.166845083 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.166898012 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.166918039 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.166955948 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.166971922 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.167560101 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.167574883 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.167638063 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.167645931 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.167687893 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.168256044 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.168281078 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.168323994 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.168338060 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.168345928 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.168378115 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.168406963 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.169275999 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.169287920 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.169357061 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.169363976 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.170202971 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.170222044 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.170269012 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.170274973 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.170284986 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.170296907 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.170306921 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.170347929 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.170355082 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.171195030 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.171211958 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.171272039 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.171279907 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.172096968 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.172110081 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.172173023 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.172183037 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.172976017 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.172991991 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.173037052 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.173043966 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.173074007 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.173660994 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.173679113 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.173721075 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.173727989 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.173738003 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.173753023 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.173754930 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.173785925 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.173793077 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.173820019 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.174654961 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.174668074 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.174732924 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.174740076 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.175369978 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.175389051 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.175425053 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.175435066 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.175446987 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.175936937 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.175951004 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.176002979 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.176004887 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.176014900 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.176032066 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.176059008 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.176067114 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.176089048 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.176114082 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.176888943 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.176903009 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.176965952 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.176974058 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.177016973 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.177571058 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.177587032 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.177643061 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.177649021 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.177695036 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.177934885 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.177949905 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.177997112 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.178004026 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.178020954 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.178045988 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.178770065 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.178783894 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.178841114 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.178844929 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.178850889 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.178889990 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.178903103 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.178910017 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.178942919 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.178953886 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.179755926 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.179776907 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.179820061 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.179826975 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.179856062 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.179872990 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.179995060 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.180008888 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.180068016 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.180075884 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.180120945 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.180885077 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.180898905 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.180946112 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.180958033 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.180965900 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.180998087 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.181025982 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.181646109 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.181660891 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.181720972 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.181727886 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.182492971 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.182516098 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.182562113 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.182566881 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.182579994 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.182585001 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.182617903 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.182643890 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.182651043 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.182682037 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.183406115 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.183423996 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.183465004 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.183473110 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.183521986 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.183574915 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.183588028 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.183640957 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.183655977 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.183676004 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.184403896 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.184473038 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.184489965 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.184549093 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.184561014 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.184567928 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.184595108 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.184621096 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.185398102 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.185411930 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.185458899 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.185463905 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.185475111 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.185498953 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.185499907 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.185518980 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.185523987 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.185538054 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.185563087 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.185587883 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.186347961 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.186359882 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.186410904 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.186418056 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.186435938 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.186453104 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.186475039 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.186482906 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.186496019 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.186531067 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.186548948 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.187292099 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.187304974 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.187355995 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.187365055 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.187374115 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.187402010 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.187429905 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.188170910 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.188183069 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.188240051 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.188246012 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.188271999 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.188277006 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.188288927 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.188323975 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.188330889 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.188354969 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.189022064 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.189034939 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.189086914 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.189095020 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.189120054 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.189198971 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.189219952 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.189249992 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.189259052 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.189271927 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.190053940 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.190064907 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.190123081 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.190131903 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.190202951 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.190220118 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.190259933 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.190265894 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.190279961 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.190969944 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.190980911 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.191020012 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.191039085 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.191046953 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.191080093 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.191113949 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.191158056 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.191171885 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.191246986 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.191253901 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.191294909 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.191994905 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.192009926 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.192068100 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.192075014 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.192122936 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.192486048 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.192497969 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.192549944 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.192555904 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.192600012 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.192656040 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.192668915 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.192708015 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.192708969 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.192718029 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.192729950 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.192737103 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.192763090 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.192770004 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.192783117 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.192815065 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.193474054 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.193485975 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.193542004 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.193550110 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.193598986 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.193918943 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.193932056 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.193984985 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.193990946 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.194036007 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.194088936 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.194102049 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.194154024 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.194168091 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.194211960 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.194942951 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.194955111 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.194983959 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.194999933 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.195004940 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.195038080 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.195069075 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.195396900 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.195409060 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.195457935 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.195462942 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.195476055 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.195599079 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.195615053 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.195648909 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.195655107 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.195683002 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.196372032 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.196391106 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.196422100 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.196429014 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.196454048 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.196619034 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.196635008 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.196672916 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.196680069 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.196703911 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.196851969 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.196887016 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.196911097 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.196917057 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.196938992 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.196954012 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.196970940 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.197002888 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.197014093 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.197025061 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.197751045 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.197768927 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.197804928 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.197812080 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.197829962 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.198041916 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.198057890 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.198095083 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.198101044 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.198134899 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.198221922 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.198232889 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.198288918 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.198296070 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.198345900 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.198363066 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.198395014 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.198401928 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.198417902 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.199189901 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.199201107 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.199249029 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.199255943 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.199274063 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.199479103 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.199495077 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.199531078 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.199537992 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.199551105 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.199654102 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.199665070 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.199718952 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.199727058 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.199738979 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.199798107 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.199815035 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.199841976 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.199847937 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.199868917 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.200510025 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.200520992 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.200578928 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.200587034 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.200618029 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.200886965 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.200902939 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.200939894 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.200947046 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.200962067 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.201045990 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.201057911 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.201121092 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.201128960 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.201703072 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.201720953 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.201769114 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.201776028 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.201802015 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.201936960 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.201951027 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.201982021 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.201987982 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.202008963 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.202191114 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.202219009 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.202249050 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.202255011 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.202270985 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.202326059 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.202347040 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.202378035 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.202385902 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.202399015 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.202795029 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.202915907 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.202939987 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.202975035 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.202980995 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.202996016 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.203186989 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.203207016 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.203236103 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.203243017 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.203257084 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.203433037 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.203444958 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.203480005 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.203485966 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.203500032 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.203561068 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.203577042 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.203608990 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.203615904 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.203632116 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.204193115 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.204204082 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.204266071 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.204273939 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.204288006 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.204351902 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.204374075 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.204401970 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.204410076 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.204423904 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.204550028 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.204561949 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.204611063 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.204617977 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.204643011 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.204730988 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.204747915 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.204776049 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.204782963 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.204796076 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.205547094 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.205558062 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.205607891 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.205615997 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.205635071 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.205699921 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.205715895 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.205745935 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.205751896 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.205775976 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.205792904 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.205806017 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.205847025 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.205853939 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.205873013 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.227303028 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.227332115 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.227364063 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.227372885 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.227385998 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.227607012 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.227617979 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.227647066 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.227654934 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.227680922 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.227891922 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.227916002 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.227946997 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.227952957 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.227963924 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.228265047 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.228276968 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.228313923 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.228321075 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.228332996 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.228621960 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.228640079 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.228667021 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.228672981 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.228684902 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.230216026 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.230228901 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.230267048 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.230277061 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.230295897 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.230675936 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.230693102 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.230726957 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.230735064 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.230748892 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.230972052 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.230983019 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.231018066 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.231024981 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.231038094 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.277261972 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.314279079 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.314286947 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.314318895 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.314354897 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.314353943 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.314367056 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.314384937 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.314416885 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.314589024 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.314603090 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.314646006 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.314651966 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.314665079 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.314694881 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.315007925 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.315021038 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.315073967 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.315079927 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.315119028 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.315135956 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.315258026 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.315270901 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.315326929 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.315332890 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.315372944 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.315633059 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.315645933 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.315705061 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.315711975 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.315752983 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.317233086 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.317245960 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.317290068 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.317297935 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.317339897 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.317565918 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.317579985 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.317624092 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.317630053 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.317651033 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.317667961 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.317929983 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.317943096 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.317990065 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.317995071 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.318011999 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.318041086 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.353769064 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.401165962 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.401180983 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.401253939 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.401269913 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.401309013 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.401541948 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.401560068 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.401602030 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.401607990 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.401623964 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.401644945 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.401837111 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.401850939 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.401890039 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.401896000 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.401910067 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.401936054 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.402275085 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.402298927 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.402329922 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.402343988 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.402355909 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.402384043 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.402450085 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.402462959 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.402499914 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.402507067 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.402518034 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.402539968 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.404144049 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.404158115 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.404201984 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.404207945 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.404220104 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.404249907 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.404603004 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.404616117 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.404658079 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.404664040 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.404675961 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.404716015 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.404877901 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.404891014 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.404928923 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.404936075 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.404948950 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.404977083 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.411492109 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.488141060 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.488157034 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.488226891 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.488235950 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.488279104 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.488461971 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.488477945 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.488529921 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.488537073 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.488579988 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.488807917 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.488831997 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.488867044 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.488872051 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.488898993 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.488913059 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.489195108 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.489209890 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.489258051 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.489264965 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.489305019 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.489418030 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.489432096 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.489473104 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.489480019 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.489504099 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.489520073 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.490998030 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.491012096 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.491050005 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.491055965 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.491082907 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.491110086 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.491569042 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.491581917 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.491621971 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.491628885 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.491652966 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.491666079 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.491784096 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.491811037 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.491844893 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.491852045 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.491878033 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.491885900 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.575114012 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.575134993 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.575220108 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.575234890 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.575284958 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.575615883 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.575629950 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.575691938 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.575704098 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.575754881 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.575777054 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.575792074 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.575860023 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.575871944 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.575927019 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.576241016 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.576255083 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.576324940 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.576337099 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.576410055 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.576515913 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.576531887 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.576601028 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.576612949 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.576668978 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.577944994 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.577965021 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.578088999 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.578100920 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.578181028 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.578536987 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.578556061 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.578624964 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.578638077 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.578754902 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.578876019 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.578891039 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.578939915 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.578950882 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.578978062 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.578999996 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.662156105 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.662173033 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.662273884 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.662296057 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.662503004 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.662532091 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.662547112 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.662611008 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.662623882 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.662688017 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.662758112 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.662771940 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.662834883 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.662846088 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.662906885 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.663136005 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.663151026 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.663223028 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.663235903 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.663301945 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.663471937 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.663486004 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.663566113 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.663583040 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.663609028 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.663640022 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.664798975 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.664813042 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.664885998 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.664899111 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.664963007 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.665601015 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.665616035 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.665677071 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.665689945 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.665714025 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.665741920 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.665851116 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.665869951 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.665949106 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.665962934 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.666142941 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.749125004 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.749140024 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.749219894 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.749236107 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.749298096 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.749397039 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.749411106 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.749475002 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.749486923 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.749512911 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.749531984 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.749656916 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.749680042 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.749727964 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.749739885 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.749766111 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.749804020 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.749959946 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.749974966 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.750040054 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.750052929 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.750114918 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.750309944 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.750329018 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.750410080 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.750410080 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.750423908 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.750483036 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.751775980 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.751791000 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.751846075 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.751861095 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.751915932 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.752391100 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.752405882 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.752470970 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.752485037 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.752545118 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.752748013 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.752762079 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.752815008 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.752832890 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.752885103 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.836106062 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.836123943 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.836328983 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.836370945 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.836436033 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.836473942 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.836488962 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.836558104 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.836571932 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.836635113 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.836796045 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.836811066 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.836872101 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.836884022 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.836935997 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.837157011 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.837172031 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.837236881 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.837249041 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.837301016 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.837518930 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.837532043 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.837600946 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.837613106 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.837673903 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.838577986 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.838592052 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.838661909 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.838674068 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.838737965 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.839602947 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.839632988 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.839677095 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.839694977 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.839721918 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.839744091 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.839809895 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.839823008 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.839879990 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.839891911 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.839945078 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.923188925 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.923209906 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.923280001 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.923293114 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.923338890 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.923567057 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.923609018 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.923640013 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.923645973 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.923672915 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.923692942 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.923799992 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.923814058 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.923876047 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.923882961 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.923928022 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.924159050 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.924174070 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.924213886 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.924254894 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.924261093 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.924303055 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.924453974 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.924469948 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.924520016 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.924526930 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.924552917 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.924576044 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.925542116 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.925555944 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.925599098 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.925606012 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.925637007 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.925646067 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.925949097 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.926008940 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.926016092 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.926029921 CET	443	49762	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:33.926068068 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:33.926450968 CET	49762	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.157083988 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.157135963 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.157213926 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.157460928 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.157478094 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.707065105 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.719800949 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.719819069 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.822340012 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.822381973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.822422981 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.822459936 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.822477102 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.822503090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.822520018 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.822783947 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.822815895 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.822835922 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.822840929 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.823014975 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.823020935 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.823600054 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.823632956 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.823652983 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.823657990 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.823734045 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.823739052 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.870996952 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.909121990 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.909177065 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.909219980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.909264088 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.909266949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.909277916 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.909307003 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.909934044 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.909969091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.910015106 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.910017014 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.910026073 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.910063982 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.910070896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.910110950 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.910118103 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.910902023 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.910933018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.910964012 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.910981894 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.910988092 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.911000967 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.911015987 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.911062956 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.911067963 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.911710978 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.911741018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.911783934 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.911789894 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.911818981 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.911864042 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.911870003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.911911964 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.913366079 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.964785099 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.964793921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.996165991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.996200085 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.996229887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.996264935 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.996273994 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.996304989 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.996570110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.996577024 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.996632099 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.996639967 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.996773005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.996798992 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.996805906 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.996830940 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.996836901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.996869087 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.997634888 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.997678995 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.997690916 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.997697115 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.997724056 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.998486042 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.998522043 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.998544931 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.998553038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.998578072 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.999351025 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.999387026 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.999403954 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.999409914 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.999419928 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.999433041 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.999470949 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:34.999475956 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:34.999582052 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.000257015 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.000300884 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.000310898 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.000319004 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.000343084 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.000355959 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.001199007 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.001252890 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.082905054 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.082981110 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.083092928 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.083152056 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.083475113 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.083533049 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.083723068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.083760977 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.083780050 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.083785057 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.083794117 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.083811045 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.083827972 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.083836079 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.083921909 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.084017992 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.084069014 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.084073067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.084091902 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.084122896 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.084142923 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.084187031 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.084600925 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.084661961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.084739923 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.084781885 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.084798098 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.084801912 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.084816933 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.084825993 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.084840059 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.084844112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.084867954 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.085551977 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.085598946 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.085603952 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.085628986 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.085649967 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.085653067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.085675001 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.085680962 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.085724115 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.085730076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.085817099 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.085867882 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.085908890 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.085922956 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.085928917 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.085952044 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.085958958 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.086569071 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.086622000 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.086639881 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.086690903 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.086772919 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.086797953 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.086817026 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.086824894 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.086837053 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.086865902 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.127125978 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.127193928 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.169729948 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.169938087 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.170101881 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.170167923 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.170402050 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.170459032 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.170638084 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.170691013 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.170870066 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.170931101 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.171130896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.171149015 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.171195984 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.171201944 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.171226978 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.171256065 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.171446085 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.171459913 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.171518087 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.171525002 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.171658993 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.171678066 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.171725988 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.171732903 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.171745062 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.171771049 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.172261953 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.172275066 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.172329903 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.172334909 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.172560930 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.172579050 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.172620058 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.172626019 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.172656059 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.172667980 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.173397064 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.173410892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.173461914 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.173469067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.174328089 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.257066965 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.257083893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.257148027 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.257158995 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.257870913 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.257890940 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.257931948 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.257937908 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.257951021 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.257982016 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.258080959 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.258095980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.258142948 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.258148909 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.258399010 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.258415937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.258449078 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.258455038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.258482933 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.258502960 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.261693954 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.261707067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.261780977 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.261790037 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.262048960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.262067080 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.262125015 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.262130976 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.262371063 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.262383938 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.262435913 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.262442112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.262739897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.262758017 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.262794018 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.262799025 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.262824059 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.262847900 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.343549967 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.343565941 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.343617916 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.343625069 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.343656063 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.343667030 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.343866110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.343882084 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.343933105 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.343938112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.343955040 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.344260931 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.344278097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.344297886 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.344302893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.344331980 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.344360113 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.344515085 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.344527960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.344616890 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.344623089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.344841957 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.344857931 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.344860077 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.344871998 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.344887972 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.344911098 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.345252991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.345267057 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.345318079 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.345321894 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.345344067 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.345356941 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.345662117 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.345675945 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.345729113 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.345735073 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.345762014 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.345777035 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.345859051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.345874071 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.345917940 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.345923901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.345949888 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.345959902 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.430429935 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.430447102 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.430516005 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.430524111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.430825949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.430843115 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.430999041 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.431005001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.431044102 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.431082010 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.431094885 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.431139946 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.431152105 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.431162119 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.431191921 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.431467056 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.431480885 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.431535959 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.431540012 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.433527946 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.439013004 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.439028025 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.439094067 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.439100027 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.439254999 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.439271927 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.439317942 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.439322948 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.439332008 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.439363003 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.439371109 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.439383984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.439425945 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.439430952 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.439448118 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.439471006 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.439749956 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.439764023 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.439814091 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.439822912 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.443334103 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.517519951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.517537117 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.517611980 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.517621040 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.517788887 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.517862082 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.517875910 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.517934084 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.517940998 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.518059969 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.518132925 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.518146992 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.518201113 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.518207073 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.518271923 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.518481970 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.518496037 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.518553019 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.518558979 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.518635988 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.518881083 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.518897057 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.518949986 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.518955946 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.519071102 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.519145966 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.519160986 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.519208908 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.519215107 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.519319057 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.519457102 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.519471884 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.519526958 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.519532919 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.519608021 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.519745111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.519758940 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.519808054 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.519814014 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.519926071 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.604954958 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.604990959 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.605154037 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.605165958 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.605254889 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.605273962 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.605308056 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.605314016 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.605338097 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.605382919 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.605629921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.605685949 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.605693102 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.606175900 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.606188059 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.606266975 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.606271982 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.606689930 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.606703997 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.606744051 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.606750011 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.606762886 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.607063055 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.607075930 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.607115030 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.607120991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.607148886 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.607554913 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.607574940 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.607614994 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.607619047 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.607626915 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.607651949 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.607682943 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.607688904 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.608082056 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.608098984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.608136892 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.608143091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.608160973 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.655308008 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.695050955 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.695075035 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.695122004 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.695130110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.695161104 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.695169926 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.695184946 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.695239067 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.695245028 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.695693016 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.695704937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.695763111 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.695770025 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.696033955 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.696047068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.696105957 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.696113110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.696696043 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.696722984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.696753979 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.696759939 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.696774006 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.697168112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.697180986 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.697237968 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.697244883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.697372913 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.697397947 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.697432041 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.697437048 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.697449923 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.697463036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.697511911 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.697516918 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.698297024 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.698309898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.698364973 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.698371887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.746001005 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.778166056 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.778181076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.778251886 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.778259993 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.778507948 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.778526068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.778580904 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.778587103 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.778640032 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.778701067 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.778707981 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.778976917 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.778989077 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.779043913 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.779051065 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.779284000 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.779305935 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.779335976 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.779341936 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.779371023 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.779393911 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.779560089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.779580116 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.779639006 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.779644012 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.779915094 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.779931068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.779966116 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.779970884 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.779999018 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.780025005 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.780141115 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.780199051 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.780205011 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.780416012 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.780427933 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.780476093 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.780483007 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.824167967 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.865225077 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.865261078 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.865341902 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.865354061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.865365028 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.865396976 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.865402937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.865415096 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.865446091 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.865653992 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.865669966 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.865721941 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.865726948 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.865959883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.865982056 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.866008043 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.866014004 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.866040945 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.866069078 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.866352081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.866365910 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.866405964 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.866410971 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.866425991 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.866451979 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.866601944 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.866632938 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.866661072 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.866664886 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.866681099 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.866708040 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.866949081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.866965055 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.867007971 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.867013931 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.867052078 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.867069960 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.867156029 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.867207050 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.867213964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.867453098 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.867465973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.867502928 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.867507935 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.867542028 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.889558077 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.952083111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.952100039 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.952147961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.952157974 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.952188015 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.952205896 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.952528954 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.952543974 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.952590942 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.952596903 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.952600956 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.952645063 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.952651024 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.952924967 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.952939034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.952977896 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.952985048 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.952994108 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.953222036 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.953241110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.953295946 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.953301907 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.953531027 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.953542948 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.953587055 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.953592062 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.953620911 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.953794003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.953808069 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.953839064 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.953844070 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.953870058 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.953999996 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.954051971 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.954057932 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.954293966 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.954305887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.954339027 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.954344988 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:35.954354048 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:35.996015072 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.039741039 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.039762974 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.039813995 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.039824009 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.039855003 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.039870977 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.039923906 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.039974928 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.039980888 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.040191889 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.040205956 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.040240049 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.040246964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.040270090 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.040460110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.040472984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.040505886 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.040510893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.040538073 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.040636063 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.040647984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.040683031 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.040688992 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.040699959 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.041084051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.041096926 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.041167021 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.041167021 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.041173935 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.041323900 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.041387081 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.041393995 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.041608095 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.041625023 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.041660070 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.041665077 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.041685104 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.041918993 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.041930914 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.041968107 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.041973114 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.041990042 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.089757919 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.125812054 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.125894070 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.125900984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.126157045 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.126169920 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.126205921 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.126213074 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.126236916 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.126421928 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.126434088 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.126467943 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.126471996 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.126483917 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.126749039 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.126765013 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.126802921 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.126807928 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.126818895 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.127083063 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.127095938 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.127132893 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.127139091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.127154112 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.127432108 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.127444983 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.127480030 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.127485991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.127496958 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.127621889 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.127686024 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.127691984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.127815008 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.127829075 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.127870083 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.127875090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.127902031 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.128076077 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.128123045 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.128125906 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.128134012 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.128190994 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.133934975 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.134047031 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.213782072 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.213799000 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.213850021 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.213857889 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.213867903 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.213898897 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.214015007 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.214067936 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.214073896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.214543104 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.214556932 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.214591026 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.214596987 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.214623928 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.214926958 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.214945078 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.214977980 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.214982986 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.215008020 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.215318918 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.215353966 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.215365887 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.215370893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.215396881 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.215850115 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.215862036 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.215897083 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.215903997 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.215926886 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.216043949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.216092110 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.216099024 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.216501951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.216520071 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.216548920 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.216553926 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.216583014 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.216933966 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.216959953 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.216989040 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.216994047 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.217005968 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.217963934 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.218039036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.300596952 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.300667048 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.300682068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.300992966 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.301006079 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.301043034 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.301048994 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.301073074 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.301357031 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.301376104 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.301434994 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.301440954 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.301450968 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.301836014 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.301848888 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.301898956 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.301904917 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.301933050 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.302366018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.302388906 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.302429914 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.302433968 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.302458048 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.302820921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.302835941 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.302871943 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.302876949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.302906990 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.303112984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.303168058 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.303174973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.303343058 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.303376913 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.303402901 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.303409100 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.303436995 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.303868055 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.303884983 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.303924084 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.303930044 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.303962946 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.355391026 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.386619091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.386635065 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.386688948 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.386703968 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.386734009 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.386743069 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.386748075 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.386778116 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.386796951 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.387160063 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.387175083 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.387227058 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.387234926 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.387249947 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.387265921 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.387403965 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.387417078 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.387465954 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.387470961 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.387510061 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.387798071 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.387813091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.387854099 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.387861013 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.387892962 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.388063908 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.388079882 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.388108015 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.388115883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.388148069 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.388160944 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.388324022 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.388372898 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.388380051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.388716936 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.388730049 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.388783932 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.388788939 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.388803005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.388818026 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.388860941 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.388866901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.388881922 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.433520079 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.473449945 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.473547935 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.473565102 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.474077940 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.474096060 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.474154949 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.474163055 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.474361897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.474383116 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.474423885 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.474430084 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.474453926 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.474822044 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.474833965 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.474884987 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.474891901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.475110054 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.475131989 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.475166082 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.475166082 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.475177050 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.475195885 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.475225925 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.475229979 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.475527048 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.475543976 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.475599051 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.475606918 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.475920916 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.475931883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.475989103 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.475995064 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.476154089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.476212978 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.476218939 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.527290106 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.560447931 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.560462952 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.560524940 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.560533047 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.560565948 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.560904980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.560921907 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.560976982 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.560982943 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.561022043 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.561331987 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.561356068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.561388969 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.561394930 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.561419010 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.561431885 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.561672926 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.561686993 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.561732054 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.561738968 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.561777115 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.561856985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.561872005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.561919928 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.561927080 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.561965942 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.562269926 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.562302113 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.562335014 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.562339067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.562362909 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.562376022 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.562485933 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.562500954 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.562555075 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.562561989 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.562599897 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.562872887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.562886953 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.562942028 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.562946081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.562984943 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.647214890 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.647250891 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.647294044 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.647305965 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.647324085 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.647349119 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.647428989 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.647444963 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.647501945 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.647507906 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.647547007 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.647814035 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.647828102 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.647872925 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.647876978 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.647911072 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.647921085 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.648082018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.648096085 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.648142099 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.648147106 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.648175955 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.648188114 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.648430109 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.648444891 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.648495913 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.648500919 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.648519039 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.648545027 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.648775101 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.648789883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.648843050 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.648849010 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.648890018 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.649507999 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.649522066 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.649573088 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.649578094 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.649617910 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.649820089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.649838924 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.649883032 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.649888039 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.649902105 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.649919987 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.735361099 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.735378027 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.735549927 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.735584974 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.735594988 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.735615015 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.735642910 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.735718012 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.735984087 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.735997915 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.736080885 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.736087084 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.736566067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.736582994 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.736633062 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.736639023 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.736660957 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.737061024 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.737073898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.737124920 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.737132072 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.737483025 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.737499952 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.737549067 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.737555027 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.737571955 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.738305092 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.738317966 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.738377094 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.738384962 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.738641024 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.738661051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.738718033 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.738723993 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.792901993 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.822184086 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.822199106 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.822252989 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.822261095 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.822304010 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.822577000 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.822591066 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.822638035 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.822643995 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.822683096 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.823127985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.823146105 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.823194027 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.823199034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.823234081 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.823446035 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.823458910 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.823517084 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.823523045 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.823565960 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.823991060 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.824007034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.824057102 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.824062109 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.824084997 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.824194908 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.824368000 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.824383974 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.824429989 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.824434996 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.824456930 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.824470043 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.825004101 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.825018883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.825073957 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.825079918 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.825124979 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.825527906 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.825541973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.825587034 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.825592995 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.825607061 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.825629950 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.907783031 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.907799006 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.907886028 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.907896042 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.907947063 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.908123970 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.908138990 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.908198118 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.908202887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.908246994 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.908406973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.908421040 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.908482075 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.908487082 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.908533096 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.908710003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.908732891 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.908776045 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.908781052 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.908809900 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.908809900 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.909189939 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.909218073 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.909254074 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.909260035 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.909286976 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.909305096 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.909446001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.909460068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.909516096 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.909522057 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.909569979 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.909853935 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.909872055 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.909926891 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.909931898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.909975052 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.910331964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.910346985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.910396099 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.910402060 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.910445929 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.994847059 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.994863033 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.994960070 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.994978905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.995026112 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.995173931 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.995189905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.995239973 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.995245934 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.995274067 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.995286942 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.995496035 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.995511055 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.995557070 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.995563030 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.995589018 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.995598078 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.995970964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.995985031 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.996046066 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.996052027 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.996097088 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.996179104 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.996193886 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.996237040 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.996241093 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.996280909 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.996418953 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.996433020 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.996479034 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.996485949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.996524096 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.996732950 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.996747971 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.996807098 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.996810913 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.996850014 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.997183084 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.997195959 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.997251987 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:36.997258902 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:36.997301102 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.082201958 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.082217932 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.082309008 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.082318068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.082361937 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.082447052 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.082463026 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.082523108 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.082529068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.082988977 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.083007097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.083050013 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.083055973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.083069086 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.083100080 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.083297968 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.083317995 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.083358049 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.083364010 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.083378077 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.083400965 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.083515882 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.083529949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.083583117 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.083589077 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.083795071 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.083817959 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.083856106 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.083861113 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.083873034 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.083906889 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.084072113 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.084084034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.084135056 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.084139109 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.084147930 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.084455013 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.084470987 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.084512949 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.084520102 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.084530115 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.084561110 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.168924093 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.168937922 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.169018984 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.169044018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.169445038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.169462919 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.169519901 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.169531107 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.169543028 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.169866085 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.169879913 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.169926882 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.169934034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.169954062 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.169975042 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.170125008 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.170144081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.170202017 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.170207024 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.170304060 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.170322895 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.170363903 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.170370102 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.170382023 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.170413971 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.170866013 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.170878887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.170927048 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.170933008 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.170942068 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.170970917 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.171144962 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.171160936 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.171202898 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.171206951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.171232939 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.171241045 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.171242952 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.171252966 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.171283007 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.171298027 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.171307087 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.171331882 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.171346903 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.255629063 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.255644083 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.255732059 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.255740881 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.256016016 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.256035089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.256093025 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.256099939 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.256298065 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.256311893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.256367922 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.256375074 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.256572008 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.256589890 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.256644964 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.256650925 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.257019997 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.257054090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.257081985 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.257088900 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.257102966 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.257132053 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.257181883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.257195950 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.257235050 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.257240057 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.257252932 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.257276058 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.257630110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.257644892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.257703066 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.257709980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.257884026 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.257906914 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.257939100 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.257945061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.257957935 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.257999897 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.342602015 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.342628002 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.342695951 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.342714071 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.342730045 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.342753887 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.342938900 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.342967987 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.342998028 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.343003035 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.343029976 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.343044043 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.343231916 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.343249083 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.343303919 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.343310118 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.343504906 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.343534946 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.343564034 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.343569994 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.343591928 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.343615055 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.343763113 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.343779087 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.343832016 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.343838930 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.344176054 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.344194889 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.344238997 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.344244957 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.344257116 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.344283104 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.344446898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.344461918 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.344506025 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.344511032 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.344527960 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.344547033 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.347352982 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.347369909 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.347426891 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.347434044 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.351332903 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.430114985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.430135012 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.430198908 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.430217028 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.430571079 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.430787086 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.430800915 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.430866957 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.430872917 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.430913925 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.431175947 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.431191921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.431242943 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.431261063 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.431302071 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.431539059 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.431581020 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.431596994 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.431602001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.431631088 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.431644917 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.432092905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.432110071 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.432169914 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.432177067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.432216883 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.432296038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.432353020 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.432358980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.432486057 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.432499886 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.432538986 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.432544947 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.432564020 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.433121920 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.433149099 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.433176994 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.433181047 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.433212042 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.433764935 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.433778048 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.433823109 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.433829069 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.433861971 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.480400085 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.517524958 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.517541885 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.517612934 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.517626047 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.517908096 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.517927885 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.517970085 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.517976999 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.517992020 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.518023014 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.518289089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.518301964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.518352032 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.518357992 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.518893003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.518913984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.518949032 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.518954992 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.518981934 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.519002914 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.519305944 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.519325018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.519361973 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.519366980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.519380093 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.519407034 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.519562960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.519577980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.519628048 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.519634962 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.520142078 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.520163059 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.520198107 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.520201921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.520212889 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.520241022 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.520581961 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.520593882 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.520642042 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.520648003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.520662069 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.520685911 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.603585005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.603617907 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.603653908 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.603663921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.603674889 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.603708982 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.603941917 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.603967905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.604002953 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.604006052 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.604029894 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.604125977 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.604259014 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.604271889 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.604320049 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.604326010 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.604450941 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.604605913 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.604618073 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.604712963 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.604718924 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.604790926 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.604809046 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.604815960 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.604820013 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.604841948 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.604870081 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.605175018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.605185986 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.605249882 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.605254889 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.605432987 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.605436087 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.605446100 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.605464935 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.605482101 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.605490923 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.605494976 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.605523109 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.605541945 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.605737925 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.605752945 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.605789900 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.605794907 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.605822086 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.605834961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.694839954 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.694854021 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.694924116 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.694931984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.695126057 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.695144892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.695183992 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.695188999 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.695210934 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.695242882 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.695424080 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.695436954 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.695481062 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.695487022 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.695703030 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.695821047 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.695839882 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.695868969 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.695873976 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.695889950 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.695943117 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.695959091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.695976019 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.695981979 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.695992947 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.696026087 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.696412086 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.696424007 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.696474075 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.696479082 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.696511984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.696530104 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.696559906 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.696564913 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.696593046 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.696618080 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.697009087 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.697021961 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.697061062 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.697066069 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.697087049 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.697104931 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.782145977 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.782160044 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.782429934 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.782435894 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.782486916 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.782538891 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.782561064 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.782594919 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.782599926 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.782627106 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.782640934 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.782849073 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.782864094 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.782917976 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.782923937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.783113003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.783132076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.783181906 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.783189058 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.783418894 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.783432007 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.783488989 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.783499002 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.783924103 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.783941984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.783977985 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.783982038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.784003019 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.784008980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.784020901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.784025908 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.784029961 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.784050941 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.784075975 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.784336090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.784351110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.784404039 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.784409046 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.785742998 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.868590117 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.868602991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.868793011 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.868798971 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.868840933 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.868958950 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.868973017 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.869024038 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.869028091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.869236946 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.869259119 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.869297028 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.869302034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.869313002 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.869339943 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.869697094 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.869709015 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.869764090 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.869770050 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.869909048 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.869926929 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.869968891 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.869973898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.869995117 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.870023012 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.870170116 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.870182991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.870235920 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.870240927 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.871138096 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.871531010 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.871545076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.871603012 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.871608973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.871620893 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.871649981 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.871891975 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.871906996 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.871949911 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.871954918 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.871983051 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.871994972 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.955647945 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.955662966 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.955718040 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.955727100 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.955800056 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.955898046 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.955912113 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.955952883 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.955957890 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.956075907 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.956209898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.956223011 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.956271887 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.956276894 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.956300974 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.956320047 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.956629038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.956640959 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.956698895 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.956703901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.956809998 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.956829071 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.956867933 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.956872940 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.956897974 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.956923008 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.957204103 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.957215071 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.957253933 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.957258940 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.957287073 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.957307100 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.958357096 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.958369017 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.958439112 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.958442926 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.958733082 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.958754063 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.958794117 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.958800077 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:37.958822012 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:37.958842039 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.043011904 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.043026924 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.043077946 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.043083906 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.043111086 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.043128967 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.043361902 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.043375969 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.043414116 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.043418884 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.043445110 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.043452978 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.043612003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.043626070 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.043665886 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.043670893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.043694973 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.043714046 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.043998003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.044023037 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.044054985 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.044060946 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.044075966 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.044099092 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.044199944 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.044218063 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.044262886 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.044269085 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.044560909 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.044579983 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.044615984 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.044620991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.044631958 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.044660091 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.045233011 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.045245886 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.045286894 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.045290947 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.045305967 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.045325041 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.045591116 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.045605898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.045654058 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.045660973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.049673080 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.129601955 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.129616976 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.129781961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.129787922 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.129832983 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.129951954 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.129966021 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.130019903 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.130026102 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.130328894 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.130347967 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.130379915 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.130386114 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.130410910 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.130420923 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.130665064 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.130676985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.130717993 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.130723000 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.130738974 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.130762100 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.130889893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.130903959 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.130949020 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.130954981 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.131222963 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.131252050 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.131278992 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.131283045 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.131294012 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.131330967 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.132112026 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.132124901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.132174969 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.132184029 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.132389069 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.132407904 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.132441998 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.132447958 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.132464886 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.132492065 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.216804981 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.216818094 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.216995955 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.217001915 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.217051029 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.217289925 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.217303991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.217350960 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.217355967 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.217385054 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.217391968 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.217468023 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.217489004 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.217519999 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.217525005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.217547894 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.217562914 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.217751026 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.217765093 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.217804909 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.217809916 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.217834949 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.217868090 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.218156099 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.218168020 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.218213081 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.218218088 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.218241930 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.218255043 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.218396902 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.218409061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.218461037 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.218466043 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.218476057 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.218494892 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.219007015 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.219022036 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.219065905 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.219070911 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.219093084 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.219105005 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.219234943 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.219248056 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.219289064 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.219294071 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.219340086 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.219340086 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.303723097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.303739071 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.303925037 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.303932905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.303980112 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.304056883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.304069042 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.304116011 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.304121971 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.304402113 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.304420948 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.304457903 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.304462910 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.304477930 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.304506063 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.304714918 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.304725885 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.304776907 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.304781914 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.305031061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.305048943 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.305083036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.305088997 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.305116892 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.305126905 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.305354118 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.305378914 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.305408955 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.305413008 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.305433989 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.305450916 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.305633068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.305645943 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.305694103 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.305699110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.306010008 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.306029081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.306062937 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.306067944 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.306077003 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.306102991 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.390763044 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.390779018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.390894890 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.390902042 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.390943050 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.391115904 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.391129017 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.391190052 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.391196012 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.391482115 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.391501904 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.391546011 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.391551971 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.391567945 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.391592979 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.391696930 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.391711950 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.391767025 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.391772985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.391947031 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.391966105 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.392003059 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.392008066 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.392034054 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.392059088 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.392343998 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.392355919 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.392411947 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.392416954 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.392620087 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.392641068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.392673969 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.392679930 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.392709017 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.392734051 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.392947912 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.392961025 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.393018961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.393023968 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.393398046 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.477772951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.477809906 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.477880001 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.477893114 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.478008986 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.478025913 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.478035927 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.478055954 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.478060007 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.478092909 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.478122950 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.478341103 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.478353024 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.478401899 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.478406906 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.478434086 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.478456974 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.478835106 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.478868961 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.478897095 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.478902102 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.478931904 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.478950024 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.479048014 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.479060888 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.479110003 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.479115963 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.479142904 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.479161978 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.479285002 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.479300022 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.479350090 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.479355097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.479382038 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.479401112 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.479667902 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.479681969 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.479737997 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.479743958 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.479907036 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.479935884 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.479964972 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.479969978 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.479991913 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.480021954 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.564713955 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.564728022 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.564798117 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.564807892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.564851046 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.565046072 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.565062046 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.565124989 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.565130949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.565174103 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.565375090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.565387011 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.565437078 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.565443039 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.565583944 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.565601110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.565635920 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.565642118 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.565659046 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.565685034 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.566036940 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.566051960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.566109896 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.566116095 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.566157103 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.566220999 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.566235065 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.566282034 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.566287041 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.566555977 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.566571951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.566607952 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.566612959 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.566633940 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.566658974 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.566870928 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.566884041 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.566919088 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.566924095 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.566935062 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.566957951 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.651624918 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.651642084 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.651726961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.651734114 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.651887894 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.651895046 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.651909113 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.651958942 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.651964903 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.652127028 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.652296066 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.652309895 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.652359962 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.652364969 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.652630091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.652651072 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.652688980 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.652694941 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.652709961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.652740002 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.652997971 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.653009892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.653060913 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.653065920 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.653084040 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.653105021 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.653250933 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.653271914 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.653310061 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.653315067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.653342009 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.653358936 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.653516054 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.653529882 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.653574944 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.653578043 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.653599977 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.653620958 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.653796911 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.653810024 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.653862953 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.653868914 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.657449007 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.738601923 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.738620996 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.738792896 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.738800049 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.738848925 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.738951921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.738965034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.739026070 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.739031076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.739104986 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.739172935 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.739187002 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.739248037 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.739254951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.739336014 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.739609957 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.739624023 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.739681005 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.739686966 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.739840984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.739861012 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.739888906 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.739895105 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.739923954 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.739950895 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.740194082 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.740209103 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.740267038 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.740272999 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.740355015 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.740551949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.740566015 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.740644932 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.740649939 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.740705967 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.825145960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.825160027 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.825263023 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.825268030 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.825475931 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.825494051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.825565100 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.825565100 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.825571060 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.825603008 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.825622082 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.825767040 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.825778961 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.825831890 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.825836897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.825846910 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.826096058 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.826113939 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.826153040 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.826158047 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.826173067 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.826198101 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.826443911 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.826456070 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.826503992 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.826508045 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.826520920 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.826756001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.826773882 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.826813936 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.826818943 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.826834917 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.826859951 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.827068090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.827083111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.827127934 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.827136993 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.827163935 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.827187061 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.827445984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.827459097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.827514887 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.827519894 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.829413891 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.912121058 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.912136078 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.912204981 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.912211895 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.912434101 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.912451982 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.912591934 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.912591934 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.912602901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.912758112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.912772894 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.912810087 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.912816048 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.912843943 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.912867069 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.913177013 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.913189888 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.913243055 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.913248062 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.913336992 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.913369894 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.913392067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.913431883 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.913436890 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.913719893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.913737059 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.913769960 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.913775921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.913800001 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.913821936 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.914182901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.914195061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.914247990 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.914253950 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.914324045 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.914341927 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.914376020 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.914381027 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.914402008 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.914422989 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.999077082 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.999094963 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.999341965 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.999347925 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.999396086 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.999543905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.999557018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.999605894 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:38.999612093 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.999964952 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:38.999986887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.000020981 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.000026941 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.000042915 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.000068903 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.000412941 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.000432014 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.000483036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.000488043 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.000498056 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.000763893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.000778913 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.000828028 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.000833035 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.000838041 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.000873089 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.000874043 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.000932932 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.000937939 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.001218081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.001235962 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.001279116 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.001283884 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.001296043 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.001566887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.001579046 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.001622915 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.001629114 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.001642942 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.042905092 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.085901022 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.085918903 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.086110115 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.086116076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.086165905 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.086199999 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.086213112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.086262941 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.086267948 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.086299896 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.086318016 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.086489916 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.086503029 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.086570978 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.086576939 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.086617947 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.086888075 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.086904049 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.086970091 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.086976051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.087016106 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.087136030 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.087151051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.087214947 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.087219954 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.087265015 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.087491989 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.087507010 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.087569952 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.087575912 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.087620974 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.087788105 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.087800026 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.087865114 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.087871075 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.087912083 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.088130951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.088145018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.088207960 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.088212967 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.088259935 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.172856092 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.172875881 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.172905922 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.172928095 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.172935963 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.172976017 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.173108101 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.173120975 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.173156023 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.173160076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.173182964 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.173203945 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.173490047 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.173504114 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.173543930 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.173547983 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.173572063 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.173595905 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.173846006 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.173858881 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.173907995 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.173917055 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.173955917 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.174120903 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.174133062 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.174177885 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.174182892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.174225092 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.174467087 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.174480915 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.174525023 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.174530029 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.174566984 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.174786091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.174798965 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.174849033 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.174854994 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.174894094 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.175173998 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.175187111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.175230026 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.175235987 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.175276041 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.259774923 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.259792089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.259888887 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.259902000 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.260045052 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.260046005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.260057926 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.260096073 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.260118008 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.260124922 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.260149002 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.260160923 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.260421038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.260433912 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.260487080 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.260492086 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.260534048 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.260678053 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.260691881 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.260783911 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.260790110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.260837078 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.261030912 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.261044025 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.261095047 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.261101007 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.261152983 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.261486053 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.261498928 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.261550903 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.261557102 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.261605024 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.261738062 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.261749983 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.261789083 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.261794090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.261821032 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.261879921 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.262012005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.262027979 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.262094975 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.262100935 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.262140036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.346769094 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.346785069 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.346873999 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.346882105 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.346926928 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.347103119 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.347116947 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.347177029 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.347182989 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.347229004 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.347485065 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.347500086 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.347553015 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.347558975 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.347599030 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.347709894 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.347726107 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.347780943 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.347786903 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.347826958 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.348006964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.348023891 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.348074913 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.348081112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.348121881 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.348397970 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.348413944 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.348470926 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.348475933 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.348515987 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.348669052 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.348683119 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.348731041 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.348736048 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.348776102 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.349056005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.349071980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.349128008 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.349134922 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.349174976 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.433870077 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.433886051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.434129000 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.434173107 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.434185982 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.434192896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.434211969 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.434251070 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.434463978 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.434477091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.434545040 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.434551001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.434925079 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.434942007 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.435023069 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.435028076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.435064077 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.435075998 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.435120106 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.435126066 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.435448885 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.435467958 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.435514927 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.435520887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.435798883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.435811996 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.435874939 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.435880899 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.436064959 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.436084032 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.436148882 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.436155081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.480422974 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.520601034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.520613909 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.520688057 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.520695925 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.520745993 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.520919085 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.520931005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.520987988 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.520992994 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.521035910 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.521212101 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.521225929 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.521281958 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.521286964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.521334887 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.521553040 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.521567106 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.521621943 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.521626949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.521686077 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.521876097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.521891117 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.521965027 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.521970034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.522011995 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.522169113 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.522181034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.522236109 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.522241116 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.522289038 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.522573948 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.522587061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.522648096 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.522654057 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.522711992 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.522929907 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.522943020 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.523000002 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.523005009 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.523044109 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.607570887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.607587099 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.607765913 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.607774973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.607827902 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.607840061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.607856035 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.607917070 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.607922077 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.607964039 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.608141899 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.608163118 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.608216047 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.608220100 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.608263016 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.608473063 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.608488083 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.608542919 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.608546972 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.608576059 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.608593941 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.608819008 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.608838081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.608877897 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.608882904 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.608912945 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.608931065 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.609105110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.609117985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.609167099 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.609169960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.609201908 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.609215021 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.609529018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.609541893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.609590054 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.609596014 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.609621048 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.609636068 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.609781981 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.609811068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.609849930 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.609853983 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.609879971 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.609899044 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.694457054 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.694472075 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.694693089 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.694705963 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.694719076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.694763899 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.694807053 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.694814920 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.694835901 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.694863081 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.695135117 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.695147991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.695213079 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.695218086 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.695262909 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.695342064 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.695355892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.695415020 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.695420980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.695465088 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.695796013 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.695810080 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.695871115 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.695875883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.695913076 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.696022987 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.696044922 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.696120977 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.696125984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.696170092 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.696391106 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.696403980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.696450949 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.696456909 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.696470022 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.696495056 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.696676016 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.696688890 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.696738005 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.696743011 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.696764946 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.696808100 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.781492949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.781510115 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.781568050 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.781577110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.781614065 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.781706095 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.781718969 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.781752110 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.781758070 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.781785965 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.781790972 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.782053947 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.782067060 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.782114983 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.782120943 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.782159090 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.782335043 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.782363892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.782396078 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.782401085 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.782418966 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.782440901 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.782654047 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.782668114 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.782706022 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.782711029 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.782737017 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.782757044 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.782991886 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.783004045 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.783044100 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.783049107 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.783071995 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.783086061 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.783370972 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.783384085 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.783432961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.783437014 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.783473969 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.783677101 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.783689976 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.783736944 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.783745050 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.783795118 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.868284941 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.868299961 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.868469954 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.868478060 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.868529081 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.868638039 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.868650913 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.868704081 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.868710041 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.868752003 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.868930101 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.868942976 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.868989944 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.868994951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.869021893 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.869035959 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.869359970 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.869373083 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.869429111 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.869438887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.869486094 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.869546890 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.869560003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.869616985 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.869623899 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.869663954 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.869910002 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.869924068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.869973898 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.869978905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.870023012 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.870223045 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.870235920 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.870290041 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.870296001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.870337009 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.870651007 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.870662928 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.870718002 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.870723009 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.870767117 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.955281973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.955296993 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.955405951 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.955413103 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.955471039 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.955622911 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.955636978 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.955694914 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.955699921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.955744982 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.955905914 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.955919027 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.955970049 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.955976009 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.956011057 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.956240892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.956254005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.956306934 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.956312895 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.956357956 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.956494093 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.956526041 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.956554890 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.956559896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.956583023 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.956594944 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.956959009 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.956971884 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.957027912 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.957032919 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.957081079 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.957212925 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.957225084 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.957279921 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.957284927 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.957325935 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.957514048 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.957528114 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.957580090 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:39.957583904 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:39.957628965 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.042171001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.042185068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.042363882 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.042370081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.042481899 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.042489052 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.042493105 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.042526007 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.042537928 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.042545080 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.042596102 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.042712927 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.042743921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.042788029 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.042792082 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.042807102 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.042830944 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.043082952 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.043097973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.043158054 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.043167114 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.043210030 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.043415070 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.043428898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.043486118 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.043490887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.043541908 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.043828011 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.043843031 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.043891907 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.043901920 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.043941975 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.044028044 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.044040918 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.044087887 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.044094086 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.044131041 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.044538975 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.044578075 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.044600010 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.044605017 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.044625998 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.044642925 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.131454945 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.131474972 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.131532907 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.131570101 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.131599903 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.131613970 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.131659031 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.131659031 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.131659031 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.131669998 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.131683111 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.131766081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.131783009 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.131798983 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.131814003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.131824017 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.131830931 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.131871939 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.131874084 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.131894112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.131901026 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.131906033 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.131927967 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.131934881 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.131952047 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.131958008 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.131962061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.131985903 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.132006884 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.132006884 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.216007948 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.216022015 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.216098070 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.216105938 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.216151953 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.216257095 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.216272116 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.216332912 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.216339111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.216382980 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.216624975 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.216654062 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.216691017 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.216698885 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.216721058 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.216742039 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.216902018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.216914892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.216979027 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.216984034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.217025042 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.217390060 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.217405081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.217474937 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.217479944 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.217524052 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.217546940 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.217562914 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.217622995 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.217628956 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.217674017 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.217858076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.217871904 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.217922926 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.217927933 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.217957020 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.217972040 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.218168020 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.218182087 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.218246937 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.218251944 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.218298912 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.302941084 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.302956104 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.303157091 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.303163052 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.303210020 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.303210974 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.303220987 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.303255081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.303262949 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.303292036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.303294897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.303318024 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.303342104 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.303524971 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.303539038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.303597927 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.303605080 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.303659916 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.303863049 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.303877115 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.303940058 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.303945065 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.303987026 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.304172993 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.304186106 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.304250002 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.304255962 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.304302931 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.304573059 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.304585934 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.304650068 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.304656029 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.304697990 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.304805994 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.304819107 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.304878950 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.304883003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.304929018 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.305253983 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.305269003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.305320978 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.305325985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.305372953 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.389780998 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.389797926 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.389866114 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.389874935 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.389924049 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.390116930 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.390131950 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.390192032 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.390197039 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.390263081 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.390424967 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.390439034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.390485048 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.390490055 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.390532017 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.390804052 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.390818119 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.390858889 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.390865088 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.390891075 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.390908003 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.391082048 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.391098022 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.391144037 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.391149998 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.391196012 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.391370058 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.391397953 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.391421080 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.391427994 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.391443014 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.391486883 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.391592979 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.391607046 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.391643047 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.391649008 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.391688108 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.392026901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.392040014 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.392080069 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.392083883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.392108917 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.392127037 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.476783991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.476799011 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.476870060 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.476876020 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.477029085 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.477543116 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.477557898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.477631092 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.477638960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.477684021 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.477988958 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.478003025 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.478060961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.478066921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.478135109 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.478224039 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.478238106 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.478292942 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.478297949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.478343010 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.478554964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.478570938 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.478630066 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.478636026 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.478676081 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.478887081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.478900909 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.478962898 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.478969097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.479016066 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.479295015 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.479317904 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.479367971 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.479373932 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.479418993 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.479507923 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.479521036 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.479572058 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.479577065 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.479624033 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.563740015 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.563755989 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.563879967 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.563886881 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.563941002 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.564565897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.564585924 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.564645052 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.564651012 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.564692020 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.564970016 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.564984083 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.565033913 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.565040112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.565084934 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.565165997 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.565180063 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.565233946 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.565239906 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.565285921 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.565454006 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.565474033 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.565519094 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.565527916 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.565577984 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.565860033 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.565871954 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.565917969 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.565922976 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.565963030 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.566296101 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.566308975 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.566359043 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.566359043 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.566370010 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.566405058 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.566418886 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.566425085 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.566567898 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.650593042 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.650607109 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.650796890 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.650801897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.650856972 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.650962114 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.650975943 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.651032925 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.651041985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.651087046 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.651242018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.651256084 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.651319027 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.651323080 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.651384115 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.651654005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.651668072 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.651731968 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.651737928 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.651782990 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.651897907 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.651911020 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.651966095 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.651971102 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.652015924 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.652184963 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.652198076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.652268887 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.652273893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.652575016 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.652592897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.652627945 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.652632952 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.652642965 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.652671099 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.652847052 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.652858019 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.652916908 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.652925014 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.652965069 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.738307953 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.738328934 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.738406897 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.738414049 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.738452911 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.738571882 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.738588095 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.738637924 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.738642931 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.738652945 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.738673925 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.738698959 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.738703966 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.738729000 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.738746881 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.738930941 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.738945007 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.738996983 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.739001989 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.739026070 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.739041090 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.739336967 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.739353895 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.739415884 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.739422083 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.739464998 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.739550114 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.739566088 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.739598036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.739614964 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.739619970 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.739650965 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.739965916 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.739967108 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.740025043 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.740025997 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.740034103 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.740082026 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.740180969 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.740550995 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.740570068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.740632057 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.740638018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.740704060 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.740930080 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.824449062 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.824462891 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.824611902 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.824611902 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.824625969 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.824676991 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.824764013 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.824775934 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.824815989 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.824821949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.824851036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.824860096 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.825051069 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.825066090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.825109005 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.825114012 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.825139999 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.825153112 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.825455904 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.825469971 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.825530052 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.825534105 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.825573921 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.825714111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.825727940 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.825788975 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.825794935 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.825833082 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.826009989 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.826024055 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.826066971 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.826071978 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.826097965 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.826111078 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.826319933 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.826332092 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.826373100 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.826379061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.826406002 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.826417923 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.826601982 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.826615095 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.826673985 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.826678991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.826718092 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.911624908 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.911640882 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.911690950 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.911703110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.911741018 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.912220955 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.912234068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.912275076 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.912280083 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.912308931 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.912321091 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.912448883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.912462950 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.912506104 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.912509918 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.912554026 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.912874937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.912888050 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.912935972 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.912977934 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.913009882 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.913016081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.913053036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.913448095 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.913460970 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.913501978 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.913508892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.913537979 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.913695097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.913719893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.913753986 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.913758993 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.913777113 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.914079905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.914099932 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.914141893 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.914148092 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.914170980 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.964782000 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.998579979 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.998605967 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.998678923 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.998684883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.998832941 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.999118090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.999130964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.999290943 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.999296904 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.999345064 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.999495983 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.999510050 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.999555111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.999572039 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.999577999 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.999608994 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.999639988 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:40.999938011 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:40.999949932 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.000000954 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.000006914 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.000257015 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.000274897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.000308037 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.000317097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.000324965 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.000639915 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.000653028 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.000694036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.000699997 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.000713110 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.000895977 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.000914097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.000947952 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.000952959 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.000968933 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.043019056 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.085127115 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.085153103 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.085257053 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.085262060 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.085304976 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.085310936 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.085438967 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.085458994 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.085496902 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.085500956 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.085530043 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.085547924 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.085737944 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.085751057 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.085798979 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.085803986 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.085843086 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.086251020 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.086262941 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.086312056 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.086316109 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.086344004 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.086361885 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.086419106 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.086431980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.086477041 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.086482048 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.086523056 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.086752892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.086774111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.086805105 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.086810112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.086837053 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.086844921 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.087136030 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.087151051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.087187052 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.087192059 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.087219000 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.087230921 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.087393999 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.087408066 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.087470055 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.087475061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.087512016 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.172199965 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.172214985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.172394037 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.172401905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.172447920 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.172678947 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.172692060 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.172744036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.172749043 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.172782898 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.173022985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.173036098 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.173094988 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.173099995 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.173135996 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.173250914 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.173264980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.173304081 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.173309088 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.173335075 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.173345089 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.173628092 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.173643112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.173696995 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.173702002 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.173742056 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.173923969 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.173940897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.173995018 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.174000025 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.174038887 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.174302101 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.174315929 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.174370050 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.174376011 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.174415112 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.174689054 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.174702883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.174752951 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.174757004 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.174803972 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.259102106 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.259115934 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.259325027 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.259330034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.259382010 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.259742022 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.259757042 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.259820938 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.259826899 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.259872913 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.260065079 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.260080099 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.260134935 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.260138988 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.260183096 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.260463953 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.260477066 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.260536909 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.260541916 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.260586023 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.260775089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.260790110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.260845900 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.260858059 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.260901928 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.261243105 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.261257887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.261312962 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.261317968 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.261363983 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.261414051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.261429071 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.261481047 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.261487007 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.261529922 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.261619091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.261632919 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.261687994 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.261693954 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.261733055 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.346030951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.346048117 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.346169949 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.346194029 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.346246004 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.346528053 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.346541882 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.346605062 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.346611977 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.346659899 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.346892118 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.346905947 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.346967936 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.346973896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.347018003 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.347177982 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.347192049 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.347239017 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.347245932 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.347275019 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.347287893 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.347634077 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.347672939 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.347702026 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.347706079 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.347738028 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.347744942 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.347747087 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.347764015 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.347814083 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.347831964 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.347839117 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.347886086 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.348026991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.348040104 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.348094940 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.348100901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.348145008 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.348391056 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.348406076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.348475933 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.348481894 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.348531961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.432874918 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.432895899 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.433094025 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.433099985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.433144093 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.433279991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.433295965 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.433345079 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.433348894 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.433367014 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.433376074 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.433391094 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.433393955 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.433406115 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.433413982 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.433454037 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.433481932 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.433675051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.433686018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.433743000 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.433748960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.433789015 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.434039116 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.434052944 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.434108973 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.434113979 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.434149981 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.434336901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.434350967 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.434396982 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.434401989 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.434417009 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.434443951 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.434622049 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.434634924 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.434689999 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.434695959 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.434743881 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.434926033 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.434967041 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.434984922 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.434988976 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.435014009 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.435030937 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.519814014 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.519829988 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.519876957 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.519890070 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.519901991 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.519932032 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.520015955 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.520030022 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.520065069 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.520071030 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.520093918 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.520106077 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.520427942 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.520440102 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.520490885 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.520494938 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.520533085 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.520715952 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.520730972 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.520781040 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.520786047 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.520822048 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.520945072 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.520957947 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.520998955 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.521004915 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.521025896 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.521038055 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.521392107 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.521404028 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.521459103 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.521465063 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.521501064 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.521636009 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.521650076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.521686077 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.521691084 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.521713018 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.521730900 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.521914005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.521927118 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.521975994 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.521981955 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.522020102 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.606580973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.606596947 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.606868029 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.606906891 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.607203960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.607218981 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.608222008 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.609365940 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.609385014 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.609401941 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.609539986 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.694933891 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.694948912 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.695199966 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.695208073 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.695275068 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.695405960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.695420980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.695481062 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.695487022 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.695544004 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.695559025 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.695588112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.695631027 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.695636034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.695667982 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.695687056 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.695825100 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.695839882 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.695894003 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.695902109 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.695952892 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.696252108 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.696268082 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.696321964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.696333885 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.696342945 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.696362972 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.696398020 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.696891069 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.696903944 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.696954012 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.696960926 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.696964979 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.697005987 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.697026014 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.697038889 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.697068930 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.746134043 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.781822920 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.781841040 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.782052040 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.782090902 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.782094955 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.782120943 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.782139063 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.782139063 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.782149076 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.782496929 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.782516956 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.782562017 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.782571077 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.782602072 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.782746077 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.782762051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.782798052 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.782804966 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.782831907 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.783073902 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.783087969 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.783128977 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.783134937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.783164024 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.783365965 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.783382893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.783425093 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.783432961 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.783457041 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.783638954 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.783652067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.783685923 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.783691883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.783720970 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.784045935 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.784064054 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.784116030 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.784121037 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.784145117 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.786684990 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.868599892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.868622065 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.868803024 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.868809938 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.868868113 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.868966103 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.868985891 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.869050026 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.869055033 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.869105101 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.869292021 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.869306087 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.869363070 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.869368076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.869412899 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.869679928 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.869695902 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.869757891 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.869764090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.869813919 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.869961023 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.869976044 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.870032072 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.870037079 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.870083094 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.870212078 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.870228052 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.870286942 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.870302916 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.870347023 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.870524883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.870538950 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.870596886 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.870601892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.870645046 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.870899916 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.870913982 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.870976925 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.870980978 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.871023893 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.955516100 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.955533981 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.955584049 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.955590010 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.955622911 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.955636024 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.955842018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.955877066 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.955904961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.955909967 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.955935001 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.955951929 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.956176043 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.956190109 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.956240892 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.956244946 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.956269026 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.956279993 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.956559896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.956573963 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.956621885 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.956626892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.956654072 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.956665993 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.956887960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.956902981 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.956957102 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.956960917 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.956998110 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.957001925 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.957012892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.957039118 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.957053900 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.957062006 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.957101107 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.957118034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:41.957160950 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:41.957400084 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.158817053 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.158853054 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.158948898 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.159257889 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.159272909 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.616642952 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.618592024 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.618626118 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.751990080 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.752140999 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.752181053 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.752193928 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.752229929 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.752269983 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.752278090 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.752314091 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.752351999 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.752358913 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.753004074 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.753057003 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.753067970 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.756786108 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.756834030 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.756843090 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.808541059 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.838892937 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.838984013 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.839015961 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.839030027 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.839039087 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.839072943 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.839195967 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.839205980 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.839253902 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.839895010 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.840106964 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.840137959 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.840157032 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.840163946 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.840205908 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.840210915 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.840871096 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.840904951 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.840919971 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.840925932 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.840967894 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.840972900 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.841005087 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.841044903 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.841052055 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.841692924 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.841746092 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.841752052 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.886828899 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.886835098 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.925875902 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.925908089 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.925934076 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.925960064 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.926042080 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.926042080 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.926049948 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.926088095 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.926093102 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.926099062 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.926150084 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.926156998 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.926647902 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.926681995 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.926696062 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.926702023 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.926718950 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.926740885 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.926752090 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.926778078 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.927537918 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.927571058 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.927596092 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.927603960 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.927613020 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.927627087 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.927653074 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.927656889 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.927702904 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.928296089 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.928430080 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.928463936 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.928469896 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.928508997 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.928525925 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.929197073 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.929258108 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.929291964 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.929344893 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.929361105 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.929428101 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:42.930159092 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:42.930214882 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.012836933 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.012912035 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.012995005 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.012999058 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.012999058 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.013009071 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.013041973 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.013051033 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.013092995 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.013101101 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.013140917 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.013504982 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.013554096 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.013588905 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.013647079 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.013680935 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.013734102 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.014184952 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.014242887 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.014242887 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.014254093 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.014287949 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.014337063 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.014386892 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.014415026 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.014470100 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.015140057 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.015181065 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.015194893 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.015201092 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.015228987 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.015290976 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.015342951 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.015350103 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.015371084 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.015392065 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.015400887 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.015414000 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.016099930 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.016160011 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.016170025 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.016184092 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.016220093 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.016225100 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.016258001 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.016297102 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.016304016 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.016345978 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.016397953 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.016453981 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.017043114 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.017098904 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.017131090 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.017184019 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.017213106 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.017261982 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.017925978 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.017981052 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.099340916 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.099373102 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.099412918 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.099467039 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.099482059 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.099495888 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.099495888 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.099754095 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.099816084 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.099822998 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.099879026 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.100008965 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.100040913 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.100070953 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.100078106 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.100100994 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.100123882 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.100492001 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.100550890 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.100640059 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.100677013 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.100706100 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.100712061 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.100720882 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.100752115 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.101424932 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.101442099 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.101491928 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.101497889 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.101525068 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.101541042 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.104455948 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.104470015 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.104518890 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.104526043 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.104553938 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.104566097 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.105156898 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.105173111 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.105233908 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.105238914 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.105268002 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.105283976 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.105686903 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.105703115 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.105762005 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.105771065 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.105796099 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.105804920 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.106465101 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.106481075 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.106547117 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.106554031 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.106591940 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.186114073 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.186134100 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.186311007 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.186319113 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.186367989 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.186463118 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.186480045 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.186543941 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.186552048 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.186592102 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.186775923 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.186794043 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.186844110 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.186851978 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.186892986 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.187093973 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.187108040 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.187160015 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.187167883 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.187211037 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.187408924 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.187433958 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.187472105 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.187478065 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.187505960 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.187525988 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.187786102 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.187803030 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.187865019 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.187871933 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.187910080 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.188093901 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.188110113 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.188177109 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.188183069 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.188225985 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.188436985 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.188451052 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.188507080 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.188513041 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.188556910 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.272923946 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.272941113 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.272991896 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.273001909 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.273027897 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.273046017 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.273267031 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.273281097 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.273320913 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.273325920 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.273354053 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.273376942 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.273670912 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.273685932 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.273715973 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.273740053 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.273744106 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.273814917 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.273859978 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.273876905 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.273924112 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.273931026 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.273956060 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.273969889 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.274221897 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.274236917 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.274291992 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.274297953 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.274338007 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.274516106 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.274532080 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.274574041 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.274580956 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.274605989 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.274619102 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.274769068 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.274784088 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.274822950 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.274828911 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.274853945 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.274867058 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.275146961 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.275161028 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.275202990 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.275208950 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.275234938 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.275253057 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.359745026 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.359766960 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.359951019 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.359958887 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.360004902 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.360018015 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.360028028 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.360039949 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.360061884 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.360104084 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.360332966 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.360347986 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.360411882 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.360419035 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.360466003 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.360764027 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.360776901 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.360837936 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.360845089 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.360888958 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.361093998 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.361108065 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.361162901 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.361167908 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.361180067 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.361212969 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.361310005 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.361325979 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.361387968 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.361394882 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.361450911 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.361661911 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.361679077 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.361736059 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.361742020 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.361788034 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.361979961 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.362000942 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.362055063 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.362061977 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.362102985 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.446643114 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.446661949 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.446890116 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.446901083 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.446964979 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.446974993 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.446989059 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.447051048 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.447058916 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.447104931 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.447329998 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.447344065 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.447402000 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.447408915 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.447436094 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.447453022 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.447650909 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.447665930 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.447720051 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.447726965 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.447751999 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.447771072 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.447937012 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.447952032 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.448010921 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.448016882 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.448065042 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.448252916 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.448267937 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.448323965 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.448331118 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.448374987 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.448501110 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.448515892 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.448569059 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.448575020 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.448601961 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.448620081 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.448879004 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.448894024 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.448945999 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.448951960 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.448977947 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.448999882 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.533472061 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.533490896 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.533637047 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.533653975 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.533715963 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.533752918 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.533772945 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.533838034 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.533843994 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.533890009 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.534051895 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.534065962 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.534127951 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.534135103 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.534181118 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.534401894 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.534415960 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.534483910 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.534491062 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.534538984 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.534763098 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.534780025 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.534843922 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.534849882 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.534897089 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.535036087 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.535051107 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.535110950 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.535118103 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.535162926 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.535327911 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.535342932 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.535407066 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.535413980 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.535459995 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.535691977 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.535717010 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.535763025 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.535769939 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.535795927 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.535811901 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.620275021 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.620290995 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.620609999 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.620645046 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.620675087 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.620690107 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.620753050 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.620903969 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.620918036 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.620986938 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.620995045 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.621392012 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.621413946 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.621455908 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.621463060 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.621473074 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.621556044 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.621568918 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.621633053 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.621640921 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.621990919 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.622009993 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.622066021 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.622075081 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.622172117 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.622184992 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.622246027 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.622256041 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.622534990 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.622560978 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.622606993 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.622613907 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.622625113 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.668025017 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.707139015 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.707154989 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.707365990 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.707379103 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.707439899 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.707448959 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.707463980 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.707526922 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.707535028 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.707580090 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.707772970 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.707787037 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.707855940 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.707864046 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.707910061 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.708062887 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.708079100 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.708147049 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.708153963 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.708199978 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.708374977 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.708389044 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.708456039 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.708462000 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.708504915 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.708746910 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.708764076 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.708823919 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.708830118 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.708875895 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.709081888 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.709096909 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.709157944 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.709166050 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.709218025 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.709286928 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.709301949 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.709367037 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.709373951 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.709417105 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.901789904 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.901808023 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.901885986 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.901915073 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.901961088 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.901994944 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.902009964 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.902065992 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.902071953 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.902112961 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.902230978 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.902245998 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.902308941 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.902316093 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.902358055 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.902601957 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.902616978 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.902669907 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.902669907 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.902683020 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.902700901 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.902719021 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.902754068 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.902759075 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.902801037 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.903345108 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.903362036 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.903402090 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.903409004 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.903440952 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.903450966 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.903474092 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.903496027 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.903527975 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.903533936 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.903558969 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.903574944 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.904125929 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.904141903 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.904187918 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.904194117 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.904215097 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.904218912 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.904237986 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.904238939 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.904248953 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.904268026 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.904300928 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.904306889 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.904314041 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.904341936 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.904356956 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.904364109 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.904393911 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.904412985 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.904985905 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.905003071 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.905044079 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.905050993 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.905060053 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.905076027 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.905077934 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.905098915 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.905105114 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.905116081 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.905138016 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.905148983 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.905179024 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.905194044 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.905241966 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.905246973 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.905270100 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.905282974 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.906008959 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.906023979 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.906074047 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.906097889 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.906105042 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.906126976 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.906126976 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.906172037 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.906177044 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.906188965 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.906208992 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.906229019 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.906234980 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.906267881 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.949207067 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.968007088 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.968024969 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.968082905 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.968090057 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.968122959 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.968132973 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.968142986 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.968153000 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.968173981 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.968203068 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.968404055 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.968417883 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.968466997 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.968475103 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.968518019 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.968739033 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.968754053 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.968806982 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.968816042 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.968858004 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.969094992 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.969115973 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.969166040 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.969172955 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.969211102 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.969393969 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.969408989 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.969463110 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.969470024 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.969512939 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.969762087 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.969779015 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.969829082 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:43.969835997 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:43.969876051 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.010795116 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.010832071 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.010962009 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.010962009 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.010970116 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.011012077 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.054866076 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.054882050 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.054964066 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.054970026 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.054980993 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.055006027 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.055126905 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.055126905 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.055136919 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.055179119 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.055254936 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.055268049 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.055309057 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.055320024 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.055336952 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.055362940 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.055628061 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.055643082 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.055700064 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.055707932 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.055747986 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.055963039 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.055983067 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.056032896 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.056041002 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.056082010 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.056243896 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.056263924 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.056308031 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.056313992 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.056355953 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.056613922 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.056627989 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.056683064 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.056689978 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.056730032 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.097671986 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.097697020 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.097752094 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.097759008 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.097910881 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.097910881 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.141561031 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.141580105 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.141746044 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.141755104 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.141813993 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.141865015 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.141881943 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.141948938 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.141956091 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.141995907 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.142153978 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.142169952 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.142220020 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.142226934 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.142254114 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.142271042 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.142462015 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.142482996 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.142530918 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.142539024 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.142560005 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.142581940 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.142829895 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.142847061 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.142889977 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.142896891 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.142920971 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.142937899 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.143153906 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.143168926 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.143215895 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.143220901 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.143250942 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.143256903 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.143488884 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.143505096 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.143553019 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.143559933 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.143579960 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.143604040 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.186117887 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.186135054 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.186229944 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.186240911 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.186441898 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.228471041 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.228502035 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.228646994 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.228646994 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.228661060 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.228713989 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.228904963 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.228920937 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.228979111 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.228986025 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.229027033 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.229171038 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.229187012 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.229243994 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.229250908 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.229293108 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.229537010 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.229564905 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.229599953 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.229607105 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.229634047 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.229641914 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.229863882 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.229878902 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.229934931 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.229943037 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.229984045 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.230216980 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.230232954 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.230285883 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.230293989 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.230329990 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.230573893 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.230591059 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.230644941 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.230650902 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.230685949 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.271457911 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.271501064 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.271589041 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.271596909 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.271639109 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.271639109 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.315444946 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.315460920 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.315546989 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.315562010 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.315701962 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.315794945 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.315812111 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.315872908 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.315880060 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.315922022 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.316152096 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.316173077 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.316230059 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.316240072 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.316281080 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.316410065 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.316425085 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.316479921 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.316487074 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.316535950 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.316884995 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.316900015 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.316956043 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.316962004 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.317003012 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.317085028 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.317100048 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.317145109 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.317152023 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.317181110 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.317192078 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.317405939 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.317420959 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.317478895 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.317486048 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.317526102 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.359364986 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.359380960 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.359571934 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.359580040 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.359626055 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.402643919 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.402661085 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.402847052 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.402861118 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.402914047 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.403331995 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.403346062 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.403414965 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.403424025 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.403484106 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.403707981 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.403723955 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.403784037 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.403791904 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.403834105 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.404212952 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.404228926 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.404292107 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.404299021 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.404335022 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.404469013 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.404484034 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.404531956 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.404539108 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.404567957 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.404582977 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.405275106 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.405291080 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.405348063 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.405354977 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.405397892 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.405581951 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.405597925 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.405649900 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.405656099 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.405680895 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.405695915 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.448508024 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.448524952 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.448590994 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.448606014 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.448648930 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.492429972 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.492450953 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.492495060 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.492510080 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.492522001 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.492552042 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.492837906 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.492857933 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.492908001 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.492917061 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.492929935 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.492954016 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.493522882 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.493539095 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.493581057 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.493590117 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.493607044 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.493624926 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.493872881 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.493890047 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.493937969 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.493947029 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.493985891 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.494337082 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.494352102 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.494390965 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.494396925 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.494425058 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.494438887 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.494842052 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.494858027 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.494900942 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.494908094 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.494934082 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.494954109 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.495187044 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.495202065 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.495255947 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.495264053 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.495305061 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.534934998 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.534955025 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.535079002 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.535092115 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.535280943 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.578376055 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.578392982 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.578541040 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.578553915 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.578574896 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.578593969 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.578612089 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.578618050 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.578649998 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.578668118 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.578701019 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.578715086 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.578763008 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.578768015 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.578789949 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.578814983 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.579010963 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.579025984 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.579090118 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.579097986 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.579164982 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.579540014 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.579555988 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.579616070 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.579622984 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.579669952 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.579865932 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.579880953 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.579946995 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.579953909 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.579998970 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.580552101 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.580565929 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.580624104 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.580631018 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.580679893 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.619076014 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.619091034 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.619307995 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.619326115 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.619385004 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.663099051 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.663115025 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.663302898 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.663302898 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.663316965 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.663357973 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.663455963 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.663470984 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.663527012 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.663535118 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.663575888 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.663767099 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.663781881 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.663831949 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.663845062 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.663856030 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.663876057 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.664144039 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.664160013 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.664206982 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.664213896 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.664239883 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.664256096 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.664513111 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.664526939 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.664583921 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.664594889 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.664617062 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.664638042 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.664783001 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.664796114 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.664849997 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.664856911 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.664880037 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.664894104 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.665050030 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.665066004 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.665113926 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.665119886 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.665146112 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.665160894 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.705482006 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.705497980 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.705544949 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.705553055 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.705588102 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.705607891 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.749746084 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.749762058 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.749815941 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.749825001 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.749836922 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.749865055 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.750042915 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.750063896 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.750097036 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.750103951 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.750113010 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.750142097 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.750309944 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.750339985 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.750364065 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.750370026 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.750387907 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.750407934 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.750623941 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.750638962 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.750683069 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.750689983 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.750699043 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.750730038 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.751102924 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.751127005 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.751157045 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.751163006 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.751173973 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.751202106 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.751310110 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.751329899 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.751378059 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.751384974 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.751421928 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.751601934 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.751616955 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.751655102 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.751662016 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.751672029 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.751701117 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.792361975 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.792387962 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.792439938 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.792448044 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.792458057 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.792490005 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.837198973 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.837215900 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.837302923 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.837313890 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.837483883 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.837663889 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.837677956 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.837737083 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.837743998 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.837802887 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.838184118 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.838198900 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.838263035 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.838270903 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.838310003 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.838510990 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.838526011 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.838588953 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.838597059 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.838645935 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.839077950 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.839092970 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.839153051 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.839159966 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.839204073 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.839541912 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.839557886 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.839622021 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.839628935 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.839674950 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.839760065 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.839773893 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.839828968 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.839835882 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.839880943 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.879132986 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.879152060 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.879241943 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.879250050 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.879405975 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.923499107 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.923525095 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.923599958 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.923609018 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.923670053 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.923688889 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.923772097 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.923772097 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.923772097 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.923779964 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.923826933 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.924069881 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.924082994 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.924144030 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.924150944 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.924196959 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.924377918 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.924401999 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.924448013 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.924453974 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.924463034 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.924499989 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.924745083 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.924758911 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.924817085 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.924822092 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.924832106 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.924863100 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.924966097 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.924979925 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.925045013 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.925050974 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.925098896 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.925405025 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.925425053 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.925482035 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.925493002 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.925544024 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.966828108 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.966841936 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.967051029 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:44.967058897 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:44.967108965 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.011368990 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.011384964 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.011455059 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.011462927 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.011508942 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.011897087 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.011914968 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.011965036 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.011976957 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.011989117 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.012017012 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.012120962 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.012135983 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.012193918 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.012201071 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.012245893 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.012806892 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.012820005 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.012882948 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.012891054 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.012937069 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.013205051 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.013221025 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.013276100 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.013282061 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.013330936 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.013403893 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.013418913 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.013473988 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.013480902 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.013535023 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.014195919 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.014213085 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.014261961 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.014269114 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.014311075 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.052869081 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.052886009 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.052954912 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.052966118 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.053005934 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.097033978 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.097049952 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.097151041 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.097157955 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.097210884 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.097294092 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.097311020 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.097378016 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.097384930 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.097431898 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.097688913 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.097703934 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.097760916 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.097768068 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.097816944 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.098023891 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.098038912 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.098094940 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.098102093 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.098144054 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.098407030 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.098422050 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.098480940 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.098485947 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.098534107 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.098644018 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.098661900 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.098720074 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.098726988 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.098771095 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.098891973 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.098906994 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.098975897 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.098982096 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.099026918 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.139646053 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.139663935 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.139749050 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.139756918 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.139806986 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.183720112 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.183737993 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.183828115 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.183835983 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.183983088 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.184076071 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.184091091 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.184145927 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.184151888 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.184195042 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.184360027 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.184375048 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.184442043 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.184448957 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.184489012 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.184765100 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.184782982 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.184829950 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.184837103 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.184861898 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.184875011 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.185163021 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.185178041 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.185225010 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.185230970 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.185261011 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.185270071 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.185365915 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.185380936 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.185439110 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.185446024 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.185486078 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.185631990 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.185647011 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.185697079 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.185703039 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.185729980 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.185744047 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.226494074 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.226510048 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.226618052 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.226625919 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.226671934 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.270561934 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.270576954 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.270699024 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.270708084 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.270762920 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.270979881 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.270993948 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.271063089 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.271070004 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.271116018 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.271197081 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.271212101 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.271270037 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.271276951 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.271326065 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.271619081 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.271635056 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.271702051 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.271709919 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.271759033 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.271855116 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.271877050 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.271935940 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.271943092 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.271991014 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.272193909 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.272208929 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.272277117 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.272283077 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.272329092 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.272473097 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.272501945 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.272546053 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.272552013 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.272582054 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.272594929 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.313424110 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.313438892 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.313595057 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.313602924 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.313667059 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.357409000 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.357433081 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.357501984 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.357513905 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.357558012 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.357764959 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.357779026 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.357839108 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.357846975 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.357892990 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.358151913 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.358165979 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.358218908 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.358225107 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.358251095 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.358267069 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.358400106 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.358414888 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.358477116 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.358481884 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.358526945 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.358798981 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.358812094 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.358867884 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.358874083 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.358896971 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.358908892 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.359203100 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.359219074 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.359272003 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.359278917 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.359302044 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.359323978 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.359379053 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.359394073 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.359457016 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.359463930 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.359510899 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.400186062 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.400201082 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.400269032 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.400275946 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.400427103 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.444192886 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.444210052 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.444380045 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.444380045 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.444391012 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.444442987 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.444566011 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.444581032 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.444648027 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.444655895 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.444699049 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.444890976 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.444905996 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.444966078 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.444972038 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.444991112 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.445022106 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.445188046 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.445208073 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.445267916 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.445275068 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.445314884 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.445530891 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.445545912 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.445604086 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.445611000 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.445627928 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.445658922 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.445805073 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.445817947 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.445874929 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.445880890 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.445898056 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.445929050 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.446098089 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.446114063 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.446175098 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.446181059 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.446219921 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.487119913 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.487145901 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.487212896 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.487221003 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.487377882 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.531050920 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.531066895 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.531152010 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.531157970 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.531203985 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.531352997 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.531368971 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.531419992 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.531425953 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.531454086 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.531472921 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.531650066 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.531665087 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.531722069 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.531728983 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.531747103 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.531769037 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.532053947 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.532069921 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.532135963 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.532143116 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.532179117 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.532398939 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.532413006 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.532474041 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.532480001 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.532521963 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.532746077 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.532759905 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.532818079 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.532824039 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.532854080 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.532866001 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.532968998 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.532983065 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.533035994 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.533042908 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.533124924 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.573919058 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.573934078 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.574026108 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.574060917 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.574107885 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.617867947 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.617882013 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.617937088 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.617947102 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.617974043 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.617985964 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.618215084 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.618230104 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.618283033 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.618290901 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.618315935 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.618335962 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.618546963 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.618566036 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.618637085 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.618647099 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.618714094 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.618896961 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.618911028 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.618967056 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.618973970 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.619016886 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.619129896 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.619143963 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.619180918 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.619188070 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.619201899 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.619225025 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.619546890 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.619560957 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.619610071 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.619618893 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.619657993 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.619858027 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.619870901 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.619985104 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.619992018 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.620060921 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.660825014 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.660861015 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.661025047 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.661039114 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.661180019 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.704809904 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.704826117 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.705017090 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.705027103 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.705080032 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.705121994 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.705136061 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.705178022 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.705187082 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.705199003 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.705229044 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.705442905 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.705456018 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.705497026 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.705506086 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.705518961 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.705573082 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.705732107 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.705746889 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.705789089 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.705796003 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.705811977 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.706036091 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.706054926 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.706087112 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.706094980 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.706109047 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.706406116 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.706418991 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.706459999 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.706468105 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.706481934 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.706504107 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.706733942 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.706747055 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.706796885 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.706804991 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.706845045 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.747745991 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.747762918 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.747840881 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.747849941 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.747898102 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.791650057 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.791663885 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.791753054 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.791759968 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.791913033 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.791913033 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.791934967 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.791963100 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.791990042 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.791997910 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.792010069 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.792040110 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.792378902 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.792392015 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.792445898 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.792452097 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.792467117 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.792504072 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.792695045 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.792709112 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.792761087 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.792768002 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.792833090 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.792907000 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.792921066 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.792959929 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.792967081 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.793024063 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.793287039 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.793313980 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.793348074 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.793354988 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.793365002 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.793399096 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.793584108 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.793596983 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.793648005 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.793653965 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.793678045 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.793698072 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.834662914 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.834680080 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.834784031 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.834793091 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.834845066 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.878680944 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.878694057 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.878884077 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.878895044 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.878936052 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.878945112 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.878951073 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.878976107 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.878993034 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.879000902 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.879029989 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.879050016 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.879327059 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.879338980 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.879404068 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.879410982 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.879436016 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.879461050 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.879669905 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.879686117 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.879741907 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.879749060 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.879791975 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.880023003 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.880038023 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.880094051 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.880101919 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.880142927 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.880325079 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.880340099 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.880395889 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.880403042 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.880443096 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:32:45.880537987 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:32:45.880552053 CET	443	49769	104.16.149.130	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 6, 2025 09:32:08.516536951 CET	192.168.2.4	1.1.1.1	0x9cca	Standard query (0)	geo.lavasoft.com	A (IP address)	IN (0x0001)	false
Jan 6, 2025 09:32:09.763206005 CET	192.168.2.4	1.1.1.1	0x19d1	Standard query (0)	featureflags.lavasoft.com	A (IP address)	IN (0x0001)	false
Jan 6, 2025 09:32:10.662323952 CET	192.168.2.4	1.1.1.1	0xf768	Standard query (0)	flwadw.com	A (IP address)	IN (0x0001)	false
Jan 6, 2025 09:32:26.015280008 CET	192.168.2.4	1.1.1.1	0x4e41	Standard query (0)	wcdownloadercdn.lavasoft.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jan 6, 2025 09:32:08.524939060 CET	1.1.1.1	192.168.2.4	0x9cca	No error (0)	geo.lavasoft.com	104.16.148.130	A (IP address)	IN (0x0001)	false
Jan 6, 2025 09:32:08.524939060 CET	1.1.1.1	192.168.2.4	0x9cca	No error (0)	geo.lavasoft.com	104.16.149.130	A (IP address)	IN (0x0001)	false
Jan 6, 2025 09:32:09.770709038 CET	1.1.1.1	192.168.2.4	0x19d1	No error (0)	featureflags.lavasoft.com	104.16.149.130	A (IP address)	IN (0x0001)	false
Jan 6, 2025 09:32:09.770709038 CET	1.1.1.1	192.168.2.4	0x19d1	No error (0)	featureflags.lavasoft.com	104.16.148.130	A (IP address)	IN (0x0001)	false
Jan 6, 2025 09:32:10.669229984 CET	1.1.1.1	192.168.2.4	0xf768	No error (0)	flwadw.com	104.18.26.149	A (IP address)	IN (0x0001)	false
Jan 6, 2025 09:32:10.669229984 CET	1.1.1.1	192.168.2.4	0xf768	No error (0)	flwadw.com	104.18.27.149	A (IP address)	IN (0x0001)	false
Jan 6, 2025 09:32:26.025808096 CET	1.1.1.1	192.168.2.4	0x4e41	No error (0)	wcdownloadercdn.lavasoft.com	104.16.149.130	A (IP address)	IN (0x0001)	false
Jan 6, 2025 09:32:26.025808096 CET	1.1.1.1	192.168.2.4	0x4e41	No error (0)	wcdownloadercdn.lavasoft.com	104.16.148.130	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49732	104.16.148.130	80	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
Jan 6, 2025 09:32:08.555794954 CET	66	OUT	GET / HTTP/1.1 Host: geo.lavasoft.com Connection: Keep-Alive
Jan 6, 2025 09:32:09.027638912 CET	311	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:08 GMT Content-Type: text/plain Content-Length: 77 Connection: keep-alive Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b17e9984394-EWR Data Raw: 7b 22 78 2d 67 65 6f 63 6f 75 6e 74 72 79 22 3a 22 47 42 22 2c 22 78 2d 67 65 6f 63 6f 75 6e 74 72 79 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 4b 69 6e 67 64 6f 6d 22 2c 22 63 66 2d 69 70 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d Data Ascii: {"x-geocountry":"GB","x-geocountryname":"United Kingdom","cf-ipcountry":"US"}
Jan 6, 2025 09:32:23.833937883 CET	42	OUT	GET / HTTP/1.1 Host: geo.lavasoft.com
Jan 6, 2025 09:32:23.961266994 CET	311	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:23 GMT Content-Type: text/plain Content-Length: 77 Connection: keep-alive Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b754c674394-EWR Data Raw: 7b 22 78 2d 67 65 6f 63 6f 75 6e 74 72 79 22 3a 22 47 42 22 2c 22 78 2d 67 65 6f 63 6f 75 6e 74 72 79 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 4b 69 6e 67 64 6f 6d 22 2c 22 63 66 2d 69 70 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d Data Ascii: {"x-geocountry":"GB","x-geocountryname":"United Kingdom","cf-ipcountry":"US"}

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49733	104.16.149.130	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:10 UTC	143	OUT	POST /api/feature/WC HTTP/1.1 Content-Type: application/json Host: featureflags.lavasoft.com Content-Length: 194 Connection: Keep-Alive
2025-01-06 08:32:10 UTC	194	OUT	Data Raw: 7b 22 47 65 6f 22 3a 22 47 42 22 2c 22 50 61 72 74 6e 65 72 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 22 3a 22 32 31 37 39 34 35 39 39 31 39 36 22 2c 22 49 6e 73 74 61 6c 6c 44 61 74 65 22 3a 22 32 30 32 35 30 31 30 36 22 2c 22 54 72 69 67 67 65 72 54 79 70 65 22 3a 22 69 6e 73 74 61 6c 6c 22 2c 22 54 72 69 67 67 65 72 45 76 65 6e 74 22 3a 22 69 6e 73 74 61 6c 6c 65 72 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 66 65 61 74 75 72 65 77 70 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 61 6c 22 3a 74 72 75 65 7d Data Ascii: {"Geo":"GB","Partner":"IN240402","Campaign":"21794599196","InstallDate":"20250106","TriggerType":"install","TriggerEvent":"installer","Version":"13.900.0.1080","featurewp":true,"featureal":true}
2025-01-06 08:32:10 UTC	249	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:10 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b213a80439d-EWR
2025-01-06 08:32:10 UTC	884	IN	Data Raw: 33 36 64 0d 0a 5b 7b 22 73 65 63 74 69 6f 6e 43 6f 64 65 22 3a 22 57 41 43 22 2c 22 63 6f 64 65 22 3a 22 57 41 43 22 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 22 7b 5c 22 49 63 6f 6e 5c 22 3a 20 5c 22 68 74 74 70 73 3a 2f 2f 77 65 62 63 6f 6d 70 61 6e 69 6f 6e 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 5c 22 2c 20 5c 22 41 70 70 4e 61 6d 65 5c 22 3a 20 5c 22 57 65 62 20 43 6f 6d 70 61 6e 69 6f 6e 5c 22 2c 20 5c 22 53 65 74 74 69 6e 67 73 5c 22 3a 20 5b 5c 22 57 43 41 75 74 6f 55 70 64 61 74 65 5c 22 2c 20 5c 22 45 6e 61 62 6c 65 47 72 61 6e 75 6c 61 72 69 74 79 5c 22 2c 20 5c 22 50 6f 73 74 52 75 6e 56 32 41 63 74 69 6f 6e 5c 22 2c 20 5c 22 50 6f 73 74 52 75 6e 54 69 6d 65 72 41 63 74 69 6f 6e 5c 22 2c 20 5c 22 45 6e 61 Data Ascii: 36d[{"sectionCode":"WAC","code":"WAC","configuration":"{\"Icon\": \"https://webcompanion.com/images/favicon.ico\", \"AppName\": \"Web Companion\", \"Settings\": [\"WCAutoUpdate\", \"EnableGranularity\", \"PostRunV2Action\", \"PostRunTimerAction\", \"Ena
2025-01-06 08:32:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49734	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:11 UTC	166	OUT	POST /v1/event-stat?Type=Start&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 447 Connection: Keep-Alive
2025-01-06 08:32:11 UTC	447	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 54 72 69 67 67 65 72 22 3a 20 22 69 6e 73 74 61 6c 6c 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "d768e6f2-f3e1-499f-9b44-ef0144c95940", "Version": "13.900.0.1080", "Trigger": "install", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId"
2025-01-06 08:32:11 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:11 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b26487a43be-EWR
2025-01-06 08:32:11 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49735	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:11 UTC	145	OUT	POST /v1/event-stat-wc?Type=Start&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 398
2025-01-06 08:32:11 UTC	398	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 54 72 69 67 67 65 72 22 3a 22 69 6e 73 74 61 6c 6c 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"d768e6f2-f3e1-499f-9b44-ef0144c95940","Version":"13.900.0.1080","Trigger":"install","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402"
2025-01-06 08:32:11 UTC	235	IN	HTTP/1.1 400 Bad Request Date: Mon, 06 Jan 2025 08:32:11 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b2a7f798c89-EWR
2025-01-06 08:32:11 UTC	39	IN	Data Raw: 32 31 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 66 6f 72 6d 61 74 2f 64 61 74 61 22 7d 0d 0a Data Ascii: 21{"message":"Invalid format/data"}
2025-01-06 08:32:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49736	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:12 UTC	152	OUT	POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 508
2025-01-06 08:32:12 UTC	508	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 3a 20 22 49 4e 32 34 30 34 30 32 22 2c 0d 0a 20 20 22 43 61 6d 70 61 69 67 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "d768e6f2-f3e1-499f-9b44-ef0144c95940", "Version": "13.900.0.1080", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId": "IN240402", "Campaig
2025-01-06 08:32:12 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:12 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b2f5db443f9-EWR
2025-01-06 08:32:12 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49737	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:13 UTC	155	OUT	POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 646
2025-01-06 08:32:13 UTC	646	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 49 44 22 3a 22 32 31 37 39 34 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"d768e6f2-f3e1-499f-9b44-ef0144c95940","Version":"13.900.0.1080","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402","CampaignID":"21794
2025-01-06 08:32:13 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:13 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b336c3cc339-EWR
2025-01-06 08:32:13 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49738	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:14 UTC	152	OUT	POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 515
2025-01-06 08:32:14 UTC	515	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 3a 20 22 49 4e 32 34 30 34 30 32 22 2c 0d 0a 20 20 22 43 61 6d 70 61 69 67 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "d768e6f2-f3e1-499f-9b44-ef0144c95940", "Version": "13.900.0.1080", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId": "IN240402", "Campaig
2025-01-06 08:32:14 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:14 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b3c88fd8c21-EWR
2025-01-06 08:32:14 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49741	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:15 UTC	155	OUT	POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 482
2025-01-06 08:32:15 UTC	482	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 49 44 22 3a 22 32 31 37 39 34 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"d768e6f2-f3e1-499f-9b44-ef0144c95940","Version":"13.900.0.1080","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402","CampaignID":"21794
2025-01-06 08:32:15 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:15 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b40ee4a7ca2-EWR
2025-01-06 08:32:15 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49742	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:16 UTC	152	OUT	POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 515
2025-01-06 08:32:16 UTC	515	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 3a 20 22 49 4e 32 34 30 34 30 32 22 2c 0d 0a 20 20 22 43 61 6d 70 61 69 67 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "d768e6f2-f3e1-499f-9b44-ef0144c95940", "Version": "13.900.0.1080", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId": "IN240402", "Campaig
2025-01-06 08:32:16 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:16 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b450e5e42dc-EWR
2025-01-06 08:32:16 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49743	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:16 UTC	155	OUT	POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 488
2025-01-06 08:32:16 UTC	488	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 49 44 22 3a 22 32 31 37 39 34 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"d768e6f2-f3e1-499f-9b44-ef0144c95940","Version":"13.900.0.1080","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402","CampaignID":"21794
2025-01-06 08:32:16 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:16 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b491b1f4210-EWR
2025-01-06 08:32:16 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49745	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:17 UTC	152	OUT	POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 527
2025-01-06 08:32:17 UTC	527	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 3a 20 22 49 4e 32 34 30 34 30 32 22 2c 0d 0a 20 20 22 43 61 6d 70 61 69 67 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "d768e6f2-f3e1-499f-9b44-ef0144c95940", "Version": "13.900.0.1080", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId": "IN240402", "Campaig
2025-01-06 08:32:17 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:17 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b4d6d587d0b-EWR
2025-01-06 08:32:17 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49746	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:18 UTC	155	OUT	POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 466
2025-01-06 08:32:18 UTC	466	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 49 44 22 3a 22 32 31 37 39 34 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"d768e6f2-f3e1-499f-9b44-ef0144c95940","Version":"13.900.0.1080","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402","CampaignID":"21794
2025-01-06 08:32:18 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:18 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b51fa157d24-EWR
2025-01-06 08:32:18 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49747	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:18 UTC	152	OUT	POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 527
2025-01-06 08:32:18 UTC	527	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 3a 20 22 49 4e 32 34 30 34 30 32 22 2c 0d 0a 20 20 22 43 61 6d 70 61 69 67 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "d768e6f2-f3e1-499f-9b44-ef0144c95940", "Version": "13.900.0.1080", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId": "IN240402", "Campaig
2025-01-06 08:32:19 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:18 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b5638f40cb2-EWR
2025-01-06 08:32:19 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49749	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:19 UTC	155	OUT	POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 458
2025-01-06 08:32:19 UTC	458	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 49 44 22 3a 22 32 31 37 39 34 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"d768e6f2-f3e1-499f-9b44-ef0144c95940","Version":"13.900.0.1080","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402","CampaignID":"21794
2025-01-06 08:32:19 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:19 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b5a480b41d9-EWR
2025-01-06 08:32:19 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49751	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:20 UTC	152	OUT	POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 520
2025-01-06 08:32:20 UTC	520	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 3a 20 22 49 4e 32 34 30 34 30 32 22 2c 0d 0a 20 20 22 43 61 6d 70 61 69 67 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "d768e6f2-f3e1-499f-9b44-ef0144c95940", "Version": "13.900.0.1080", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId": "IN240402", "Campaig
2025-01-06 08:32:20 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:20 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b5e8a3072a1-EWR
2025-01-06 08:32:20 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49752	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:20 UTC	155	OUT	POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 460
2025-01-06 08:32:20 UTC	460	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 49 44 22 3a 22 32 31 37 39 34 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"d768e6f2-f3e1-499f-9b44-ef0144c95940","Version":"13.900.0.1080","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402","CampaignID":"21794
2025-01-06 08:32:21 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:21 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b631f49de95-EWR
2025-01-06 08:32:21 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49753	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:21 UTC	152	OUT	POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 520
2025-01-06 08:32:21 UTC	520	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 3a 20 22 49 4e 32 34 30 34 30 32 22 2c 0d 0a 20 20 22 43 61 6d 70 61 69 67 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "d768e6f2-f3e1-499f-9b44-ef0144c95940", "Version": "13.900.0.1080", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId": "IN240402", "Campaig
2025-01-06 08:32:21 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:21 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b6718341889-EWR
2025-01-06 08:32:21 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49754	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:22 UTC	155	OUT	POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 475
2025-01-06 08:32:22 UTC	475	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 49 44 22 3a 22 32 31 37 39 34 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"d768e6f2-f3e1-499f-9b44-ef0144c95940","Version":"13.900.0.1080","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402","CampaignID":"21794
2025-01-06 08:32:22 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:22 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b6b5aa9433e-EWR
2025-01-06 08:32:22 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49755	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:22 UTC	152	OUT	POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 520
2025-01-06 08:32:22 UTC	520	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 3a 20 22 49 4e 32 34 30 34 30 32 22 2c 0d 0a 20 20 22 43 61 6d 70 61 69 67 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "d768e6f2-f3e1-499f-9b44-ef0144c95940", "Version": "13.900.0.1080", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId": "IN240402", "Campaig
2025-01-06 08:32:23 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:23 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b6f9e39422b-EWR
2025-01-06 08:32:23 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49756	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:23 UTC	155	OUT	POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 491
2025-01-06 08:32:23 UTC	491	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 49 44 22 3a 22 32 31 37 39 34 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"d768e6f2-f3e1-499f-9b44-ef0144c95940","Version":"13.900.0.1080","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402","CampaignID":"21794
2025-01-06 08:32:23 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:23 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b7468ac7c8d-EWR
2025-01-06 08:32:23 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49757	104.16.149.130	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:24 UTC	118	OUT	POST /api/Update/WC HTTP/1.1 Content-Type: application/json Host: featureflags.lavasoft.com Content-Length: 194
2025-01-06 08:32:24 UTC	194	OUT	Data Raw: 7b 22 47 65 6f 22 3a 22 47 42 22 2c 22 50 61 72 74 6e 65 72 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 22 3a 22 32 31 37 39 34 35 39 39 31 39 36 22 2c 22 49 6e 73 74 61 6c 6c 44 61 74 65 22 3a 22 32 30 32 35 30 31 30 36 22 2c 22 54 72 69 67 67 65 72 54 79 70 65 22 3a 22 69 6e 73 74 61 6c 6c 22 2c 22 54 72 69 67 67 65 72 45 76 65 6e 74 22 3a 22 69 6e 73 74 61 6c 6c 65 72 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 66 65 61 74 75 72 65 77 70 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 61 6c 22 3a 74 72 75 65 7d Data Ascii: {"Geo":"GB","Partner":"IN240402","Campaign":"21794599196","InstallDate":"20250106","TriggerType":"install","TriggerEvent":"installer","Version":"13.900.0.1080","featurewp":true,"featureal":true}
2025-01-06 08:32:24 UTC	249	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:24 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b794e804315-EWR
2025-01-06 08:32:24 UTC	327	IN	Data Raw: 31 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 22 55 50 44 22 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 22 7b 5c 22 56 65 72 73 69 6f 6e 5c 22 3a 20 5c 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 5c 22 2c 20 5c 22 49 6e 73 74 61 6c 6c 65 72 45 78 65 5c 22 3a 20 5c 22 68 74 74 70 73 3a 2f 2f 77 63 64 6f 77 6e 6c 6f 61 64 65 72 63 64 6e 2e 6c 61 76 61 73 6f 66 74 2e 63 6f 6d 2f 31 33 2e 30 2e 30 2e 31 30 38 30 2f 57 43 49 6e 73 74 61 6c 6c 65 72 5f 4e 6f 6e 41 64 6d 69 6e 2e 65 78 65 5c 22 2c 20 5c 22 49 6e 73 74 61 6c 6c 65 72 5a 69 70 5c 22 3a 20 5c 22 68 74 74 70 73 3a 2f 2f 77 63 64 6f 77 6e 6c 6f 61 64 65 72 63 64 6e 2e 6c 61 76 61 73 6f 66 74 2e 63 6f 6d 2f 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 2f 57 65 62 43 6f 6d 70 61 6e 69 6f 6e 2d 31 33 2e 39 30 Data Ascii: 140{"code":"UPD","configuration":"{\"Version\": \"13.900.0.1080\", \"InstallerExe\": \"https://wcdownloadercdn.lavasoft.com/13.0.0.1080/WCInstaller_NonAdmin.exe\", \"InstallerZip\": \"https://wcdownloadercdn.lavasoft.com/13.900.0.1080/WebCompanion-13.90
2025-01-06 08:32:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49758	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:25 UTC	176	OUT	POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 517 Connection: Keep-Alive
2025-01-06 08:32:25 UTC	517	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 3a 20 22 49 4e 32 34 30 34 30 32 22 2c 0d 0a 20 20 22 43 61 6d 70 61 69 67 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "d768e6f2-f3e1-499f-9b44-ef0144c95940", "Version": "13.900.0.1080", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId": "IN240402", "Campaig
2025-01-06 08:32:25 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:25 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b7d7f99420a-EWR
2025-01-06 08:32:25 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49760	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:25 UTC	155	OUT	POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 485
2025-01-06 08:32:25 UTC	485	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 49 44 22 3a 22 32 31 37 39 34 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"d768e6f2-f3e1-499f-9b44-ef0144c95940","Version":"13.900.0.1080","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402","CampaignID":"21794
2025-01-06 08:32:25 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:25 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5b81ab8019bb-EWR
2025-01-06 08:32:25 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49762	104.16.149.130	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:26 UTC	127	OUT	GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1 Host: wcdownloadercdn.lavasoft.com Connection: Keep-Alive
2025-01-06 08:32:26 UTC	380	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:26 GMT Content-Type: application/zip Content-Length: 10494317 Connection: close ETag: "3718275022" Last-Modified: Wed, 15 May 2024 10:29:47 GMT CF-Cache-Status: HIT Age: 129 Expires: Mon, 06 Jan 2025 12:32:26 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8fda5b866dd6c35f-EWR
2025-01-06 08:32:26 UTC	989	IN	Data Raw: 50 4b 03 04 14 00 00 00 08 00 d3 25 ae 58 c9 f2 0a dc 46 46 03 00 98 24 07 00 13 00 00 00 41 70 70 6c 69 63 61 74 69 6f 6e 2f 37 7a 61 2e 65 78 65 ec bd 79 78 54 45 d6 38 7c 7b 49 d2 59 48 27 40 43 58 c4 56 5b 8d 84 25 43 50 93 34 68 5f d2 4d 6e 43 47 40 44 51 a3 a0 68 0b ae 18 fa 86 20 8b 60 27 be e9 5c 5b 1d c5 19 75 1c c7 79 67 9c cf 19 97 51 47 59 5c bb 13 c8 c2 be b8 b0 8c 8a 7b 85 16 64 91 10 b6 dc ef 9c 53 b7 b7 10 a2 cf f7 fc 7e ff 7d 79 9e f4 dd aa 4e 9d 3a 75 ea d4 a9 53 a7 4e 55 dc f4 a4 60 10 04 c1 08 ff aa 2a 08 6b 04 fe e7 10 7e fd 8f c1 7f f6 f9 ef 65 0b ef a4 6f be 60 8d ce b3 f9 82 eb e6 ce 5b 60 9d 5f f5 c0 5d 55 b7 dd 67 9d 73 db fd f7 3f e0 b3 de 7e a7 b5 4a be df 3a ef 7e ab 73 ca 74 eb 7d 0f dc 71 e7 a8 3e 7d 32 6c 1a 8c f3 87 dd dd Data Ascii: PK%XFF$Application/7za.exeyxTE8\|{IYH'@CXV[%CP4h_MnCG@DQh `'\[uygQGY\{dS~}yN:uSNU`*k~eo`[`_]Ugs?~J:~st}q>}2l
2025-01-06 08:32:26 UTC	1369	IN	Data Raw: 23 7a 68 16 65 1b d6 f6 c2 2b 0c 82 7f 89 ad 50 f0 0d c7 24 f9 1c 18 0a 38 68 10 2c ec c3 6c ed 56 62 6f c3 6d fb fd 54 69 fc f2 b7 f8 97 67 a3 b7 c5 2c 88 25 fb d7 cd 25 ee 8b b7 51 b0 a2 98 0d de 1e 6d 9f 4d 67 b5 71 b0 42 62 27 b7 f5 f6 3d 9f ed e9 e5 bb 12 c4 aa 32 33 2f 1d 93 38 81 1f ad dd fa ae 14 6b b7 0a e5 90 47 f9 46 52 0e 17 ed 2d b9 c9 64 ae 3d 4f 8f b4 d7 7b fd c5 23 cd 75 39 f0 a0 34 69 e4 73 06 ef 51 95 88 d3 be b1 fa 41 e8 f4 6e 65 a0 72 aa 78 b0 af 9f 84 dd 51 52 43 c5 79 f2 71 85 a7 14 ed 67 96 95 04 cb 75 a2 dd 69 33 2d cc 77 2b 59 36 e0 4b 3d db d1 4f 10 4a 9b 7c d9 ca fa 28 48 e5 e7 48 8e 96 29 92 a6 dd a8 eb dd fe 96 3c fb 6b b6 57 e0 a1 ea 8f 4e 7b 64 e9 40 29 78 8d 55 0a 5a 76 6f 33 0a 6c df 00 41 18 13 6a af 86 51 46 0c ce 80 ae Data Ascii: #zhe+P$8h,lVbomTig,%%QmMgqBb'=23/8kGFR-d=O{#u94isQAnerxQRCyqgui3-w+Y6K=OJ\|(HH)<kWN{d@)xUZvo3lAjQF
2025-01-06 08:32:26 UTC	1369	IN	Data Raw: 01 92 a9 81 72 98 19 0c 9d 00 5c 03 59 ae 80 c1 ad 64 96 c9 37 92 0b a1 2b 53 50 08 39 6d 33 71 74 cb 26 71 d8 ca fe 60 e1 63 1b ca a3 2d ac 76 04 f5 84 c2 59 b7 26 4b 94 c4 3e 33 93 0d 4e 11 12 f5 5e f1 3a 69 c5 4f cb b1 9e d1 01 44 54 18 2a 3b f0 38 97 b4 6f ae b0 ce 65 83 7c 28 66 1d a5 2d 72 4a 3b 33 e0 10 ad 69 80 73 d9 25 f7 c2 14 92 3e 6c c5 0f 2b 96 d8 f2 f7 a9 ea c3 55 29 ed 1f 1b a2 aa ed 97 a0 d7 3c b9 e2 cc 9b 30 01 35 d7 4e 00 96 5a 71 e6 2d ba bf 42 c7 93 cc 64 8b fb 90 d4 01 55 15 74 a2 3b aa 73 51 ae e2 fb bf e0 e0 8e af 3d c1 c7 6c ad a4 12 81 d0 bd 0e 68 41 a5 33 ad f4 21 38 aa cf 64 25 c6 98 7a 39 0a 6f db ed 80 03 48 f8 56 52 0d 00 8a 4f 4b 98 13 4f 98 42 09 fb 6a c8 ce 65 97 dd 23 08 1e a5 d2 36 53 cb 37 a1 7e 5c 9e 02 63 a7 dd 97 a1 Data Ascii: r\Yd7+SP9m3qt&q`c-vY&K>3N^:iODT*;8oe\|(f-rJ;3is%>l+U)<05NZq-BdUt;sQ=lhA3!8d%z9oHVROKOBje#6S7~\c
2025-01-06 08:32:26 UTC	1369	IN	Data Raw: ef f8 41 c2 42 a3 d7 df 68 f5 06 72 71 34 32 af ce f5 d6 ed 90 bf 6b da 14 d5 c7 78 e3 79 94 af 61 b4 18 6a f3 2a 4b 05 34 e4 a2 44 f7 da bf f2 4d f3 fa 4f dd 56 95 0b bf 0f 2d 4c 09 2e d8 17 01 4d f2 d4 c3 0b 53 bc ca d1 48 96 79 f5 46 d5 e2 f8 00 2b 71 c8 eb 57 6f ab 1a 06 bf 0f 2d 4c f5 fa 7f b6 46 fa c2 fd c3 d5 90 66 ab 6a 19 4a 69 3a bd f6 e3 72 5f 6f dd 5e 79 25 ef 79 9a 5c 87 5e 79 78 13 e8 fe e9 91 e1 2e a8 a0 1b d0 04 fd 94 e3 9e 02 3a 74 c8 1a 14 3f 1e 37 68 a1 61 79 d8 6a 5e d5 06 b5 0d cb 59 0d 19 a0 1c d7 b6 c9 9b df d4 01 00 ac 6f 16 52 2e 4f e2 a3 2e 0c c9 40 1a bb 0e 2a 15 f2 fd 00 09 20 19 96 b1 dd d5 a0 77 36 64 b8 21 95 da e8 2a 0d fb 2e c4 a2 00 78 aa 18 94 ac 30 e7 68 68 15 79 69 46 98 0d 59 c5 d2 36 d9 04 70 e5 d6 68 31 08 03 80 67 Data Ascii: ABhrq42kxyajK4DMOV-L.MSHyF+qWo-LFfjJi:r_o^y%y\^yx.:t?7hayj^YoR.O.@ w6d!*.x0hhyiFY6ph1g
2025-01-06 08:32:26 UTC	1369	IN	Data Raw: 5e b3 d1 64 1a 2d 78 47 82 fd 0b 2a 94 76 04 3e 17 80 13 64 ad b6 9f e1 c4 cb 0f 80 9d 41 17 cc c6 b3 ec c0 47 6e e5 53 36 1f 5e f1 02 f2 63 2b 09 bc 1f 89 8a c3 54 a1 98 9c ca 04 a8 76 5f 9c 14 3a 6d e4 e2 11 80 19 11 ab 51 a3 53 8f c2 84 be 87 cb ef 6d 5e b1 c4 14 f0 d8 1c 4e a5 cd 67 4e 68 8e 12 93 fc 0b 2d 91 56 28 ad 31 a8 1b d9 a8 24 48 67 8d 1f 38 68 b0 65 87 7a 18 3f 34 8e 8c 8e 20 b1 3e 6d 5e b5 e7 3d 6e 6d 3e c1 6e 3b a3 8d 00 2d 5e 31 30 c4 2b b6 94 e9 f9 54 64 16 95 a5 c9 ae bd dc d8 ea 2d 19 0c 3a 3a c8 0f 40 58 6d 22 f6 f9 05 9a fb 3c 9a 65 65 3b 83 65 3a 20 1a 32 8e 7d 25 f6 bf e6 38 ff 27 c3 29 1e 1c 13 81 4d 5c 04 ee 64 bb 4e ab 6a 1d 34 c5 30 df 40 b7 b2 51 d9 69 5e 95 26 81 64 0e 90 6e 28 a9 1b e4 83 80 9c f1 66 21 19 6e b7 f1 ec e9 d3 Data Ascii: ^d-xG*v>dAGnS6^c+Tv_:mQSm^NgNh-V(1$Hg8hez?4 >m^=nm>n;-^10+Td-::@Xm"<ee;e: 2}%8')M\dNj40@Qi^&dn(f!n
2025-01-06 08:32:26 UTC	1369	IN	Data Raw: 41 a0 2e a4 b0 9a 0b 5d ca 3a 34 0d 6f 61 af 9f 46 fd 0d 6a 8a 0f 87 40 a7 15 0d 07 ec f7 9b aa 36 24 29 ac 09 e3 7b 31 88 d0 16 91 34 45 51 61 a4 22 3a 95 49 d0 72 47 a0 1a d0 c4 e6 da 97 04 5c 3a d4 2b 9b 8b 76 80 46 cb fd 9a d0 c8 2f d0 22 40 fe 3f 10 49 a5 53 b6 a9 96 fe 74 ef ab 82 29 d2 8a a9 7c 8a 34 1b 52 ce f6 5d 63 14 d8 a7 8f 01 e7 d8 cb b2 aa 33 10 d3 8d ec 2f 47 b0 25 0c 4e 18 c5 3c 4a 6a d1 0e 65 73 60 89 2d 1f 57 db ad aa 65 c7 cb 08 49 c6 c9 d6 95 67 41 52 10 52 a0 cc 84 d3 3b 50 6a 8d 12 69 a8 c5 bc 66 ce fa 24 9f 42 8f f2 5f 6e 7f d6 79 94 bf db b0 2a ae a2 0e 67 e0 41 93 b3 be d0 55 3f d6 86 75 05 ed c6 a3 ec 77 d9 b7 50 75 33 75 54 dd 8a c0 82 4e f8 3f e4 0a 2c 60 80 dc 56 b8 df a7 5a 26 00 5e a2 bd 59 39 24 8f 56 2d 17 f3 07 73 ed 2e Data Ascii: A.]:4oaFj@6$){14EQa":IrG\:+vF/"@?ISt)\|4R]c3/G%N<Jjes`-WeIgARR;Pjif$B_ny*gAU?uwPu3uTN?,`VZ&^Y9$V-s.
2025-01-06 08:32:26 UTC	1369	IN	Data Raw: 3a d4 cb 00 19 f3 ca 50 fb 03 70 fb a6 ae 1d 5d d8 34 bd 9e e6 03 1b d0 6d 20 38 74 02 a8 63 92 7d 0f fa fe 95 e1 9c a5 d2 97 0d bf a3 7d 26 c9 0e 44 d8 25 33 50 5c dc 4a 9b a7 a0 d1 bd bd 93 2d 26 f3 0b f0 dd 56 ae 3c b5 ff e3 20 1a 3d 7b 81 3b da eb 5f dc 55 09 5d 1b 2e a3 65 23 70 70 d7 6f 2f 2e ab 7b 71 57 1e e4 36 d6 e9 49 56 8a 3d b1 8e fe e3 61 cc b0 d5 19 74 c0 3c c7 30 29 d8 df c1 fe 8b c6 f3 84 05 16 65 9a a9 08 cd b2 30 9f 49 f7 fa 4b 86 fb fa c1 ef d5 be 3e 2a ad 5b da 1b ab f6 f3 15 59 18 10 8a 76 78 ed 8d be 7c af 7f 91 be 54 be c0 5b 32 cd 28 0f f1 8e bf 4d a8 4a f5 8e 7f 48 a8 06 69 26 0a 7c cd 92 4c 75 0d 8d f1 39 d7 f2 45 b9 82 af 70 f9 a2 be 82 6f f8 f2 45 fd 04 9f ed 7d 4c 52 72 a3 09 f4 27 45 07 83 fd 88 bf 62 5b 9a c8 b5 23 ff 45 d2 Data Ascii: :Pp]4m 8tc}}&D%3P\J-&V< ={;_U].e#ppo/.{qW6IV=at<0)e0IK>*[Yvx\|T[2(MJHi&\|Lu9EpoE}LRr'Eb[#E
2025-01-06 08:32:26 UTC	1369	IN	Data Raw: df a9 ea 93 4a 93 12 b1 9f aa be 97 76 1e 57 08 5e d1 3f 2e ab d2 67 a2 eb 68 79 b2 53 59 af 99 38 79 9e 6a d0 1d 39 5b bc f6 09 d2 9a cf d4 71 37 82 39 b6 d7 2e 15 f5 50 03 36 3d 37 01 1d 39 a5 17 82 2e 1d 6e 56 5c a7 b7 ff 5c f5 c7 82 4e 65 1b 6e 73 c6 3d 7c e4 33 89 90 87 c6 20 5f db 0d 72 7c 17 df 6b df d1 4a b6 b6 d3 e1 79 80 ab f9 51 4e fe 84 c8 27 f5 d0 10 c9 7e 94 1b fe d0 db 1e bb e5 c4 2b 3b 93 5c 96 cf fa fe 55 fc bb b3 de 69 cb d3 64 14 b5 55 3e b6 95 5b 39 2c 36 30 50 cd 80 6b 5d 0d ad 1e a5 b1 68 07 bb ec 04 17 c1 cd a9 02 28 a4 57 e2 16 cb 54 9d b3 61 33 e8 7c 6f eb 70 2a 86 7b b1 1c 0d 0c 3a a8 ce fc e8 40 f2 eb 07 1a e6 e0 a7 41 9d aa 8a 16 09 50 5f ea 4f 6a 3b d4 80 66 85 6c d7 49 cd 65 bb 10 dd 20 80 e7 2d d8 8d af 42 04 95 8d ec 8a 9d Data Ascii: JvW^?.ghySY8yj9[q79.P6=79.nV\\Nens=\|3 _r\|kJyQN'~+;\UidU>[9,60Pk]h(WTa3\|op*{:@AP_Oj;flIe -B
2025-01-06 08:32:26 UTC	1369	IN	Data Raw: 49 c3 67 73 38 e1 47 c2 1f 0f 3e 4e c5 bb 99 f8 53 89 8f b3 f1 6e 2e fe dc 2b 05 a7 e4 91 fa cf 1c 5d 04 94 56 5e 59 a4 13 45 a6 c7 36 95 7d ad dd 39 d8 5d 31 65 98 8d 6b a5 a5 5c c0 d6 6d d7 74 ca cb 5a b9 44 bd 80 ae 99 38 03 4e d2 88 cf 7b 80 7b 81 88 ea 66 51 d9 84 2a b1 a4 8c 6b 25 6d fc 7f d0 8b de 59 b2 c0 e4 1b 4c 95 ef 8f 3d 58 49 67 6f ec a7 aa cb 46 67 fd 82 7e 62 e9 41 54 1b a7 e4 a3 fe b5 0e 54 80 08 48 f9 29 c5 f8 b4 0a 9f ce 4f 4a f0 37 7c 95 15 4d f0 0c 0f 7e 30 3f 39 06 53 d2 bc e5 a9 ce de f6 51 e6 13 6f 1c 0c 74 8f 65 54 93 c0 e8 38 1b 91 fc 8d c5 34 3a 17 80 40 2e 3a 50 72 8f d5 fc e8 7f 31 6e 86 66 9b 33 a6 e2 bc eb 15 ea 2f 21 13 de d3 32 2f 5f 2b 7a 3a 82 06 30 73 a0 8e 9c 37 a9 55 57 6a cb c0 48 f3 9c cf 01 64 08 7b 8f 03 fe f1 ea Data Ascii: Igs8G>NSn.+]V^YE6}9]1ek\mtZD8N{{fQ*k%mYL=XIgoFg~bATTH)OJ7\|M~0?9SQoteT84:@.:Pr1nf3/!2/_+z:0s7UWjHd{
2025-01-06 08:32:26 UTC	1369	IN	Data Raw: d7 c2 01 c4 42 01 24 fa 51 1e e2 1b fd d8 87 80 57 d1 de d2 26 19 03 08 0c 74 2a cd 68 a3 db ac 5a c6 03 0c c9 0e b3 bb 34 2d bc 65 f7 bd 6e 5c ed 67 4b 13 f3 c3 e4 6e 8b 6a c9 e8 96 35 ea f3 02 03 7b 21 6d ab 00 54 fb cc 90 52 b5 ce ae 18 a2 0b 2e 6b 52 30 60 08 da 38 bc dc 17 51 b5 34 2f 35 0a e3 8d f0 7a a1 05 6a 94 1b f3 1a bf 7f 0b d9 43 d1 56 b8 62 1d 42 e5 b8 f5 68 4b 89 ca 18 f6 f2 26 f2 51 93 f8 7e 8f 8d 6c 1e b7 cd 5e 40 f1 d0 b6 a3 66 56 63 51 43 f6 32 d3 82 ec 64 4f 44 5c f1 c1 31 cd 52 5e cb e3 7b dd b3 35 79 e3 cf d9 be 6c 52 cc 97 4d 42 5f 36 07 5b f9 70 82 2f 9b 66 97 c1 2d 47 3c a8 a5 83 34 1d 8a 3a e1 20 a1 cc 3a 61 fe db c2 43 a5 e9 a2 41 85 34 49 a9 49 6d 2d d4 1a 5a b5 d1 b9 4c 69 29 da b1 56 e8 87 54 2b 5c 4c 0c 70 13 ea 75 cf 6a 95 Data Ascii: B$QW&t*hZ4-en\gKnj5{!mTR.kR0`8Q4/5zjCVbBhK&Q~l^@fVcQC2dOD\1R^{5ylRMB_6[p/f-G<4: :aCA4IIm-ZLi)VT+\Lpuj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49768	104.16.149.130	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:34 UTC	103	OUT	GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1 Host: wcdownloadercdn.lavasoft.com
2025-01-06 08:32:34 UTC	380	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:34 GMT Content-Type: application/zip Content-Length: 10494317 Connection: close ETag: "3718275022" Last-Modified: Wed, 15 May 2024 10:29:47 GMT CF-Cache-Status: HIT Age: 137 Expires: Mon, 06 Jan 2025 12:32:34 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8fda5bb94f3341f5-EWR
2025-01-06 08:32:34 UTC	989	IN	Data Raw: 50 4b 03 04 14 00 00 00 08 00 d3 25 ae 58 c9 f2 0a dc 46 46 03 00 98 24 07 00 13 00 00 00 41 70 70 6c 69 63 61 74 69 6f 6e 2f 37 7a 61 2e 65 78 65 ec bd 79 78 54 45 d6 38 7c 7b 49 d2 59 48 27 40 43 58 c4 56 5b 8d 84 25 43 50 93 34 68 5f d2 4d 6e 43 47 40 44 51 a3 a0 68 0b ae 18 fa 86 20 8b 60 27 be e9 5c 5b 1d c5 19 75 1c c7 79 67 9c cf 19 97 51 47 59 5c bb 13 c8 c2 be b8 b0 8c 8a 7b 85 16 64 91 10 b6 dc ef 9c 53 b7 b7 10 a2 cf f7 fc 7e ff 7d 79 9e f4 dd aa 4e 9d 3a 75 ea d4 a9 53 a7 4e 55 dc f4 a4 60 10 04 c1 08 ff aa 2a 08 6b 04 fe e7 10 7e fd 8f c1 7f f6 f9 ef 65 0b ef a4 6f be 60 8d ce b3 f9 82 eb e6 ce 5b 60 9d 5f f5 c0 5d 55 b7 dd 67 9d 73 db fd f7 3f e0 b3 de 7e a7 b5 4a be df 3a ef 7e ab 73 ca 74 eb 7d 0f dc 71 e7 a8 3e 7d 32 6c 1a 8c f3 87 dd dd Data Ascii: PK%XFF$Application/7za.exeyxTE8\|{IYH'@CXV[%CP4h_MnCG@DQh `'\[uygQGY\{dS~}yN:uSNU`*k~eo`[`_]Ugs?~J:~st}q>}2l
2025-01-06 08:32:34 UTC	1369	IN	Data Raw: 23 7a 68 16 65 1b d6 f6 c2 2b 0c 82 7f 89 ad 50 f0 0d c7 24 f9 1c 18 0a 38 68 10 2c ec c3 6c ed 56 62 6f c3 6d fb fd 54 69 fc f2 b7 f8 97 67 a3 b7 c5 2c 88 25 fb d7 cd 25 ee 8b b7 51 b0 a2 98 0d de 1e 6d 9f 4d 67 b5 71 b0 42 62 27 b7 f5 f6 3d 9f ed e9 e5 bb 12 c4 aa 32 33 2f 1d 93 38 81 1f ad dd fa ae 14 6b b7 0a e5 90 47 f9 46 52 0e 17 ed 2d b9 c9 64 ae 3d 4f 8f b4 d7 7b fd c5 23 cd 75 39 f0 a0 34 69 e4 73 06 ef 51 95 88 d3 be b1 fa 41 e8 f4 6e 65 a0 72 aa 78 b0 af 9f 84 dd 51 52 43 c5 79 f2 71 85 a7 14 ed 67 96 95 04 cb 75 a2 dd 69 33 2d cc 77 2b 59 36 e0 4b 3d db d1 4f 10 4a 9b 7c d9 ca fa 28 48 e5 e7 48 8e 96 29 92 a6 dd a8 eb dd fe 96 3c fb 6b b6 57 e0 a1 ea 8f 4e 7b 64 e9 40 29 78 8d 55 0a 5a 76 6f 33 0a 6c df 00 41 18 13 6a af 86 51 46 0c ce 80 ae Data Ascii: #zhe+P$8h,lVbomTig,%%QmMgqBb'=23/8kGFR-d=O{#u94isQAnerxQRCyqgui3-w+Y6K=OJ\|(HH)<kWN{d@)xUZvo3lAjQF
2025-01-06 08:32:34 UTC	1369	IN	Data Raw: 01 92 a9 81 72 98 19 0c 9d 00 5c 03 59 ae 80 c1 ad 64 96 c9 37 92 0b a1 2b 53 50 08 39 6d 33 71 74 cb 26 71 d8 ca fe 60 e1 63 1b ca a3 2d ac 76 04 f5 84 c2 59 b7 26 4b 94 c4 3e 33 93 0d 4e 11 12 f5 5e f1 3a 69 c5 4f cb b1 9e d1 01 44 54 18 2a 3b f0 38 97 b4 6f ae b0 ce 65 83 7c 28 66 1d a5 2d 72 4a 3b 33 e0 10 ad 69 80 73 d9 25 f7 c2 14 92 3e 6c c5 0f 2b 96 d8 f2 f7 a9 ea c3 55 29 ed 1f 1b a2 aa ed 97 a0 d7 3c b9 e2 cc 9b 30 01 35 d7 4e 00 96 5a 71 e6 2d ba bf 42 c7 93 cc 64 8b fb 90 d4 01 55 15 74 a2 3b aa 73 51 ae e2 fb bf e0 e0 8e af 3d c1 c7 6c ad a4 12 81 d0 bd 0e 68 41 a5 33 ad f4 21 38 aa cf 64 25 c6 98 7a 39 0a 6f db ed 80 03 48 f8 56 52 0d 00 8a 4f 4b 98 13 4f 98 42 09 fb 6a c8 ce 65 97 dd 23 08 1e a5 d2 36 53 cb 37 a1 7e 5c 9e 02 63 a7 dd 97 a1 Data Ascii: r\Yd7+SP9m3qt&q`c-vY&K>3N^:iODT*;8oe\|(f-rJ;3is%>l+U)<05NZq-BdUt;sQ=lhA3!8d%z9oHVROKOBje#6S7~\c
2025-01-06 08:32:34 UTC	1369	IN	Data Raw: ef f8 41 c2 42 a3 d7 df 68 f5 06 72 71 34 32 af ce f5 d6 ed 90 bf 6b da 14 d5 c7 78 e3 79 94 af 61 b4 18 6a f3 2a 4b 05 34 e4 a2 44 f7 da bf f2 4d f3 fa 4f dd 56 95 0b bf 0f 2d 4c 09 2e d8 17 01 4d f2 d4 c3 0b 53 bc ca d1 48 96 79 f5 46 d5 e2 f8 00 2b 71 c8 eb 57 6f ab 1a 06 bf 0f 2d 4c f5 fa 7f b6 46 fa c2 fd c3 d5 90 66 ab 6a 19 4a 69 3a bd f6 e3 72 5f 6f dd 5e 79 25 ef 79 9a 5c 87 5e 79 78 13 e8 fe e9 91 e1 2e a8 a0 1b d0 04 fd 94 e3 9e 02 3a 74 c8 1a 14 3f 1e 37 68 a1 61 79 d8 6a 5e d5 06 b5 0d cb 59 0d 19 a0 1c d7 b6 c9 9b df d4 01 00 ac 6f 16 52 2e 4f e2 a3 2e 0c c9 40 1a bb 0e 2a 15 f2 fd 00 09 20 19 96 b1 dd d5 a0 77 36 64 b8 21 95 da e8 2a 0d fb 2e c4 a2 00 78 aa 18 94 ac 30 e7 68 68 15 79 69 46 98 0d 59 c5 d2 36 d9 04 70 e5 d6 68 31 08 03 80 67 Data Ascii: ABhrq42kxyajK4DMOV-L.MSHyF+qWo-LFfjJi:r_o^y%y\^yx.:t?7hayj^YoR.O.@ w6d!*.x0hhyiFY6ph1g
2025-01-06 08:32:34 UTC	1369	IN	Data Raw: 5e b3 d1 64 1a 2d 78 47 82 fd 0b 2a 94 76 04 3e 17 80 13 64 ad b6 9f e1 c4 cb 0f 80 9d 41 17 cc c6 b3 ec c0 47 6e e5 53 36 1f 5e f1 02 f2 63 2b 09 bc 1f 89 8a c3 54 a1 98 9c ca 04 a8 76 5f 9c 14 3a 6d e4 e2 11 80 19 11 ab 51 a3 53 8f c2 84 be 87 cb ef 6d 5e b1 c4 14 f0 d8 1c 4e a5 cd 67 4e 68 8e 12 93 fc 0b 2d 91 56 28 ad 31 a8 1b d9 a8 24 48 67 8d 1f 38 68 b0 65 87 7a 18 3f 34 8e 8c 8e 20 b1 3e 6d 5e b5 e7 3d 6e 6d 3e c1 6e 3b a3 8d 00 2d 5e 31 30 c4 2b b6 94 e9 f9 54 64 16 95 a5 c9 ae bd dc d8 ea 2d 19 0c 3a 3a c8 0f 40 58 6d 22 f6 f9 05 9a fb 3c 9a 65 65 3b 83 65 3a 20 1a 32 8e 7d 25 f6 bf e6 38 ff 27 c3 29 1e 1c 13 81 4d 5c 04 ee 64 bb 4e ab 6a 1d 34 c5 30 df 40 b7 b2 51 d9 69 5e 95 26 81 64 0e 90 6e 28 a9 1b e4 83 80 9c f1 66 21 19 6e b7 f1 ec e9 d3 Data Ascii: ^d-xG*v>dAGnS6^c+Tv_:mQSm^NgNh-V(1$Hg8hez?4 >m^=nm>n;-^10+Td-::@Xm"<ee;e: 2}%8')M\dNj40@Qi^&dn(f!n
2025-01-06 08:32:34 UTC	1369	IN	Data Raw: 41 a0 2e a4 b0 9a 0b 5d ca 3a 34 0d 6f 61 af 9f 46 fd 0d 6a 8a 0f 87 40 a7 15 0d 07 ec f7 9b aa 36 24 29 ac 09 e3 7b 31 88 d0 16 91 34 45 51 61 a4 22 3a 95 49 d0 72 47 a0 1a d0 c4 e6 da 97 04 5c 3a d4 2b 9b 8b 76 80 46 cb fd 9a d0 c8 2f d0 22 40 fe 3f 10 49 a5 53 b6 a9 96 fe 74 ef ab 82 29 d2 8a a9 7c 8a 34 1b 52 ce f6 5d 63 14 d8 a7 8f 01 e7 d8 cb b2 aa 33 10 d3 8d ec 2f 47 b0 25 0c 4e 18 c5 3c 4a 6a d1 0e 65 73 60 89 2d 1f 57 db ad aa 65 c7 cb 08 49 c6 c9 d6 95 67 41 52 10 52 a0 cc 84 d3 3b 50 6a 8d 12 69 a8 c5 bc 66 ce fa 24 9f 42 8f f2 5f 6e 7f d6 79 94 bf db b0 2a ae a2 0e 67 e0 41 93 b3 be d0 55 3f d6 86 75 05 ed c6 a3 ec 77 d9 b7 50 75 33 75 54 dd 8a c0 82 4e f8 3f e4 0a 2c 60 80 dc 56 b8 df a7 5a 26 00 5e a2 bd 59 39 24 8f 56 2d 17 f3 07 73 ed 2e Data Ascii: A.]:4oaFj@6$){14EQa":IrG\:+vF/"@?ISt)\|4R]c3/G%N<Jjes`-WeIgARR;Pjif$B_ny*gAU?uwPu3uTN?,`VZ&^Y9$V-s.
2025-01-06 08:32:34 UTC	1369	IN	Data Raw: 3a d4 cb 00 19 f3 ca 50 fb 03 70 fb a6 ae 1d 5d d8 34 bd 9e e6 03 1b d0 6d 20 38 74 02 a8 63 92 7d 0f fa fe 95 e1 9c a5 d2 97 0d bf a3 7d 26 c9 0e 44 d8 25 33 50 5c dc 4a 9b a7 a0 d1 bd bd 93 2d 26 f3 0b f0 dd 56 ae 3c b5 ff e3 20 1a 3d 7b 81 3b da eb 5f dc 55 09 5d 1b 2e a3 65 23 70 70 d7 6f 2f 2e ab 7b 71 57 1e e4 36 d6 e9 49 56 8a 3d b1 8e fe e3 61 cc b0 d5 19 74 c0 3c c7 30 29 d8 df c1 fe 8b c6 f3 84 05 16 65 9a a9 08 cd b2 30 9f 49 f7 fa 4b 86 fb fa c1 ef d5 be 3e 2a ad 5b da 1b ab f6 f3 15 59 18 10 8a 76 78 ed 8d be 7c af 7f 91 be 54 be c0 5b 32 cd 28 0f f1 8e bf 4d a8 4a f5 8e 7f 48 a8 06 69 26 0a 7c cd 92 4c 75 0d 8d f1 39 d7 f2 45 b9 82 af 70 f9 a2 be 82 6f f8 f2 45 fd 04 9f ed 7d 4c 52 72 a3 09 f4 27 45 07 83 fd 88 bf 62 5b 9a c8 b5 23 ff 45 d2 Data Ascii: :Pp]4m 8tc}}&D%3P\J-&V< ={;_U].e#ppo/.{qW6IV=at<0)e0IK>*[Yvx\|T[2(MJHi&\|Lu9EpoE}LRr'Eb[#E
2025-01-06 08:32:34 UTC	1369	IN	Data Raw: df a9 ea 93 4a 93 12 b1 9f aa be 97 76 1e 57 08 5e d1 3f 2e ab d2 67 a2 eb 68 79 b2 53 59 af 99 38 79 9e 6a d0 1d 39 5b bc f6 09 d2 9a cf d4 71 37 82 39 b6 d7 2e 15 f5 50 03 36 3d 37 01 1d 39 a5 17 82 2e 1d 6e 56 5c a7 b7 ff 5c f5 c7 82 4e 65 1b 6e 73 c6 3d 7c e4 33 89 90 87 c6 20 5f db 0d 72 7c 17 df 6b df d1 4a b6 b6 d3 e1 79 80 ab f9 51 4e fe 84 c8 27 f5 d0 10 c9 7e 94 1b fe d0 db 1e bb e5 c4 2b 3b 93 5c 96 cf fa fe 55 fc bb b3 de 69 cb d3 64 14 b5 55 3e b6 95 5b 39 2c 36 30 50 cd 80 6b 5d 0d ad 1e a5 b1 68 07 bb ec 04 17 c1 cd a9 02 28 a4 57 e2 16 cb 54 9d b3 61 33 e8 7c 6f eb 70 2a 86 7b b1 1c 0d 0c 3a a8 ce fc e8 40 f2 eb 07 1a e6 e0 a7 41 9d aa 8a 16 09 50 5f ea 4f 6a 3b d4 80 66 85 6c d7 49 cd 65 bb 10 dd 20 80 e7 2d d8 8d af 42 04 95 8d ec 8a 9d Data Ascii: JvW^?.ghySY8yj9[q79.P6=79.nV\\Nens=\|3 _r\|kJyQN'~+;\UidU>[9,60Pk]h(WTa3\|op*{:@AP_Oj;flIe -B
2025-01-06 08:32:34 UTC	1369	IN	Data Raw: 49 c3 67 73 38 e1 47 c2 1f 0f 3e 4e c5 bb 99 f8 53 89 8f b3 f1 6e 2e fe dc 2b 05 a7 e4 91 fa cf 1c 5d 04 94 56 5e 59 a4 13 45 a6 c7 36 95 7d ad dd 39 d8 5d 31 65 98 8d 6b a5 a5 5c c0 d6 6d d7 74 ca cb 5a b9 44 bd 80 ae 99 38 03 4e d2 88 cf 7b 80 7b 81 88 ea 66 51 d9 84 2a b1 a4 8c 6b 25 6d fc 7f d0 8b de 59 b2 c0 e4 1b 4c 95 ef 8f 3d 58 49 67 6f ec a7 aa cb 46 67 fd 82 7e 62 e9 41 54 1b a7 e4 a3 fe b5 0e 54 80 08 48 f9 29 c5 f8 b4 0a 9f ce 4f 4a f0 37 7c 95 15 4d f0 0c 0f 7e 30 3f 39 06 53 d2 bc e5 a9 ce de f6 51 e6 13 6f 1c 0c 74 8f 65 54 93 c0 e8 38 1b 91 fc 8d c5 34 3a 17 80 40 2e 3a 50 72 8f d5 fc e8 7f 31 6e 86 66 9b 33 a6 e2 bc eb 15 ea 2f 21 13 de d3 32 2f 5f 2b 7a 3a 82 06 30 73 a0 8e 9c 37 a9 55 57 6a cb c0 48 f3 9c cf 01 64 08 7b 8f 03 fe f1 ea Data Ascii: Igs8G>NSn.+]V^YE6}9]1ek\mtZD8N{{fQ*k%mYL=XIgoFg~bATTH)OJ7\|M~0?9SQoteT84:@.:Pr1nf3/!2/_+z:0s7UWjHd{
2025-01-06 08:32:34 UTC	1369	IN	Data Raw: d7 c2 01 c4 42 01 24 fa 51 1e e2 1b fd d8 87 80 57 d1 de d2 26 19 03 08 0c 74 2a cd 68 a3 db ac 5a c6 03 0c c9 0e b3 bb 34 2d bc 65 f7 bd 6e 5c ed 67 4b 13 f3 c3 e4 6e 8b 6a c9 e8 96 35 ea f3 02 03 7b 21 6d ab 00 54 fb cc 90 52 b5 ce ae 18 a2 0b 2e 6b 52 30 60 08 da 38 bc dc 17 51 b5 34 2f 35 0a e3 8d f0 7a a1 05 6a 94 1b f3 1a bf 7f 0b d9 43 d1 56 b8 62 1d 42 e5 b8 f5 68 4b 89 ca 18 f6 f2 26 f2 51 93 f8 7e 8f 8d 6c 1e b7 cd 5e 40 f1 d0 b6 a3 66 56 63 51 43 f6 32 d3 82 ec 64 4f 44 5c f1 c1 31 cd 52 5e cb e3 7b dd b3 35 79 e3 cf d9 be 6c 52 cc 97 4d 42 5f 36 07 5b f9 70 82 2f 9b 66 97 c1 2d 47 3c a8 a5 83 34 1d 8a 3a e1 20 a1 cc 3a 61 fe db c2 43 a5 e9 a2 41 85 34 49 a9 49 6d 2d d4 1a 5a b5 d1 b9 4c 69 29 da b1 56 e8 87 54 2b 5c 4c 0c 70 13 ea 75 cf 6a 95 Data Ascii: B$QW&t*hZ4-en\gKnj5{!mTR.kR0`8Q4/5zjCVbBhK&Q~l^@fVcQC2dOD\1R^{5ylRMB_6[p/f-G<4: :aCA4IIm-ZLi)VT+\Lpuj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49769	104.16.149.130	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:42 UTC	103	OUT	GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1 Host: wcdownloadercdn.lavasoft.com
2025-01-06 08:32:42 UTC	380	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:42 GMT Content-Type: application/zip Content-Length: 10494317 Connection: close ETag: "3718275022" Last-Modified: Wed, 15 May 2024 10:29:47 GMT CF-Cache-Status: HIT Age: 145 Expires: Mon, 06 Jan 2025 12:32:42 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8fda5beaddc642ca-EWR
2025-01-06 08:32:42 UTC	989	IN	Data Raw: 50 4b 03 04 14 00 00 00 08 00 d3 25 ae 58 c9 f2 0a dc 46 46 03 00 98 24 07 00 13 00 00 00 41 70 70 6c 69 63 61 74 69 6f 6e 2f 37 7a 61 2e 65 78 65 ec bd 79 78 54 45 d6 38 7c 7b 49 d2 59 48 27 40 43 58 c4 56 5b 8d 84 25 43 50 93 34 68 5f d2 4d 6e 43 47 40 44 51 a3 a0 68 0b ae 18 fa 86 20 8b 60 27 be e9 5c 5b 1d c5 19 75 1c c7 79 67 9c cf 19 97 51 47 59 5c bb 13 c8 c2 be b8 b0 8c 8a 7b 85 16 64 91 10 b6 dc ef 9c 53 b7 b7 10 a2 cf f7 fc 7e ff 7d 79 9e f4 dd aa 4e 9d 3a 75 ea d4 a9 53 a7 4e 55 dc f4 a4 60 10 04 c1 08 ff aa 2a 08 6b 04 fe e7 10 7e fd 8f c1 7f f6 f9 ef 65 0b ef a4 6f be 60 8d ce b3 f9 82 eb e6 ce 5b 60 9d 5f f5 c0 5d 55 b7 dd 67 9d 73 db fd f7 3f e0 b3 de 7e a7 b5 4a be df 3a ef 7e ab 73 ca 74 eb 7d 0f dc 71 e7 a8 3e 7d 32 6c 1a 8c f3 87 dd dd Data Ascii: PK%XFF$Application/7za.exeyxTE8\|{IYH'@CXV[%CP4h_MnCG@DQh `'\[uygQGY\{dS~}yN:uSNU`*k~eo`[`_]Ugs?~J:~st}q>}2l
2025-01-06 08:32:42 UTC	1369	IN	Data Raw: 23 7a 68 16 65 1b d6 f6 c2 2b 0c 82 7f 89 ad 50 f0 0d c7 24 f9 1c 18 0a 38 68 10 2c ec c3 6c ed 56 62 6f c3 6d fb fd 54 69 fc f2 b7 f8 97 67 a3 b7 c5 2c 88 25 fb d7 cd 25 ee 8b b7 51 b0 a2 98 0d de 1e 6d 9f 4d 67 b5 71 b0 42 62 27 b7 f5 f6 3d 9f ed e9 e5 bb 12 c4 aa 32 33 2f 1d 93 38 81 1f ad dd fa ae 14 6b b7 0a e5 90 47 f9 46 52 0e 17 ed 2d b9 c9 64 ae 3d 4f 8f b4 d7 7b fd c5 23 cd 75 39 f0 a0 34 69 e4 73 06 ef 51 95 88 d3 be b1 fa 41 e8 f4 6e 65 a0 72 aa 78 b0 af 9f 84 dd 51 52 43 c5 79 f2 71 85 a7 14 ed 67 96 95 04 cb 75 a2 dd 69 33 2d cc 77 2b 59 36 e0 4b 3d db d1 4f 10 4a 9b 7c d9 ca fa 28 48 e5 e7 48 8e 96 29 92 a6 dd a8 eb dd fe 96 3c fb 6b b6 57 e0 a1 ea 8f 4e 7b 64 e9 40 29 78 8d 55 0a 5a 76 6f 33 0a 6c df 00 41 18 13 6a af 86 51 46 0c ce 80 ae Data Ascii: #zhe+P$8h,lVbomTig,%%QmMgqBb'=23/8kGFR-d=O{#u94isQAnerxQRCyqgui3-w+Y6K=OJ\|(HH)<kWN{d@)xUZvo3lAjQF
2025-01-06 08:32:42 UTC	1369	IN	Data Raw: 01 92 a9 81 72 98 19 0c 9d 00 5c 03 59 ae 80 c1 ad 64 96 c9 37 92 0b a1 2b 53 50 08 39 6d 33 71 74 cb 26 71 d8 ca fe 60 e1 63 1b ca a3 2d ac 76 04 f5 84 c2 59 b7 26 4b 94 c4 3e 33 93 0d 4e 11 12 f5 5e f1 3a 69 c5 4f cb b1 9e d1 01 44 54 18 2a 3b f0 38 97 b4 6f ae b0 ce 65 83 7c 28 66 1d a5 2d 72 4a 3b 33 e0 10 ad 69 80 73 d9 25 f7 c2 14 92 3e 6c c5 0f 2b 96 d8 f2 f7 a9 ea c3 55 29 ed 1f 1b a2 aa ed 97 a0 d7 3c b9 e2 cc 9b 30 01 35 d7 4e 00 96 5a 71 e6 2d ba bf 42 c7 93 cc 64 8b fb 90 d4 01 55 15 74 a2 3b aa 73 51 ae e2 fb bf e0 e0 8e af 3d c1 c7 6c ad a4 12 81 d0 bd 0e 68 41 a5 33 ad f4 21 38 aa cf 64 25 c6 98 7a 39 0a 6f db ed 80 03 48 f8 56 52 0d 00 8a 4f 4b 98 13 4f 98 42 09 fb 6a c8 ce 65 97 dd 23 08 1e a5 d2 36 53 cb 37 a1 7e 5c 9e 02 63 a7 dd 97 a1 Data Ascii: r\Yd7+SP9m3qt&q`c-vY&K>3N^:iODT*;8oe\|(f-rJ;3is%>l+U)<05NZq-BdUt;sQ=lhA3!8d%z9oHVROKOBje#6S7~\c
2025-01-06 08:32:42 UTC	1369	IN	Data Raw: ef f8 41 c2 42 a3 d7 df 68 f5 06 72 71 34 32 af ce f5 d6 ed 90 bf 6b da 14 d5 c7 78 e3 79 94 af 61 b4 18 6a f3 2a 4b 05 34 e4 a2 44 f7 da bf f2 4d f3 fa 4f dd 56 95 0b bf 0f 2d 4c 09 2e d8 17 01 4d f2 d4 c3 0b 53 bc ca d1 48 96 79 f5 46 d5 e2 f8 00 2b 71 c8 eb 57 6f ab 1a 06 bf 0f 2d 4c f5 fa 7f b6 46 fa c2 fd c3 d5 90 66 ab 6a 19 4a 69 3a bd f6 e3 72 5f 6f dd 5e 79 25 ef 79 9a 5c 87 5e 79 78 13 e8 fe e9 91 e1 2e a8 a0 1b d0 04 fd 94 e3 9e 02 3a 74 c8 1a 14 3f 1e 37 68 a1 61 79 d8 6a 5e d5 06 b5 0d cb 59 0d 19 a0 1c d7 b6 c9 9b df d4 01 00 ac 6f 16 52 2e 4f e2 a3 2e 0c c9 40 1a bb 0e 2a 15 f2 fd 00 09 20 19 96 b1 dd d5 a0 77 36 64 b8 21 95 da e8 2a 0d fb 2e c4 a2 00 78 aa 18 94 ac 30 e7 68 68 15 79 69 46 98 0d 59 c5 d2 36 d9 04 70 e5 d6 68 31 08 03 80 67 Data Ascii: ABhrq42kxyajK4DMOV-L.MSHyF+qWo-LFfjJi:r_o^y%y\^yx.:t?7hayj^YoR.O.@ w6d!*.x0hhyiFY6ph1g
2025-01-06 08:32:42 UTC	1369	IN	Data Raw: 5e b3 d1 64 1a 2d 78 47 82 fd 0b 2a 94 76 04 3e 17 80 13 64 ad b6 9f e1 c4 cb 0f 80 9d 41 17 cc c6 b3 ec c0 47 6e e5 53 36 1f 5e f1 02 f2 63 2b 09 bc 1f 89 8a c3 54 a1 98 9c ca 04 a8 76 5f 9c 14 3a 6d e4 e2 11 80 19 11 ab 51 a3 53 8f c2 84 be 87 cb ef 6d 5e b1 c4 14 f0 d8 1c 4e a5 cd 67 4e 68 8e 12 93 fc 0b 2d 91 56 28 ad 31 a8 1b d9 a8 24 48 67 8d 1f 38 68 b0 65 87 7a 18 3f 34 8e 8c 8e 20 b1 3e 6d 5e b5 e7 3d 6e 6d 3e c1 6e 3b a3 8d 00 2d 5e 31 30 c4 2b b6 94 e9 f9 54 64 16 95 a5 c9 ae bd dc d8 ea 2d 19 0c 3a 3a c8 0f 40 58 6d 22 f6 f9 05 9a fb 3c 9a 65 65 3b 83 65 3a 20 1a 32 8e 7d 25 f6 bf e6 38 ff 27 c3 29 1e 1c 13 81 4d 5c 04 ee 64 bb 4e ab 6a 1d 34 c5 30 df 40 b7 b2 51 d9 69 5e 95 26 81 64 0e 90 6e 28 a9 1b e4 83 80 9c f1 66 21 19 6e b7 f1 ec e9 d3 Data Ascii: ^d-xG*v>dAGnS6^c+Tv_:mQSm^NgNh-V(1$Hg8hez?4 >m^=nm>n;-^10+Td-::@Xm"<ee;e: 2}%8')M\dNj40@Qi^&dn(f!n
2025-01-06 08:32:42 UTC	1369	IN	Data Raw: 41 a0 2e a4 b0 9a 0b 5d ca 3a 34 0d 6f 61 af 9f 46 fd 0d 6a 8a 0f 87 40 a7 15 0d 07 ec f7 9b aa 36 24 29 ac 09 e3 7b 31 88 d0 16 91 34 45 51 61 a4 22 3a 95 49 d0 72 47 a0 1a d0 c4 e6 da 97 04 5c 3a d4 2b 9b 8b 76 80 46 cb fd 9a d0 c8 2f d0 22 40 fe 3f 10 49 a5 53 b6 a9 96 fe 74 ef ab 82 29 d2 8a a9 7c 8a 34 1b 52 ce f6 5d 63 14 d8 a7 8f 01 e7 d8 cb b2 aa 33 10 d3 8d ec 2f 47 b0 25 0c 4e 18 c5 3c 4a 6a d1 0e 65 73 60 89 2d 1f 57 db ad aa 65 c7 cb 08 49 c6 c9 d6 95 67 41 52 10 52 a0 cc 84 d3 3b 50 6a 8d 12 69 a8 c5 bc 66 ce fa 24 9f 42 8f f2 5f 6e 7f d6 79 94 bf db b0 2a ae a2 0e 67 e0 41 93 b3 be d0 55 3f d6 86 75 05 ed c6 a3 ec 77 d9 b7 50 75 33 75 54 dd 8a c0 82 4e f8 3f e4 0a 2c 60 80 dc 56 b8 df a7 5a 26 00 5e a2 bd 59 39 24 8f 56 2d 17 f3 07 73 ed 2e Data Ascii: A.]:4oaFj@6$){14EQa":IrG\:+vF/"@?ISt)\|4R]c3/G%N<Jjes`-WeIgARR;Pjif$B_ny*gAU?uwPu3uTN?,`VZ&^Y9$V-s.
2025-01-06 08:32:42 UTC	1369	IN	Data Raw: 3a d4 cb 00 19 f3 ca 50 fb 03 70 fb a6 ae 1d 5d d8 34 bd 9e e6 03 1b d0 6d 20 38 74 02 a8 63 92 7d 0f fa fe 95 e1 9c a5 d2 97 0d bf a3 7d 26 c9 0e 44 d8 25 33 50 5c dc 4a 9b a7 a0 d1 bd bd 93 2d 26 f3 0b f0 dd 56 ae 3c b5 ff e3 20 1a 3d 7b 81 3b da eb 5f dc 55 09 5d 1b 2e a3 65 23 70 70 d7 6f 2f 2e ab 7b 71 57 1e e4 36 d6 e9 49 56 8a 3d b1 8e fe e3 61 cc b0 d5 19 74 c0 3c c7 30 29 d8 df c1 fe 8b c6 f3 84 05 16 65 9a a9 08 cd b2 30 9f 49 f7 fa 4b 86 fb fa c1 ef d5 be 3e 2a ad 5b da 1b ab f6 f3 15 59 18 10 8a 76 78 ed 8d be 7c af 7f 91 be 54 be c0 5b 32 cd 28 0f f1 8e bf 4d a8 4a f5 8e 7f 48 a8 06 69 26 0a 7c cd 92 4c 75 0d 8d f1 39 d7 f2 45 b9 82 af 70 f9 a2 be 82 6f f8 f2 45 fd 04 9f ed 7d 4c 52 72 a3 09 f4 27 45 07 83 fd 88 bf 62 5b 9a c8 b5 23 ff 45 d2 Data Ascii: :Pp]4m 8tc}}&D%3P\J-&V< ={;_U].e#ppo/.{qW6IV=at<0)e0IK>*[Yvx\|T[2(MJHi&\|Lu9EpoE}LRr'Eb[#E
2025-01-06 08:32:42 UTC	1369	IN	Data Raw: df a9 ea 93 4a 93 12 b1 9f aa be 97 76 1e 57 08 5e d1 3f 2e ab d2 67 a2 eb 68 79 b2 53 59 af 99 38 79 9e 6a d0 1d 39 5b bc f6 09 d2 9a cf d4 71 37 82 39 b6 d7 2e 15 f5 50 03 36 3d 37 01 1d 39 a5 17 82 2e 1d 6e 56 5c a7 b7 ff 5c f5 c7 82 4e 65 1b 6e 73 c6 3d 7c e4 33 89 90 87 c6 20 5f db 0d 72 7c 17 df 6b df d1 4a b6 b6 d3 e1 79 80 ab f9 51 4e fe 84 c8 27 f5 d0 10 c9 7e 94 1b fe d0 db 1e bb e5 c4 2b 3b 93 5c 96 cf fa fe 55 fc bb b3 de 69 cb d3 64 14 b5 55 3e b6 95 5b 39 2c 36 30 50 cd 80 6b 5d 0d ad 1e a5 b1 68 07 bb ec 04 17 c1 cd a9 02 28 a4 57 e2 16 cb 54 9d b3 61 33 e8 7c 6f eb 70 2a 86 7b b1 1c 0d 0c 3a a8 ce fc e8 40 f2 eb 07 1a e6 e0 a7 41 9d aa 8a 16 09 50 5f ea 4f 6a 3b d4 80 66 85 6c d7 49 cd 65 bb 10 dd 20 80 e7 2d d8 8d af 42 04 95 8d ec 8a 9d Data Ascii: JvW^?.ghySY8yj9[q79.P6=79.nV\\Nens=\|3 _r\|kJyQN'~+;\UidU>[9,60Pk]h(WTa3\|op*{:@AP_Oj;flIe -B
2025-01-06 08:32:42 UTC	1369	IN	Data Raw: 49 c3 67 73 38 e1 47 c2 1f 0f 3e 4e c5 bb 99 f8 53 89 8f b3 f1 6e 2e fe dc 2b 05 a7 e4 91 fa cf 1c 5d 04 94 56 5e 59 a4 13 45 a6 c7 36 95 7d ad dd 39 d8 5d 31 65 98 8d 6b a5 a5 5c c0 d6 6d d7 74 ca cb 5a b9 44 bd 80 ae 99 38 03 4e d2 88 cf 7b 80 7b 81 88 ea 66 51 d9 84 2a b1 a4 8c 6b 25 6d fc 7f d0 8b de 59 b2 c0 e4 1b 4c 95 ef 8f 3d 58 49 67 6f ec a7 aa cb 46 67 fd 82 7e 62 e9 41 54 1b a7 e4 a3 fe b5 0e 54 80 08 48 f9 29 c5 f8 b4 0a 9f ce 4f 4a f0 37 7c 95 15 4d f0 0c 0f 7e 30 3f 39 06 53 d2 bc e5 a9 ce de f6 51 e6 13 6f 1c 0c 74 8f 65 54 93 c0 e8 38 1b 91 fc 8d c5 34 3a 17 80 40 2e 3a 50 72 8f d5 fc e8 7f 31 6e 86 66 9b 33 a6 e2 bc eb 15 ea 2f 21 13 de d3 32 2f 5f 2b 7a 3a 82 06 30 73 a0 8e 9c 37 a9 55 57 6a cb c0 48 f3 9c cf 01 64 08 7b 8f 03 fe f1 ea Data Ascii: Igs8G>NSn.+]V^YE6}9]1ek\mtZD8N{{fQ*k%mYL=XIgoFg~bATTH)OJ7\|M~0?9SQoteT84:@.:Pr1nf3/!2/_+z:0s7UWjHd{
2025-01-06 08:32:42 UTC	1369	IN	Data Raw: d7 c2 01 c4 42 01 24 fa 51 1e e2 1b fd d8 87 80 57 d1 de d2 26 19 03 08 0c 74 2a cd 68 a3 db ac 5a c6 03 0c c9 0e b3 bb 34 2d bc 65 f7 bd 6e 5c ed 67 4b 13 f3 c3 e4 6e 8b 6a c9 e8 96 35 ea f3 02 03 7b 21 6d ab 00 54 fb cc 90 52 b5 ce ae 18 a2 0b 2e 6b 52 30 60 08 da 38 bc dc 17 51 b5 34 2f 35 0a e3 8d f0 7a a1 05 6a 94 1b f3 1a bf 7f 0b d9 43 d1 56 b8 62 1d 42 e5 b8 f5 68 4b 89 ca 18 f6 f2 26 f2 51 93 f8 7e 8f 8d 6c 1e b7 cd 5e 40 f1 d0 b6 a3 66 56 63 51 43 f6 32 d3 82 ec 64 4f 44 5c f1 c1 31 cd 52 5e cb e3 7b dd b3 35 79 e3 cf d9 be 6c 52 cc 97 4d 42 5f 36 07 5b f9 70 82 2f 9b 66 97 c1 2d 47 3c a8 a5 83 34 1d 8a 3a e1 20 a1 cc 3a 61 fe db c2 43 a5 e9 a2 41 85 34 49 a9 49 6d 2d d4 1a 5a b5 d1 b9 4c 69 29 da b1 56 e8 87 54 2b 5c 4c 0c 70 13 ea 75 cf 6a 95 Data Ascii: B$QW&t*hZ4-en\gKnj5{!mTR.kR0`8Q4/5zjCVbBhK&Q~l^@fVcQC2dOD\1R^{5ylRMB_6[p/f-G<4: :aCA4IIm-ZLi)VT+\Lpuj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49770	104.16.149.130	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:50 UTC	127	OUT	GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1 Host: wcdownloadercdn.lavasoft.com Connection: Keep-Alive
2025-01-06 08:32:50 UTC	380	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:50 GMT Content-Type: application/zip Content-Length: 10494317 Connection: close ETag: "3718275022" Last-Modified: Wed, 15 May 2024 10:29:47 GMT CF-Cache-Status: HIT Age: 153 Expires: Mon, 06 Jan 2025 12:32:50 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8fda5c1cabbb43df-EWR
2025-01-06 08:32:50 UTC	989	IN	Data Raw: 50 4b 03 04 14 00 00 00 08 00 d3 25 ae 58 c9 f2 0a dc 46 46 03 00 98 24 07 00 13 00 00 00 41 70 70 6c 69 63 61 74 69 6f 6e 2f 37 7a 61 2e 65 78 65 ec bd 79 78 54 45 d6 38 7c 7b 49 d2 59 48 27 40 43 58 c4 56 5b 8d 84 25 43 50 93 34 68 5f d2 4d 6e 43 47 40 44 51 a3 a0 68 0b ae 18 fa 86 20 8b 60 27 be e9 5c 5b 1d c5 19 75 1c c7 79 67 9c cf 19 97 51 47 59 5c bb 13 c8 c2 be b8 b0 8c 8a 7b 85 16 64 91 10 b6 dc ef 9c 53 b7 b7 10 a2 cf f7 fc 7e ff 7d 79 9e f4 dd aa 4e 9d 3a 75 ea d4 a9 53 a7 4e 55 dc f4 a4 60 10 04 c1 08 ff aa 2a 08 6b 04 fe e7 10 7e fd 8f c1 7f f6 f9 ef 65 0b ef a4 6f be 60 8d ce b3 f9 82 eb e6 ce 5b 60 9d 5f f5 c0 5d 55 b7 dd 67 9d 73 db fd f7 3f e0 b3 de 7e a7 b5 4a be df 3a ef 7e ab 73 ca 74 eb 7d 0f dc 71 e7 a8 3e 7d 32 6c 1a 8c f3 87 dd dd Data Ascii: PK%XFF$Application/7za.exeyxTE8\|{IYH'@CXV[%CP4h_MnCG@DQh `'\[uygQGY\{dS~}yN:uSNU`*k~eo`[`_]Ugs?~J:~st}q>}2l
2025-01-06 08:32:50 UTC	1369	IN	Data Raw: 23 7a 68 16 65 1b d6 f6 c2 2b 0c 82 7f 89 ad 50 f0 0d c7 24 f9 1c 18 0a 38 68 10 2c ec c3 6c ed 56 62 6f c3 6d fb fd 54 69 fc f2 b7 f8 97 67 a3 b7 c5 2c 88 25 fb d7 cd 25 ee 8b b7 51 b0 a2 98 0d de 1e 6d 9f 4d 67 b5 71 b0 42 62 27 b7 f5 f6 3d 9f ed e9 e5 bb 12 c4 aa 32 33 2f 1d 93 38 81 1f ad dd fa ae 14 6b b7 0a e5 90 47 f9 46 52 0e 17 ed 2d b9 c9 64 ae 3d 4f 8f b4 d7 7b fd c5 23 cd 75 39 f0 a0 34 69 e4 73 06 ef 51 95 88 d3 be b1 fa 41 e8 f4 6e 65 a0 72 aa 78 b0 af 9f 84 dd 51 52 43 c5 79 f2 71 85 a7 14 ed 67 96 95 04 cb 75 a2 dd 69 33 2d cc 77 2b 59 36 e0 4b 3d db d1 4f 10 4a 9b 7c d9 ca fa 28 48 e5 e7 48 8e 96 29 92 a6 dd a8 eb dd fe 96 3c fb 6b b6 57 e0 a1 ea 8f 4e 7b 64 e9 40 29 78 8d 55 0a 5a 76 6f 33 0a 6c df 00 41 18 13 6a af 86 51 46 0c ce 80 ae Data Ascii: #zhe+P$8h,lVbomTig,%%QmMgqBb'=23/8kGFR-d=O{#u94isQAnerxQRCyqgui3-w+Y6K=OJ\|(HH)<kWN{d@)xUZvo3lAjQF
2025-01-06 08:32:50 UTC	1369	IN	Data Raw: 01 92 a9 81 72 98 19 0c 9d 00 5c 03 59 ae 80 c1 ad 64 96 c9 37 92 0b a1 2b 53 50 08 39 6d 33 71 74 cb 26 71 d8 ca fe 60 e1 63 1b ca a3 2d ac 76 04 f5 84 c2 59 b7 26 4b 94 c4 3e 33 93 0d 4e 11 12 f5 5e f1 3a 69 c5 4f cb b1 9e d1 01 44 54 18 2a 3b f0 38 97 b4 6f ae b0 ce 65 83 7c 28 66 1d a5 2d 72 4a 3b 33 e0 10 ad 69 80 73 d9 25 f7 c2 14 92 3e 6c c5 0f 2b 96 d8 f2 f7 a9 ea c3 55 29 ed 1f 1b a2 aa ed 97 a0 d7 3c b9 e2 cc 9b 30 01 35 d7 4e 00 96 5a 71 e6 2d ba bf 42 c7 93 cc 64 8b fb 90 d4 01 55 15 74 a2 3b aa 73 51 ae e2 fb bf e0 e0 8e af 3d c1 c7 6c ad a4 12 81 d0 bd 0e 68 41 a5 33 ad f4 21 38 aa cf 64 25 c6 98 7a 39 0a 6f db ed 80 03 48 f8 56 52 0d 00 8a 4f 4b 98 13 4f 98 42 09 fb 6a c8 ce 65 97 dd 23 08 1e a5 d2 36 53 cb 37 a1 7e 5c 9e 02 63 a7 dd 97 a1 Data Ascii: r\Yd7+SP9m3qt&q`c-vY&K>3N^:iODT*;8oe\|(f-rJ;3is%>l+U)<05NZq-BdUt;sQ=lhA3!8d%z9oHVROKOBje#6S7~\c
2025-01-06 08:32:50 UTC	1369	IN	Data Raw: ef f8 41 c2 42 a3 d7 df 68 f5 06 72 71 34 32 af ce f5 d6 ed 90 bf 6b da 14 d5 c7 78 e3 79 94 af 61 b4 18 6a f3 2a 4b 05 34 e4 a2 44 f7 da bf f2 4d f3 fa 4f dd 56 95 0b bf 0f 2d 4c 09 2e d8 17 01 4d f2 d4 c3 0b 53 bc ca d1 48 96 79 f5 46 d5 e2 f8 00 2b 71 c8 eb 57 6f ab 1a 06 bf 0f 2d 4c f5 fa 7f b6 46 fa c2 fd c3 d5 90 66 ab 6a 19 4a 69 3a bd f6 e3 72 5f 6f dd 5e 79 25 ef 79 9a 5c 87 5e 79 78 13 e8 fe e9 91 e1 2e a8 a0 1b d0 04 fd 94 e3 9e 02 3a 74 c8 1a 14 3f 1e 37 68 a1 61 79 d8 6a 5e d5 06 b5 0d cb 59 0d 19 a0 1c d7 b6 c9 9b df d4 01 00 ac 6f 16 52 2e 4f e2 a3 2e 0c c9 40 1a bb 0e 2a 15 f2 fd 00 09 20 19 96 b1 dd d5 a0 77 36 64 b8 21 95 da e8 2a 0d fb 2e c4 a2 00 78 aa 18 94 ac 30 e7 68 68 15 79 69 46 98 0d 59 c5 d2 36 d9 04 70 e5 d6 68 31 08 03 80 67 Data Ascii: ABhrq42kxyajK4DMOV-L.MSHyF+qWo-LFfjJi:r_o^y%y\^yx.:t?7hayj^YoR.O.@ w6d!*.x0hhyiFY6ph1g
2025-01-06 08:32:50 UTC	1369	IN	Data Raw: 5e b3 d1 64 1a 2d 78 47 82 fd 0b 2a 94 76 04 3e 17 80 13 64 ad b6 9f e1 c4 cb 0f 80 9d 41 17 cc c6 b3 ec c0 47 6e e5 53 36 1f 5e f1 02 f2 63 2b 09 bc 1f 89 8a c3 54 a1 98 9c ca 04 a8 76 5f 9c 14 3a 6d e4 e2 11 80 19 11 ab 51 a3 53 8f c2 84 be 87 cb ef 6d 5e b1 c4 14 f0 d8 1c 4e a5 cd 67 4e 68 8e 12 93 fc 0b 2d 91 56 28 ad 31 a8 1b d9 a8 24 48 67 8d 1f 38 68 b0 65 87 7a 18 3f 34 8e 8c 8e 20 b1 3e 6d 5e b5 e7 3d 6e 6d 3e c1 6e 3b a3 8d 00 2d 5e 31 30 c4 2b b6 94 e9 f9 54 64 16 95 a5 c9 ae bd dc d8 ea 2d 19 0c 3a 3a c8 0f 40 58 6d 22 f6 f9 05 9a fb 3c 9a 65 65 3b 83 65 3a 20 1a 32 8e 7d 25 f6 bf e6 38 ff 27 c3 29 1e 1c 13 81 4d 5c 04 ee 64 bb 4e ab 6a 1d 34 c5 30 df 40 b7 b2 51 d9 69 5e 95 26 81 64 0e 90 6e 28 a9 1b e4 83 80 9c f1 66 21 19 6e b7 f1 ec e9 d3 Data Ascii: ^d-xG*v>dAGnS6^c+Tv_:mQSm^NgNh-V(1$Hg8hez?4 >m^=nm>n;-^10+Td-::@Xm"<ee;e: 2}%8')M\dNj40@Qi^&dn(f!n
2025-01-06 08:32:50 UTC	1369	IN	Data Raw: 41 a0 2e a4 b0 9a 0b 5d ca 3a 34 0d 6f 61 af 9f 46 fd 0d 6a 8a 0f 87 40 a7 15 0d 07 ec f7 9b aa 36 24 29 ac 09 e3 7b 31 88 d0 16 91 34 45 51 61 a4 22 3a 95 49 d0 72 47 a0 1a d0 c4 e6 da 97 04 5c 3a d4 2b 9b 8b 76 80 46 cb fd 9a d0 c8 2f d0 22 40 fe 3f 10 49 a5 53 b6 a9 96 fe 74 ef ab 82 29 d2 8a a9 7c 8a 34 1b 52 ce f6 5d 63 14 d8 a7 8f 01 e7 d8 cb b2 aa 33 10 d3 8d ec 2f 47 b0 25 0c 4e 18 c5 3c 4a 6a d1 0e 65 73 60 89 2d 1f 57 db ad aa 65 c7 cb 08 49 c6 c9 d6 95 67 41 52 10 52 a0 cc 84 d3 3b 50 6a 8d 12 69 a8 c5 bc 66 ce fa 24 9f 42 8f f2 5f 6e 7f d6 79 94 bf db b0 2a ae a2 0e 67 e0 41 93 b3 be d0 55 3f d6 86 75 05 ed c6 a3 ec 77 d9 b7 50 75 33 75 54 dd 8a c0 82 4e f8 3f e4 0a 2c 60 80 dc 56 b8 df a7 5a 26 00 5e a2 bd 59 39 24 8f 56 2d 17 f3 07 73 ed 2e Data Ascii: A.]:4oaFj@6$){14EQa":IrG\:+vF/"@?ISt)\|4R]c3/G%N<Jjes`-WeIgARR;Pjif$B_ny*gAU?uwPu3uTN?,`VZ&^Y9$V-s.
2025-01-06 08:32:50 UTC	1369	IN	Data Raw: 3a d4 cb 00 19 f3 ca 50 fb 03 70 fb a6 ae 1d 5d d8 34 bd 9e e6 03 1b d0 6d 20 38 74 02 a8 63 92 7d 0f fa fe 95 e1 9c a5 d2 97 0d bf a3 7d 26 c9 0e 44 d8 25 33 50 5c dc 4a 9b a7 a0 d1 bd bd 93 2d 26 f3 0b f0 dd 56 ae 3c b5 ff e3 20 1a 3d 7b 81 3b da eb 5f dc 55 09 5d 1b 2e a3 65 23 70 70 d7 6f 2f 2e ab 7b 71 57 1e e4 36 d6 e9 49 56 8a 3d b1 8e fe e3 61 cc b0 d5 19 74 c0 3c c7 30 29 d8 df c1 fe 8b c6 f3 84 05 16 65 9a a9 08 cd b2 30 9f 49 f7 fa 4b 86 fb fa c1 ef d5 be 3e 2a ad 5b da 1b ab f6 f3 15 59 18 10 8a 76 78 ed 8d be 7c af 7f 91 be 54 be c0 5b 32 cd 28 0f f1 8e bf 4d a8 4a f5 8e 7f 48 a8 06 69 26 0a 7c cd 92 4c 75 0d 8d f1 39 d7 f2 45 b9 82 af 70 f9 a2 be 82 6f f8 f2 45 fd 04 9f ed 7d 4c 52 72 a3 09 f4 27 45 07 83 fd 88 bf 62 5b 9a c8 b5 23 ff 45 d2 Data Ascii: :Pp]4m 8tc}}&D%3P\J-&V< ={;_U].e#ppo/.{qW6IV=at<0)e0IK>*[Yvx\|T[2(MJHi&\|Lu9EpoE}LRr'Eb[#E
2025-01-06 08:32:50 UTC	1369	IN	Data Raw: df a9 ea 93 4a 93 12 b1 9f aa be 97 76 1e 57 08 5e d1 3f 2e ab d2 67 a2 eb 68 79 b2 53 59 af 99 38 79 9e 6a d0 1d 39 5b bc f6 09 d2 9a cf d4 71 37 82 39 b6 d7 2e 15 f5 50 03 36 3d 37 01 1d 39 a5 17 82 2e 1d 6e 56 5c a7 b7 ff 5c f5 c7 82 4e 65 1b 6e 73 c6 3d 7c e4 33 89 90 87 c6 20 5f db 0d 72 7c 17 df 6b df d1 4a b6 b6 d3 e1 79 80 ab f9 51 4e fe 84 c8 27 f5 d0 10 c9 7e 94 1b fe d0 db 1e bb e5 c4 2b 3b 93 5c 96 cf fa fe 55 fc bb b3 de 69 cb d3 64 14 b5 55 3e b6 95 5b 39 2c 36 30 50 cd 80 6b 5d 0d ad 1e a5 b1 68 07 bb ec 04 17 c1 cd a9 02 28 a4 57 e2 16 cb 54 9d b3 61 33 e8 7c 6f eb 70 2a 86 7b b1 1c 0d 0c 3a a8 ce fc e8 40 f2 eb 07 1a e6 e0 a7 41 9d aa 8a 16 09 50 5f ea 4f 6a 3b d4 80 66 85 6c d7 49 cd 65 bb 10 dd 20 80 e7 2d d8 8d af 42 04 95 8d ec 8a 9d Data Ascii: JvW^?.ghySY8yj9[q79.P6=79.nV\\Nens=\|3 _r\|kJyQN'~+;\UidU>[9,60Pk]h(WTa3\|op*{:@AP_Oj;flIe -B
2025-01-06 08:32:50 UTC	1369	IN	Data Raw: 49 c3 67 73 38 e1 47 c2 1f 0f 3e 4e c5 bb 99 f8 53 89 8f b3 f1 6e 2e fe dc 2b 05 a7 e4 91 fa cf 1c 5d 04 94 56 5e 59 a4 13 45 a6 c7 36 95 7d ad dd 39 d8 5d 31 65 98 8d 6b a5 a5 5c c0 d6 6d d7 74 ca cb 5a b9 44 bd 80 ae 99 38 03 4e d2 88 cf 7b 80 7b 81 88 ea 66 51 d9 84 2a b1 a4 8c 6b 25 6d fc 7f d0 8b de 59 b2 c0 e4 1b 4c 95 ef 8f 3d 58 49 67 6f ec a7 aa cb 46 67 fd 82 7e 62 e9 41 54 1b a7 e4 a3 fe b5 0e 54 80 08 48 f9 29 c5 f8 b4 0a 9f ce 4f 4a f0 37 7c 95 15 4d f0 0c 0f 7e 30 3f 39 06 53 d2 bc e5 a9 ce de f6 51 e6 13 6f 1c 0c 74 8f 65 54 93 c0 e8 38 1b 91 fc 8d c5 34 3a 17 80 40 2e 3a 50 72 8f d5 fc e8 7f 31 6e 86 66 9b 33 a6 e2 bc eb 15 ea 2f 21 13 de d3 32 2f 5f 2b 7a 3a 82 06 30 73 a0 8e 9c 37 a9 55 57 6a cb c0 48 f3 9c cf 01 64 08 7b 8f 03 fe f1 ea Data Ascii: Igs8G>NSn.+]V^YE6}9]1ek\mtZD8N{{fQ*k%mYL=XIgoFg~bATTH)OJ7\|M~0?9SQoteT84:@.:Pr1nf3/!2/_+z:0s7UWjHd{
2025-01-06 08:32:50 UTC	1369	IN	Data Raw: d7 c2 01 c4 42 01 24 fa 51 1e e2 1b fd d8 87 80 57 d1 de d2 26 19 03 08 0c 74 2a cd 68 a3 db ac 5a c6 03 0c c9 0e b3 bb 34 2d bc 65 f7 bd 6e 5c ed 67 4b 13 f3 c3 e4 6e 8b 6a c9 e8 96 35 ea f3 02 03 7b 21 6d ab 00 54 fb cc 90 52 b5 ce ae 18 a2 0b 2e 6b 52 30 60 08 da 38 bc dc 17 51 b5 34 2f 35 0a e3 8d f0 7a a1 05 6a 94 1b f3 1a bf 7f 0b d9 43 d1 56 b8 62 1d 42 e5 b8 f5 68 4b 89 ca 18 f6 f2 26 f2 51 93 f8 7e 8f 8d 6c 1e b7 cd 5e 40 f1 d0 b6 a3 66 56 63 51 43 f6 32 d3 82 ec 64 4f 44 5c f1 c1 31 cd 52 5e cb e3 7b dd b3 35 79 e3 cf d9 be 6c 52 cc 97 4d 42 5f 36 07 5b f9 70 82 2f 9b 66 97 c1 2d 47 3c a8 a5 83 34 1d 8a 3a e1 20 a1 cc 3a 61 fe db c2 43 a5 e9 a2 41 85 34 49 a9 49 6d 2d d4 1a 5a b5 d1 b9 4c 69 29 da b1 56 e8 87 54 2b 5c 4c 0c 70 13 ea 75 cf 6a 95 Data Ascii: B$QW&t*hZ4-en\gKnj5{!mTR.kR0`8Q4/5zjCVbBhK&Q~l^@fVcQC2dOD\1R^{5ylRMB_6[p/f-G<4: :aCA4IIm-ZLi)VT+\Lpuj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49771	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:58 UTC	173	OUT	POST /v1/event-stat?Type=ErrorInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 728 Connection: Keep-Alive
2025-01-06 08:32:58 UTC	728	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 3a 20 22 49 4e 32 34 30 34 30 32 22 2c 0d 0a 20 20 22 43 61 6d 70 61 69 67 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "d768e6f2-f3e1-499f-9b44-ef0144c95940", "Version": "13.900.0.1080", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId": "IN240402", "Campaig
2025-01-06 08:32:58 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:58 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5c4ebafe4338-EWR
2025-01-06 08:32:58 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49772	104.18.26.149	443	4856	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:32:59 UTC	152	OUT	POST /v1/event-stat-wc?Type=ErrorInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 674
2025-01-06 08:32:59 UTC	674	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 64 37 36 38 65 36 66 32 2d 66 33 65 31 2d 34 39 39 66 2d 39 62 34 34 2d 65 66 30 31 34 34 63 39 35 39 34 30 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 49 44 22 3a 22 32 31 37 39 34 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"d768e6f2-f3e1-499f-9b44-ef0144c95940","Version":"13.900.0.1080","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402","CampaignID":"21794
2025-01-06 08:32:59 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:32:59 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda5c52bddd1a1b-EWR
2025-01-06 08:32:59 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:32:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	03:32:06
Start date:	06/01/2025
Path:	C:\Users\user\Desktop\Setup.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\Setup.exe"
Imagebase:	0x400000
File size:	545'344 bytes
MD5 hash:	2902E39C85DD5DE70D317957A8DD1683
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	03:32:06
Start date:	06/01/2025
Path:	C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe
Wow64 process (32bit):	true
Commandline:	.\WebCompanion-Installer.exe --savename=Setup.exe --partner=IN240402 --nonadmin --direct --tych --campaign=21794599196 --version=13.900.0.1080
Imagebase:	0xfd0000
File size:	438'936 bytes
MD5 hash:	A27F9713DB1688D03D2082BFA1827803
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe, Author: Joe Security
Antivirus matches:	Detection: 21%, ReversingLabs
Reputation:	moderate
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	16.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	1.8%
Total number of Nodes:	2000
Total number of Limit Nodes:	16

Executed Functions

Function 004148D4 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 81
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetVersion.KERNEL32 ref: 004148FA

Part of subcall function 004157C8: HeapCreate.KERNELBASE(00000000,00001000,00000000,00414932,00000001), ref: 004157D9
Part of subcall function 004157C8: HeapDestroy.KERNEL32 ref: 00415818

GetCommandLineA.KERNEL32 ref: 0041495A
GetStartupInfoA.KERNEL32(?), ref: 00414985
GetModuleHandleA.KERNEL32(00000000,00000000,?,0000000A), ref: 004149A8

Part of subcall function 00414A01: ExitProcess.KERNEL32 ref: 00414A1E

Strings

`&, xrefs: 00414974
@%D, xrefs: 00414960

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: Heap$CommandCreateDestroyExitHandleInfoLineModuleProcessStartupVersion
String ID: @%D$`&
API String ID: 2057626494-815259658
Opcode ID: d0b0bc6d91067fd433c2cc4b1856fc531dfd5f25a3beb9f48f66dbad23e013fe
Instruction ID: fb65514f2d73941f5fb5fe300876562abb5c146ee9b99336205dd39c2cb12ef3
Opcode Fuzzy Hash: d0b0bc6d91067fd433c2cc4b1856fc531dfd5f25a3beb9f48f66dbad23e013fe
Instruction Fuzzy Hash: BD219EB19407159FDB14EFB6DC46AEE7BB8EF44704F10412FF910AB291DB3C89818A58

Function 00405434 Relevance: 3.0, APIs: 2, Instructions: 44
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00405414: FindClose.KERNELBASE(?,000000FF,00405445,000000FF), ref: 0040541F

FindFirstFileW.KERNELBASE(?,?,000000FF), ref: 00405497

Part of subcall function 00403B85: __EH_prolog.LIBCMT ref: 00403B8A

FindFirstFileA.KERNEL32(?,?,000000FF), ref: 00405467

Part of subcall function 0040551C: __EH_prolog.LIBCMT ref: 00405521

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: Find$FileFirstH_prolog$Close
String ID:
API String ID: 3335342080-0
Opcode ID: 01ff4a9bc94c78cd279a0d863a54892268cf469c718bfc53d66ce16def007dff
Instruction ID: 44fa9ff84b7e7cb6f1e8d7f9ea47a8a098aa0700a3472251c04f15a334366322
Opcode Fuzzy Hash: 01ff4a9bc94c78cd279a0d863a54892268cf469c718bfc53d66ce16def007dff
Instruction Fuzzy Hash: 33014830401505ABCF20AF64DC456EE7779DF51329F20827AE855672D1D73C9A85CF98

Function 00401014 Relevance: 48.0, APIs: 8, Strings: 19, Instructions: 715
windowsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00401A7B: GetVersionExA.KERNEL32(?), ref: 00401A95

GetCommandLineW.KERNEL32(00000003,00000003,00000003,00000003,?,00000000), ref: 0040108B

Part of subcall function 004038D7: __EH_prolog.LIBCMT ref: 004038DC

Part of subcall function 0040460B: __EH_prolog.LIBCMT ref: 00404610
Part of subcall function 0040460B: GetModuleFileNameA.KERNEL32(00400000,?,00000105,00000000,00000000), ref: 00404649

Part of subcall function 0040237B: __EH_prolog.LIBCMT ref: 00402380

Part of subcall function 00402340: __EH_prolog.LIBCMT ref: 00402345

Part of subcall function 00403DE4: __EH_prolog.LIBCMT ref: 00403DE9

MessageBoxW.USER32(00000000,?,?,00000010), ref: 004015DE
ShellExecuteExA.SHELL32(0000003C,?,00000001,?,?,00000003,?,00000003,00420240,;!@InstallEnd@!,?,00000003,00000000,00000002,00420278,00000003), ref: 004016D5
MessageBoxW.USER32(00000000,?,?,00000024), ref: 004012FF

Part of subcall function 00410EC0: MessageBoxW.USER32(00000000,?,7-Zip,00000010), ref: 00410EC9

Part of subcall function 00402EFE: __EH_prolog.LIBCMT ref: 00402F03

CloseHandle.KERNEL32(?,?,00000000), ref: 004019A8
WaitForSingleObject.KERNEL32(?,000000FF,?,00000000), ref: 004019C7
CloseHandle.KERNEL32(?,?,00000000), ref: 004019CE

Strings

%%T, xrefs: 00401832
RunProgram, xrefs: 0040139A
ExecuteFile, xrefs: 004013DA
Config failed, xrefs: 004011F7
Can not open file, xrefs: 004016ED
%%T\, xrefs: 00401803
Directory, xrefs: 004012A2
Title, xrefs: 0040120B
<, xrefs: 0040166A
ExecuteParameters, xrefs: 0040141A
;!@InstallEnd@!, xrefs: 0040116D
Can not create temp folder archive, xrefs: 004014DD
Can not find setup.exe, xrefs: 004017DB
setup.exe, xrefs: 004017B9
;!@Install@!UTF-8!, xrefs: 00401172
, xrefs: 004016DB
Can not load codecs, xrefs: 00401529
Can't load config info, xrefs: 00401185
D, xrefs: 00401886

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog$Message$CloseHandle$CommandExecuteFileLineModuleNameObjectShellSingleVersionWait
String ID: $%%T$%%T\$;!@Install@!UTF-8!$;!@InstallEnd@!$<$Can not create temp folder archive$Can not find setup.exe$Can not load codecs$Can not open file$Can't load config info$Config failed$D$Directory$ExecuteFile$ExecuteParameters$RunProgram$Title$setup.exe
API String ID: 785510900-2114487665
Opcode ID: 8fd5f8ab937932ae6757a318f5051f0329dcea0d0da6af97c6c1f875a1e9e091
Instruction ID: f92d1a5b025e5f1856d93d01be2b226abe75c3e6546c85d9ed47549f0c040395
Opcode Fuzzy Hash: 8fd5f8ab937932ae6757a318f5051f0329dcea0d0da6af97c6c1f875a1e9e091
Instruction Fuzzy Hash: 485228719002199ACF25EFA5DC82AEDBB75AF04308F1040BFE156721F2DA395B86CF58

Function 0040AB05 Relevance: 14.2, APIs: 9, Instructions: 682
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 0040AB0A

Part of subcall function 0040D5A3: __EH_prolog.LIBCMT ref: 0040D5A8

Part of subcall function 004130E0: InitializeCriticalSection.KERNEL32(?,?,?,00000000,00000000), ref: 0041310E

DeleteCriticalSection.KERNEL32(?), ref: 0040AD3E
DeleteCriticalSection.KERNEL32(?), ref: 0040AFCB
DeleteCriticalSection.KERNEL32(?), ref: 0040B036
DeleteCriticalSection.KERNEL32(?), ref: 0040B093
DeleteCriticalSection.KERNEL32(?), ref: 0040B1A2
DeleteCriticalSection.KERNEL32(?), ref: 0040B1FC
DeleteCriticalSection.KERNEL32(?,?,?,00000004,00000004), ref: 0040B271
DeleteCriticalSection.KERNEL32(?), ref: 0040B303

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CriticalSection$Delete$H_prolog$Initialize
String ID:
API String ID: 3452124646-0
Opcode ID: 53ff4eaa71f930fd4966fc49476664da3d82c19ee4ae63da8a12ea1bfaad2ad0
Instruction ID: 4c9a54a47b38b58bbaef36bcc828af5c6ca02983ed7c574d3216c54edcd042c8
Opcode Fuzzy Hash: 53ff4eaa71f930fd4966fc49476664da3d82c19ee4ae63da8a12ea1bfaad2ad0
Instruction Fuzzy Hash: FC627E7090024ADFDB14DFA5C944BDEBBB4FF14308F1080AEE805B7291DB789A49DB99

Function 004051B7 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 102
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentThreadId.KERNEL32 ref: 004051C5
GetTickCount.KERNEL32 ref: 004051D0
GetCurrentProcessId.KERNEL32(?,00000000,?,?,00405334,?,00000000,?,00000003,00000003,00000000,00000000,00000003,?,00000000), ref: 004051DB
GetTickCount.KERNEL32 ref: 00405240
SetLastError.KERNEL32(000000B7,00000000,?,00000000,?,?,00405334,?,00000000,?,00000003), ref: 00405273
GetLastError.KERNEL32(00000000,?,00000000,?,?,00405334,?,00000000,?,00000003), ref: 00405299

Part of subcall function 004049F4: CreateDirectoryA.KERNEL32(?,00000000,00000000,00000000,?,00000000,?,?,00405334,?,00000000,?,00000003), ref: 00404A13

Strings

d, xrefs: 004052AE
.tmp, xrefs: 00405257

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CountCurrentErrorLastTick$CreateDirectoryProcessThread
String ID: .tmp$d
API String ID: 3074393274-2797371523
Opcode ID: 2fda1539db0041318063c64b288010cc5c4c3aedaa5e381c7d8f696092406eab
Instruction ID: 4fab17955b769304b7d1cf71853489b42ead9ac2cf2e2055059d54e7646dac87
Opcode Fuzzy Hash: 2fda1539db0041318063c64b288010cc5c4c3aedaa5e381c7d8f696092406eab
Instruction Fuzzy Hash: CC31C1326506009BDB10ABA098897EF7760EFA5315F14807FE902BB2D2D77C9842CF99

Function 00404908 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 36
filetimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetLastError.KERNEL32(00000078,.@,00000000,00402AB0,00000000,?,?,?,?), ref: 00404918
CreateFileW.KERNELBASE(?,40000000,00000003,00000000,00000003,02000000,00000000,?,.@,00000000,00402AB0,00000000,?,?,?,?), ref: 00404934
SetFileTime.KERNELBASE(00000000,00000000,?,?,?,40000000,00000003,00000000,00000003,02000000,00000000,?,.@,00000000,00402AB0,00000000), ref: 0040494B
CloseHandle.KERNEL32(00000000,?,40000000,00000003,00000000,00000003,02000000,00000000,?,.@,00000000,00402AB0,00000000,?,?,?), ref: 00404957

Strings

.@, xrefs: 00404911

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: File$CloseCreateErrorHandleLastTime
String ID: .@
API String ID: 2291555494-2582305824
Opcode ID: 134b82ee1bee937397c61f831c6e8a998fcbb54d8f51f8998ece3d2421389dbd
Instruction ID: b13e78268552c33248838deebc4f257ca571263cc4fefdaa9dfe176c52576776
Opcode Fuzzy Hash: 134b82ee1bee937397c61f831c6e8a998fcbb54d8f51f8998ece3d2421389dbd
Instruction Fuzzy Hash: 66F0E2B12812107BE2201B74BC48F9B6E5CDBCA715F108135B661A21E0C3284D19D7B8

Function 004083AB Relevance: 5.6, APIs: 1, Strings: 2, Instructions: 328
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 004083B0

Strings

X3B, xrefs: 004086A4
Unknown error, xrefs: 00408671, 00408676

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID: Unknown error$X3B
API String ID: 3519838083-1496835351
Opcode ID: 47f253f86f2cbe6f5ea7b7729e7e95f0c02779c145a6591478a86d185b5344b5
Instruction ID: 10ffca09dccd2053a4a89f972bfe6bbc607f2b880b0d523777cfa28ffc571443
Opcode Fuzzy Hash: 47f253f86f2cbe6f5ea7b7729e7e95f0c02779c145a6591478a86d185b5344b5
Instruction Fuzzy Hash: 89D16070900219EFCF05DFA4C984ADEBB74BF48304F14846EE846BB2D1DB78AA45CB95

Function 00405620 Relevance: 4.6, APIs: 3, Instructions: 130
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 00405625

Part of subcall function 00405434: FindFirstFileA.KERNEL32(?,?,000000FF), ref: 00405467

GetLastError.KERNEL32(?,?,00000000,?,00000001), ref: 00405653

Part of subcall function 00405414: FindClose.KERNELBASE(?,000000FF,00405445,000000FF), ref: 0040541F

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: Find$CloseErrorFileFirstH_prologLast
String ID:
API String ID: 364955512-0
Opcode ID: e39f0d4d85096f3cd882782c1d04852b930387ce9b142e76bb949cb0f7f9728b
Instruction ID: 04b13d9487752735ca5a27f2fc382c225ef0a6c39b2ce108fc8834fd1c85259b
Opcode Fuzzy Hash: e39f0d4d85096f3cd882782c1d04852b930387ce9b142e76bb949cb0f7f9728b
Instruction Fuzzy Hash: F0418E36900519AACF14FBA5D942AEFBB75EF14308F10403AE412772E1DB795E41DEA8

Function 0040280E Relevance: 3.9, APIs: 1, Strings: 1, Instructions: 384
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 00402813

Part of subcall function 00402D81: EnterCriticalSection.KERNEL32(?,?,?,00409336), ref: 00402D86
Part of subcall function 00402D81: LeaveCriticalSection.KERNEL32(?,?,?,?,00409336), ref: 00402D90

Strings

.@, xrefs: 00402A17, 00402C0B, 00402C67

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CriticalSection$EnterH_prologLeave
String ID: .@
API String ID: 367238759-2582305824
Opcode ID: 577924c8c0bac586da650f1e85d0a83bbc87ffed532ab8f3eca2ba2db10ea84e
Instruction ID: fb4838387da9abac6519c3a0e173b295c4de01f89ec6b6ed0d4ee3fc8d60aaac
Opcode Fuzzy Hash: 577924c8c0bac586da650f1e85d0a83bbc87ffed532ab8f3eca2ba2db10ea84e
Instruction Fuzzy Hash: F3F1DF70900248DFCF14EFA5C985ADEBBB4AF54308F10807EE446B72E1DB785A85DB19

Function 004030FC Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 134
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 00403101

Part of subcall function 00405620: __EH_prolog.LIBCMT ref: 00405625

Part of subcall function 00404A3E: __EH_prolog.LIBCMT ref: 00404A43

Part of subcall function 004092E6: __EH_prolog.LIBCMT ref: 004092EB

Strings

Default, xrefs: 00403213

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID: Default
API String ID: 3519838083-753088835
Opcode ID: 0fc91ddac6c1b16fe72a6cc7b41e2781a7216c9bd00a9ca8bd5645336c638fb0
Instruction ID: 203c82e13c85383a660d5cb73dbb10af46e9aa8c77eacbcc0267a4e11568a844
Opcode Fuzzy Hash: 0fc91ddac6c1b16fe72a6cc7b41e2781a7216c9bd00a9ca8bd5645336c638fb0
Instruction Fuzzy Hash: E4514E75900209EFDB14EFA5D8819EEBBB8FF18308F00456EE556772D1DB38AA06CB14

Function 00404A3E Relevance: 3.2, APIs: 2, Instructions: 166
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 00404A43
GetLastError.KERNEL32(?,?,?,00000000), ref: 00404ACB

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: ErrorH_prologLast
String ID:
API String ID: 1057991267-0
Opcode ID: cf2054507fd1ee53753d2eae408e5b803be4a538542d8802e2091fe77905cd97
Instruction ID: 397979b183d08822f23b565ee303c4952bc02ec102e27be1c48eee89bea9c2ad
Opcode Fuzzy Hash: cf2054507fd1ee53753d2eae408e5b803be4a538542d8802e2091fe77905cd97
Instruction Fuzzy Hash: 1E5105719441099ACF10EBA5C942AFEBB75AF91308F11017FE602731E1DB3DAE46CB99

Function 00408755 Relevance: 3.1, APIs: 2, Instructions: 85
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 0040875A
GetLastError.KERNEL32(?,00000000,?,?,00000000,?,?,0040893F,?,?,00000000,004149B4,?,?,?,00000000), ref: 004087E8

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: ErrorH_prologLast
String ID:
API String ID: 1057991267-0
Opcode ID: 9241e159634e285d8ed2c067ddd4a586d7e54c47a3761db9d9a9d26607b46551
Instruction ID: 0128b321cd566d1ceb50e896689a501b942dab3b414a73cd3b5e456030195100
Opcode Fuzzy Hash: 9241e159634e285d8ed2c067ddd4a586d7e54c47a3761db9d9a9d26607b46551
Instruction Fuzzy Hash: EE317C719012499FCB10DF95CE849AEBBB0FF44314B24817FE496B7292CB388D40DB69

Function 0041468E Relevance: 3.0, APIs: 2, Instructions: 45
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00416CCC: HeapAlloc.KERNEL32(00000008,?,00000000,00000000,00000001,00415318,00000001,00000074,?,?,00000000,00000001), ref: 00416DC2

CreateThread.KERNELBASE(00000000,00000003,004146F9,00000000,00000000,?), ref: 004146CF
GetLastError.KERNEL32(?,?,?,00413009,00000000,00000000,004032CA,?,00000000,00000000,?,00402FAB,?,00000000,?), ref: 004146D9

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: AllocCreateErrorHeapLastThread
String ID:
API String ID: 3580101977-0
Opcode ID: 0374611688ca75c4551dea276e5d424cbadff3ac534dbe24837146ca9d20d13e
Instruction ID: 928dc59a5e1d7113ba94efa25a55b36d47ae035f635b84aed830f8a2a3c61c12
Opcode Fuzzy Hash: 0374611688ca75c4551dea276e5d424cbadff3ac534dbe24837146ca9d20d13e
Instruction Fuzzy Hash: D6F02D362006156BCB209F66EC019DB3BA5EF81375F10402EF958C2290DF3DC8914BAC

Function 00405892 Relevance: 3.0, APIs: 2, Instructions: 45
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00405905: CloseHandle.KERNELBASE(00000000,000000FF,004058A0,?,?,00000000), ref: 00405910

CreateFileW.KERNELBASE(00000000,?,?,00000000,00000000,00000000,00000000,00000000,?,?,00000000), ref: 004058EF

Part of subcall function 00403B85: __EH_prolog.LIBCMT ref: 00403B8A

CreateFileA.KERNEL32(?,?,?,00000000,00000000,00000000,00000000,00000000,?,?,00000000), ref: 004058CB

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CreateFile$CloseH_prologHandle
String ID:
API String ID: 449569272-0
Opcode ID: 34b674e9a04a5ff3e8c8923f5916708bcc46c4f31befc859c171c75614de22e6
Instruction ID: 7cb04d8d1853a58e30318ad4c29bda14cf4b58fee7e46fc4002fe1391b6e6e2b
Opcode Fuzzy Hash: 34b674e9a04a5ff3e8c8923f5916708bcc46c4f31befc859c171c75614de22e6
Instruction Fuzzy Hash: 4F01287240020AFFCF11AFA4DC45C9B7F6AEF08364B10853AF991661A1D73699A1EF94

Function 00404965 Relevance: 3.0, APIs: 2, Instructions: 31
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetFileAttributesW.KERNELBASE(?,00000000,?,00000003,?,00000000), ref: 0040499C

Part of subcall function 00403B85: __EH_prolog.LIBCMT ref: 00403B8A

SetFileAttributesA.KERNEL32(?,00000000,?,00000003,?,00000000), ref: 00404985

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: AttributesFile$H_prolog
String ID:
API String ID: 3790360811-0
Opcode ID: 5366c93646a32060bc4a1fe11ea500c12b8b92d1211a98e2b8e7846322785de3
Instruction ID: f078d443d6654451da1bdd33dee3a4941b810ca2709c1c0422ffd448cadfd8b3
Opcode Fuzzy Hash: 5366c93646a32060bc4a1fe11ea500c12b8b92d1211a98e2b8e7846322785de3
Instruction Fuzzy Hash: 12E0E5B19002106BCB302B749C08AD73F6CCB82314B108177E816B72D0DA388E06C6D9

Function 004049F4 Relevance: 3.0, APIs: 2, Instructions: 31COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNELBASE(00000000,00000000,00000000,?,00000000,?,?,00405334,?,00000000,?,00000003), ref: 00404A2C

Part of subcall function 00403B85: __EH_prolog.LIBCMT ref: 00403B8A

CreateDirectoryA.KERNEL32(?,00000000,00000000,00000000,?,00000000,?,?,00405334,?,00000000,?,00000003), ref: 00404A13

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CreateDirectory$H_prolog
String ID:
API String ID: 2325068607-0
Opcode ID: a1e0d02f5bfc64bfc09281de4819c2c8931d1b3daee1640bd6a36795e0d5f738
Instruction ID: e8b418caba4fa0c83fd0f6cce2293bab18ef6c4fa53c548cc4c0ebfda5fe1645
Opcode Fuzzy Hash: a1e0d02f5bfc64bfc09281de4819c2c8931d1b3daee1640bd6a36795e0d5f738
Instruction Fuzzy Hash: 3CE0E570B002006BDB206B64AC05B977B68CB41709F104176E902F71D0DA78DE01DA9C

Function 004157C8 Relevance: 3.0, APIs: 2, Instructions: 30memoryCOMMON

Download Yara Rule

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000,00414932,00000001), ref: 004157D9

Part of subcall function 00415680: GetVersionExA.KERNEL32 ref: 0041569F

HeapDestroy.KERNEL32 ref: 00415818

Part of subcall function 00415825: HeapAlloc.KERNEL32(00000000,00000140,00415801,000003F8), ref: 00415832

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: Heap$AllocCreateDestroyVersion
String ID:
API String ID: 2507506473-0
Opcode ID: 0d18dfc85a1640e6673d81f03e6c6359104a03ea7de3319d0e450716895a192f
Instruction ID: ed3d0d0d9fb025b00032fbfed5580f0a7fafafb3549905f7ec75d8b7e0a93aa3
Opcode Fuzzy Hash: 0d18dfc85a1640e6673d81f03e6c6359104a03ea7de3319d0e450716895a192f
Instruction Fuzzy Hash: 6CF06530A54B01EEDF207B706C867EA2B90EB84795F60483BF401D81A0EB7884D1D659

Function 00405970 Relevance: 3.0, APIs: 2, Instructions: 30COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE(?,?,?,?), ref: 0040598B
GetLastError.KERNEL32(?,?,?,?), ref: 00405999

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: ErrorFileLastPointer
String ID:
API String ID: 2976181284-0
Opcode ID: 4eb004f5f0e538f15da8fb4a4b1192dc0e26d9ca4b62000b247bbe798b79ae76
Instruction ID: b27308c8a3af6e3091502473baf333c9532b4c6e1f366657fcb3ad1a7c3590d9
Opcode Fuzzy Hash: 4eb004f5f0e538f15da8fb4a4b1192dc0e26d9ca4b62000b247bbe798b79ae76
Instruction Fuzzy Hash: 93F0B7B4500208EFDF04CF94D9458AE7BB5EF49364B208169F815E7390D7359E00DFA9

Function 00404F2C Relevance: 3.0, APIs: 2, Instructions: 27COMMON

Download Yara Rule

APIs

SetCurrentDirectoryW.KERNELBASE(?,?,00000000), ref: 00404F62

Part of subcall function 00403B85: __EH_prolog.LIBCMT ref: 00403B8A

SetCurrentDirectoryA.KERNEL32(00000000,00000000,?,00000000), ref: 00404F48

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CurrentDirectory$H_prolog
String ID:
API String ID: 3531555294-0
Opcode ID: 37bd0973ac103fd303293487a19168a5ccebfcf95a8c4f288a103cb7951a30b5
Instruction ID: 9edf083e53dd0555a3085cbe496080ff7240eda39e21aa363a26468641b3ea5b
Opcode Fuzzy Hash: 37bd0973ac103fd303293487a19168a5ccebfcf95a8c4f288a103cb7951a30b5
Instruction Fuzzy Hash: 75E02630B400093FDF112F78EC4A9AA3BB89B40309F10427AB403E20E1EF38CA48CA48

Function 0040B98F Relevance: 2.0, APIs: 1, Instructions: 515COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040B994

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 6c23f50496e65b3ca560bc6ad6661ef703fabc81de4c7ebfafbc0beace10094d
Instruction ID: 4fbed39282daa38b1d3be95d0829f5567439209fdd6a1d56e89862dfcbe45c3a
Opcode Fuzzy Hash: 6c23f50496e65b3ca560bc6ad6661ef703fabc81de4c7ebfafbc0beace10094d
Instruction Fuzzy Hash: 05324B70904249DFDB10DFA8C584BDEBBB0AF58304F1441AEE845B7382DB78AE45CB99

Function 0040EB99 Relevance: 2.0, APIs: 1, Instructions: 500COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040EB9E

Part of subcall function 0040E770: __EH_prolog.LIBCMT ref: 0040E775

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 93af7643a127ff2c8fcf7066a9c121e1979c0be22eb581a0e33d5eb75e035ebc
Instruction ID: 765616d13d330a71392781af4293cea344630bd2be9376268a28767dce44cac6
Opcode Fuzzy Hash: 93af7643a127ff2c8fcf7066a9c121e1979c0be22eb581a0e33d5eb75e035ebc
Instruction Fuzzy Hash: F6325C70900249DFCB24DFA5C880BEEBBB5BF55308F14847ED549B7282DB386A89CB55

Function 0040888F Relevance: 1.9, APIs: 1, Instructions: 374COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00408894

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: f8f61f009d3daf8c2db6a732b574bcd6eafb3dea196858b7c2c201f5376d76a6
Instruction ID: dff2ad87a4df39db6f8fa6ff6a697358cee08fb6a23258ae47e5232e80a59da3
Opcode Fuzzy Hash: f8f61f009d3daf8c2db6a732b574bcd6eafb3dea196858b7c2c201f5376d76a6
Instruction Fuzzy Hash: FFE16E70904249DFDF10DFA4C988AAEBBB4AF48314F2444AEE556F7391CB389E45CB25

Function 0040E7F4 Relevance: 1.8, APIs: 1, Instructions: 255COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040E7F9

Part of subcall function 0040F836: __EH_prolog.LIBCMT ref: 0040F83B

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 498aaecf194758b2187a7f377388585577334c9b398a12de9558ebeea3154d22
Instruction ID: 639e188e3e769c4c76ba7ddc7be71c767d86a570cac8f7036ff280b2304c1e48
Opcode Fuzzy Hash: 498aaecf194758b2187a7f377388585577334c9b398a12de9558ebeea3154d22
Instruction Fuzzy Hash: 5DC13670900259DFDB14DFA5C985BDEBBB4BF14308F1480AEE945B7282CB786A48CF65

Function 0040F449 Relevance: 1.7, APIs: 1, Instructions: 207COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040F44E

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 7053a18d867c794380ddb73d5154a26bfb4cc56ca4d452b1cbce9de2fd1904e6
Instruction ID: 37dc011919f3b1358f9a833e213d0996983958fb9ee029613f358e4c9ba25a45
Opcode Fuzzy Hash: 7053a18d867c794380ddb73d5154a26bfb4cc56ca4d452b1cbce9de2fd1904e6
Instruction Fuzzy Hash: 3C815C70E00605ABCB24DFA5C881AEEFBB1BF48304F14453EE445B3791D739A949CB99

Function 00408D5E Relevance: 1.7, APIs: 1, Instructions: 151COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00408D63

Part of subcall function 00408F0B: __EH_prolog.LIBCMT ref: 00408F10

Part of subcall function 00402635: __EH_prolog.LIBCMT ref: 0040263A

Part of subcall function 00403981: __EH_prolog.LIBCMT ref: 00403986

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: fe4f4b855b35ad50f10ad9ecf2bf615057988214f71ae465a5f778489ccae84a
Instruction ID: 2e5fef73c4a961ecd91826de13bda49669b7ee5ae1afd1ab178ba291f64b6413
Opcode Fuzzy Hash: fe4f4b855b35ad50f10ad9ecf2bf615057988214f71ae465a5f778489ccae84a
Instruction Fuzzy Hash: E5516D7190060AEFCF11DFA5C984A9EBBB4BF08314F10462EE556B72D1CB789A45CFA4

Function 0040DB62 Relevance: 1.6, APIs: 1, Instructions: 146COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040DB67

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 6102bc3ab49ae424949eee4761875b821dd30f392df23a536a372274e60046df
Instruction ID: 67e57bbcfb5e62c28ba97e2c762051c7e2fb602a8ee489b014dcb5d1e96c76cd
Opcode Fuzzy Hash: 6102bc3ab49ae424949eee4761875b821dd30f392df23a536a372274e60046df
Instruction Fuzzy Hash: DA419EB1E042059BEB14DF99C985ABEB7B5FF48304F14453EE402B7381D7B8A945CBA8

Function 0040CD84 Relevance: 1.6, APIs: 1, Instructions: 143COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040CD89

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 305c79b04e93cb02db0d94eb430663c97d837b050eba01e1428f85ec3b32050d
Instruction ID: 716710645470f9cf712b82a1641bf3e3a23618a4fc30be00c3c641d866b01c52
Opcode Fuzzy Hash: 305c79b04e93cb02db0d94eb430663c97d837b050eba01e1428f85ec3b32050d
Instruction Fuzzy Hash: 3151C531804146DFCB15CB68C4D4AEE7771EF48348F14827BE8167B2D2D6399A06DBEA

Function 00401B11 Relevance: 1.6, APIs: 1, Instructions: 132COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00401B16

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 4a7b8dc75b00dab3078b6f2c0b685c16519ae0cc3006f02a661cb725d39e4b70
Instruction ID: dc66995ee082b2e59fd72de07b50a9d1ecefa8465c91578acc64d6d85ae5b981
Opcode Fuzzy Hash: 4a7b8dc75b00dab3078b6f2c0b685c16519ae0cc3006f02a661cb725d39e4b70
Instruction Fuzzy Hash: 7A51D071C042499FDF21DFA4C940BEEBBB4AF05394F14416AE851732E2E7789A41CB68

Function 00402EFE Relevance: 1.6, APIs: 1, Instructions: 116COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00402F03

Part of subcall function 0040335F: __EH_prolog.LIBCMT ref: 00403364

Part of subcall function 004034CC: __EH_prolog.LIBCMT ref: 004034D1

Part of subcall function 00403086: __EH_prolog.LIBCMT ref: 0040308B
Part of subcall function 00403086: ShowWindow.USER32(004149B4,00000001,000001F4,00000000,?,?,00000000,00000003,00000000,00000000), ref: 004030E4

Part of subcall function 00412FB0: CloseHandle.KERNEL32(00000000,00000000,0040301E,?,?,00000000,00000003,?,00000000,?,?,00000003,00000000,00000000), ref: 00412FBA
Part of subcall function 00412FB0: GetLastError.KERNEL32(?,00000003,00000000,00000000), ref: 00412FC4

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog$CloseErrorHandleLastShowWindow
String ID:
API String ID: 2740091781-0
Opcode ID: 2da83f7b0348b558eb037d8fcbbe5e82633db5724e115f0790e5db2222500163
Instruction ID: 576321bfec054c9ee934bf83a6d4a944d332aa9064831fab6676e01313dc7821
Opcode Fuzzy Hash: 2da83f7b0348b558eb037d8fcbbe5e82633db5724e115f0790e5db2222500163
Instruction Fuzzy Hash: FF419C71900248DBCB11EFA5C991AEDBBB4AF04304F1080BFE90AB72D2DA785B45CB59

Function 0040C557 Relevance: 1.6, APIs: 1, Instructions: 96COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040C55C

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 039900a8d840d8f65cf18cf377fd5bff5d9e595a8fad608146d0eb9be483e555
Instruction ID: 41554ca9dc53ee1e5d6d797d633c48513fe02739bc2a4d97afccdd4c6a3ff44e
Opcode Fuzzy Hash: 039900a8d840d8f65cf18cf377fd5bff5d9e595a8fad608146d0eb9be483e555
Instruction Fuzzy Hash: 89416C71A00645DFCB24CF68C48486ABBF1FF48314B244AAED096AB791C731ED46CF91

Function 0040CF82 Relevance: 1.6, APIs: 1, Instructions: 89COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040CF87

Part of subcall function 0040F6E0: __EH_prolog.LIBCMT ref: 0040F6E5

Part of subcall function 0040D0A6: __EH_prolog.LIBCMT ref: 0040D0AB

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 247e6e783af1532b670e604df5ee4666ee67329ca8b2db34e45a1f618534d241
Instruction ID: 59bb91874275df73172cd70bf395014d1b371f9bee4586dc4e729df687399cc5
Opcode Fuzzy Hash: 247e6e783af1532b670e604df5ee4666ee67329ca8b2db34e45a1f618534d241
Instruction Fuzzy Hash: 87319630D01248DFCB11DFA9C548BEDBBB5AF15308F14406EE8457B381C7789A49DB66

Function 004061BF Relevance: 1.6, APIs: 1, Instructions: 83COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 004061C4

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 0a32dfb97eb38f68acb4646e97dd4d13ceed46f781b2d933bb6fe13a2a73ca49
Instruction ID: a24cbab5944e5cd80d4d0b45cab95027a2511e7323fd1c0fe5e5f9bfcab47c11
Opcode Fuzzy Hash: 0a32dfb97eb38f68acb4646e97dd4d13ceed46f781b2d933bb6fe13a2a73ca49
Instruction Fuzzy Hash: 97218F71A05246DBCB24FFA5C44046FB7A1AB4130472285BFE053772C1C738AE61CB6A

Function 00413C73 Relevance: 1.6, APIs: 1, Instructions: 80memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,-0000000F,00000000,?,00000000,00000000,00000000), ref: 00413D5A

Part of subcall function 004154DA: InitializeCriticalSection.KERNEL32(00000000,00000000,?,?,00416D82,00000009,00000000,00000000,00000001,00415318,00000001,00000074,?,?,00000000,00000001), ref: 00415517
Part of subcall function 004154DA: EnterCriticalSection.KERNEL32(?,?,?,00416D82,00000009,00000000,00000000,00000001,00415318,00000001,00000074,?,?,00000000,00000001), ref: 00415532

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CriticalSection$AllocateEnterHeapInitialize
String ID:
API String ID: 1616793339-0
Opcode ID: cdeed90e400f99c9328ec8b59033d7a90e074e0a5ab5361bfbc3574a04fde8a1
Instruction ID: 026ee179866774db734838c78619ddc809868a86b22b68076f663e2312d1f49b
Opcode Fuzzy Hash: cdeed90e400f99c9328ec8b59033d7a90e074e0a5ab5361bfbc3574a04fde8a1
Instruction Fuzzy Hash: D4219772A00605EBDB10DF69EC42BDA7764FB00765F20411BF421EB6D0D77CAAC28A9C

Function 00413D6F Relevance: 1.6, APIs: 1, Instructions: 75memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlFreeHeap.NTDLL(00000000,00000000,00000000,?,00000000,?,00416D82,00000009,00000000,00000000,00000001,00415318,00000001,00000074), ref: 00413E43

Part of subcall function 004154DA: InitializeCriticalSection.KERNEL32(00000000,00000000,?,?,00416D82,00000009,00000000,00000000,00000001,00415318,00000001,00000074,?,?,00000000,00000001), ref: 00415517
Part of subcall function 004154DA: EnterCriticalSection.KERNEL32(?,?,?,00416D82,00000009,00000000,00000000,00000001,00415318,00000001,00000074,?,?,00000000,00000001), ref: 00415532

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CriticalSection$EnterFreeHeapInitialize
String ID:
API String ID: 641406236-0
Opcode ID: 841176424f551508ca039d1f5d574a0052902f767b8dc575c65ddda1a9f22b4e
Instruction ID: 5a14261a50f2f4ae8fe925cd7ff68077a924e970bbdc1eb83d0c2eed9fb11c58
Opcode Fuzzy Hash: 841176424f551508ca039d1f5d574a0052902f767b8dc575c65ddda1a9f22b4e
Instruction Fuzzy Hash: 2421C272901705FADB10AF96DC02BDE7BB8EB04725F24012BF414B21C0D77C9AC08AA9

Function 004052CF Relevance: 1.6, APIs: 1, Instructions: 58COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 004052D4

Part of subcall function 004050EE: __EH_prolog.LIBCMT ref: 004050F3
Part of subcall function 004050EE: GetTempPathA.KERNEL32(00000105,?,00000000,?,00000000), ref: 00405127

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog$PathTemp
String ID:
API String ID: 3652545363-0
Opcode ID: 1ef5fa40e20091595c8a07c7add8e04f0ea87ba7b14c6b9ab7bd2a47fc7370d7
Instruction ID: 884fa5787797a708672a5e156f09df22a5f972d3b51e26f7068c24b8b673b68a
Opcode Fuzzy Hash: 1ef5fa40e20091595c8a07c7add8e04f0ea87ba7b14c6b9ab7bd2a47fc7370d7
Instruction Fuzzy Hash: 5211A3759401059ACF00EFA5C552AEFBBB8EF95348F14402FE841732D1C7B90A49DE54

Function 00409DFC Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00409E01

Part of subcall function 004099F1: __EH_prolog.LIBCMT ref: 004099F6

Part of subcall function 00409A39: __EH_prolog.LIBCMT ref: 00409A3E

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: e2be988a2ed4eac1d18d94ffb3dcbee280352d40f72ce7d9b7b55f505c73744e
Instruction ID: 728224cdcdeea9a50de84ff331f734dd83e0a6071a74e90d77f9a4778d081c57
Opcode Fuzzy Hash: e2be988a2ed4eac1d18d94ffb3dcbee280352d40f72ce7d9b7b55f505c73744e
Instruction Fuzzy Hash: 931182B0A01254DADB09EBAAC1153DDFBF59FA1318F54415F9552732C2CBF82B0487A6

Function 00409070 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00409075

Part of subcall function 00402635: __EH_prolog.LIBCMT ref: 0040263A

Part of subcall function 00405620: __EH_prolog.LIBCMT ref: 00405625

Part of subcall function 00413B0D: RaiseException.KERNEL32(00000003,00000000,00000003,?,00000003,?,00000003,00000000,00000000,00401055,00000003,?,00000000), ref: 00413B3B

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog$ExceptionRaise
String ID:
API String ID: 2062786585-0
Opcode ID: 17dae63e629c91cb1e915b62325b494edd8ae92648c1e9e6482c4593510b450f
Instruction ID: c87fc69b1ce411278b5c4cd36917e57d7785db396d8ca4da128de4c157d2198f
Opcode Fuzzy Hash: 17dae63e629c91cb1e915b62325b494edd8ae92648c1e9e6482c4593510b450f
Instruction Fuzzy Hash: 1601D2B5A402049ECB10EF26C451ADEBBB1FF84314F10852FE896A32E1CB796649CB54

Function 004027A7 Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 004027AC

Part of subcall function 004049F4: CreateDirectoryA.KERNEL32(?,00000000,00000000,00000000,?,00000000,?,?,00405334,?,00000000,?,00000003), ref: 00404A13

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CreateDirectoryH_prolog
String ID:
API String ID: 3554458247-0
Opcode ID: 1d6ed87279fcce4dfaa36ce39d8da3d177537eb6a1ece7d61f11b0fb4062048b
Instruction ID: aa96bd448e9fa33173a2259148c0e22656dcd3e9b7c7d25cba760d9f6e75f00f
Opcode Fuzzy Hash: 1d6ed87279fcce4dfaa36ce39d8da3d177537eb6a1ece7d61f11b0fb4062048b
Instruction Fuzzy Hash: 55F03C729005069BCB05EB5AC8429EEBBB5EF94308F10403FE152775E2DA786986DB94

Function 00406297 Relevance: 1.5, APIs: 1, Instructions: 29COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040629C

Part of subcall function 004061BF: __EH_prolog.LIBCMT ref: 004061C4

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 6c2e6a82ad44a3596cf000a5615c5b739901b0aaac1cec813de11ba17f646bcd
Instruction ID: d002f29cd99a7d9c36b9a014c837f136803fcb54798139eb5382dd41199f51d8
Opcode Fuzzy Hash: 6c2e6a82ad44a3596cf000a5615c5b739901b0aaac1cec813de11ba17f646bcd
Instruction Fuzzy Hash: 2BF03A72A00218EFDB15DF94CC01BEEB779FB48315F10816AB422E72D0C7798A10CB14

Function 0040C96C Relevance: 1.5, APIs: 1, Instructions: 29COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040C971

Part of subcall function 0040C9E3: __EH_prolog.LIBCMT ref: 0040C9E8

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 97d13476a1578dbbb8b7321e23e8bd518515a52fd3c7649a69e8943f484a5e8b
Instruction ID: 180fbe891bab88941c19a906eef3a01802dada044b7360aafa1ebd8752043cfb
Opcode Fuzzy Hash: 97d13476a1578dbbb8b7321e23e8bd518515a52fd3c7649a69e8943f484a5e8b
Instruction Fuzzy Hash: 66F0FCB0911640DEC719EB74D1153DDFBB4AF55308F50419E9956736C2CFB81708C765

Function 0040F7B7 Relevance: 1.5, APIs: 1, Instructions: 25COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040F7BC

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 878411d95e43fbc0e8f99baadd22453587100e877feed7db7451d64bbab71619
Instruction ID: ac64c31c834abe54e412618b162bf05c7167bd146dfe5a37d1803cc4d2d3be92
Opcode Fuzzy Hash: 878411d95e43fbc0e8f99baadd22453587100e877feed7db7451d64bbab71619
Instruction Fuzzy Hash: 94E012B1A00155ABCB58EF69D80669DBAA5AB09318F10863FB026F36C1DB784A418B59

Function 00405BFB Relevance: 1.5, APIs: 1, Instructions: 24memoryCOMMON

Download Yara Rule

APIs

SysAllocString.OLEAUT32(?), ref: 00405C13

Part of subcall function 00413B0D: RaiseException.KERNEL32(00000003,00000000,00000003,?,00000003,?,00000003,00000000,00000000,00401055,00000003,?,00000000), ref: 00413B3B

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: AllocExceptionRaiseString
String ID:
API String ID: 1415472724-0
Opcode ID: 585828f0663470c28d012fa7c31560623ec32af21cf032640c5ea50ac41654d0
Instruction ID: bf266c775eafc0cd132ea201270a7534faa964ceb55315cc87c56e89072e7831
Opcode Fuzzy Hash: 585828f0663470c28d012fa7c31560623ec32af21cf032640c5ea50ac41654d0
Instruction Fuzzy Hash: B7E06D32200708A7CB20AF65D84198B7BE8FF00385B10C43FF949DA240E779E9808BD8

Function 00405800 Relevance: 1.5, APIs: 1, Instructions: 23COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00405805

Part of subcall function 00405620: __EH_prolog.LIBCMT ref: 00405625

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: d031f65d966fd76414b5e485b8cf5b0e5999cd66b44c505832369a9b765ef076
Instruction ID: a0f610f1b5e032532ed1cec3649959bf66a41b4e8af70f58d5593db508bcf515
Opcode Fuzzy Hash: d031f65d966fd76414b5e485b8cf5b0e5999cd66b44c505832369a9b765ef076
Instruction Fuzzy Hash: 46E04FB3D410049ACB05EB65E9527EDB378EF61319F50407FE412735D18B381F09CA58

Function 00405B29 Relevance: 1.5, APIs: 1, Instructions: 22fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNELBASE(?,?,?,?,00000000), ref: 00405B4C

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: f685ec6030a7cae57bc9182c2f64f11e19c4f82e6ad9756b6e5eb0af141a467c
Instruction ID: fda623b9c22c7fd134ddab0a411968f0e63156441233f4ee367e8c40c556ab77
Opcode Fuzzy Hash: f685ec6030a7cae57bc9182c2f64f11e19c4f82e6ad9756b6e5eb0af141a467c
Instruction Fuzzy Hash: 17E0E575640208FBCB11CFA5C801B8E7BF9EB08354F20C169F914AA260D739EA11DF54

Function 0040C931 Relevance: 1.5, APIs: 1, Instructions: 21COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040C936

Part of subcall function 0040C96C: __EH_prolog.LIBCMT ref: 0040C971

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 2f93a48584fc243b76bceec8380402125645ced17a7c1bf7a60211c0ce45116c
Instruction ID: 8adf79bcf0a25fb823e60414124b99f072840e3085735b9c49c9779a3d641231
Opcode Fuzzy Hash: 2f93a48584fc243b76bceec8380402125645ced17a7c1bf7a60211c0ce45116c
Instruction Fuzzy Hash: 6EE01A71811620EBC724EF58C4456DEB7B4EF08725F00875EA4E6B36D1C7B8AE40CB94

Function 004147B4 Relevance: 1.5, APIs: 1, Instructions: 20threadCOMMON

Download Yara Rule

APIs

ExitThread.KERNEL32 ref: 004147E9

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: ExitThread
String ID:
API String ID: 2158977761-0
Opcode ID: 6c939c18724e7789034020813005a1b29b75e21fb5f5d6c1b381c2503cc8d902
Instruction ID: 835638d51d7e690d80ddf8f11569568d1c7a5f433119f1d0283a2071334468ba
Opcode Fuzzy Hash: 6c939c18724e7789034020813005a1b29b75e21fb5f5d6c1b381c2503cc8d902
Instruction Fuzzy Hash: CDE08C32900925AADB223BA1DC06AEE3620AF81394F00002BF8146A5A0DBA88CD186D9

Function 0040F6E0 Relevance: 1.5, APIs: 1, Instructions: 18COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040F6E5

Part of subcall function 0040F449: __EH_prolog.LIBCMT ref: 0040F44E

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 0c00a6b9b995e6d122d0d1e5645fdc19a4d57d2469026a55dc4bfd6035115874
Instruction ID: 32d4a89d334c2aba7f1f5d27adfa0c04a02a885b7174eb98eed18e47b0b867f7
Opcode Fuzzy Hash: 0c00a6b9b995e6d122d0d1e5645fdc19a4d57d2469026a55dc4bfd6035115874
Instruction Fuzzy Hash: 1DD012B2515104FBD7109F45D842BDEBBB8EB51369F10813BF00171540D37D5644966A

Function 00405A1D Relevance: 1.5, APIs: 1, Instructions: 18fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(000000FF,00000000,?,?,00000000,000000FF,?,00405A68,00000000,?,00000000,?,00405A8E,00000000,?,00000000), ref: 00405A33

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 7899785fd51540d5028ce756fcdedcbfaef9db2fe3ec3db1f53401f618f66a8a
Instruction ID: 33e006b7c7266c94de2827aaddd493f3c8d551b448fa911b85e4ce9a1db514e9
Opcode Fuzzy Hash: 7899785fd51540d5028ce756fcdedcbfaef9db2fe3ec3db1f53401f618f66a8a
Instruction Fuzzy Hash: A4E0EC75200208FBCB01CF91CC05FCE7BB9FB49754F208058E90596160C375AA14EB54

Function 004147BF Relevance: 1.5, APIs: 1, Instructions: 17threadCOMMON

Download Yara Rule

APIs

ExitThread.KERNEL32 ref: 004147E9

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: ExitThread
String ID:
API String ID: 2158977761-0
Opcode ID: 24773d02a99502e401f88b35345ffc50176b794b148236fecf9e645f2ac90187
Instruction ID: b4e95b568d212fcbc8e7df7edbfd3446e029e3f46d4ca6baaecf21535c38ed65
Opcode Fuzzy Hash: 24773d02a99502e401f88b35345ffc50176b794b148236fecf9e645f2ac90187
Instruction Fuzzy Hash: 2AD0A732600E25AAD6223771DC467EF2244AF81795B04012BF818895A0DFA8CDC145DD

Function 00405414 Relevance: 1.5, APIs: 1, Instructions: 16COMMON

Download Yara Rule

APIs

FindClose.KERNELBASE(?,000000FF,00405445,000000FF), ref: 0040541F

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CloseFind
String ID:
API String ID: 1863332320-0
Opcode ID: f0ce2bef5821c107b9489e8e4dd061de71a9af92eaf728c2451e2811c290832d
Instruction ID: ad963fc5273d8b9d86916b47fb17bcd605870b12c06d71a74b716dd917e87850
Opcode Fuzzy Hash: f0ce2bef5821c107b9489e8e4dd061de71a9af92eaf728c2451e2811c290832d
Instruction Fuzzy Hash: D4D0123151453157CA641E7C7848AD333D99A1637537157AAF4B4D32E0D3749CC34A98

Function 00405AFC Relevance: 1.5, APIs: 1, Instructions: 9timeCOMMON

Download Yara Rule

APIs

SetFileTime.KERNELBASE(?,?,?,?,00405B26,00000000,00000000,?,00402E13,?), ref: 00405B0A

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: FileTime
String ID:
API String ID: 1425588814-0
Opcode ID: 2b6a10e293fa4a8bd52839064a41e39e160aca85d3804aec240939be71bd967c
Instruction ID: 4beff7ba357006865f39a04876becaa9faf69e640e246345c6c1d8862761ec95
Opcode Fuzzy Hash: 2b6a10e293fa4a8bd52839064a41e39e160aca85d3804aec240939be71bd967c
Instruction Fuzzy Hash: 29C04C36159106FF8F120F70CC04D1ABFA2EF99311F10C958B165C5070C7328024EB52

Function 00406F81 Relevance: 1.3, APIs: 1, Instructions: 31COMMON

Download Yara Rule

APIs

LeaveCriticalSection.KERNEL32(?,?,?,?), ref: 00406FB2

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CriticalLeaveSection
String ID:
API String ID: 3988221542-0
Opcode ID: f2ff9836336f67d9ff12deaf62cc92e2eac5b33916cf9d308384194b51d8e0a8
Instruction ID: f67714d9ecc1d8948c13ee62ab2841b601ff43f092b08abc37504173b9cf6405
Opcode Fuzzy Hash: f2ff9836336f67d9ff12deaf62cc92e2eac5b33916cf9d308384194b51d8e0a8
Instruction Fuzzy Hash: B7F0BE32A001459FCF119FA0D80898ABF65EF55314B0184ABF9169B251C338C820DF60

Function 00412FF0 Relevance: 1.3, APIs: 1, Instructions: 23COMMON

Download Yara Rule

APIs

Part of subcall function 0041468E: CreateThread.KERNELBASE(00000000,00000003,004146F9,00000000,00000000,?), ref: 004146CF
Part of subcall function 0041468E: GetLastError.KERNEL32(?,?,?,00413009,00000000,00000000,004032CA,?,00000000,00000000,?,00402FAB,?,00000000,?), ref: 004146D9

GetLastError.KERNEL32(?,?,00000003,00000000,00000000), ref: 00413018

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: ErrorLast$CreateThread
String ID:
API String ID: 665435222-0
Opcode ID: fdfffcc17890bcc66e85f81167f5a4f4e376ab203a2f001e3d39f9f51099ce04
Instruction ID: 8241f09584fde1b7b47d6c8a5a56a0c389c2bf5d01a37efb599b640c9bda9e89
Opcode Fuzzy Hash: fdfffcc17890bcc66e85f81167f5a4f4e376ab203a2f001e3d39f9f51099ce04
Instruction Fuzzy Hash: 4EE086B22042126AE310DF509C05FE76ADCDB94B05F00443EB944C6184EB64CA40C3A9

Function 00405905 Relevance: 1.3, APIs: 1, Instructions: 16COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(00000000,000000FF,004058A0,?,?,00000000), ref: 00405910

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 9cbe10086181c6cf337a739c26a2519d1510d6718cc7d35307e3d92904545fb4
Instruction ID: c924a9121967eb2c43d42ee71539138ee39fbcc7c8c6d5ba34c486a20a6e0004
Opcode Fuzzy Hash: 9cbe10086181c6cf337a739c26a2519d1510d6718cc7d35307e3d92904545fb4
Instruction Fuzzy Hash: 93D0127151456197CE742E7C78445C337D8DA463303311B6BF4B0D32E0D3748D835A98

Function 00410F40 Relevance: 1.3, APIs: 1, Instructions: 10memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,00020000,00001000,00000004,004103C8), ref: 00410F51

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 91e70fcb83806e64083a323eb2e3944731c0f93bc5a264736d7e7e867113384b
Instruction ID: 07720a170ef6d50c918e2da5ca2fe5f7ddfb2e687cae5d42b3df39ad5892c3a5
Opcode Fuzzy Hash: 91e70fcb83806e64083a323eb2e3944731c0f93bc5a264736d7e7e867113384b
Instruction Fuzzy Hash: DDB012B039138075FF7843208C1FFE71200A340B87F0080A8BB05D81C4E7D064C0501C

Function 00410F60 Relevance: 1.3, APIs: 1, Instructions: 7COMMON

Download Yara Rule

APIs

VirtualFree.KERNELBASE(?,00000000,00008000,0040664A,?,00406624), ref: 00410F6C

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: FreeVirtual
String ID:
API String ID: 1263568516-0
Opcode ID: 1327e01bd96d07ee7a5a75ed87afd8ac78764046635013dfe708143c48cadece
Instruction ID: a132bef15ba7b425f1065e5a097c2bb543b957559febc4b94616fea76008790a
Opcode Fuzzy Hash: 1327e01bd96d07ee7a5a75ed87afd8ac78764046635013dfe708143c48cadece
Instruction Fuzzy Hash: 3BB0123424120031ED7807200C1AB5711005701701F10C1183102642C087D4B440450C

Non-executed Functions

Function 004180F0 Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 50libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll,?,00000000,00000000,0041772A,?,Microsoft Visual C++ Runtime Library,00012010,?,0041BD34,?,0041BD84,?,?,?,Runtime Error!Program: ), ref: 00418102
GetProcAddress.KERNEL32(00000000,MessageBoxA), ref: 0041811A
GetProcAddress.KERNEL32(00000000,GetActiveWindow), ref: 0041812B
GetProcAddress.KERNEL32(00000000,GetLastActivePopup), ref: 00418138

Strings

MessageBoxA, xrefs: 00418114
GetActiveWindow, xrefs: 00418125
user32.dll, xrefs: 004180FD
GetLastActivePopup, xrefs: 0041812D

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: GetActiveWindow$GetLastActivePopup$MessageBoxA$user32.dll
API String ID: 2238633743-4044615076
Opcode ID: 595171f737e70550edc5abd38f068ead7bf618b78638dd3ba3c6e0fb0d2712e4
Instruction ID: 415fa372477fd235fe75ca2ef0ffa9dc0df8c28a9075a0eab2fce08d3bc4b09a
Opcode Fuzzy Hash: 595171f737e70550edc5abd38f068ead7bf618b78638dd3ba3c6e0fb0d2712e4
Instruction Fuzzy Hash: F5012572700241BF87219FB5AD849DBBAE9EB49751354443FB504C2220DB7CC9C39B69

Function 0040E38E Relevance: 1.7, APIs: 1, Instructions: 246COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040E393

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: ef3f0dd97c369c2370b5d413364e2112772f158c67037ae1847bc74799d93c78
Instruction ID: 6f1b27b05ce828494dcdc0ca2a3df983f9883c238a6bb878f092976797e95433
Opcode Fuzzy Hash: ef3f0dd97c369c2370b5d413364e2112772f158c67037ae1847bc74799d93c78
Instruction Fuzzy Hash: 68A1EB70E002099BCB18DF96C8919AEB7B2FF94318F14883FE915A7391D738AD52CB55

Function 0041561A Relevance: 1.5, APIs: 1, Instructions: 4COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_000155D4), ref: 0041561F

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: c73d5215fbd9f9fa44ce3c8db65af6300706d886bcb472667e49ab47f89b2735
Instruction ID: 5929198a1c1d143ebb6d47ac1dc9c369120d6613942f0ebcbf50c4dd8c3cbf29
Opcode Fuzzy Hash: c73d5215fbd9f9fa44ce3c8db65af6300706d886bcb472667e49ab47f89b2735
Instruction Fuzzy Hash: 57A001B5A41605DA8A209F60A8095C5BE62A689B42B608166A811E5268DFB812419A69

Function 0041562C Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32 ref: 00415631

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: 80fdf592cfe35f6ca0a49e156fc06359dfcc477da488757324292bdf2a3d88f1
Instruction ID: 3aa75b883a8314cf8793ebdd48d7cbf343a2d53b1036c531b3b3a2656884bc9f
Opcode Fuzzy Hash: 80fdf592cfe35f6ca0a49e156fc06359dfcc477da488757324292bdf2a3d88f1
Instruction Fuzzy Hash:

Function 00412480 Relevance: .5, Instructions: 481COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27156ca4970ad7a14cafdd4d0f561c0251ce2efe8b7cb58f4bb8e0a1a151ff8a
Instruction ID: f7c307c9948f0502eef9bcc932476d7ce99f20ff48e31f419bd1d6f291c9dace
Opcode Fuzzy Hash: 27156ca4970ad7a14cafdd4d0f561c0251ce2efe8b7cb58f4bb8e0a1a151ff8a
Instruction Fuzzy Hash: BD023A72A042114BC71DCE18C6902B9BBE2FBD5350F110A3FE496D7A84D7B8D8E5CB99

Function 00416076 Relevance: .3, Instructions: 259COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc60ecf50bd115ca0c6ea2745a91e2bccda0b72c85d336beea95e2ba67d1c3a9
Instruction ID: 6f6e9ae2f3605818a2c8e7767e34e4a9399a597c595f09bc79f2493b2d2310b3
Opcode Fuzzy Hash: fc60ecf50bd115ca0c6ea2745a91e2bccda0b72c85d336beea95e2ba67d1c3a9
Instruction Fuzzy Hash: 3EB17C7590120ADFDB15CF04C5D0AE9BBA1FF58318F25C1AEC85A4B382C735EA86CB94

Function 004039C8 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b1b8b3e4e9aa519cc0883e8f2e9399227ae21cf5f78173f93e12a8e0ced7762
Instruction ID: 7f21fa5966f3e8744179bfb474c2758024c7c669c00a9d4920a80f5d7b425c19
Opcode Fuzzy Hash: 8b1b8b3e4e9aa519cc0883e8f2e9399227ae21cf5f78173f93e12a8e0ced7762
Instruction Fuzzy Hash: D621427E370D0607A71C8B6AAD336B921D1E38430A7C8A03DE64BC53C1EE6DD595C60D

Function 00418CC1 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a91e830b051fd3563903b3b4c558af91fd9d6843125d3e1887e1db665648e344
Instruction ID: 99a347de7b16eca0cbeab8721e5afb4e5ad46217b84f2e64c48f172e38bf97ef
Opcode Fuzzy Hash: a91e830b051fd3563903b3b4c558af91fd9d6843125d3e1887e1db665648e344
Instruction Fuzzy Hash: 2B21C83290062547C702DE6DF4845A7F391FBD4369F134727ED8467291C629A854D6E0

Function 00418D9B Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d88b4545622fc2f48369f3988b55fed1d0241348448e0d26e09a3dd7181b3030
Instruction ID: 71e75c779d64757812c6fa0593de5e91038406040dd0a6985e9d44633d38c26d
Opcode Fuzzy Hash: d88b4545622fc2f48369f3988b55fed1d0241348448e0d26e09a3dd7181b3030
Instruction Fuzzy Hash: BC2137725105258BC701DF2DF4886B7B3E1FFD4319F638A3BD8818B1C1CA29D881D694

Function 004185ED Relevance: 17.7, APIs: 9, Strings: 1, Instructions: 177COMMON

Download Yara Rule

APIs

LCMapStringW.KERNEL32(00000000,00000100,0041BE00,00000001,00000000,00000000,74DEE860,004256E4,?,?,?,0041848E,?,?,?,00000000), ref: 0041862F
LCMapStringA.KERNEL32(00000000,00000100,0041BDFC,00000001,00000000,00000000,?,?,0041848E,?,?,?,00000000,00000001), ref: 0041864B
LCMapStringA.KERNEL32(?,?,?,0041848E,?,?,74DEE860,004256E4,?,?,?,0041848E,?,?,?,00000000), ref: 00418694
MultiByteToWideChar.KERNEL32(?,VB,?,0041848E,00000000,00000000,74DEE860,004256E4,?,?,?,0041848E,?,?,?,00000000), ref: 004186CC
MultiByteToWideChar.KERNEL32(00000000,00000001,?,0041848E,?,00000000,?,?,0041848E,?), ref: 00418724
LCMapStringW.KERNEL32(?,?,00000000,00000000,00000000,00000000,?,?,0041848E,?), ref: 0041873A
LCMapStringW.KERNEL32(?,?,?,00000000,?,?,?,?,0041848E,?), ref: 0041876D
LCMapStringW.KERNEL32(?,?,?,?,?,00000000,?,?,0041848E,?), ref: 004187D5

Strings

VB, xrefs: 004186BD, 004186C8

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: String$ByteCharMultiWide
String ID: VB
API String ID: 352835431-2416070386
Opcode ID: 003663a998c404720e509784b904756e9dc21287fecc91c3ae78f0538cf30181
Instruction ID: 75fdc42d4ca3b2d5695a32d80f34dcfea13c9c9e1b2be43f5f9a41df7731755a
Opcode Fuzzy Hash: 003663a998c404720e509784b904756e9dc21287fecc91c3ae78f0538cf30181
Instruction Fuzzy Hash: A6515F31900609EFCF218F65CC45EEF7FB5FB48754F20412AF925A12A0D7398991DBA9

Function 004172DF Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 132COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32(?,00000000,?,?,?,?,0041496A), ref: 004172FA
GetEnvironmentStrings.KERNEL32(?,00000000,?,?,?,?,0041496A), ref: 0041730E
GetEnvironmentStringsW.KERNEL32(?,00000000,?,?,?,?,0041496A), ref: 0041733A
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000001,00000000,00000000,00000000,00000000,?,00000000,?,?,?,?,0041496A), ref: 00417372
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,?,?,?,?,0041496A), ref: 00417394
FreeEnvironmentStringsW.KERNEL32(00000000,?,00000000,?,?,?,?,0041496A), ref: 004173AD
GetEnvironmentStrings.KERNEL32(?,00000000,?,?,?,?,0041496A), ref: 004173C0
FreeEnvironmentStringsA.KERNEL32(00000000), ref: 004173FE

Strings

jIA, xrefs: 004173A8, 0041739A

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: EnvironmentStrings$ByteCharFreeMultiWide
String ID: jIA
API String ID: 1823725401-2590053038
Opcode ID: dcd9eacb03994a91aa73d6441958e3731b9086dbddb026e1bfa459d91ea586b1
Instruction ID: 8edd1d2af646b02ed721f394ba4169bf36ee68eca66066dd640126c456dfff16
Opcode Fuzzy Hash: dcd9eacb03994a91aa73d6441958e3731b9086dbddb026e1bfa459d91ea586b1
Instruction Fuzzy Hash: 7631D47250C219AFD7317F689C888FB7ABCE649354715053BFD66C3201E6288CC1E2AD

Function 00417606 Relevance: 14.1, APIs: 3, Strings: 5, Instructions: 100fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleFileNameA.KERNEL32(00000000,?,00000104,?), ref: 00417673
GetStdHandle.KERNEL32(000000F4,0041BD34,00000000,00000000,00000000,?), ref: 00417749
WriteFile.KERNEL32(00000000), ref: 00417750

Strings

..., xrefs: 004176C5
Runtime Error!Program: , xrefs: 004176D9
Microsoft Visual C++ Runtime Library, xrefs: 0041771F
x*B, xrefs: 00417614
<program name unknown>, xrefs: 00417683

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: File$HandleModuleNameWrite
String ID: ...$<program name unknown>$Microsoft Visual C++ Runtime Library$Runtime Error!Program: $x*B
API String ID: 3784150691-2083536112
Opcode ID: 9f3ee68eedca8c04870b7c4ba6519361572a149120d3a6d5458ca0bba870cf42
Instruction ID: d3223577c50248063a34d8f4d7298abe086d5d3d0ee639c6b3bd3f24b9ad2996
Opcode Fuzzy Hash: 9f3ee68eedca8c04870b7c4ba6519361572a149120d3a6d5458ca0bba870cf42
Instruction Fuzzy Hash: 5931D2726002186FDF20DA60DD46FDA377DEF89304F5005ABF544D6181EB78AAC48B5D

Function 0041883C Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 117COMMON

Download Yara Rule

APIs

GetStringTypeW.KERNEL32(00000001,0041BE00,00000001,?,74DEE860,004256E4,?,?,0041848E,?,?,?,00000000,00000001), ref: 0041887B
GetStringTypeA.KERNEL32(00000000,00000001,0041BDFC,00000001,?,?,0041848E,?,?,?,00000000,00000001), ref: 00418895
GetStringTypeA.KERNEL32(?,?,?,?,0041848E,74DEE860,004256E4,?,?,0041848E,?,?,?,00000000,00000001), ref: 004188C9
MultiByteToWideChar.KERNEL32(?,VB,?,?,00000000,00000000,74DEE860,004256E4,?,?,0041848E,?,?,?,00000000,00000001), ref: 00418901
MultiByteToWideChar.KERNEL32(?,00000001,?,?,?,?,?,?,?,?,0041848E,?), ref: 00418957
GetStringTypeW.KERNEL32(?,?,00000000,0041848E,?,?,?,?,?,?,0041848E,?), ref: 00418969

Strings

VB, xrefs: 004188F2, 004188FD

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: StringType$ByteCharMultiWide
String ID: VB
API String ID: 3852931651-2416070386
Opcode ID: f366ae1a1c4feb3856e7e49d67d86268e533ee02966d98845c911f14f75699a6
Instruction ID: 0deb4df31157d4fbbd2276260d368b45192e758527c12e7bc8b96f729eb23429
Opcode Fuzzy Hash: f366ae1a1c4feb3856e7e49d67d86268e533ee02966d98845c911f14f75699a6
Instruction Fuzzy Hash: 85418FB2A00209BFCF209F94DC86EEF7F79EB08754F10452AF915D2250C7389991DB99

Function 00417411 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 150COMMON

Download Yara Rule

APIs

GetStartupInfoA.KERNEL32(?), ref: 0041746F
GetFileType.KERNEL32(?,?,00000000), ref: 0041751A
GetStdHandle.KERNEL32(-000000F6,?,00000000), ref: 0041757D
GetFileType.KERNEL32(00000000,?,00000000), ref: 0041758B
SetHandleCount.KERNEL32 ref: 004175C2

Strings

$YB, xrefs: 004174A9

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: FileHandleType$CountInfoStartup
String ID: $YB
API String ID: 1710529072-867103119
Opcode ID: 0f20f78b1d243ceb825b791af9b59c2038ed572102f9f62c4ccf998fd163e942
Instruction ID: 9157860cf2e7af3a35f89051d0ae9de0bf945cd889ae2d4a6076f2c4651d7c80
Opcode Fuzzy Hash: 0f20f78b1d243ceb825b791af9b59c2038ed572102f9f62c4ccf998fd163e942
Instruction Fuzzy Hash: B75135716086019FC720CF28D8897B63BB1EB05338F64466EC566CB6E0DB38C986C75D

Function 00415680 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 115COMMON

Download Yara Rule

APIs

GetVersionExA.KERNEL32 ref: 0041569F
GetEnvironmentVariableA.KERNEL32(__MSVCRT_HEAP_SELECT,?,00001090), ref: 004156D4
GetModuleFileNameA.KERNEL32(00000000,?,00000104), ref: 00415734

Strings

__MSVCRT_HEAP_SELECT, xrefs: 004156CF
__GLOBAL_HEAP_SELECTED, xrefs: 0041570E

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: EnvironmentFileModuleNameVariableVersion
String ID: __GLOBAL_HEAP_SELECTED$__MSVCRT_HEAP_SELECT
API String ID: 1385375860-4131005785
Opcode ID: 352f7edc9f3896d13c070371f2d33d0b51665e116eb32c5a0d287e401f1eefe3
Instruction ID: 6eb182bd46f731c3af8b1d07a07b8df2d0194a1b299ff80343aa6f034c3c884c
Opcode Fuzzy Hash: 352f7edc9f3896d13c070371f2d33d0b51665e116eb32c5a0d287e401f1eefe3
Instruction Fuzzy Hash: 56312671945648EDEB3186706C87BDF3B788B46704F6400DBD199D52C2E6398ECA8B2D

Function 00403A90 Relevance: 7.6, APIs: 5, Instructions: 57COMMONLIBRARYCODE

Download Yara Rule

APIs

CharUpperW.USER32(00000000,00000000,?,00000000,00000000,?,00403B58), ref: 00403AAB
GetLastError.KERNEL32(?,00000000,00000000,?,00403B58), ref: 00403AB7
WideCharToMultiByte.KERNEL32(00000000,00000000,?,00000001,?,00000004,00000000,00000000,?,00000000,00000000,?,00403B58), ref: 00403AD2
CharUpperA.USER32(?,?,00000000,00000000,?,00403B58), ref: 00403AEB
MultiByteToWideChar.KERNEL32(00000000,00000000,?,00000000,?,00000001,?,00000000,00000000,?,00403B58), ref: 00403AFE

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: Char$ByteMultiUpperWide$ErrorLast
String ID:
API String ID: 3939315453-0
Opcode ID: 7c2300f256f82e2aee6372cd28c35fbf20af8ddddc15953858da8d33bcd8cfd2
Instruction ID: dd72d820dddc2be4d64e736f5eaa813d5c8cd4bb6d440344005d5656a272e87c
Opcode Fuzzy Hash: 7c2300f256f82e2aee6372cd28c35fbf20af8ddddc15953858da8d33bcd8cfd2
Instruction Fuzzy Hash: D60144B64002187ADB10ABE49C89DEBBE7CEB04259F014472F952E2281E2796E4487A8

Function 004152F3 Relevance: 7.5, APIs: 5, Instructions: 38threadCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(00000103,7FFFFFFF,00416CBF,0041798E,00000000,?,?,00000000,00000001), ref: 004152F5
TlsGetValue.KERNEL32(?,?,00000000,00000001), ref: 00415303
SetLastError.KERNEL32(00000000,?,?,00000000,00000001), ref: 0041534F

Part of subcall function 00416CCC: HeapAlloc.KERNEL32(00000008,?,00000000,00000000,00000001,00415318,00000001,00000074,?,?,00000000,00000001), ref: 00416DC2

TlsSetValue.KERNEL32(00000000,?,?,00000000,00000001), ref: 00415327
GetCurrentThreadId.KERNEL32 ref: 00415338

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: ErrorLastValue$AllocCurrentHeapThread
String ID:
API String ID: 2020098873-0
Opcode ID: 9020ed6c5573c52789434ca8060b3935b73b18465b1892a80f2ba475462c6b54
Instruction ID: c348f308811c55cc6791f5f2c72cac7d5a6c02788d8c3db17f30136ca92006f7
Opcode Fuzzy Hash: 9020ed6c5573c52789434ca8060b3935b73b18465b1892a80f2ba475462c6b54
Instruction Fuzzy Hash: B4F09632600615ABC6312B70AC096DB3A51EB857E1B15413AF951972A0DB78888197DD

Function 0041843D Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 44COMMON

Download Yara Rule

APIs

InterlockedIncrement.KERNEL32(004256E4), ref: 00418463
InterlockedDecrement.KERNEL32(004256E4), ref: 00418478

Strings

VB, xrefs: 0041845C

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: Interlocked$DecrementIncrement
String ID: VB
API String ID: 2172605799-2416070386
Opcode ID: 3f0e7dfc381ab69d5717ddb5ba06b4fa70db5411652d110c580bb33579a080f3
Instruction ID: b2465ecea32c92352f716010131fb348419f683e9d2febfe3e70f5b1b578e6df
Opcode Fuzzy Hash: 3f0e7dfc381ab69d5717ddb5ba06b4fa70db5411652d110c580bb33579a080f3
Instruction Fuzzy Hash: 35F0C232201612EBD720AF56ECC19CF6755EB81326F50843FF00989190DF7899C2995E

Function 0041435F Relevance: 6.5, APIs: 5, Instructions: 278COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d56ffb8a6685455f091880630799685eddd8ac587d3428563be9e88dd716d36c
Instruction ID: 1ac5c9ddcf095474d6e2a383ff06e8771fc838f6ee07df02b13506851481717d
Opcode Fuzzy Hash: d56ffb8a6685455f091880630799685eddd8ac587d3428563be9e88dd716d36c
Instruction Fuzzy Hash: C891F671D01618ABCF21AB69CC41ADE7BB9EB857A4F240127F814B6290D73D8DC18A6C

Function 0041636C Relevance: 6.4, APIs: 5, Instructions: 102memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

HeapAlloc.KERNEL32(00000000,00002020,00420838,00420838,?,?,00416838,00000000,00000010,00000000,00000009,00000009,?,00413D1F,00000010,00000000), ref: 0041638D
VirtualAlloc.KERNEL32(00000000,00400000,00002000,00000004,?,?,00416838,00000000,00000010,00000000,00000009,00000009,?,00413D1F,00000010,00000000), ref: 004163B1
VirtualAlloc.KERNEL32(00000000,00010000,00001000,00000004,?,?,00416838,00000000,00000010,00000000,00000009,00000009,?,00413D1F,00000010,00000000), ref: 004163CB
VirtualFree.KERNEL32(00000000,00000000,00008000,?,?,00416838,00000000,00000010,00000000,00000009,00000009,?,00413D1F,00000010,00000000,?), ref: 0041648C
HeapFree.KERNEL32(00000000,00000000,?,?,00416838,00000000,00000010,00000000,00000009,00000009,?,00413D1F,00000010,00000000,?,00000000), ref: 004164A3

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: AllocVirtual$FreeHeap
String ID:
API String ID: 714016831-0
Opcode ID: 61edb7c5b2a57b73fa0373c8b0061bfd64d3e4def081ef99dbe098b98f3bc666
Instruction ID: 1d273cd761051d77879f543994291e2c1f364a84a1ace75b4c6a1ba38ea4645d
Opcode Fuzzy Hash: 61edb7c5b2a57b73fa0373c8b0061bfd64d3e4def081ef99dbe098b98f3bc666
Instruction Fuzzy Hash: 1D310370640711EFD3309F24DC85BA6B7E4EB84764F12823AE56997791E778E881CB8C

Function 00409504 Relevance: 6.1, APIs: 4, Instructions: 98COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00409509

Part of subcall function 0040935A: EnterCriticalSection.KERNEL32(?,?,?,00409680), ref: 0040935F
Part of subcall function 0040935A: LeaveCriticalSection.KERNEL32(?,?,?,00409680), ref: 00409369

EnterCriticalSection.KERNEL32(?), ref: 00409536
LeaveCriticalSection.KERNEL32(?), ref: 00409552
__aulldiv.LIBCMT ref: 004095A1

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CriticalSection$EnterLeave$H_prolog__aulldiv
String ID:
API String ID: 3848147900-0
Opcode ID: a31f7f313dfc0da48c948196a335c5e8fea939b4dae7cffcd2385e59b1d35c73
Instruction ID: 81a485ad15cb22f282f6c018201ee4179c2b1d1cd2674c5f201a60282c37c453
Opcode Fuzzy Hash: a31f7f313dfc0da48c948196a335c5e8fea939b4dae7cffcd2385e59b1d35c73
Instruction Fuzzy Hash: C6315076A00215AFCB11EF65C8819EFBBB5FF88704F00442AE51673692D779AD41CB64

Function 004047A8 Relevance: 6.1, APIs: 4, Instructions: 55windowCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 004047AD
FormatMessageA.KERNEL32(00001300,00000000,?,00000000,?,00000000,00000000,?,00000000), ref: 004047D1
FormatMessageW.KERNEL32(00001300,00000000,?,00000000,?,00000000,00000000,?,00000000), ref: 00404814
LocalFree.KERNEL32(?,?,?,00000000,?,00000000,00000000,?,00000000), ref: 0040482F

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: FormatMessage$FreeH_prologLocal
String ID:
API String ID: 3392428314-0
Opcode ID: d8114c00c851820dfd69355ab4a5a7d10c3f97c7ff5c1a94d174072509a20bce
Instruction ID: b23ee79e455563f0a2b187c1bc8aea4849c6785c5b1f5abfa42b55bee9ed31b8
Opcode Fuzzy Hash: d8114c00c851820dfd69355ab4a5a7d10c3f97c7ff5c1a94d174072509a20bce
Instruction Fuzzy Hash: 451170B5A00159AFDF01BFA59C419FFBB7DEF44349F00847AE112721E2DB391A01DA68

Function 00409374 Relevance: 6.0, APIs: 4, Instructions: 37windowtimeCOMMON

Download Yara Rule

APIs

Part of subcall function 00413030: SetEvent.KERNEL32(00000000,0040756D), ref: 00413033

GetDlgItem.USER32(?,000003E8), ref: 00409397
LoadIconA.USER32(00000000), ref: 004093B1
SendMessageA.USER32(?,00000080,00000001,00000000), ref: 004093C2
SetTimer.USER32(?,00000003,00000064,00000000), ref: 004093D1

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: EventIconItemLoadMessageSendTimer
String ID:
API String ID: 2758541657-0
Opcode ID: 426d8240eb7a06a459b3f470407d996c0274358d2b71b1374ad8138c79f04d47
Instruction ID: 34d2fc59b34559bed7d893ef409eb69d6d7528a9cba69d030baf66432b50efa3
Opcode Fuzzy Hash: 426d8240eb7a06a459b3f470407d996c0274358d2b71b1374ad8138c79f04d47
Instruction Fuzzy Hash: 4D015A30100B00AFD3319F21DD5AB66BBA1FB04721F008A2DF5A7959F0CB75B942CB48

Function 0040D5A3 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 185COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040D5A8

Strings

, xrefs: 0040D787
, xrefs: 0040D75F

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID: $
API String ID: 3519838083-227171996
Opcode ID: 74feb26567ea79c8fd9d5f3f589634721b0a9a4a518abdc39c0b6b7ccedab932
Instruction ID: 116f94ee193b6a60a58d4aec76a07daa8eefdeb27c95ac76265691768f75313a
Opcode Fuzzy Hash: 74feb26567ea79c8fd9d5f3f589634721b0a9a4a518abdc39c0b6b7ccedab932
Instruction Fuzzy Hash: CB712431D0020A9FCB24DF99D981AAEB7B1FF48314F20467ED416B7691D734AA8ACF54

Function 00417E5D Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 124COMMON

Download Yara Rule

APIs

GetCPInfo.KERNEL32(?,00000000), ref: 00417E71

Strings

, xrefs: 00417EBA
, xrefs: 00417E96

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: Info
String ID: $
API String ID: 1807457897-3032137957
Opcode ID: be8999de8ad5c30073bbd0379d60ad0f54c653f5d04d814f41e486670cb2e0db
Instruction ID: 669041dcfce0968cbe3c51124f50cac4b21f3f9a56807733dc4743f672ff05a2
Opcode Fuzzy Hash: be8999de8ad5c30073bbd0379d60ad0f54c653f5d04d814f41e486670cb2e0db
Instruction Fuzzy Hash: 65417C312482585AEB219714CC49FFB7FF9DB02714F5404E6D149C7153C2794AC6C7BA

Function 00417092 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 62COMMON

Download Yara Rule

APIs

GetModuleFileNameA.KERNEL32(00000000,C:\Users\user\Desktop\Setup.exe,00000104,?,00000000,?,?,?,?,00414974), ref: 004170B5

Strings

@%D, xrefs: 004170BB
C:\Users\user\Desktop\Setup.exe, xrefs: 004170A9, 004170B3, 004170D8, 0041710E

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: FileModuleName
String ID: @%D$C:\Users\user\Desktop\Setup.exe
API String ID: 514040917-2768721029
Opcode ID: 84d053b036df48e784d9c40d8f72a4f01e20f52c816047791c4f4213c32035a1
Instruction ID: bf09e70cde018ed4875ba2e87c80884ade2fb8340569e7ccc03294431e74d33e
Opcode Fuzzy Hash: 84d053b036df48e784d9c40d8f72a4f01e20f52c816047791c4f4213c32035a1
Instruction Fuzzy Hash: 591151B6A00219BFC721EF94DCC1CDBBBBCEB08758B5100ABF50597201EA745F4587A8

Function 00415ECA Relevance: 5.1, APIs: 4, Instructions: 53memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

HeapReAlloc.KERNEL32(00000000,00000050,00000000,00000000,00415C92,00000000,00000000,00000000,00413CC1,00000000,00000000,?,00000000,00000000,00000000), ref: 00415EF2
HeapAlloc.KERNEL32(00000008,000041C4,00000000,00000000,00415C92,00000000,00000000,00000000,00413CC1,00000000,00000000,?,00000000,00000000,00000000), ref: 00415F26
VirtualAlloc.KERNEL32(00000000,00100000,00002000,00000004), ref: 00415F40
HeapFree.KERNEL32(00000000,?), ref: 00415F57

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: AllocHeap$FreeVirtual
String ID:
API String ID: 3499195154-0
Opcode ID: 712f9e2f9eec85a92a3a672498402ffd9fd7e765c5a6c8233a1a124cbc29739c
Instruction ID: 8f6381cf99308f7e34b2c2e49534b1224184cafd179dea44f4322364d011a6a4
Opcode Fuzzy Hash: 712f9e2f9eec85a92a3a672498402ffd9fd7e765c5a6c8233a1a124cbc29739c
Instruction Fuzzy Hash: A6114C31300A01EFC7308F59EC86DA6BBB5FB85760791462AF156D69B0D3719887CF58

Function 004154B1 Relevance: 5.0, APIs: 4, Instructions: 12COMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(?,00415292,?,00414944), ref: 004154BE
InitializeCriticalSection.KERNEL32(?,00415292,?,00414944), ref: 004154C6
InitializeCriticalSection.KERNEL32(?,00415292,?,00414944), ref: 004154CE
InitializeCriticalSection.KERNEL32(?,00415292,?,00414944), ref: 004154D6

Memory Dump Source

Source File: 00000000.00000002.4111699345.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.4111675523.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111727271.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111749012.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111769653.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111786049.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.4111807980.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CriticalInitializeSection
String ID:
API String ID: 32694325-0
Opcode ID: ec7037d00a0fc94f488d53f3a91d2e26ae03bdd42e29aafad6c46e686e3ec5a2
Instruction ID: a8e831e61b8b61633fe4a4176da74b0e9d16ee726bcd83620c475df078586321
Opcode Fuzzy Hash: ec7037d00a0fc94f488d53f3a91d2e26ae03bdd42e29aafad6c46e686e3ec5a2
Instruction Fuzzy Hash: 0AC00231A11138ABCF312B55FC048463FA6EB852A03518072A1045203186612C12EFD8

Analysis Process: WebCompanion-Installer.exePID: 4856, Parent PID: 2844COMMON

Executed Functions

Function 07389E60 Relevance: 1.5, Strings: 1, Instructions: 281COMMON

Download Yara Rule

Strings

\V]m, xrefs: 0738A117

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: \V]m
API String ID: 0-4105700344
Opcode ID: b2f1fc9e0569fe0186ae4bf6b049723a44905f2f4020e96d63f9d6e26bf93b55
Instruction ID: f59ca13b4a6df7afa9b0e428eafdac4461bd5422ba89a296eb656121716f9d09
Opcode Fuzzy Hash: b2f1fc9e0569fe0186ae4bf6b049723a44905f2f4020e96d63f9d6e26bf93b55
Instruction Fuzzy Hash: B9B13FF0E1030ADFEB54DFA9D8857ADBBF2AF88314F14C12AD419A7254EB749845CB81

Function 0196F0D0 Relevance: .8, Instructions: 752COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cfeb37227fb7a8935c867b9cf26d050f2ba7c96e627809bde53bbafc4b56dbba
Instruction ID: e56da3bf87f8b598a4522cef97fa312e2d07477305d1e893737b4629e2890bde
Opcode Fuzzy Hash: cfeb37227fb7a8935c867b9cf26d050f2ba7c96e627809bde53bbafc4b56dbba
Instruction Fuzzy Hash: 1C62EC34B002198FDB15DF64D958B6DBBB6BF88301F1084A9E94AAB395DF30AD85CF50

Function 06C805A8 Relevance: .6, Instructions: 613COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 92d8e4b525feac03e85ef1d69d93c11b4098d931631dceeb9ac1100b0201d21b
Instruction ID: e2bd1d75baaab35025662b6fdac094b5b301327f7036fe2b21b837926091d72c
Opcode Fuzzy Hash: 92d8e4b525feac03e85ef1d69d93c11b4098d931631dceeb9ac1100b0201d21b
Instruction Fuzzy Hash: 19424530B016158FDB64EF68C8987AEBBF2FF88304F14856DD40AA7391DB749985CB91

Function 01960DE0 Relevance: .6, Instructions: 607COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ffa13dd35419c982df547e6bdbb13fa7a270caa652fd269479e8d4971d80d12
Instruction ID: 1e44328c66ed4424e45f16c24cb4daaada9edcb4bf9d7fa624483f9f0097bb64
Opcode Fuzzy Hash: 2ffa13dd35419c982df547e6bdbb13fa7a270caa652fd269479e8d4971d80d12
Instruction Fuzzy Hash: 71423934A012158FDB14EF78D89866DBBBAFF88305F1485A9E40A9B358DF349D81CF51

Function 0738B1B0 Relevance: .3, Instructions: 320COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 20b9945a080387f021c6c742c834f24f1d2dcd89df14ea16b1b9bd5fc63bfed3
Instruction ID: 24f46fb6fa5ecefd49953a887692309ab5f9ece185f2317ede0c1c72f355cff3
Opcode Fuzzy Hash: 20b9945a080387f021c6c742c834f24f1d2dcd89df14ea16b1b9bd5fc63bfed3
Instruction Fuzzy Hash: 54B151F0B0020ADFE7489B79895467EB6EBABC8340F18C469D40A977A4DE35DC868761

Function 0738A730 Relevance: .3, Instructions: 266COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0135778d6d7601dc005a5c25f1d6d58666c58b196ecb208da607cb6d2020116
Instruction ID: 9ccfb02f1801e45f935204afcf36c6248d597c2d5857bfa1121a95414f4d917e
Opcode Fuzzy Hash: e0135778d6d7601dc005a5c25f1d6d58666c58b196ecb208da607cb6d2020116
Instruction Fuzzy Hash: 00B15FB0E1030ACFEB50DFA9D98579DBBF2AF48314F14C12AD419EB254EB749846CB91

Function 072D043A Relevance: 21.0, Strings: 16, Instructions: 1007COMMON

Download Yara Rule

Strings

4'^q, xrefs: 072D0D27
`q, xrefs: 072D0588
c^q, xrefs: 072D146D
4'^q, xrefs: 072D0CA5
$&_q, xrefs: 072D0984
4'^q, xrefs: 072D1577
4'^q, xrefs: 072D0DAC
$^q, xrefs: 072D15F9
`q, xrefs: 072D0654
|-_q, xrefs: 072D04BC
(_^q, xrefs: 072D0AEF
$^q, xrefs: 072D0B9A
c^q, xrefs: 072D0A1D
4c^q, xrefs: 072D14F2
@b^q, xrefs: 072D0C0C
4c^q, xrefs: 072D0951

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: `q$$&_q$(_^q$4'^q$4'^q$4'^q$4'^q$4c^q$4c^q$@b^q$|-_q$$^q$$^q$c^q$c^q$`q
API String ID: 0-3238858861
Opcode ID: 4807063668f5ae9a83222eec6b7b3215c4fc40df7222cdf59a35f4ecb21227dd
Instruction ID: a7cd2ce58c0b5db6cd76c60fa795f1c34088324ae6d7f89e8c586069e20c6d74
Opcode Fuzzy Hash: 4807063668f5ae9a83222eec6b7b3215c4fc40df7222cdf59a35f4ecb21227dd
Instruction Fuzzy Hash: 26B2D074A41218DFCB659F64C948ADDBBB2FF89300F1045E9D50AAB3A4DB369E85CF40

Function 072D0448 Relevance: 21.0, Strings: 16, Instructions: 1000COMMON

Download Yara Rule

Strings

4'^q, xrefs: 072D0D27
`q, xrefs: 072D0588
c^q, xrefs: 072D146D
4'^q, xrefs: 072D0CA5
$&_q, xrefs: 072D0984
4'^q, xrefs: 072D1577
4'^q, xrefs: 072D0DAC
$^q, xrefs: 072D15F9
`q, xrefs: 072D0654
|-_q, xrefs: 072D04BC
(_^q, xrefs: 072D0AEF
$^q, xrefs: 072D0B9A
c^q, xrefs: 072D0A1D
4c^q, xrefs: 072D14F2
@b^q, xrefs: 072D0C0C
4c^q, xrefs: 072D0951

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: `q$$&_q$(_^q$4'^q$4'^q$4'^q$4'^q$4c^q$4c^q$@b^q$|-_q$$^q$$^q$c^q$c^q$`q
API String ID: 0-3238858861
Opcode ID: 5ef9a6cf35c4289f92bbadf1f6157a4452450681bdddef08757903745a366629
Instruction ID: 797c021176e687d8cba6f462cc80b8c4a59e52b02ec3a647e909d24a126e0fbc
Opcode Fuzzy Hash: 5ef9a6cf35c4289f92bbadf1f6157a4452450681bdddef08757903745a366629
Instruction Fuzzy Hash: 7CB2D074A41218DFCB659F64C948ADDBBB2FF89300F1045E9D50AAB3A4DB369E85CF40

Function 072DC558 Relevance: 7.9, Strings: 6, Instructions: 424COMMON

Download Yara Rule

Strings

;D~k^, xrefs: 072DC61E
(bq, xrefs: 072DC944
(bq, xrefs: 072DC877
(bq, xrefs: 072DC8A3
(bq, xrefs: 072DCC29
KD~k^, xrefs: 072DC5DD

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$(bq$(bq$(bq$;D~k^$KD~k^
API String ID: 0-1213737620
Opcode ID: 77f9e0b6c51f9632f8f192b7ddd44eeec3bce15db96ce2373b4750a7c0366c2e
Instruction ID: 5ae6042a687d96e1b6de9be10fdb58c0608948eb63a193fa0ede7a50e20eb593
Opcode Fuzzy Hash: 77f9e0b6c51f9632f8f192b7ddd44eeec3bce15db96ce2373b4750a7c0366c2e
Instruction Fuzzy Hash: 11023D75A101099FCB15DF68D894AAEBBF2FF88310F148569E906AB364CB31DC51CFA1

Function 072D9E20 Relevance: 7.7, Strings: 6, Instructions: 223COMMON

Download Yara Rule

Strings

4'^q, xrefs: 072D9F13
$^q, xrefs: 072D9ECF
$^q, xrefs: 072D9F04
$^q, xrefs: 072D9EDB
$^q, xrefs: 072D9FEE
$^q, xrefs: 072D9FFA

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4'^q$$^q$$^q$$^q$$^q$$^q
API String ID: 0-3616224387
Opcode ID: 044814f981298815e184dcd5f639c41fbf04f8a57f32e023d5382b98a8eeec59
Instruction ID: c8ef350d27111524c27cbbee12c8e70e8adb7a6376d59fb888de3adf513a7239
Opcode Fuzzy Hash: 044814f981298815e184dcd5f639c41fbf04f8a57f32e023d5382b98a8eeec59
Instruction Fuzzy Hash: C6717CB176410A9FCB189F68D894A6A7BBAEB89700F10845AF506CB374CA75DC82CB50

Function 072D65D0 Relevance: 5.3, Strings: 4, Instructions: 292COMMON

Download Yara Rule

Strings

(bq, xrefs: 072D6763
,bq, xrefs: 072D6725
(bq, xrefs: 072D663E
,bq, xrefs: 072D6719

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$(bq$,bq$,bq
API String ID: 0-3352830385
Opcode ID: 96e16f3fb19e7e872ecc381d316ffecb0f745f47f0a7e90d7035e7460a1c115f
Instruction ID: 67b5644f556e737a3b93684354e4a5d85c48e8e4940253d4f267a9630d00c1fb
Opcode Fuzzy Hash: 96e16f3fb19e7e872ecc381d316ffecb0f745f47f0a7e90d7035e7460a1c115f
Instruction Fuzzy Hash: 37A1CFB0B242058FC715DF69D89896EBBB2FFC5350B248569E04ACB391DB35EC06CB91

Function 0196B098 Relevance: 4.1, Strings: 3, Instructions: 330COMMON

Download Yara Rule

Strings

PH^q, xrefs: 0196B11A
Hbq, xrefs: 0196B404
PH^q, xrefs: 0196B18C

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: Hbq$PH^q$PH^q
API String ID: 0-1943764995
Opcode ID: 48572aab5ca3eda5ad9622b0f3afb92ea2f8bd6bfd0a54f3424e2ee430147e60
Instruction ID: 27da2b54654970b1fce64bcacb30ebcf78744bf0d349fd2013e3974c10d39a99
Opcode Fuzzy Hash: 48572aab5ca3eda5ad9622b0f3afb92ea2f8bd6bfd0a54f3424e2ee430147e60
Instruction Fuzzy Hash: B8C16B307002058FDB05DB78D594AAEBBFAFF89201F148569D90ADB355EF34AC42CBA5

Function 072D5DF0 Relevance: 4.0, Strings: 3, Instructions: 205COMMON

Download Yara Rule

Strings

##, xrefs: 072D5EEA
C", xrefs: 072D5E56
(Acq, xrefs: 072D5F6B

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (Acq$##$C"
API String ID: 0-1020493742
Opcode ID: b2e2c693ad90774e019c5b017efb5345d444c9b1ed8b41b3f213a74cd95b6483
Instruction ID: e0b8729e023eb0ca007a718d8a9f8e47c05d80fdef1c8cf73b522a23ac40d3b3
Opcode Fuzzy Hash: b2e2c693ad90774e019c5b017efb5345d444c9b1ed8b41b3f213a74cd95b6483
Instruction Fuzzy Hash: FE719DB0B2020A9FDB15DFA5C4506AEBBF2BF89304F248529D405AF390DFB19D46CB81

Function 072D5D60 Relevance: 4.0, Strings: 3, Instructions: 200COMMON

Download Yara Rule

Strings

##, xrefs: 072D5EEA
C", xrefs: 072D5E56
(Acq, xrefs: 072D5F6B

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (Acq$##$C"
API String ID: 0-1020493742
Opcode ID: d0894a937ed3e895dee1f7ed83ed6430691ef040aa0c427a65f2337adc41e162
Instruction ID: 1c572f1dc8b1cb19fd5f6946ce4692465f18d8356676aca50c5f6ab5f935ad9d
Opcode Fuzzy Hash: d0894a937ed3e895dee1f7ed83ed6430691ef040aa0c427a65f2337adc41e162
Instruction Fuzzy Hash: FE610431A153959FDB06EF79C4606DE7BF2AF86304F24416AD085DF292DA748C4ACB90

Function 0738BF10 Relevance: 3.9, Strings: 3, Instructions: 167COMMON

Download Yara Rule

Strings

(bq, xrefs: 0738BFC9
Hbq, xrefs: 0738C04D
Hbq, xrefs: 0738BFF5

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$Hbq$Hbq
API String ID: 0-2817990774
Opcode ID: 4f5b16ae969d2d325f40af7ef49da107d84c63196112c895efff6f7141620b69
Instruction ID: b1344be79bc97c6d1ffc17f7dd579b541a383690fb80a764b0855ed63223a3b7
Opcode Fuzzy Hash: 4f5b16ae969d2d325f40af7ef49da107d84c63196112c895efff6f7141620b69
Instruction Fuzzy Hash: B451C1B4B0121A9FD744EF68D8405AFBBB6EFC8750B108569E50A97744CB31ED42CBA1

Function 072D17F0 Relevance: 3.0, Strings: 2, Instructions: 453COMMON

Download Yara Rule

Strings

(bq, xrefs: 072D1804
d, xrefs: 072D1A45

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$d
API String ID: 0-3334038649
Opcode ID: c0a8616a0019e991af3be943cf449c7837268d09d96afd25689994b871dedd5f
Instruction ID: 4f46a257f44d6248ad54497c10c2a903ddd4d47fbaca27dfe3cff57564c7e68b
Opcode Fuzzy Hash: c0a8616a0019e991af3be943cf449c7837268d09d96afd25689994b871dedd5f
Instruction Fuzzy Hash: 06029D70A1060A8FDB14CF29C48096ABBF6FF89310B16C669D459DB766DB30FC56CB90

Function 07382570 Relevance: 2.9, Strings: 2, Instructions: 437COMMON

Download Yara Rule

Strings

(bq, xrefs: 07382888
(bq, xrefs: 073829D0

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$(bq
API String ID: 0-4224401849
Opcode ID: a3d1dd3a0c1ce2b20186dd946cd0b30840e8023c15a03645494e2e4f565ef9db
Instruction ID: 6900a8aa12c239104c84f1d753f289695329240d8820b2c84fcea6e4f7cab96a
Opcode Fuzzy Hash: a3d1dd3a0c1ce2b20186dd946cd0b30840e8023c15a03645494e2e4f565ef9db
Instruction Fuzzy Hash: 43F1CE74B002059FDB54DF69D454AAEBBB6FF88310F14846AE80ADB391CB35ED06CB90

Function 0196AFA0 Relevance: 2.7, Strings: 2, Instructions: 248COMMON

Download Yara Rule

Strings

PH^q, xrefs: 0196B11A
PH^q, xrefs: 0196B18C

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: PH^q$PH^q
API String ID: 0-1598597984
Opcode ID: aa9acd10b8a34a787dc1a46cb152debe2d818673d75153ca95e811c195013c5a
Instruction ID: b2ebad29d1852a2c7dd339319dc7750a9723a5521fa52c069ed90c1f516ce261
Opcode Fuzzy Hash: aa9acd10b8a34a787dc1a46cb152debe2d818673d75153ca95e811c195013c5a
Instruction Fuzzy Hash: 6E917035B002458FDB15DB68C994AAEBBF6FF85301F1881A5D809DB366EB34DC42CB61

Function 0196B05D Relevance: 2.7, Strings: 2, Instructions: 198COMMON

Download Yara Rule

Strings

PH^q, xrefs: 0196B11A
PH^q, xrefs: 0196B18C

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: PH^q$PH^q
API String ID: 0-1598597984
Opcode ID: c5237481598253550d94c9e84fc9df00eaa2f31daa2b5bc62d60716cc4e7ea0d
Instruction ID: 12fdd218e4d48da4509f2d4ccdb4f54b4102c12b3d0f1f6e9b4a0a41bc2d1de3
Opcode Fuzzy Hash: c5237481598253550d94c9e84fc9df00eaa2f31daa2b5bc62d60716cc4e7ea0d
Instruction Fuzzy Hash: 1E810D34B002058FDB15DB68C594AAEBBF6FF89301F158565D80AEB366EB34DC41CB61

Function 0738A49C Relevance: 2.7, Strings: 2, Instructions: 182COMMON

Download Yara Rule

Strings

\V]m, xrefs: 0738A66A
\V]m, xrefs: 0738A517

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: \V]m$\V]m
API String ID: 0-4143160670
Opcode ID: 491c0ef6a0ce9f6fa2ee4a6edff000eec34350172c003a6d253bc8b6765e1dc4
Instruction ID: 2a8624049789596bc947ebb3e3d896714e76596ba56045919f2ae2f3c280a0ec
Opcode Fuzzy Hash: 491c0ef6a0ce9f6fa2ee4a6edff000eec34350172c003a6d253bc8b6765e1dc4
Instruction Fuzzy Hash: F7713AF0E003099FEB50DFA9D84479EBBF1AF48314F14C12AE459A7254EB749886CF95

Function 0738A4A8 Relevance: 2.7, Strings: 2, Instructions: 180COMMON

Download Yara Rule

Strings

\V]m, xrefs: 0738A66A
\V]m, xrefs: 0738A517

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: \V]m$\V]m
API String ID: 0-4143160670
Opcode ID: 5595a1dddc8562a7e5eb67d69abd831b8e294b3bafddbb2c399a2b90f9cbaedf
Instruction ID: 74a38180e32c660f1fe799f953a7ac752ca06e2074277dbf91cb89948d56a9e0
Opcode Fuzzy Hash: 5595a1dddc8562a7e5eb67d69abd831b8e294b3bafddbb2c399a2b90f9cbaedf
Instruction Fuzzy Hash: D9713DF0E003099FEB54DFA9C84479EBBF1AF88314F14C12AD459A7254EB749885CF95

Function 0196B047 Relevance: 2.7, Strings: 2, Instructions: 180COMMON

Download Yara Rule

Strings

PH^q, xrefs: 0196B11A
PH^q, xrefs: 0196B18C

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: PH^q$PH^q
API String ID: 0-1598597984
Opcode ID: 5819a3b8a04af72510b8c8de7c573a02eae0bdbc81eafe8766850c1e324457f8
Instruction ID: df4af689563772010c239db87e10c54450108e3a708da74bf130f0cd654dfcc7
Opcode Fuzzy Hash: 5819a3b8a04af72510b8c8de7c573a02eae0bdbc81eafe8766850c1e324457f8
Instruction Fuzzy Hash: 4671DB34B002098FDB14DB68C594AAEBBF6FF88301F158565D90AEB365EB359C42CB61

Function 07382AD1 Relevance: 2.7, Strings: 2, Instructions: 177COMMON

Download Yara Rule

Strings

4'^q, xrefs: 07382C34
,bq, xrefs: 07382AF8

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: ,bq$4'^q
API String ID: 0-1386295989
Opcode ID: d67b0d0a7028a8e343f6c7bf4dfd4034d2fdab907fda7662e541f1cc00c37a9d
Instruction ID: b91bf2f78877dce56d846c9dd80c742ced1a1e3f7522f382d2280048cdc426d6
Opcode Fuzzy Hash: d67b0d0a7028a8e343f6c7bf4dfd4034d2fdab907fda7662e541f1cc00c37a9d
Instruction Fuzzy Hash: 7D5191B5B001059FCB55EFA9C8509AFBBF6FFC8210B11806AE909DB358DE34DD4287A1

Function 072DE092 Relevance: 2.7, Strings: 2, Instructions: 174COMMON

Download Yara Rule

Strings

4'^q, xrefs: 072DE1F0
,bq, xrefs: 072DE0B8

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: ,bq$4'^q
API String ID: 0-1386295989
Opcode ID: eb6751f47c86f0dad04e5fea498161df5d3270b329b14efa51c5cf66bfa48f7c
Instruction ID: 5fc30a2a66f24447484bcc5cfb83d373fa4f180c85bf6cdf69e90087450e1971
Opcode Fuzzy Hash: eb6751f47c86f0dad04e5fea498161df5d3270b329b14efa51c5cf66bfa48f7c
Instruction Fuzzy Hash: 345191B5B101169FCB14EBA9C854A6FBBE6EFC8210B11807AD509DB398DE31DD4187D1

Function 0196A180 Relevance: 2.7, Strings: 2, Instructions: 161COMMON

Download Yara Rule

Strings

(bq, xrefs: 0196A28D
Hbq, xrefs: 0196A1F4

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$Hbq
API String ID: 0-4081012451
Opcode ID: 85d3a4efd52056943b78afbe70143db93eb86045869562410c62f2e71f2a960e
Instruction ID: 8ae274c781b7a18c40d161470b158d8c4aa2d18747da7e6b14a9dede0a1b0d11
Opcode Fuzzy Hash: 85d3a4efd52056943b78afbe70143db93eb86045869562410c62f2e71f2a960e
Instruction Fuzzy Hash: 9E51CF31B402448FDB259F78D414AAE7BBAAFC8351F18446AE90AE7385DE359C42CB61

Function 072D3D60 Relevance: 2.7, Strings: 2, Instructions: 159COMMON

Download Yara Rule

Strings

(bq, xrefs: 072D3EEF
(bq, xrefs: 072D3D88

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$(bq
API String ID: 0-4224401849
Opcode ID: a87040d724cd12d5cd7907175ec01bfa206d8894550df122bd78fada51fc7722
Instruction ID: fc7c42023b98ce656996e524c10fe1d659a7332148d959975f588a5affdeef3e
Opcode Fuzzy Hash: a87040d724cd12d5cd7907175ec01bfa206d8894550df122bd78fada51fc7722
Instruction Fuzzy Hash: D251D3753197818FC315DB39D45466ABBE2FFCA300B1885ADD04ACB3A2DA35EC06CB91

Function 0738B760 Relevance: 2.6, Strings: 2, Instructions: 113COMMON

Download Yara Rule

Strings

(bq, xrefs: 0738B826
(bq, xrefs: 0738B7FA

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$(bq
API String ID: 0-4224401849
Opcode ID: 1831dab8c71bfdfa232188286c5527dc1e109dc5df44c5d110c3546132584793
Instruction ID: bd4bc2173380d12ca787755468d52a777c081a6db63aff1e5fabc188421cc2fc
Opcode Fuzzy Hash: 1831dab8c71bfdfa232188286c5527dc1e109dc5df44c5d110c3546132584793
Instruction Fuzzy Hash: FA3120B07043029FE345AB78D4586AFBFB6EFC5310F14842DE00A9B780CE71AC0487A1

Function 072D2122 Relevance: 2.6, Strings: 2, Instructions: 109COMMON

Download Yara Rule

Strings

4'^q, xrefs: 072D2139
(bq, xrefs: 072D2190

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$4'^q
API String ID: 0-3799531831
Opcode ID: 6c5736446a37cda8efe35c4149e3687bd2152d6ef043591c0a434bb86a15888b
Instruction ID: 6dd629e8abc689a22665451a995b010ad58fba06a779f17bb122880b8bbfa9c7
Opcode Fuzzy Hash: 6c5736446a37cda8efe35c4149e3687bd2152d6ef043591c0a434bb86a15888b
Instruction Fuzzy Hash: 633144313043428FC711AB79E858A5EBBE2FFC6220B14897DE54A8B355DF74DD068791

Function 072D4C98 Relevance: 2.5, Strings: 2, Instructions: 44COMMON

Download Yara Rule

Strings

pbq, xrefs: 072D4CDA
pbq, xrefs: 072D4CB0

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: pbq$pbq
API String ID: 0-1218391871
Opcode ID: ef29f4e9bbda0bd1d00c0ff7a40a95b611500a759f33fd29fc900e5d49ed41c1
Instruction ID: 00477c6a62acdccc03775beccc748c0c45a58b4cbe4f9f3a0f041133b95181de
Opcode Fuzzy Hash: ef29f4e9bbda0bd1d00c0ff7a40a95b611500a759f33fd29fc900e5d49ed41c1
Instruction Fuzzy Hash: E9F0AF353021057FC704AE6A9C909AABB6AFFC5264B408039FD098F3A0CA72EC01C790

Function 07384144 Relevance: 2.5, Strings: 2, Instructions: 21COMMON

Download Yara Rule

Strings

$^q, xrefs: 07384148
$^q, xrefs: 07384154

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: $^q$$^q
API String ID: 0-355816377
Opcode ID: 83094ca453ba74b8d5a9e7943d3b5ea4526338439ff0e260511d9b92774b2eb3
Instruction ID: b1ffcc45dceb7ea3d74e39059c81d8a7f298ffe53aaf4a530b5398e0a79517b5
Opcode Fuzzy Hash: 83094ca453ba74b8d5a9e7943d3b5ea4526338439ff0e260511d9b92774b2eb3
Instruction Fuzzy Hash: FEE086B2F1021A8FE7649E19A404456B7A5EB94E10730406BC1058BB15DA318C058780

Function 01964A68 Relevance: 2.0, Instructions: 1978COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ebb825752fdf4c62b24a250b36915137f96f13637fff716451c37fc6fad489d
Instruction ID: aa000534b896852866ecf8c202390524e3af33ec7790309f4d4103f95280c286
Opcode Fuzzy Hash: 5ebb825752fdf4c62b24a250b36915137f96f13637fff716451c37fc6fad489d
Instruction Fuzzy Hash: 4A230A79902205DFCF666F60CA28669B736FB4E345B2094ABD91263764CF7B8D42DF00

Function 01964A58 Relevance: 2.0, Instructions: 1975COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26c3be9ceeee7dee8628051d22c9965a41bddbcec18f1e9a059f6b1b9ef192cb
Instruction ID: 8acc69ca6a06eab0acbfdc7bd010423e401a956ef118d099556668d33b43c26f
Opcode Fuzzy Hash: 26c3be9ceeee7dee8628051d22c9965a41bddbcec18f1e9a059f6b1b9ef192cb
Instruction Fuzzy Hash: AD23FB79912205DFCF666F60C628669B736FB4E345B2094ABD91223764CF7B8D42DF00

Function 073812C8 Relevance: 1.6, Strings: 1, Instructions: 390COMMON

Download Yara Rule

Strings

(bq, xrefs: 0738171C

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: ca7e5fa0fa322753690dbcbc730533195512a615264f41443c6dea1733f3943e
Instruction ID: bb41c123663519d4fa492d2a183825c06f85b8537c097b8c5bed89d0ad67e4e5
Opcode Fuzzy Hash: ca7e5fa0fa322753690dbcbc730533195512a615264f41443c6dea1733f3943e
Instruction Fuzzy Hash: 5CF16BB4A0035A8FEB55DFA8C488B9DBBF2BF49300F148159D849AB351DB74ED86CB50

Function 072D90DE Relevance: 1.6, Strings: 1, Instructions: 355COMMON

Download Yara Rule

Strings

(bq, xrefs: 072D94A7

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 9cf8386948bbb8debd36cff0dd729250ff66664c45d1ee88b2a8d6c87bf79b96
Instruction ID: 26f242b1012bdf4634811437f25566c7be4c6ac990426ef521c3fb9a5cb9c1b2
Opcode Fuzzy Hash: 9cf8386948bbb8debd36cff0dd729250ff66664c45d1ee88b2a8d6c87bf79b96
Instruction Fuzzy Hash: F2D18BB47242528FDB149F28D49877EB7A6EB85300F10442AF587C7795DBB5ECC28B41

Function 0196178E Relevance: 1.5, Strings: 1, Instructions: 296COMMON

Download Yara Rule

Strings

fcq, xrefs: 019617B6

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: fcq
API String ID: 0-2768158334
Opcode ID: e4a541b31c6c73f799825b069e47a01c883fc67c3ab64c7ec193a4a0e11e4923
Instruction ID: 27d666f03262efa759422ccd2349296bd8963059dab3acbe579867267dd4ede0
Opcode Fuzzy Hash: e4a541b31c6c73f799825b069e47a01c883fc67c3ab64c7ec193a4a0e11e4923
Instruction Fuzzy Hash: D0B1E130B052529FDB159F38C45466EBBF6AFC5304F1884BAC4899B396DB34DC86CB92

Function 07389E54 Relevance: 1.5, Strings: 1, Instructions: 276COMMON

Download Yara Rule

Strings

\V]m, xrefs: 0738A117

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: \V]m
API String ID: 0-4105700344
Opcode ID: afed5eba50df37a57d5a5835c956ecf384ab7469f7a04bc4f899047c1b7d48b3
Instruction ID: 455e5012e950d87db68ba8e69d9f306540de28a0a37ce1111354c168f5aab556
Opcode Fuzzy Hash: afed5eba50df37a57d5a5835c956ecf384ab7469f7a04bc4f899047c1b7d48b3
Instruction Fuzzy Hash: 54B13DF0E1030ADFEB54DFA8D8857ADBBF1AF48314F14812AD419A7254EB749845CB92

Function 07386FF0 Relevance: 1.5, Strings: 1, Instructions: 265COMMON

Download Yara Rule

Strings

4c^q, xrefs: 073872E8

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4c^q
API String ID: 0-396817635
Opcode ID: 82c8b406b8a46e2768d7f2264de370ca5d1eff8d76182aafefed724b2fa35b0a
Instruction ID: db91c576e7f84c607d4a471c22304bb02671d595eccd089fe93c73672c05029d
Opcode Fuzzy Hash: 82c8b406b8a46e2768d7f2264de370ca5d1eff8d76182aafefed724b2fa35b0a
Instruction Fuzzy Hash: 72816AF07183558FF764AAE9D88077ABBE7EB42304F284467F44DC7A81D635D8818392

Function 072DD8E0 Relevance: 1.5, Strings: 1, Instructions: 239COMMON

Download Yara Rule

Strings

(bq, xrefs: 072DDAED

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 75584c07da9f08278290796bbf1f3d3496e3381270c95449a2477ed6d4bd0074
Instruction ID: b88549651342a7deafb724d06dfb58b7d36b491e982184ef73919dc9067d9b76
Opcode Fuzzy Hash: 75584c07da9f08278290796bbf1f3d3496e3381270c95449a2477ed6d4bd0074
Instruction Fuzzy Hash: 8991A1B1B0420AAFCB15CF65C884AEEBBF6FF88210F14812AE945D7351D731AD45CBA1

Function 01969F30 Relevance: 1.4, Strings: 1, Instructions: 164COMMON

Download Yara Rule

Strings

(bq, xrefs: 0196A0B8

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: e1bb41670ad50ca4a60c17b07cbc332f3adceac83157d28a64f45f5d07cb5998
Instruction ID: f2419e7a24e48889308aaeb45f466175afe58524098b51c919c2350aa9944024
Opcode Fuzzy Hash: e1bb41670ad50ca4a60c17b07cbc332f3adceac83157d28a64f45f5d07cb5998
Instruction Fuzzy Hash: 8C513934A002059FDB14CF69C584AAEBBFAAF89315F198069E909EB351DB75EC41CB60

Function 072DF918 Relevance: 1.4, Strings: 1, Instructions: 162COMMON

Download Yara Rule

Strings

(bq, xrefs: 072DF968

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 7fd59f5e8c902fdf147db7be0a2922633c0d6942058c615017192174bc99afa6
Instruction ID: 2db66ef221be0ec85e5b8799d01de7e20e9523bc3dc9fd32fc860d4bb49ead8a
Opcode Fuzzy Hash: 7fd59f5e8c902fdf147db7be0a2922633c0d6942058c615017192174bc99afa6
Instruction Fuzzy Hash: 9C511271B113419FCB19AB38D51856E7BF2AF85305B1488BDD44ACB351EE39DC06C792

Function 0196CD58 Relevance: 1.4, Strings: 1, Instructions: 157COMMON

Download Yara Rule

Strings

4'^q, xrefs: 0196CEB7

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4'^q
API String ID: 0-1614139903
Opcode ID: e4431a5872ab430a7e2c2614364ee8f5ecd1b5a04c737dcd2b1b7f520dc43721
Instruction ID: d753a9c36d0df14bcf6c8ef41ec4a13eb87b4008ddb5c91b928a85fe9fc53ae8
Opcode Fuzzy Hash: e4431a5872ab430a7e2c2614364ee8f5ecd1b5a04c737dcd2b1b7f520dc43721
Instruction Fuzzy Hash: 4C41C0317013004FD7199B79D86472ABBEEEBC5260F1484B9E94ACB390EE35EC4287A1

Function 0738D718 Relevance: 1.4, Strings: 1, Instructions: 150COMMON

Download Yara Rule

Strings

4c^q, xrefs: 0738D86B

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4c^q
API String ID: 0-396817635
Opcode ID: 2dda06202e98ff4f5e5f8cbb17a887f256a5c8b696168268106a1c0dbacfcf30
Instruction ID: d54b33a3ac2cfc0decde99155451c2bb38afd0e2f00514c009fda21b9ac0c4e8
Opcode Fuzzy Hash: 2dda06202e98ff4f5e5f8cbb17a887f256a5c8b696168268106a1c0dbacfcf30
Instruction Fuzzy Hash: 0041F8B17583825FFB41AB3898647E97FB5EF8A324F04449BD089CB2D2DA398845C761

Function 072DF509 Relevance: 1.4, Strings: 1, Instructions: 149COMMON

Download Yara Rule

Strings

(bq, xrefs: 072DF5E9

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 50e4d1a35ebcc7febaa3337ad7f373943ce874357fd04e7b1aa475e873f1c77b
Instruction ID: da35d6538b7d2287bea48ec02b34c9901fbececa200b4260cab3af713c1c955d
Opcode Fuzzy Hash: 50e4d1a35ebcc7febaa3337ad7f373943ce874357fd04e7b1aa475e873f1c77b
Instruction Fuzzy Hash: B051F675B1020A9FCB05DFA4C4549AFBBB6FF89300F14856AE916AB350DB31ED46CB90

Function 019687A0 Relevance: 1.4, Strings: 1, Instructions: 140COMMON

Download Yara Rule

Strings

(bq, xrefs: 019687FE

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: eba7fb21766ee0e8137081d53b92f11cfd1f674ead538460c6de5c5d01cf76e7
Instruction ID: 7cd5e4e2c81bdd1477cdb021fa4ac286df756b4db8df6979b06b91ead433ce26
Opcode Fuzzy Hash: eba7fb21766ee0e8137081d53b92f11cfd1f674ead538460c6de5c5d01cf76e7
Instruction Fuzzy Hash: DF4123313043408FD7129B7DE81561A7FEEEBCA25171484BAE90ACB386EE34DC46C765

Function 0738D810 Relevance: 1.4, Strings: 1, Instructions: 134COMMON

Download Yara Rule

Strings

4c^q, xrefs: 0738D86B

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4c^q
API String ID: 0-396817635
Opcode ID: a963508da130869d9ec531c78a81aae446cce19f6035a93e6909f1c45ccf088b
Instruction ID: 3d76b1f849b2224f1c715fb2eddcac5b46f1ff849a0b8f4831ba9710a1cd4170
Opcode Fuzzy Hash: a963508da130869d9ec531c78a81aae446cce19f6035a93e6909f1c45ccf088b
Instruction Fuzzy Hash: 3141A4B0B14301AFFB54DF25D950B7ABAEAAB8D700F144029E909DB3C1DA7ADD01C761

Function 07381F00 Relevance: 1.4, Strings: 1, Instructions: 131COMMON

Download Yara Rule

Strings

(bq, xrefs: 07381FBD

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 2f8b6e072cd1aa7e073b1128645f73ee2e1e251b92550a53aa4e9c1662601361
Instruction ID: 6736dbe10732f5cfbded2a16285c5f81cd22e211ab63022eb56545de85205ede
Opcode Fuzzy Hash: 2f8b6e072cd1aa7e073b1128645f73ee2e1e251b92550a53aa4e9c1662601361
Instruction Fuzzy Hash: 5A41F6757002199FDB14EF64D854AEEBBB6FF88310F14816AE90AE7351CB359C06CB91

Function 072D6975 Relevance: 1.4, Strings: 1, Instructions: 123COMMON

Download Yara Rule

Strings

(, xrefs: 072D69F9

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (
API String ID: 0-3887548279
Opcode ID: a727cf90e3a57cc4a43560cf4370f24d0cbc89affd1f94c8d683675b5e3c384b
Instruction ID: de9e0b1406bd43383697eab5c126af123b27f0ed766fadc978ffda1a48939da4
Opcode Fuzzy Hash: a727cf90e3a57cc4a43560cf4370f24d0cbc89affd1f94c8d683675b5e3c384b
Instruction Fuzzy Hash: 0B4101717142518FCB05DF79D89886EBFF6EF9920070845A9E546CB3A6CB309E06CB50

Function 07380B98 Relevance: 1.4, Strings: 1, Instructions: 122COMMON

Download Yara Rule

Strings

, xrefs: 07380C8B

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3916222277
Opcode ID: 15c13ace2de531e4c5db29fdff3b62e927269bc3da0a30e4046a7a467d43ade4
Instruction ID: e75fb17ec4ec955717d096fc1fdc411a223a8eb41d054ecfb04b63a84c99f63a
Opcode Fuzzy Hash: 15c13ace2de531e4c5db29fdff3b62e927269bc3da0a30e4046a7a467d43ade4
Instruction Fuzzy Hash: 86417F70A12209DFEB18EFA4E550BAEBBB2FF85300F208529E4165B3A5CF359C45CB41

Function 072D17DF Relevance: 1.4, Strings: 1, Instructions: 121COMMON

Download Yara Rule

Strings

(bq, xrefs: 072D1804

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: d4c6ceb74883916c23b1dd7f082a613cce1cbd7399018c3bb1262a4bd0cce4ec
Instruction ID: 913f2642bcb5a0b1a35d223e0b18bfa1b93a1e591e2ed63755c6d21362a20992
Opcode Fuzzy Hash: d4c6ceb74883916c23b1dd7f082a613cce1cbd7399018c3bb1262a4bd0cce4ec
Instruction Fuzzy Hash: 38418EB4A1060A8FDB14CF69C4849AAF7F6FF89310B1AC559E45AEB751CB30EC11CB90

Function 072D6338 Relevance: 1.4, Strings: 1, Instructions: 116COMMON

Download Yara Rule

Strings

(bq, xrefs: 072D6383

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: dabeae80cbe1590ccd769901047fb66ae70c0c5785a18563900800bcde189dac
Instruction ID: e95e26723294047b4174e7223bf3fc6dbf3f3d03a074b8d8593ee99014377800
Opcode Fuzzy Hash: dabeae80cbe1590ccd769901047fb66ae70c0c5785a18563900800bcde189dac
Instruction Fuzzy Hash: 703103B13102025FD7489B7AD854A6E7BF6FFC9690725853DE406CB3A1DE72DC028790

Function 01963CD0 Relevance: 1.4, Strings: 1, Instructions: 109COMMON

Download Yara Rule

Strings

(bq, xrefs: 01963DE8

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 46f6446f8b94aacf326fcfb323ba4ce0526f283e688c819da7e68ed7d7830940
Instruction ID: b22119486de9e17182d09593ff94a7e3046040530bec51d149c6d86bc2add0a7
Opcode Fuzzy Hash: 46f6446f8b94aacf326fcfb323ba4ce0526f283e688c819da7e68ed7d7830940
Instruction Fuzzy Hash: 6531AA30B043048FD7099F79C86976EBEBAFBC8301F148469E90AD7395DE349D468BA5

Function 0738179A Relevance: 1.4, Strings: 1, Instructions: 107COMMON

Download Yara Rule

Strings

(bq, xrefs: 073818B2

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: ce03bda3422c9fc261d5052627dfb9e7b627290b05aac24aaa3b482197c61f4f
Instruction ID: f9389a45ff648417c7e53ea4233374b792f3c9a557c92d2cc283435fd8debf19
Opcode Fuzzy Hash: ce03bda3422c9fc261d5052627dfb9e7b627290b05aac24aaa3b482197c61f4f
Instruction Fuzzy Hash: 8E3160B0A002099FDB54EF69C845AAFBBF5EF89310F14846DE409A7350DB30AD428BA1

Function 0738D800 Relevance: 1.4, Strings: 1, Instructions: 106COMMON

Download Yara Rule

Strings

4c^q, xrefs: 0738D86B

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4c^q
API String ID: 0-396817635
Opcode ID: c6740a9cc9297ee73c0032e740f8d59860ee6abad574d5a7148d2168b12095a3
Instruction ID: e41a51ced4acff779d1f94ce2bb8f5fa30ba1aac19c54feb5ff9c26d4bdffb30
Opcode Fuzzy Hash: c6740a9cc9297ee73c0032e740f8d59860ee6abad574d5a7148d2168b12095a3
Instruction Fuzzy Hash: 0831A3F1B103029FEB94EB6999417BEBBE9AB8D310F044029A409D73C1DA39D941CB61

Function 07380B88 Relevance: 1.3, Strings: 1, Instructions: 96COMMON

Download Yara Rule

Strings

, xrefs: 07380C8B

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3916222277
Opcode ID: a6b17f4aff86f2b7d9f9590e4e08b9d1c56e78c950b434091df77cedfd9b8139
Instruction ID: 5fbbae95eecd43387c5da44cfea5eff78afdaa09488960fa198cf39ed053daa4
Opcode Fuzzy Hash: a6b17f4aff86f2b7d9f9590e4e08b9d1c56e78c950b434091df77cedfd9b8139
Instruction Fuzzy Hash: C6415E70A11209DFEB58EFA4E55079EBBB2FF84304F208429E4165B7A8CF759D4ACB41

Function 01964381 Relevance: 1.3, Strings: 1, Instructions: 91COMMON

Download Yara Rule

Strings

4'^q, xrefs: 019643C2

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4'^q
API String ID: 0-1614139903
Opcode ID: d2f46267d37f526b71037d8466f90fefa33ce27faa09ff50cd353d054f5496eb
Instruction ID: 9a74287fdcc9e398813100481c44ebcc3a0d871562dd1767436215d87daa95cc
Opcode Fuzzy Hash: d2f46267d37f526b71037d8466f90fefa33ce27faa09ff50cd353d054f5496eb
Instruction Fuzzy Hash: 2B318C302117028FC306EB39D55596EFBB6FFC4210B10892CD95A877A4DF71BD8A8B89

Function 072D5848 Relevance: 1.3, Strings: 1, Instructions: 90COMMON

Download Yara Rule

Strings

@, xrefs: 072D57F7

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: 95e1d0ca941618e089ec2ab3b74d7312b9e1914aef897d7aa73ee2d2ea3c1681
Instruction ID: d8cb0e22b49786267a2df82220200642d9c5cf2996f1217bee7a513be973c4af
Opcode Fuzzy Hash: 95e1d0ca941618e089ec2ab3b74d7312b9e1914aef897d7aa73ee2d2ea3c1681
Instruction Fuzzy Hash: BA316BB1E2021A9FCF14CFA6C4949DEBBB2FF89210F144469E805EB351DB70AD06CB91

Function 07382BD0 Relevance: 1.3, Strings: 1, Instructions: 89COMMON

Download Yara Rule

Strings

4'^q, xrefs: 07382C34

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4'^q
API String ID: 0-1614139903
Opcode ID: 09b9e6a30902a76a597020ab4c6e0032306f83aadc42fbb4094574d2f394e35e
Instruction ID: 8cb61dcac7946ac0a35d30a2f2960eb1f39e0f3b4ffd07161631b8313d38e02f
Opcode Fuzzy Hash: 09b9e6a30902a76a597020ab4c6e0032306f83aadc42fbb4094574d2f394e35e
Instruction Fuzzy Hash: E1316DB1F002158FCB45EF69C550A6FBBF6BF8D210B11446AD849EB368DA35DC428B90

Function 072DE190 Relevance: 1.3, Strings: 1, Instructions: 87COMMON

Download Yara Rule

Strings

4'^q, xrefs: 072DE1F0

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4'^q
API String ID: 0-1614139903
Opcode ID: 5d86a5aae6de510d23d9f4c2836f04f0255f718a8af7cce525d4881c3112c971
Instruction ID: dc0b5dd14881077478db0bed4261bc1f3f8167398e2c9776b03a0e60675fc16f
Opcode Fuzzy Hash: 5d86a5aae6de510d23d9f4c2836f04f0255f718a8af7cce525d4881c3112c971
Instruction Fuzzy Hash: A721A3B1B502159FC708DB7CC594A6FB7EBAFCC710B11846AA409DB368DE35DC418791

Function 019696F8 Relevance: 1.3, Strings: 1, Instructions: 84COMMON

Download Yara Rule

Strings

4'^q, xrefs: 019697D4

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4'^q
API String ID: 0-1614139903
Opcode ID: 4faad081bd49e96b68de8477a9f914eb3f6450c7f5694b85c3e904a875292e78
Instruction ID: e5f5e26d51b723a64a1f07b0a5c7dfd4bf08d5a41b497fc3fc6d5b27ff7b0832
Opcode Fuzzy Hash: 4faad081bd49e96b68de8477a9f914eb3f6450c7f5694b85c3e904a875292e78
Instruction Fuzzy Hash: 1021DC313003018FDB159F79EA8566ABBEEEB89221B148669E809CB745DF34DC468790

Function 072D6670 Relevance: 1.3, Strings: 1, Instructions: 83COMMON

Download Yara Rule

Strings

,bq, xrefs: 072D6719

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: ,bq
API String ID: 0-2474004448
Opcode ID: 9a0be904cf900677e0ab9c2f106f0efa6dcaaf994d15e6816f24c0651448c390
Instruction ID: 14f8f41c41beeb5711ff56504c6f6def0ff4ccf58b6e09662da701f0878ebff6
Opcode Fuzzy Hash: 9a0be904cf900677e0ab9c2f106f0efa6dcaaf994d15e6816f24c0651448c390
Instruction Fuzzy Hash: 1221AEB47102199FD724DF69C894A2EB7F6FF887A5B118469D04A8B361CB75FC01CBA0

Function 01969308 Relevance: 1.3, Strings: 1, Instructions: 82COMMON

Download Yara Rule

Strings

4'^q, xrefs: 01969338

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4'^q
API String ID: 0-1614139903
Opcode ID: 6ded6f45c83be0e27a3d56f1c267cb83dd8215dab01ff385afcb8488fdcd90ae
Instruction ID: 9f4126298f2ae9ea3c8a3427ec2a0dde6ae7616a49c69be00a43caa48f878518
Opcode Fuzzy Hash: 6ded6f45c83be0e27a3d56f1c267cb83dd8215dab01ff385afcb8488fdcd90ae
Instruction Fuzzy Hash: FC31B371A40705CFCB12DF79D9845AEFFB9FF84304B008A69D4599B268DB30A94DCBA0

Function 0738BA68 Relevance: 1.3, Strings: 1, Instructions: 73COMMON

Download Yara Rule

Strings

PH^q, xrefs: 0738BAFE

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: PH^q
API String ID: 0-2549759414
Opcode ID: e68c9ea97eabe91eeec84cca889bb4ba94e20fac82b171dddac59d63f5f40251
Instruction ID: 7f619f4dc8fdf9d2022aae6bde83be8b3adce79a2cdcdf1b35c028553ca30830
Opcode Fuzzy Hash: e68c9ea97eabe91eeec84cca889bb4ba94e20fac82b171dddac59d63f5f40251
Instruction Fuzzy Hash: 6A2160B174010A9BDB649F69D958AAEBBEAAF88311F108025E506D7358DF389D10CBA0

Function 072DF820 Relevance: 1.3, Strings: 1, Instructions: 73COMMON

Download Yara Rule

Strings

LR^q, xrefs: 072DF84E

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: LR^q
API String ID: 0-2625958711
Opcode ID: 75b3f69ee786f56946847506cf7a272c845cafbc467a893f6fec3beb7434abb8
Instruction ID: 66c816d903dcbdfd56207e4457b87f2a759f576e74e4c3ad821682cf8375abce
Opcode Fuzzy Hash: 75b3f69ee786f56946847506cf7a272c845cafbc467a893f6fec3beb7434abb8
Instruction Fuzzy Hash: BB21D474B202059FDB189F29D555AEEBBF6EF8C710F248019E806F7390DA719D01CBA6

Function 072D2A68 Relevance: 1.3, Strings: 1, Instructions: 70COMMON

Download Yara Rule

Strings

\;^q, xrefs: 072D2AB0

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: \;^q
API String ID: 0-2342212615
Opcode ID: 9eea63b377b821a76d55d72d264465b3b6466fc5539b6a8e0abfa5f78fb8ffc3
Instruction ID: 09055a74b5fbacb6eceba5abb9f8f118799f6546761ac778612d57f6efb6f486
Opcode Fuzzy Hash: 9eea63b377b821a76d55d72d264465b3b6466fc5539b6a8e0abfa5f78fb8ffc3
Instruction Fuzzy Hash: 0F1182723142068F9724DAAEA484A5BF7DAFFC8675314843BE50EC7759EE61DC0147A0

Function 0738B989 Relevance: 1.3, Strings: 1, Instructions: 65COMMON

Download Yara Rule

Strings

(bq, xrefs: 0738B9CE

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: e63cf6e89f961d6be0c9cf8f64b439e524ea4e26d14229217a41cbde7edaa8c3
Instruction ID: 80822dc7c0b200ef189c51bec5b44aac4e98da39fce7ca3cc085f9c41875f34f
Opcode Fuzzy Hash: e63cf6e89f961d6be0c9cf8f64b439e524ea4e26d14229217a41cbde7edaa8c3
Instruction Fuzzy Hash: F51157313082901FC346A738E4148AE7FE2DFC671070544ABE10ACB3A2DE249D4587A1

Function 072DF830 Relevance: 1.3, Strings: 1, Instructions: 65COMMON

Download Yara Rule

Strings

LR^q, xrefs: 072DF84E

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: LR^q
API String ID: 0-2625958711
Opcode ID: de6626aafbf641c33ce4cdf1647d55650f8ae8cffee53f172637ef0d4f911ba5
Instruction ID: c27c8de7041113d032f63d9dde88822ea14d520fdaf41363cce2f54be37c8b2d
Opcode Fuzzy Hash: de6626aafbf641c33ce4cdf1647d55650f8ae8cffee53f172637ef0d4f911ba5
Instruction Fuzzy Hash: 2A218E74F202059FDB18DF69C554AAEBBF6EF8C710F208059E806EB390DA719D01CB95

Function 073872D0 Relevance: 1.3, Strings: 1, Instructions: 63COMMON

Download Yara Rule

Strings

4c^q, xrefs: 073872E8

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4c^q
API String ID: 0-396817635
Opcode ID: 0bf92da057c3d36dfd92579ddbbb43e8fbbe0ce1f12db9c571aff9aca4adaaff
Instruction ID: 295f0d7728a7e706a62e53f492988b0cbf64b9dac155a88c0a356a0ba2fec173
Opcode Fuzzy Hash: 0bf92da057c3d36dfd92579ddbbb43e8fbbe0ce1f12db9c571aff9aca4adaaff
Instruction Fuzzy Hash: E7116370B042119FDB54DB79A805B7F7AEEAB88740F144069F409D7281DF79DD01C7A1

Function 01968D30 Relevance: 1.3, Strings: 1, Instructions: 60COMMON

Download Yara Rule

Strings

4'^q, xrefs: 01968D39

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4'^q
API String ID: 0-1614139903
Opcode ID: 7571f3ca8347f5afe221d4675eae2c367542fe012e8b87f095b9ceaf6e280f4e
Instruction ID: cc330d08fc6e21ed239d639e8575a359564d553b0cc23b2698f311b614fbda55
Opcode Fuzzy Hash: 7571f3ca8347f5afe221d4675eae2c367542fe012e8b87f095b9ceaf6e280f4e
Instruction Fuzzy Hash: 3E11E3352107108FD3259B79E04E20A7FEDEBD5711B104969ED0ACB781EF74E846CB99

Function 01968D20 Relevance: 1.3, Strings: 1, Instructions: 30COMMON

Download Yara Rule

Strings

4'^q, xrefs: 01968D39

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4'^q
API String ID: 0-1614139903
Opcode ID: 51c5a8011f8128adfedc2e3f33e003aa37d0ea7773f24344fb24f622b05a9b67
Instruction ID: bb9f86d6066764c69e275df80dda1a13b30421f0803a025efae2c987e0aded2d
Opcode Fuzzy Hash: 51c5a8011f8128adfedc2e3f33e003aa37d0ea7773f24344fb24f622b05a9b67
Instruction Fuzzy Hash: 78F08B342007008FC315DB34D44828A7B65EFC0301F00822DEC484B384CF34694A8796

Function 01967240 Relevance: 1.3, Strings: 1, Instructions: 22COMMON

Download Yara Rule

Strings

k9Y!0, xrefs: 0196724B, 0196725F

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: k9Y!0
API String ID: 0-1825060378
Opcode ID: c109431c23fdb72e7c648086065822a7c98655a733dd54b148553c91797291d9
Instruction ID: 3ad2692a2864fbd63ff1c93ae524e45ae105c8c87af872a11b42a77dcf64615d
Opcode Fuzzy Hash: c109431c23fdb72e7c648086065822a7c98655a733dd54b148553c91797291d9
Instruction Fuzzy Hash: D1D02E321892042FC7049ABEC9823CA7FADCB85070F20406AD989C7342D8609D8803E9

Function 01967250 Relevance: 1.3, Strings: 1, Instructions: 16COMMON

Download Yara Rule

Strings

k9Y!0, xrefs: 0196724B, 0196725F

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: k9Y!0
API String ID: 0-1825060378
Opcode ID: d8d7f54adef14e5f71132d6782463d6c3352edbb263f8ca513830f9f22ce5ae0
Instruction ID: 5ddc37084e979803bd797283cdef7317791f7b86d6b254dd4e315461ff171990
Opcode Fuzzy Hash: d8d7f54adef14e5f71132d6782463d6c3352edbb263f8ca513830f9f22ce5ae0
Instruction Fuzzy Hash: 3DD012726442186B4B05EAAD54505DF7FADDA84170F01447AD909D7241ED715E8443DD

Function 07385B58 Relevance: .6, Instructions: 600COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc99a57f9353a324679d79d2c6d9179ba449075b3019fd20a91621f9b889e4c2
Instruction ID: 6f1bd24eecd4ee44994f91c633076b297ce574e617de6eccc08f1595c4a19742
Opcode Fuzzy Hash: fc99a57f9353a324679d79d2c6d9179ba449075b3019fd20a91621f9b889e4c2
Instruction Fuzzy Hash: ED327C74B002499FDB55EFA4D848BAE7BB6FF88301F148469E9069B3A5CB30DC15CB91

Function 06C80598 Relevance: .4, Instructions: 449COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4f50095a31de7623d74b129c6091bdb428e8fa85b5c737e58133046e021c16bd
Instruction ID: 6c36a6eac656711272e006a71586cdf8ab32871288714b821b6825f3cc6b4338
Opcode Fuzzy Hash: 4f50095a31de7623d74b129c6091bdb428e8fa85b5c737e58133046e021c16bd
Instruction Fuzzy Hash: C4122470A017058FEB64EF68D8987ADBBF2FF88304F14852DD416A7381DB749985CB91

Function 0196E7F8 Relevance: .4, Instructions: 402COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7cfc3790283d518b5d2adca41c7d79717e76592f654bed277a7fa8c07b49f54
Instruction ID: 371fc8c48ee6bb7e26e58750027612a9d3738e118c48fef809f8fb6dec7dbd54
Opcode Fuzzy Hash: b7cfc3790283d518b5d2adca41c7d79717e76592f654bed277a7fa8c07b49f54
Instruction Fuzzy Hash: A6E16C347402158FDB15DF78C894A6A7BBAFF89301F1544A9E90ACB3A6DB34EC41CB61

Function 0196D9E0 Relevance: .3, Instructions: 348COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9dffc00c64d3bf1a43c429eb1a9c39d11e399ca1e51958716bce52361548978e
Instruction ID: 41fe17d2e39814831331682e057444c5030ec2eb8307ff2748f5d018498e144f
Opcode Fuzzy Hash: 9dffc00c64d3bf1a43c429eb1a9c39d11e399ca1e51958716bce52361548978e
Instruction Fuzzy Hash: E4E14834A00209DFDB15DFA8D994A5EBBF6FF88311F148528E85A9B365CB34EC45CB90

Function 073812B8 Relevance: .3, Instructions: 346COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57d21e575a4c3f8b45996292e7d7467d8e319a21a76e2554b63c689656aa23c0
Instruction ID: df3f3f3948c3a79618dbf95f9e58587126544aa691381a6fb8817cea5b7c5e2a
Opcode Fuzzy Hash: 57d21e575a4c3f8b45996292e7d7467d8e319a21a76e2554b63c689656aa23c0
Instruction Fuzzy Hash: 60E147B4A0035E8FEB15DFA8C588B9DBBF2BF49300F148198D849AB251D774ED86CB50

Function 072DF9A8 Relevance: .3, Instructions: 309COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c3497e8614ba471e403eb6992f0223fab5b427f4353413429e0102a96342afa2
Instruction ID: e2fab30b04ad32cf3eefd914f387502a8967a2036dd9af9dab0d27b6a2542307
Opcode Fuzzy Hash: c3497e8614ba471e403eb6992f0223fab5b427f4353413429e0102a96342afa2
Instruction Fuzzy Hash: 6FB1C2717102019FDB19AB38C51862E7BF6AFC9705B24886DD907DB395DF38DC028B92

Function 0196F6F9 Relevance: .3, Instructions: 298COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b430da5dcfae3528a2a89b807e0b5d985a163658c5dc36b3901db50438224f7
Instruction ID: 72a38df2201cd9eca9c58b6a20501da0ecd16d682f2a410cde1aafdbded61fda
Opcode Fuzzy Hash: 2b430da5dcfae3528a2a89b807e0b5d985a163658c5dc36b3901db50438224f7
Instruction Fuzzy Hash: 7AD1F635A00219CFDB65DF78D954BADBBB6BB88301F1084A9E90AA7390DF319D85CF50

Function 072D4FD9 Relevance: .3, Instructions: 270COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b77a988c75d7fef7cea96b3a8ba2f1647d69706d539a9ea7f50cf02c29eff51
Instruction ID: f4614bd16b627c6b3588c50d202120726579c9d10a9789a3d86347a142ddfb68
Opcode Fuzzy Hash: 7b77a988c75d7fef7cea96b3a8ba2f1647d69706d539a9ea7f50cf02c29eff51
Instruction Fuzzy Hash: 7BB11BB4B1020A9FCB05DFA9C59499EBBF6FF89300B108469E905EB354EB70ED46CB51

Function 072D4FE8 Relevance: .3, Instructions: 268COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3873683b744bfcc5fa2d880a4759635d2791e5ef41c593bc66e8ee35aefadff
Instruction ID: f0bd7745487575e327390a85ca3a647b8eb07b07a3cdd236fb3708d540a08abf
Opcode Fuzzy Hash: e3873683b744bfcc5fa2d880a4759635d2791e5ef41c593bc66e8ee35aefadff
Instruction Fuzzy Hash: 45B11CB4B1020A9FCB05DFA9C59499EBBF6FF88300B108469E905EB354EB71ED46CB51

Function 0738A724 Relevance: .3, Instructions: 262COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 147671dd0904d73b25efbaca2339c6119b91969d8f91b00719f7230f90007761
Instruction ID: a58e45dec15699c8bae9dd56aebac87ce3e23e007e7fa74df67032ab78c53370
Opcode Fuzzy Hash: 147671dd0904d73b25efbaca2339c6119b91969d8f91b00719f7230f90007761
Instruction Fuzzy Hash: 6FA16FB0E1030ACFEB50DFA9D98179DBBF1BF48314F14C12AD459AB254EB749846CB91

Function 06C815B8 Relevance: .2, Instructions: 250COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f8d437e9ea923975fb8d6db77a8ab54449595919fb583377854fb9046e33279
Instruction ID: 19bd8de0c915ab87d5661e27b67d82830a079c9ea5dcf25047c90126d31877ef
Opcode Fuzzy Hash: 6f8d437e9ea923975fb8d6db77a8ab54449595919fb583377854fb9046e33279
Instruction Fuzzy Hash: 77510370A163505FD702EB28E8146EABFB5EF85304F0441AEC8488F792DB758D8ACBD1

Function 072DC4B8 Relevance: .2, Instructions: 243COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 51510899244a7da1964f6619816ebc8c37260f86fded944f35cb84cc4b0878ab
Instruction ID: 6bd84725f37561b5f97324d639081cd2c1f4187bf25e2b16346ac59c3a2e2f02
Opcode Fuzzy Hash: 51510899244a7da1964f6619816ebc8c37260f86fded944f35cb84cc4b0878ab
Instruction Fuzzy Hash: 73A17B75A152599FCB02DF68D89499EBBB2FF49310F1540A6E841EB362C730DC44CBA0

Function 01968FD8 Relevance: .2, Instructions: 241COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e9afad425a956d8302322b53b05b3e7fc8e93faff77fd49a7132821f80fc0c4a
Instruction ID: 6adcc743185cea035f028d328c17951971266c66f225e65796126c53b6401ff0
Opcode Fuzzy Hash: e9afad425a956d8302322b53b05b3e7fc8e93faff77fd49a7132821f80fc0c4a
Instruction Fuzzy Hash: E691BE35A003048FCB069FA8D95999DBFF6FB89314B1484A9E50ADB366DF35DC01CB94

Function 073818F0 Relevance: .2, Instructions: 235COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b7919bb2bba33aa15274575e4e0180d593721b37f476673e70ee1c1edc1cf6e
Instruction ID: 4c66cfa5ec83dd12fd3325a4e97fa737c509e8325d4cfbbb5e56774a6acada1b
Opcode Fuzzy Hash: 4b7919bb2bba33aa15274575e4e0180d593721b37f476673e70ee1c1edc1cf6e
Instruction Fuzzy Hash: 82817FB461031EEFEB91AF55C84487A7BBAFF85350B10446DE91A9B314EB31DC42CB91

Function 07381BC9 Relevance: .2, Instructions: 228COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d9ebba1626f6ca6f7f6d75a530ffb3eeba11447785bda60a5c2b4be16a7f6cee
Instruction ID: 77111484c3d57a0c9dc13cff7c6af5b5c8c6c29d6a58c255e1bfe77c86842672
Opcode Fuzzy Hash: d9ebba1626f6ca6f7f6d75a530ffb3eeba11447785bda60a5c2b4be16a7f6cee
Instruction Fuzzy Hash: 86A1A079A00219DFDB55DFA4D994EAEBBB6FF88310F148059E906A7360CB31EC52CB50

Function 019698A0 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7288252c56c1a6e61381c46a21035840c18eb500edbb8a05b7448dac6fa6acf6
Instruction ID: 41ce7fddb8e193fc1ec5c8c199e008cb120447d9ef3534a3a37eb2c538106d49
Opcode Fuzzy Hash: 7288252c56c1a6e61381c46a21035840c18eb500edbb8a05b7448dac6fa6acf6
Instruction Fuzzy Hash: 9961C1307013118FEF195B79951922E7AEEEFC9395B144479E90AC7385EE38DC81C7A4

Function 0738DEDE Relevance: .2, Instructions: 202COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d17e4b04bc670295f49b8b8dd8433ee4d9a9870561387233232735676b3f048
Instruction ID: 84f0122f604e02629898a1e1e806a47f560e7a68ea1720b9a6e6a3a7e759c4a0
Opcode Fuzzy Hash: 2d17e4b04bc670295f49b8b8dd8433ee4d9a9870561387233232735676b3f048
Instruction Fuzzy Hash: 6F81DE71A053429FDB06DF78C5800AA7BF2FF99304B1448AAC449DB366EB35ED46CB91

Function 0738E298 Relevance: .2, Instructions: 198COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 396c598e238698f33601c6adbc0402e742ebd11b15012a3c9c447b84cf0ae4a7
Instruction ID: 7f07103b1226928cdba33458d9815469c620d4001df23487a48ede266b363ec0
Opcode Fuzzy Hash: 396c598e238698f33601c6adbc0402e742ebd11b15012a3c9c447b84cf0ae4a7
Instruction Fuzzy Hash: 99719AB0A003059FEB54EF79D9546AEB7F6AF88304F148529E40AD7390EB39ED41CB90

Function 0738FC08 Relevance: .2, Instructions: 195COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9e589e01e5be12a57c6f40c4d2e5377c395e9383421bf02d56c4ad12b2cf87a2
Instruction ID: 38b1e221c77ec288b43996fc8abf15aeacd00a7c1a4edd98338e7019f452126d
Opcode Fuzzy Hash: 9e589e01e5be12a57c6f40c4d2e5377c395e9383421bf02d56c4ad12b2cf87a2
Instruction Fuzzy Hash: EB814CB4A002069FEB44DF68D584BADB7F6FF88314F248459E809AB351D735EE42CB90

Function 0738E288 Relevance: .2, Instructions: 193COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d41b6196f31fa82985b43175fa47ef39d916f2b7f1b2461d5a761a112471b340
Instruction ID: df24e5bf90c7d2d5b0c72d5c335b0e4b77a0717b9d4193ce31ab89f4de415394
Opcode Fuzzy Hash: d41b6196f31fa82985b43175fa47ef39d916f2b7f1b2461d5a761a112471b340
Instruction Fuzzy Hash: FB619DB4A003069FEB54EF75D9446AEB7F6EF88200F148529E40DD7250EB39ED41CB91

Function 0196D9D0 Relevance: .2, Instructions: 187COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 702b2b24b09a955aa01a68989a403cbe923d5b47bd6e194c65999ebcc7b20ddd
Instruction ID: 85c92299dd837f995343bf3757d207e1d6cd8ce69d8d6aff97746158fb56c50b
Opcode Fuzzy Hash: 702b2b24b09a955aa01a68989a403cbe923d5b47bd6e194c65999ebcc7b20ddd
Instruction Fuzzy Hash: 7D81F534A00209DFDB14DF68D598A9DBBF6FF88311B148568E81AAB365DB30EC41CF90

Function 072DC548 Relevance: .2, Instructions: 184COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b9a7a0b000d889f2433eff66751ff68e633b3d3e9d6335e04917e360c7a5e8a5
Instruction ID: b61f0119c4d6eb02b5dbe33b56567acfa53f1792c839750e86fa744653a72f6e
Opcode Fuzzy Hash: b9a7a0b000d889f2433eff66751ff68e633b3d3e9d6335e04917e360c7a5e8a5
Instruction Fuzzy Hash: 8581FAB5A1020ADFCB15CFA8D998A9EBBB6FF48310F158569E905A7360C731EC51CF60

Function 072D6128 Relevance: .2, Instructions: 165COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c501fb850af38f31215c684b1a404755037716968b610226ff100ed13f99abe5
Instruction ID: a14c72b8378216365c7c23587600c429b01ad5082de2938ff66203130c32bdd5
Opcode Fuzzy Hash: c501fb850af38f31215c684b1a404755037716968b610226ff100ed13f99abe5
Instruction Fuzzy Hash: F5519370B21209AFDB15DFB5D4586AEBBB2BFC8244F24802DD406EB384DF759C068B91

Function 073821E0 Relevance: .2, Instructions: 161COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ee4155510d460cbf8a569a3cb9361ebca4f5519768e2f5a491d151a2b4fe02ba
Instruction ID: 9c0b73f14b854c4c3539fca27d2103ceea0653ef15f755400f37b31f0723adc7
Opcode Fuzzy Hash: ee4155510d460cbf8a569a3cb9361ebca4f5519768e2f5a491d151a2b4fe02ba
Instruction Fuzzy Hash: B751D8B1A047058FCB99EF68C49496EBBF5FF8A310B1541AAE50A9B771C771AC41CB40

Function 0196B7C8 Relevance: .2, Instructions: 159COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0a459bf3a9d0edba21e1b09c218fc744f869823c2ea1aaf587cd5585fa8b090b
Instruction ID: 5739fe222ba5a8a5af2b780c2656493e849c2074cb645c0fc2c8fad46cd95996
Opcode Fuzzy Hash: 0a459bf3a9d0edba21e1b09c218fc744f869823c2ea1aaf587cd5585fa8b090b
Instruction Fuzzy Hash: 59515B7EA01241AFD7049B7CDCD67967FB5FB81208B1C8529E109DBB16E734D886CBA0

Function 0738FBC7 Relevance: .1, Instructions: 147COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 629193cb47da7d739cc5387f3f3f62f6011e49637d094e4096b64a874044452c
Instruction ID: 9d51ee73d5afc0740c9cfa7acc8b3cd11b1dfe4a2db79f18665b057a3b35f1d2
Opcode Fuzzy Hash: 629193cb47da7d739cc5387f3f3f62f6011e49637d094e4096b64a874044452c
Instruction Fuzzy Hash: 6651A3B5A002068FEB45DF68D180BADB7F6FF89310F244459E809AB351D735DD85CB50

Function 0738BC88 Relevance: .1, Instructions: 145COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fee75a322c81f4de82cf2c2b18886f4a6fcca9026ffbe75a932cef8ba71bfd6b
Instruction ID: a9cfac2b1f01d3d81882cdc2ba2f2df8dd5d1181e43962cb9c6cae4f5dcffef8
Opcode Fuzzy Hash: fee75a322c81f4de82cf2c2b18886f4a6fcca9026ffbe75a932cef8ba71bfd6b
Instruction Fuzzy Hash: A8517E707002468FCB55EF68C848AADBBF6EF85310B1581A9E049CB3A6DB74DD45CB90

Function 0196D320 Relevance: .1, Instructions: 143COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac1b9a2131a7b6c80dc3244ce56e7d1b10b4578c257bc4ad7994ebb94cb2e312
Instruction ID: 197078ffc6be150b4ae6504112940daf78a0ae343c9f30c7c9d2245c10400501
Opcode Fuzzy Hash: ac1b9a2131a7b6c80dc3244ce56e7d1b10b4578c257bc4ad7994ebb94cb2e312
Instruction Fuzzy Hash: F651FC34A10219EFDF14DFA4E8949EDBBB6FF88311F148029E955A73A4DB35A841CF60

Function 0196DDA7 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ad8e26e5446bbde9d5c39353d2793a0e340c83bcf83147472a499aea3905c63
Instruction ID: 0cbc26b985ac24a69a96270c78068f6fe6c72826e2d4a08688f05830f4e0dcbc
Opcode Fuzzy Hash: 8ad8e26e5446bbde9d5c39353d2793a0e340c83bcf83147472a499aea3905c63
Instruction Fuzzy Hash: 5451E734A00209DFDB24DFA4E594A9DBBB6FF88311F188558E959AB365CB34EC42CF50

Function 019632A8 Relevance: .1, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13dcc6bdfc084f3f98bccf65c9b6725d89d816cb5a9ec169ef87a2c214207be6
Instruction ID: db747c23b78d5c7a2a7d014253dfc68eec12e3f88460b6439bd2a98aa13525b1
Opcode Fuzzy Hash: 13dcc6bdfc084f3f98bccf65c9b6725d89d816cb5a9ec169ef87a2c214207be6
Instruction Fuzzy Hash: 7B419F30B012059FD725EF75E59466EBAF6EFC8200F00482CE90A9B394DE759D49CB91

Function 072D38B0 Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: adb31d138a4ff46e86797ffe98cfc9be1a4e8c026100fa2543578b1e1e951792
Instruction ID: 82e162af8a75e372f5acd677f8eb2365c79b0eeb3c736d3ce620f250882e6dc6
Opcode Fuzzy Hash: adb31d138a4ff46e86797ffe98cfc9be1a4e8c026100fa2543578b1e1e951792
Instruction Fuzzy Hash: AD418AB4710742CFCB11EF25D98496ABBE2FF89200B108929D9568B365DB70ED05CF81

Function 06C81F58 Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d125dbc2be3a77ab42c96e734bf169110b22b5eed913449d9d0eabdbc9a1b829
Instruction ID: 0571b147ce1af5b8760c7d3a8a70fc1b206f1bfc302ac28fa86f04f0653e0702
Opcode Fuzzy Hash: d125dbc2be3a77ab42c96e734bf169110b22b5eed913449d9d0eabdbc9a1b829
Instruction Fuzzy Hash: E041B3313042418FC364DF39C89496ABBE6EFC9314724856DE059CB762DB35EC86CB90

Function 072DBC08 Relevance: .1, Instructions: 118COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a9462b65c2f7a19aac3993d80a600912f97bdfdef04100224b3058797eb30799
Instruction ID: 7b6c8a8f00b1ddc69ee611465b2fab9c27971294b284cfc786e2268ad236ca18
Opcode Fuzzy Hash: a9462b65c2f7a19aac3993d80a600912f97bdfdef04100224b3058797eb30799
Instruction Fuzzy Hash: 2F41E475300601DFDB258F29D868B66BBE2FF88311F15846EEA468B3A1CB71DC01CB50

Function 073853F8 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ddd7987cd510f474f92e4977065b564e652599ce8c68fb4f1616d74e7a2b9b95
Instruction ID: 302f3b7449a760c832900eba27323c9a2e3c1bdb0309c37460ed81875a46e9c0
Opcode Fuzzy Hash: ddd7987cd510f474f92e4977065b564e652599ce8c68fb4f1616d74e7a2b9b95
Instruction Fuzzy Hash: 0D31CF6255E7E01FD703AB3CA9700D67FB09E8712471A41E7D0D4CF1A7D9588A8DC3AA

Function 072DA6E8 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0179bee9609771536e339fe0abeb9d78ef32a4fffe54363b12569025f0d1c63d
Instruction ID: 319064ee07804d8ba408dd6c637b5893711beaab00636155e891f98c888d6afa
Opcode Fuzzy Hash: 0179bee9609771536e339fe0abeb9d78ef32a4fffe54363b12569025f0d1c63d
Instruction Fuzzy Hash: 673192B4234742CFEB248B69D494A7AB3F5FB45314F10C81EE847C6A51D7B4EC828B81

Function 072D4E70 Relevance: .1, Instructions: 109COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb25fc61f03e1988037180a379b45a84fb600e26f00b2547927752711fb08506
Instruction ID: dd11bdc098bad65248f16dd5b5eb31a28fec8154f07f40f94cae83ccbd6c1402
Opcode Fuzzy Hash: fb25fc61f03e1988037180a379b45a84fb600e26f00b2547927752711fb08506
Instruction Fuzzy Hash: DD41A1B191024A9FCB21FBA4D448BEFF3F6AF84311F008539D566971A4CB746E89CB91

Function 072D28F0 Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7efe7e9687ae98b4603e899fa0fe6bd56dde35b269a0d22aeff42feed60b5564
Instruction ID: e5860356136e922b1616549385f9079aa5e5eb18bffafe99ae5d77d738460fb2
Opcode Fuzzy Hash: 7efe7e9687ae98b4603e899fa0fe6bd56dde35b269a0d22aeff42feed60b5564
Instruction Fuzzy Hash: EC412D70B1020ADFCB14DFA8C590A9EBBF6AF88720F149469E405AB365DB71ED45CB90

Function 072D8F22 Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3b6d6a64292c36d1816bddd639ba5b843e12fdb52107eb4332d3cc337fd270e8
Instruction ID: ac1b0b1f85fe1cfddff50766be7bd2c2b951865f317b584e035337d3487da4d5
Opcode Fuzzy Hash: 3b6d6a64292c36d1816bddd639ba5b843e12fdb52107eb4332d3cc337fd270e8
Instruction Fuzzy Hash: 91416A74B242419FCB159F64D45466EBBB3EB89300F508469E546C7385CB38ED81CB96

Function 06C81740 Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 84a596d395fc98ae23b509a7f2d4432e3759306b06865aa5410010048357d897
Instruction ID: 84734ca8d3f76175228317948e8fd9f53c79ed57b7e0e6b75fe98ce9f9cf3e1d
Opcode Fuzzy Hash: 84a596d395fc98ae23b509a7f2d4432e3759306b06865aa5410010048357d897
Instruction Fuzzy Hash: 56419F70A113059FCB01DB68D4447BEBBB6FB88304F10856DD8099B795DBB69E86CBD0

Function 072D8DA0 Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a1ae1742e203972d982c92cf6db88b63e5b732ae846ffffb2121bb3dd3701a0
Instruction ID: 2c5899ccf990b92d3accc334979485435917881f5d3506e74714d7e4bf4c1d43
Opcode Fuzzy Hash: 6a1ae1742e203972d982c92cf6db88b63e5b732ae846ffffb2121bb3dd3701a0
Instruction Fuzzy Hash: 24314375770065CFCB48DF28D4988A877B5FF4AA11B11859AF506DB2B2DB70EE14CB80

Function 01967060 Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e493aae366eeb4dd8c08c17ac88c8f20f5a4ef51ba9b7297ace6116181320baf
Instruction ID: e87f04542e60b4a77501d7543ef194221acdffd679bd025d2b7232c1c32f8e52
Opcode Fuzzy Hash: e493aae366eeb4dd8c08c17ac88c8f20f5a4ef51ba9b7297ace6116181320baf
Instruction Fuzzy Hash: 5231DC70B003459FEB05DBB8D81676E7BBAEB89301F108069E905DB395DF388D06CBA1

Function 072D2BC8 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 54514e64de5d617df20f3c8e910a98530d9a50a9644cd2d4a572f295a90b9998
Instruction ID: 515a7995c274180ac65a4dd5bc13a99a1e595bd6bb260f6a3e1205a7485f7c64
Opcode Fuzzy Hash: 54514e64de5d617df20f3c8e910a98530d9a50a9644cd2d4a572f295a90b9998
Instruction Fuzzy Hash: 8531C1B2714102CFDB10DBA9E844AAAB7E9FFC5250B16C07BD408C7751DB71EC0187A1

Function 0196DED0 Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b5248b9dd989f9bead17523e52eb03507d525c9a58345ab55c6b76c51bdebe3
Instruction ID: ec4be96c1d7a7515fd09b0619c63524efea997fccfcaf03e2ec8ede4df9f6f1d
Opcode Fuzzy Hash: 4b5248b9dd989f9bead17523e52eb03507d525c9a58345ab55c6b76c51bdebe3
Instruction Fuzzy Hash: 2831BE363102018FD711DF68D894A2A7BEEEF98612B1540AAE55ACB371DF31EC01CBA0

Function 0738FE05 Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5466596dbf688a38e6cb39921dc280df69062bb66ea350ec4c491c0a3dd91618
Instruction ID: 77d9d75ce155927fab5e993d87be0df90eb90447d7804fe99e00918de85c5c34
Opcode Fuzzy Hash: 5466596dbf688a38e6cb39921dc280df69062bb66ea350ec4c491c0a3dd91618
Instruction Fuzzy Hash: F1313275B002199FDB09EF64D9509ADB7B7FFC8710B108518E80AA7364DF35AD958B80

Function 0738D9DA Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59e7c3f5edfbd927f9a101c26f82bb12a7332f5b472f0c93e51877032d51ba53
Instruction ID: 661f353cc11d43039b6793a794841c37f573d00af03f5d607705cc93888c9795
Opcode Fuzzy Hash: 59e7c3f5edfbd927f9a101c26f82bb12a7332f5b472f0c93e51877032d51ba53
Instruction Fuzzy Hash: C93172B1650B069FDB51EF29D98099AF7F5FF84314B008A29D0498BB25E770F94ACBD0

Function 072D5858 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6606831bf092771fa8760d9154ed58969beb364a6886c79f1c463004a2b49a2
Instruction ID: 47384b8bcd4e86628142b436b134813d5f041b3fddc206b5a3c8849025dd2678
Opcode Fuzzy Hash: f6606831bf092771fa8760d9154ed58969beb364a6886c79f1c463004a2b49a2
Instruction Fuzzy Hash: BF31A2B1F2021A9FCB15DFAAC45499EBBB2FF89210F144069E405EB350EB70DD06CB91

Function 07387F75 Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f04efdaf19ef8ab507e8a761233c039a0763544f3411b5fcacc7a5826352aab8
Instruction ID: 3814ccc91057c3b0d17540f608be3cc595f8de559c1c1c4e17c08c10adba75ac
Opcode Fuzzy Hash: f04efdaf19ef8ab507e8a761233c039a0763544f3411b5fcacc7a5826352aab8
Instruction Fuzzy Hash: D44112B1D00349EFDB10DFA9C480ADEBFF5BF48314F20842AE819AB254DB759949CB91

Function 06C802A8 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 605e23238c8781c017c5ba541989198d335f4390cbb61a8e4616d1bf0f2c94be
Instruction ID: c385fa62ef7aecacde7676082c04bb2b7af24f3f8625faba44446e4693be09a4
Opcode Fuzzy Hash: 605e23238c8781c017c5ba541989198d335f4390cbb61a8e4616d1bf0f2c94be
Instruction Fuzzy Hash: 6531E876F001198FDB60EEACD8505AFB7B1EFC4324F11892AE921A7391C7719908C7D0

Function 0738E168 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a3f46e04cf8a3d02bc689bc46e7fdcb0b3ce07ede16f8fb47e7e2252b3cbfad
Instruction ID: 691c03756c76c2ddad396c84edc80c88b129db8225baf6d2b0a4a1f55c12a23b
Opcode Fuzzy Hash: 1a3f46e04cf8a3d02bc689bc46e7fdcb0b3ce07ede16f8fb47e7e2252b3cbfad
Instruction Fuzzy Hash: E131D171B41342AFEF15ABB9944002E77FAEBDA204B1448AAC54997351EE35EC06CB91

Function 07382561 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5830af53f58b15a4416cbec60527a8e897e995d4c8e3e8bd4ce26ddb8d59a1b8
Instruction ID: 51ee1db556653d7b6cff7ae8687edcad7432004769f442c3ea6e4cace4f1ac3f
Opcode Fuzzy Hash: 5830af53f58b15a4416cbec60527a8e897e995d4c8e3e8bd4ce26ddb8d59a1b8
Instruction Fuzzy Hash: DB316F74304206AFDB649F25D884A5B7BEAFF89310F048429F84AC7365CB74EC45CBA0

Function 072D38A2 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4bdfc30a3111caeccf0a34c8bcb0c93bc29cf9a6eb0a2f876a6ec5bad0b7c91c
Instruction ID: 4c257b7bd00839374c90940b15b963206c3a63a22c08f1f8979a92488fde1400
Opcode Fuzzy Hash: 4bdfc30a3111caeccf0a34c8bcb0c93bc29cf9a6eb0a2f876a6ec5bad0b7c91c
Instruction Fuzzy Hash: 7E31BA78710742CFCB10EF25D89486ABBF2FF89610714846AE95ACB366DB30ED05CB91

Function 07387F80 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f9406cd52507aca026a2a3fa58b230502ee78c62c9e8e3e6300117d64e9ca71
Instruction ID: 9e65eef1dd79f003121c5ea99034cf74e3a62421c26c0222e34084eba8fdc4a4
Opcode Fuzzy Hash: 8f9406cd52507aca026a2a3fa58b230502ee78c62c9e8e3e6300117d64e9ca71
Instruction Fuzzy Hash: 1941E0B0D00349EFDB10DFA9C984ADEBFF5BF48314F208429E419AB254DB75A949CB91

Function 019677D8 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 369826de2d8143d0c2d17560b309ace4fdba2ac76f860a7ea3a87a77211a0408
Instruction ID: 7cacfbe35c0e5ff6fed5092068ab6e26e0a079b5e3e7e9c3d86cd788590b05d7
Opcode Fuzzy Hash: 369826de2d8143d0c2d17560b309ace4fdba2ac76f860a7ea3a87a77211a0408
Instruction Fuzzy Hash: CD318931D0070A8ACB10EFB9D8006A9F7B5FF99320F24962AE54977240EB30B9D4CB90

Function 0738E560 Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b78893f51f8d6da229d3893166450b0e8ff1e429b9faacee65aafc83a002a89
Instruction ID: c077f5c943f711605dc3ba3d04eceed937f1a9f56186d77a050576c235a8b898
Opcode Fuzzy Hash: 7b78893f51f8d6da229d3893166450b0e8ff1e429b9faacee65aafc83a002a89
Instruction Fuzzy Hash: 9721B672B062526FEF152B39550402E7BE7AFC562832C48BAC94DCB305EE35DC478782

Function 0738DDC7 Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da27b4ad1d14b4bb58c439ccb2aa278015fa5d4352fcbf35771ae3c2babe3c38
Instruction ID: e15c40e53bda0581086bf521d999de465492424ce44c9526762ed10af3642d54
Opcode Fuzzy Hash: da27b4ad1d14b4bb58c439ccb2aa278015fa5d4352fcbf35771ae3c2babe3c38
Instruction Fuzzy Hash: 7E319271B0020A9FCB05EF68D8809AEBBB6FF89300F14C569D4499B385DA35AD46CBD1

Function 019677E8 Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a2b3c900213b5165934620ab34e780895ea8f54d1dbdc77284e6588f9ceb0001
Instruction ID: fb13e1ba0d6be696acc83d6f6e89e52a90632bd10c40821340eb842aa3d5e30b
Opcode Fuzzy Hash: a2b3c900213b5165934620ab34e780895ea8f54d1dbdc77284e6588f9ceb0001
Instruction Fuzzy Hash: 78316931E1070A8ACB10EFB9D8002A9F7B5FF99320F249729E55977240EB30B9D1CB91

Function 01964929 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9685c70e9296e618305d2afd28aa82fd70c76c52bf55cef48a4abd5d5e9d1b61
Instruction ID: 4042406d8126141feb7b4490471d35fa4f36b0b30764f648aced4a3b6a761536
Opcode Fuzzy Hash: 9685c70e9296e618305d2afd28aa82fd70c76c52bf55cef48a4abd5d5e9d1b61
Instruction Fuzzy Hash: 8931B131E107068FCB11AFB9D4102AAB7B9FF85701F10C629D91AA7680EB34A985CB95

Function 072D6A50 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 15cd8a3fa3e76ecf88e4103fc159e67f31559201948a0c72c57c1d118d744868
Instruction ID: b8e85f360f4d2a8c0072c14dd7fe6396eade4dccbba59ad5438bea60d31e03d2
Opcode Fuzzy Hash: 15cd8a3fa3e76ecf88e4103fc159e67f31559201948a0c72c57c1d118d744868
Instruction Fuzzy Hash: A8318D713042559FCB15DF6AD89886EBBFBEFC9201308456AE14ACB376CA70AD06CB50

Function 0191F184 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112308989.000000000191D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0191D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_191d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 083ab3c7f4f6e9e27f71c1cf790e823d9a6861359d3cc5f2f4110f78d9488c65
Instruction ID: dc55c22472493dfe34159b0c8a497ccdc52ef24c049fc23cfb0ec7b315909649
Opcode Fuzzy Hash: 083ab3c7f4f6e9e27f71c1cf790e823d9a6861359d3cc5f2f4110f78d9488c65
Instruction Fuzzy Hash: 7331E676500248EFDF069F54D9C0F56BF66FB88310F2486A9ED0D4A26EC336D499CBA1

Function 072D6A60 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eadbb54918abfaf641bfcd329bb24ced4b917eb5edd09707aa999c55bd314c67
Instruction ID: fa72df6677dfd843a965c87bf66bbbacc9c18bf728731675e9c6e5dca108ca7e
Opcode Fuzzy Hash: eadbb54918abfaf641bfcd329bb24ced4b917eb5edd09707aa999c55bd314c67
Instruction Fuzzy Hash: C521BD713042118FCB15DF2AC89886EBBFAFF892057084469E146CB376CB70EC05CB50

Function 072D384E Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62eb9d1a71499b36b76f04af743bb099dcbd43c3b65704e97395e8818cd3455b
Instruction ID: bf2b1ee6c33d8f1de53a505cad64ec370544248cb483bba4da64db493747ac77
Opcode Fuzzy Hash: 62eb9d1a71499b36b76f04af743bb099dcbd43c3b65704e97395e8818cd3455b
Instruction Fuzzy Hash: D1316778710742CFCB10DF25D59486ABBE3FF89611714846ADA5ACB366DB70ED01CB81

Function 0738DDD8 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 644542b561b042e541754d9f827400f3e2e8e6fb0c46e7477fd11ff55b979291
Instruction ID: a58283f91f109d3ac9a20a81eb04caf55c041026ce16699745244b4e62ddbd87
Opcode Fuzzy Hash: 644542b561b042e541754d9f827400f3e2e8e6fb0c46e7477fd11ff55b979291
Instruction Fuzzy Hash: C7317C71A0060A9FCB04EB68D98096EB7BAFB88310F24C529D4099B345DA35AD46CBD1

Function 01964938 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 78fb43c21c740499a8bea152598ff54f88fe84284a89640c8c6c176e40e46bb1
Instruction ID: b93761aaad4b485ab288249b4e5659fc46b5128404098b26db48ee251287c1d5
Opcode Fuzzy Hash: 78fb43c21c740499a8bea152598ff54f88fe84284a89640c8c6c176e40e46bb1
Instruction Fuzzy Hash: CE31A431E1070A8FCB11AFB9D4141AEB7B9FF85701B10C629D959A7240EF34A985CB95

Function 01967B81 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a75440383316a30f5a5daf54a6b2f3270e75f0dc40e1b52ee2083ace8aff2b4e
Instruction ID: f20891973f4a03c6fb29e000ae541616f508febec2382991c01be1c96e6f26d4
Opcode Fuzzy Hash: a75440383316a30f5a5daf54a6b2f3270e75f0dc40e1b52ee2083ace8aff2b4e
Instruction Fuzzy Hash: C721D330B253408FD71E5B75B81A77A3FAD974160AF004468FE0BC6389DE2DA845CB69

Function 0196BA41 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 211f9a0a1739e2c6f2e1baf844a1429f50ac01d3b728eb24dffa15723e807e43
Instruction ID: 1addebea8c0a0965bc51d658a1ba22a3df1a841a12c63494d64f3f85f089f95f
Opcode Fuzzy Hash: 211f9a0a1739e2c6f2e1baf844a1429f50ac01d3b728eb24dffa15723e807e43
Instruction Fuzzy Hash: 0A215E317012069BDB14DA3AC98076EB7EEEFC5255B64843EE90ADB344EA31DD02C761

Function 072D3DC8 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0fc1652839ab9cc3447aab2189e159dffbda5fe6c4def2ec31b27df824dd3ba4
Instruction ID: d71d719bbb8bb2806cfb7afbc52a8fbbc7ac4bd40f1323b59465b8a0da0198c4
Opcode Fuzzy Hash: 0fc1652839ab9cc3447aab2189e159dffbda5fe6c4def2ec31b27df824dd3ba4
Instruction Fuzzy Hash: 8D315E75314642CFC724DF29D498926BBF6FF893007188668E54A8B7A6DB71EC06CB81

Function 072D4BA2 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b62891adb57050f10f92b4dc792b977577d4666b271df6973ce5a4b66c4dc22
Instruction ID: 69e20b595959320ebe70c8d7e91015d2f4ddc907bd1e3fcdc5ef9e264c31e9ca
Opcode Fuzzy Hash: 7b62891adb57050f10f92b4dc792b977577d4666b271df6973ce5a4b66c4dc22
Instruction Fuzzy Hash: E321E5B1F101468FCB04DBA8D49466EBBF6EF99310F01406AD809DB365DB35EC02CB91

Function 0191F088 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112308989.000000000191D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0191D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_191d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1210fc8a7fb641b7b7cdb321e2c9652e9293888a642702f513e8f95eaefe69b
Instruction ID: c6070026e49aaf73b5e42d82f4d8b6017f5b4ff4d344c7a9f7db0288b5afc3a7
Opcode Fuzzy Hash: a1210fc8a7fb641b7b7cdb321e2c9652e9293888a642702f513e8f95eaefe69b
Instruction Fuzzy Hash: B021F972104208EFCF069F54D9C0F26BF66FB88314F24C6A9ED0D0A25AC336D49ACB61

Function 01961272 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45c904720deb3775d4af53ed57fd04b5c4f336bba9e92100e1d61a5175232fd9
Instruction ID: 15015de91cd5754ab08e31672ca96ab9bdddf131dee53ccf880246da99d93e40
Opcode Fuzzy Hash: 45c904720deb3775d4af53ed57fd04b5c4f336bba9e92100e1d61a5175232fd9
Instruction Fuzzy Hash: ED314934A002048FCB14EB78E45896DBBF6FF89305B2085BDE40A97265EF349D41CB51

Function 0196DE45 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 73bfe01e6500c4696aa0f6404af4bd39702d0f307798f5b98722ca09f53cd1e7
Instruction ID: cf548006b64656eece25ae711efbad5055e2c748405105f65757d4d8f621fde1
Opcode Fuzzy Hash: 73bfe01e6500c4696aa0f6404af4bd39702d0f307798f5b98722ca09f53cd1e7
Instruction Fuzzy Hash: A1210531B012059FCB16DBA8ED90A9EBFBAFF95211F448429E5598B252DB31AC01CB60

Function 07384EE9 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2cd7bcaaffdc403f900282edf52c3a708f3a7364983fb99847ef04cd273d426
Instruction ID: be8bf2b3d1f2c5c20408025f11e6808f7fa259f4a22bdca60499d7828e2ee08f
Opcode Fuzzy Hash: f2cd7bcaaffdc403f900282edf52c3a708f3a7364983fb99847ef04cd273d426
Instruction Fuzzy Hash: 20310674A512059FD754DF68C588D9A7BF5EF48710F254098E406AB7A1CB31EC40CF61

Function 0191DC74 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112308989.000000000191D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0191D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_191d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: adc5486bbfbbb058546b181a7484cd2480847e6a64a63e0877fb086d0c07d12b
Instruction ID: eb18b59cb47855820872a36ab7129e41a5d1774175e45cb607b1d61dd1fb63fd
Opcode Fuzzy Hash: adc5486bbfbbb058546b181a7484cd2480847e6a64a63e0877fb086d0c07d12b
Instruction Fuzzy Hash: B7212776504204EFCB059F94D9C8F26BFE5FB88314F24C5A9ED0D0A25AC336D496CBA1

Function 0738E552 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba467d62900f8ea1e98dada96dfd44269ecbdb3d4e42819d16d09e79d5987d6f
Instruction ID: 0cf5e8031dacaf0ec6c7f8752c5b10737b81982d8803cfd5b5345f94a8b7a914
Opcode Fuzzy Hash: ba467d62900f8ea1e98dada96dfd44269ecbdb3d4e42819d16d09e79d5987d6f
Instruction Fuzzy Hash: F9219572B06252AFEF152B34851402E7BE7AFC571872D48AEC4899B305EE35DC478782

Function 0196BA50 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b46b80ffa6fbbc95a3ab96911db5d5a3a79af68da74cd324dcf4a3402c4ac44a
Instruction ID: 71adf67266a133ca2ef9e7915d940dca5d1cb342d04d507f47884b3645a1ee90
Opcode Fuzzy Hash: b46b80ffa6fbbc95a3ab96911db5d5a3a79af68da74cd324dcf4a3402c4ac44a
Instruction Fuzzy Hash: 5F216F307002069BDB14DE7AC890A6EB7EEEFC4255B54842ED90ADB354EA35DD03C762

Function 0190D7EC Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112275430.000000000190D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0190D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_190d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ad3b74af50c8b0b65278e9c6cb78a91c521adce49cfaee2cfadf95c46c413f9
Instruction ID: e75e9673852b8717252c92620e9ad6050d40b44d677399000d70c9e3bdb22b99
Opcode Fuzzy Hash: 1ad3b74af50c8b0b65278e9c6cb78a91c521adce49cfaee2cfadf95c46c413f9
Instruction Fuzzy Hash: A121F772500240DFDF069F98D9C0F16BFA5FB88314F248569ED0D4A296C336D555CBA2

Function 06C82500 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45c6081a0deb483edf1f68d040ae400d7d66ad44e822dc9794555010faaafa64
Instruction ID: 71f75552189c7afb1fba39bcac5ed62faf14c67599288053d6c8451afff113f0
Opcode Fuzzy Hash: 45c6081a0deb483edf1f68d040ae400d7d66ad44e822dc9794555010faaafa64
Instruction Fuzzy Hash: 6431BE30240A069FC751DF68EA80A46FBF5FF44314B509B28D0498BB39D771F9598BD1

Function 07384EF8 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b08cb6df5bc2d7676810ffed6e0f813b460549f36c41c7bc83a2fafb562b328b
Instruction ID: 805684cdb5c6f18f8dce0956c2e330e23930d0921616c1cdf35e60ee3437e011
Opcode Fuzzy Hash: b08cb6df5bc2d7676810ffed6e0f813b460549f36c41c7bc83a2fafb562b328b
Instruction Fuzzy Hash: 6631E4B4A402058FD754DF68C588EAA7BF5EF88711F255098E806AB7A1CB31EC40CB60

Function 01963CC0 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 22156aeb8bd235f47df534af41ac9897944bfa1079d056f7922d080f0aeee53a
Instruction ID: cfd517539cf24741316f96292736b3b8679a0afdb640dd8056831eacf0867b4f
Opcode Fuzzy Hash: 22156aeb8bd235f47df534af41ac9897944bfa1079d056f7922d080f0aeee53a
Instruction Fuzzy Hash: 51215C30B102048FD7189B79C8697AEBEFEBB88311F148428E90AD7395DE759D458BA4

Function 072D4BB0 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5b571ce56da7f2ae9334feb1c5309fd55c19cd230bd7310ef7c2bffccc73ea30
Instruction ID: e2c23a6c4d94bf21a87c4b7391557ce6296aedf2ab915be535e18338ebe26bb0
Opcode Fuzzy Hash: 5b571ce56da7f2ae9334feb1c5309fd55c19cd230bd7310ef7c2bffccc73ea30
Instruction Fuzzy Hash: BF216071F101168FCB04DB6DD594A6EBBF6EF88310F11816AD90ADB364DB35EC018B90

Function 072DCA83 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4306f92fee956f01da5c6af5d6752cc63c8f067d1bf79f5beced2027007411c1
Instruction ID: ca55fcaf38b66e2b85f3a55c4de30cf638d686d59d380f3f2a5eb9d6b0b6f022
Opcode Fuzzy Hash: 4306f92fee956f01da5c6af5d6752cc63c8f067d1bf79f5beced2027007411c1
Instruction Fuzzy Hash: 63317179A2010AAFCF05DFA5E988DEEBBB6FF48311F149015FA1162260CA719C60DF61

Function 06C82610 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b7c589a4eb9dd6d665db4a3537f6bc5597678d30d5951cd68f5220488b8d253
Instruction ID: ffeab55a5d727c5ac5138a59a9f894aac6a4b1c46b00433bbd7d6abe8342c634
Opcode Fuzzy Hash: 7b7c589a4eb9dd6d665db4a3537f6bc5597678d30d5951cd68f5220488b8d253
Instruction Fuzzy Hash: 8F11C1723412057BFA206915EC44FABFB9EEB90B64F104027FA489F2A0C6B59D41C3E5

Function 0196E880 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e540c680f02d531cffbd3fa9a199d8cca09f3011b54e2c2c8d712e760ab4533b
Instruction ID: ef4a3d9af908ad32ed3d44b5bd825fb33912f1646fd7b8c8d7f71a7cd22eabea
Opcode Fuzzy Hash: e540c680f02d531cffbd3fa9a199d8cca09f3011b54e2c2c8d712e760ab4533b
Instruction Fuzzy Hash: AD219539700206DFDB14DFA8C884AAE7BB9FF89311F148465ED099B361DB31D941CB61

Function 0191D610 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112308989.000000000191D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0191D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_191d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8c60e30ae2ecf326401cc6bcd4c8706aef3aa0c4203452711dcd970d5bd1b732
Instruction ID: 917deb49f99b8d439a114bdab02fcc3af6e1492e63273b92fa51075b6b51f0f1
Opcode Fuzzy Hash: 8c60e30ae2ecf326401cc6bcd4c8706aef3aa0c4203452711dcd970d5bd1b732
Instruction Fuzzy Hash: A2210475604208EFDB05DF58D9C8F26BBA5FB84314F20C96DE84D4B25AC33AD486CA61

Function 06C82510 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 363906b992788541cc4362988f83f0ffcbd2bf6751173dfe925d5a4d8199aef6
Instruction ID: fd0e133f4f0e2694ff0a55a09e8b061b0f28f3c0b881347df500dd89eca7163b
Opcode Fuzzy Hash: 363906b992788541cc4362988f83f0ffcbd2bf6751173dfe925d5a4d8199aef6
Instruction Fuzzy Hash: CD319A30240A069FC751EF68EA80A4AFBF5FF84314B509B28D0498BB39D771F9598BD0

Function 0196BB21 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b56a3ed818dbe16f64075d5c42b8a1724301aa36a164445f9af39243f4b6ab0
Instruction ID: 972a77cd3dd463594f5c754fc3939be16bcd44ee08d82cc2c3030792e985fb1a
Opcode Fuzzy Hash: 8b56a3ed818dbe16f64075d5c42b8a1724301aa36a164445f9af39243f4b6ab0
Instruction Fuzzy Hash: 9011D072A042199FC714CFB9D94166EFFF9EB8A250F24817AE40AD7354E6358842CBA4

Function 073821D0 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4629d39a62a8225b50762b48110136a504afc93d2b6cf8ebf64f962e8be860ce
Instruction ID: 3cc8652233b898618e41e56b44b3f384eb58b70a3572c3287677a64f5b7ae76d
Opcode Fuzzy Hash: 4629d39a62a8225b50762b48110136a504afc93d2b6cf8ebf64f962e8be860ce
Instruction Fuzzy Hash: 2F218CB161470A8FDAF9EA5CC4E882A77B5FF4621071A459AE10B8BA71C731AC40CB41

Function 07381EF0 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 467f9bcf2b087448476f58e637b9b281c1845ef3ae3383de0c485697746d6edd
Instruction ID: b414370afa1b5cfe80c7ac58743ff3159ddc9c72e669d21128c5e0fe7d13d81b
Opcode Fuzzy Hash: 467f9bcf2b087448476f58e637b9b281c1845ef3ae3383de0c485697746d6edd
Instruction Fuzzy Hash: D121AE74600209AFDB14DF64D454AAEBBBAFB88310F108529EA0997354DB35DC42CB90

Function 06C828B9 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3bb29adc1e04febd81cb59d6fde893610de57be272025b748ef1e1900f10bb9c
Instruction ID: d9daef0336545d028b4f36e022d5ef01ab90775a254a17a245806f235222550c
Opcode Fuzzy Hash: 3bb29adc1e04febd81cb59d6fde893610de57be272025b748ef1e1900f10bb9c
Instruction Fuzzy Hash: 49219DB13017169FD715AB38C40096EBBE6EFCA214755856DC08A8B360DF35ED87CB85

Function 01960DD0 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d3abb4441b6737f87506d1f137d39ec9e3393e36e34af3e2f46113985b86cb69
Instruction ID: 90a620ddca791864900115e1c20ab8e81d10bc5da5e9fbbf35e1fe77972d64f7
Opcode Fuzzy Hash: d3abb4441b6737f87506d1f137d39ec9e3393e36e34af3e2f46113985b86cb69
Instruction Fuzzy Hash: 4D11E631A0D3A06FD7535B7CA8606DD3FB99F87210F0500ABE488D7393DA244D48C7A6

Function 07384FCF Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3ce1efe482492d9d121a8e9d4957e0c0a6535002a7f3baba8d10278722da1db4
Instruction ID: 6543b586fa61b9535cb8dc9b57ec83dc5aea358c88bcfe731fe516d4a3a313ce
Opcode Fuzzy Hash: 3ce1efe482492d9d121a8e9d4957e0c0a6535002a7f3baba8d10278722da1db4
Instruction Fuzzy Hash: D51158B57102018FDB94EB2CD58886DB7E6EFC861172680AAE50ADB771DF32DD048B81

Function 0191F17F Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112308989.000000000191D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0191D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_191d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7cfb7dd041e002c130cd1539feb2bbdfd134433b7a32c8f6d204d752fbd68790
Instruction ID: 0c1bfb05b250b0e0baa513fd4750b981f545a750541a98a25ed503a4754cfea9
Opcode Fuzzy Hash: 7cfb7dd041e002c130cd1539feb2bbdfd134433b7a32c8f6d204d752fbd68790
Instruction Fuzzy Hash: CB21AF76404244DFCF028F54C9C0B96BF72FB88314F248699EE090A26AC336D4AADB91

Function 06C828C8 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eda0b7c3f422aa8e8c10b0f911680b5122b7020a0048aec01b5c2979e27d78bc
Instruction ID: 6dd8604842d2ab1cb9f780f135786e09eae88cc57446e2330eb99d15125a1a4f
Opcode Fuzzy Hash: eda0b7c3f422aa8e8c10b0f911680b5122b7020a0048aec01b5c2979e27d78bc
Instruction Fuzzy Hash: 651167B03016169FC715AB38C40096EBBE6EFCA215715856DC08A8B360DF34ED86CB85

Function 07387560 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45b0e1d416ba222b80b50507518f66a286425e84e60a5077c1a37c244767617e
Instruction ID: 09b2c0f18196d85518ac6486b101170dbb4bd3837a3d2812ffbd9178eda9a6fe
Opcode Fuzzy Hash: 45b0e1d416ba222b80b50507518f66a286425e84e60a5077c1a37c244767617e
Instruction Fuzzy Hash: F111D0B0700304AFEB44EB78D05466EBBE6EB88254F1092ADC00ECB364DA36DC428BC1

Function 072DA84A Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76ec254669b4e063efe447cd9f33a93aa6b6e00723ccce2a1f58614a2e389061
Instruction ID: 91a19a917d40752dde28f9bff8dc06f85850cb6c72fe0f04185702be733be18a
Opcode Fuzzy Hash: 76ec254669b4e063efe447cd9f33a93aa6b6e00723ccce2a1f58614a2e389061
Instruction Fuzzy Hash: 8F119D743107518FC7298B15C88482ABBBBFFC9320B06C55AE94AC7765CB70EC81C791

Function 0191F083 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112308989.000000000191D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0191D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_191d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b8d3571c4b9cc2845d5b9732b44ba54f756556ea458328d5f45100f7847987e
Instruction ID: 18cbf8254d4c29ddb8e3f67cedf3ace608d87fe827002a5927a39eb5a30e5a01
Opcode Fuzzy Hash: 4b8d3571c4b9cc2845d5b9732b44ba54f756556ea458328d5f45100f7847987e
Instruction Fuzzy Hash: BB219D76504248DFCF06CF54D9C4B56BF72FB89324F24C2A9ED090A26AC336D46ADB91

Function 07383348 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d34093a4197ca64cbce2afba15fb5d21e3586152ab839647a3f268e54b44891f
Instruction ID: bf4e867be86212d9142182a58a3878e4fe913c70a00fe89d5817d6ba6815dfab
Opcode Fuzzy Hash: d34093a4197ca64cbce2afba15fb5d21e3586152ab839647a3f268e54b44891f
Instruction Fuzzy Hash: 24113A763001149FDB049F69E984D9E7BAAFF8C761B104166FA098B361CB36DC12CBA0

Function 06C802B8 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba1bd8fc4e263663195f11ab19a2bda687e9cd3401ccccb2fc3f185b5263e9ed
Instruction ID: 2155c03304b571168691801290215fb6ce4aae9bbc7928e65b72feba017e2c52
Opcode Fuzzy Hash: ba1bd8fc4e263663195f11ab19a2bda687e9cd3401ccccb2fc3f185b5263e9ed
Instruction Fuzzy Hash: D51188353047518FC315AF2AC8688197BE2BFC961572548A9E45ACB3A2DE20EC05CBA5

Function 0191DC6F Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112308989.000000000191D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0191D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_191d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 114eaa811b2ef5832592fdbefb37b7eae827b65112d33cbcecf77d4cb3c2ffc0
Instruction ID: 8dbeda606b03493e907a4492f9f02934cc6725f5a92dc1384e7adef2b1c84ee2
Opcode Fuzzy Hash: 114eaa811b2ef5832592fdbefb37b7eae827b65112d33cbcecf77d4cb3c2ffc0
Instruction Fuzzy Hash: B121AE7A504244DFCB06CF54D9C4B16BFB2FB88314F2486A9D9090A65AC336D466CF91

Function 0738E652 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f801dd13741100456c759fbb7e02e3d8942a7ffd6b39c5305128248b4c03645f
Instruction ID: 51516f268743d16a56444ee1c88e049da473366f4fcdf2b632046b84c1a3f199
Opcode Fuzzy Hash: f801dd13741100456c759fbb7e02e3d8942a7ffd6b39c5305128248b4c03645f
Instruction Fuzzy Hash: 0B1163B0E00216DBEB18DF64C554AAEB7F5EB8C300F208569E805B7754DB795C41CBA0

Function 0190D7E7 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112275430.000000000190D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0190D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_190d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c7c8d58dc0dea2b6e01ffeb94055e7b182a7219ccea2c20f3472bf21e95a7b9d
Instruction ID: af1ccd53d01af9ca6eacc9da017615bb9581ca95d73fb1a6580dd2b8b511481d
Opcode Fuzzy Hash: c7c8d58dc0dea2b6e01ffeb94055e7b182a7219ccea2c20f3472bf21e95a7b9d
Instruction Fuzzy Hash: C5218E76504284DFDB06CF94D9C4B16BFB2FB88314F2486A9DD4D0A256C33AD516CB92

Function 0738CD92 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 22ee29c8aaeb0baf55dfe1016cbe80649fd2edf7d67b8c96ef002c3e40cedde6
Instruction ID: 855821da1dc960b2bfbd08926d0a435d0b9efe8787a2a6ac3ddd74728fc18e3f
Opcode Fuzzy Hash: 22ee29c8aaeb0baf55dfe1016cbe80649fd2edf7d67b8c96ef002c3e40cedde6
Instruction Fuzzy Hash: DB11C475B102049FCB14EF69D544ADEBBF6AF8C210F10406AE405E7360CB706D41CFA1

Function 06C82040 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 88466d8846299f12ec4a5812065d6498cdd5a89ad6b4d3a420ea8c3c9b76a51b
Instruction ID: 7e690c1e04ab01fd65dce14838fb7926544c8901694394344818f8d08a90999b
Opcode Fuzzy Hash: 88466d8846299f12ec4a5812065d6498cdd5a89ad6b4d3a420ea8c3c9b76a51b
Instruction Fuzzy Hash: 1011E5353052409FC324DF28D494E6AB7F9EF89314714416EE805C7761DB39EC86CBA0

Function 07387550 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ceb8f2f15b7e611dc54769a364138367369c54ba020aaa4476590f1a64ee012
Instruction ID: f68faccc40b675c32bb17517d27855ef608541c1fa6961889ce4137ed5fb01ac
Opcode Fuzzy Hash: 8ceb8f2f15b7e611dc54769a364138367369c54ba020aaa4476590f1a64ee012
Instruction Fuzzy Hash: 7811C2F1B00304AFEB45EB78D05467EBBD6EB84254F10966DC40ECB354DA768C428BD1

Function 07387428 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d79ecd9f33837d91143507a1ecf1fe6f4e7fae7c2088eb1490cf7acbe1448194
Instruction ID: 4388b5b456779b511e65cf9429d3a0a4217bd6e35e947394963eaecd2a5a9d3d
Opcode Fuzzy Hash: d79ecd9f33837d91143507a1ecf1fe6f4e7fae7c2088eb1490cf7acbe1448194
Instruction Fuzzy Hash: E611B731241A469FCB21DF28EA80946FBB5FF843147009B28D0498BA29D771FD9ECBD0

Function 072D3A98 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3e26beece1936a66bcb4936bfd64a19384acc59dc87029b3b3752adabd9720d5
Instruction ID: 18e2f09dd4105a204e2e89c623cfcd71261585b6670c57edf04db7dbbb65a6e5
Opcode Fuzzy Hash: 3e26beece1936a66bcb4936bfd64a19384acc59dc87029b3b3752adabd9720d5
Instruction Fuzzy Hash: B21191B1609783CFC3068F25D4904A1FFB6BE86210319879AC4594F306D671E999CBE1

Function 0738B750 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4cdf3d9b155965489b70bcf6f2ef06fd4764e977d36215d0ee7eae9fb9ed45ba
Instruction ID: 3f44d4627d8c69167898fa5d77f31b6c341ad1dddb38692048c2f1b9adc784fb
Opcode Fuzzy Hash: 4cdf3d9b155965489b70bcf6f2ef06fd4764e977d36215d0ee7eae9fb9ed45ba
Instruction Fuzzy Hash: D211E5F16003069BE764AB5DC448BEBBBF5AF88710F19402DE009A7780DB75A805CBD4

Function 0196B9C0 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 94f5118e1536c9fb3188f2c632ba75b61feae4161d5c52bd19c780c0127d1ed1
Instruction ID: c1556bd1c1cd7b8ad49439076d43edef0657079cb04d612e7814d5ba0d23fc96
Opcode Fuzzy Hash: 94f5118e1536c9fb3188f2c632ba75b61feae4161d5c52bd19c780c0127d1ed1
Instruction Fuzzy Hash: 1A0188367042059FD704CA6ED880A5ABBEEFFC5261755C126E509C7725EA74EC0187A0

Function 0191D60B Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112308989.000000000191D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0191D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_191d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48042a67946fd5b471a152cae87ddc5a96e5ad52caa5f07da488830fbc7c129d
Instruction ID: e1336421ee38125b4ed80a6fa344e6182fe692bec2672c6171c990897e45a0ab
Opcode Fuzzy Hash: 48042a67946fd5b471a152cae87ddc5a96e5ad52caa5f07da488830fbc7c129d
Instruction Fuzzy Hash: 3411BB75504284DFDB02CF58D5C8B15BFA1FB84314F24CAAAD84D4B25AC33AD44ACB62

Function 0738CDA0 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bfe8b75ffdd69083a95485323b704ebf1e8b8f8d80c6b57afe2300b0ffe52f96
Instruction ID: 05206ced229af54d36646b451153df41a026e42532abf2ad6f5a07bbb11309fb
Opcode Fuzzy Hash: bfe8b75ffdd69083a95485323b704ebf1e8b8f8d80c6b57afe2300b0ffe52f96
Instruction Fuzzy Hash: 7F117CB4B102089FDB18EF69C554AADBBF6AF8D210F10406AE405E73A0CB75AD01CFA1

Function 072D2D98 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93a8fd6d4eb10ce21a9f41108e4a45a9d9fa9bb24f4bd88e709baf4d7e6c6225
Instruction ID: dbca0aa14100c1322f111e3f47f7d255671ebe33c144455100325113158e4bd3
Opcode Fuzzy Hash: 93a8fd6d4eb10ce21a9f41108e4a45a9d9fa9bb24f4bd88e709baf4d7e6c6225
Instruction Fuzzy Hash: FDF0C8B73142159F9B14C69DE850D6BB7DAEFD82B0315802BF908C7344DB36EC018764

Function 0738C900 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80175d8b6719b67d2a4b9ce6aa63b2a5e16b8e9c6220a5c91382d8e5f873b989
Instruction ID: 2e9a06492e21e92879388ebdc6588b58b30875b00d405e6090ecf3a97366fedc
Opcode Fuzzy Hash: 80175d8b6719b67d2a4b9ce6aa63b2a5e16b8e9c6220a5c91382d8e5f873b989
Instruction Fuzzy Hash: 0C01DE74A09208EFC754EFB8D95195EBFBAEF45300B6041EDD4098BB92DE31AE04C780

Function 0196B9D0 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 237e2a30c01a4c466b66fd5db08a7cd53696ff9f381dd74c2cf1b90f2accaa2e
Instruction ID: 9cde0a52c009f237a9b64775a03fda8ee7abce837ec97f856f3997ef4e668c5c
Opcode Fuzzy Hash: 237e2a30c01a4c466b66fd5db08a7cd53696ff9f381dd74c2cf1b90f2accaa2e
Instruction Fuzzy Hash: DE0186357002059F9744DE6ED884D6ABBEEFFC9261715C126E909C7325EB70DC01C7A0

Function 072D3AA8 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01f21c1f8d59e7349922658370418860e740c2d141b15b2ba19cac1a2c66b0ff
Instruction ID: 1df5421a94c5c9003acc72c1343b3b24c551556f5954f8bbd47393881297c82a
Opcode Fuzzy Hash: 01f21c1f8d59e7349922658370418860e740c2d141b15b2ba19cac1a2c66b0ff
Instruction Fuzzy Hash: DF11A1B1205793CBC306CF29D090462FFA6BFC62103098B99C4594B306C770E889CFE0

Function 072DA1A4 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 287cf1c51a9d813d7ca731154bdc0ec1c0b2697c166997432960952a6c05c810
Instruction ID: 63be4522163645faaba41ed9388c204c921b331839ec34b0a6cc97ec48674130
Opcode Fuzzy Hash: 287cf1c51a9d813d7ca731154bdc0ec1c0b2697c166997432960952a6c05c810
Instruction Fuzzy Hash: 120105B162010EAFCF158E95D889AAE7B76BB94241F108011EA0296254D771CDA1EBE0

Function 0738C990 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46da0867c1a6adb700a47bdba569ef0fc8a114d572fb019eaa0e5edc163eb0b4
Instruction ID: 6d77a68594a77f8da70eeaafc1e6323b735de69642ed0fb8cc7e739d2bfd63b7
Opcode Fuzzy Hash: 46da0867c1a6adb700a47bdba569ef0fc8a114d572fb019eaa0e5edc163eb0b4
Instruction Fuzzy Hash: FFF0F0363592804FE7029A28D814CA63FB59F8A22474A40E7F518CF3B3CA69CC02C7A1

Function 019697F1 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d57e0a83d54d4c6ec7274415c2328daa7f36d5f67a466bcb81327445388ab16
Instruction ID: 33c4120f54a24fb86ce5ab2f4a99435d26d3b689fe69722e52d8b0d4806cb1ab
Opcode Fuzzy Hash: 4d57e0a83d54d4c6ec7274415c2328daa7f36d5f67a466bcb81327445388ab16
Instruction Fuzzy Hash: A0115E35A00218DFDB04CBA9C988ADDBBF9AF4D314F0880A9E405BB361C734AC40CB61

Function 072D6324 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1dca74d78e2fd915ca5877621838fe2f769e8719e29efc4e85aa87a3982f44c8
Instruction ID: d1ece1fb20dcb17b9c43f7f5ac9db469b763723c1640c3fbc451b38eed877374
Opcode Fuzzy Hash: 1dca74d78e2fd915ca5877621838fe2f769e8719e29efc4e85aa87a3982f44c8
Instruction Fuzzy Hash: 2CF04C727093415FC7561B3DD86446DBFFBEFCA45032A046AE005C7352CD625C028371

Function 06C81048 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: db33fb09ee8611f3764872ca4b79480965f8f602f82661b09d95a8d4bdceb5c9
Instruction ID: 223a66ba45b5741ac6e1ed72773c188c22a37279448c5a5766271e404ebbee7a
Opcode Fuzzy Hash: db33fb09ee8611f3764872ca4b79480965f8f602f82661b09d95a8d4bdceb5c9
Instruction Fuzzy Hash: 5B0186207095919FC255AB3D482486E2AE7AFCA60035941ADE4069B7D1DE189D02C7E6

Function 0190DC11 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112275430.000000000190D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0190D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_190d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 83beb5ebae39cd72cc64a361448ae608c21f380c14501efc89501d0a87136eb5
Instruction ID: 0ba3ca9968a65c409c67344aeaff438ea22526b43c453a4bff17cdf853e03d76
Opcode Fuzzy Hash: 83beb5ebae39cd72cc64a361448ae608c21f380c14501efc89501d0a87136eb5
Instruction Fuzzy Hash: A101F7718083549EE7124A99C984B67BFDCEF40721F08C429ED0D4A2D6C2B89880C6B1

Function 072D4020 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c58346f2c3dc0d147700f79f85d8b0568bae1157959179032860b2ea7ace7e1
Instruction ID: b6df9d3734d92295615d4e046e5920c72e1670aed9e2a55a18326f04a5aa0179
Opcode Fuzzy Hash: 2c58346f2c3dc0d147700f79f85d8b0568bae1157959179032860b2ea7ace7e1
Instruction Fuzzy Hash: 7CF090727182264F57289A6EBC8492FBBEAEBC4566724023BE909C3320DF71DC0187D1

Function 01969800 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e2815dcfc19cb92bb5a3df9c64a530efc2a6228e376851e2a0f963a478441d20
Instruction ID: daf9be56f355ebb6f314bc0ad4a484e0bcc7a9cd772056fbfbb4a4230db7b62e
Opcode Fuzzy Hash: e2815dcfc19cb92bb5a3df9c64a530efc2a6228e376851e2a0f963a478441d20
Instruction Fuzzy Hash: 0B012D35A04118CFDB14CB99C944ADDBBF9AF4C314F1980A9E505BB361CB75AD40CBB1

Function 072D2CD0 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eea7276a5c876ccb80c5cc7fe95161db471ce8aa42571f8981d1c3b70b155fdd
Instruction ID: a4e0ff549e9ee1c6d8f282e3bdd337c69c069a05d4b5fb0e399401429621222d
Opcode Fuzzy Hash: eea7276a5c876ccb80c5cc7fe95161db471ce8aa42571f8981d1c3b70b155fdd
Instruction Fuzzy Hash: 34F02B72330212DFC714ABB8A41866D77D7FFC92213208475EA09C7314EE70DC000780

Function 0738E738 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1cf703a5c0b1b25561e5795fd2fe2513ceb3b0b6996e4e133b1ceba26d2e8a56
Instruction ID: 7bf1d3c1d9047c1b147838c203442e4a19a2978fc182db630398240ed70f2c85
Opcode Fuzzy Hash: 1cf703a5c0b1b25561e5795fd2fe2513ceb3b0b6996e4e133b1ceba26d2e8a56
Instruction Fuzzy Hash: 11F0F0717406125FE617A33DA0086AEBBD7FBC5621B04402AF42D8B780CFB9AD0683D5

Function 072D3A30 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 24e55eab4483c5942c81e902885ba5c21d92461975c0943a15364d4d1942bcfe
Instruction ID: 5186b35f385cafa3c35caeb6c66c3c2d91e74f01abf3ab10db5db2a52ba0d147
Opcode Fuzzy Hash: 24e55eab4483c5942c81e902885ba5c21d92461975c0943a15364d4d1942bcfe
Instruction Fuzzy Hash: 50F0F6B13116415FC212E725F80586EBFAAEBC1320700452AE44A87B42CE70AE4A8BE2

Function 0738CE60 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68e29c218da4ce624e12a4c399360423f6d81577044f38c73bcc8fc0a062067a
Instruction ID: 9466f4070ebfde3756063290beca9d1233aa8322f06ec18e375c186af5de4f2d
Opcode Fuzzy Hash: 68e29c218da4ce624e12a4c399360423f6d81577044f38c73bcc8fc0a062067a
Instruction Fuzzy Hash: 71F0BD763505109F83589F29D988C5ABBEAFB8D62135180AAE50ACB761CA31EC158BA4

Function 072D2A59 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a4e7a742e4a5a96b97007fc375863f3bb4ed621904cf8af36612b44d14e1454
Instruction ID: 3b3a1d44a9e5c5a6290029d106e56d10c693e58ef0bf3596adb982134db788c0
Opcode Fuzzy Hash: 5a4e7a742e4a5a96b97007fc375863f3bb4ed621904cf8af36612b44d14e1454
Instruction Fuzzy Hash: 6EF0E2717587465F83298AAE585496BBBE9FFCA170304857BE409DB31AEE21EC008790

Function 01968F58 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 608ad1d386289a692c30c91164fbb84f9076beb64b453042020536af43d08674
Instruction ID: 63f5cddc85b3d7f3d276e62579f42b06b074e93348bce01ab1f6c3b1407adb14
Opcode Fuzzy Hash: 608ad1d386289a692c30c91164fbb84f9076beb64b453042020536af43d08674
Instruction Fuzzy Hash: 34F06975300600CFC7199B28E549A693FAAEF88712B150169F80697362CF34AD02CB94

Function 072D4880 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b1adb076d8bdafe4db9ce5b8c7dca8b34fd76ea37559f6fececf175705c9ae1b
Instruction ID: 24ab07b242ac0baaf5a127d06b8d7e1017312f40c2e15699a23ffb98ec5e37fc
Opcode Fuzzy Hash: b1adb076d8bdafe4db9ce5b8c7dca8b34fd76ea37559f6fececf175705c9ae1b
Instruction Fuzzy Hash: 4AF02271A112158FC749DF29D8806AA7BA1EF443A4F2081B9D008CF362DA72CC8ACBC0

Function 01968791 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed5a6312a9d3b840d8985cd215c9d0added20e4b081d738dccdd4c4fefd2663a
Instruction ID: a14f5e2761129897f5ea059844b24b65af463d36a32349b962faae2b6c0bfff5
Opcode Fuzzy Hash: ed5a6312a9d3b840d8985cd215c9d0added20e4b081d738dccdd4c4fefd2663a
Instruction Fuzzy Hash: F2F0E2353003011FC620D76ED9C1F5AB7DDDBC92107548438E10EDB314DA21E80687A4

Function 0196BB30 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 449a5b219906f0a429a1a8746402203faed30d86a97c712e47df336049cfec21
Instruction ID: 119fa07a24dbdf0f943c23976ed66dee3e6313c2b01e7da38f0fd95ccb00881a
Opcode Fuzzy Hash: 449a5b219906f0a429a1a8746402203faed30d86a97c712e47df336049cfec21
Instruction Fuzzy Hash: 58F082367006259BD7245ABD988092BFBEEEBC8261B104139E50AC7354EF71DC4283E5

Function 0190DC10 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112275430.000000000190D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0190D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_190d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c785226631e39d9912465e10090f564d2ba908b2f30eca366586544488c53cbb
Instruction ID: 9e6753db4e7cc34fc5f35120376a42ea19889ac0fde65fc3e5646d1c1a81b3f4
Opcode Fuzzy Hash: c785226631e39d9912465e10090f564d2ba908b2f30eca366586544488c53cbb
Instruction Fuzzy Hash: A9F0C272404354AEE7118A5AC8C4B62FFECEF50735F18C45AED4C4F292C2B99840CAB1

Function 01967F18 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 433ab6612cdaf958de5d194cee0997c611b24b619bbdfe74cfadb9d9234cf358
Instruction ID: 6a788e08ac592e5288cd7251837a733991e3654e4671cd2816c783b929df5436
Opcode Fuzzy Hash: 433ab6612cdaf958de5d194cee0997c611b24b619bbdfe74cfadb9d9234cf358
Instruction Fuzzy Hash: 58016971A003189FCB40EF68D8059DEBFF4FB88711F00412AE849E7300DB70AA058B98

Function 0738CEB7 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cd975d3f90ccd4a13a565633ef33e226e0b0290a2276983db17dbef9e1e5aa22
Instruction ID: 4c01615f4e78a4624a9d084f9ce940058a1027093525320bed5a8f3e6ee8bde2
Opcode Fuzzy Hash: cd975d3f90ccd4a13a565633ef33e226e0b0290a2276983db17dbef9e1e5aa22
Instruction Fuzzy Hash: 8FF082767052509FC7559B29E850C9ABBEADF8A62131540EBE885DB732CA30EC0187B1

Function 0738D3A8 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a1718e2cfdb89e0716e49f1c46e02a65b30e13ee572b71b5d7e7e3f9ba9c25f
Instruction ID: 659a5d2b6c7766a3ee1f51fa30e1b20b10658052acfd855af366797156af1645
Opcode Fuzzy Hash: 4a1718e2cfdb89e0716e49f1c46e02a65b30e13ee572b71b5d7e7e3f9ba9c25f
Instruction Fuzzy Hash: B6F097F07243409BEF84AA28DC055E1BB20F709360B0080EAD409CF286D672E893CF90

Function 06C82808 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a5b88837660e14a4ad38731abe8952032cc8c36924855ca5b092d07de9a54be
Instruction ID: 2c0ba17d313501fa39cf3f54ead132c9d1768cfc6031aa0c43340b8707dfe150
Opcode Fuzzy Hash: 5a5b88837660e14a4ad38731abe8952032cc8c36924855ca5b092d07de9a54be
Instruction Fuzzy Hash: 54F0F4722045189BD655A79DB00CAAEB79DD758326F04912BE60987240CB389DD2CBE6

Function 06C80F5F Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 63f0a9dfeee4c2c247dbd5df4445b7de5d968d4667c0fde709e7c95855043dc5
Instruction ID: 60e39e4dfa1e33ba8e11973c9ef93257abb096b3cd9f8741d3df56d3726e1d16
Opcode Fuzzy Hash: 63f0a9dfeee4c2c247dbd5df4445b7de5d968d4667c0fde709e7c95855043dc5
Instruction Fuzzy Hash: FCF05E393006414FC360CF2DD844D82BBE6AFC921071541A8F45AC7731DB71DC45CB10

Function 0738CEC8 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 64df3ed307fef14a5694fc49b2031b9233bab85e2026b26808bd609aa189c82d
Instruction ID: 642490b1613257ba5ee7e4051397046958d9b71eae4da8f687c08b32e2a12ead
Opcode Fuzzy Hash: 64df3ed307fef14a5694fc49b2031b9233bab85e2026b26808bd609aa189c82d
Instruction Fuzzy Hash: FAF08C763105108FC748EB2EE444C5AB7EAEFD972231540BAF609CB731CA31EC018B60

Function 072D3FB0 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a6f589a435c7745481ac193c93eac97ed50cc586c8cde7bd986f8ab815c01e9d
Instruction ID: 8837db0de02369100768d1962f34e41dfd22a39a796dd311831a5c89f2df40ba
Opcode Fuzzy Hash: a6f589a435c7745481ac193c93eac97ed50cc586c8cde7bd986f8ab815c01e9d
Instruction Fuzzy Hash: 47F0E5F276D385CFDF163670A4280963BF5DB86150B1104BAD484CA242EE27DC0A8353

Function 072DDFCA Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d453574dbdc1e04faf0bdbcd362e0296305fdaa258ab5d72b8aea0e429bf99f6
Instruction ID: b58d48b4f5ca7d19883bdc3f5c58c5dcd62a54b0e0ed3264894cf2a53c26de3f
Opcode Fuzzy Hash: d453574dbdc1e04faf0bdbcd362e0296305fdaa258ab5d72b8aea0e429bf99f6
Instruction Fuzzy Hash: 0F01E870D00209DFCB54DFA4D8449AEBBB1FF49310F10C96ED569A7240D736AA01CF90

Function 0738BC20 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: be232aa55b1a4f2788eb66a8b62e2267b24cbb9ded31f7f2aa158f1db42b950f
Instruction ID: 1a70e0edb2ab704c180a2683910a9f84475dc143da887fb449e7a017c4ee559e
Opcode Fuzzy Hash: be232aa55b1a4f2788eb66a8b62e2267b24cbb9ded31f7f2aa158f1db42b950f
Instruction Fuzzy Hash: 80E06DB33001545B5618AA4EA8C4CAABBADEBD92323504037F24DC7221CA219D4587A0

Function 073842B8 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5862ed3dfb4b703087042fa558cb744f4e43dca3d0c4f8b50a0b3649cc99f021
Instruction ID: 6159dbf485931899f8b089d28bcd8547da8488929e35790c446502e6aed33d62
Opcode Fuzzy Hash: 5862ed3dfb4b703087042fa558cb744f4e43dca3d0c4f8b50a0b3649cc99f021
Instruction Fuzzy Hash: 70F027353003148FD354A749E444AA677E9EBC9732F14806AD90D83B51CBB1EC42C740

Function 0738C9C0 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1abdf08ab30216f72b90ddde6332cf2d23da8caf019ad138aa5320dd696f46f1
Instruction ID: 9ad2358811e69837676ebf12c4f2b00dee165dbfb8a849de254513d7b8b43409
Opcode Fuzzy Hash: 1abdf08ab30216f72b90ddde6332cf2d23da8caf019ad138aa5320dd696f46f1
Instruction Fuzzy Hash: 12F06D363511108FE7049A6EE848D697BE9EFC876574540B6FA0DCB331DA76DC0287A0

Function 072DDFD0 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2fe4b8b8c2492827d89788b2c2cd3dce08c929ef10871aaa49740e7316f0aa85
Instruction ID: 0bc513a2df4fa0197231eebbccbb28421e9926beb27a760a0885347af228c4bb
Opcode Fuzzy Hash: 2fe4b8b8c2492827d89788b2c2cd3dce08c929ef10871aaa49740e7316f0aa85
Instruction Fuzzy Hash: 4001E470D00209DFCB54DFA4D8409AABBB5FB48310F10C92DD569A7240D776AA01CF90

Function 072DA698 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85cf84d3c4db942feabf55c8cfcfdaaeaae6f21f4768641bb945ccfb6d7160f5
Instruction ID: 893f8eb6de3665fe07f40cebda4fd5091cda94610518426f8ef1c58ddf21704f
Opcode Fuzzy Hash: 85cf84d3c4db942feabf55c8cfcfdaaeaae6f21f4768641bb945ccfb6d7160f5
Instruction Fuzzy Hash: 66F0A06171D3904FC706577898249293FB99F82151B1A44DBE14ACB3A3E9158C0583D2

Function 072D49D8 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 673e669acccc51aab2e520bd9bc3d8dd58876ba7b2306e7b61d22bf7f4b753f6
Instruction ID: 6af0606d2feed8828630277cdc0e113ed90550c5957da9f8cbcd68d26a3dd798
Opcode Fuzzy Hash: 673e669acccc51aab2e520bd9bc3d8dd58876ba7b2306e7b61d22bf7f4b753f6
Instruction Fuzzy Hash: 55F0A071715288EFCB02EBB8E9112EDBBB5DBC6110B1041BBC808D3641DA311E05C7A2

Function 06C82258 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 513af68293e7bad75d12b858b036450b9c636cecfcc5d886fb8c63321db6036d
Instruction ID: e68dc36b24189f9373767eaeb79442a7900116111b3e9cff01043e5c84855609
Opcode Fuzzy Hash: 513af68293e7bad75d12b858b036450b9c636cecfcc5d886fb8c63321db6036d
Instruction Fuzzy Hash: ABF017B4E00209EFCB50DFA9C44959EBBF5FF48304B1089AAD819E7301E7399A52CF90

Function 07384318 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39cc7de67dca52a3dcd59cfb02a082c1d99551f5b2ee3700200a99fb32d27126
Instruction ID: 7fdbe1e7b8900fe008b3171060acc5ab2d3a18f7de70d3ea5de3ef88b47e54f6
Opcode Fuzzy Hash: 39cc7de67dca52a3dcd59cfb02a082c1d99551f5b2ee3700200a99fb32d27126
Instruction Fuzzy Hash: 69F0A7711006246FD324561ADC80D77FBEEFBC4311F548529F68A42A40CA76A851C7A0

Function 0738B92F Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fdc6e82539a7a3c07024d1b89c12da30a295c3bf8cdbb24bb05b6732fece59c6
Instruction ID: bf997df74da6940da0e4be0b51bd2d9b9ebfb12728f2fd7dde83f092e0626d7f
Opcode Fuzzy Hash: fdc6e82539a7a3c07024d1b89c12da30a295c3bf8cdbb24bb05b6732fece59c6
Instruction Fuzzy Hash: D6E0D8B67002046BE714327EAC5559B7BCFDBC45A0B14853BD20EC7754CD659C0642E3

Function 0196D4F5 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d54251c0274cdc808746351dd33ea60246cdaa3b48ca2fa3910469151bd8c41c
Instruction ID: 9f82940d9fcb312d9e4949b4d2d2661a9e897d665fabadc8c85796f103e4e8a2
Opcode Fuzzy Hash: d54251c0274cdc808746351dd33ea60246cdaa3b48ca2fa3910469151bd8c41c
Instruction Fuzzy Hash: F701E434A15259ABDF10CB94D885EEDBBB6BF88304F144006E851B66A4CB74A940DB60

Function 01967EB8 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac37673fa22e82ef671187e1bded74b847c7306aeaee31011345f15792dfde4d
Instruction ID: 433378f39f886b7b950a57a89da95755443ee4322ea1a2a3ce517720cf73a211
Opcode Fuzzy Hash: ac37673fa22e82ef671187e1bded74b847c7306aeaee31011345f15792dfde4d
Instruction Fuzzy Hash: CDE055393142805FC311973AAC9599ABF6DEBCA310F40802AFD0CC3380CE619C0883A9

Function 072D28A0 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cf5b13abef488c725287fa84535bac23dd2629369de125ae76738ee8d8917fbb
Instruction ID: 281e6f1f29ef4dfde28f200eda8a9cc32ae4415d525b4c3f7fd72ea12f9516de
Opcode Fuzzy Hash: cf5b13abef488c725287fa84535bac23dd2629369de125ae76738ee8d8917fbb
Instruction Fuzzy Hash: 7AE01237B0421AAB4714DAAAE44089EB7EEEAC8165714807AE11CD3201EA31D8068751

Function 06C82999 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ff4657cafbfc84f3b33b298b812f614ee3c6f11a28ffc34a1043cb6f646f9bf
Instruction ID: b20c2272d773a19530ad291aea1a3497685ac7750788f0e40ffbdd6545ced091
Opcode Fuzzy Hash: 4ff4657cafbfc84f3b33b298b812f614ee3c6f11a28ffc34a1043cb6f646f9bf
Instruction Fuzzy Hash: 4EE02B237002511FD32611797406BFF3F9F87C1234F19047BD9088BB82D8995C8593E1

Function 01961EAD Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e7583992615116dfd900bdee8c0a420033be385718aaef43e8d905465f67a171
Instruction ID: 5125f5852df7ceeb03773e5a41e72d8b6b6681b637077fdfcc43ed0b6ba88a5b
Opcode Fuzzy Hash: e7583992615116dfd900bdee8c0a420033be385718aaef43e8d905465f67a171
Instruction Fuzzy Hash: 83F0A735A08385DFD70387A4D4153ED7FB69F86210F1100B6C145AB2D2CB390959C773

Function 01969891 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79bc923e074eec2fa5ce24c95c4c539c9428ba6eec8af2fe0a55c782044b5f23
Instruction ID: 1139f21e19bdd5db9269ed9200e843bf203b8a6ad1f8cd5e5b582b35cee3686d
Opcode Fuzzy Hash: 79bc923e074eec2fa5ce24c95c4c539c9428ba6eec8af2fe0a55c782044b5f23
Instruction Fuzzy Hash: 87F0A0353003408BCB165B39A8555AE7F6EEFC9266B18447EE94AD3302CE709C02CB98

Function 06C82268 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b432f4a31103ecf69676941965851a3cbe50c6de5e7193a93b78a148b50b8082
Instruction ID: c43fde8ba2ef30fbe6f57c9a5ba92a8657c13d13535c6b065269f4e562a09d8b
Opcode Fuzzy Hash: b432f4a31103ecf69676941965851a3cbe50c6de5e7193a93b78a148b50b8082
Instruction Fuzzy Hash: 13F0D474E00209DFCB40EFA8D4495AEBBF5FF48310B1485AAD819D7301E7399A12CF90

Function 019634B4 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ebe0b3d50c53c8cb7ea3b77e4d349a4a7d1bea5a8035c1ce68ce59f596e2de9
Instruction ID: eff2ffc2c3d9a849e33f462304ac4c5cb9d3f6855e5875e98713de76828c531e
Opcode Fuzzy Hash: 7ebe0b3d50c53c8cb7ea3b77e4d349a4a7d1bea5a8035c1ce68ce59f596e2de9
Instruction Fuzzy Hash: 5CE06877D082408FD3124B6CA8950F4FF3CFEA22913814187E58CCB021E6158A0AC330

Function 01961ECD Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 04f90e1c166bbcd9644f129098f4b3c98413d75717a6a08d1e7c06b2ae53bfc0
Instruction ID: ff131edcc6befc6d42e5e55a27636923c3a862840eb47c8c48089058f4f68437
Opcode Fuzzy Hash: 04f90e1c166bbcd9644f129098f4b3c98413d75717a6a08d1e7c06b2ae53bfc0
Instruction Fuzzy Hash: FDE02B53A0D3C28FD713836494653CC7F769FB3050B4911EBC089C72A7EA584619C723

Function 0738B940 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9e385c2854f598ead3c4a9d341d595193d8b95ecc59efa373b60f1bf2b646d32
Instruction ID: 1d655156c3b87f2b050c0955431450557cad6c83b3e1181c9bc0760d2000661c
Opcode Fuzzy Hash: 9e385c2854f598ead3c4a9d341d595193d8b95ecc59efa373b60f1bf2b646d32
Instruction Fuzzy Hash: A6E086763002146BA704326DAC5545FB6DFDBC95A0714853ED20EC7355CD755C0542D6

Function 0196A361 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4027c7b66c434b93bf4f997bf64bad593cd954abfce951d5068f0e493bbed559
Instruction ID: 247f2eb3e6162b148c082e5c2fd8a9086cc7e3b8441a9c43057dd9bde54455fb
Opcode Fuzzy Hash: 4027c7b66c434b93bf4f997bf64bad593cd954abfce951d5068f0e493bbed559
Instruction Fuzzy Hash: B7F09D38A401088FCB45CF99D9809CCB7F1FF88314B2181A5E505AB325D772AE45CFA0

Function 01967EC8 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 23694f758ab9358e021c1cbd51d12aabd5a01ed7c425e94be32369e91180844a
Instruction ID: faa1e3ed1703dfbf5091dfbbcb19bf307381ae5bbf68d1ba6f95a36ea11ca386
Opcode Fuzzy Hash: 23694f758ab9358e021c1cbd51d12aabd5a01ed7c425e94be32369e91180844a
Instruction Fuzzy Hash: F0E0D8353102445FD301666AA84481ABE6DF7C9710B408039FD0DC3340CE715C0443A4

Function 01961F1A Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61a7820b8471cfa6e87a6141a098fcfe314646f02bc58d30350621fc99040a65
Instruction ID: 70197705fd53a571439375536807d752ebb571585320d44fc3094e7847ebb340
Opcode Fuzzy Hash: 61a7820b8471cfa6e87a6141a098fcfe314646f02bc58d30350621fc99040a65
Instruction Fuzzy Hash: 65F0E530B04309DFDB419B68C8183DD77B6EFC8314F510078D105AB281CF7589A587A3

Function 072D3F8F Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eb30aabb9d640cba4641ad1864bf710b4670fc6f1c4ce8ec10ccceb6a23bc1ba
Instruction ID: 7ae6c7fe6599a41bafab2b90ac272cf7a81ff05c534900775d47633db252c848
Opcode Fuzzy Hash: eb30aabb9d640cba4641ad1864bf710b4670fc6f1c4ce8ec10ccceb6a23bc1ba
Instruction Fuzzy Hash: 44E086B1718345CFCF096B75B5151EA37BA9B8571031441A5E409CF243DE3ADC09D762

Function 072D8ED0 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bf9e1533a635433d0503592cf9603d7b9dc02ba449d759c0e47a2c789ae4a855
Instruction ID: 2f43245c3b093ebedcd6704314f23d09f2609c2db63765b034e881af70f125e6
Opcode Fuzzy Hash: bf9e1533a635433d0503592cf9603d7b9dc02ba449d759c0e47a2c789ae4a855
Instruction Fuzzy Hash: C4E08C313202254BD718DF6AE844B56B3DAAFC8A15F0580BAF10ACB660DA61DC0047C0

Function 072D2D41 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 178d1e3bf4c8e8ce40e70b0b96c8bdbdb96ff2b63c79b607045597f04ba05f7c
Instruction ID: cad7f183884e92561ba399cc741407e1f5f65c8680dff09a38abb66628dba4a8
Opcode Fuzzy Hash: 178d1e3bf4c8e8ce40e70b0b96c8bdbdb96ff2b63c79b607045597f04ba05f7c
Instruction Fuzzy Hash: 8AE0D87259874BDEE7158634E5106A037F8EB05214F082192C14987061DB3A5C45C2D1

Function 072D4938 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d14bb977e069adad96646cabb0839dcd58d2cdf92377e47074c05d398bc8ec3
Instruction ID: fcd00213b09cece2781c09837b4672308416358621cc3728df87415bac6d621c
Opcode Fuzzy Hash: 4d14bb977e069adad96646cabb0839dcd58d2cdf92377e47074c05d398bc8ec3
Instruction Fuzzy Hash: 8AE08CAA3592A42BD21122F92C208AB7FAFCEC682070900A7E515CB702CCA44D0653E2

Function 072D8ECA Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 235e193fe55d150647a1c74a9eb354a3c51b95dc57c4e9a65298f7e285f50141
Instruction ID: 404a0e5b7fa48af63515dc75ed9658a89506e2f16c2c0f43e8a9dedae82940e4
Opcode Fuzzy Hash: 235e193fe55d150647a1c74a9eb354a3c51b95dc57c4e9a65298f7e285f50141
Instruction Fuzzy Hash: 80E08C71B506119FD718DE6AD844A52B3DAAFC8A04B068079E107CB260EA62DC0147C0

Function 072D497A Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1f4b64f6661ff1ef2e645ed60b71821d14f3b0c5fb6bc3a588c52cd0dad9745
Instruction ID: 412cac70843163e86d69789421f08220f34e6c4dd6914c514a80d2df370b0b4f
Opcode Fuzzy Hash: e1f4b64f6661ff1ef2e645ed60b71821d14f3b0c5fb6bc3a588c52cd0dad9745
Instruction Fuzzy Hash: D1E092B1905248EFCB01CB74E8140DCBFB4EB46200B0044AAD808D7752D9312F048B52

Function 072D4010 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0085377aac459e317028ab2665ab4c047c8b0f34803172f7ce6d4f738fcb5645
Instruction ID: ea44dc8e0fa483eb87abb95c334d8dd3827e54a3dbb5f346c62be54f9d22af76
Opcode Fuzzy Hash: 0085377aac459e317028ab2665ab4c047c8b0f34803172f7ce6d4f738fcb5645
Instruction Fuzzy Hash: 2AE0C2F360D2804FE7054A2CEC858D07B68EA1113271101BBE004CF622D623AC4187B2

Function 073854C8 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ee8870cbc1c249753add071ecbf2449db57dfa2147c5b4ced7490c6fb7ab679
Instruction ID: cfed7f7ac60d11cce8c7b0ddd351aca3d954fe27b58ef4556b34eb22b069744b
Opcode Fuzzy Hash: 5ee8870cbc1c249753add071ecbf2449db57dfa2147c5b4ced7490c6fb7ab679
Instruction Fuzzy Hash: FBD05E22310020270204659E785582EA7DEFACD5613544139E20DD3340CC115C0203A6

Function 01961EBD Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ac7e10c17c4de8bbe3451cd72520c5c680fd115e932e20ba2acc01a152d0912
Instruction ID: 3962dd2cc17a0a1063f6de3d19f68ff083c115007a4ac6757ff8b98b45bbc874
Opcode Fuzzy Hash: 9ac7e10c17c4de8bbe3451cd72520c5c680fd115e932e20ba2acc01a152d0912
Instruction Fuzzy Hash: 62E09A60A0D3859FE7038BB8C82429C7FBA9FC6214F1604E7C149DB1A2CB750A5883B3

Function 07385076 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 299a018b9144680732e83991fdd04c61a57a31c9adc5c7931384ce15e4186b7c
Instruction ID: a28777e93799e1d4135f21903e453f3fb51916667645a4ac6612213055112d5a
Opcode Fuzzy Hash: 299a018b9144680732e83991fdd04c61a57a31c9adc5c7931384ce15e4186b7c
Instruction Fuzzy Hash: F8D01732B001246B9B18DAB9AC008BFA39EDBC8610701853AB509C7100E9799C1282A0

Function 0738B8E0 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21633b4219932b421be590d21e8ff9bfee380384247187f8661f1677ab060743
Instruction ID: b7073d33c5788ed6e79aa330a35269b97450d2b78b5c57560643b92c6f705554
Opcode Fuzzy Hash: 21633b4219932b421be590d21e8ff9bfee380384247187f8661f1677ab060743
Instruction Fuzzy Hash: A2E0C2712003168BD725A62AE40486AF7B9FEC1365750843EE11AC7714DA71F8468780

Function 06C824C0 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d46937a09a2dcfb2737a755b97b8770a8ff6eef57bccef717d1375ae7fb4272a
Instruction ID: 5696ddd3d36d0027c308793a1bd975d826a37c1591b896ecae1b94b70cd29fe7
Opcode Fuzzy Hash: d46937a09a2dcfb2737a755b97b8770a8ff6eef57bccef717d1375ae7fb4272a
Instruction Fuzzy Hash: 8BE08C3620A344DFE3069BACE945C967FECFB0E70030500AAF585C3312C67AA800CBA5

Function 06C80F30 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e131c7f2b4381026a9926c9f33be5011a8940dcd8a35b912649ebfa8c446403
Instruction ID: 9e7d222b009d7c801fc16e20e2cc72e4749b585ee6acac446380430febcdd945
Opcode Fuzzy Hash: 5e131c7f2b4381026a9926c9f33be5011a8940dcd8a35b912649ebfa8c446403
Instruction Fuzzy Hash: 72E0B672200214AFC745DE4DC840E86BFEDEF49260B108459F548CB662D772D8118B90

Function 06C82870 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bea7fca05f1a6793d6627d8d132f7b4b43f9ac6f3b7177ecacc61f2dead4c8db
Instruction ID: a96a2d499a3860faefa0d5eb44edd5789530d69d7f174387d5160588029b5e22
Opcode Fuzzy Hash: bea7fca05f1a6793d6627d8d132f7b4b43f9ac6f3b7177ecacc61f2dead4c8db
Instruction Fuzzy Hash: A6E026705153404FE3029B38B9906ACBBA1D78A710F04D06AC48147356CA2C4D86CBD9

Function 06C82223 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d0c0d90e59395f1afbc231adb7ff18df6199a05cd01dd207fabc4701cdafbc50
Instruction ID: c4cd58f43c5086335390384676c034ae0e47776789f4a052567d9eef4640525f
Opcode Fuzzy Hash: d0c0d90e59395f1afbc231adb7ff18df6199a05cd01dd207fabc4701cdafbc50
Instruction Fuzzy Hash: 74D02B602153605FD602636454201D93BD99B465507004096D149C7282D9448D4443F2

Function 0196BB98 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10a2c14395c68339e92073f1a4038ad76054bc1883f6ea43be429dddaa223f71
Instruction ID: 529c480c7a50aa3071bec222e61c8e54be92a5b19e0a1f40c2e7bd1ec1dcc33a
Opcode Fuzzy Hash: 10a2c14395c68339e92073f1a4038ad76054bc1883f6ea43be429dddaa223f71
Instruction Fuzzy Hash: FAE09AB0D0420D9F8B94DFA9D5415BEBFF8AB48200F10816AE519E2240E7345651CFD5

Function 06C82020 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 634f8ec8b966edefbd700b47ebbd43f7007512d2e6b88b07c8c015a51b785676
Instruction ID: 21260a9ef91a55db7640d34c02534ff801a5a3d6113450b0d5b9d80505f552c9
Opcode Fuzzy Hash: 634f8ec8b966edefbd700b47ebbd43f7007512d2e6b88b07c8c015a51b785676
Instruction Fuzzy Hash: E8D05E35209280AFC301CB65D8C0DA27FF8EF1B60431941C6F4048B222D725ED21CB61

Function 0738CD60 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c68d37ddf0487013616e5407a2710cc5e1314e84efae1ae014a4f9750c2beaeb
Instruction ID: 8c9b439af12d1463b066ba7097cd88672518849bdc872b2f5de245d76cedd19e
Opcode Fuzzy Hash: c68d37ddf0487013616e5407a2710cc5e1314e84efae1ae014a4f9750c2beaeb
Instruction Fuzzy Hash: F2D05B769091605FD74626247C115D73B6B9F99110B054483B905D3185CAA44D4593F7

Function 01963460 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a3f52e8f76e44c1286dfd6ba7ead32cd7a5c5dec0cd13298d679c4e382337797
Instruction ID: 8f2b901f870d5d2a9fd005dc252f5de33bcbd00c89f37e946174f0a7eec29572
Opcode Fuzzy Hash: a3f52e8f76e44c1286dfd6ba7ead32cd7a5c5dec0cd13298d679c4e382337797
Instruction Fuzzy Hash: 9EE0BF36D10508CFCB04DFA8E4848DCF774FF89325B004156E51977224EB306999CF50

Function 072D2CC1 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e5ea5e8dadf7fd8d7c081fa8c0ea8b8f67d66df3a2afcb3a97702e445b3dd3d
Instruction ID: fd856edf4d88d24263854b77e2dbeeee9e9947aae8411fd3fad5f7e3a8f7e53e
Opcode Fuzzy Hash: 4e5ea5e8dadf7fd8d7c081fa8c0ea8b8f67d66df3a2afcb3a97702e445b3dd3d
Instruction Fuzzy Hash: 62D022B6A083926F8B1226B658240833FEAFF8301834604F7D800C7202E893DC044392

Function 01967E71 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0288885db5ca4e897f5c340f5cf74e22b4a55c3cbdadaa964ac3357dcf5ee4e9
Instruction ID: 62c7fdf8b2896cc1c107dd253985ac68ed7a9a8fb8fdd32aac86633cd477d56f
Opcode Fuzzy Hash: 0288885db5ca4e897f5c340f5cf74e22b4a55c3cbdadaa964ac3357dcf5ee4e9
Instruction Fuzzy Hash: BCE09A206082C48BEB22CF24C912616BFB9FB96301F14449DD88587282CA389C84CF95

Function 072D8628 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6c2da26b223fed270eb79ad9476db213554ec09e9d33c0880ed16766d9215e9
Instruction ID: 3e8427f444ae7bac38562bb94735a81e3bbb6287472c9d586ec1cc041575e657
Opcode Fuzzy Hash: c6c2da26b223fed270eb79ad9476db213554ec09e9d33c0880ed16766d9215e9
Instruction Fuzzy Hash: 36D05BB21442465DD721D778FC48B84FB45FB81234F108777F4494846583796DD98356

Function 06C824D0 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc1eceba4447cbf55c0fca036965d91cfa22c5c79226e8b28236035e79d3fa19
Instruction ID: d2423074ae6cf4c20fdd399a0b34d3c30fcfdfe47ed6da25d0adf991ebdc70da
Opcode Fuzzy Hash: dc1eceba4447cbf55c0fca036965d91cfa22c5c79226e8b28236035e79d3fa19
Instruction Fuzzy Hash: 4FD092366022189BD709ABADF54AC56BBACEB4D751701406AFA09C7701CB7AEC418BA0

Function 0738C8F2 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d6a79fb69ad8183e2e1e5adf697e11cd6386422ffce04910274ca726d18579d
Instruction ID: 4302d39085fc448db517288c89e831d0d3f0e2e964f2ae9c7197a4c13da1a890
Opcode Fuzzy Hash: 8d6a79fb69ad8183e2e1e5adf697e11cd6386422ffce04910274ca726d18579d
Instruction Fuzzy Hash: 55D0A7B1B486045FC768CE45C404A157798EF0A601B4241EDF40FDF731D922EC40C7D4

Function 072D2288 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef366b16f72c0ba9c56e4b7eb8b5b55177ef21789bf86f7b692eeeca81791200
Instruction ID: 9715bf105e1dd3a326139e3ead96d87a11a89b0101914a8feb09e2c68fb5635b
Opcode Fuzzy Hash: ef366b16f72c0ba9c56e4b7eb8b5b55177ef21789bf86f7b692eeeca81791200
Instruction Fuzzy Hash: 20D0A7310187CA9FC30357B4A849166BF75AF47220B4041A3D5088B597DB2C7CB5D7D2

Function 072D4988 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b0718ecccd7383e41e79c47d81873b94840ba7051d86b8d9a3dbf5f4492245a9
Instruction ID: 0870ebada23923e4f2cd8de2bf22952580066e7daee20dc8678872c2b72f9b9d
Opcode Fuzzy Hash: b0718ecccd7383e41e79c47d81873b94840ba7051d86b8d9a3dbf5f4492245a9
Instruction Fuzzy Hash: 33D017B0A1120CEFCB40DFA8E90155DB7B9EB85200B5089B9D908D3350EA726F049B80

Function 072DF769 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68c900466826176d3d54cd9eb36a994a51eb68899671ca75ae85d3b9b5785351
Instruction ID: 3b3c5eac126731daf69d2aaf49ab095c5ba92bd9fb8d70237353018438b92547
Opcode Fuzzy Hash: 68c900466826176d3d54cd9eb36a994a51eb68899671ca75ae85d3b9b5785351
Instruction Fuzzy Hash: CCD0A5F4015441ABD3144714D9047A13FECDF4D505F1400F4F54547933C115DC16C755

Function 072D3FC0 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c8414dbc245b0c7741d8f9a33a4f3a917cfca74cf338658e068c220556d29017
Instruction ID: 9b4b221505f3c4ea4494cda7e3b114be791697c6c9edbee5496079015db213ba
Opcode Fuzzy Hash: c8414dbc245b0c7741d8f9a33a4f3a917cfca74cf338658e068c220556d29017
Instruction Fuzzy Hash: D0D01271718309CBCB0866B5B40853A33EDD7847147500478A50DC2240EE3ADC01C552

Function 06C82230 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c3720f237aeb7c8ecc6d1c4164ccda28e370a1b4bbf8e519627258bd21fd9d9
Instruction ID: 4fb2aa3038611018884391c9cbf931f8b45c3996926c0f9a0ca9f82a373a2638
Opcode Fuzzy Hash: 3c3720f237aeb7c8ecc6d1c4164ccda28e370a1b4bbf8e519627258bd21fd9d9
Instruction Fuzzy Hash: 73C080613111245FD50533A874101DD35CDD7C9571B400055D50DD7780ED855D8403E6

Function 06C80F40 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f1c3c6f3e65a7aa89e028821f37458a22875d24a41b23d1ce394abc0c963c753
Instruction ID: f1a8f9c4d2bcfdfc561cff15ce83f1e9e20c66dfc182e0e3eee015f094571bae
Opcode Fuzzy Hash: f1c3c6f3e65a7aa89e028821f37458a22875d24a41b23d1ce394abc0c963c753
Instruction Fuzzy Hash: 2BD0C936210118AF8B44DE89D840C95BBA9FF4D6607158096FA188B332C672EC11DB90

Function 0738B910 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 60ce5da144582d8b948e93e3f0aa9de0cbdbfb59f57ce3e9998a6eedffcb2562
Instruction ID: aaf4696dab34dd01befd79a74f3e8330f3b63e65167107e70ebbe3baf922f64d
Opcode Fuzzy Hash: 60ce5da144582d8b948e93e3f0aa9de0cbdbfb59f57ce3e9998a6eedffcb2562
Instruction Fuzzy Hash: 6FD0C9B21483849FC3428778E544D517FF8AF57614B0640D6E1848BA73C726F824C7A2

Function 01961F55 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c36a96ee773a6b1e195c8ce990f1ce7cf4be49eff73cdc7d5a065123a04a2eef
Instruction ID: a3b1bb9c7a3551166c8050ae2e91d1475921bc6866c744435379de21a4bec3cf
Opcode Fuzzy Hash: c36a96ee773a6b1e195c8ce990f1ce7cf4be49eff73cdc7d5a065123a04a2eef
Instruction Fuzzy Hash: EFD0A734A00209DADB80DBD4D5027DC77B2FBC4200F501166C10763040CF7016A4C673

Function 01961F68 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8032304bb0efd1bbc68f2b3c6fdf64a4438147420cb5e04a7c5d4a523faf1cda
Instruction ID: 410b6134c4e253f21c25ea700f4783d1ae699efd6af8eeca6ab4225dc7d4ef4f
Opcode Fuzzy Hash: 8032304bb0efd1bbc68f2b3c6fdf64a4438147420cb5e04a7c5d4a523faf1cda
Instruction Fuzzy Hash: 69D0A920B00209DADB80ABE8A9013DC7BA2EBD4200F50127AC10A960458FB042E48AB3

Function 072DF740 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 31e647813b67f9445eed515b48f4adba2f95cd43704cdb0c3caa1873a800ce75
Instruction ID: 7a94367ea7366910c5206081a5cf24fef91f1f070b945f2a9fe7c73d57a9dc8b
Opcode Fuzzy Hash: 31e647813b67f9445eed515b48f4adba2f95cd43704cdb0c3caa1873a800ce75
Instruction Fuzzy Hash: 74D0123055838C8FD341DE68D505E013B78AF05B04B4600E5E1058F773C65AEE009745

Function 072D2261 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 818780d5ad74ad17ad105419c7e613297ac096d7eee713168ab6d6c7feb6675b
Instruction ID: f2994e489693ca7629e45ee95410637ab0fbe201a7c77ab8678b9e786c72bb07
Opcode Fuzzy Hash: 818780d5ad74ad17ad105419c7e613297ac096d7eee713168ab6d6c7feb6675b
Instruction Fuzzy Hash: 9DD0C9111183C65FCB13537898682A17FA1EF8B318F2944CBC5858B1D6D614A9568793

Function 01961F78 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f14461801a1addfaad4da0259ec15ba7230831a257f12722505b81119cfa3bd
Instruction ID: c60adf0cfd28c157ec0cba10f22903857adc1c0fb9a6054ce1b005b720c07da5
Opcode Fuzzy Hash: 3f14461801a1addfaad4da0259ec15ba7230831a257f12722505b81119cfa3bd
Instruction Fuzzy Hash: 18C01225740619DADBC0BBFCA90438C7A52DFD5700F500179D1058A15A8EE486F48AB3

Function 06C81980 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f178261765852958633da5ce87329de08d5f0cf36d4df092e8a1029c65df36e3
Instruction ID: 112e6d4b81ffadc62fa6ff23783404600a58c9b1671d0f83c6a01253ab34d54a
Opcode Fuzzy Hash: f178261765852958633da5ce87329de08d5f0cf36d4df092e8a1029c65df36e3
Instruction Fuzzy Hash: CDC012B104620A8ECA002F04E10A784BBB8EB10702F400C2CE1A81B606EB7828828B9A

Function 072DF778 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 492cccb23d7a460b0c5b9cab68c2f02c7e5df2d21aaa4f3bb9b299a9f92f7fa2
Instruction ID: d082ca00ab09ef719767d8de860ad224abbc72f688ed175926a2b3915d562842
Opcode Fuzzy Hash: 492cccb23d7a460b0c5b9cab68c2f02c7e5df2d21aaa4f3bb9b299a9f92f7fa2
Instruction Fuzzy Hash: 02C012B0061906AFD2189A08E608A7137A8AF0860AB6400F4E9094BA32C261E8228A95

Function 0738D3DA Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: deddadfb891e16c148c116e22762497a3d150b0014eab2b35463f24356eca8c0
Instruction ID: 1bf7554dc5cc8076ece7d59fe2ce153902c3dc49cab159eaa6e7f44694c30bda
Opcode Fuzzy Hash: deddadfb891e16c148c116e22762497a3d150b0014eab2b35463f24356eca8c0
Instruction Fuzzy Hash: 30C012309883828BEB048A00EC697A53B20EB04710F1400EE90018F2EAD2A9ACC2CB80

Function 01968DF8 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5292fa0bd7f155cb4ef050e41425b0ac8e7c7dad346ec20e2b5e697ef91fe7e3
Instruction ID: 7f4bf58fd5c25fbe3002bd4cbde65b4de75576e1356328625654f7a00c401f28
Opcode Fuzzy Hash: 5292fa0bd7f155cb4ef050e41425b0ac8e7c7dad346ec20e2b5e697ef91fe7e3
Instruction Fuzzy Hash: C5C08C4020D0D40FC61233384D2678A191C4BD2145FDA88905E8C8B2C2D8248808032E

Function 072D8601 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3fa65ede17825c8689929bad6c0e9bfdf35cf874a0d4732e9f40d89f91e64b55
Instruction ID: 01f23dc4d1ece841ae695ef8041ef682b6f604f927881d7febe26311b306bc87
Opcode Fuzzy Hash: 3fa65ede17825c8689929bad6c0e9bfdf35cf874a0d4732e9f40d89f91e64b55
Instruction Fuzzy Hash: 49C02B21D162002FEF1292349D0066B765283E5340F2150F1980407794D13CFE0687D5

Function 06C81958 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d0160008f998ed2a2ac09ff54410f95c532e3617da65d6c1f833e914f0e9adfa
Instruction ID: 8dae270670ad3875731055f17b8fe44690c0964b8fefc17792d73788cba7acdf
Opcode Fuzzy Hash: d0160008f998ed2a2ac09ff54410f95c532e3617da65d6c1f833e914f0e9adfa
Instruction Fuzzy Hash: F6C04CF0605102CBEF115F04E25136AB7E5FB99701F100C1C84A91B685E73888428751

Function 01967220 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4112462397.0000000001960000.00000040.00000800.00020000.00000000.sdmp, Offset: 01960000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1960000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c46cd07b932dc5f1899e7fa20e88ecd0b9be70854b8fb85a322f5a560fa08f3f
Instruction ID: eb4ef8439891d9a2b0272aad59cf5c650f1eaa6176623779dca1fe598df8bfd0
Opcode Fuzzy Hash: c46cd07b932dc5f1899e7fa20e88ecd0b9be70854b8fb85a322f5a560fa08f3f
Instruction Fuzzy Hash: 3BB092255462404FCF050229C9562653F3697AA2127D946A69842CAB82D9299C068724

Function 072D17BF Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 757585a77d3cda817cc636f9412ff02c62df061f77f722a0c93666c9310e2ea4
Instruction ID: 63a5323e4145b8b28a3571238d196388c9cc7597f16109651778b67f3c48e699
Opcode Fuzzy Hash: 757585a77d3cda817cc636f9412ff02c62df061f77f722a0c93666c9310e2ea4
Instruction Fuzzy Hash: AFC08C76D48200AECB020FB08C087043A71EBB0382F058062A245C9096C27A0804CBA1

Function 072D16E1 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56795de8a8b5f1d9b0d2d0bb2d405098a610e49e4de04480fa091cd338c8f340
Instruction ID: e9e225666f1d3dc48e486b3edaf7d51810ac5c58cb152c079cab081bb5b6df87
Opcode Fuzzy Hash: 56795de8a8b5f1d9b0d2d0bb2d405098a610e49e4de04480fa091cd338c8f340
Instruction Fuzzy Hash: 8BB0922AEA83406BEB4A8F31AE4A7252D12A7E1282F0884B6A202DA192CC6A44159905

Function 06C82030 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea37b6cea62d40df410734184e5c43626299f01a35dbb0a8c3f936d9d13bb41f
Instruction ID: 4f1a3ac6db0f59e3f0d4f9a92a27a48c10cc8b74c58d88c87f1da974c996a5cc
Opcode Fuzzy Hash: ea37b6cea62d40df410734184e5c43626299f01a35dbb0a8c3f936d9d13bb41f
Instruction Fuzzy Hash: B0C09238260208CFC300DB59D588C10BBECFF49A0835580D8E50D8B732CB22FC01CA80

Function 0738BB40 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 462f806103f530d795e63e7cd30240698a3559f3884ee21002b46cc62c982ebf
Instruction ID: 3f3f6b70fef2fcc47317978cf43c30b4abadf582dab527562e8c2e9aecf6eae8
Opcode Fuzzy Hash: 462f806103f530d795e63e7cd30240698a3559f3884ee21002b46cc62c982ebf
Instruction Fuzzy Hash: 40B092B7A1810989EB50AA84B4813EDFB64F795225F104027C21562500C272016887A1

Function 072DF750 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 94a9bb855b66031527ad60d43b9bbe596700b8874c009695b8fe6633e9f835db
Instruction ID: 74d73ab9e6f381ab5f9d9b95b6852324e2f71f11f687843942c945560dc2aa6d
Opcode Fuzzy Hash: 94a9bb855b66031527ad60d43b9bbe596700b8874c009695b8fe6633e9f835db
Instruction Fuzzy Hash: 85B092302602088FC300DA59D444E4173ACFF48B08F5100E0E5088BB32C662FC008A40

Function 072DF5DB Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4086cd954b9ff844bfaad4ddb477594b32fb9656b704b0eed76d32f825edd5d8
Instruction ID: b38a6cd622092046af17e91ff0b15fc65c6c0f1c4ab2c1fe782dd5a3b13bca97
Opcode Fuzzy Hash: 4086cd954b9ff844bfaad4ddb477594b32fb9656b704b0eed76d32f825edd5d8
Instruction Fuzzy Hash: 1AA0113BE80008AC0AA0A8C8B8000CCF320E2A02B2B008233C220CA0000223023AA2A0

Function 06C81990 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4116612090.0000000006C80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06C80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6c80000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc264061b605d9bf2d32fd1ab6910fd967dce3e7a85e8d66829facf65e147bfc
Instruction ID: c5464200834034bc31eb566988edf39f8c5a0d7ffd3b879d57e5e81c716a1ab6
Opcode Fuzzy Hash: dc264061b605d9bf2d32fd1ab6910fd967dce3e7a85e8d66829facf65e147bfc
Instruction Fuzzy Hash: EAB0123104020E4FC9017B54F549559B77CE944304F801538A10C0751A5E696CC546D9

Function 0738B920 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 99c5e80e5d161c6cd17717d7e90366d7df6c86bdedef1d8d57fbaaa881c347e6
Instruction ID: 1485e72821faeb6dd9078d765896f2924cff3babc4a0a417e0ffd36dedc08b16
Opcode Fuzzy Hash: 99c5e80e5d161c6cd17717d7e90366d7df6c86bdedef1d8d57fbaaa881c347e6
Instruction Fuzzy Hash: 69B092721502088F8300DB68E548C0277A8AB18A1031140A1E2048B232C621F8108A65

Function 072D8638 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3919b3f7872b8221f83b975487198fe6b65b50337bcbb872f61bd38bb0c5ff54
Instruction ID: 0476f4d4b421a15781bac897cccc7624a15a76b9dc1df91fd40ee4f8d18a1f30
Opcode Fuzzy Hash: 3919b3f7872b8221f83b975487198fe6b65b50337bcbb872f61bd38bb0c5ff54
Instruction Fuzzy Hash: 50B0123004030D4FC6006764FC09D14F71DE740314F505130A40C05239EBAC7C8887D8

Function 072D2298 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f1ea73254ac5fe34bffdc6f1d4dff09dd7c0fa940141da3ba243a3a0dc2651df
Instruction ID: 96276389f5524c578126e5406e48dced6686fbea5856a59c662edc32dd6434c2
Opcode Fuzzy Hash: f1ea73254ac5fe34bffdc6f1d4dff09dd7c0fa940141da3ba243a3a0dc2651df
Instruction Fuzzy Hash: 7DB0123104070D8FC9006774FE49529B76EEA84324F406131A10C451169B6C7C9A4688

Non-executed Functions

Function 073854F9 Relevance: 6.6, Strings: 5, Instructions: 387COMMON

Download Yara Rule

Strings

Pl^q, xrefs: 0738555D
Pl^q, xrefs: 0738584E
Pl^q, xrefs: 07385701
Pl^q, xrefs: 073857BA
Pl^q, xrefs: 073858C5

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: Pl^q$Pl^q$Pl^q$Pl^q$Pl^q
API String ID: 0-2405877317
Opcode ID: 3095020700a1fa9eac07b8a61b4d021217348e82235402f87d5247f6c0654130
Instruction ID: 8cc6c862541c49e268babcb8602351e90055f8d177aa639d3f834d7f7bbaa7cb
Opcode Fuzzy Hash: 3095020700a1fa9eac07b8a61b4d021217348e82235402f87d5247f6c0654130
Instruction Fuzzy Hash: F3E198747407058FDB15EF39C588A6ABBE2BF88300F148969D546CB3B5DB34EC468B91

Function 072D3220 Relevance: 6.6, Strings: 5, Instructions: 321COMMON

Download Yara Rule

Strings

(bq, xrefs: 072D35A2
\;^q, xrefs: 072D331E
\;^q, xrefs: 072D334C
(bq, xrefs: 072D3501
\;^q, xrefs: 072D3358

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$(bq$\;^q$\;^q$\;^q
API String ID: 0-308958514
Opcode ID: f8b57d51d4691c8e3842b8212616f65c588459393c08ce635509ff45c6fe302a
Instruction ID: 555602febf02ce28e43446c7c738b94de2e320d79fabe1f83df2c6225a50c587
Opcode Fuzzy Hash: f8b57d51d4691c8e3842b8212616f65c588459393c08ce635509ff45c6fe302a
Instruction Fuzzy Hash: 5DB114B0B242068FCB14CBBCC55866EFBE6BF89750B14842AD806DB3A5DF75DC418792

Function 0738C200 Relevance: 6.5, Strings: 5, Instructions: 211COMMON

Download Yara Rule

Strings

4c^q, xrefs: 0738C34D
c^q, xrefs: 0738C331
Hbq, xrefs: 0738C401
$^q, xrefs: 0738C229
(_^q, xrefs: 0738C3E2

Memory Dump Source

Source File: 00000001.00000002.4117251723.0000000007380000.00000040.00000800.00020000.00000000.sdmp, Offset: 07380000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7380000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (_^q$4c^q$Hbq$$^q$c^q
API String ID: 0-2580002112
Opcode ID: 282a79ea1c7d2d1b6e6e0244b773cf4cdba884a946d830c72fb7feacf24f1945
Instruction ID: c62b09eb777509079b34dcb162cea71d5a7e53d5319ac948232e4d1546106af0
Opcode Fuzzy Hash: 282a79ea1c7d2d1b6e6e0244b773cf4cdba884a946d830c72fb7feacf24f1945
Instruction Fuzzy Hash: C37194B071431ACBFFA06A69D44076576A4EF85B40F502CBEDC89EB280D679CC85CBB5

Function 072D35E0 Relevance: 5.2, Strings: 4, Instructions: 204COMMON

Download Yara Rule

Strings

$^q, xrefs: 072D37BD
(bq, xrefs: 072D36D7
(bq, xrefs: 072D3703
(bq, xrefs: 072D372F

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$(bq$(bq$$^q
API String ID: 0-2201410301
Opcode ID: cbe31ba29015198558a0cd1a4cf68ef0ffb539c461215a75a19caceb0aa107ef
Instruction ID: bbcc5b2a0af268896103b34c7875aa95b03ddbe2b8dd0b863e1860f560e2ac8e
Opcode Fuzzy Hash: cbe31ba29015198558a0cd1a4cf68ef0ffb539c461215a75a19caceb0aa107ef
Instruction Fuzzy Hash: 4B51CBB67200168FDB14EF7ED85496E7BE6EFC5350B2540AAE506CB362DE31DC018B92

Function 072D3B28 Relevance: 5.2, Strings: 4, Instructions: 156COMMON

Download Yara Rule

Strings

(bq, xrefs: 072D3C81
$^q, xrefs: 072D3C32
c^q, xrefs: 072D3C1B
4c^q, xrefs: 072D3C49

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$4c^q$$^q$c^q
API String ID: 0-3082160503
Opcode ID: 510e974bbae2e5e2873ceba3d54fdb2d7258a178c289a400a9bf69b77c5a275e
Instruction ID: adcc5e1cbb4813f29fc5831e8599990793ddde9e8e39e0bcbb3dc7351b3bd0e4
Opcode Fuzzy Hash: 510e974bbae2e5e2873ceba3d54fdb2d7258a178c289a400a9bf69b77c5a275e
Instruction Fuzzy Hash: CF51F6B1364742CFC726DB39C49466A7BE2FFC5250B18489EC4828B762DB64EC468752

Function 072D6B50 Relevance: 5.1, Strings: 4, Instructions: 64COMMON

Download Yara Rule

Strings

Hbq, xrefs: 072D6BF1
,bq, xrefs: 072D6B7F
,bq, xrefs: 072D6B8B
(bq, xrefs: 072D6C30

Memory Dump Source

Source File: 00000001.00000002.4117040632.00000000072D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 072D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_72d0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$,bq$,bq$Hbq
API String ID: 0-441485220
Opcode ID: ead06df1692b616bd1d013e1543cffd230f9c70eea8b8cbf67e539022bb8ec65
Instruction ID: 86ed0f2bd72a46b83519898ea62c615fe0e397b960310e180678f954488f1ff3
Opcode Fuzzy Hash: ead06df1692b616bd1d013e1543cffd230f9c70eea8b8cbf67e539022bb8ec65
Instruction Fuzzy Hash: 5011CE70B2416A8FC748AF7CC81456E3BEAFF867A172045AAD006EB790CE309D018799

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Setup.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Unpacked PEs

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\ICSharpCode.SharpZipLib.dll

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\Newtonsoft.Json.dll

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\WebCompanion-Installer.exe.config

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\de-DE\WebCompanion-Installer.resources.dll

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\en-US\WebCompanion-Installer.resources.dll

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\es-ES\WebCompanion-Installer.resources.dll

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\fr-CA\WebCompanion-Installer.resources.dll

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\it-IT\WebCompanion-Installer.resources.dll

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\ja-JP\WebCompanion-Installer.resources.dll

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\pt-BR\WebCompanion-Installer.resources.dll

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\ru-RU\WebCompanion-Installer.resources.dll

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\tr-TR\WebCompanion-Installer.resources.dll

C:\Users\user\AppData\Local\Temp\7zSC1BEDA4D\zh-CHS\WebCompanion-Installer.resources.dll

C:\Users\user\AppData\Local\Temp\WcInstaller.log

C:\Users\user\AppData\Local\Temp\WebCompanion.zip

C:\Users\user\AppData\Roaming\Lavasoft\Web Companion\Options\Statistics.txt

Static File Info

General

File Icon

Windows Analysis Report
Setup.exe

Function 004148D4 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 81
COMMON

Function 00405434 Relevance: 3.0, APIs: 2, Instructions: 44
fileCOMMON

Function 00401014 Relevance: 48.0, APIs: 8, Strings: 19, Instructions: 715
windowsynchronizationCOMMON

Function 0040AB05 Relevance: 14.2, APIs: 9, Instructions: 682
COMMON

Function 004051B7 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 102
threadCOMMON

Function 00404908 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 36
filetimeCOMMON

Function 004083AB Relevance: 5.6, APIs: 1, Strings: 2, Instructions: 328
COMMON

Function 00405620 Relevance: 4.6, APIs: 3, Instructions: 130
COMMON

Function 0040280E Relevance: 3.9, APIs: 1, Strings: 1, Instructions: 384
COMMON

Function 004030FC Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 134
COMMON

Function 00404A3E Relevance: 3.2, APIs: 2, Instructions: 166
COMMON

Function 00408755 Relevance: 3.1, APIs: 2, Instructions: 85
COMMON

Function 0041468E Relevance: 3.0, APIs: 2, Instructions: 45
threadCOMMON

Function 00405892 Relevance: 3.0, APIs: 2, Instructions: 45
fileCOMMON

Function 00404965 Relevance: 3.0, APIs: 2, Instructions: 31
COMMON